ZyXEL Communications P870HNU-51B User Manual

802.11n wireless vdsl2 4-port gateway
Hide thumbs Also See for P870HNU-51B:
Table of Contents

Advertisement

Quick Links

P870HNU-51B
IPv6 version
802.11n Wireless VDSL2 4-port Gateway
Default Login Details
IP Address
http://192.168.1.1
User Name
Password
Firmware Version 1.12
Edition 1, 5/2011
www.zyxel.com
1234
1234
Copyright © 2011
ZyXEL Communications Corporation

Advertisement

Table of Contents
loading

Summary of Contents for ZyXEL Communications P870HNU-51B

  • Page 1 P870HNU-51B IPv6 version 802.11n Wireless VDSL2 4-port Gateway Default Login Details IP Address http://192.168.1.1 User Name 1234 Password 1234 Firmware Version 1.12 Edition 1, 5/2011 www.zyxel.com Copyright © 2011 ZyXEL Communications Corporation...
  • Page 3: About This User's Guide

    About This User's Guide About This User's Guide IMPORTANT! READ CAREFULLY BEFORE USE. KEEP THIS GUIDE FOR FUTURE REFERENCE. Intended Audience This manual is intended for people who want to configure the Device using the web configurator. Related Documentation • Support Disc Refer to the included CD for support documents.
  • Page 4: Document Conventions

    Document Conventions Document Conventions Warnings and Notes These are how warnings and notes are shown in this User’s Guide. Warnings tell you about things that could harm you or your device. Note: Notes tell you other important information (for example, other things you may need to configure or helpful tips) or recommendations.
  • Page 5 Document Conventions Device Computer Notebook computer Server DSLAM Firewall Telephone Switch Router P-870HNU-51b User’s Guide...
  • Page 6: Safety Warnings

    Safety Warnings Safety Warnings • Do NOT use this product near water, for example, in a wet basement or near a swimming pool. • Do NOT expose your device to dampness, dust or corrosive liquids. • Do NOT store things on the device. •...
  • Page 7: Table Of Contents

    Contents Overview Contents Overview User’s Guide ........................... 17 Introducing the Device ....................... 19 Tutorials ............................. 25 Introducing the Web Configurator ....................63 Technical Reference ......................69 Status Screens ........................... 71 WAN Setup ..........................85 LAN Setup ..........................115 Wireless LAN ........................... 125 Network Address Translation (NAT) ..................
  • Page 8 Contents Overview P-870HNU-51b User’s Guide...
  • Page 9: Table Of Contents

    Table of Contents Table of Contents About This User's Guide ......................3 Document Conventions ......................4 Safety Warnings........................6 Contents Overview ........................7 Table of Contents ........................9 Part I: User’s Guide ................17 Chapter 1 Introducing the Device ......................19 1.1 Overview ..........................
  • Page 10 Table of Contents 2.7 How to Access the Device Using DDNS ................46 2.7.1 Registering a DDNS Account on www.dyndns.org ............. 47 2.7.2 Configuring DDNS on Your Device ................47 2.7.3 Testing the DDNS Setting ................... 48 2.8 How to Route Traffic to Another Network Using Static Route ..........48 2.9 How to Set Up NAT Port Forwarding ...................
  • Page 11 Table of Contents 5.5.1 WAN Connection Configuration .................. 92 5.6 The 3G Backup Screen ......................105 5.7 Technical Reference ......................107 Chapter 6 LAN Setup ..........................115 6.1 Overview ..........................115 6.1.1 What You Can Do in this Chapter ................115 6.2 What You Need To Know ....................
  • Page 12 Table of Contents 8.4 The DMZ Host Screen .......................155 8.5 The ALG Screen ....................... 155 8.6 Technical Reference ......................156 Chapter 9 Firewall ..........................159 9.1 Overview ........................... 159 9.1.1 What You Can Do in this Chapter ................159 9.2 The Firewall General Screen .................... 159 9.2.1 Default Policy Configuration ..................
  • Page 13 Table of Contents 13.1 Overview ........................185 13.1.1 What You Can Do in this Chapter ................185 13.2 The Static Route Screen ....................186 13.2.1 Static Route Edit ....................187 Chapter 14 RIP ............................189 14.1 Overview ........................189 14.1.1 What You Can Do in this Chapter ................189 14.2 The RIP Screen ........................
  • Page 14 Table of Contents 18.1 Overview ......................... 215 18.1.1 What You Can Do in this Chapter ................215 18.2 What You Need to Know ....................215 18.3 The UPnP Screen ......................216 18.4 Installing UPnP in Windows Example ................216 18.5 Using UPnP in Windows XP Example ................220 Chapter 19 System Settings ........................
  • Page 15 Table of Contents 23.4 Wireless LAN Troubleshooting ..................252 Chapter 24 Product Specifications ......................255 24.1 Hardware Specifications ....................255 24.2 Firmware Specifications ....................255 24.3 Wireless Features ......................258 Appendix A Pop-up Windows, JavaScripts and Java Permissions........261 Appendix B IPv6 ........................271 Appendix C Common Services ....................
  • Page 16 Table of Contents P-870HNU-51b User’s Guide...
  • Page 17: User's Guide

    User’s Guide...
  • Page 19: Introducing The Device

    Introducing the Device This chapter introduces the main applications and features of the Device. It also introduces the ways you can manage the Device. 1.1 Overview The Device is a VDSL2 gateway that allows super-fast, secure Internet access over analog (POTS) telephone lines.
  • Page 20: Good Habits For Managing The Device

    Chapter 1 Introducing the Device 1.3 Good Habits for Managing the Device Do the following things regularly to make the Device more secure and to manage the Device more effectively. • Change the password. Use a password that’s not easy to guess and that consists of different types of characters, such as numbers and letters.
  • Page 21: The Wlan/Wps Button

    Chapter 1 Introducing the Device wirelessly). You can have multiple WAN services over one ADSL or VDSL line. The Device cannot work in ADSL and VDSL mode at the same time. Figure 1 Device’s Internet Access Application Bridging IPoE PPPoE ADSL / VDSL IPoA / PPPoA ADSL...
  • Page 22: Activate Wps

    Chapter 1 Introducing the Device 1.5.2 Activate WPS Make sure the POWER LED is on (not blinking). Press the WLAN/WPS button for more than eight seconds and release it. Press the WPS button on another WPS -enabled device within range of the Device. The WLAN/WPS LED should flash while the Device sets up a WPS connection with the wireless device.
  • Page 23: Leds (Lights)

    Chapter 1 Introducing the Device 1.7 LEDs (Lights) The following graphic displays the labels of the LEDs. Figure 2 The Top Panel of the Device: None of the LEDs are on if the Device is not receiving power. Table 1 LED Descriptions COLOR STATUS DESCRIPTION...
  • Page 24 Chapter 1 Introducing the Device Table 1 LED Descriptions COLOR STATUS DESCRIPTION INTERNET Green The Device has received an IP address through a WAN interface and can connect to the Internet. Your device has a WAN IP address (either static or assigned by a DHCP server), PPP negotiation was successfully completed (if used) and the DSL connection is up.
  • Page 25: Tutorials

