ZyXEL Communications P-660HNU-Tx Support Notes

P-660hnu series wireless n adsl2+ 4-port gateway with usb

Hide thumbs Also See for P-660HNU-Tx:

Quick start manual (12 pages)

Table Of Contents

Table of Contents

Quick Links

Download this manual

P-660HNU Series Support Notes

P-660HNU-Tx

Wireless N ADSL2+ 4-port Gateway with USB

Support Notes

Version 1.02

Aug. 2011

Table of Contents

Summary of Contents for ZyXEL Communications P-660HNU-Tx

Page 2: Table Of Contents
System FAQ ....................6 1. What‟s the Embedded Web Configurator?..........6 2. How do I access the P-660HNU-Tx Command Line Interface (CLI)? ... 6 3. How do I update the firmware and configuration file? ......6 4. How do I upgrade the firmware by using Web configurator? ....6 5.
Page 3 9. What is LAND attack? ................. 20 10 What is Brute-force attack? ..............20 11. What is IP Spoofing attack? .............. 20 12. What are the default ACL firewall rules in P-660HNU-Tx?....21 Configuration ..................21 1. How do I active the firewall? ............... 21 2.
Page 4 8. What is Server Set ID (SSID)? ............28 9. What is an ESSID? ................28 Security FAQ..................... 28 1. How do I secure the data across the P-660HNU-Tx Access Point's radio link? ......................28 2. What is WEP? ..................29 3.
Page 5 P-660HNU Series Support Notes Support Tool....................88 1. Upgrading Firmware via Web GUI ............88 2. Backing – up the Configuration ............88 3. Uploading Configuration via Web GUI ..........89 All contents copyright © 2011 ZyXEL Communications Corporation.
Page 6: Faq
Note: It is protected by super password, admin/1234 by factory default. 3. How do I update the firmware and configuration file? You can do this if you access the P-660HNU-Tx (x here stands for 1 or 3) as Administrator. You can upload the firmware and configuration file to Prestige from Web Configurator.
Page 7: How Do I Restore/Backup P-660Hnu-Tx Configurations By Using Web Configurator
FLASH ROM and reboot itself. 5. How do I restore/backup P-660HNU-Tx configurations by using Web Configurator? a. Log into your P-660HNU-Tx using Web Configurator. Please refer to the step a & b above. b. To backup the P-660HNU-Tx configurations, you can click Backup in the page Maintenance ->...
Page 8: What Should I Do If I Forget The System Password
In case you forget the system password, you can erase the current configuration and restore factory defaults this way: Use the RESET button of P-660HNU-Tx to reset the router. After the router is reset, the LAN IP address will be reset to '192.168.1.1', the common user username will be reset to 'user', there is no password for common user account, the Administrator username/password will be reset to „admin/1234‟.
Page 9: Is It Possible To Access A Server Running Behind Sua From The Outside Internet? How Can I Do It
9. Is it possible to access a server running behind SUA from the outside Internet? How can I do it? Yes, it is possible because P-660HNU-Tx delivers the packet to the local server by looking up to a SUA server table. Therefore, to make a local server accessible to the outside users, the port number and the inside IP address of the server must be configured.
Page 10  Destination IP Addr =a.b.c.d  Destination IP Mask =w.x.y.z  Action Matched =Drop  Action No Matched =Forward Where a.b.c.d is an IP address on your local network and w.x.y.z is your netmask. All contents copyright © 2011 ZyXEL Communications Corporation.
Page 11: Product Faq
Please record your new password whenever you change it. The system will lock you out if you have forgotten your password. 3. How do I know the P-660HNU-Tx's WAN IP address assigned by the ISP? You can view "My WAN IP <from ISP> : x.x.x.x" shown in Web Configurator „Status->Device Information ->WAN Information‟...
Page 12: How Do I Know I Am Using Pppoe
Without DDNS, we always tell the users to use the WAN IP of the P-660HNU-Tx to reach our internal server. It is inconvenient for the users if this IP is dynamic. With DDNS supported by the P-660HNU-Tx, you apply a DNS name (e.g., www.zyxel.com.tw) for your server (e.g., Web server) from a...
Page 13: When Do I Need Ddns Service
