Page 1 P-870H/HW Series VDSL2 4 port gateway/802.11bg Wireless VDSL2 4 port gateway Default Login Details IP Address http://192.168.1.1 User Name admin Password 1234 Firmware Version 1.0 www.zyxel.com Edition 1, 9/2010 www.zyxel.com Copyright © 2010 ZyXEL Communications Corporation...
Page 3: About This User's Guide
Refer to the included CD for support documents. Documentation Feedback Send your comments, questions or suggestions to: techwriters@zyxel.com.tw Thank you! The Technical Writing Team, ZyXEL Communications Corp., 6 Innovation Road II, Science-Based Industrial Park, Hsinchu, 30099, Taiwan. Need More Help? More help is available at www.zyxel.com.
Page 4 • Product model and serial number. • Warranty Information. • Date that you received your device. • Brief description of the problem and the steps you took to solve it. P-870H/HW Series User’s Guide...
Page 5: Document Conventions
Syntax Conventions • The P-870H/HW Series may be referred to as the “ZyXEL Device”, the “device”, the “system” or the “product” in this User’s Guide. • Product labels, screen names, field labels and field choices are all in bold font.
Page 6 Icons Used in Figures Figures in this User’s Guide may use the following generic icons. The ZyXEL Device icon is not an exact representation of your device. ZyXEL Device Computer Notebook computer Server DSLAM Firewall Telephone Switch Router P-870H/HW Series User’s Guide...
Page 7: Safety Warnings
Your product is marked with this symbol, which is known as the WEEE mark. WEEE stands for Waste Electronics and Electrical Equipment. It means that used electrical and electronic products should not be mixed with general waste. Used electrical and electronic equipment should be treated separately. P-870H/HW Series User’s Guide...
Page 8 Safety Warnings P-870H/HW Series User’s Guide...
Page 9: Table Of Contents
Parental Control ........................203 Interface Group ........................207 Maintenance, Troubleshooting and Specifications ............213 System Settings ........................215 Logs ............................219 Tools ............................223 Diagnostic ..........................231 Troubleshooting ........................235 Product Specifications ......................241 Appendices and Index ......................247 P-870H/HW Series User’s Guide...
Page 10 Contents Overview P-870H/HW Series User’s Guide...
Page 11: Table Of Contents
2.1.2 Configuring the AP ..................... 27 2.1.3 Configuring the Wireless Client .................. 30 Chapter 3 Introducing the Web Configurator ..................37 3.1 Web Configurator Overview ....................37 3.1.1 Accessing the Web Configurator ................37 3.2 Web Configurator Main Screen ................... 38 P-870H/HW Series User’s Guide...
Page 12 6.4 Technical Reference ......................81 Chapter 7 Wireless LAN........................... 85 7.1 Overview ..........................85 7.1.1 What You Can Do in this Chapter ................85 7.2 What You Need to Know ...................... 86 7.3 Before You Begin ......................... 88 P-870H/HW Series User’s Guide...
Page 13 8.8 Technical Reference ......................129 Part III: Security..................131 Chapter 9 MAC Filter ..........................133 9.1 Overview ..........................133 9.1.1 What You Can Do in this Chapter ................133 9.2 The MAC Filter Screen ...................... 133 P-870H/HW Series User’s Guide...
Page 14 Chapter 13 Policy Forwarding......................... 161 13.1 Overview ........................161 13.1.1 What You Can Do in this Chapter ................161 13.2 The Static Route Screen ....................161 13.2.1 Policy Forwarding Setup ..................162 Chapter 14 RIP ............................165 P-870H/HW Series User’s Guide...
Page 15 18.1.1 What You Can Do in this Chapter ................189 18.2 What You Need to Know ....................189 18.3 The UPnP Screen ......................190 18.4 Installing UPnP in Windows Example ................191 18.5 Using UPnP in Windows XP Example ................195 P-870H/HW Series User’s Guide...
Page 16 Chapter 23 Tools............................223 23.1 Overview .......................... 223 23.1.1 What You Can Do in this Chapter ................223 23.2 The Firmware Screen ...................... 224 23.3 The Configuration Screen ....................226 23.4 The Restart Screen ......................228 P-870H/HW Series User’s Guide...
Page 17 Appendix B Pop-up Windows, JavaScripts and Java Permissions ........279 Appendix C IP Addresses and Subnetting ................289 Appendix D Wireless LANs ....................301 Appendix E Common Services..................... 317 Appendix F Legal Information ....................321 Index............................325 P-870H/HW Series User’s Guide...
Page 18 Table of Contents P-870H/HW Series User’s Guide...
Page 19: Part I Introduction
Introduction Introducing the ZyXEL Device (21) Tutorials (27) Introducing the Web Configurator (37) Status Screens (43)
Page 21: Introducing The Zyxel Device
• Models ending in “1”, for example P-870HW-51a v2, denote a device that works over the analog telephone system, POTS (Plain Old Telephone Service). Models ending in “3”, for example P-870H-53a v2, denote a device that works over ISDN (Integrated Services Digital Network) or T-ISDN (UR-2).
Page 22: Good Habits For Managing The Zyxel Device
Your ZyXEL Device provides shared Internet access by connecting the DSL port to the DSL or MODEM jack on a splitter or your telephone jack. Computers can connect to the ZyXEL Device’s LAN ports (or wirelessly). Figure 1 ZyXEL Device’s Router Features Internet P-870H/HW Series User’s Guide...
Page 23 When the IP filter is on, all incoming traffic from the Internet to your network is blocked by default unless it is initiated from your network. This means that probes from the outside to your network are not allowed, but you can safely browse the Internet and download files. P-870H/HW Series User’s Guide...
Page 24: Leds (Lights)
The following graphic displays the labels of the LEDs. Not all LEDs are available on all models. Figure 2 LEDs on the Top of the Device: P-870HW Series Figure 3 LEDs on the Top of the Device: P-870H Series P-870H/HW Series User’s Guide...
Page 25: The Reset Button
RESET button at the back of the device to reload the factory-default configuration file. This means that you will lose all configurations that you had previously and the password will be reset to “1234”. P-870H/HW Series User’s Guide...
Page 26: Using The Reset Button
Device. The WLAN/WPS LED should flash while the ZyXEL Device sets up a WPS connection with the wireless device. Note: You must activate WPS in the ZyXEL Device and in another wireless device within two minutes of each other. See Section 7.10.4 on page 109 for more information. P-870H/HW Series User’s Guide...
Page 27: Tutorials
We use the ZyXEL Device web screens and M-302 utility screens as an example. The screens may vary slightly for different models. 2.1.2 Configuring the AP Follow the steps below to configure the wireless settings on your AP. P-870H/HW Series User’s Guide...
Page 28 Make sure the Active Wireless LAN check box is selected. Enter “SSID_Example3” as the SSID and select a channel which is not used by another AP. Set security mode to WPA-PSK and enter “ThisismyWPA-PSKpre-sharedkey” in the Pre-Shared Key field. Click Apply. P-870H/HW Series User’s Guide...
Page 29 Figure 5 AP: Wireless LAN > Advanced Setup Open the Status screen.Verify your wireless and wireless security settings under Device Information and check if the WLAN connection is up under Interface Status. Figure 6 AP: Status P-870H/HW Series User’s Guide...
Page 30: Configuring The Wireless Client
• Configure nothing and leave the wireless client to automatically scan for and connect to any available network that has no wireless security configured. • Manually connect to a network. • Configure a profile to have the wireless client automatically connect to a specific network or peer computer. P-870H/HW Series User’s Guide...
Page 31 Scan if you want to search again. If no entry displays in the Available Network List, that means there is no wireless network available within range. Make sure the AP or peer computer is turned on or move the wireless client closer to the AP or peer computer. P-870H/HW Series User’s Guide...
Page 32 Exit button to return to the Site Survey screen. Figure 9 ZyXEL Utility: Security Settings The Confirm Save window appears. Check your settings and click Save to continue. Figure 10 ZyXEL Utility: Confirm Save P-870H/HW Series User’s Guide...
Page 33 This example illustrates how to set up a profile and connect the wireless client to an access point configured for WPA-PSK security. In this example, the SSID is “SSID_Example3”, the profile name is “PN_Example3” and the pre-shared key is “ThisismyWPA-PSKpre-sharedkey”. You have chosen the profile name “PN_Example3”. P-870H/HW Series User’s Guide...
Page 34 Figure 13 ZyXEL Utility: Add New Profile Give the profile a descriptive name (of up to 32 printable ASCII characters). Select Infrastructure and either manually enter or select the AP's SSID in the Scan Info table and click Select. P-870H/HW Series User’s Guide...
Page 35 This screen varies depending on the encryption method you selected in the previous screen. Enter the pre-shared key and leave the encryption type at the default setting. Figure 15 ZyXEL Utility: Profile Encryption In the next screen, leave both boxes checked. Figure 16 Profile: Wireless Protocol Settings. P-870H/HW Series User’s Guide...
Page 36 11 If you cannot access the Internet go back to the Profile screen, select the profile you are using and click Edit. Check the details you entered previously. Also, refer to the Troubleshooting section of this User's Guide or contact your network administrator if necessary. P-870H/HW Series User’s Guide...
Page 37: Introducing The Web Configurator
Internet Explorer. 3.1.1 Accessing the Web Configurator Make sure your ZyXEL Device hardware is properly connected (refer to the Quick Start Guide). Launch your web browser. Type "192.168.1.1" as the URL. P-870H/HW Series User’s Guide...
Page 38: Web Configurator Main Screen
Figure 19 Password Screen 3.2 Web Configurator Main Screen This guide uses the P-870HW-51a v2 screenshots as an example. The screens may vary slightly for different ZyXEL Device models. Figure 20 Main Screen P-870H/HW Series User’s Guide...
Page 39: Navigation Panel
DMZ Host Use this screen to configure a default server which receives packets from ports that are not specified in the Port Forwarding screen. Use this screen to allow SIP sessions to pass through the ZyXEL Device. P-870H/HW Series User’s Guide...
Page 40: Security
Use this screen to change your ZyXEL Device’s time and date. Logs View Log Use this screen to view the logs for the level that you selected. Log Settings Use this screen to change your ZyXEL Device’s log settings. P-870H/HW Series User’s Guide...
Page 41: Main Window
Right after you log in, the Status screen is displayed. See Chapter 4 on page 43 for more information about the Status screen. 3.2.3 Status Bar Check the status bar when you click Apply or OK to verify that the configuration has been updated. P-870H/HW Series User’s Guide...
Page 42 Chapter 3 Introducing the Web Configurator P-870H/HW Series User’s Guide...
Page 43: Chapter 4 Status Screens
Use the Status screens to look at the current status of the device, system resources and interfaces (LAN and WAN). The Status screen also provides detailed information from DHCP and statistics from traffic. 4.1 Status Screen Click Status to open this screen. Figure 21 Status Screen P-870H/HW Series User’s Guide...
Page 44 None - The ZyXEL Device is not providing any DHCP services to the LAN. Click this to go to the screen where you can change it. WLAN Information Channel This is the channel number used by the ZyXEL Device now. P-870H/HW Series User’s Guide...
Page 45 See Section 23.4 on page 228, or turn off the device (unplug the power) for a few seconds. Interface Status Interface This column displays each interface the ZyXEL Device has. P-870H/HW Series User’s Guide...
Page 46 Click this link to view packet specific statistics on the LAN and WLAN Statistics interfaces. See Section 4.1.4 on page Client List Click this link to view current DHCP client information. See Section 4.1.5 on page P-870H/HW Series User’s Guide...
Page 47: Wan Service Statistics
Pkts This indicates the number of transmitted packets on this interface. Errs This indicates the number of frames with errors transmitted on this interface. Drops This indicates the number of outgoing packets dropped on this interface. P-870H/HW Series User’s Guide...
