1. Manuals
  2. Brands
  3. ZyXEL Communications Manuals
  4. Gateway
  5. P-794H
  6. User manual

ZyXEL Communications P-794H User Manual

8 wire g.shdsl cpe with 4 port lan
Hide thumbs Also See for P-794H:
Table of Contents

Advertisement

Quick Links

Download this manual
P-794H
8 wire G.SHDSL CPE with 4 port LAN
Default Login Details
IP Address
http://192.168.1.1
Username
Password
Firmware Version S04.01
Edition 1, 1/2011
www.zyxel.com
www.zyxel.com
admin
1234
Copyright © 2011
ZyXEL Communications Corporation

Advertisement

Table of Contents
loading

Related Manuals for ZyXEL Communications P-794H

Summary of Contents for ZyXEL Communications P-794H

  • Page 1 P-794H 8 wire G.SHDSL CPE with 4 port LAN Default Login Details IP Address http://192.168.1.1 Username admin Password 1234 Firmware Version S04.01 Edition 1, 1/2011 www.zyxel.com www.zyxel.com Copyright © 2011 ZyXEL Communications Corporation...

  • Page 3: About This User's Guide

    About This User's Guide About This User's Guide Intended Audience This manual is intended for people who want to configure the P-794H using the web configurator. Tips for Reading User’s Guides On-Screen When reading a ZyXEL User’s Guide On-Screen, keep the following in mind: •...
  • Page 4 About This User's Guide The Technical Writing Team, ZyXEL Communications Corp., 6 Innovation Road II, Science-Based Industrial Park, Hsinchu, 30099, Taiwan. Need More Help? More help is available at www.zyxel.com. • Download Library Search for the latest product updates and documentation from this link. Read...
  • Page 5 Graphics in this book may differ slightly from the product due to differences in operating systems, operating system versions, or if you installed updated firmware/software for your device. Every effort has been made to ensure that the information in this manual is accurate. P-794H User’s Guide...

  • Page 6: Document Conventions

    Syntax Conventions • The P-794H may be referred to as the “device”, the “system” or the “product” in this User’s Guide. • Product labels, screen names, field labels and field choices are all in bold font.
  • Page 7 Document Conventions Icons Used in Figures Figures in this User’s Guide may use the following generic icons. The P-794H icon is not an exact representation of your device. P-794H Computer Notebook computer Server Firewall Telephone Switch Router P-794H User’s Guide...

  • Page 8: Safety Warnings

    Your product is marked with this symbol, which is known as the WEEE mark. WEEE stands for Waste Electronics and Electrical Equipment. It means that used electrical and electronic products should not be mixed with general waste. Used electrical and electronic equipment should be treated separately. P-794H User’s Guide...

  • Page 9: Table Of Contents

    DNS Client ..........................147 DNS Relay ..........................149 SNTP Client ..........................155 IGMP Snooping ........................159 Quality of Service (QoS) ......................163 Security ............................ 179 IP Routes ..........................199 Bridge ............................ 203 SHDSL Configuration ......................221 Troubleshooting ........................223 P-794H User’s Guide...
  • Page 10 Contents Overview P-794H User’s Guide...

  • Page 11: Table Of Contents

    2.3.1 Title Bar ........................29 2.3.2 Navigation Panel ......................29 2.3.3 Main Window ......................31 Chapter 3 Tutorials ........................... 33 3.1 Overview ..........................33 3.2 Configuring Point-to-Point Connection ................33 3.2.1 Set Up the CO ......................34 P-794H User’s Guide...
  • Page 12 5.4.5 Creating SNMP Community ..................62 5.4.6 Creating SNMP Trap Community ................63 5.5 The Prompt Screen ......................64 5.6 The Firmware Update Screen ..................... 65 5.7 The Backup/Restore Screen ....................67 5.8 The Restart Screen ......................68 P-794H User’s Guide...
  • Page 13 7.5.2 Edit a RFC 1483 Bridged WAN Connection ............. 108 7.5.3 Edit a PPPoA Routed WAN Connection ..............111 7.5.4 Edit a PPPoA Bridged WAN Connection ..............117 7.5.5 Edit a IPoA Routed WAN Connection ...............118 7.5.6 Edit a PPPoE Routed WAN Connection ..............120 P-794H User’s Guide...
  • Page 14 11.2 The DNS Relay Screen ....................149 11.3 DNS Relay Local LAN Database ..................150 11.4 Create New DNS Relay Local LAN Database Entry ............151 11.4.1 Edit Aliases ......................152 Chapter 12 SNTP Client ........................... 155 12.1 Overview .......................... 155 P-794H User’s Guide...
  • Page 15 15.2.4 Policies, Triggers, Intrusion Detection, Logging ............. 186 15.3 Technical Reference ......................194 15.3.1 NAT Definitions ...................... 194 15.3.2 What NAT Does ..................... 195 15.3.3 How NAT Works ..................... 195 15.3.4 Port Scanning ......................196 15.3.5 ICMP Flood Attack ....................196 P-794H User’s Guide...
  • Page 16 SHDSL Configuration ......................221 Chapter 19 Troubleshooting........................223 19.1 Power, Hardware Connections, and LEDs ..............223 19.2 P-794H Access and Login ....................224 19.3 Internet Access ........................ 225 Appendix A Product Specifications..................227 Appendix B Setting up Your Computer’s IP Address............233 Appendix C Pop-up Windows, JavaScript and Java Permissions........
  • Page 17 Table of Contents Appendix D IP Addresses and Subnetting ................267 Appendix E Services ......................277 Appendix F Legal Information ....................281 Index............................285 P-794H User’s Guide...
  • Page 18 Table of Contents P-794H User’s Guide...

  • Page 19: User's Guide

    User’s Guide...

  • Page 21: Introduction

    High-speed Digital Subscriber Line) is a symmetrical, bi-directional DSL service that provides data rates of 5.69 Mbps, 11.38Mbps, 17.07 Mbps, or 22.76Mbps over standard 2-wire, 4-wire, 6-wire, or 8-wire telephone lines. (The “G.” in “G.SHDSL” is defined by the G.991.2 ITU (International Telecommunication P-794H User’s Guide...

  • Page 22: High-Speed Point-To-Point Connections

    The Devices provide a simple, fast point-to-point connection between two geographically-dispersed networks. Connect one or both of the Device’s DSL ports to the DSL port(s) on another Device. Two connected DSL lines provide maximum transmission rate up to 22.76 Mbps on 8-wire. P-794H User’s Guide...

  • Page 23: Ways To Manage The Device

    1.4 LEDs The following figure shows the LEDs. Figure 3 LEDs The following table describes the LEDs. Table 1 LEDs COLOR STATUS DESCRIPTION Green The Device is receiving power and functioning properly. The system is not receiving power. P-794H User’s Guide...

  • Page 24: Turning The Power On/Off

    Reset switch at the back of the device to reload the factory-default configuration file. This means that you will lose all configurations that you had previously and the password will be reset to “1234”. 1.6.1 Using the Reset Switch Make sure the PWR LED is on. P-794H User’s Guide...
  • Page 25 To set the device back to the factory default settings, push the Reset switch down. The power of the Device will be shut down. Then push the Reset switch up and wait until the PWR and LAN LEDs (of corresponding connected LAN ports) are on. The default settings are restored. P-794H User’s Guide...
  • Page 26 Chapter 1 Introduction P-794H User’s Guide...

  • Page 27: Introducing The Web Configurator

    See the chapter on troubleshooting if you need to make sure these functions are allowed in Internet Explorer. 2.2 Accessing the Web Configurator Make sure your P-794H hardware is properly connected (refer to the Quick Start Guide). Launch your web browser.

  • Page 28: The Web Configurator Layout

    Chapter 2 Introducing the Web Configurator A password screen displays. To access the administrative web configurator and manage the P-794H, type the default username admin and password 1234 in the password screen and click OK. If you have changed the password, enter your password and click OK.

  • Page 29: Title Bar

    Logout: Click this icon to log out of the web configurator. 2.3.2 Navigation Panel Use the menu items on the navigation panel to open screens to configure P-794H features. The following tables describe each menu item. Table 3 Navigation Panel Summary...
  • Page 30 Use this screen to configure the prompt name which will be shown in the CLI prompt. Firmware Update Use this screen to upload firmware to your P-794H. Backup/Restore Use this screen to backup and restore your P-794H’s configuration (settings) or reset the factory default settings.

  • Page 31: Main Window

    VLAN Configuration Use this screen to configure the P-794H’s VLAN interfaces. STP port status Use this screen to view the P-794H’s STP (Spanning Tree Protocol) port status. Destination Based Use this screen to configure the P-794H’s static unicast Unicast Filtering entries.
  • Page 32 Chapter 2 Introducing the Web Configurator P-794H User’s Guide...

  • Page 33: Tutorials

    DSL ports. The P-794H on head- quarter’s side is the server and set as CO mode. The P-794H on branch office’s side is the client and set as CPE mode. The maximum transfer rate for the DSL connection between CO and CPE is 5696 Kbps and the minimum transfer rate is 1920 Kbps.

  • Page 34: Set Up The Co

    P-794Hs. 3.2.1 Set Up the CO Log in to the P-794H of the head-quarter that you want to configure as the CO. Click SHDSL > SHDSL Configuration and select CO in the Unit ID field. Select EFM_4-pair as the Wire Mode.

