ZyXEL Communications P-870HN-5xb Support Notes
ZyXEL Communications P-870HN-5xb Support Notes

ZyXEL Communications P-870HN-5xb Support Notes

Ipv6 version 802.11n vdsl2 4-port gateway
Hide thumbs Also See for P-870HN-5xb:
Table of Contents

Advertisement

Quick Links

P-870HN-5xb
IPv6 version
802.11n VDSL2 4-port Gateway
Support Notes
Firmware Version 1.00(BKK.0)b2
September 2009
Edition 1.0

Advertisement

Table of Contents
loading

Summary of Contents for ZyXEL Communications P-870HN-5xb

  • Page 1 P-870HN-5xb IPv6 version 802.11n VDSL2 4-port Gateway Support Notes Firmware Version 1.00(BKK.0)b2 September 2009 Edition 1.0...
  • Page 2: Table Of Contents

    Environment ....................52 Port Forwarding Configuration ..............53 DMZ Host Configuration ................57 IP Filter ........................ 60 Environment ....................60 IP Filter Configuration ................. 61 Configuration of Accepting Incoming Traffic ..........63 All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 3 FAQ ........................... 102 Product FAQ ...................... 102 Will the device work with my Internet connection? ........102 Why do I need to use P-870HN-5xb? ............102 What is PPPoE? ..................102 Does the device support PPPoE? ............... 102 How do I know I am using PPPoE? ............103 Why does my provider use PPPoE?............
  • Page 4 What is Server Set ID (SSID)? ..............116 What is an ESSID?..................116 How do I secure the data across an Access Point's radio link? ....116 What is WEP? .................... 116 All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 5: Application Notes

    How to enter the “Shell mode” ..............120 CPU usage ....................121 Memory usage .................... 121 Current processes ..................122 IGMP table ....................122 Packets statistics..................123 Physical layer statistics ................123 CLI Command List ....................124 All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 6: General Application Notes

    100Mbps and upstream transmission up to 50 Mbps.  Quality of Service (QoS) The P-870HN-5xb with Quality of Service features ensures that the Triple Play Service keeps the high quality delivery in VDSL high speed Internet access. ...
  • Page 7: Application Scenario

    Application Scenario FTTx - FTTC Solution A typical scenario is used with P-870HN-5xb in a FTTC (Fiber to the Curb) solution. The P-870HN-5xb serves as a home gateway, providing the high speed INTERNET service and High Quality IPTV service. The COE (VDSL switch) is located in a street cabinet, providing a high speed service within a 700 feet range, assuring the bandwidth reaching up to 100/50Mbps (Downstream/Upstream) at maximum.
  • Page 8 P-870HN-5xb Support Notes FTTx – FTTB Solution An often seen scenario is used with P-870HN-5xb in a FTTB (Fiber to the Building) solution. The P-870HN-5xb serves as a home gateway, providing the high speed INTERNET service, High Quality IPTV service and VoIP service. The COE (VDSL...
  • Page 9: Prologue

    Note: Do not assign the arbitrary IP address and subnet mask to your PCs; otherwise, you will not be able to access the Internet.  Click the WINS configuration tab and select Disable WINS Resolution. All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 10 Windows CD or disk. When the drivers are updated, you will be asked if you want to restart the PC. Make sure that your Device is powered on before answering “Yes” to the prompt. Repeat the aforementioned steps for each Windows PC on your network. All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 11: Access Application Notes

    Login the P-870HN-5xb via Web GUI. Set up your PC/NB IP address to be a DHCP client. Connect to a LAN port of P-870HN-5xb via RJ45 Ethernet cable and open your IE browser. The default IP of P-870HN-5xb is 192.168.1.1 username/password = admin/1234.
  • Page 12: Telnet

    Connect to a LAN port of P-870HN5xb via RJ45 Ethernet cable and open your Hyper Terminal software (capable of using TELNET). The default IP of P-870HN-5xb is 192.168.1.1 username/password = admin/1234. Type the command line “atsh” to display the basic information of device.
  • Page 13: Internet Connection