IP address we can use the DDNS service. The DDNS server allows to alias a dynamic IP address to a static hostname. Whenever the ISP assigns you a new IP, the P-660HNU-Tx sends this IP to the DDNS server for its updates.
Page 14: What Do The Parameters (Pcr, Scr, Mbs) Mean
VC with Peak Cell rate before yielding to other VCs. The P-660HNU-Tx holds the parameters for shaping the traffic among its virtual channels. If you do not need traffic shaping, please set SCR = 0, MBS = 0 and PCR as the maximum value according to the line rate (for example, 2.3...
Page 15: Adsl Faq
4. How do I know the ADSL line is up? You can see the DSL LED Green on the P-660HNU-Tx's front panel is on when the ADSL physical layer is up.
Page 16: Does The Vc-Based Multiplexing Perform Better Than The Llc-Based Multiplexing
Maintenance -> Diagnostic -> DSL Line -> DSL Status: 8. What are the signaling pins of the ADSL connector? The signaling pins on the P-660HNU-Tx's ADSL connector are pin 3 and pin 4. The middle two pins for a RJ11 cable.
Page 17  The low priority is internet access such as ftp etc … Port binding is to bind different LAN ports to different PVCs, thus you can configure each PVC separately to assign different QoS to different application. All contents copyright © 2011 ZyXEL Communications Corporation.
Page 18: Firewall Faq
Service (DoS) attacks such as Ping of Death, SYN Flood, LAND attack etc. It also uses stateful packet inspection to determine if an inbound connection is allowed through the firewall to the private LAN. The P-660HNU-Tx supports Network Address Translation (NAT), which translates the private local addresses to one or multiple public addresses.
Page 19: Why Do You Need A Firewall When Your Router Has Packet Filtering And Nat Built-In
As data is transmitted through a network, IP packets are often broken up into smaller chunks. Each fragment looks like the original packet except that it contains an offset field. The Teardrop program creates a series of All contents copyright © 2011 ZyXEL Communications Corporation.
Page 20: What Is Syn Flood Attack
IP Spoofing, a hacker must modify the packet headers so that it appears that the packets originate from a trusted host and should be allowed through the router or firewall. All contents copyright © 2011 ZyXEL Communications Corporation.
Page 21: What Are The Default Acl Firewall Rules In P-660Hnu-Tx
Configuration 1. How do I active the firewall? You can use the Web Configurator to active the firewall for P-660HNU-Tx. By factory default, if you connect your PC to the LAN Interface of P-660HNU-Tx, you can access Web Configurator via „http://192.168.1.1‟.
Page 22 Advanced setup, Advanced -> Remote MGNT. You need to enable access from WAN. (3) WWW/Telnet WAN access service is enabled but your host IP is not the secured host entered in Web Configurator, Advanced setup, Advanced -> Remote MGNT: All contents copyright © 2011 ZyXEL Communications Corporation.
Page 24: Where Can You Find 802.11 Wireless Networks
(interoperate) with any brand of Access Point that is also Wi-Fi certified. 8. What types of devices use the 2.4GHz Band? Various spread spectrum radio communication applications use the 2.4 GHz band. This includes WLAN systems (not necessarily of the type IEEE All contents copyright © 2011 ZyXEL Communications Corporation.
Page 25: Does The 802.11 Interfere With Bluetooth Device
(1) Minimizing the number of walls and ceilings (2) Antenna is positioned for best reception (3) Keep WLAN products away from electrical devices, eg: microwaves, monitors, electric motors,…, etc. (4) Add additional APs if necessary. All contents copyright © 2011 ZyXEL Communications Corporation.
Page 26: What's The Difference Between A Wlan And A Wwan
Yes, it supports up to 16 MAC Address filtering. 17. Does P-660HNU-Tx support auto rate adaption? Yes, it means that the AP on P-660HNU-Tx will automatically decelerate when devices move beyond the optimal range, or other interference is present. If the...
Page 27: Advanced Faq
10, typical systems use processing gains of 20. IEEE 802.11b specifies the use of DSSS. 5. What is Frequency-hopping Spread Spectrum Technology – (FHSS)? FHSS uses a narrowband carrier which hops through a predefined sequence All contents copyright © 2011 ZyXEL Communications Corporation.