  • Page 35: Set Up The Cpe

    Click Apply to save your settings. 3.2.2 Set Up the CPE Log in to the client P-794H of branch office that you want to configure as the CPE. Click SHDSL > SHDSL Configuration and select CPE in the Unit ID field.

  • Page 36: Connect The P-794Hs

    In order to extend your Intranet and control traffic flowing directions, you may connect a router to the P-794H’s LAN. The router may be used to separate two department networks. This tutorial shows how to configure a static routing rule for two network routings.
  • Page 37 P-794H’s WAN default gateway by default. In this case, B will never receive the traffic. You need to specify a static routing rule on the P-794H to specify R as the router in charge of forwarding traffic to N2. In this case, the P-794H routes traffic from A to R and then R routes the traffic to B.This tutorial uses the following example IP...
  • Page 38 Click Apply. The route you just added shows on the Existing Routes list. Now B should be able to receive traffic from A. You may need to additionally configure B’s firewall settings to allow specific traffic to pass through. P-794H User’s Guide...

  • Page 39: Technical Reference

    Technical Reference...

  • Page 41: Status Screens

    Use the Status screens to look at the current setup and status of the system. The Status screen also provides detailed information of client list and packet statistics. 4.2 The Status Screen Use this screen to view the status of the P-794H. Click Status to open this screen. Figure 6 Status Screen P-794H User’s Guide...
  • Page 42 Number LAN Information IP Address This is the current IP address of the P-794H in the LAN. Click this to go to the screen where you can change it. IP Subnet This is the current subnet mask in the LAN.

  • Page 43: Dhcp Client List

    Interface This column displays each interface the P-794H has. Status This field indicates whether or not the P-794H is using the interface. For the WAN interface, this field displays Down (line is down) or Up (line is up or connected).
  • Page 44 This field shows the number of unknown VLANs that have been Discards discarded by the system. Clear Statistics Click Clear if you want to clear all the statistics. Flush Dynamic Click Flush if you want to flush all dynamically created entries. Entries P-794H User’s Guide...

  • Page 45: The Physical Port Screen

    Chapter 4 Status Screens 4.5 The Physical Port Screen You can view the connection status of the P-794H’s physical ports. Click on the port name to view the port configuration screen. Figure 8 Status > Physical Port The following table describes the fields in this screen.
  • Page 46 Click this to view the complete configuration and traffic statistics of attributes the SHDSL port. Unit Id This shows whether the P-794H is set in CO (Central Office) or CPE (Customer Premise Equipment) mode. Wire Mode This field shows the wire pair mode of the P-794H.
  • Page 47 This shows the annex mode: ANNEX_A uses DSL over POTS; ANNEX_B uses DSL over ISDN. Line Probe This shows whether line probe is enabled or disabled. The P-794H uses line probes to determine the best possible transmission rate. Cap List Style This shows the cap list style used.

  • Page 48: Advanced Shdsl Port Configuration Screen

    Click View advanced attributes to see the complete configuration and port traffic statistics. You can only configure the minimum and maximum line rate. Go to the SHDSL > SHDSL Configuration screen for other SHDSL configurations. Figure 10 Status > Physical Ports: SHDSL (Advanced) P-794H User’s Guide...

  • Page 49: Basic Ethernet Port Configuration Screen

    This shows whether this port’s speed is in full duplex mode. If yes, the value is true. If no, the value is false. Link Speed This shows the maximum link speed of this port. Link Status This displays the current port speed. P-794H User’s Guide...

  • Page 50: Advanced Ethernet Port Configuration Screen

    This field displays the number of octets received on this port. In Unicast Pkts This field displays the number of unicast packets received on this port. In Errors This field displays the number of errored packets received on this port. P-794H User’s Guide...

  • Page 51: Routing Table Screen

    Use the Routing Table screen to view the internal routing table. Click Status > Routing Table to show the following screen. If you want to create an IP route, go to the IP Routes > IP route Configuration screen. Figure 13 Status > Routing Table P-794H User’s Guide...

  • Page 52: Interface Statistics/Flushing Screen

    4.8 VLAN Port Screen You can view the frame statistics of the P-794H’s VLAN ports in the VLAN Port screen. Click Status > VLAN Port to show the following screen. Figure 14 Status > VLAN Port The following table describes the fields in this screen.

  • Page 53: Event Log Screen

    Chapter 4 Status Screens 4.9 Event Log Screen A log is a message about an event that occurred on your P-794H. Use the Event Log screen to see the logs for the categories that you select. Click Status > Event Log to show the following screen.
  • Page 54 Chapter 4 Status Screens P-794H User’s Guide...

  • Page 55: System Settings

    5.2 The Save Config Screen You can save your current configuration to Flash ROM. Click the System > Save config screen. Click the Save button to save your current configuration in the P-794H. After a few seconds, the configuration is P-794H User’s Guide...

  • Page 56: The Authentication Screen

    This field displays comments for the user account. Edit user Click this if you want to edit the user account’s name, password, authority, or comment. Create a new Click this if you want to create a new user account. user P-794H User’s Guide...

  • Page 57: Editing An Existing User Account

    (up to 27 characters). Note that as you type a password, the screen displays a (*) for each character you type. After you change the password, use the new password to access the P-794H. May login? If you want this user account to have the authority to log into the system, select true.

  • Page 58: Adding A New User Account

    Authentication screen. Authentication Setup Page 5.4 The SNMP Config Screen 5.4.1 About SNMP Simple Network Management Protocol (SNMP) is an application layer protocol used to manage and monitor TCP/IP-based devices. SNMP is used to exchange P-794H User’s Guide...
  • Page 59 Chapter 5 System Settings management information between the network management system (NMS) and a network element (NE). A manager station can manage and monitor the P-794H through the network via SNMP version one (SNMPv1), SNMP version 2c or SNMP version 3. The next figure illustrates an SNMP management operation. SNMP is only available if TCP/IP is configured.

  • Page 60: Supported Mibs

    • RFC 1157 SNMP v1 • RFC 2674 SNMPv2, SNMPv2c 5.4.3 SNMP Traps The P-794H sends traps to an SNMP manager when an event occurs. The following tables outline the SNMP traps by category. 5.4.4 Configuring SNMP Click System > SNMP Config to view the screen as shown. Use this screen to configure your SNMP settings.
  • Page 61 Write Access Select true to allow the SNMP manager using this string to create or edit MIBs (configure settings on the P-794H). Select false to allow the SNMP manager using this string to collect information from the P-794H.

  • Page 62: Creating Snmp Community

    Enabled Otherwise, select false. Version Select the SNMP version for the P-794H. The SNMP version on the P- 794H must match the version on the SNMP manager. Choose SNMP version 1 (v1) or version 2c (v2c). Note: SNMP version 2c is backwards compatible with SNMP version 1.

  • Page 63: Creating Snmp Trap Community

    Write Access Select true to allow the SNMP manager using this string to create or edit MIBs (configure settings on the P-794H). Select false to allow the SNMP manager using this string to collect information from the P-794H.

  • Page 64: The Prompt Screen

    Enabled Otherwise, select false. Version Select the SNMP version for the P-794H. The SNMP version on the P- 794H must match the version on the SNMP manager. Choose SNMP version 1 (v1) or version 2c (v2c). Note: SNMP version 2c is backwards compatible with SNMP version Click OK to save your changes.

  • Page 65: The Firmware Update Screen

    HTTP (Hypertext Transfer Protocol) and may take up to two minutes. After a successful upload, the system will reboot. Do NOT turn off the P-794H while firmware upload is in progress! Figure 25 System > Firmware Update The following table describes the labels in this screen.
  • Page 66 Click the Restart button. Figure 27 Firmware Upload Complete The P-794H automatically restarts in this time causing a temporary network disconnect. In some operating systems, you may see the following icon on your desktop.

  • Page 67: The Backup/Restore Screen

    Backup Configuration Backup Configuration allows you to back up (save) the P-794H’s current configuration to a file on your computer. Once your P-794H is configured and functioning properly, it is highly recommended that you back up your configuration file before making configuration changes. The backup configuration file will be useful in case you need to return to your previous settings.

  • Page 68: The Restart Screen

    System restart allows you to reboot the P-794H remotely without turning the power off. You may need to do this if the P-794H hangs, for example. Click System > Restart. Click Restart to have the P-794H reboot. This does not affect the P-794H's configuration.
  • Page 69 Figure 34 System > Restart You can also press the Reset button on the rear panel to reset the factory defaults of your P-794H. Refer to Section 1.6 on page 24 for more information on the Reset button.
  • Page 70 Chapter 5 System Settings P-794H User’s Guide...

  • Page 71: Lan Setup

    These networking devices are also known as hosts. Subnet Mask Subnet masks determine the maximum number of possible hosts on a network. You can also use subnet masks to divide one network into multiple sub-networks. P-794H User’s Guide...
  • Page 72 Chapter 6 LAN Setup DHCP A DHCP (Dynamic Host Configuration Protocol) server can assign your P-794H an IP address, subnet mask, DNS and other routing information when it's turned on. RIP (Routing Information Protocol) allows a router to exchange routing information with other routers.

  • Page 73: The Lan Connections Screen

    LAN service or change the default LAN port IP address. Click Configuration > LAN connections to show the following screen. The default service, eth1, is not shown and cannot be deleted. Figure 35 Configuration > LAN connections P-794H User’s Guide...

  • Page 74: Delete A Lan Connection

    This shows the method of how the services are created. By default command, all ports are created from CLI. If the service is created by the Web Configurator, this field will show WebAdmin. Port This shows the LAN port that the connection is using. P-794H User’s Guide...