    Tutorials 2.1 Overview This chapter describes: • How to Set up Your VDSL Connection for Internet Access on page • How to Set up a Secure Wireless Network on page 30 • How to Use File Sharing on the Device on page 38 •...
  • Page 26 Chapter 2 Tutorials Go to Network > WAN > Layer 2 Interface. By default, you can only have one PTM interface on the Device and there is one PTM interface configured already. Go to Network > WAN > Internet Connection, click Add to create a new WAN service using PPPoE through the existing PTM interface.
  • Page 27 Chapter 2 Tutorials Select PPP over Ethernet, enter a descriptive name for this connection (Internet for example), clear the checkbox to not add a priority level and VLAN ID to traffic through this connection, and click Next. P-870HNU-51b User’s Guide...
  • Page 28 Chapter 2 Tutorials Enter the user name (user@isp.net for example), password (qwert12345 for example) and service name (isp.net for example) provided by your ISP for the PPPoE connection. Enable NAT on this connection. Click Next. Remove the existing interfaces in the Selected Default Gateway Interfaces list. Select and move a WAN interface (ppp1 in this example) to the Selected Default Gateway Interfaces list to use that interface as the default gateway.
  • Page 29 Chapter 2 Tutorials Select the first option. Remove the existing interfaces in the Selected DNS Server Interfaces list. Select and move a WAN interface (ppp1 in this example) to the Selected DNS Server Interfaces list to use that interface as the system DNS server. Click Next. The summary screen displays.
  • Page 30: How To Set Up A Secure Wireless Network

    Chapter 2 Tutorials You should see the WAN connection you just created in the Internet Connection screen. You are then able to access the Internet through this PPPoE connection when the Device’s DSL port is connected properly. 2.3 How to Set up a Secure Wireless Network Thomas wants to set up a wireless network so that he can use his notebook to access the Internet.
  • Page 31 Chapter 2 Tutorials Open the Network > Wireless LAN > General screen in the Device’s web configurator. Configure the screen using the provided parameters (see page 30). Make sure the Enable Wireless LAN check box is selected. Select Auto Channel Selection to have the Device automatically determine a channel which is not used by another AP.
  • Page 32 Chapter 2 Tutorials Click the Advanced Setup tab to display the advanced settings and select 802.11 b/g/n Mixed in the 802.11 Mode field. Click Apply. Open the Status screen.Verify your wireless and wireless security settings under Device Information and check if the WLAN connection is up under Interface Status. Thomas can now use the WPS feature to establish a wireless connection between his notebook and the Device (see Section 2.3.2 on page...
  • Page 33: Using Wps

    Chapter 2 Tutorials Click the WLAN Station List hyperlink in the Status screen. You can see if any wireless client has connected to the Device. 2.3.2 Using WPS This section shows you how to set up a wireless network using WPS. It uses the Device as the AP and ZyXEL NWD210N as the wireless client which connects to the notebook.
  • Page 34 Chapter 2 Tutorials Alternatively, you may log into Device’s web configurator, make sure the Enable WPS checkbox is selected and click Apply in the Network > Wireless LAN > WPS Station screen. Click the Push Button in the Network > Wireless LAN > WPS Station screen. Note: Your Device has a WLAN/WPS button located on its rear panel as well as a WPS button in its configuration utility.
  • Page 35: Wireless Client

    Chapter 2 Tutorials The following figure shows you an example of how to set up a wireless network and its security by pressing a button on both Device and wireless client. Wireless Client Access Point WITHIN 120 SECONDS Press and hold for more than 8 seconds SECURITY INFO COMMUNICATION...
  • Page 36: Pin Configuration

    Chapter 2 Tutorials PIN Configuration When you use the PIN configuration method, you need to use both the Device’s web configurator and the wireless client’s utility. Launch your wireless client’s configuration utility. Go to the WPS settings and select the PIN method to get a PIN number.
  • Page 37: Without Wps

    Chapter 2 Tutorials The following figure shows you how to set up a wireless network and its security on a Device and a wireless client by using PIN method. Wireless Client Access Point WITHIN 2 MINUTES Authentication by PIN SECURITY INFO COMMUNICATION 2.3.3 Without WPS Use the wireless adapter’s utility installed on the notebook to search for the “Example”...
  • Page 38: How To Use File Sharing On The Device

    Chapter 2 Tutorials Note: The Device supports IEEE 802.11b, IEEE 802.11g and IEEE 802.11n wireless clients. Make sure that your notebook or computer’s wireless adapter supports one of these standards. 2.4 How to Use File Sharing on the Device In this tutorial you can: •...
  • Page 39: Access Your Shared Files From A Computer

    Chapter 2 Tutorials Enter a user name and password. Click Apply to save your changes go back to the previous screen. Make sure the account is active. 2.4.2 Access Your Shared Files From a Computer You can use the Web Configurator or Windows Explorer to access the USB storage device connected to the Device.
  • Page 40 Chapter 2 Tutorials A screen pops up asking for password authentication. Enter the pre-configured user account’s user name and password. Click A screen appears and shows you the folder for the USB device connected to your Device. Double- click the folder to display the contents in it. P-870HNU-51b User’s Guide...
  • Page 41: How To Share A Usb Printer Via Your Device

    Chapter 2 Tutorials 2.4.2.2 Windows Explorer Note: The examples in this User’s Guide show you how to use Microsoft’s Windows XP to browse your shared files. Refer to your operating system’s documentation for how to browse your file structure. Open Windows Explorer to share files in the attached USB device using Windows Explorer browser. In Windows Explorer’s Address bar type a double backslash “\\”...
  • Page 42: How To Prioritize Traffic Using Qos Class And Queue

    Chapter 2 Tutorials Go to USB Service > Print Server to enable the print server function on the Device. Click Apply/ Save to save your settings. Make sure that a USB printer is connected to the Device. Section 11.5 on page 171 and/or Section 11.6 on page 175 for examples of how to set up a...
  • Page 43 Chapter 2 Tutorials Traffic that does not match this class is assigned a priority queue based on the internal QoS mapping table on the Device. 10,000 kbps Your computer IP=192.168.1.23 and/or MAC=AA:FF:AA:FF:AA:FF E-mail traffic: Highest priority A colleague’s computer Other traffic: Automatic classifier Click Advanced >...
  • Page 44 Chapter 2 Tutorials • Rate Limit: 5,000 (kbps) Click Apply to save you changes. Go to Advanced > QoS > Class Setup. Click Add to create a new class. Select Enable and follow the settings as shown in the screen below. •...
  • Page 45 Chapter 2 Tutorials This maps e-mail traffic coming from port 25 to the highest priority, which you have created in the previous screen. This also maps your computer’s IP address and MAC address to the E-mail queue. P-870HNU-51b User’s Guide...
  • Page 46: How To Access The Device Using Ddns

    Chapter 2 Tutorials Verify that the queue setup works by checking Advanced > QoS > Monitor. This shows the bandwidth alloted to e-mail traffic compared to other network traffic. 2.7 How to Access the Device Using DDNS If you connect your Device to the Internet and it uses a dynamic WAN IP address, it is inconvenient for you to manage the device from the Internet.
  • Page 47: Registering A Ddns Account On Www.dyndns.org

    Chapter 2 Tutorials 2.7.1 Registering a DDNS Account on www.dyndns.org Open a browser and type http://www.dyndns.org. Apply for a user account. This tutorial uses UserName1 and 12345 as the username and password. Log into www.dyndns.org using your account. Add a new DDNS host name. This tutorial uses the following settings as an example. •...
  • Page 48: Testing The Ddns Setting