Page 28: Do I Need The Same Kind Of Antenna On Both Sides Of A Link
AP. The ESSID is a 32-character maximum string and is case-sensitive. Security FAQ 1. How do I secure the data across the P-660HNU-Tx Access Point's radio link? To secure the date across the P-660HNU-Tx Access Point‟s radio link, we...
Page 29: What Is Wep
24 bit Initialization Vector, but it uses a 104 bit as secret key. Users need to use the same encryption level in order to make a connection. 7. Can the SSID be encrypted? All contents copyright © 2011 ZyXEL Communications Corporation.
Page 30: By Turning Off The Broadcast Of Ssid, Can Someone Still Sniff The Ssid
An intruder can masquerade as that user by using this captured information. An intruder who monitors the wireless network can apply this same attack principle on the wireless. All contents copyright © 2011 ZyXEL Communications Corporation.
Page 31: Application Notes
In this case, we use P-660HNU-Tx which works as an ADSL bridge modem to connect to the ISP. The ISP will generally give one Internet account and limit only one computer to access the Internet.
Page 32 P-660HNU Series Support Notes Setup your P-660HNU-Tx under bridge mode The following procedure shows you how to configure your P-660HNU-Tx as bridge mode. We will use Web Configurator to guide you through the related menu. 1. Login the Web Page of the Prestige Please enter the LAN IP address of the Prestige in the URL location to access the web screen.
Page 33 2. Login first The default username and password for the Administrator account is 'admin/1234'. (1) Configure P-660HNU-Tx as bridge mode and configure Internet setup parameters in Web Configurator, Advanced Setup, Network -> WAN -> Internet Connection. All contents copyright © 2011 ZyXEL Communications Corporation.
Page 34: Internet Access Using P-660Hnu-Tx Under Routing Mode
Identifier) given to you by your ISP. (2) Turn off LAN DHCP Server and configure a LAN IP for the P-660HNU-Tx in Web Configurator, Advanced Setup, Network -> LAN. We use 192.168.1.1 as the LAN IP for P-660HNU-Tx in this case: Step 1: Disactive DHCP Server and apply it.
Page 35 P-660HNU Series Support Notes Set up your P-660HNU-Tx under routing mode The following procedure shows you how to configure your P-660HNU-Tx as Routing mode for routing traffic. We will use Web Configurator to guide you through the related menu. (1) Configure P-660HNU-Tx as routing mode and configure Internet setup parameters in Web Configurator, Advanced Setup, Network ->...
Page 36 ISP assigns you a different one each time you IP Address connect to the Internet. Select Obtain an IP Address Automatically if you have a dynamic IP address; otherwise select Static IP Address and type your ISP All contents copyright © 2011 ZyXEL Communications Corporation.
Page 37: G Backup
Zyxel Device to pass the IPv6 prefix information to its LAN hosts. The hosts can then use the prefix to generate their IPv6 addresses. (2) Configure a LAN IP for the P-660HNU-Tx and the DHCP settings in Web Configurator, Advanced Setup, Network -> LAN.
Page 38 Click Network > 3G backup Table 1: The description of Configurations Default Name Type Valid Value Description value General Check This is the global switch for 3G Enable 3G Backup FALSE Backup. All contents copyright © 2011 ZyXEL Communications Corporation.
Page 39 North America system 3G card doesn‟t need APN. Nailed-Up and On Demand for Select FALSE Connection 3G WAN. Connection idle timeout value. If Number 0~9999 Nailed-Up is selected, this field Max Idle Timeout will be hidden. All contents copyright © 2011 ZyXEL Communications Corporation.
Page 40 User configures correct setting of 3G card or insert 3G card, we can find IP address, network masking, DNS, Gateway, and Interface Status of 3G card at status pages. 3G status column shows detail information of 3G card. All contents copyright © 2011 ZyXEL Communications Corporation.
Page 41 3G Backup warning status Table 2 3G back up warning status Lable Description 3G status This fields display:  NoDevice when 3G card is inserted  Disabled when the 3G WAN is not activated All contents copyright © 2011 ZyXEL Communications Corporation.