  • Page 75: Create An Ethernet Routed Lan Connection

    Click this if you want to remove this connection. connection 6.3 Create an Ethernet Routed LAN Connection You can configure the P-794H as a multi-port router. To configure this, you must delete the default services since all ports have already been created under bridged mode. See Section 6.2.1 on page 74...

  • Page 76: Create Virtual Interface

    Use DHCP You can select if you want to use DHCP or enter the LAN IP address. If you select Use DHCP, your P-794H can assign IP addresses, an IP default gateway and DNS servers to Windows 95, Windows NT and other systems that support the DHCP client.
  • Page 77 Click this to edit the virtual interface. Delete Click this to remove the virtual interface. Edit the IP address and subnet mask of the virtual interface in the following screen. Click Apply to finish. Figure 41 Virtual Interface: Add P-794H User’s Guide...

  • Page 78: Create An Ethernet Bridged Lan Connection

    The following table describes the fields in this screen. Table 30 Configuration > LAN Connections: Create: Ethernet Bridged LABEL DESCRIPTION Ethernet Select Ethernet bridged as the LAN connection service. Configure Click this to confirm your setting and go to the next setup screen. P-794H User’s Guide...

  • Page 79: Change The Lan Port Ip Address

    6.6 Change the LAN Port IP Address Click Change LAN port IP address in the LAN Configurations screen. Use this screen to set the Local Area Network IP address and subnet mask of your P-794H. Follow these steps to configure your LAN settings.
  • Page 80 LABEL DESCRIPTION IP Address Enter the LAN IP address you want to assign to your P-794H in dotted decimal notation, for example, 192.168.1.1 (factory default). IP Subnet Mask Type the subnet mask of your network in dotted decimal notation, for example 255.255.255.0 (factory default).

  • Page 81: Advanced Lan Settings

    Enter the IP address for this interface. Mask Enter the subnet mask for this interface in dot decimal notation. The subnet mask indicates what part of the IP address is the same for all computers in the network. P-794H User’s Guide...

  • Page 82: Edit Tcp Mss Clamp

    Dhcp You can select if you want to use DHCP. If you select true, your P-794H can assign IP addresses, an IP default gateway and DNS servers to Windows 95, Windows NT and other systems that support the DHCP client.

  • Page 83: Edit Rip Versions

    6.7.3 Edit RIP Versions The RIP version controls the format and the broadcasting method of the RIP packets that the P-794H sends (it recognizes both formats when receiving). In this screen, you can configure whether you want to receive/send RIP V1/V2 routing information packets.

  • Page 84: Edit Nat

    Table 36 Edit NAT LABEL DESCRIPTION NAT Enabled Select true if you want to enable the NAT function. If not, select false. Change Click this to save your changes. Reset Click this to restore your previously saved settings. P-794H User’s Guide...

  • Page 85: Lan Technical Reference

    TCP/IP configuration at start-up from a server. You can configure the P-794H as a DHCP server or disable it. When configured as a server, the P-794H provides the TCP/IP configuration for the clients. If you turn DHCP service off, you must have another DHCP server on your LAN, or else the computer must be manually configured.

  • Page 86: Lan Tcp/Ip

    If the DNS Server fields in the DHCP Setup screen are set to DNS Relay, the P-794H tells the DHCP clients that it itself is the DNS server. When a computer sends a DNS query to the P-794H, the P-794H acts as a DNS proxy and forwards the query to the real DNS server learned through IPCP and relays the response back to the computer.
  • Page 87 The subnet mask specifies the network number portion of an IP address. Your P- 794H will compute the subnet mask automatically based on the IP address that you entered. You don't need to change the subnet mask computed by the P-794H unless you are instructed to do otherwise.
  • Page 88 Chapter 6 LAN Setup P-794H User’s Guide...

  • Page 89: Wan Setup

    (and service name) for user authentication. WAN IP Address The WAN IP address is an IP address for the P-794H, which makes it accessible from an outside network. It is used by the P-794H to communicate with other P-794H User’s Guide...

  • Page 90: Before You Begin

    Ethernet or ENET ENCAP encapsulation method). DHCP A DHCP (Dynamic Host Configuration Protocol) server can assign your P-794H an IP address, subnet mask, DNS and other routing information when it's turned on. Asynchronous Transfer Mode (ATM) is a LAN and WAN networking technology that provides high-speed data transfer.

  • Page 91: The Wan Connections Screen

    Chapter 7 WAN Setup 7.2 The WAN Connections Screen Use this screen to change your P-794H’s WAN settings. Click Configuration > WAN connections. Figure 51 Configuration > WAN connections The following table describes the fields in this screen. Table 37 Configuration > WAN connections...

  • Page 92: Delete A Wan Connection

    The Create Service screen is shown. Select the the WAN service type used by your ISP and click the Configure button. The configuration screens for each service type are different. Figure 53 WAN: Create Service P-794H User’s Guide...

  • Page 93: Add A Rfc 1483 Routed Wan Connection

    If your ISP provides you a static IP address, select this and enter the IP address here. Enable NAT on Select this option to activate NAT on this interface. this interface Apply Click this to save your changes. P-794H User’s Guide...

  • Page 94: Add A Rfc 1483 Bridged Wan Connection

    For instance, it encapsulates routed Ethernet frames into bridged Ethernet cells. MER requires that you specify a gateway IP address. You can get this information from your ISP. P-794H User’s Guide...
  • Page 95 IP address from the ISP. WAN IP address Fill in the default gateway IP address used in MER mode. Enable NAT on Select this option to activate NAT on this interface. this interface Apply Click this to save your changes. P-794H User’s Guide...

  • Page 96: Add A Pppoa Routed Wan Connection

    Subnet from IPCP Protocol Control Protocol (IPCP). If not, select disable. LCC header mode Select on if you want to enable LLC header so that the P-794H can transmit and receive packets containing LLC headers. Select off if you want to disable it.

  • Page 97: Add A Pppoa Bridged Wan Connection

    Select the authentication protocol type provided by your ISP. You can authentication/ choose from No authentication, PAP, or CHAP. PAP/CHAP The P-794H supports PAP (Password Authentication Protocol) and CHAP (Challenge Handshake Authentication Protocol). CHAP is more secure than PAP; however, PAP is readily available on more platforms. User name Enter the user name exactly as your ISP assigned.

  • Page 98: Add An Ipoa Routed Wan Connection

    Table 42 WAN Connection: PPPoA Bridged (continued) LABEL DESCRIPTION LCC header mode Select on if you want to enable LLC header so that the P-794H can transmit and receive packets containing LLC headers. Select off if you want to disable it.

  • Page 99: Add A Pppoe Routed Wan Connection

    The valid range for the VPI is 0 to 255. Enter the VPI assigned to you. The valid range for the VCI is 32 to 65535 (0 to 31 is reserved for local management of ATM traffic). Enter the VCI assigned to you. P-794H User’s Guide...

  • Page 100: Edit A Wan Connection

    Select this option to activate NAT on this interface. this interface LCC header mode Select on if you want to enable LLC header so that the P-794H can transmit and receive packets containing LLC headers. Select off if you want to disable it.

  • Page 101: Edit A Rfc 1483 Routed/Mer Wan Connection

    Table 45 RFC 1483 Routed/MER: Edit Service LABEL DESCRIPTION Creator Enter a descriptive name for the service creator. Description Enter a short description for the service. Change Click this to save your changes. Reset Click this to restore your previously saved settings. P-794H User’s Guide...
  • Page 102 This shows the version of the Channel SMNP If Index. Enabled Select true to enable this WAN service. If not, select false. Change Click this to save your changes. Reset Click this to restore your previously saved settings. P-794H User’s Guide...
  • Page 103 Max Cell Rate Type the Maximum Cell Rate in this field. Max Burst Size Maximum Burst Size (MBS) refers to the maximum number of cells that can be sent at the peak rate. Type the MBS in this field. P-794H User’s Guide...
  • Page 104 Click this to save your changes. Reset Click this to restore your previously saved settings. 7.5.1.4 Edit IP Interface Click the Edit IP Interface tab to edit the IP interface settings of the service. Figure 65 RFC 1483 Routed/MER: Edit IP Interface P-794H User’s Guide...
  • Page 105 Dhcp You can select if you want to use DHCP. If you select true, your P-794H can assign IP addresses, an IP default gateway and DNS servers to Windows 95, Windows NT and other systems that support the DHCP client.
  • Page 106 7.5.1.6 Edit RIP Versions The RIP version controls the format and the broadcasting method of the RIP packets that the P-794H sends (it recognizes both formats when receiving). In this screen, you can configure whether you want to receive/send RIP V1/V2 routing information packets.
  • Page 107 IP address known within another network. You can enable or disable the NAT function in this screen. Click the Edit NAT tab to show the following screen. Figure 68 RFC 1483 Routed/MER: Edit NAT P-794H User’s Guide...

  • Page 108: Edit A Rfc 1483 Bridged Wan Connection

    7.5.2.3 Edit ATM Channel Click the Edit Atm Channel tab to edit the ATM channel settings of the service. Refer to Section 7.5.1.3 on page 103 for detailed descriptions of the fields in this screen. P-794H User’s Guide...
  • Page 109 The following table describes the fields in this screen. Table 52 RFC 1483 Bridged: Edit Bridge Interface LABEL DESCRIPTION Leave Mode You can set the leave mode as Fast or Normal. Name Enter a descriptive name for the bridge interface. P-794H User’s Guide...
  • Page 110 This shows the number of unaccepted frames that have been Type Discards discarded. Enabled Select true to enable this WAN interface. If not, select false. Change Click this to save your changes. Reset Click this to restore your previously saved settings. P-794H User’s Guide...