Page 48: Route Info
Host: The target of the route is a host. Reinstate: The route is reinstated for dynamic routing. Dynamic (redirect): The route is dynamically installed by a routing daemon or redirect Modified (redirect): The route is modified from a routing daemon or redirect. P-870H/HW Series User’s Guide...
Page 49: Wlan Station List
This field shows the SSID to which the wireless station is connected. Interface This field shows the wireless interface to which the wireless station is connected. Refresh Enter the time interval for refreshing statistics in this field. Interval P-870H/HW Series User’s Guide...
Page 50: Lan Statistics
Transmitted Bytes This indicates the number of bytes transmitted on this interface. Pkts This indicates the number of transmitted packets on this interface. Errs This indicates the number of frames with errors transmitted on this interface. P-870H/HW Series User’s Guide...
Page 51: Client List
The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters, for example, 00:A0:C5:00:00:02. This indicates the MAC address of the client computer. IP Address This indicates the IP address assigned to this client computer. P-870H/HW Series User’s Guide...
Page 52 Chapter 4 Status Screens P-870H/HW Series User’s Guide...
Page 53: Part Ii: Network
Network WAN Setup (55) LAN Setup (77) Wireless LAN (85) Network Address Translation (NAT) (117)
Page 55: Chapter 5 Wan Setup
• The Layer 2 Interface screen lets you view, remove or add a DSL PTM interface (Section 5.4 on page 56). • The Internet Connection screen lets you view and configure the WAN settings on the ZyXEL Device for Internet access (Section 5.5 on page 59). P-870H/HW Series User’s Guide...
Page 56: What You Need To Know
You need to know your Internet access settings such as encapsulation and WAN IP address. Get this information from your ISP. 5.4 The Layer 2 Interface Screen The ZyXEL Device must have a DSL PTM interface to allow users to use the DSL port to access the Internet. P-870H/HW Series User’s Guide...
Page 57 Device. A window displays asking you to confirm that you want to delete the interface. You cannot remove the DSL interface when a service is associated with Click this button to create a new DSL interface. P-870H/HW Series User’s Guide...
Page 58: Layer 2 Interface Configuration
The QoS setting applies to all WAN connections over the same PVC. Back Click this button to return to the previous screen without saving any changes. Apply/Save Click this button to save your changes and go back to the previous screen. P-870H/HW Series User’s Guide...
Page 59: The Internet Connection Screen
This shows the method of encapsulation used by this connection. Rate This shows the maximum data rate (in Kbps) allowed for traffic sent through this connection. This displays N/A when there is no limit on transmission rate. P-870H/HW Series User’s Guide...
Page 60: Wan Interface
5.5.1 WAN Connection Configuration Click the Edit or Add button in the WAN Service screen to configure a WAN connection. 5.5.1.1 WAN Interface This screen displays when you add a new WAN connection. Figure 31 WAN Configuration: WAN Interface P-870H/HW Series User’s Guide...
Page 61: Service Type
Tag VLAN ID Select this option to add the VLAN tag (specified below) to the outgoing for egress traffic through this connection. packets This field is available when the PTM interface is in VLANMUX mode. P-870H/HW Series User’s Guide...
Page 62 Click this button to return to the previous screen. Next Click this button to continue. 5.5.1.3 WAN IP Address and DNS Server The screen differs by the encapsulation you selected in the previous screen. See Section 5.6 on page 71 for more information. P-870H/HW Series User’s Guide...
Page 63 PPP Password Enter the password associated with the user name above. PPPoE Service Type the name of your PPPoE service here. Name P-870H/HW Series User’s Guide...
Page 64 This allows the ZyXEL Device to get subscribing information and maintain a joined member list for each multicast group. It can reduce multicast traffic significantly. Back Click this button to return to the previous screen. Next Click this button to continue. P-870H/HW Series User’s Guide...
Page 65: Configuration Screen
Select this to identify the ZyXEL Device in DHCP requests that the Option 61 ZyXEL Device sends to a DHCP server when getting a WAN IP address. IAID Enter the Identity Association Identifier (IAID) of the ZyXEL Device. For example, the WAN connection index number. P-870H/HW Series User’s Guide...
Page 66 Enter the subnet mask provided by your ISP. Mask WAN gateway Enter the gateway IP address provided by your ISP. IP Address Back Click this button to return to the previous screen. Next Click this button to continue. P-870H/HW Series User’s Guide...
Page 67 Select this check box to have the ZyXEL Device act as an IGMP proxy Multicast Proxy on this connection. This allows the ZyXEL Device to get subscribing information and maintain a joined member list for each multicast group. It can reduce multicast traffic significantly. P-870H/HW Series User’s Guide...
Page 68: Default Gateway
Table 17 WAN Configuration: Default Gateway: PPPoE or IPoE LABEL DESCRIPTION Selected WAN Select a WAN interface through which you want to forward the traffic. Interface Back Click this button to return to the previous screen. Next Click this button to continue. P-870H/HW Series User’s Guide...
Page 69: Dns Server
Enter the first DNS server address assigned by the ISP. server Secondary Enter the second DNS server address assigned by the ISP. DNS server Back Click this button to return to the previous screen. Next Click this button to continue. P-870H/HW Series User’s Guide...
Page 70: Configuration Summary
This shows whether IGMP multicasting is active or not for this connection. Quality Of This shows whether QoS is active or not for this connection. Service Back Click this button to return to the previous screen. Apply/Save Click this button to save your changes. P-870H/HW Series User’s Guide...
Page 71: Technical Reference
A static IP is a fixed IP that your ISP gives you. A dynamic IP is not fixed; the ISP assigns you a different one each time. The Single User Account feature can be enabled or disabled if you have either a dynamic or static IP. However the P-870H/HW Series User’s Guide...
Page 72 A host on the external network (IP address 3 and port C for example) can only send packets to the internal host via the external IP address and port that the NAT router used in sending a packet to the external host’s IP address and port. So in P-870H/HW Series User’s Guide...
Page 73 GVRP. The VLAN ID associates a frame with a specific VLAN and provides the information that switches need to process the frame across the network. A tagged frame is four bytes longer than an untagged frame and P-870H/HW Series User’s Guide...
Page 74 After that, the ZyXEL Device periodically updates this information. DNS Server Address Assignment Use Domain Name System (DNS) to map a domain name to its corresponding IP address and vice versa, for instance, the IP address of www.zyxel.com is P-870H/HW Series User’s Guide...
Page 75 DNS server fields. If your ISP dynamically assigns the DNS server IP addresses (along with the ZyXEL Device’s WAN IP address), set the DNS server fields to get the DNS server address from the ISP. P-870H/HW Series User’s Guide...
Page 76 Chapter 5 WAN Setup P-870H/HW Series User’s Guide...
Page 77: Chapter 6 Lan Setup
6.1.1 What You Can Do in this Chapter The LAN IP screen lets you set the LAN IP address and subnet mask of your ZyXEL device and configure other LAN TCP/IP settings (Section 6.3 on page 79). P-870H/HW Series User’s Guide...
Page 78: What You Need To Know
Multicast group - it is not used to carry user data. There are two versions 1 and 2. IGMP version 2 is an improvement over version 1 but IGMP version 1 is still in wide use. P-870H/HW Series User’s Guide...
Page 79: The Lan Ip Screen
Click Network > LAN to open the IP screen. See Section 6.4 on page 81 background information. Use this screen to set the Local Area Network IP address and subnet mask of your ZyXEL Device. Figure 41 LAN > IP P-870H/HW Series User’s Guide...
Page 80 Mode port that joins the multicast group and broadcast unknown multicast packets from the WAN to all LAN ports. Blocking Mode Select this to have the ZyXEL Device block all unknown multicast packets from the WAN. P-870H/HW Series User’s Guide...
Page 81: Technical Reference
ZyXEL Device as a DHCP server or disable it. When configured as a server, the ZyXEL Device provides the TCP/IP configuration for the clients. If you turn DHCP service off, you must have another DHCP server on your LAN, or else the computer must be manually configured. P-870H/HW Series User’s Guide...
Page 82 Every machine on the Internet must have a unique address. If your networks are isolated from the Internet, for example, only between your two branch offices, you can assign any IP addresses to the hosts without problems. However, the Internet P-870H/HW Series User’s Guide...
Page 83 After that, the ZyXEL Device periodically updates this information. IP multicasting can be enabled/disabled on the ZyXEL Device LAN and/or WAN interfaces in the Web Configurator (LAN; WAN). Select None to disable IP multicasting on these interfaces. P-870H/HW Series User’s Guide...
Page 84 Note: Make sure that the subnets of the logical networks do not overlap. The following figure shows a LAN divided into subnets A and B. Figure 43 Physical Network & Partitioned Logical Networks A: 192.168.1.1 - 192.168.1.24 Ethernet Interface B: 192.168.2.1 - 192.168.2.24 P-870H/HW Series User’s Guide...
Page 85: Chapter 7 Wireless Lan
PIN (Personal Identification Number) and see information about the ZyXEL Device’s WPS status. Use the WPS Station (see Section 7.7 on page 100) screen to set up WPS by pressing a button or using a PIN. P-870H/HW Series User’s Guide...
Page 86: What You Need To Know
Network Names Each network must have a name, referred to as the SSID - “Service Set IDentifier”. The “service set” is the network, so the “service set identifier” is the P-870H/HW Series User’s Guide...
Page 87 Because of the damage that can be done by a malicious attacker, it’s not just people who have sensitive information on their network who should use security. Everybody who uses any wireless network should ensure that effective security is in place. P-870H/HW Series User’s Guide...
Page 88: Before You Begin
• What advanced options do you want to configure, if any? If you want to configure advanced options, ensure that you know precisely what you want to do. If you do not want to configure advanced options, leave them alone. P-870H/HW Series User’s Guide...
Page 89: The General Screen
LAN and you change the ZyXEL Device’s SSID or WEP settings, you will lose your wireless connection when you press Apply to confirm. You must then change the wireless settings of your computer to match the ZyXEL Device’s new settings. P-870H/HW Series User’s Guide...
Page 90: No Security
Note: If you do not enable any wireless security on your ZyXEL Device, your network is accessible to any wireless networking device that is within range. Figure 45 Wireless LAN > General: No Security P-870H/HW Series User’s Guide...
Page 91: Wep Encryption
7.4.2 WEP Encryption In order to configure and enable WEP encryption; click Network > Wireless LAN to display the General screen. Select WEP from the Security Mode list. Figure 46 Wireless LAN > General: Static WEP Encryption P-870H/HW Series User’s Guide...
Page 92 (ASCII string) or 10 hexadecimal characters ("0-9", "A-F") preceded by 0x for each key. If you chose 128-bit WEP in the WEP Encryption field, then enter 13 characters (ASCII string) or 26 hexadecimal characters ("0-9", "A-F") preceded by 0x for each key. P-870H/HW Series User’s Guide...
Page 93: Wpa(2)-Psk
Choose WPA-PSK or WPA2-PSK from the drop-down list box. Active This field is only available for WPA2-PSK. Select this if you want the Compatible ZyXEL Device to support WPA-PSK and WPA2-PSK simultaneously. Encryption Select the encryption type (TKIP, AES or TKIP+AES) for data encryption. P-870H/HW Series User’s Guide...
Page 94: Wpa(2) Authentication
Use this screen to configure and enable WPA or WPA2 authentication; click the Wireless LAN link under Network to display the General screen. Select WPA or WPA2 from the Security Mode list. Figure 48 Wireless LAN > General: WPA(2) P-870H/HW Series User’s Guide...
Page 95: Mac Filter