Page 42: Sua Notes
Cu-SeeMe, and ICQ will need to connect to the local user behind the P-660HNU-Tx. In such case, a SUA server must be configured to forward the incoming packets to the true destination behind SUA. After the required server are configured in Web Configurator, Advanced Setup, Network ->...
Page 43 None for Chat, File None Chat, File 4.6/ 4.7/ 5.0/… transfer, Video and transfer ,Video and Voice (none UPnP) Voice 5500/client IP Virtual Network Computing None 5800/client IP (VNC) 5900/client IP Microsoft Xbox Live None All contents copyright © 2011 ZyXEL Communications Corporation.
Page 44 A service is identified by the port number. Also, since you need to specify the IP address of a server behind the P-660HNU-Tx, a server must have a fixed IP address and not be a DHCP client whose IP address potentially changes each time P-660HNU-Tx is powered on.
Page 45 (3) If you want to change the port for Web Server, you could press button „Modify‟ on corresponding rule, then modify and apply it. Default port numbers for some services Service Port Number Telnet SMTP DNS (Domain Name Server) www-http (Web) All contents copyright © 2011 ZyXEL Communications Corporation.
Page 46 This second dial-up adapter for VPN is added during the installation phase of the Upgrade in addition to the first dial-up adapter that provides PPP support for the analog or ISDN modem. All contents copyright © 2011 ZyXEL Communications Corporation.
Page 47 IP address of Windows NT server. Example The following example shows how to dial to an ISP via the P-660HNU-Tx and then establish a tunnel to a private network. There will be three items that you need to set up for PPTP application, these are PPTP server (WinNT), PPTP client (Win9x) and the P-660HNU-Tx.
Page 48 Internet IP address that the ISP assigns to P-660HNU-Tx router in SUA mode and enter this IP address in the VPN dial-up dialog box. You can check this Internet IP address from PNC Monitor or S Web Configurator, Status ->...
Page 49: Using The Dynamic Dns (Ddns)
Without DDNS, we always tell the users to use the WAN IP of the P-660HNU-Tx to access the internal server. It is inconvenient for the users if this IP is dynamic. With DDNS supported by the P-660HNU-Tx, you apply a DNS name (e.g., www.zyxel.com.tw) for your server (e.g., Web server) from a...
Page 50: Qos
DDNS servers P-660HNU-Tx supports currently WWW.DYNDNS.ORG where you apply the DNS from and update the WAN IP  Setup the DDNS 1. Before configuring the DDNS settings in the P-660HNU-Tx, you must register account from DDNS server such WWW.DYNDNS.ORG first. After the registration, you have a hostname for your internal server and a password using to update the IP to the DDNS server.
Page 51 Click Advanced > QoS to open the screen as shown next.Use this screen to enable or disable QoS, and select to have the ZyXEL Device automatically assign priority to traffic according to the IEEE 802.1p priority level, IP precedence and/or DSCP value. All contents copyright © 2011 ZyXEL Communications Corporation.
Page 52: Network Management Using Snmp
7. Network Management Using SNMP  ZyXEL SNMP Implementation ZyXEL currently includes SNMP support in some P-660HNU-Tx routers. It is implemented based on the SNMPv1, so it will be able to communicate with SNMPv1 NMSs. Further, users can also add ZyXEL's private MIB in the NMS to monitor and control additional system variables.
Page 53 And traps with the message "System reboot by user !" will be sent. (2) For fatal error : System has to reboot for some fatal errors. And traps with the message of the fatal code will be sent. All contents copyright © 2011 ZyXEL Communications Corporation.
Page 54 Downloading ZyXEL's private MIB  Configure the P-660HNU-Tx for SNMP The SNMP related settings in P-660HNU-Tx are configured in Web Configurator, Advanced Setup, Advanced -> Remote MGNT -> SNMP. The following steps describe a simple setup procedure for configuring all SNMP settings.
Page 55: Ssh
P-660HNU Series Support Notes 8．SSH P-660HNU-Tx supports SSH, you will be able to log into the device via SSH. 9. Using IP Alias  What is IP Alias? In a typical environment, a LAN router is required to connect two local networks.