  • Page 111: Edit A Pppoa Routed Wan Connection

    7.5.3 Edit a PPPoA Routed WAN Connection Click Edit next to an existing PPPoA Routed WAN connection. Then click on the tabs on top of the screen to configure detailed settings of the connection. Figure 72 PPPoA Routed: Edit P-794H User’s Guide...
  • Page 112 Refer to Section 7.5.1.1 on page 101 for detailed descriptions of the fields in this screen. 7.5.3.2 Edit PPP Click the Edit PPP tab to edit the PPP settings of the service. Figure 73 PPPoA Routed: Edit PPP P-794H User’s Guide...
  • Page 113 Connect State Select the connect state of the connection from the drop-down list. Server Select true if you want the P-794H to act as a server. If not, select false. Create Route Select true if you want to create a route for directing packets to the remote end of the PPP link.
  • Page 114 This shows the version of the Channel SMNP If Index. Enabled Select true to enable this WAN service. If not, select false. Change Click this to save your changes. Reset Click this to restore your previously saved settings. P-794H User’s Guide...
  • Page 115 Chapter 7 WAN Setup 7.5.3.3 Edit PPP (Advanced) Click View advanced attributes in the Edit PPP screen for detailed configurations of the service. Figure 74 PPPoA Routed: Edit PPP (Advanced) P-794H User’s Guide...
  • Page 116 P-794H can transmit and receive packets containing HDLC headers. Select false if you want to disable it. Select true if you want to enable LLC header so that the P-794H can transmit and receive packets containing LLC headers. Select false if you want to disable it.

  • Page 117: Edit A Pppoa Bridged Wan Connection

    7.5.4.2 Edit PPP Click the Edit PPP tab to edit the PPP settings of the service. Refer to Section 7.5.3.2 on page 112 for detailed descriptions of the fields in this screen. P-794H User’s Guide...

  • Page 118: Edit A Ipoa Routed Wan Connection

    Figure 76 IPoA Routed: Edit 7.5.5.1 Edit Service Click the Edit Service tab to edit the creator name and description of the service. Refer to Section 7.5.1.1 on page 101 for detailed descriptions of the fields in this screen. P-794H User’s Guide...
  • Page 119 Enter the ATM ARP server you want to use. If you are configuring the P-794H as the ATM ARP server, enter “here”. If you want another device to be the ATM ARP server, enter the IP address of that device.

  • Page 120: Edit A Pppoe Routed Wan Connection

    7.5.6 Edit a PPPoE Routed WAN Connection Click Edit next to an existing PPPoE Routed WAN connection. Then click on the tabs on top of the screen to configure detailed settings of the connection. Figure 78 PPPoE Routed: Edit P-794H User’s Guide...
  • Page 121 Chapter 7 WAN Setup 7.5.6.1 Edit Service Click the Edit Service tab to edit the creator name and description of the service. Refer to Section 7.5.1.1 on page 101 for detailed descriptions of the fields in this screen. P-794H User’s Guide...
  • Page 122 Chapter 7 WAN Setup 7.5.6.2 Edit PPPoE Click the Edit PPPoE tab to edit the PPPoE settings of the service. Figure 79 PPPoE Routed: Edit PPPoE P-794H User’s Guide...
  • Page 123 Connect State Select the connect state of the connection from the drop-down list. Server Select true if you want the P-794H to act as a server. If not, select false. Create Route Select true if you want to create a route for directing packets to the remote end of the PPP link.
  • Page 124 IP address to the local DNS client to establish a connection. If not, select false. Lcp Echo Every You can configure the interval (in seconds) for the P-794H to send an LCP echo request frame. Auto Connect Select true if you want to establish a connection when starting up and to automatically re-establish it when disconnected by the ISP.
  • Page 125 Chapter 7 WAN Setup 7.5.6.3 Edit PPPoE (Advanced) Click View advanced attributes in the Edit PPPoE screen for detailed configurations of the service. Figure 80 PPPoE Routed: Edit PPPoE (Advanced) P-794H User’s Guide...
  • Page 126 P-794H can transmit and receive packets containing HDLC headers. Select false if you want to disable it. Select true if you want to enable LLC header so that the P-794H can transmit and receive packets containing LLC headers. Select false if you want to disable it.

  • Page 127: Wan Technical Reference

    This section provides some technical background information about the topics covered in this chapter. 7.6.1 Encapsulation Be sure to use the encapsulation method required by your ISP. The P-794H supports the following methods. 7.6.1.1 ENET ENCAP The MAC Encapsulated Routing (MER) Link Protocol (ENET ENCAP) is only implemented with the IP network protocol.

  • Page 128: Multiplexing

    By implementing PPPoE directly on the P-794H (rather than individual computers), the computers on the LAN do not need PPPoE software installed, since the P-794H does that part of the task. Furthermore, with NAT, all of the LANs’ computers will have access.

  • Page 129: Vpi And Vci

    In this case you can have either a static or dynamic IP. For a static IP you must fill in all the IP Address and Gateway IP Address fields as supplied by your ISP. However for a dynamic IP, the P-794H acts as a DHCP client on the WAN port and P-794H User’s Guide...

  • Page 130: Traffic Redirect

    LAN. Use IP alias to configure the LAN into two or three logical networks with the P-794H itself as the gateway for each LAN network. Put the protected LAN in one subnet (Subnet 1 in the following figure) and the backup gateway in another subnet (Subnet 2).

  • Page 131: Traffic Shaping

    The following figure illustrates the relationship between PCR, SCR and MBS. Figure 83 Example of Traffic Shaping 7.8.1 ATM Traffic Classes These are the basic ATM traffic classes defined by the ATM Forum Traffic Management 4.0 Specification. P-794H User’s Guide...

  • Page 132: Spanning Tree Protocol (Stp)

    7.8.2.1 STP Terminology The root bridge is the base of the spanning tree; it is the bridge with the lowest identifier value (MAC address). P-794H User’s Guide...
  • Page 133 Hello BPDU after a predefined interval (Max Age), the bridge assumes that the link to the root bridge is down. This bridge then initiates negotiations with other bridges to reconfigure the network to re-establish a valid network topology. P-794H User’s Guide...
  • Page 134 All BPDUs are received and processed. Learning All BPDUs are received and processed. Information frames are submitted to the learning process but not forwarded. Forwarding All BPDUs are received and processed. All information frames are received and forwarded. P-794H User’s Guide...

  • Page 135: Dhcp Server

    • DHCP Server: The P-794H acts as a DHCP server for the LAN. • DHCP Relay: The P-794H acts as a DHCP relay for the LAN, allowing it to pass- through IP addresses assigned to LAN devices from the ISP servers.

  • Page 136: Enable Dhcp Server

    Chapter 8 DHCP Server 8.2 Enable DHCP Server The DHCP server feature allows the P-794H to dynamically assign IP addresses to DHCP clients on the LAN. If the DHCP server is disabled, you need to manually assign a static IP address to computers on your network. See Appendix B on page for more information on configuring a static IP on your computer.
  • Page 137 You cannot configure a new interface if all IP interfaces are used by DHCP server or relay. Dhcp Server Interface Connections See DHCP Click this if you want to see the DHCP server lease status. Server Connections P-794H User’s Guide...

  • Page 138: Existing Dhcp Server Subnets

    Get subnet from IP Select the name of the IP interface to bind the appropriate IP interface address and subnet mask. Delete? If you want to remove this DHCP server subnet, select the delete checkbox and click Apply. P-794H User’s Guide...

  • Page 139: Add/Edit Dhcp Server Subnet

    The following table describes the labels in this screen. Table 63 Add/Edit DHCP Server Subnet LABEL DESCRIPTION Parameters for this subnet Subnet Value Enter the subnet value for this DHCP server interface. Subnet Mask Enter the subnet mask for this DHCP server interface. P-794H User’s Guide...
  • Page 140 Enter the default duration in minutes before the P-794H requests a new IP address from the DHCP server. IP addresses to be available on this subnet Start of address range Enter the IP address from which the P-794H begins allocating IP addresses. End of address range Enter the IP address from which the P-794H stops allocating IP addresses.
  • Page 141 Enter the value that should be sent to DHCP clients if they requested from the choosen option above. Click this to confirm your settings. Reset Click this to restore your previously saved settings. Cancel Click this to return to the previous screen without saving. P-794H User’s Guide...
  • Page 142 Chapter 8 DHCP Server P-794H User’s Guide...

  • Page 143: Dhcp Relay

    H A P T E R DHCP Relay Configure DHCP relay on the P-794H if the DHCP clients and the DHCP server are not in the same broadcast domain. During the initial IP address leasing, the P- 794H helps to relay network information (such as the IP address and subnet mask) between a DHCP client and a DHCP server.

  • Page 144: Dhcp Relay Interfaces

    If there is an available IP interface, select its name that you want to interface configure and click Add to add it to the DHCP relay interfaces list above. You cannot configure a new interface if all IP interfaces are used by DHCP server or relay. P-794H User’s Guide...