ZyXEL Device. The key is not sent over the network. 7.4.5 MAC Filter This screen allows you to configure the ZyXEL Device to give exclusive access to specific devices (Allow) or exclude specific devices from accessing the ZyXEL P-870H/HW Series User’s Guide...
Page 96 Address access to the ZyXEL Device. Modify Click the Remove icon to delete the entry. Back Click this to return to the previous screen without saving changes. Click this to create a new MAC filtering rule. P-870H/HW Series User’s Guide...
Page 97: Adding A New Mac Filtering Rule
This screen allows you to enable and configure multiple wireless networks on the ZyXEL Device. Click Network > Wireless LAN > More AP. The following screen displays. Figure 51 Network > Wireless LAN > More AP P-870H/HW Series User’s Guide...
Page 98: More Ap Edit
Figure 52 Network > Wireless LAN > More AP: Edit Section 7.4 on page 89 for more details about the fields in this screen. 7.6 The WPS Screen Use this screen to configure WiFi Protected Setup (WPS) on your ZyXEL Device. P-870H/HW Series User’s Guide...
Page 99 This displays Unconfigured if WPS is disabled and there is no wireless or wireless security changes on the ZyXEL Device or you click Release_Configuration to remove the configured wireless and wireless security settings. P-870H/HW Series User’s Guide...
Page 100: The Wps Station Screen
Use this screen to set up a WPS wireless network using either Push Button Configuration (PBC) or PIN Configuration. Click Network > Wireless LAN > WPS Station. The following screen displays. Figure 54 Network > Wireless LAN > WPS Station P-870H/HW Series User’s Guide...
Page 101: The Wds Screen
The wireless security settings apply to both WDS links and the connections between the ZyXEL Device and any wireless clients. Note: At the time of writing, WDS is only compatible with other ZyXEL Devices of the same model. P-870H/HW Series User’s Guide...
Page 102 APs within range in the table below. Remote Bridges Enter the MAC address of the peer device that your ZyXEL Device wants MAC Address to make a bridge connection with. You can connect to up to 4 peer devices. P-870H/HW Series User’s Guide...
Page 103: The Advanced Setup Screen
Click Apply to save your changes to ZyXEL Device. 7.9 The Advanced Setup Screen To configure advanced wireless settings, click Network > Wireless LAN > Advanced Setup. The screen appears as shown. Figure 56 Wireless LAN > Advanced Setup P-870H/HW Series User’s Guide...
Page 104 This field is not configurable and the ZyXEL Device uses Short when you set 802.11 Mode to 802.11g Only. Apply Click this to save your changes back to the ZyXEL Device. Reset Click this to reload the previous configuration for this screen. P-870H/HW Series User’s Guide...
Page 105: Technical Reference
The SSID is the name of the wireless network. It stands for Service Set IDentity. • If two wireless networks overlap, they should use a different channel. Like radio stations or television channels, each wireless network uses a specific channel, or frequency, to send and receive information. P-870H/HW Series User’s Guide...
Page 106: Additional Wireless Terms
Normally, the ZyXEL Device acts like a beacon and regularly broadcasts the SSID in the area. You can hide the SSID instead, in which case the ZyXEL Device does not broadcast the SSID. In addition, you should change the default SSID to something that is difficult to guess. P-870H/HW Series User’s Guide...
Page 107: User Authentication
Some wireless devices, such as scanners, can detect wireless networks but cannot use wireless networks. These kinds of wireless devices might not have MAC addresses. Hexadecimal characters are 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, A, B, C, D, E, and F. P-870H/HW Series User’s Guide...
Page 108 ZyXEL Device. Many types of encryption use a key to protect the information in the wireless network. The longer the key, the stronger the encryption. Every device in the wireless network must have the same key. P-870H/HW Series User’s Guide...
Page 109: Wifi Protected Setup
(SSID) and security key through an secure connection to the enrollee. If you need to make sure that WPS worked, check the list of associated wireless clients in the AP’s configuration utility. If you see the wireless client in the list, WPS was successful. P-870H/HW Series User’s Guide...
Page 110: Pin Configuration
On a computer connected to the wireless client, try to connect to the Internet. If you can connect, WPS was successful. If you cannot connect, check the list of associated wireless clients in the AP’s configuration utility. If you see the wireless client in the list, WPS was successful. P-870H/HW Series User’s Guide...
Page 111: How Wps Works
PSK or WPA2-PSK pre-shared key to the enrollee. Whether WPA-PSK or WPA2-PSK is used depends on the standards supported by the devices. If the registrar is already part of a network, it sends the existing information. If not, it generates the SSID and WPA(2)-PSK randomly. P-870H/HW Series User’s Guide...
Page 112 It will be the registrar in all subsequent WPS connections in which it is involved. If you want a configured AP to act as an enrollee, you must reset it to its factory defaults. P-870H/HW Series User’s Guide...
Page 113: Example Wps Network Setup
CLIENT 1 ENROLLEE CLIENT 2 In step 3, you add another access point (AP2) to your network. AP2 is out of range of AP1, so you cannot use AP1 for the WPS handshake with the new access P-870H/HW Series User’s Guide...
Page 114: Limitations Of Wps
(if the device supports this feature). Then, you can enter the key into the non-WPS device and join the network as normal (the non-WPS device must also support WPA-PSK or WPA2-PSK). P-870H/HW Series User’s Guide...
Page 115 Check the MAC addresses of your wireless clients (usually printed on a label on the bottom of the device). If there is an unknown MAC address you can remove it or reset the AP. P-870H/HW Series User’s Guide...
Page 116 Chapter 7 Wireless LAN P-870H/HW Series User’s Guide...
Page 117: Network Address Translation (Nat)
In the simplest form, NAT changes the source IP address in a packet received from a subscriber (the inside local address) to another (the inside global address) before forwarding the packet to the WAN side. When the response comes back, P-870H/HW Series User’s Guide...
Page 118: The Port Forwarding Screen
If you are unsure, refer to your ISP. To access this screen, click Network > NAT. The following screen appears. Figure 63 NAT Port Forwarding P-870H/HW Series User’s Guide...
Page 119 This field displays the name of the service used by the packets for this virtual server. WAN Interface This field displays the WAN interface through which the service is forwarded. WAN IP This field displays the incoming packet’s destination IP address. P-870H/HW Series User’s Guide...
Page 120: The Port Forwarding Edit Screen
This screen lets you create or edit a port forwarding rule. Select User Define in the Service Name field or click the rule’s Edit icon in the Port Forwarding screen to open the following screen. Figure 64 Port Forwarding Edit P-870H/HW Series User’s Guide...
Page 121: The Address Mapping Screen
Ordering your rules is important because the ZyXEL Device applies the rules in the order that you specify. When a rule matches the current packet, the ZyXEL Device takes the corresponding action and the remaining rules are ignored. P-870H/HW Series User’s Guide...
Page 122 Click the Edit icon to go to the screen where you can edit the address mapping rule. Click the Remove icon to delete an existing address mapping rule. Note that subsequent address mapping rules move up by one when you take this action. P-870H/HW Series User’s Guide...
Page 123: The Address Mapping Rule Edit Screen
Select the number of the mapping set for which you want to configure. Back Click Back to return to the previous screen. Apply Click Apply to save your changes to the ZyXEL Device. Cancel Click Cancel to begin configuring this screen afresh. P-870H/HW Series User’s Guide...
Page 124: The Trigger Port Screen
IP address. The ZyXEL Device associates Jane's computer IP address with the "open" port range of 6970-7170. The Real Audio server responds using a port number ranging between 6970-7170. The ZyXEL Device forwards the traffic to Jane’s computer IP address. P-870H/HW Series User’s Guide...
Page 125 Click this button to add a rule to the table below. This is the rule index number (read-only). Active This field indicates whether the rule is active or not. Clear the check box to disable the rule. Select the check box to enable it. P-870H/HW Series User’s Guide...
Page 126: Trigger Port Configuration
8.5.1 Trigger Port Configuration This screen lets you create new port triggering rules. Click the Add icon in the NAT - Trigger Port screen to open the following screen. Figure 69 NAT > Trigger Port > Add P-870H/HW Series User’s Guide...
Page 127 Select the IP protocol from TCP, UDP, or TCP/UDP. Protocol Back Click Back to return to the previous screen. Apply Click Apply to save your changes to the ZyXEL Device. Cancel Click Cancel to begin configuring this screen afresh. P-870H/HW Series User’s Guide...
Page 128: The Dmz Host Screen
The SIP ALG translates the ZyXEL Device’s private IP address inside the SIP data stream to a public IP address. You do not need to use STUN or an outbound proxy if you enable the SIP ALG. P-870H/HW Series User’s Guide...
Page 129: Technical Reference
FTP (File Transfer Protocol) SMTP (Simple Mail Transfer Protocol) DNS (Domain Name System) Finger HTTP (Hyper Text Transfer protocol or WWW, Web) POP3 (Post Office Protocol) NNTP (Network News Transport Protocol) SNMP (Simple Network Management Protocol) P-870H/HW Series User’s Guide...
Page 130 ISP assigns the WAN IP address. The NAT network appears as a single host on the Internet. Figure 72 Multiple Servers Behind NAT Example A=192.168.1.33 192.168.1.1 B=192.168.1.34 Internet IP address assigned by ISP C=192.168.1.35 D=192.168.1.36 P-870H/HW Series User’s Guide...
Page 131: Part Iii: Security
Security MAC Filter (133) Firewall (137) Certificate (143)
Page 133: Chapter 9 Mac Filter
9.2 on page 133). 9.2 The MAC Filter Screen Click MAC Filtering or Security > MAC Filter to display the following screen. This screen displays the default global MAC filtering policy and a list of the custom P-870H/HW Series User’s Guide...
Page 134: Creating Mac Filtering Rules
Any. Frame Direction This displays the direction of travel of frame to which this rule applies. Remove Select the rule(s) you want to delete in the Remove column and then click the Remove button. P-870H/HW Series User’s Guide...
Page 135 Frame Direction Select the travel direction of frame to which this rule applies. WAN Interfaces Select the WAN interface to which this rule applies. Save/Apply Click Save/Apply to save your customized settings and exit this screen. P-870H/HW Series User’s Guide...
Page 136: Firewall
Web on port 80, other ports are also active. If the person configuring or managing the computer is not careful, a hacker could attack it over an unprotected port. P-870H/HW Series User’s Guide...
Page 137: The Firewall Screen
Your customized rules take precedence and override the ZyXEL Device’s default rules. 10.3 The Firewall Screen Click Security > Firewall > Incoming to display the following screen. This screen displays a list of the configured incoming filtering rules. Figure 75 Firewall > Incoming P-870H/HW Series User’s Guide...
Page 138 Click the Remove icon to delete an existing rule. Note that subsequent rules move up by one when you take this action. Click Add to create a new rule. Apply Click Apply to save your changes back to the ZyXEL Device. P-870H/HW Series User’s Guide...
Page 139: Creating Incoming Firewall Rules
Enter a single port number or the range of port numbers of the source. Destination IP Enter the destination IP address in dotted decimal notation. Address Destination Enter the destination subnet mask. Subnet Mask Destination Port Enter the port number of the destination. P-870H/HW Series User’s Guide...
Page 140 Select Select All to apply the rule to all interfaces on the ZyXEL Device or select the specific WAN interface(s) to which this rule applies. Back Click Back to return to the previous screen. Apply Click Apply to save your customized settings and exit this screen. P-870H/HW Series User’s Guide...
Page 141 Chapter 10 Firewall P-870H/HW Series User’s Guide...
Page 142: Certificate
Anyone can then use the certification authority's public key to verify the certificates. You can use the ZyXEL Device to generate certification requests that contain identifying information and public keys and then send the certification requests to a certification authority. P-870H/HW Series User’s Guide...