Page 56: Using Ip Multicast
P-660HNU-Tx queries all directly connected networks to gather group membership. After that, the P-660HNU-Tx updates the information by periodic queries. The P-660HNU-Tx implementation of IGMP is also compatible with version 1. The multicast setting can be turned on or off on Ethernet and remote nodes.
Page 57: How To Configure Filter Rules On P-660Hnu-Tx
IGMP-v1 for IGMP version 1, IGMP-v2 for IGMP version 2. 11. How to configure filter rules on P-660HNU-Tx? The P-660HNU-Tx allows you to configure up to sixteen filter rules for each filter type (URL Filter, IP Filter and IPv6 Filter) in the system.
Page 58 This is the URL you have configured the ZyXEL Device to block. (2) You could also block or allow some specific traffic by IP addresses, MAC addresses in Security > Filter > IP Filter page. All contents copyright © 2011 ZyXEL Communications Corporation.
Page 59 (3) If you want to restrict traffic by IPv6 addresses, please click Security > Filter > IPv6 Filter. Key Settings: Select White List to specify traffic to allow and Black List to Rule Type selection specify traffic to disallow. All contents copyright © 2011 ZyXEL Communications Corporation.
Page 60: Change Wan Mtu Via Web-Gui
137 / Redirect - Redirect message 12. Change WAN MTU via WEB-GUI. You can change WAN MTU by: Network > WAN > Internet Connection > Advanced Setup, the default value is 1500. All contents copyright © 2011 ZyXEL Communications Corporation.
Page 61: Manage Cpe Via Tr-069
Specify the URL, username and password.  Activate periodic inform and specify an interval value so that the ZyXEL Device periodically send information to the management server (recommended if CWMP is enabled). All contents copyright © 2011 ZyXEL Communications Corporation.
Page 62 The default port for accessing to the ZyXEL Device from the Port management server is the HTTP port, port 7547. If you change it, make sure it does not conflict with another port on your All contents copyright © 2011 ZyXEL Communications Corporation.
Page 63: Usb Sharing
Device periodically send information to the management server 14. USB sharing Sharing files on a USB memory stick or hard drive connected to P-660HNU-Tx with other users on the network (Two USB devices are supported to be connected to the router at the same time), the topology showed bellow allowing PC A, B &...
Page 65 7) Select Access Level “Security” to just allow someone who can login to the flash disk with the correct username and password 8) Add a new Account <Must be 5 to 15 Keyboard characters in length> All contents copyright © 2011 ZyXEL Communications Corporation.
Page 66 P-660HNU Series Support Notes 9) Repeat the step 5) and 6) and connec to P-660HNU-Tx, the USB will display on the screen which requires the username and password 10) After typing the correct username and password, you will be able to log into the USB successfully.
Page 67: Wireless Application Notes
Step 1: Double click on the utility icon in your windows task bar the utility will pop up on your windows screen. Step 2: Select configuration tab. All contents copyright © 2011 ZyXEL Communications Corporation.
Page 68 Step 4: Since there is no DHCP server to give the host IP you must first designate a static IP for your station. From Windows Start select Control Panel >Network Connection>Wireless Network Connection. All contents copyright © 2011 ZyXEL Communications Corporation.
Page 70 Step1: Double click on the utility icon in your windows task bar the utility will pop up on your windows screen. Step 2: Select configuration tab. All contents copyright © 2011 ZyXEL Communications Corporation.
Page 71 Step 4: Since there is no DHCP server to give the host IP you must first designate a static IP for your station. From Windows Start select Control Panel >Network Connection>Wireless Network Connection. All contents copyright © 2011 ZyXEL Communications Corporation.
Page 73: Mac Filter
This provides an additional layer of control layer in that only stations with registered MAC addresses can connect. This approach requires that the list of MAC addresses be configured. All contents copyright © 2011 ZyXEL Communications Corporation.