    Chapter 2 Tutorials Enter the user name (UserName1 for example) and password (12345 for example). Click Apply. 2.7.3 Testing the DDNS Setting Now you should be able to access the Device from the Internet. To test this: Open a web browser on the computer (using the IP address a.b.c.d) that is connected to the Internet.
  • Page 49 Chapter 2 Tutorials network) to computer B (in N2 network), the traffic is sent to the Device’s WAN default gateway by default. In this case, B will never receive the traffic. You need to specify a static routing rule on the Device to specify R as the router in charge of forwarding traffic to N2.
  • Page 50: How To Set Up Nat Port Forwarding

    Chapter 2 Tutorials Log into the Device’s Web Configurator in advanced mode. Click Advanced > Static Route. Click Add in the Static Route screen. Configure the Static Route Setup screen using the following settings: Select IPv4 in the IP Version field. Type 192.168.10.0 and subnet mask 255.255.255.0 for the destination, N2.
  • Page 51 Chapter 2 Tutorials address on the Device. Traffic should be forwarded to the port 666 of the Doom server computer which has an IP address of 192.168.1.34. D=192.168.1.34 Make sure you enable NAT on a WAN connection through which port traffic is transmitted. Click Network >...
  • Page 52: How To Use Atm Qos With Multiple Pvcs

    Chapter 2 Tutorials The port forwarding settings you configured are listed in the Port Forwarding screen. Players on the Internet then can have access to Thomas’ Doom server. 2.10 How to Use ATM QoS with Multiple PVCs Note: Voice traffic will not be affected by the user-defined QoS settings on the Device. It always gets the highest priority.
  • Page 53: Configuring Pvcs

    Chapter 2 Tutorials 2.10.1 Configuring PVCs Follows the steps below to set up two PVCs on the Device. Table 4 Multiple PVC Settings LAYER-2 INTERFACE WAN SERVICE 0/33 atm0 PPPoE (pppoe_0_0_33) 0/34 atm1 IPoE (ipoe_0_0_34) Note: Make sure you set the DSL/WAN switch (on the back of the Device) to the DSL side.
  • Page 54 Chapter 2 Tutorials Enter the VPI and VCI values (0 and 33 in this example) for PVC 1. Select CBR in the Service Category field and set the Peak Cell Rate as 943 (divide the bandwidth 400000 bps by 424). Click Apply/Save to save the changes and go back to the Layer 2 Interface screen.
  • Page 55 Chapter 2 Tutorials Click Apply/Save to save the changes and go back to the Layer 2 Interface screen. 2.10.1.1 Internet Connection Settings for PVC 1 Click Network > WAN > Internet Connection to configure WAN connection settings for PVC 1. Click Add.
  • Page 56 Chapter 2 Tutorials Select PVC 1 (atm0/0_0_33) as the layer-2 interface. Click Next. Select PPP over Ethernet and click Next. P-870HNU-51b User’s Guide...
  • Page 57 Chapter 2 Tutorials Enter the user name (user@isp.net for example), password (qwert12345 for example) and service name (isp.net for example) for the PPP connection. Click Next. Remove the existing interfaces in the Selected Default Gateway Interfaces list. Select and move a WAN interface (ppp1 in this example) to the Selected Default Gateway Interfaces list to use that interface as the default gateway.
  • Page 58 Chapter 2 Tutorials Select the first option. Remove the existing interfaces in the Selected DNS Server Interfaces list. Select and move a WAN interface (ppp1 in this example) to the Selected DNS Server Interfaces list to use that interface as the system DNS server. Click Next. The summary screen displays.
  • Page 59 Chapter 2 Tutorials 2.10.1.2 Internet Connection Settings for PVC 2 Click Add in the WAN > Internet Connection screen to configure WAN connection settings for PVC 2. Select PVC 2 (atm1/0_0_34) as the layer-2 interface. Click Next. Select IP over Ethernet and click Next. P-870HNU-51b User’s Guide...
  • Page 60 Chapter 2 Tutorials Select Obtain an IP address automatically and click Next. Select Enable NAT, then click Next. P-870HNU-51b User’s Guide...
  • Page 61 Chapter 2 Tutorials Select and move the WAN interface (atm1 in this example) to the Selected Default Gateway Interfaces list to use that interface as the default gateway. Click Next. Select the first option. Select and move the WAN interface (atm1 in this example) to the Selected DNS Server Interfaces list to use that interface as the system DNS server.
  • Page 62 Chapter 2 Tutorials The summary screen displays. Click Apply/Save to save your changes and go back to the Internet Connection screen. The Internet Connection screen should look like the following. P-870HNU-51b User’s Guide...
  • Page 63: Introducing The Web Configurator

    Introducing the Web Configurator This chapter describes how to access and navigate the web configurator. 3.1 Web Configurator Overview The web configurator is an HTML-based management interface that allows easy device setup and management via Internet browser. Use Internet Explorer 6.0 and later or Firefox 2.0 and later versions.
  • Page 64 Chapter 3 Introducing the Web Configurator A password screen displays. Enter the default admin user name 1234 and default admin password 1234. If you have changed the password, enter your password and click Login. Click Cancel to revert to the default password in the password field. Figure 4 Password Screen P-870HNU-51b User’s Guide...
  • Page 65: Web Configurator Main Screen

    Chapter 3 Introducing the Web Configurator 3.2 Web Configurator Main Screen This guide uses the P-870HN-51b screenshots as an example. The screens may vary slightly for different Device models. Figure 5 Main Screen As illustrated above, the main screen is divided into these parts: •...
  • Page 66 Chapter 3 Introducing the Web Configurator Table 5 Navigation Panel Summary LINK FUNCTION Internet Use this screen to configure ISP parameters, WAN IP address assignment, Connection and other advanced properties. 3G Backup Use this screen to configure the 3G WAN connection. Use this screen to configure LAN TCP/IP, DHCP and IP alias settings.
  • Page 67: Main Window

    Chapter 3 Introducing the Web Configurator Table 5 Navigation Panel Summary LINK FUNCTION System General Use this screen to configure your device’s name, domain name, management inactivity timeout and password. Time Setting Use this screen to change your Device’s time and date. Logs View Log Use this screen to view the logs for the level that you selected.
  • Page 68 Chapter 3 Introducing the Web Configurator P-870HNU-51b User’s Guide...
  • Page 69: Technical Reference

    Technical Reference...
  • Page 71: Status Screens

    Status Screens Use the Status screens to look at the current status of the device, system resources and interfaces (LAN and WAN). The Status screen also provides detailed information from DHCP and statistics from traffic. 4.1 Status Screen Click Status to open this screen. Figure 6 Status Screen Each field is described in the following table.
  • Page 72 Chapter 4 Status Screens Table 6 Status Screen LABEL DESCRIPTION Device Information User Name This field displays the Device system name. It is used for identification. Click this to go to the screen where you can change it. Model Number This is the model name of your Device. MAC Address This is the MAC (Media Access Control) or Ethernet address unique to your Device.
  • Page 73 Chapter 4 Status Screens Table 6 Status Screen LABEL DESCRIPTION Security This shows the level of wireless security the Device is using in this wireless network. System Status System This field displays how long the Device has been running since it last started up. Uptime The Device starts up when you plug it in, when you restart it (Maintenance >...
  • Page 74: Status: Invalidpin