    Go to Network > WAN > Internet Connection. Click Add Select the Layer 2 interface for this service, e.g “ptm0/(0_0_1)” Click Next Select the WAN service type, i.e. “Bridging” Enter the Service Description, e.g. “Internet” All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 14 P-870HN-5xb Support Notes Click Next Click Apply/Save All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 15: Ipoe Mode

    P-870HN-5xb Support Notes IPoE Mode Scenario: The P-870HN-5xb is a DHCP client in routing mode. b. IPoE Mode Go to Network > WAN > Internet Connection. Click Add Select the Layer 2 interface for this service, e.g “ptm0/(0_0_1)” Click Next Select the WAN service type, i.e.
  • Page 16 P-870HN-5xb Support Notes Click Next Select Obtain an IP address automatically Click Next 10. Select Enable NAT All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 17 P-870HN-5xb Support Notes 11. Click Next 12. Select the WAN Interface, e.g. “ptm0” for the default gateway 13. Click Next 14. Select Select DNS Server Interface from Available WAN Interface and select the interface All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 18 P-870HN-5xb Support Notes 15. Click Next 16. Click Apply/Save All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 19: Pppoe Mode

    Go to Network > WAN > Internet Connection. Click Add Select the Layer 2 interface for this service, e.g “ptm0/(0_0_1)” Click Next Select the WAN service type, i.e. “PPP over Ethernet (PPPoE)” Enter the Service Description, e.g. “Internet” All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 20 Enter the PPP Password, e.g. “1234” 10. Enter the PPPoE Service Name, e.g. “PPPoE” 11. Select the Authentication Method to be “AUTO” 12. Click Next 13. Select the WAN Interface, e.g. “ppp0” for the default gateway All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 21 P-870HN-5xb Support Notes 14. Click Next 15. Select Select DNS Server Interface from Available WAN Interface and select the interface 16. Click Next All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 22 P-870HN-5xb Support Notes 17. Click Apply/Save All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 23: Igmp Multicast Proxy

    After that, the CPE updates the information by periodic queries. The device implementation of IGMP is also compatible with version 1. The multicast setting can be turned on or off on the Ethernet and remote nodes. All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 24: Igmp Multicast Proxy Configuration

    Go to Network > WAN > Internet Connection Select the WAN interface (IPoE or PPPoE)and click on Edit Go the page where IGMP Multicast Proxy shows Select “Enable” for IGMP Multicast Click Next till we can Apply/Save it All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 25: Protocol Based Scenario

    IPoE. The COE (VDSL switch) has the ability to distinguish those 2 traffics and assign the dedicated ACL rules to them. So, how should we configure the P-870HN-5xb to fit the aforementioned scenario? The following step-by-step procedure instructs us the method.
  • Page 26 Go to Network > WAN > Internet Connection. Click Add Select the Layer 2 interface for this service, e.g “ptm0/(0_0_1)” Click Next Select the WAN service type, i.e. “PPP over Ethernet (PPPoE)” Enter the Service Description, e.g. “Internet” All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 27 11. Select the Authentication Method to be “AUTO” 12. Click Next 13. Select the WAN Interface, e.g. “ppp0” for the default gateway 14. Click Next 15. Select Obtain DNS info from a WAN interface and select the interface All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 28 P-870HN-5xb Support Notes 16. Click Next 17. Click Apply/Save All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 29 Go to Network > WAN > Internet Connection. Click Add Select the Layer 2 interface for this service, e.g “ptm0/(0_0_1)” Click Next Select the WAN service type, i.e. “IP over Ethernet” Enter the Service Description, e.g. “IPTV” Click Next All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 30 P-870HN-5xb Support Notes Select Obtain an IP address automatically Click Next 10. Select Enable IGMP Multicast Proxy 11. Click Next 12. Select the WAN Interface, e.g. “ptm0” for the default gateway All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 31 P-870HN-5xb Support Notes 13. Click Next 14. Select Select DNS Server Interface from Available WAN Interface and select the interface 15. Click Next All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 32 P-870HN-5xb Support Notes 16. Click Apply/Save All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 33: Vlan Based Scenario