Page 143: The Local Certificates Screen
Click the Load Signed button to import a valid certification to replace the request. Click the Remove button to delete the certificate (or certification request). You cannot delete a certificate that one or more features is configured to use. P-870H/HW Series User’s Guide...
Page 144: Create Certificate Request
Type up to 127 characters to identify the state or province where the Name certificate owner is located. You may use any character, including spaces, but the ZyXEL Device drops trailing spaces. Country/Region Select a country to identify the nation where the certificate owner is Name located. P-870H/HW Series User’s Guide...
Page 145: Import Certificate
11.3.2 Import Certificate Click Security > Certificates > Local Certificates and then Import Certificate to open the Import Local Certificate screen. Follow the instructions in this screen to save an existing certificate to the ZyXEL Device. P-870H/HW Series User’s Guide...
Page 146 Table 51 Import Local Certificate LABEL DESCRIPTION Certificate Type up to 31 ASCII characters (not including spaces) to identify this Name certificate. Certificate Copy and paste the certificate into the text box to store it on the ZyXEL Device. P-870H/HW Series User’s Guide...
Page 147: Certificate Details
Click Security > Certificates > Local Certificates to open the My Certificates screen (see Figure 77 on page 144). Click the View icon to open the Certificate Details screen. Use this screen to view in-depth certificate information and change the certificate’s name. P-870H/HW Series User’s Guide...
Page 148 Chapter 11 Certificate Figure 81 Certificate Details P-870H/HW Series User’s Guide...
Page 149: Load Signed Certificate
Click Security > Certificates > Local Certificates and then Load Signed or the Load Signed Certificate button in the Certificate Details screen of a certification request to open the Load Certificate screen. Follow the instructions in this screen to save a valid certificate to replace the request. P-870H/HW Series User’s Guide...
Page 150: The Trusted Ca Screen
This screen displays a summary list of certificates of the certification authorities that you have set the ZyXEL Device to accept as trusted. The ZyXEL Device accepts any valid certificate signed by a certification authority on this list P-870H/HW Series User’s Guide...
Page 151 Click View to open a screen with an in-depth list of information about the certificate. Click Remove to delete the certificate. Import Click this button to open a screen where you can save the certificate of Certificate a certification authority that you trust to the ZyXEL Device. P-870H/HW Series User’s Guide...
Page 152: View Trusted Ca Certificate
(via floppy disk for example). Back Click this button to return to the previous screen. P-870H/HW Series User’s Guide...
Page 153: Import Trusted Ca Certificate
Copy and paste the certificate into the text box to store it on the ZyXEL Device. Back Click this button to return to the previous screen. Apply Click this button to save your changes back to the ZyXEL Device. P-870H/HW Series User’s Guide...
Page 154: Advanced
Advanced Static Route (157) Policy Forwarding (161) RIP (165) Quality of Service (QoS) (167) Dynamic DNS Setup (181) Remote Management (183) Universal Plug-and-Play (UPnP) (189) Parental Control (203) Interface Group (207)
Page 156: Chapter 12 Static Route
Figure 86 Example of Static Routing Topology Internet 12.1.1 What You Can Do in this Chapter The Static Route screens let you view and configure IP static routes on the ZyXEL Device (Section 12.2 on page 158). P-870H/HW Series User’s Guide...
Page 157: The Static Route Screen
Click the icon to remove a static route from the ZyXEL Device. A window displays asking you to confirm that you want to delete the route. Click this to create a new rule. Apply Click this to apply your changes to the ZyXEL Device. P-870H/HW Series User’s Guide...
Page 158: Static Route Edit
Device's interface(s). The gateway helps forward packets to their destinations. Back Click Back to return to the previous screen without saving. Apply Click Apply to save your changes back to the ZyXEL Device. Cancel Click Cancel to begin configuring this screen afresh. P-870H/HW Series User’s Guide...
Page 159 Chapter 12 Static Route P-870H/HW Series User’s Guide...
Page 160: Chapter 13 Policy Forwarding
The Policy Forwarding screens let you view and configure routing policies on the ZyXEL Device (Section 13.2 on page 161). 13.2 The Static Route Screen Click Advanced > Policy Forwarding to open the Policy Forwarding screen. Figure 89 Advanced > Policy Forwarding P-870H/HW Series User’s Guide...
Page 161: Policy Forwarding Setup
Enter the source port number. Use Interface Select a WAN interface through which the traffic is sent. You must have the WAN interface(s) already configured in the WAN screens. Back Click Back to return to the previous screen without saving. P-870H/HW Series User’s Guide...
Page 162 Chapter 13 Policy Forwarding Table 60 Policy Forwarding: Add LABEL DESCRIPTION Apply Click Apply to save your changes back to the ZyXEL Device. Cancel Click Cancel to begin configuring this screen afresh. P-870H/HW Series User’s Guide...
Page 163 Chapter 13 Policy Forwarding P-870H/HW Series User’s Guide...
Page 164: Rip
The RIP screen lets you set up RIP settings on the ZyXEL Device (Section 14.2 on page 165). 14.2 The RIP Screen Click Advanced > RIP to open the RIP screen. Figure 91 Advanced > RIP P-870H/HW Series User’s Guide...
Page 165 Select Active to have the ZyXEL Device advertise its route information and also listen for routing updates from neighboring routers. Enabled Select the check box to activate the settings. Apply/Save Click Apply/Save to save your changes back to the ZyXEL Device. P-870H/HW Series User’s Guide...
Page 166: Chapter 15 Quality Of Service (Qos)
• The Queue Setup screen lets you lets you configure QoS queue assignment (Section 15.4 on page 170). • The Class Setup screen lets you add, edit or delete QoS classifiers (Section 15.5 on page 172). P-870H/HW Series User’s Guide...
Page 167: What You Need To Know
15.3 The Quality of Service General Screen Click Advanced Setup > Quality of Service to open the screen as shown next. P-870H/HW Series User’s Guide...
Page 168 If you leave this field blank, the ZyXEL Device automatically sets this number to be 95% of the DSL port’s actual upstream transmission speed. Apply Click Apply to save your changes back to the ZyXEL Device. Cancel Click Cancel to begin configuring this screen afresh. P-870H/HW Series User’s Guide...
Page 169: The Queue Setup Screen
Click the Edit icon to go to the screen where you can edit the queue. Click the Remove icon to delete an existing queue. Note that subsequent rules move up by one when you take this action. Apply Click Apply to save your changes back to the ZyXEL Device. P-870H/HW Series User’s Guide...
Page 170: Adding A Qos Queue
Specify the maximum transmission rate (in Kbps) allowed for traffic on this queue. Back Click Back to return to the previous screen without saving. Apply Click Apply to save your changes back to the ZyXEL Device. Cancel Click Cancel to begin configuring this screen afresh. P-870H/HW Series User’s Guide...
Page 171: The Class Setup Screen
This is the interface through which traffic that matches this classifier is forwarded out. DSCP Mark This is the DSCP number added to traffic of this classifier. 802.1P Mark This is the IEEE 802.1p priority level assigned to traffic of this classifier. P-870H/HW Series User’s Guide...
Page 172 Click the Edit icon to go to the screen where you can edit the classifier. Click the Remove icon to delete an existing classifier. Note that subsequent rules move up by one when you take this action. Apply Click Apply to save your changes back to the ZyXEL Device. P-870H/HW Series User’s Guide...
Page 173: Qos Class Edit
Chapter 15 Quality of Service (QoS) 15.5.1 QoS Class Edit Click the Add button or the Edit icon in the Class Setup screen to configure a classifier. Figure 96 QoS Class Setup: Add P-870H/HW Series User’s Guide...
Page 174 You should have configured a queue in the Queue Setup screen already. Criteria Configuration Use the following fields to configure the criteria for traffic classification. Basic From Interface Select from which Ethernet port or wireless interface traffic of this class should come. P-870H/HW Series User’s Guide...
Page 175 If you select TCP or UDP in the IP Protocol field, select the check Range box and enter the port number(s) of the source. Exclude Select this option to exclude the packets that match the specified criteria from this classifier. Others P-870H/HW Series User’s Guide...
Page 176 Back Click Back to return to the previous screen without saving. Apply Click Apply to save your changes back to the ZyXEL Device. Cancel Click Cancel to begin configuring this screen afresh. P-870H/HW Series User’s Guide...
Page 177: The Qos Monitor Screen
This is the index number of the entry. Name This shows the name of the queue. Pass This shows how many packets assigned to this queue are transmitted successfully. Drop This shows how many packets assigned to this queue are dropped. P-870H/HW Series User’s Guide...
Page 178: Technical Reference
DiffServ (Differentiated Services) is a class of service (CoS) model that marks packets so that they receive specific per-hop treatment at DiffServ-compliant network devices along the route based on the application types and traffic flow. Packets are marked with DiffServ Code Points (DSCPs) indicating the level of P-870H/HW Series User’s Guide...
Page 179 DiffServ network. Based on the marking rule, different kinds of traffic can be marked for different kinds of forwarding. Resources can then be allocated according to the DSCP values and the configured policies. P-870H/HW Series User’s Guide...
Page 180: Chapter 16 Dynamic Dns Setup
IP address as yourhost.dyndns.org. This feature is useful if you want to be able to use, for example, www.yourhost.dyndns.org and still reach your hostname. If you have a private WAN IP address, then you cannot use Dynamic DNS. P-870H/HW Series User’s Guide...
Page 181: Dynamic Dns Setup
If you select TZO in the Service Provider field, enter the password you used to register for this service. Apply Click Apply to save your changes back to the ZyXEL Device. Cancel Click Cancel to begin configuring this screen afresh. P-870H/HW Series User’s Guide...
Page 182: Chapter 17 Remote Management
ZyXEL Device. You have enable the device to be managed by the ACS and specify the ACS IP address or domain name and username and password. P-870H/HW Series User’s Guide...
Page 183: Remote Management
Request request from the ACS. Authentication Connection Enter the connection request user name. Request User When the ACS makes a connection request to the ZyXEL Device, this Name user name is used to authenticate the ACS. P-870H/HW Series User’s Guide...
Page 184: The Tr-064 Screen
The following table describes the fields in this screen. Table 71 TR-064 LABEL DESCRIPTION Enanble TR064 Select the check box to activate management via TR-064 on the LAN. Apply Click this button to save your changes back to the ZyXEL Device. P-870H/HW Series User’s Guide...
Page 185: The Service Control Screen
ZyXEL Device from the LAN. Select the Enable check box for the corresponding services that you want to allow access to the ZyXEL Device from the WAN. Apply Click this button to save your changes back to the ZyXEL Device. P-870H/HW Series User’s Guide...
Page 186: The Ip Address Screen
ZyXEL Device. Remove Select this check box and click the Remove button to delete this entry from the ZyXEL Device. Click this button to create a new entry. Remove Click this button to delete the selected entry. P-870H/HW Series User’s Guide...
Page 187: Adding An Ip Address
Enter the IP address of the trusted computer from which you can manage the ZyXEL Device. Apply/Save Click this button to save your changes back to the ZyXEL Device. Back Click this button to return to the previous screen without saving. P-870H/HW Series User’s Guide...
Page 188: Universal Plug-And-Play (Upnp)
UPnP devices and enable exchange of simple product and service descriptions. NAT traversal allows the following: • Dynamic port mapping • Learning public IP addresses • Assigning lease times to mappings P-870H/HW Series User’s Guide...
Page 189: Universal Plug-And-Play (Upnp)
See the following sections for examples of installing and using UPnP. 18.3 The UPnP Screen Click Advanced > UPnP to display the screen shown next. Section 18.1 on page 189 for more information. Figure 104 Advanced > UPnP P-870H/HW Series User’s Guide...