  • Page 145: Edit Dhcp Server List

    You can configure a new DHCP server which will assin an IP address back to the DHCP clients on the LAN. Enter the IP address of the DHCP server and click Apply. The DHCP server will be added to the DHCP server list. Figure 92 Add New DHCP Server P-794H User’s Guide...
  • Page 146 Chapter 9 DHCP Relay P-794H User’s Guide...

  • Page 147: Dns Client

    IP address of a networking device before you can access it. 10.2 The DNS Client Screen Use this screen to specify the DNS that the P-794H will use for Domain Name resolution. Click Configuration > DNS Client. The screen appears as shown. Figure 93 Configuration > DNS Client...
  • Page 148 Enter a search string in this field. Click Add and the string will appear on the Domain search order table. Click the Delete button next to a string to remove it. You can add a maximum of six search strings in the list. P-794H User’s Guide...

  • Page 149: Dns Relay

    DNS Relay 11.1 Overview When DNS relay is enabled, the P-794H act as a DNS proxy only when the ISP uses IPCP DNS server extensions. The P-794H tells the DHCP clients on the LAN that the P-794H itself is the DNS server. When a computer on the LAN sends a DNS query to the ZyXEL Device, the ZyXEL Device forwards the query to the real DNS server learned through IPCP and relays the response back to the computer.

  • Page 150: Dns Relay Local Lan Database

    You can view and edit the list of hosts and IP addresses present on the LAN. Specify the LAN domain name in the Local domain name field and click Apply. Click DNS relay LAN database in the DNS Relay screen to show the following. Figure 95 DNS Relay Local LAN Database P-794H User’s Guide...

  • Page 151: Create New Dns Relay Local Lan Database Entry

    Enter the name of the local host that you want to add. IP address Enter the IP address of the local host that you want to add. The new entry will be added to the Local host list after you click Apply. P-794H User’s Guide...

  • Page 152: Edit Aliases

    You can view and add additional host name aliases and IP address aliases in this screen. Click Extra host names and IP addresses in the Local host list section to show the following. Figure 97 Edit Aliases P-794H User’s Guide...
  • Page 153 IP address aliases list. If you want to delete this entry, select the Delete? checkbox next to it and click Apply. Apply Click this to confirm your settings. Reset Click this to restore your previously saved settings. P-794H User’s Guide...
  • Page 154 Chapter 11 DNS Relay P-794H User’s Guide...

  • Page 155: Sntp Client

    SNTP Client 12.1 Overview Use the SNTP Client screen to configure the time settings on the P-794H. You can configure the P-794H to get the time and date information from a time server using Simple Network Time Protocol (SNTP). You can also configure two servers. If the first one is down, the Switch will try to connect to the second one.

  • Page 156: The Sntp Client Screen

    Chapter 12 SNTP Client 12.2 The SNTP Client Screen Click Configuration > SNTP Client. The screen appears as shown. Figure 98 Configuration > SNTP Client P-794H User’s Guide...
  • Page 157 Enter SNTP transmit Enter the number of packet retry attempts when no response is packet retries value received from a time server. The P-794H will send another request for synchronization after a timeout. Enter SNTP automatic Specify the time interval that the P-794H automatically sends a resynchronization synchronization request.
  • Page 158 Chapter 12 SNTP Client P-794H User’s Guide...

  • Page 159: Igmp Snooping

    RFC 1112, RFC 2236 and RFC 3376 for information on IGMP versions 1, 2 and 3 respectively. IGMP Snooping A P-794H can passively snoop on IGMP packets transferred between IP multicast routers/switches and IP multicast hosts to learn the IP multicast group membership. It checks IGMP packets passing through it, picks out the group registration information, and configures multicasting accordingly.

  • Page 160: The Igmp Snooping Screen

    Enter the last member query interval value. mcastRouterTimeout Enter the aging time for multicast interfaces. queryInterval Enter the query interval value. queryResponseInterval Enter the query response interval. robustnessVariable Enter the robustness variable value. V1TimerVal Enter the V1 timer value. P-794H User’s Guide...
  • Page 161 Table 72 Configuration > IGMP Snooping Configuration (continued) LABEL DESCRIPTION IGMP Mode Choose the mode for IGMP Snoop. Select snooponly to have the device passively learn multicast groups. Select proxy to have the device use IGMP proxy. Click this to confirm your settings. P-794H User’s Guide...
  • Page 162 Chapter 13 IGMP Snooping P-794H User’s Guide...

  • Page 163: Quality Of Service (Qos)

    Quality of Service (QoS) 14.1 Overview Use the QoS screens to set up your P-794H to use QoS for traffic management. Quality of Service (QoS) refers to both a network’s ability to deliver data with minimum delay, and the networking methods used to control bandwidth. QoS allows the P-794H to group and prioritize application traffic and fine-tune network performance.
  • Page 164 Strictly Priority Queuing Strictly Priority Queuing (SPQ) services queues based on priority only. As traffic comes into the P-794H, traffic on the highest priority queue, Q7 is transmitted first. When that queue empties, traffic on the next highest-priority queue, Q6 is transmitted until Q6 empties, and then traffic is transmitted on Q5 and so on.

  • Page 165: The Classifier Configuration Screen

    (such as Telnet) to form a flow. You can give different priorities to traffic that the P-794H forwards out through the WAN interface. Give high priority to voice and video to make them run more smoothly.

  • Page 166: Edit Qos Classifier

    Enter the meter instance id to assign which meter to process the packet. instance id Delete Select the checkbox and click OK if you want to delete this classifier rule. Reset Click this to restore your previously saved settings. Click this to save your changes. P-794H User’s Guide...

  • Page 167: The Meter Configuration Screen

    This shows the Peak Burst Size (PBS) in bytes. This shows the Excess Burst Size (EBS) in bytes. Delete Select the checkbox and click OK if you want to delete this meter profile. Click this to save your changes. Add a New Meter Profile P-794H User’s Guide...

  • Page 168: The Ald Configuration Screen

    Click QoS > ALD to display the ALD Configuration screen. Enter the desired name and specific values into the criteria fields to create the estimation of the drawing for the packet dropping probabilities. Figure 103 QoS > ALD P-794H User’s Guide...

  • Page 169: The Scheduler Configuration Screen

    Click this to save your changes. 14.5 The Scheduler Configuration Screen You can use the Scheduler Configuration screen to monitor the network bandwidth management. It adds the precedence to the packet with a higher or lower priority levels. P-794H User’s Guide...
  • Page 170 Set profile Enter a descriptive name for your scheduler profile. The profile will show name on the Scheduler Profiles list when you click Apply. Apply Click this to save your changes. P-794H User’s Guide...

  • Page 171: Edit A Priority Queuing Scheduler Profile

    To edit a WFQ profile, click Edit next to the WFQ profile to display the following screen. You can assign weight percentage to each queue as well as the ALD profile to determine their degree of conditions. P-794H User’s Guide...

  • Page 172: Transport Classifier & Scheduler Configuration

    OK to save the configuration. To attach an existing scheduler profile/meter profile to an existing transport, use the drop-down list corresponded to the transport and choose which scheduler to add. Click OK to save the configuration. P-794H User’s Guide...

  • Page 173: Technical Reference

    DiffServ-compliant network devices along the route based on the application types and traffic flow. Packets are marked with DiffServ Code Points (DSCPs) indicating the level of service desired. This allows the intermediary DiffServ-compliant network devices P-794H User’s Guide...

  • Page 174: Ieee 802.1Q Tag

    The following shows how tokens work with packets: • A packet can be transmitted if the number of tokens in the bucket is equal to or greater than the size of the packet (in bytes). P-794H User’s Guide...

  • Page 175: Single Rate Three Color Marker

    • If there are no tokens in the bucket, the P-794H stops transmitting until enough tokens are generated. • If not enough tokens are available, the P-794H treats the packet in either one of the following ways: In traffic shaping: •...

  • Page 176: Two Rate Three Color Marker

    • After a packet is transmitted, a number of tokens corresponding to the packet size is removed from the CBS bucket. • If there are not enough tokens in the CBS bucket, the P-794H checks the EBS bucket. The packet is marked yellow if there are sufficient tokens in the EBS bucket.
  • Page 177 • Red (high loss priority level) packets are dropped. • Yellow (medium loss priority level) packets are dropped if there is congestion on the network. • Green (low loss priority level) packets are forwarded. P-794H User’s Guide...
  • Page 178 Chapter 14 Quality of Service (QoS) P-794H User’s Guide...

  • Page 179: Security

    Trigger port forwarding solves this problem by allowing computers on the LAN to dynamically take turns using the service. The P-794H records the IP address of a LAN computer that sends traffic to the WAN to request a service with a specific...

  • Page 180: The Security Interface Configuration Screen

    Chapter 15 Security port number and protocol (a "trigger" port). When the P-794H's WAN port receives a response with a specific port number and protocol ("open" port), the P-794H forwards the traffic to the LAN IP address of the computer that sent the request.
  • Page 181 You can configure your security level if Security and Firewall are enabled. Select the security level as none, high, medium, or low. Click Change Level to save your change. Change Level Click this to save your level change. P-794H User’s Guide...