    COE (VDSL switch) receives the already VLAN tagged traffic from the CPE, and handles them according to their VID values. So how should we configure the P-870HN-5xb to fit the aforementioned scenario? The following step-by-step procedure instructs us the method.
  • Page 34: Wan Configuration

    WAN Configuration a. INTERNET Service Go to Network > WAN > Layer 2 Interface Remove the default ptm0 Interface Click Add Select VLAN MUX mode Select Enable Quality of Service Click Apply/Save All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 35 12. Enter the Service Description, e.g. “Internet” 13. Check the Tag VLAN ID for egress packets box 14. Enter “0” for Enter 802.1P Priority 15. Enter “100” for Enter 802.1Q VLAN ID All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 36 P-870HN-5xb Support Notes 16. Click Next 17. Select Obtain an IP address automatically 18. Click Next 19. Select Enable NAT All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 37 P-870HN-5xb Support Notes 20. Click Next 21. Select the WAN Interface, e.g. “ptm0.100” for the default gateway 22. Click Next 23. Select Select DNS Server Interface from available WAN Interface and select the interface All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 38 P-870HN-5xb Support Notes 24. Click Next 25. Click Apply/Save All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 39 Select the WAN service type, i.e. “IP over Ethernet” Enter the Service Description, e.g. “IPTV” Check the Tag VLAN ID for egress packets box Enter “5” for Enter 802.1P Priority Enter “200” for Enter 802.1Q VLAN ID All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 40 10. Click Next 11. Select Obtain an IP address automatically 12. Click Next 13. Select Enable IGMP Multicast Proxy 14. Click Next 15. Select the WAN Interface, e.g. “ptm0.200” for the default gateway All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 41 P-870HN-5xb Support Notes 16. Click Next 17. Select Select DNS Server Interface from available WAN Interface and select the interface 18. Click Next All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 42 P-870HN-5xb Support Notes 19. Click Apply/Save All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 43: Quality Of Service

    In the case of the aforementioned diagram, we would like to limit the maximum upload rate of the IPTV service to 350 kbps. So how should we configure the P-870HN-5xb to fit the aforementioned scenario? The following step-by-step procedure instructs us the method.
  • Page 44: Qos Configuration

    Make sure that QoS is enabled in Network > WAN > Layer2 Interface Go to Advanced > QoS > General Check the Active QoS box. Go to Advanced > QoS > Queue Setup. Click Add. Check the Active box Input the Name, e.g. “Queue1” All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 45 P-870HN-5xb Support Notes Select the Interface Select the Priority 10. Select the Weight 11. Input the Rate Limit, e.g. “350” 12. Click Apply All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 46 Select the Forward To Interface Select the To Queue as Queue1 Select the From Interface, e.g. “ETH1” Select Ether Type, e.g. “IP (0x800) Click Apply Check if the Classification is created accordingly All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 47: Tr069 - Remote Firmware Upgrade

    TR069 – Remote Firmware Upgrade Environment The P-870HN-5xb provides the TR-069 remote management feature; it could speed up the deployment of CPEs and ease our supporting costs. It can also help the VDSL ISP (Internet Service Provider) to reduce operation effort as well as enhance customer satisfaction.
  • Page 48: Tr069 Configuration

    Enter the Inform Interval, e.g. “30” seconds. Enter the ACS URL, e.g. “http://59.124.163.140/TR069”. Enter the ACS User Name, e.g. “admin”. Enter the ACS Password, e.g. “1234”. Select the WAN Interface used by TR-069 client, e.g. “Any_WAN”. Click Apply/Save All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 49: Nat Portforwarding

    NAT system itself (e.g., the CPE router). The CPE keeps track of the original addresses and port numbers, so the incoming reply packets can have their original values restored. All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 50 This allows us to specify multiple servers of different types behind the NAT for outside access. Note: If you want to map each server to one unique IGA, please use the One-to-One mode. All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 51 ILA2---->IGA3 Overload ILA3---->IGA2 Outgoing (Allocate ILA4---->IGA4 Connections) Server 1 IP<----IGA1 Server Incoming Server 2 IP<----IGA1  Port numbers for some services: Service Port Number Telnet SMTP DNS (Domain Name Server) www-http (Web) All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 52: Environment