Page 190: Installing Upnp In Windows Example
This section shows how to install UPnP in Windows Me and Windows XP. Installing UPnP in Windows Me Follow the steps below to install the UPnP in Windows Me. Click Start and Control Panel. Double-click Add/Remove Programs. P-870H/HW Series User’s Guide...
Page 191 Components selection box. Click Details. Figure 105 Add/Remove Programs: Windows Setup: Communication In the Communications window, select the Universal Plug and Play check box in the Components selection box. Figure 106 Add/Remove Programs: Windows Setup: Communication: Components P-870H/HW Series User’s Guide...
Page 192 Follow the steps below to install the UPnP in Windows XP. Click Start and Control Panel. Double-click Network Connections. In the Network Connections window, click Advanced in the main menu and select Optional Networking Components …. Figure 107 Network Connections P-870H/HW Series User’s Guide...
Page 193 Chapter 18 Universal Plug-and-Play (UPnP) The Windows Optional Networking Components Wizard window displays. Select Networking Service in the Components selection box and click Details. Figure 108 Windows Optional Networking Components Wizard P-870H/HW Series User’s Guide...
Page 194: Using Upnp In Windows Xp Example
Make sure the computer is connected to a LAN port of the ZyXEL Device. Turn on your computer and the ZyXEL Device. Auto-discover Your UPnP-enabled Network Device Click Start and Control Panel. Double-click Network Connections. An icon displays under Internet Gateway. P-870H/HW Series User’s Guide...
Page 195 Chapter 18 Universal Plug-and-Play (UPnP) Right-click the icon and select Properties. Figure 110 Network Connections P-870H/HW Series User’s Guide...
Page 196 Chapter 18 Universal Plug-and-Play (UPnP) In the Internet Connection Properties window, click Settings to see the port mappings there were automatically created. Figure 111 Internet Connection Properties P-870H/HW Series User’s Guide...
Page 197 You may edit or delete the port mappings or click Add to manually add port mappings. Figure 112 Internet Connection Properties: Advanced Settings Figure 113 Internet Connection Properties: Advanced Settings: Add When the UPnP-enabled device is disconnected from your computer, all port mappings will be deleted automatically. P-870H/HW Series User’s Guide...
Page 198 IP address of the ZyXEL Device first. This comes helpful if you do not know the IP address of the ZyXEL Device. Follow the steps below to access the Web Configurator. Click Start and then Control Panel. Double-click Network Connections. P-870H/HW Series User’s Guide...
Page 199 Chapter 18 Universal Plug-and-Play (UPnP) Select My Network Places under Other Places. Figure 116 Network Connections An icon with the description for each UPnP-enabled device displays under Local Network. P-870H/HW Series User’s Guide...
Page 200 Figure 117 Network Connections: My Network Places Right-click on the icon for your ZyXEL Device and select Properties. A properties window displays with basic information about the ZyXEL Device. Figure 118 Network Connections: My Network Places: Properties: Example P-870H/HW Series User’s Guide...
Page 201 Chapter 18 Universal Plug-and-Play (UPnP) P-870H/HW Series User’s Guide...
Page 202: Chapter 19 Parental Control
Use this screen to view the schedules and enable parental control on a specific user during certain periods. Click Advanced Setup > Parental Control to open the following screen. Figure 119 Parental Control > Time restriction P-870H/HW Series User’s Guide...
Page 203: Parental Control
19.2.1 Adding a Schedule Click the Add button in the Time Restriction screen to open the following screen. Use this screen to configure a restricted access schedule for a specific user on your network. Figure 120 Time Restriction Configuration P-870H/HW Series User’s Guide...
Page 204: The Url Filter Screen
Use this screen to configure URL filtering settings to allow or block the users on your network from accessing certain web sites. Click Advanced Setup > Parental Control > URL Filter to open the following screen. Figure 121 Parental Control > URL Filter P-870H/HW Series User’s Guide...
Page 205: Adding Url Filter
Specify the port number the web server uses to forward HTTP traffic. Back Click this button to return to the previous screen without saving any changes. Save/Apply Click this button to save your settings back to the ZyXEL Device. P-870H/HW Series User’s Guide...
Page 206: Chapter 20 Interface Group
ZyXEL Device to assign IP addresses based on the client’s source MAC address or DHCP option information, you must enable DHCP server and configure LAN TCP/IP settings for both the default and user-defined groups. See Chapter 6 on page 77 for more information. P-870H/HW Series User’s Guide...
Page 207: Interface Group Configuration
Click the Remove icon to delete the group. Click this button to create a new group. 20.2.1 Interface Group Configuration Click the Add button in the Interface Group screen to open the following screen. Use this screen to create a new interface group. P-870H/HW Series User’s Guide...
Page 208 This shows the filtering criteria. The LAN interface on which the matched traffic is received will belong to this group automatically. Remove Click the Remove icon to delete this rule from the ZyXEL Device. Click this button to create a new rule. P-870H/HW Series User’s Guide...
Page 209: Interface Grouping Criteria
DHCP Option 61 Select this and enter the device identity of the matched traffic. IAID Enter the Identity Association Identifier (IAID) of the device, for example, the WAN connection index number. P-870H/HW Series User’s Guide...
Page 210 Serial Enter the serial number of the device. Number Back Click this button to return to the previous screen without saving any changes. Apply Click this button to save your settings back to the ZyXEL Device. P-870H/HW Series User’s Guide...
Page 211 Chapter 20 Interface Group P-870H/HW Series User’s Guide...
Page 212: Part V: Maintenance, Troubleshooting And Specifications
Maintenance, Troubleshooting and Specifications System Settings (215) Logs (219) Tools (223) Diagnostic (231) Troubleshooting (235) Product Specifications (241)
Page 214: Chapter 21 System Settings
(Section 21.3 on page 216). 21.2 The General Screen Use the General screen to configure system settings such as the system password. Click Maintenance > System to open the General screen. Figure 127 Maintenance > System > General P-870H/HW Series User’s Guide...
Page 215: System Settings
To change your ZyXEL Device’s time and date, click Maintenance > System > Time Setting. The screen appears as shown. Use this screen to configure the ZyXEL Device’s time based on your local time zone. Figure 128 Maintenance > System > Time Setting P-870H/HW Series User’s Guide...
Page 216 Time zone offset Choose the time zone of your location. This will set the time difference between your time zone and Greenwich Mean Time (GMT). Apply Click Apply to save your changes back to the ZyXEL Device. Cancel Click Cancel to begin configuring this screen afresh. P-870H/HW Series User’s Guide...
Page 217 Chapter 21 System Settings P-870H/HW Series User’s Guide...
Page 218: Logs
Click Maintenance > Logs to open the View Log screen. Use the View Log screen to see the logs for the categories that you selected in the Log Settings screen (see Section 22.3 on page 220). P-870H/HW Series User’s Guide...
Page 219: The Log Settings Screen
This field states the reason for the log. 22.3 The Log Settings Screen Use the Log Settings screen to configure to where the ZyXEL Device is to send logs and which logs and/or immediate alerts the ZyXEL Device is to record and display. P-870H/HW Series User’s Guide...
Page 220 Syslog Server Enter the server name or the IP address of the log server. IP Address Syslog Server Enter the UDP port of the log server. UDP Port Apply Click Apply to save your customized settings. P-870H/HW Series User’s Guide...
Page 221 Chapter 22 Logs P-870H/HW Series User’s Guide...
Page 222: Tools
• The Configuration screen lets you backup and restore device configurations (Section 23.3 on page 226). You can also reset your device settings back to the factory default. • The Restart screen lets you restart your ZyXEL Device (Section 23.4 on page 228). P-870H/HW Series User’s Guide...
Page 223: The Firmware Screen
Click Browse... to find the .bin file you want to upload. Remember that you must decompress compressed (.zip) files before you can upload them. Upload Click Upload to begin the upload process. This process may take up to two minutes. P-870H/HW Series User’s Guide...
Page 224 After two minutes, log in again and check your new firmware version in the Status screen. If the upload was not successful, the following screen will appear. Click Tools to go back to the Firmware screen. Figure 134 Error Message P-870H/HW Series User’s Guide...
Page 225: The Configuration Screen
The backup configuration file will be useful in case you need to return to your previous settings. Click Backup to save the ZyXEL Device’s current configuration to your computer. P-870H/HW Series User’s Guide...
Page 226 IP address (192.168.1.1). See Appendix A on page 249 for details on how to set up your computer’s IP address. P-870H/HW Series User’s Guide...
Page 227: The Restart Screen
ZyXEL Device. Refer to Section 1.6 on page 25 for more information on the RESET button. 23.4 The Restart Screen System restart allows you to reboot the ZyXEL Device without turning the power off. P-870H/HW Series User’s Guide...
Page 228 Chapter 23 Tools Click Maintenance > Tools > Restart. Click Restart to have the ZyXEL Device reboot. This does not affect the ZyXEL Device's configuration. Figure 140 Maintenance > Tools >Restart P-870H/HW Series User’s Guide...
Page 229 Chapter 23 Tools P-870H/HW Series User’s Guide...
Page 230: Diagnostic
Point (MEP) ports on the device under a Maintenance Domain (MD) level. An MEP port has the ability to send Connectivity Check Messages (CCMs) and get other MEP ports information from neighbor devices’ CCMs within an MA. CFM provides two tests to discover connectivity faults. P-870H/HW Series User’s Guide...
Page 231: The General Diagnostic Screen
Ping Click this button to ping the IP address that you entered. Traceoute Click this button to perform the traceroute function. This determines the path a packet takes to the specified host. P-870H/HW Series User’s Guide...
Page 232: The 802.1Ag Screen
Domain (MD) Level Maintenance Type a name of up to 39 printable English keyboard characters for this Association (MA) Name The combined length of the MD Name and MA name must be less or equal to 44bytes. P-870H/HW Series User’s Guide...
Page 233 Click this button to have the selected MEP send the LBM (Loop Back Message) to a specified remote end point. Send Linktrace Click this button to have the selected MEP send the LTMs (Link Trace Messages) to a specified remote end point. P-870H/HW Series User’s Guide...
Page 234: Troubleshooting
Turn the ZyXEL Device off and on. If the problem continues, contact the vendor. One of the LEDs does not behave as expected. Make sure you understand the normal behavior of the LED. See Section 1.5 on page P-870H/HW Series User’s Guide...
Page 235: Zyxel Device Access And Login
If this does not work, you have to reset the device to its factory defaults. See Section 1.6 on page I cannot see or access the Login screen in the Web Configurator. Make sure you are using the correct IP address. • The default IP address is 192.168.1.1. P-870H/HW Series User’s Guide...
Page 236: Internet Access
Section 25.1 on page 235. 25.3 Internet Access I cannot access the Internet. Check the hardware connections, and make sure the LEDs are behaving as expected. See the Quick Start Guide and Section 1.5 on page P-870H/HW Series User’s Guide...
Page 237 (for example, microwaves, other wireless networks, and so on). Turn the ZyXEL Device off and on. If the problem continues, contact the network administrator or vendor, or try one of the advanced suggestions. Advanced Suggestions P-870H/HW Series User’s Guide...
Page 238 Chapter 25 Troubleshooting • Check the settings for QoS. If it is disabled, you might consider activating it. If it is enabled, you might consider raising or lowering the priority for some applications. P-870H/HW Series User’s Guide...
Page 239 Chapter 25 Troubleshooting P-870H/HW Series User’s Guide...
Page 240: Product Specifications