    Chapter 4 Status Screens Table 6 Status Screen LABEL DESCRIPTION WAN Service Click this link to view packet specific statistics of the WAN connection(s). See Statistics Section 4.1.3 on page Route Info Click this link to view the internal routing table on the Device. See Section 4.1.4 on page WLAN Station...
  • Page 75: Status: Needpuk

    Chapter 4 Status Screens 4.1.2 3G Status: NeedPUK Click the NeedPUK link under Interface Status of the Status screen to access this screen. Use this screen to enter the PUK code to enable the 3G SIM card again. Figure 8 Status > NeedPUK The following table describes the labels in this screen.
  • Page 76: Wan Service Statistics

    Chapter 4 Status Screens 4.1.3 WAN Service Statistics Click Status > WAN Service Statistics to access this screen. Use this screen to view the WAN statistics. Figure 9 Status > WAN Service Statistics The following table describes the labels in this screen. Table 9 Status >...
  • Page 77: Route Info

    Chapter 4 Status Screens Table 9 Status > WAN Service Statistics (continued) LABEL DESCRIPTION Drops This indicates the number of outgoing packets dropped on this interface. Refresh Interval Enter the time interval for refreshing statistics in this field. Set Interval Click this button to apply the new poll interval you entered in the Refresh Interval field.
  • Page 78: Wlan Station List

    Chapter 4 Status Screens Table 10 Status > Route Info (continued) LABEL DESCRIPTION Service This indicates the name of the service used to forward the route. Interface This indicates the name of the interface through which the route is forwarded. •...
  • Page 79 Chapter 4 Status Screens Table 11 Status > WLAN Station List (continued) LABEL DESCRIPTION Set Interval Click this button to apply the new poll interval you entered in the Refresh Interval field. Stop Click Stop to stop refreshing statistics. P-870HNU-51b User’s Guide...
  • Page 80: Xdsl Statistics

    Chapter 4 Status Screens 4.1.6 xDSL Statistics Click Status > xDSL Statistics to access this screen. Use this screen to view detailed DSL statistics. Figure 12 Status > xDSL Statistics P-870HNU-51b User’s Guide...
  • Page 81 Chapter 4 Status Screens The following table describes the labels in this screen. Table 12 Status > xDSL Statistics LABEL DESCRIPTION xDSL Training This displays the current state of setting up the DSL connection. Status xDSL Profile This displays the group of DSL settings the DSL port is currently using. 0 displays if the DSL port is not currently using any group of DSL settings.
  • Page 82: Lan Statistics

    Chapter 4 Status Screens Table 12 Status > xDSL Statistics (continued) LABEL DESCRIPTION Attainable Net These are the highest theoretically possible transfer rates at which the port could Data Rate send and receive payload data without transport layer protocol headers and traffic.
  • Page 83: Client List

    Chapter 4 Status Screens The following table describes the labels in this screen. Table 13 Status > LAN Statistics LABEL DESCRIPTION Interface This shows the LAN or WLAN interface. eth0~3 represent the physical Ethernet ports 1~ 4. Received Bytes This indicates the number of bytes received on this interface. Pkts This indicates the number of transmitted packets on this interface.
  • Page 84 Chapter 4 Status Screens The following table describes the labels in this screen. Table 14 Status > Client List LABEL DESCRIPTION Host Name This indicates the computer host name. MAC Address Every Ethernet device has a unique MAC (Media Access Control) address. The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters, for example, 00:A0:C5:00:00:02.
  • Page 85: Wan Setup

    WAN Setup 5.1 Overview This chapter discusses the Device’s WAN screens. Use these screens to configure your Device for Internet access. A WAN (Wide Area Network) connection is an outside connection to another network or the Internet. It connects your private networks (such as a LAN (Local Area Network) and other networks, so that a computer in one location can communicate with computers in other locations.
  • Page 86: Before You Begin

    Chapter 5 WAN Setup WAN IP Address The WAN IP address is an IP address for the Device, which makes it accessible from an outside network. It is used by the Device to communicate with other devices in other networks. It can be static (fixed) or dynamically assigned by the ISP each time the Device tries to access the Internet.
  • Page 87 Chapter 5 WAN Setup Note: The ATM and PTM layer-2 interfaces cannot work at the same time. Figure 16 Layer 2 Interface: PTM Figure 17 Layer 2 Interface: ATM The following table describes the fields in this screen. Table 15 Layer 2 Interface LABEL DESCRIPTION Interface...
  • Page 88: Layer 2 Interface Configuration

    Chapter 5 WAN Setup Table 15 Layer 2 Interface (continued) LABEL DESCRIPTION Remove Click the Remove button to delete this interface from the Device. A window displays asking you to confirm that you want to delete the interface. You cannot remove the layer-2 interface when a WAN service is associated with AnnexM Enabled This option is available for an ATM (ADSL) interface.
  • Page 89 Chapter 5 WAN Setup Figure 19 DSL PTM Interface Configuration The following table describes the fields in this screen. Table 16 DSL PTM Interface Configuration LABEL DESCRIPTION ATM PVC VPI (Virtual Path Identifier) and VCI (Virtual Channel Identifier) define a virtual Configuration circuit.
  • Page 90: The Internet Connection Screen

    Chapter 5 WAN Setup Table 16 DSL PTM Interface Configuration (continued) LABEL DESCRIPTION Service Category Select UBR Without PCR or UBR With PCR for applications that are non-time sensitive, such as e-mail. Select CBR (Continuous Bit Rate) to specify fixed (always-on) bandwidth for voice or data traffic.
  • Page 91 Chapter 5 WAN Setup Note: When a layer-2 interface is in VLAN MUX Mode, you can configure up to five WAN services on the Device. Figure 20 Internet Connection The following table describes the labels in this screen. Table 17 Internet Connection LABEL DESCRIPTION Interface...
  • Page 92: Wan Interface

    Chapter 5 WAN Setup Table 17 Internet Connection LABEL DESCRIPTION This shows whether Multicast Listener Discovery (MLD) is activated or not for this connection. MLD is not available when the connection uses the bridging service. Modify Click the Edit icon to configure the WAN connection. Click the Remove icon to delete the WAN connection.
  • Page 93: Service Type