    FTP server installed behind the CPE with an IP assigned by the local DHCP server (192.168.1.33). How should we configure the P-870HN-5xb, so that the notebook at the WAN site can access the FTP server? The following step-by-step procedure instructs us the method.
  • Page 53: Port Forwarding Configuration

    This phenomenon is normal, because the CPE itself can be accessed by the FTP, which the port is also 21. Since we are creating a new rule using port 21, the default All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 54 P-870HN-5xb Support Notes port number of the CPE’s FTP server port will automatically be moved to 2121. A new port forwarding rule is now created. Show the IP configuration of notebook: All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 55 Use the notebook to access the FTP server with IP = 172.23.30.106. Show the history log of FTP server. We can see that the client (notebook with IP = 172.23.98.235) is in fact logged into the FTP server. All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 56 Choose a WAN Interface, e.g. “ipoe_0_0_33_1/atm0_1”. Set the Trigger Port range. Configure the Protocol to “TCP”, “UDP”, or “TCP/UDP”. Set the Trigger Port range. Configure the Protocol to “TCP”, “UDP”, or “TCP/UDP”. Click Add. All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 57: Dmz Host Configuration

    Go to Network > NAT > DMZ host. 10. Enter the IP of the Default Server, e.g. “192.168.1.33”. 11. Click Apply. Use the notebook to access the FTP server with IP = 172.23.30.106. All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 58 P-870HN-5xb Support Notes Show the history log of FTP server. We can see that the client (notebook with IP = 172.23.98.235) is in fact logged into the FTP server. All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 59 A SIP ALG allows SIP calls to pass through NAT by examining and translating IP addresses embedded in the data stream. a. Enable SIP ALG Go to Network > NAT > ALG. Select Active SIP ALG. Click Apply. All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 60: Ip Filter

    IP Filter Environment The P-870HN-5xb has stateful packet Inspection and Denial of service (DoS) function; it provides the first line of defense against hackers, network intruders and other hazardous threats. In the case of the above scenario, we would like to have the CPE filter all the traffic coming from notebook.
  • Page 61: Ip Filter Configuration

    P-870HN-5xb Support Notes IP Filter Configuration a. Make sure that Firewall is enable in the WAN Show the IP configuration of notebook: Use the notebook to ping the P-870HN-5xb with IP = 172.23.30.106. All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 62 P-870HN-5xb Support Notes We can see that the ICMP packets do not come back; it is clearly that the ping request packets have all been filtered out by the CPE. All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 63: Configuration Of Accepting Incoming Traffic

    P-870HN-5xb Support Notes Configuration of Accepting Incoming Traffic b. Configure the IP Filtering Setup. Go to Security > Firewall Check the Active Firewall box Click Add. All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 64 Enter the Source Subnet Mask, e.g. “255.255.248.0”. Click Apply. Use the notebook to ping the P-870HN-5xb with IP = 172.23.30.106. We can see that the ICMP request was successful, thus proving that the CPE is now accepting the traffic coming from notebook.
  • Page 65: Lan Connection

    Internet using CPE's single user account. See the following figure. The CPE supports three virtual LAN interfaces via its single physical Ethernet interface. As to the second and third networks, we call 'IP Alias 1' and 'IP Alias 2'. All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 66: Ip Alias Configuration

    IP Alias Configuration a. IP Alias Go to Network > LAN > IP Check the Active IP Alias box. Enter the IP Address, e.g. “10.0.0.1”. Enter the IP Subnet Mask, e.g. “255.255.255.0”. Click Apply. All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 67: Maintenance Log

    P-870HN-5xb Support Notes Maintenance Log Internal Maintenance The P-870HN-5xb has the ability to record the events happening in the CPE into a system log (according to the severity) and maintain this log in itself. a. Activate the Maintenance Log. Go to Maintenance > Logs > Log Settings.
  • Page 68 Show the log in the Web GUI. Go to Maintenance > Logs > ViewLog. Select the Display, e.g. “Low”. c. Show the log by Telnet. Login the device by Telnet, Type the command “syslog dump”. All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 69: Remote Maintenance