Temperature Storage Temperature -20º ~ 60º C Operation Humidity 20% ~ 85% RH Storage Humidity 20% ~ 90% RH 26.2 Firmware Specifications Table 92 Firmware Specifications Default IP Address 192.168.1.1 Default Subnet Mask 255.255.255.0 (24 bits) P-870H/HW Series User’s Guide...
Page 241: Product Specifications
Remote Management This allows you to decide whether a service (HTTP or FTP traffic for example) from a computer on a network (LAN or WAN for example) can access the ZyXEL Device. P-870H/HW Series User’s Guide...
Page 242 VDSL embedded operations channel (EOC) and VDSL overhead control channel (VOC) PTM Transmission Convergence (PTM-TC) Dual-latency xDSL framing (fast and interleaved) Trellis coding INP capability: At least two symbols protection (INP_MIN = 2), up to 16 symbols (INP_MIN = 16) P-870H/HW Series User’s Guide...
Page 243: Wireless Features
Wi-Fi Protected Access Wi-Fi Protected Access (WPA) is a subset of the IEEE 802.11i security standard. Key differences between WPA and WEP are user authentication and improved data encryption. P-870H/HW Series User’s Guide...
Page 244 WLAN standards developed by working group 11 of the IEEE LAN/MAN Standards Committee (IEEE 802). IEEE 802.11b Uses the 2.4 gigahertz (GHz) band IEEE 802.11g Uses the 2.4 gigahertz (GHz) band IEEE 802.11g+ Turbo and Super G modes P-870H/HW Series User’s Guide...
Page 245 Port Based Network Access Control. IEEE 802.11e QoS IEEE 802.11 e Wireless LAN for Quality of Service ITU-T G.993.2 ITU standard that defines VDSL2. (VDSL2) TR-069 DSL Forum Standard for CPE Wan Management. TR-064 DSL Forum LAN-Side DSL CPE Configuration P-870H/HW Series User’s Guide...
Page 246: Part Vi: Appendices And Index
Appendices and Index Note: The appendices provide general information. Some details may not apply to your ZyXEL Device. Setting Up Your Computer’s IP Address (249) Pop-up Windows, JavaScripts and Java Permissions (279) IP Addresses and Subnetting (289) Wireless LANs (301) Common Services (317) Legal Information (321) Index (325)
Page 248: Appendix A Setting Up Your Computer's Ip Address
250 • Windows Vista page 254 • Mac OS X: 10.3 and 10.4 page 259 • Mac OS X: 10.5 page 263 • Linux: Ubuntu 8 (GNOME) page 266 • Linux: openSUSE 10.3 (KDE) page 272 P-870H/HW Series User’s Guide...
Page 249 The following example uses the default Windows XP display theme but can also apply to Windows 2000 and Windows NT. Click Start > Control Panel. Figure 143 Windows XP: Start Menu In the Control Panel, click the Network Connections icon. Figure 144 Windows XP: Control Panel P-870H/HW Series User’s Guide...
Page 250 Right-click Local Area Connection and then select Properties. Figure 145 Windows XP: Control Panel > Network Connections > Properties On the General tab, select Internet Protocol (TCP/IP) and then click Properties. Figure 146 Windows XP: Local Area Connection Properties P-870H/HW Series User’s Guide...
Page 251 DNS server and an Alternate DNS server, if that information was provided. Click OK to close the Internet Protocol (TCP/IP) Properties window. Click OK to close the Local Area Connection Properties window. Verifying Settings Click Start > All Programs > Accessories > Command Prompt. P-870H/HW Series User’s Guide...
Page 252 In the Command Prompt window, type "ipconfig" and then press [ENTER]. You can also go to Start > Control Panel > Network Connections, right-click a network connection, click Status and then click the Support tab to view your IP address and connection information. P-870H/HW Series User’s Guide...
Page 253: Windows Vista
Figure 148 Windows Vista: Start Menu In the Control Panel, click the Network and Internet icon. Figure 149 Windows Vista: Control Panel Click the Network and Sharing Center icon. Figure 150 Windows Vista: Network And Internet P-870H/HW Series User’s Guide...
Page 254 Figure 151 Windows Vista: Network and Sharing Center Right-click Local Area Connection and then select Properties. Figure 152 Windows Vista: Network and Sharing Center Note: During this procedure, click Continue whenever Windows displays a screen saying that it needs your permission to continue. P-870H/HW Series User’s Guide...
Page 255 Appendix A Setting Up Your Computer’s IP Address Select Internet Protocol Version 4 (TCP/IPv4) and then select Properties. Figure 153 Windows Vista: Local Area Connection Properties P-870H/HW Series User’s Guide...
Page 256 DNS server and an Alternate DNS server, if that information was provided.Click Advanced. Click OK to close the Internet Protocol (TCP/IP) Properties window. 10 Click OK to close the Local Area Connection Properties window. Verifying Settings Click Start > All Programs > Accessories > Command Prompt. P-870H/HW Series User’s Guide...
Page 257 In the Command Prompt window, type "ipconfig" and then press [ENTER]. You can also go to Start > Control Panel > Network Connections, right-click a network connection, click Status and then click the Support tab to view your IP address and connection information. P-870H/HW Series User’s Guide...
Page 258 The screens in this section are from Mac OS X 10.4 but can also apply to 10.3. Click Apple > System Preferences. Figure 155 Mac OS X 10.4: Apple Menu In the System Preferences window, click the Network icon. Figure 156 Mac OS X 10.4: System Preferences P-870H/HW Series User’s Guide...
Page 259 Configure. Figure 157 Mac OS X 10.4: Network Preferences For dynamically assigned settings, select Using DHCP from the Configure IPv4 list in the TCP/IP tab. Figure 158 Mac OS X 10.4: Network Preferences > TCP/IP Tab. P-870H/HW Series User’s Guide...
Page 260 • In the Subnet Mask field, type your subnet mask. • In the Router field, type the IP address of your device. Figure 159 Mac OS X 10.4: Network Preferences > Ethernet Click Apply Now and close the window. P-870H/HW Series User’s Guide...
Page 261 Appendix A Setting Up Your Computer’s IP Address Verifying Settings Check your TCP/IP properties by clicking Applications > Utilities > Network Utilities, and then selecting the appropriate Network Interface from the Info tab. Figure 160 Mac OS X 10.4: Network Utility P-870H/HW Series User’s Guide...
Page 262 The screens in this section are from Mac OS X 10.5. Click Apple > System Preferences. Figure 161 Mac OS X 10.5: Apple Menu In System Preferences, click the Network icon. Figure 162 Mac OS X 10.5: Systems Preferences P-870H/HW Series User’s Guide...
Page 263 From the Configure list, select Using DHCP for dynamically assigned settings. For statically assigned settings, do the following: • From the Configure list, select Manually. • In the IP Address field, enter your IP address. • In the Subnet Mask field, enter your subnet mask. P-870H/HW Series User’s Guide...
Page 264 Appendix A Setting Up Your Computer’s IP Address • In the Router field, enter the IP address of your ZyXEL Device. Figure 164 Mac OS X 10.5: Network Preferences > Ethernet Click Apply and close the window. P-870H/HW Series User’s Guide...
Page 265 The following screens use the default Ubuntu 8 installation. Note: Make sure you are logged in as the root administrator. Follow the steps below to configure your computer IP address in GNOME: P-870H/HW Series User’s Guide...
Page 266 When the Network Settings window opens, click Unlock to open the Authenticate window. (By default, the Unlock button is greyed out until clicked.) You cannot make changes to your configuration unless you first enter your admin password. Figure 167 Ubuntu 8: Network Settings > Connections P-870H/HW Series User’s Guide...
Page 267 In the Authenticate window, enter your admin account name and password then click the Authenticate button. Figure 168 Ubuntu 8: Administrator Account Authentication In the Network Settings window, select the connection that you want to configure, then click Properties. Figure 169 Ubuntu 8: Network Settings > Connections P-870H/HW Series User’s Guide...
Page 268 • In the Configuration list, select Static IP address if you have a static IP address. Fill in the IP address, Subnet mask, and Gateway address fields. Click OK to save the changes and close the Properties dialog box and return to the Network Settings screen. P-870H/HW Series User’s Guide...
Page 269 Figure 171 Ubuntu 8: Network Settings > DNS Click the Close button to apply the changes. Verifying Settings Check your TCP/IP properties by clicking System > Administration > Network Tools, and then selecting the appropriate Network device from the Devices P-870H/HW Series User’s Guide...
Page 270 Appendix A Setting Up Your Computer’s IP Address tab. The Interface Statistics column shows data if your connection is working properly. Figure 172 Ubuntu 8: Network Tools P-870H/HW Series User’s Guide...
Page 271 Note: Make sure you are logged in as the root administrator. Follow the steps below to configure your computer IP address in the KDE: Click K Menu > Computer > Administrator Settings (YaST). Figure 173 openSUSE 10.3: K Menu > Computer Menu P-870H/HW Series User’s Guide...
Page 272 When the Run as Root - KDE su dialog opens, enter the admin password and click OK. Figure 174 openSUSE 10.3: K Menu > Computer Menu When the YaST Control Center window opens, select Network Devices and then click the Network Card icon. Figure 175 openSUSE 10.3: YaST Control Center P-870H/HW Series User’s Guide...
Page 273 Appendix A Setting Up Your Computer’s IP Address When the Network Settings window opens, click the Overview tab, select the appropriate connection Name from the list, and then click the Configure button. Figure 176 openSUSE 10.3: Network Settings P-870H/HW Series User’s Guide...
Page 274 Select Dynamic Address (DHCP) if you have a dynamic IP address. Select Statically assigned IP Address if you have a static IP address. Fill in the IP address, Subnet mask, and Hostname fields. Click Next to save the changes and close the Network Card Setup window. P-870H/HW Series User’s Guide...
Page 275 If you know your DNS server IP address(es), click the Hostname/DNS tab in Network Settings and then enter the DNS server information in the fields provided. Figure 178 openSUSE 10.3: Network Settings Click Finish to save your settings and close the window. P-870H/HW Series User’s Guide...
Page 276 From the Options sub-menu, select Show Connection Information. Figure 179 openSUSE 10.3: KNetwork Manager When the Connection Status - KNetwork Manager window opens, click the Statistics tab to see if your connection is working properly. Figure 180 openSUSE: Connection Status - KNetwork Manager P-870H/HW Series User’s Guide...
Page 277 Appendix A Setting Up Your Computer’s IP Address P-870H/HW Series User’s Guide...
Page 278: Appendix B Pop-Up Windows, Javascripts And Java Permissions
In Internet Explorer, select Tools, Pop-up Blocker and then select Turn Off Pop-up Blocker. Figure 181 Pop-up Blocker You can also check if pop-up blocking is disabled in the Pop-up Blocker section in the Privacy tab. P-870H/HW Series User’s Guide...
Page 279 Click Apply to save this setting. Enable Pop-up Blockers with Exceptions Alternatively, if you only want to allow pop-up windows from your device, see the following steps. In Internet Explorer, select Tools, Internet Options and then the Privacy tab. P-870H/HW Series User’s Guide...
Page 280 Select Settings…to open the Pop-up Blocker Settings screen. Figure 183 Internet Options: Privacy Type the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”. For example, http://192.168.167.1. P-870H/HW Series User’s Guide...
Page 281 Figure 184 Pop-up Blocker Settings Click Close to return to the Privacy screen. Click Apply to save this setting. JavaScript If pages of the Web Configurator do not display properly in Internet Explorer, check that JavaScript are allowed. P-870H/HW Series User’s Guide...
Page 282 Figure 185 Internet Options: Security Click the Custom Level... button. Scroll down to Scripting. Under Active scripting make sure that Enable is selected (the default). Under Scripting of Java applets make sure that Enable is selected (the default). P-870H/HW Series User’s Guide...
Page 283: Java Permissions
Figure 186 Security Settings - Java Scripting Java Permissions From Internet Explorer, click Tools, Internet Options and then the Security tab. Click the Custom Level... button. Scroll down to Microsoft VM. Under Java permissions make sure that a safety level is selected. P-870H/HW Series User’s Guide...
Page 284 Click OK to close the window. Figure 187 Security Settings - Java JAVA (Sun) From Internet Explorer, click Tools, Internet Options and then the Advanced tab. Make sure that Use Java 2 for <applet> under Java (Sun) is selected. P-870H/HW Series User’s Guide...
Page 285 Mozilla Firefox 2.0 screens are used here. Screens for other versions may vary. You can enable Java, Javascript and pop-ups in one screen. Click Tools, then click Options in the screen that appears. Figure 189 Mozilla Firefox: Tools > Options P-870H/HW Series User’s Guide...