  • Page 182: Add Security Interface

    You can configure NAT settings in this screen. 15.2.3.1 NAT Configuration Follow the steps below to enable NAT: Enable Security in the Security State section. Create at least two different security interface types based on existing LAN services. P-794H User’s Guide...
  • Page 183 NAT is enabled. See Section 15.2.3.2 on page 183 for more information. 15.2.3.2 Advanced NAT Configuration Click Advanced NAT Configuration after you have enabled NAT in the Security Interfaces screen to show the following. Click Add Global Address Pool to P-794H User’s Guide...
  • Page 184 Figure 111 Advanced NAT Configuration NAT Global Address Pools You can create a pool of network IP addresses that are visible outside your network. Click Add Global Address Pool in the Advanced NAT Configuration screen. Figure 112 Global Address Pools P-794H User’s Guide...
  • Page 185 IP address inside the network. Mapping is based on transport type and port number. Click Add Reserved Mapping in the Advanced NAT Configuration screen. Figure 113 NAT Reserved Mapping P-794H User’s Guide...

  • Page 186: Policies, Triggers, Intrusion Detection, Logging

    Click this to refreshed and the reserved mapping is added to the NAT Mapping configuration. 15.2.4 Policies, Triggers, Intrusion Detection, Logging You can configure firewall policies in the Policies, Triggers, Intrusion Detection, Logging section. Click on the policy you want to configure. Figure 114 Policies, Triggers, Intrusion Detection, Logging P-794H User’s Guide...
  • Page 187 Click Port Filters in the Security Policy Configuration screen. Click Add TCP or UDP Filter to display the following. You can forward incoming service requests to the server(s) on your local network. Figure 116 TCP/UDP Port Filter P-794H User’s Guide...
  • Page 188 The following table describes the labels in this screen. Table 85 Raw IP Filter LABEL DESCRIPTION Source address Enter the source IP address and subnet mask. Destination Enter the destination IP address and subnet mask. address IP Protocol Specify the protocol number here. P-794H User’s Guide...
  • Page 189 255.255.255.0. If a single IP address is to be filtered, use the specific IP mask address, for example, 255.255.255.255. Direction Specify if you want to allow inbound and/or outbound traffic. Apply Click this to save your settings. P-794H User’s Guide...
  • Page 190 This shows whether multi-level UDP and TCP session chaining is Session allowed. Chaining Binary Address This shows whether binary address replacement is to be used on an Replacement existing trigger. Address This shows what type of address replacement is set on a trigger. Translation Type P-794H User’s Guide...
  • Page 191 If not, select Block. Chaining You must allow Enable Session Chaining to enable this function. Binary Address Select Allow to permit binary address replacement to be used on an Replacement existing trigger. If not, select Block. P-794H User’s Guide...
  • Page 192 Enabling the Blacklist will block traffics from an external host when it has detected one of the following types of attack: PROTOCOL ATTACK NAME Attack Name Ascend Kill WinNuke (Port scan attack) Xmas Tree Scan (Port scan attack) P-794H User’s Guide...
  • Page 193 Logging if you want to disable it. Click Enable Security Logging if Logging you want to ensable it. Security Event Logging States Logging Type This show the type of logging. Status This shows the status of the logging. P-794H User’s Guide...

  • Page 194: Technical Reference

    15.3.1 NAT Definitions Inside/outside denotes where a host is located relative to the P-794H, for example, the computers of your subscribers are the inside hosts, while the web servers on the Internet are the outside hosts.

  • Page 195: What Nat Does

    IP source address (and TCP or UDP source port numbers for Many-to-One and Many-to-Many Overload NAT mapping) in each packet and then forwards it to the Internet. The P-794H keeps track of the original addresses and port numbers so incoming reply packets can have their original values restored.

  • Page 196: Port Scanning

    If an attacker (A) spoofs the source IP address of the ICMP echo request packet, the resulting ICMP traffic will not only saturate the receiving network (B), but the network of the spoofed source IP address (C). Figure 124 Smurf Attack P-794H User’s Guide...

  • Page 197: Tcp Syn Flood Attack

    SYN-ACKs are only moved off the queue when an ACK comes back or when an internal timer ends the three-way handshake. Once the queue is full, the system will ignore all incoming SYN requests, making the system unavailable for other users. Figure 126 SYN Flood P-794H User’s Guide...

  • Page 198: Land Attack

    In a LAND attack, hackers flood SYN packets into a network with a spoofed source IP address of the network itself. This makes it appear as if the computers in the network sent the packets to themselves, so the network is unavailable while they try to respond to themselves. P-794H User’s Guide...

  • Page 199: Ip Routes

    16.1 Overview The P-794H usually uses the default gateway to route outbound traffic from computers on the LAN to the Internet. To have the P-794H send data to devices not reachable through the default gateway, use static routes. For example, the next figure shows a computer (A) connected to the P-794H’s LAN interface.
  • Page 200 Click this to configure advanced options of a this route. Options Apply Click this to save your changes. Reset Click this to restore your previously saved settings. Create new IP Click this to create a new IP route. V4Route P-794H User’s Guide...

  • Page 201: Add/Edit Ip Route

    Select true if you want the route to be advertised via RIP. If not, select false. Reset Click this to restore your previously saved settings. Apply Click this to save your changes. Cancel Click this to return to the previous screen without saving. P-794H User’s Guide...
  • Page 202 Chapter 16 IP Routes P-794H User’s Guide...

  • Page 203: Bridge

    0B:0B:0B:0B:0B:0B in the table. There is no entry yet, so the bridge broadcasts the packet on ports 1, 3, and 4. Table 93 Example: Bridge Table After Computer A Sends a Packet to Computer B MAC ADDRESS PORT 0A:0A:0A:0A:0A:0A P-794H User’s Guide...

  • Page 204: Global Bridge Configuration

    Figure 130 Global Bridge Configuration Each field is described in the following table. Table 95 Global Bridge Configuration LABEL DESCRIPTION Bridge Mac Address This shows the bridge MAC address. Number of Ports This shows the number of Ethernet bridge interfaces configured. P-794H User’s Guide...
  • Page 205 PRIORITY BASED: Traffic class mapping will only occur if the traffic class has not already been set. Filter Unknown If this field is set to enable, the P-794H filters out unknown VLAN VLAN frames. To disable the filter, select an option from the drop-down list and choose Disabled.

  • Page 206: Bridge Interfaces

    Action Click OK to confirm and save your settings. Click Reset to restore your previously saved settings. 17.2.1 Priority Map Click Priority Map for a specific bridge interface in the Bridge Interfaces screen to show the following. P-794H User’s Guide...

  • Page 207: User Priority To Regenerated Priority Map

    Traffic Class mapping, as well as being set in the VLAN tag of the outgoing frame. Figure 133 User Priority to Regenerated Priority Map P-794H User’s Guide...

  • Page 208: Regenerated Priority To Traffic Class Map

    LABEL DESCRIPTION Name This shows the VLAN interface name. VLAN Id This the VLAN ID that the user wants to assign to the VLAN name. The valid values for the VLAN ID range between 1 and 4094. P-794H User’s Guide...

  • Page 209: Edit Tagged Ports

    Port Type Select Tagged from the drop-down list. Click this to confirm and save your settings. Reset Click this to restore your previously saved settings. Cancel Click this to return to the previous screen without saving. P-794H User’s Guide...

  • Page 210: Edit Untagged Ports

    Port Type Select Untagged from the drop-down list. Click this to confirm and save your settings. Reset Click this to restore your previously saved settings. Cancel Click this to return to the previous screen without saving. P-794H User’s Guide...

  • Page 211: Create New Vlan

    Click this to return to the previous screen without saving. 17.3.4 MGMT VLAN Configuration Click Create new VLAN in the VLANs screen. Go to the MGMT VLAN Configuration section. Create a VLAN group where the VLAN id corresponds to P-794H User’s Guide...

  • Page 212: Spanning Tree Configuration

    17.4 Spanning Tree Configuration Click Bridge > STP port status to show the following screen. You can view the status of the spanning bridge interfaces. See Section 7.5.2.5 on page 111 on the STP configurations. Figure 140 Spanning Tree Configuration P-794H User’s Guide...

  • Page 213: Destination Based Unicast Filtering

    Click this to confirm and save your settings. Reset Click this to restore your previously saved settings. Create new Click this to add a new unicast entry. See Section 17.5.2 on page 215 Unicast Entry for more information. P-794H User’s Guide...

  • Page 214: Edit Egress Ports

    Add Egress Port Name Enter the name of the egress port. Click this to confirm and save your settings. Reset Click this to restore your previously saved settings. Cancel Click this to return to the previous screen without saving. P-794H User’s Guide...

  • Page 215: Add Unicast Entry

    LAN or VLAN. Multicast filtering is the system by which end- stations only receive multicast traffic if they register to join specific multicast groups. With multicast filtering, network devices only forward multicast traffic to the ports that are connected to registered end-stations. P-794H User’s Guide...
  • Page 216 Click this to confirm and save your settings. Reset Click this to restore your previously saved settings. Create new Click this to add a new multicast entry. See Section 17.6.2 on page Multicast Entry for more information. P-794H User’s Guide...

  • Page 217: Edit Egress Ports

    Select the port that you want to add as an egress port. Click this to confirm and save your settings. Reset Click this to restore your previously saved settings. Cancel Click this to return to the previous screen without saving. P-794H User’s Guide...

  • Page 218: Add Multicast Entry

    MAC Address Enter the MAC address of the destination. Click this to confirm and save your settings. Reset Click this to restore your previously saved settings. Cancel Click this to return to the previous screen without saving. P-794H User’s Guide...