    P-870HN-5xb Support Notes Remote Maintenance The P-870HN-5xb also has the ability to send the system log outside the CPE. Let’s say that we want the system log to be sent to the notebook with IP = 192.168.1.101. a. Activate the Maintenance Log.
  • Page 70: Maintenance Tool

    P-870HN-5xb Support Notes Maintenance Tool Maintenance Procedure a. Upload Firmware. Go to Maintenance > Tools > Firmware. Click Browse. Select the Firmware to upload and click Open. Click Upload. All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 71 P-870HN-5xb Support Notes b. Save Configuration. Go to Maintenance > Tools > Configuration. Click Backup. Click Save. All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 72 P-870HN-5xb Support Notes Select the directory to save and click Save. c. Upload Configuration. Go to Maintenance > Tools > Configuration. Click Browse. Select the configuration file to upload and click Open. All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 73: Wireless Application Notes

    The standard does not discuss how the shared key is established. In practice, most All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 74 128-bits. Many times you will see them referenced as 40-bits and 104-bits instead. The reason for this misnomer is that the WEP key (40/104 bits) is concatenated with the initialization vector (24 bits) resulting in a 64/128 bit total key size. All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 75 IEEE 802 LAN infrastructures, such as the 802.3 Ethernet, 802.11 Wireless LAN and VDSL LRE (Long Reach Ethernet), in order to provide a means of authenticating and authorizing devices attached to a LAN port that has All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 76 2. Supplicant: The station (i.e. Wireless client) is being authenticated by an authenticator attached on the Wireless network. The supplicant requests access to the LAN All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 77 802.1x is connected to an unauthorized 802.1x port, the authenticator requests the client’s identity. In this situation, the client does not respond to the 802.1x request; the port remains in the unauthorized state and the client is not granted access to the network. All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 78 EAPOL-start frame is received requests the identity of the client and begins relaying authentication messages between supplicant and the authentication server. Each supplicant attempting to access the network is uniquely identified by All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 79 Requests for authentication information. When supplicant receives the EAP request, it will reply the associated EAP response. So far, the ZyXEL Wireless AP only supports the MD-5 challenge authentication mechanism, but will support the TLS and TTLS in the future. All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 80 When the supplicant does not need the wireless access any more, it sends EAPOL-Logoff packet to terminate its 802.1x session and the port state will become unauthorized. The following figure displays the EAPOL exchange ping-pong chart. All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 81 The EAPOL packet contains the following fields: protocol version, packet type, packet body length, and packet body. Most of the fields are obvious. The packet type can have four different values and these values are described as followed: All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 82 WEP key to the supplicant after the TLS negotiation has completed between the supplicant and RADIUS server.                  All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 83 The WAP applies the IEEE 802.1x Extensible Authentication Protocol (EAP) to authenticate wireless clients using an external RADIUS database. You can not use the P-870HN-5xb's local user database for WPA authentication purpose, since the local user database uses the MD5 EAP which can not generate keys.
  • Page 84: Wireless Configuration