Page 286 Appendix B Pop-up Windows, JavaScript and Java Permissions Click Content.to show the screen below. Select the check boxes as shown in the following screen. Figure 190 Mozilla Firefox Content Security P-870H/HW Series User’s Guide...
Page 287 Appendix B Pop-up Windows, JavaScript and Java Permissions P-870H/HW Series User’s Guide...
Page 288: Appendix C Ip Addresses And Subnetting
192.168.1.1). Each of these four parts is known as an octet. An octet is an eight-digit binary number (for example 11000000, which is 192 in decimal notation). Therefore, each octet has a possible range of 00000000 to 11111111 in binary, or 0 to 255 in decimal. P-870H/HW Series User’s Guide...
Page 289: Subnet Masks
Table 95 IP Address Network Number and Host ID Example OCTET: OCTET: OCTET: OCTET (192) (168) IP Address (Binary) 11000000 10101000 00000001 00000010 Subnet Mask (Binary) 11111111 11111111 11111111 00000000 Network Number 11000000 10101000 00000001 Host ID 00000010 P-870H/HW Series User’s Guide...
Page 290 SUBNET MASK HOST ID SIZE HOSTS 8 bits 255.0.0.0 24 bits – 2 16777214 16 bits 255.255.0.0 16 bits – 2 65534 24 bits 255.255.255.0 8 bits – 2 29 bits 255.255.255.2 3 bits – 2 P-870H/HW Series User’s Guide...
Page 291 In this example, the company network address is 192.168.1.0. The first three octets of the address (192.168.1) are the network number, and the remaining octet is the host ID, allowing a maximum of 2 – 2 or 254 possible hosts. P-870H/HW Series User’s Guide...
Page 292 You can “borrow” one of the host ID bits to divide the network 192.168.1.0 into two separate sub-networks. The subnet mask is now 25 bits (255.255.255.128 or /25). The “borrowed” host ID bit can have a value of either 0 or 1, allowing two subnets; 192.168.1.0 /25 and 192.168.1.128 /25. P-870H/HW Series User’s Guide...
Page 293 Similarly, to divide a 24-bit address into four subnets, you need to “borrow” two host ID bits to give four possible combinations (00, 01, 10 and 11). The subnet mask is 26 bits (11111111.11111111.11111111.11000000) or 255.255.255.192. P-870H/HW Series User’s Guide...
Page 294 Lowest Host ID: 192.168.1.129 192.168.1.128 Broadcast Address: Highest Host ID: 192.168.1.190 192.168.1.191 Table 102 Subnet 4 LAST OCTET BIT IP/SUBNET MASK NETWORK NUMBER VALUE IP Address 192.168.1. IP Address (Binary) 11000000.10101000.00000001 11000000 Subnet Mask (Binary) 11111111.11111111.11111111 11000000 P-870H/HW Series User’s Guide...
Page 295 The following table is a summary for subnet planning on a network with a 24-bit network number. Table 104 24-bit Network Number Subnet Planning NO. “BORROWED” NO. HOSTS PER SUBNET MASK NO. SUBNETS HOST BITS SUBNET 255.255.255.128 (/25) 255.255.255.192 (/26) 255.255.255.224 (/27) 255.255.255.240 (/28) 255.255.255.248 (/29) 255.255.255.252 (/30) 255.255.255.254 (/31) P-870H/HW Series User’s Guide...
Page 296 IP address. The subnet mask specifies the network number portion of an IP address. Your ZyXEL Device will compute the subnet mask automatically based on the IP P-870H/HW Series User’s Guide...
Page 297 A has a static (or fixed) IP address that is the same as the IP address that a DHCP server assigns to computer B which is a DHCP client. Neither can access the Internet. This problem can be solved by assigning a different static IP P-870H/HW Series User’s Guide...
Page 298 Conflicting Computer and Router IP Addresses Example More than one device can not use the same IP address. In the following example, the computer and the router’s LAN port both use 192.168.1.1 as the IP address. P-870H/HW Series User’s Guide...
Page 299 Appendix C IP Addresses and Subnetting The computer cannot access the Internet. This problem can be solved by assigning a different IP address to the computer or the router’s LAN port. Figure 196 Conflicting Computer and Router IP Addresses Example P-870H/HW Series User’s Guide...
Page 300: Appendix D Wireless Lans
(AP). Intra-BSS traffic is traffic between wireless clients in the BSS. When Intra-BSS is enabled, wireless client A and B can access the wired network and communicate P-870H/HW Series User’s Guide...
Page 301 This wired connection between APs is called a Distribution System (DS). This type of wireless LAN topology is called an Infrastructure WLAN. The Access Points not only provide communication with the wired network but also mediate wireless network traffic in the immediate neighborhood. P-870H/HW Series User’s Guide...
Page 302 A hidden node occurs when two stations are within range of the same access point, but are not within range of each other. The following figure illustrates a hidden node. Both stations (STA) are within range of the access point (AP) or P-870H/HW Series User’s Guide...
Page 303 RTS (Request To Send)/CTS (Clear to Send) handshake will never occur as data frames will be fragmented before they reach RTS/CTS size. Note: Enabling the RTS Threshold causes redundant network overhead that could negatively affect the throughput performance instead of providing a remedy. P-870H/HW Series User’s Guide...
Page 304: Fragmentation Threshold
IEEE 802.11g is fully compatible with the IEEE 802.11b standard. This means an IEEE 802.11b adapter can interface directly with an IEEE 802.11g access point (and vice versa) at 11 Mbps or lower depending on range. IEEE 802.11g has P-870H/HW Series User’s Guide...
Page 305 IEEE802.1x EAP with RADIUS Server Authentication Wi-Fi Protected Access (WPA) WPA2 Most Secure Note: You must enable the same wireless security settings on the ZyXEL Device and on all wireless clients that you want to associate with it. P-870H/HW Series User’s Guide...
Page 306 The following types of RADIUS messages are exchanged between the access point and the RADIUS server for user authentication: • Access-Request Sent by an access point requesting authentication. • Access-Reject Sent by a RADIUS server rejecting access. • Access-Accept Sent by a RADIUS server allowing access. P-870H/HW Series User’s Guide...
Page 307 The wireless client ‘proves’ that it knows the password by encrypting the password with the challenge and sends back the information. Password is not sent in plain text. P-870H/HW Series User’s Guide...
Page 308 However, PEAP only supports EAP methods, such as EAP-MD5, EAP-MSCHAPv2 and EAP-GTC (EAP-Generic Token Card), for client authentication. EAP-GTC is implemented only by Cisco. LEAP LEAP (Lightweight Extensible Authentication Protocol) is a Cisco implementation of IEEE 802.1x. P-870H/HW Series User’s Guide...
Page 309: Dynamic Wep Key Exchange
RADIUS server, you should use WPA2-PSK (WPA2-Pre-Shared Key) that only requires a single (identical) password entered into each access point, wireless gateway and wireless client. As long as the passwords match, a wireless client will be granted access to a WLAN. P-870H/HW Series User’s Guide...
Page 310 The common-password approach makes WPA(2)-PSK susceptible to brute-force password-guessing attacks but it’s still an improvement over WEP as it employs a consistent, single, alphanumeric password to derive a PMK which is used to generate unique temporal encryption P-870H/HW Series User’s Guide...
Page 311 The RADIUS server then checks the user's identification against its database and grants or denies network access accordingly. A 256-bit Pairwise Master Key (PMK) is derived from the authentication process by the RADIUS server and the client. P-870H/HW Series User’s Guide...
Page 312 The AP checks each wireless client's password and allows it to join the network only if the password matches. The AP and wireless clients generate a common PMK (Pairwise Master Key). The key itself is not sent over the network, but is derived from the PSK and the SSID. P-870H/HW Series User’s Guide...
Page 313: Security Parameters Summary
Enable without Dynamic WEP Open Enable with Dynamic WEP Key Enable without Dynamic WEP Disable Shared Enable with Dynamic WEP Key Enable without Dynamic WEP Disable TKIP/AES Enable WPA-PSK TKIP/AES Disable WPA2 TKIP/AES Enable WPA2-PSK TKIP/AES Disable P-870H/HW Series User’s Guide...
Page 314: Antenna Characteristics
Types of Antennas for WLAN There are two types of antennas used for wireless LAN applications. P-870H/HW Series User’s Guide...
Page 315: Positioning Antennas
For omni-directional antennas mounted on a wall or ceiling, point the antenna down. For a single AP application, place omni-directional antennas as close to the center of the coverage area as possible. For directional antennas, point the antenna in the direction of the desired coverage area. P-870H/HW Series User’s Guide...
Page 316: Appendix E Common Services
Border Gateway Protocol. BOOTP_CLIENT DHCP Client. BOOTP_SERVER DHCP Server. CU-SEEME 7648 A popular videoconferencing solution from White Pines Software. 24032 TCP/UDP Domain Name Server, a service that matches web names (for example www.zyxel.com) to IP numbers. P-870H/HW Series User’s Guide...
Page 317 ICMP echo requests to test whether or not a remote host is reachable. POP3 Post Office Protocol version 3 lets a client computer get e-mail from a POP3 server through a temporary connection (TCP/IP or other). P-870H/HW Series User’s Guide...
Page 318 System). TELNET Telnet is the login and terminal emulation protocol common on the Internet and in UNIX environments. It operates over TCP/IP networks. Its primary function is to allow users to log into remote host systems. P-870H/HW Series User’s Guide...
Page 319 NAME PROTOCOL PORT(S) DESCRIPTION TFTP Trivial File Transfer Protocol is an Internet file transfer protocol similar to FTP, but uses the UDP (User Datagram Protocol) rather than TCP (Transmission Control Protocol). VDOLIVE 7000 Another videoconferencing solution. P-870H/HW Series User’s Guide...
Page 320: Appendix F Legal Information
ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation. All rights reserved. Disclaimer ZyXEL does not assume any liability arising out of the application or use of any products, or software described herein.
Page 321 • To comply with FCC RF exposure compliance requirements, a separation distance of at least 20 cm must be maintained between the antenna of this device and all persons. 注意 ! 依據低功率電波輻射性電機管理辦法第十二條經型式認證合格之低功率射頻電機，非經許可，公司、商號或使用者均不得擅自變更頻率、加大功率或變更原設計之特性及功能。第十四條低功率射頻電機之使用不得影響飛航安全及干擾合法通信；經發現有干擾現象時，應立即停用，並改善至無干擾時方得繼續使用。前項合法通信，指依電信規定作業之無線電信。低功率射頻電機須忍受合法通信或工業、科學及醫療用電波輻射性電機設備之干擾。 P-870H/HW Series User’s Guide...
Page 322: Zyxel Limited Warranty
Repair or replacement, as provided under this warranty, is the exclusive remedy of the purchaser. This warranty is in lieu of all other warranties, express or implied, including any implied warranty of merchantability or fitness for a particular use or P-870H/HW Series User’s Guide...
Page 323 To obtain the services of this warranty, contact your vendor. You may also refer to the warranty policy for the region in which you bought the device at http:// www.zyxel.com/web/support_warranty_info.php. Registration Register your product online to receive e-mail notices of firmware upgrades and information at www.zyxel.com. P-870H/HW Series User’s Guide...
Page 324: Index
CTS (Clear to Send) 143, 309 Canonical Format Indicator See CFI CCMs certificate details date and time factory default default Certificate Authority default LAN IP address See CA. DHCP 51, 78, 81, 82, 181 certificates P-870H/HW Series User’s Guide...
Page 325 PPP over Ethernet IEEE 802.11i encapsulation IEEE 802.1Q ENET ENCAP IGMP 74, 78, 83 encryption version IGMP proxy IGMP v1 ESSID IGMP v2 Extended Service Set IDentification importing certificates Extended Service Set, See ESS 146, 150 P-870H/HW Series User’s Guide...
Page 326 Symmetric Link Trace Message, see LTM NAT example Link Trace Response, see LTR NAT traversal logs Network Address Translation, see NAT overview settings NNTP Loop Back Response, see LBR loopback operation humidity operation temperature P-870H/HW Series User’s Guide...
Page 327 157, 161, 165 static VLAN status indicators storage humidity RADIUS 245, 307 storage temperature message types subnet messages shared secret key subnet mask 82, 290 registration subnetting product Symmetric NAT related documentation Symmetric NAT, Outgoing remote management P-870H/HW Series User’s Guide...
Page 328 RADIUS application example WPA2-Pre-Shared Key WPA2-PSK 310, 311 Virtual Local Area Network See VLAN application example VLAN WPA-PSK Introduction application example number of possible VIDs priority frame status static VLAN ID VLAN Identifier See VID P-870H/HW Series User’s Guide...
Page 329 Index P-870H/HW Series User’s Guide...