  • Page 219: Forward All/Unregistered Entries

    This shows the MAC address of the destination. Egress Ports This shows the egress port(s) that the system forward to. Edit Egress Ports Click Edit to delete or add egress port(s). See Section 17.6.1 on page 217for more information. P-794H User’s Guide...
  • Page 220 Chapter 17 Bridge P-794H User’s Guide...

  • Page 221: Shdsl Configuration

    H A P T E R SHDSL Configuration Use the SHDSL screen to configure the SHDSL port on the P-794H. You can also view the status of the SHDSL port. Click SHDSL > SHDSL Configuration to show the following. Figure 148 SHDSL Configuration...
  • Page 222 LABEL DESCRIPTION Unit ID You can set the P-794H to work in CPE or CO mode. WireMode The wire mode allows you to physically bundle two SHDSL ports into a single 4-wire connection. The 4-wire mode is described in ITU-T G.991.2.

  • Page 223: Troubleshooting

    Make sure you are using the power adaptor or cord included with the P-794H. Make sure the power adaptor or cord is connected to the P-794H and plugged in to an appropriate power source. Make sure the power source is turned on.

  • Page 224: P-794H Access And Login

    If you changed the IP address and have forgotten it, you might get the IP address of the P-794H by looking up the IP address of the default gateway for your computer. To do this in most Windows computers, click Start > Run, enter cmd, and then enter ipconfig.

  • Page 225: Internet Access

    P-794H. See Appendix B on page 233. Reset the device to its factory defaults, and try to access the P-794H with the default IP address. See Section 1.6 on page If the problem continues, contact the network administrator or vendor, or try one of the advanced suggestions.
  • Page 226 There might be a lot of traffic on the network. Look at the LEDs, and check Section 1.4 on page 23. If the P-794H is sending or receiving a lot of information, try closing some programs that use the Internet, especially peer-to-peer applications. Turn the P-794H off and on.

  • Page 227: Appendix A Product Specifications

    Line coding of 4 (16 PAM), 5 (32 PAM) or 6 (64 PAM) bits per symbol TC PAM Line Probing (ITU-T G.991.2) Bridging Functionality Transparent bridging (IEEE 802.1D) Bridged PDU encapsulation (per RFC2684) Spanning Tree Bridge IEEE 802.1D IGMP Snooping support P-794H User’s Guide...
  • Page 228 IP over ATM (IPoA, RFC1483 & RFC1577) Ethernet over ATM (EoA, RFC2684 -superseding RFC1483) Supported Client/ TFTP, SNTP v4 client Server Applications DHCP client, server and relay supporting (RFC2131), including DHCP server support DNS client, relay Local DNS, Telnet, HTTP server Syslog P-794H User’s Guide...
  • Page 229 Configuration Backup & Make a copy of the P-794H’s configuration. You can put it back Restoration on the P-794H later if you decide to revert back to an earlier configuration. Network Address Each computer on your network must have its own unique IP Translation (NAT) address.
  • Page 230 Internet. DHCP (Dynamic Host Use this feature to have the P-794H assign IP addresses, an IP Configuration Protocol) default gateway and DNS servers to computers on your network.
  • Page 231 Appendix A Product Specifications DSL Connector The 2 DSL ports (RJ-11) of the P-794H use 6P4C connectors and cables. The cable has 4 wires and are used for 2 pairs of DSL connection. Figure 149 DSL Connector PIN 1 Not used...
  • Page 232 Appendix A Product Specifications P-794H User’s Guide...

  • Page 233: Appendix B Setting Up Your Computer's Ip Address

    "communicate" with your network. If you manually assign IP information instead of using dynamic assignment, make sure that your computers have IP addresses that place them in the same subnet as the P-794H’s LAN port. P-794H User’s Guide...
  • Page 234 In the Network window, click Add. Select Adapter and then click Add. Select the manufacturer and model of your network adapter and then click OK. If you need TCP/IP: In the Network window, click Add. Select Protocol and then click Add. P-794H User’s Guide...
  • Page 235 • If your IP address is dynamic, select Obtain an IP address automatically. • If you have a static IP address, select Specify an IP address and type your information into the IP Address and Subnet Mask fields. Figure 151 Windows 95/98/Me: TCP/IP Properties: IP Address P-794H User’s Guide...
  • Page 236 Click OK to save and close the TCP/IP Properties window. Click OK to close the Network window. Insert the Windows CD if prompted. Turn on your P-794H and restart your computer when prompted. Verifying Settings Click Start and then Run.
  • Page 237 The following example figures use the default Windows XP GUI theme. Click start (Start in Windows 2000/NT), Settings, Control Panel. Figure 153 Windows XP: Start Menu In the Control Panel, double-click Network Connections (Network and Dial- up Connections in Windows 2000/NT). Figure 154 Windows XP: Control Panel P-794H User’s Guide...
  • Page 238 Figure 155 Windows XP: Control Panel: Network Connections: Properties Select Internet Protocol (TCP/IP) (under the General tab in Win XP) and then click Properties. Figure 156 Windows XP: Local Area Connection Properties The Internet Protocol TCP/IP Properties window opens (the General tab in Windows XP). P-794H User’s Guide...
  • Page 239 Gateway. To manually configure a default metric (the number of transmission hops), clear the Automatic metric check box and type a metric in Metric. • Click Add. • Repeat the previous three steps for each default gateway you want to add. P-794H User’s Guide...
  • Page 240 • Click Obtain DNS server address automatically if you do not know your DNS server IP address(es). • If you know your DNS server IP address(es), click Use the following DNS server addresses, and type them in the Preferred DNS server and Alternate DNS server fields. P-794H User’s Guide...
  • Page 241 Properties window. 10 Close the Network Connections window (Network and Dial-up Connections in Windows 2000/NT). 11 Turn on your P-794H and restart your computer (if prompted). Verifying Settings Click Start, All Programs, Accessories and then Command Prompt. In the Command Prompt window, type "ipconfig" and then press [ENTER]. You can also open Network Connections, right-click a network connection, click Status and then click the Support tab.
  • Page 242 Click the Start icon, Control Panel. Figure 160 Windows Vista: Start Menu In the Control Panel, double-click Network and Internet. Figure 161 Windows Vista: Control Panel Click Network and Sharing Center. Figure 162 Windows Vista: Network And Internet P-794H User’s Guide...
  • Page 243 Figure 163 Windows Vista: Network and Sharing Center Right-click Local Area Connection and then click Properties. Note: During this procedure, click Continue whenever Windows displays a screen saying that it needs your permission to continue. Figure 164 Windows Vista: Network and Sharing Center P-794H User’s Guide...
  • Page 244 • If you have a dynamic IP address click Obtain an IP address automatically. • If you have a static IP address click Use the following IP address and fill in the IP address, Subnet mask, and Default gateway fields. P-794H User’s Guide...
  • Page 245 Gateway. To manually configure a default metric (the number of transmission hops), clear the Automatic metric check box and type a metric in Metric. • Click Add. • Repeat the previous three steps for each default gateway you want to add. P-794H User’s Guide...
  • Page 246 • Click Obtain DNS server address automatically if you do not know your DNS server IP address(es). • If you know your DNS server IP address(es), click Use the following DNS server addresses, and type them in the Preferred DNS server and Alternate DNS server fields. P-794H User’s Guide...
  • Page 247 11 Click Close to close the Local Area Connection Properties window. 12 Close the Network Connections window. 13 Turn on your P-794H and restart your computer (if prompted). Verifying Settings Click Start, All Programs, Accessories and then Command Prompt.
  • Page 248 Appendix B Setting up Your Computer’s IP Address Macintosh OS 8/9 Click the Apple menu, Control Panel and double-click TCP/IP to open the TCP/ IP Control Panel. Figure 169 Macintosh OS 8/9: Apple Menu P-794H User’s Guide...
  • Page 249 • Type your IP address in the IP Address box. • Type your subnet mask in the Subnet mask box. • Type the IP address of your P-794H in the Router address box. Close the TCP/IP Control Panel. Click Save if prompted, to save changes to your configuration.
  • Page 250 • Select Built-in Ethernet from the Show list. • Click the TCP/IP tab. For dynamically assigned settings, select Using DHCP from the Configure list. Figure 172 Macintosh OS X: Network For statically assigned settings, do the following: P-794H User’s Guide...
  • Page 251 • Type your IP address in the IP Address box. • Type your subnet mask in the Subnet mask box. • Type the IP address of your P-794H in the Router address box. Click Apply Now and close the window.
  • Page 252 If you know your DNS server IP address(es), click the DNS tab in the Network Configuration screen. Enter the DNS server information in the fields provided. Figure 175 Red Hat 9.0: KDE: Network Configuration: DNS Click the Devices tab. P-794H User’s Guide...
  • Page 253 • If you have a dynamic IP address, enter dhcp in the BOOTPROTO= field. The following figure shows an example. Figure 177 Red Hat 9.0: Dynamic IP Address Setting in ifconfig-eth0 DEVICE=eth0 ONBOOT=yes BOOTPROTO=dhcp USERCTL=no PEERDNS=yes TYPE=Ethernet P-794H User’s Guide...
  • Page 254 Figure 180 Red Hat 9.0: Restart Ethernet Card [root@localhost init.d]# network restart Shutting down interface eth0: [OK] Shutting down loopback interface: [OK] Setting network parameters: [OK] Bringing up loopback interface: [OK] Bringing up interface eth0: [OK] P-794H User’s Guide...
  • Page 255 HWaddr 00:50:BA:72:5B:44 inet addr:172.23.19.129 Bcast:172.23.19.255 Mask:255.255.255.0 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:717 errors:0 dropped:0 overruns:0 frame:0 TX packets:13 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:100 RX bytes:730412 (713.2 Kb) TX bytes:1570 (1.5 Kb) Interrupt:10 Base address:0x1000 [root@localhost]# P-794H User’s Guide...
  • Page 256 Appendix B Setting up Your Computer’s IP Address P-794H User’s Guide...