Page 74 If not knowing what your MAC address is, please enter a command "ipconfig /all" after DOS prompt to get the MAC (physical) address of your wireless client. Step 1: Login Web Configurator, Advanced Setup, Network -> Wireless LAN ->AP, edit MAC Filter. All contents copyright © 2011 ZyXEL Communications Corporation.
Page 75 AP. If Deny is selected in this field, hosts with MAC addresses configured in this list will be blocked. MAC Address This field specifies those MAC Addresses that you want to add in the list. All contents copyright © 2011 ZyXEL Communications Corporation.
Page 76: Setup Wep (Wired Equivalent Privacy)
Setting up the Access Point You can set up the Access Point from Web configurator，Network -> Wireless LAN -> AP. Step 1: Select „Static WEP‟ from the pull down menu „Security Mode‟ in Web Configurator: All contents copyright © 2011 ZyXEL Communications Corporation.
Page 77 (1) You can put in a special WEP key in the „WEP Key‟ menu directly. (2) You can also put in an arbitrary sequence of characters in the „Passphrase‟ and then press button „Generate‟ to let the P-660HNU-Tx generate WEP Key for you:...
Page 78 'Show Config Utility'. The utility will pop up on your windows screen: Note: If the utility icon doesn't exist in your task bar, click Start -> Programs -> …… to start the utility. All contents copyright © 2011 ZyXEL Communications Corporation.
Page 79 Select „Set Security‟ to configure encryption type and parameters correspond with access point. Note: You should select Key 1 as default Transmit Key, since the P-660HNU-Tx is supposed to use Key 1 by default. Key settings All contents copyright © 2011 ZyXEL Communications Corporation.
Page 80: Site Survey
AP required. 4. Determine the preliminary access point location on the facility diagram base on the service area needed, obstacles, power wall jack considerations. All contents copyright © 2011 ZyXEL Communications Corporation.
Page 81 Record down the changes at point where transfer rate drops and the link quality and signal strength information on the diagram as you go along. All contents copyright © 2011 ZyXEL Communications Corporation.
Page 82 Step 8: Repeat step 1~6 of survey on site as necessary, upon completion you will have a diagram and information of site survey. As illustrated below. All contents copyright © 2011 ZyXEL Communications Corporation.
Page 83: Configure Wpa(2)-Psk
Pre-shared key mode (PSK, also known as Personal mode) is designed for home and small office networks that don't require the complexity of an 802.1X authentication server. All contents copyright © 2011 ZyXEL Communications Corporation.
Page 84 Authentication can be done using local user database internal to the P-660HNU-Tx. Step 1: To change your P-660HNU-Tx's authentication settings, login Web Configurator, Advanced Setup, Network -> Wireless LAN -> AP Step 2: Select „Security Mode‟ as WPA-PSK.
Page 85 Step 2: Select the configuration tab, type in the SSID (Service Set Identifier), select the operating Mode as Infrastructure, and select proper channel. Step 3: Click Set Security to configure the security parameters: All contents copyright © 2011 ZyXEL Communications Corporation.
Page 87: The Wps/Wlan Button
The WPS/WLAN LED should change from on to off or vice versa. 2. Activate WPS (1) Make sure the POWER LED is on (not blinking). (2) Press the WPS WLAN ON/OFF button for 1 to 5 seconds and release it. All contents copyright © 2011 ZyXEL Communications Corporation.
Page 88: Support Tool
 Select the Firmware to upload and click Open.  Click Upload. 2. Backing – up the Configuration  Go to Maintenance -> Tools -> Configuration  Click “Backup”.  Click “Save”. All contents copyright © 2011 ZyXEL Communications Corporation.
Page 89: Uploading Configuration Via Web Gui
 Go to Maintenance -> Tools -> Configuration  Click Browse.  Select the configuration file to upload and click Open.  Click Upload to upload the configuration file. P-660HNU-Tx reboots automatically after the uploading is finished. Please do not power off the router at this moment.

ZyXEL Communications P-660HNU-Tx Support Notes

Quick Links

Related Manuals for ZyXEL Communications P-660HNU-Tx

Summary of Contents for ZyXEL Communications P-660HNU-Tx

Table of Contents