    Chapter 5 WAN Setup 5.5.1.2 Service Type If you set the DSL link type to PPPoA or IPoA for the ATM interface and configure a WAN connection using the ATM interface, you only need to configure the Enter Service Description and MTU fields in this screen.
  • Page 94 Chapter 5 WAN Setup Table 19 WAN Configuration: Service Type LABEL DESCRIPTION Enter 802.1P IEEE 802.1p defines up to 8 separate traffic types by inserting a tag into a MAC- Priority layer frame that contains bits to define class of service. Type the IEEE 802.1p priority level (from 0 to 7) to add to traffic through this connection.
  • Page 95 Chapter 5 WAN Setup PPPoE or PPPoA This screen displays when you select PPP over Ethernet (PPPoE) in the WAN Service Configuration screen or set the DSL link type to PPPoA for the ATM interface and configure a WAN connection using the ATM interface. Figure 24 WAN Configuration: PPPoE The following table describes the labels in this screen.
  • Page 96 Chapter 5 WAN Setup Table 20 WAN Configuration: PPPoE or PPPoA LABEL DESCRIPTION PPPoE Service Type the name of your PPPoE service here. Name This field is not available for a PPPoA connection. Authentication The Device supports PAP (Password Authentication Protocol) and CHAP Method (Challenge Handshake Authentication Protocol).
  • Page 97 Chapter 5 WAN Setup Table 20 WAN Configuration: PPPoE or PPPoA LABEL DESCRIPTION 6RD (6to4 Select this option to enable IPv6 to IPv4 tunneling. This will encapsulate IPv6 Tunneling) to IPv4 packets. Select Set by DCHP if you want to obtain a 6RD endpoint IP address from a DHCP server.
  • Page 98 Chapter 5 WAN Setup IPoE This screen displays when you select IP over Ethernet in the WAN Service Configuration screen. Figure 25 WAN Configuration: IPoE P-870HNU-51b User’s Guide...
  • Page 99 Chapter 5 WAN Setup The following table describes the labels in this screen. Table 21 WAN Configuration: IPoE LABEL DESCRIPTION Obtain an IP A static IP address is a fixed IP that your ISP gives you. A dynamic IP address address is not fixed;...
  • Page 100 Chapter 5 WAN Setup Table 21 WAN Configuration: IPoE LABEL DESCRIPTION WAN IPv6 Enter the bit number of the IPv6 subnet mask provided by your ISP. Subnet Prefix Length Static WAN Enter the gateway IPv6 address provided by your ISP. Gateway IPv6 Address 6RD (6to4...
  • Page 101 Chapter 5 WAN Setup Table 22 WAN Configuration: IPoA LABEL DESCRIPTION Subnet Mask Enter the Device’s subnet mask. It must be smaller than C class (255.255.255.0). Assign Public IP Select this to have the Device give the LAN DHCP clients public IP addresses. to LAN PCs by LAN clients can still configure static private IP addresses and access the DHCP...
  • Page 102: Default Gateway

    Chapter 5 WAN Setup Table 23 WAN Configuration: NAT, IGMP Multicast and Firewall Activation: IPoE LABEL DESCRIPTION Back Click this button to return to the previous screen. Next Click this button to continue. 5.5.1.5 Default Gateway The screen is not available when you select Bridging in the WAN Service Configuration screen. Figure 28 WAN Configuration: Default Gateway: PPPoE, PPPoA, IPoE or IPoA The following table describes the labels in this screen.
  • Page 103 Chapter 5 WAN Setup Note: If you configure only one IPoA or IPoE connection using the ATM interface on the Device, you must enter the static DNS server address. Figure 29 WAN Configuration: DNS Server: PPPoE, PPPoA, IPoE or IPoA The following table describes the labels in this screen.
  • Page 104: Configuration Summary

    Chapter 5 WAN Setup Table 25 WAN Configuration: DNS Server: PPPoE or IPoE LABEL DESCRIPTION Available WAN These are the WAN interfaces you can select from. Interfaces Use the following Select this to have the Device use the DNS server addresses you configure manually.
  • Page 105: The 3G Backup Screen

    Chapter 5 WAN Setup The following table describes the labels in this screen. Table 26 WAN Configuration: Configuration Summary LABEL DESCRIPTION Connection Type This is the encapsulation method used by this connection. Service Name This is the name of the service. Service Category This is the ATM traffic class.
  • Page 106 Chapter 5 WAN Setup If the signal strength of a 3G network is too low, the 3G card may switch to an available 2.5G or 2.75G network. Refer to Section 5.7 on page 107 for a comparison between 2G, 2.5G, 2.75G and 3G wireless technologies.
  • Page 107: Technical Reference

    Chapter 5 WAN Setup Table 27 3G Backup (continued) LABEL DESCRIPTION Dial string Enter the phone number (dial string) used to dial up a connection to your service provider’s base station. Your ISP should provide the phone number. For example, *99# is the dial string to establish a GPRS or 3G connection in Taiwan.
  • Page 108: Ip Over Ethernet

    Chapter 5 WAN Setup IP over Ethernet IP over Ethernet (IPoE) is an alternative to PPPoE. IP packets are being delivered across an Ethernet network, without using PPP encapsulation. They are routed between the Ethernet interface and the WAN interface and then formatted so that they can be understood in a bridged environment.
  • Page 109: Traffic Shaping

    Chapter 5 WAN Setup Multiplexing There are two conventions to identify what protocols the virtual circuit (VC) is carrying. Be sure to use the multiplexing method required by your ISP. VC-based Multiplexing In this case, by prior mutual agreement, each protocol is assigned to a specific virtual circuit; for example, VC1 carries IP, etc.
  • Page 110: Atm Traffic Classes

    Chapter 5 WAN Setup The following figure illustrates the relationship between PCR, SCR and MBS. Figure 32 Example of Traffic Shaping ATM Traffic Classes These are the basic ATM traffic classes defined by the ATM Forum Traffic Management 4.0 Specification. Constant Bit Rate (CBR) Constant Bit Rate (CBR) provides fixed bandwidth that is always available even if no data is being sent.
  • Page 111: Ip Address Assignment

    Chapter 5 WAN Setup IP Address Assignment A static IP is a fixed IP that your ISP gives you. A dynamic IP is not fixed; the ISP assigns you a different one each time. The Single User Account feature can be enabled or disabled if you have either a dynamic or static IP.
  • Page 112 Chapter 5 WAN Setup the external host’s IP address and port. So in the example, only 3, C is allowed to send packets to 2, B and only 4, D is allowed to send packets to 2, M. Figure 34 Symmetric NAT 3, C 2, B 4, D...
  • Page 113: Dns Server Address Assignment

    Chapter 5 WAN Setup number of 4,096 VLANs. Note that user priority and VLAN ID are independent of each other. A frame with VID (VLAN Identifier) of null (0) is called a priority frame, meaning that only the priority level is significant and the default VID of the ingress port is given as the VID of the frame. Of the 4096 possible VIDs, a VID of 0 is used to identify priority frames and value 4095 (FFF) is reserved, so the maximum possible VLAN configurations are 4,094.
  • Page 114 Chapter 5 WAN Setup 3G Comparison Table See the following table for a comparison between 2G, 2.5G, 2.75G and 3G wireless technologies. Table 28 2G, 2.5G, 2.75G, 3G and 3.5G Wireless Technologies MOBILE PHONE AND DATA STANDARDS DATA NAME TYPE SPEED GSM-BASED CDMA-BASED...
  • Page 115: Lan Setup

    LAN Setup 6.1 Overview A Local Area Network (LAN) is a shared communication system to which many computers are attached. A LAN is usually located in one immediate area such as a building or floor of a building. The LAN screens can help you configure a LAN DHCP server and manage IP addresses. •...
  • Page 116: Subnet Mask

    Chapter 6 LAN Setup Subnet Mask The subnet mask specifies the network number portion of an IP address. Your Device will compute the subnet mask automatically based on the IP address that you entered. You don't need to change the subnet mask computed by the Device unless you are instructed to do otherwise. DHCP DHCP (Dynamic Host Configuration Protocol) allows clients to obtain TCP/IP configuration at start- up from a server.
  • Page 117: The Ip Screen

    Chapter 6 LAN Setup 6.3 The IP Screen Click Network > LAN > IP to open the IP screen. See Section 6.5 on page 120 for background information. Use this screen to set the Local Area Network IP address and subnet mask of your Device.
  • Page 118 Chapter 6 LAN Setup Table 29 Network > LAN > IP (continued) LABEL DESCRIPTION Enable DHCP Select this to have the Device act as a DHCP server or DHCP relay agent. Otherwise, deselect this to not have the Device provide any DHCP services. The DHCP server will be disabled.
  • Page 119: The Dhcp Client List Screen