    P-870HN-5xb Support Notes Wireless Configuration Activate the WLAN interface of the P-870HN-5xb and connect the notebook (802.11bg wireless NIC required) under the WPA-PSK as its security mode. a. Wireless Setup. Go to Network > Wireless LAN > General. Check the Active Wireless LAN box.
  • Page 85 P-870HN-5xb Support Notes Show all the wireless networks in your notebook (802.11bg wireless NIC required): Enter the WPA-PSK pre-shared key. All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 86 P-870HN-5xb Support Notes We can see that the notebook is now connected to the WLAN interface of the P-870HN-5xb. All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 87 Check the Hide Network Name(SSID) box Select the Security Mode, e.g. “WPA-PSK”. Select the WPA Encryption, e.g. “TKIP”. Enter the Pre-Shared Key, e.g. “11111111”. Enter the WPA Group Key Update Timer, e.g. “1800”. Click Apply. All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 88 P-870HN-5xb Support Notes Show all the wireless networks in your notebook: As we can see, we cannot find the SSID “TEST_01”. All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 89 P-870HN-5xb Support Notes To connect to “TEST_01”, we need to configure the “Wireless Network Connection Properties” of the notebook WLAN interface: All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 90 P-870HN-5xb Support Notes Go “Connection” tab and check the box under the name of “Connect when this network is in range”. All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 91 P-870HN-5xb Support Notes Then we will see the notebook connected to the “TEST_01”, even though the SSID is now displayed in the broadcast list. All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 92 Check the Active Wireless LAN box. Check the Auto Generate Key box Select the Security Mode, e.g. “WPA-PSK”. Select the WPA Encryption, e.g. “TKIP”. Enter the WPA Group Key Update Timer, e.g. “1800”. Click Apply. All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 93 P-870HN-5xb Support Notes Show all the wireless networks in your notebook: Enter the WPA-PSK pre-shared key auto-generated by P-870HN-5xb. All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 94 P-870HN-5xb Support Notes We can see that the notebook is now connected to the WLAN interface of the P-870HN-5xb. All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 95: Wps Application Notes

    Wi-Fi Protected Setup. There are several different methods defined in WPS to simplify the process of configuration. P-870HN-5xb supports two of those methods, which are the PIN Method and the PBC Method. PIN Method:...
  • Page 96 This feature allows you to enable and configure multiple BSSs. a. More AP setup Go to Network > Wireless LAN > More AP. Click Modify. b. Common Setup Click Active. Choose the security mode. All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 97 P-870HN-5xb Support Notes All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 98: Wps Configuration

    P-870HN-5xb Support Notes WPS configuration a. WPS Setup Go to Network > Wireless LAN > WPS. Check the Enable WPS box. Click Apply. All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 99 WPS Station Setup Go to Network > Wireless LAN > WPS Station. Click the Push-Button Note: You must press the other wireless device’s WPS button within 2 minutes of pressing this button. All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 100 Use this feature to set up your WDS links between the ZyXEL device and other wireless APs. a. WPS Setup Choose the operation mode to “Access Point + Bridge” or “Wireless Bridge”. 2. Configure the Remote Bridge MAC Address. 3. Click Apply. All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 101 4. Set the Output Power, e.g. “100%”. 5. Set the Multicast Rate, e.g. “1 Mbps”. 6. Set the 802.11 Mode, e.g. “802.11 b/g/n Mixed”. 7. Set the 802.11 Protection, e.g. “Auto”. 8. Click Apply. All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 102: Product Faq

    Why do I need to use P-870HN-5xb? You need an VDSL modem/router to use with VDSL line, P-870HN-5xb is an ideal device for such application. The device has 4 Ethernet ports (LAN ports) and one VDSL WAN port. You should connect the computer to the LAN port and connect the VDSL line to the WAN port.
  • Page 103: Why Does My Provider Use Pppoe

    Browse the World Wide Web (WWW), send and receive individual e-mail, and download software. These are just a few of many benefits you can enjoy when you put the whole office on-line with the device. All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 104: Does Device Support Dynamic Ip Addressing

    SUA server table. Therefore, to make a local server accessible to the outside users, the port number and the inside IP address of the server must be configured. All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 105: What Dhcp Capability Does The Device Support

    TFTP (Trivial File Transfer Protocol) over LAN. Can the device support TFTP over WAN? Although TFTP should work over WAN as well, it is not recommended because of the potential data corruption problems. All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 106: How Fast Can The Data Go

    NAT based on RFC 1631, and we call this feature as 'Multi-NAT'. For more information on IP address translation, please refer to RFC 1631, The IP Network Address Translator (NAT). All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 107: When Do I Need Multi-Nat

    In Many-to-Many Overload mode, the device maps the multiple ILA to shared IGA. 4. Many to Many No Overload In Many-to-Many No Overload mode, the device maps each ILA to unique IGA. 5. Server All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 108: What Is The Difference Between Sua And Multi-Nat