This manual is also suitable for:

P-870hw series P-870hw-51a v2

ZyXEL Communications P-870H Series User Manual

About this User's Guide

Document Conventions

Safety Warnings

Contents Overview

Table of Contents

PART I Introduction

Chapter 1 Introducing the Zyxel Device

Chapter 2 Tutorials

Chapter 3 Introducing the Web Configurator

Security

Chapter 4 Status Screens

Part II: Network

Chapter 5 WAN Setup

Chapter 6 LAN Setup

Chapter 7 Wireless LAN

Chapter 8 Network Address Translation (NAT)

Part III: Security

Chapter 9 MAC Filter

Chapter 10 Firewall

Chapter 11 Certificate

Advanced

Part IV: Advanced

Chapter 12 Static Route

Chapter 13 Policy Forwarding

Chapter 14 RIP

Chapter 15 Quality of Service (Qos)

Chapter 16 Dynamic DNS Setup

Chapter 17 Remote Management

Chapter 18 Universal Plug-And-Play (Upnp)

Chapter 19 Parental Control

Chapter 20 Interface Group

Part V: Maintenance, Troubleshooting and Specifications

Chapter 21 System Settings

Chapter 22 Logs

Chapter 23 Tools

Chapter 24 Diagnostic

Chapter 25 Troubleshooting

Chapter 26 Product Specifications

Part VI: Appendices and Index

Appendix A Setting up Your Computer's IP Address

Appendix B Pop-Up Windows, Javascripts and Java Permissions

Appendix C IP Addresses and Subnetting

Appendix D Wireless Lans

Appendix E Common Services

Appendix F Legal Information

Index

Quick Links

Troubleshooting

Related Manuals for ZyXEL Communications P-870H Series

Summary of Contents for ZyXEL Communications P-870H Series