  • Page 257: Appendix C Pop-Up Windows, Javascript And Java Permissions

    Disable Pop-up Blockers In Internet Explorer, select Tools, Pop-up Blocker and then select Turn Off Pop-up Blocker. Figure 182 Pop-up Blocker You can also check if pop-up blocking is disabled in the Pop-up Blocker section in the Privacy tab. P-794H User’s Guide...
  • Page 258 Click Apply to save this setting. Enable Pop-up Blockers with Exceptions Alternatively, if you only want to allow pop-up windows from your device, see the following steps. In Internet Explorer, select Tools, Internet Options and then the Privacy tab. P-794H User’s Guide...
  • Page 259 Select Settings…to open the Pop-up Blocker Settings screen. Figure 184 Internet Options: Privacy Type the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”. For example, http://192.168.167.1. P-794H User’s Guide...
  • Page 260 Figure 185 Pop-up Blocker Settings Click Close to return to the Privacy screen. Click Apply to save this setting. JavaScript If pages of the web configurator do not display properly in Internet Explorer, check that JavaScript are allowed. P-794H User’s Guide...
  • Page 261 Figure 186 Internet Options: Security Click the Custom Level... button. Scroll down to Scripting. Under Active scripting make sure that Enable is selected (the default). Under Scripting of Java applets make sure that Enable is selected (the default). P-794H User’s Guide...
  • Page 262 Figure 187 Security Settings - Java Scripting Java Permissions From Internet Explorer, click Tools, Internet Options and then the Security tab. Click the Custom Level... button. Scroll down to Microsoft VM. Under Java permissions make sure that a safety level is selected. P-794H User’s Guide...
  • Page 263 Click OK to close the window. Figure 188 Security Settings - Java JAVA (Sun) From Internet Explorer, click Tools, Internet Options and then the Advanced tab. Make sure that Use Java 2 for <applet> under Java (Sun) is selected. P-794H User’s Guide...
  • Page 264 Mozilla Firefox 2.0 screens are used here. Screens for other versions may vary. You can enable Java, Javascripts and pop-ups in one screen. Click Tools, then click Options in the screen that appears. Figure 190 Mozilla Firefox: Tools > Options P-794H User’s Guide...
  • Page 265 Appendix C Pop-up Windows, JavaScript and Java Permissions Click Content.to show the screen below. Select the check boxes as shown in the following screen. Figure 191 Mozilla Firefox Content Security P-794H User’s Guide...
  • Page 266 Appendix C Pop-up Windows, JavaScript and Java Permissions P-794H User’s Guide...

  • Page 267: Appendix D Ip Addresses And Subnetting

    192.168.1.1). Each of these four parts is known as an octet. An octet is an eight-digit binary number (for example 11000000, which is 192 in decimal notation). Therefore, each octet has a possible range of 00000000 to 11111111 in binary, or 0 to 255 in decimal. P-794H User’s Guide...
  • Page 268 ID of an IP address (192.168.1.2 in decimal). Table 112 Subnet Masks OCTET: OCTET: OCTET: OCTET (192) (168) IP Address (Binary) 11000000 10101000 00000001 00000010 Subnet Mask (Binary) 11111111 11111111 11111111 00000000 Network Number 11000000 10101000 00000001 Host ID 00000010 P-794H User’s Guide...
  • Page 269 MAXIMUM NUMBER OF SUBNET MASK HOST ID SIZE HOSTS 8 bits 255.0.0.0 24 bits – 2 16777214 16 bits 255.255.0.0 16 bits – 2 65534 24 bits 255.255.255.0 8 bits – 2 29 bits 255.255.255.2 3 bits – 2 P-794H User’s Guide...
  • Page 270 In this example, the company network address is 192.168.1.0. The first three octets of the address (192.168.1) are the network number, and the remaining octet is the host ID, allowing a maximum of 2 – 2 or 254 possible hosts. P-794H User’s Guide...
  • Page 271 The “borrowed” host ID bit can have a value of either 0 or 1, allowing two subnets; 192.168.1.0 /25 and 192.168.1.128 /25. The following figure shows the company network after subnetting. There are now two sub-networks, A and B. Figure 194 Subnetting Example: After Subnetting P-794H User’s Guide...
  • Page 272 Table 117 Subnet 2 LAST OCTET BIT IP/SUBNET MASK NETWORK NUMBER VALUE IP Address 192.168.1. IP Address (Binary) 11000000.10101000.00000001. 01000000 Subnet Mask (Binary) 11111111.11111111.11111111. 11000000 Subnet Address: Lowest Host ID: 192.168.1.65 192.168.1.64 Broadcast Address: Highest Host ID: 192.168.1.126 192.168.1.127 P-794H User’s Guide...
  • Page 273 Similarly, use a 27-bit mask to create eight subnets (000, 001, 010, 011, 100, 101, 110 and 111). The following table shows IP address last octet values for each subnet. Table 120 Eight Subnets SUBNET LAST BROADCAST SUBNET FIRST ADDRESS ADDRESS ADDRESS ADDRESS P-794H User’s Guide...
  • Page 274 255.255.255.248 (/29) 8192 255.255.255.252 (/30) 16384 255.255.255.254 (/31) 32768 Configuring IP Addresses Where you obtain your network number depends on your particular situation. If the ISP or your network administrator assigns you a block of registered IP P-794H User’s Guide...
  • Page 275 The subnet mask specifies the network number portion of an IP address. Your P- 794H will compute the subnet mask automatically based on the IP address that you entered. You don't need to change the subnet mask computed by the P-794H unless you are instructed to do otherwise.
  • Page 276 Appendix D IP Addresses and Subnetting P-794H User’s Guide...

  • Page 277: Appendix E Services

    • If the Protocol is TCP, UDP, or TCP/UDP, this is the IP port number. • If the Protocol is USER, this is the IP protocol number. • Description: This is a brief explanation of the applications that use this service or the situations in which this service is used. P-794H User’s Guide...
  • Page 278 IMAP4 The Internet Message Access Protocol is used for e-mail. IMAP4S This is a more secure version of IMAP4 that runs over SSL. TCP/UDP 6667 This is another popular Internet chat program. P-794H User’s Guide...
  • Page 279 Remote Login. ROADRUNNER TCP/UDP 1026 This is an ISP that provides services mainly for cable modems. RTELNET Remote Telnet. RTSP TCP/UDP The Real Time Streaming (media control) Protocol (RTSP) is a remote control for multimedia on the Internet. P-794H User’s Guide...
  • Page 280 Trivial File Transfer Protocol is an Internet file transfer protocol similar to FTP, but uses the UDP (User Datagram Protocol) rather than TCP (Transmission Control Protocol). VDOLIVE 7000 A videoconferencing solution. The UDP port number is specified in the user- application. defined P-794H User’s Guide...

  • Page 281: Appendix F Legal Information

    ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation. All rights reserved. Disclaimer ZyXEL does not assume any liability arising out of the application or use of any products, or software described herein.
  • Page 282 Any replacement will consist of a new or re-manufactured functionally equivalent product of equal or higher value, and will be solely at the discretion of ZyXEL. This warranty shall not apply if the product has been modified, misused, P-794H User’s Guide...
  • Page 283 To obtain the services of this warranty, contact your vendor. You may also refer to the warranty policy for the region in which you bought the device at http:// www.zyxel.com/web/support_warranty_info.php. Registration Register your product online to receive e-mail notices of firmware upgrades and information at www.zyxel.com. P-794H User’s Guide...
  • Page 284 Appendix F Legal Information P-794H User’s Guide...

  • Page 285: Index

    ENET ENCAP Bridge Protocol Data Units (BPDUs) PPPoA bridges PPPoE broadcast RFC 1483 ENET ENCAP certifications FCC interference statement notices firewalls viewing firmware configuration version backup flood detection restoring front panel static route copyright P-794H User’s Guide...
  • Page 286 71, 79, 86 packet statistics LAND attack passwords LEDs path cost Local Area Network, see LAN login point-to-point connections 22, 33 passwords procedure Login screen port scanning PPPoA PPPoE private IP address product registration Management Information Base (MIB) P-794H User’s Guide...
  • Page 287 Simple Network Management Protocol, see SNMP Single Rate Three Color Marker, see srTCM smurf attack ACK (acknowledgment) SNMP portscan agent SYN (synchronize) and MIB SYN flood management model three-way handshake manager trademarks traffic redirect network components and IP alias object variables P-794H User’s Guide...
  • Page 288 Two Rate Three Color Marker, see trTCM portscan unicast upgrading firmware VBR-nRT VBR-RT ATM QoS encapsulation IP address 89, 129 multicast multiplexing setup status traffic shaping example warranty note web configurator 23, 27 accessing P-794H User’s Guide...
  • Page 289 Index P-794H User’s Guide...
  • Page 290 Index P-794H User’s Guide...
  • Page 291 Index P-794H User’s Guide...
  • Page 292 Index P-794H User’s Guide...
  • Page 293 Index P-794H User’s Guide...
  • Page 294 Index P-794H User’s Guide...

Table of Contents