    Chapter 6 LAN Setup 6.4 The DHCP Client List Screen Click Network > LAN > DHCP Client List to open the DHCP Client List screen. Use this screen to look at the IP addresses currently assigned to DHCP clients and the IP addresses reserved for specific MAC addresses.
  • Page 120: The Ipv6 Screen

    Chapter 6 LAN Setup 6.5 The IPv6 screen Click Network > LAN > IPv6 to open the IPv6 screen. Use this screen to configure the IPv6 settings for your Device’s LAN interface. See Appendix B on page 271 for background information about IPv6.
  • Page 121: Technical Reference

    Chapter 6 LAN Setup Table 31 IPv6 LABEL DESCRIPTION IPv6 Prefix An IPv6 prefix length specifies how many most significant bits (start from the Length left) in the address compose the network address. This field displays the bit number of the IPv6 subnet mask. Router Select Enable to have the Device send router advertisement messages to the Advertisement...
  • Page 122: Dhcp Setup

    Chapter 6 LAN Setup LANs, WANs and the ZyXEL Device The actual physical connection determines whether the Device ports are LAN or WAN ports. There are two separate IP networks, one inside the LAN network and the other outside the WAN network as shown next.
  • Page 123: Private Ip Addresses

    Chapter 6 LAN Setup The Internet Assigned Number Authority (IANA) reserved this block of addresses specifically for private use; please do not use any other number unless you are told otherwise. Let's say you select 192.168.1.0 as the network number; which covers 254 individual addresses, from 192.168.1.1 to 192.168.1.254 (zero and 255 are reserved).
  • Page 124 Chapter 6 LAN Setup The Device supports both IGMP version 1 (IGMP-v1) and IGMP version 2 (IGMP-v2). At start up, the Device queries all directly connected networks to gather group membership. After that, the Device periodically updates this information. IP multicasting can be enabled/disabled on the Device LAN and/or WAN interfaces in the web configurator (LAN;...
  • Page 125: Wireless Lan

    Wireless LAN 7.1 Overview This chapter describes how to perform tasks related to setting up and optimizing your wireless network, including the following. • Turning the wireless connection on or off. • Configuring a name, wireless channel and security for the network. •...
  • Page 126: What You Need To Know

    Chapter 7 Wireless LAN 7.2 What You Need to Know Wireless Basics “Wireless” is essentially radio communication. In the same way that walkie-talkie radios send and receive information over the airwaves, wireless networking devices exchange information with one another. A wireless networking device is just like a radio that lets your computer exchange information with radios attached to other computers.
  • Page 127: Before You Begin

    Chapter 7 Wireless LAN passing over the airwaves, but also join the network. Once an unauthorized person has access to the network s/he can either steal information or introduce malware (malicious software) intended to compromise the network. For these reasons, a variety of security systems have been developed to ensure that only authorized people can use a wireless data network, or understand the data carried on it.
  • Page 128: The General Screen

    Chapter 7 Wireless LAN • Do the other wireless devices support WPS (Wi-Fi Protected Setup)? If so, you can set up a well- secured network very easily. Even if some of your devices support WPS and some do not, you can use WPS to set up your network and then add the non-WPS devices manually, although this is somewhat more complicated to do.
  • Page 129 Chapter 7 Wireless LAN The following table describes the labels in this screen. Table 32 Network > Wireless LAN > General LABEL DESCRIPTION Enable Click the check box to activate wireless LAN. Wireless LAN Channel Set the operating frequency/channel depending on your particular region. Selection Either select a channel or use Auto to have the Device automatically determine a channel to use.
  • Page 130: No Security

    Chapter 7 Wireless LAN Table 32 Network > Wireless LAN > General LABEL DESCRIPTION Apply Click this to save your changes back to the Device. Reset Click this to reload the previous configuration for this screen. 7.4.1 No Security Select No Security to allow wireless devices to communicate with the access points without any data encryption or authentication.
  • Page 131: Wep Encryption

    Chapter 7 Wireless LAN 7.4.2 WEP Encryption In order to configure and enable WEP encryption; click Network > Wireless LAN to display the General screen. Select WEP from the Security Mode list. Figure 42 Wireless LAN > General: Static WEP Encryption The following table describes the wireless LAN security labels in this screen.
  • Page 132: Wpa(2)-Psk

    Chapter 7 Wireless LAN Table 34 Network > Wireless LAN > General: Static WEP Encryption LABEL DESCRIPTION WEP (Wired Equivalent Privacy) provides data encryption to prevent unauthorized Encryption wireless stations from accessing data transmitted over the wireless network. Select 64-bit or 128-bit to enable data encryption. Key 1 to Key 4 The WEP key is used to secure your data from eavesdropping by unauthorized wireless users.
  • Page 133: Wpa(2) Authentication

    Chapter 7 Wireless LAN The following table describes the wireless LAN security labels in this screen. Table 35 Wireless LAN > General: WPA(2)-PSK LABEL DESCRIPTION Security Mode Choose WPA-PSK or WPA2-PSK from the drop-down list box. Active Compatible This field is only available for WPA2-PSK. Select this if you want the Device to support WPA-PSK and WPA2-PSK simultaneously.
  • Page 134 Chapter 7 Wireless LAN Note: If you select WPA or WPA2 in the Wireless LAN > General screen, the WPS feature is not available on the Device. Figure 44 Wireless LAN > General: WPA(2) The following table describes the wireless LAN security labels in this screen. Table 36 Wireless LAN >...
  • Page 135: Mac Filter

    Chapter 7 Wireless LAN Table 36 Wireless LAN > General: WPA(2) LABEL DESCRIPTION WPA2 This field is available only when you select WPA2. Preauthentication Pre-authentication enables fast roaming by allowing the wireless client (already connecting to an AP) to perform IEEE 802.1x authentication with another AP before connecting to it.
  • Page 136: Adding A New Mac Filtering Rule

    Chapter 7 Wireless LAN Use this screen to change your Device’s MAC filter settings. Click the Edit button in the Wireless LAN > General screen. The following screen displays. Figure 45 Wireless LAN > MAC Filter The following table describes the labels in this screen. Table 37 Wireless LAN >...
  • Page 137: The Wps Screen

    Chapter 7 Wireless LAN The following table describes the labels in this screen. Table 38 Wireless LAN > MAC Filter > Add LABEL DESCRIPTION MAC Address Enter the MAC addresses of the wireless devices that are allowed or denied access to the Device in these address fields.
  • Page 138: The Wps Station Screen

    Chapter 7 Wireless LAN Table 39 Network > Wireless LAN > WPS LABEL DESCRIPTION PIN Number This shows the PIN (Personal Identification Number) of the Device. Enter this PIN in the configuration utility of the device you want to connect to using WPS. The PIN is not necessary when you use WPS push-button method.
  • Page 139: The Advanced Setup Screen

    Chapter 7 Wireless LAN The following table describes the labels in this screen. Table 40 Network > Wireless LAN > WPS Station LABEL DESCRIPTION Push Button Click this button to add another WPS-enabled wireless device (within wireless range of the Device) to your wireless network. Note: You must press the other wireless device’s WPS button within two minutes of pressing this button.
  • Page 140 Chapter 7 Wireless LAN The following table describes the labels in this screen. Table 41 Wireless LAN > Advanced Setup LABEL DESCRIPTION RTS/CTS Enter a value between 0 and 2347. Threshold Fragmentation This is the maximum data fragment size that can be sent. Enter a value between Threshold 256 and 2346.
  • Page 141: Technical Reference