    2 sets since there is only one remote node. The default SUA (Read Only) is a convenient, pre-configured, read only, Many-to-One mapping set, sufficient for most purposes and helpful to people already familiar with SUA in previous ZyNOS versions. All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 109: What Is Bootp/Dhcp

    IP address we can use the DDNS service. The DDNS server allows to alias a dynamic IP address to a static hostname. Whenever the ISP assigns you a new IP, the device sends this IP to the DDNS server for its updates. All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 110: Wireless Faq

    Wireless LAN systems can be configured in a variety of topologies to meet the needs of specific applications and installations. Configurations are easily changed and range from peer-to-peer networks suitable for a small number of users to full infrastructure All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 111: What Are The Disadvantages Of Wireless Lans

    802.11b is the first revision of 802.11 standard allowing data rates up to 11Mbps in the 2.4GHz ISM band. Also known as 802.11 High-Rate and Wi-Fi. 802.11b only uses DSSS, the maximum speed of 11Mbps has fallbacks to 5.5, 2 and 1Mbps. All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 112: How Fast Is 802.11B

    802.11n is a recent amendment which improves upon the previous 802.11 standards by adding multiple-input multiple-output (MIMO) and many other newer features. The IEEE has approved the amendment with an expected publication in mid October 2009. All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 113: Is It Possible To Use Products From A Variety Of Vendors

    802.11 device, or a new 2.4 GHz cordless phone for that matter. But, BlueTooth devices are usually low-power, so the effects that a Bluetooth device may have on an 802.11 network, if any, aren't far-reaching. All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 114: Can Radio Signals Pass Through Walls

    What is Ad Hoc mode? A wireless network consists of a number of stations without access points. Without using an access point or any connection to a wired network. All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 115: What Is Infrastructure Mode

    Do I need the same kind of antenna on both sides of a link? No. Provided the antenna is optimally designed for 2.4GHz or 5GHz operation. WLAN NICs often include an internal antenna which may provide sufficient reception. All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 116: Why The 2.4 Ghz Frequency Range

    "Key String" passed through the WEP encryption algorithm. Access is denied by anyone who does not have an assigned key. WEP comes in 40/64-bit and 128-bit encryption key lengths. Note, WEP has shown to All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 117: What Is The Difference Between 40-Bit And 64-Bit Wep

    SSID. What are Insertion Attacks? The insertion attacks are based on placing unauthorized devices on the wireless network without going through a security process and review. All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 118: What Is Wireless Sniffer

    The port transmits and receives normal traffic without 802.1X-based authentication of the client. No access allowed—causes the port to remain in the unauthorized state, ignoring all All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 119: What Is Radius

    Radius server but still want to benefit from it. Because WPA-PSK only requires a single password to be entered on wireless AP/gateway and wireless client. As long as the passwords match, a client will be granted access to the WLAN. All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 120: How To Enter The "Shell Mode

    P-870HN-5xb Support Notes Trouble Shooting In case of problems happening to the P-870HN-5xb, we are able to check the device with more detailed information by entering the “shell mode”. Those statistics may help the engineer to pinpoint the problem more easily.
  • Page 121: Cpu Usage

    P-870HN-5xb Support Notes CPU usage Command: #top (press Ctrl+C to exit) Memory usage Command: # cat /proc/meminfo All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 122: Current Processes

    P-870HN-5xb Support Notes Current processes Command: IGMP table Command: #cat /proc/net/igmp All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 123: Packets Statistics

    P-870HN-5xb Support Notes Packets statistics Command: #cat /proc/net/dev Physical layer statistics Command: #adslctl info --stats All contents copyright (c) 2009 ZyXEL Communications Corporation.
  • Page 124: Cli Command List

    The latest CI command list is available in release notes of every ZyXEL firmware release. Please go to ZyXEL public WEB site http://www.zyxel.com/web/support_download.php download firmware package (*.zip), you should unzip the package to get the release note in PDF format. All contents copyright (c) 2009 ZyXEL Communications Corporation.

Table of Contents