    Chapter 7 Wireless LAN 7.8 Technical Reference This section discusses wireless LANs in depth. For more information, see the appendix. 7.8.1 Wireless Network Overview The following figure provides an example of a wireless network. Figure 50 Example of a Wireless Network The wireless network is the part in the blue circle.
  • Page 142: Additional Wireless Terms

    Chapter 7 Wireless LAN 7.8.2 Additional Wireless Terms The following table describes some wireless network terms and acronyms used in the Device’s Web Configurator. Table 42 Additional Wireless Terms TERM DESCRIPTION RTS/CTS Threshold In a wireless network which covers a large area, wireless devices are sometimes not aware of each other’s presence.
  • Page 143: User Authentication

    Chapter 7 Wireless LAN correct information (SSID, channel, and security). If a device is not allowed to use the wireless network, it does not matter if it has the correct information. This type of security does not protect the information that is sent in the wireless network. Furthermore, there are ways for unauthorized wireless devices to get the MAC address of an authorized device.
  • Page 144: Wifi Protected Setup

    Chapter 7 Wireless LAN When you select WPA2 or WPA2-PSK in your Device, you can also select an option (WPA compatible) to support WPA as well. In this case, if some of the devices support WPA and some support WPA2, you should set up WPA2-PSK or WPA2 (depending on the type of wireless network login) and select the WPA compatible option in the Device.
  • Page 145 Chapter 7 Wireless LAN Use the PIN method instead of the push-button configuration (PBC) method if you want to ensure that the connection is established between the devices you specify, not just the first two devices to activate WPS in range of each other. However, you need to log into the configuration interfaces of both devices to use the PIN method.
  • Page 146: How Wps Works

    Chapter 7 Wireless LAN The following figure shows a WPS-enabled wireless client (installed in a notebook computer) connecting to the WPS-enabled AP via the PIN method. Figure 51 Example WPS Process: PIN Method ENROLLEE REGISTRAR This device’s WPS PIN: 123456 Enter WPS PIN from other device: START...
  • Page 147: Example Wps Network Setup

    Chapter 7 Wireless LAN The following figure shows a WPS-enabled client (installed in a notebook computer) connecting to a WPS-enabled access point. Figure 52 How WPS works ACTIVATE ACTIVATE WITHIN 2 MINUTES WPS HANDSHAKE ENROLLEE REGISTRAR SECURE TUNNEL SECURITY INFO COMMUNICATION The roles of registrar and enrollee last only as long as the WPS setup process is active (two minutes).
  • Page 148 Chapter 7 Wireless LAN is the registrar, and Client 1 is the enrollee. The registrar randomly generates the security information to set up the network, since it is unconfigured and has no existing information. Figure 53 WPS: Example Network Step 1 ENROLLEE REGISTRAR SECURITY INFO...
  • Page 149: Limitations Of Wps

    Chapter 7 Wireless LAN In step 3, you add another access point (AP2) to your network. AP2 is out of range of AP1, so you cannot use AP1 for the WPS handshake with the new access point. However, you know that Client 2 supports the registrar function, so you use it to perform the WPS handshake instead.
  • Page 150 Chapter 7 Wireless LAN • When you use the PBC method, there is a short period (from the moment you press the button on one device to the moment you press the button on the other device) when any WPS-enabled device could join the network.
  • Page 151: Network Address Translation (Nat)

    Network Address Translation (NAT) 8.1 Overview This chapter discusses how to configure NAT on the Device. Network Address Translation (NAT, RFC 1631) is the translation of the IP address of a host in a packet, for example, the source address of an outgoing packet, used within one network to a different IP address known within another network.
  • Page 152 Chapter 8 Network Address Translation (NAT) You may enter a single port number or a range of port numbers to be forwarded, and the local IP address of the desired server. The port number identifies a service; for example, web service is on port 80 and FTP on port 21.
  • Page 153 Chapter 8 Network Address Translation (NAT) Table 44 NAT Port Forwarding (continued) LABEL DESCRIPTION Internal Port Enter the port number to which you want the Device to translate the incoming Start port. To forward only one port, enter the port number again in the Internal Port End field.
  • Page 154: The Port Forwarding Edit Screen

    Chapter 8 Network Address Translation (NAT) 8.3.1 The Port Forwarding Edit Screen This screen lets you create or edit a port forwarding rule. Select User Define in the Service Name field or click the rule’s Edit icon in the Port Forwarding screen to open the following screen. Figure 57 Port Forwarding Edit The following table describes the labels in this screen.
  • Page 155: The Dmz Host Screen

    Chapter 8 Network Address Translation (NAT) Table 45 Port Forwarding Edit (continued) LABEL DESCRIPTION Apply Click Apply to save your changes back to the Device. Cancel Click Cancel to begin configuring this screen afresh. 8.4 The DMZ Host Screen In addition to the servers for specified services, NAT supports a default server IP address. A default server receives packets from ports that are not specified in the NAT Port Forwarding Setup screen.
  • Page 156: Technical Reference

    Chapter 8 Network Address Translation (NAT) Use this screen to enable or disable the SIP (VoIP) ALG in the Device. To access this screen, click NAT > ALG. Figure 59 NAT > ALG Each field is described in the following table. Table 47 NAT >...
  • Page 157 Chapter 8 Network Address Translation (NAT) Port Forwarding Example Let's say you want to assign ports 21-25 to one FTP, Telnet and SMTP server (A in the example), port 80 to another (B in the example) and assign a default server IP address of 192.168.1.35 to a third (C in the example).
  • Page 158 Chapter 8 Network Address Translation (NAT) P-870HNU-51b User’s Guide...
  • Page 159: Firewall

    Firewall 9.1 Overview This chapter shows you how to enable and configure the Device firewall settings. The Device firewall is a packet filtering firewall and restricts access based on the source/destination computer network address of a packet and the type of application. 9.1.1 What You Can Do in this Chapter •...
  • Page 160: Default Policy Configuration

    Chapter 9 Firewall The following table describes the labels in this screen. Table 49 Security > Firewall > General LABEL DESCRIPTION Active Firewall Select this check box to activate the firewall. The Device performs access control and protects against Denial of Service (DoS) attacks when the firewall is activated.
  • Page 161: The Firewall Rules Screen

    Chapter 9 Firewall The following table describes the labels in this screen. Table 50 Security > Firewall > General: Add LABEL DESCRIPTION Active Select this check box to enable the rule. Name Enter a descriptive name of up to 16 printable English keyboard characters. Interface Select All to apply the policy to all interfaces on the Device or select the specific LAN or WAN interface to which this policy applies.
  • Page 162 Chapter 9 Firewall Note: The firewall rules that you configure here take priority over the general firewall action settings in the General screen. Figure 63 Security > Firewall > Rules The following table describes the labels in this screen. Table 51 Security > Firewall > Rules LABEL DESCRIPTION Incoming/...
  • Page 163: Firewall Rules Configuration

    Chapter 9 Firewall Table 51 Security > Firewall > Rules (continued) LABEL DESCRIPTION Action This displays whether the firewall silently discards packets (Drop), discards packets and sends an ICMP message to the sender (Reject) or allows the passage of packets (Permit). Modify Click the Edit icon to go to the screen where you can edit the rule.
  • Page 164 Chapter 9 Firewall Table 52 Security > Firewall > Rules: Add (continued) LABEL DESCRIPTION Direction Select a direction of travel of packets for which you want to configure the firewall rule. Protocol Select the IP protocol (TCP, UDP or ICMP) and enter the protocol (service type) number in the port field.
  • Page 165: File Sharing

    File Sharing 10.1 Overview Share files on a USB memory stick or hard drive connected to your Device with users on your network. The following figure is an overview of the Device’s file server feature. Computers A and B can access files on a USB device (C) which is connected to the Device.
  • Page 166: Before You Begin

    Chapter 10 File Sharing Shares When settings are set to default, each USB device connected to the Device is given a folder, called a “share”. If a USB hard drive connected to the Device has more than one partition, then each partition will be allocated a share.
  • Page 167: The File Sharing Screen

    Chapter 10 File Sharing The Device detects the USB device and makes its contents available for browsing. If you are connecting a USB hard drive that comes with an external power supply, make sure it is connected to an appropriate power source that is on. Note: If your USB device cannot be detected by the Device, see the troubleshooting for suggestions.
  • Page 168: Add New User

    Chapter 10 File Sharing Table 53 USB Services > File Sharing LABEL DESCRIPTION Remove Click this to delete the user account(s) who’s Delete check box is selected. Enabled This field displays whether a user account is activated or not. Select the check box to enable the account.
  • Page 169: Sharing A Usb Printer

    Sharing a USB Printer This chapter describes how you can share a USB printer via your Device. 11.1 Overview The Device allows you to share a USB printer on your LAN. You can do this by connecting a USB printer to one of the USB ports on the Device and then allowing the computers connected to your network to communicate with the print server (Device) using the Internet Printing Protocol.
  • Page 170: Before You Begin

    Chapter 11 Sharing a USB Printer Operating System An operating system (OS) is the interface which helps you manage a computer. Common examples are Microsoft Windows, Mac OS or Linux. Port A port maps a network service such as http to a process running on your computer, such as a process run by your web browser.
  • Page 171: Add A New Printer Using Windows

    Chapter 11 Sharing a USB Printer Click USB Service > Print Server to display the Print Server screen. Figure 69 USB Service > Print Server The following table describes the labels in this screen. Table 55 USB Service > Print Server LABEL DESCRIPTION Enable Print Server...
  • Page 172 Chapter 11 Sharing a USB Printer Click Start > Control Panel > Printers and Faxes to open the Printers and Faxes screen. Click Add a Printer. Figure 70 Printers Folder The Add Printer Wizard screen displays. Click Next. Figure 71 Add Printer Wizard: Welcome P-870HNU-51b User’s Guide...
  • Page 173 Chapter 11 Sharing a USB Printer Select A network printer, or a printer attached to another computer and click Next. Figure 72 Add Printer Wizard: Local or Network Printer Select Connect to a printer on the Internet or on a home or office network: and enter “http://192.168.1.1:631/printers/USB_PRINTER”...
  • Page 174 Chapter 11 Sharing a USB Printer Click Next to continue. Figure 74 Add Printer Wizard: Printer Model Select Yes and then click the Next button if you want to use this printer as the default printer on your computer. Otherwise select No and then click Next to continue. Figure 75 Add Printer Wizard: Default Printer P-870HNU-51b User’s Guide...
  • Page 175: Add A New Printer Using Macintosh Os X

    Chapter 11 Sharing a USB Printer 10 The following screen shows your current printer settings. Select Finish to complete adding a new printer. Figure 76 Add Printer Wizard Complete 11.6 Add a New Printer Using Macintosh OS X Complete the following steps to set up a print server driver on your Macintosh computer. 11.6.1 Mac OS 10.3 and 10.4 This example shows how to connect a printer behind the Device to your computer using Mac OS X v10.4.11.
  • Page 176 Chapter 11 Sharing a USB Printer 12 Open the Applications folder. Figure 78 Macintosh HD Folder 13 Open the Utilities folder. Figure 79 Applications Folder P-870HNU-51b User’s Guide...
  • Page 177 Chapter 11 Sharing a USB Printer 14 Double-click the Printer Setup Utility icon. Figure 80 Utilities Folder 15 Click the Add icon at the top of the screen. Figure 81 Printer List: Add 16 Click the IP Printer tab to set up your printer. •...
  • Page 178: Mac Os 10.5 And 10.6

    Chapter 11 Sharing a USB Printer • Select your printer manufacturer from the Printer Model drop-down list and then select a printer model. Click Add to save and close the Printer Browser configuration screen. Figure 82 Printer Browser 17 The new network printer displays in the Printer List. The default printer Name displays in bold type.
  • Page 179 Chapter 11 Sharing a USB Printer Click the Finder icon on the Dock or double-click your Mac hard disk icon (Mac OS X in this example) on your desktop to open the Mac HD window. Figure 84 Mac OS X HD Open the Applications folder.
  • Page 180 Chapter 11 Sharing a USB Printer Click the Print & Fax icon. Figure 87 System Preferences Select the Printing tab and click the + icon to add a new printer. Figure 88 Print & Fax Click the Advanced button on the Add Printer toolbar to set up your printer. If the Advanced button doesn’t appear, Ctrl-click the toolbar, select Customize Toolbar...
  • Page 181 Chapter 11 Sharing a USB Printer • Enter a descriptive name for the printer and where it is located. • Select your printer manufacturer from the Print Using drop-down list and then select a printer model. Click Add to save and close the Printer Browser configuration screen. Figure 89 Add Printer The new network printer displays in the Printers list.
  • Page 182 Chapter 11 Sharing a USB Printer P-870HNU-51b User’s Guide...
  • Page 183: Media Server

    Media Server 12.1 Overview You can set up your Device to act as a media server to provide media (like video) to DLNA- compliant players, such as Windows Media Player, ZyXEL DMAs (Digital Media Adapters), Xboxes or PS3s. The media server and the clients must have IP addresses in the same subnet. The Device media server enables you to: •...
  • Page 184: What You Need To Know

    Chapter 12 Media Server 12.1.2 What You Need to Know Media Server The media server feature lets anyone on your network play video, music, and photos from the Device (without having to copy them to another computer). The Device streams files to DLNA- compliant media clients without any configuration.
  • Page 185: Static Route

    Static Route 13.1 Overview The Device usually uses the default gateway to route outbound traffic from computers on the LAN to the Internet. To have the Device send data to devices not reachable through the default gateway, use static routes. For example, the next figure shows a computer (A) connected to the Device’s LAN interface.
  • Page 186: The Static Route Screen

    Chapter 13 Static Route 13.2 The Static Route Screen Click Advanced > Static Route to open the Static Route screen. Figure 94 Advanced > Static Route The following table describes the labels in this screen. Table 57 Advanced > Static Route LABEL DESCRIPTION This is the number of an individual static route.
  • Page 187: Static Route Edit

    Chapter 13 Static Route 13.2.1 Static Route Edit Click the Add button in the Static Route screen. Use this screen to configure the required information for a static route. Figure 95 Static Route: Add Figure 96 Static Route: Add: IPv6 The following table describes the labels in these screens.
  • Page 188 Chapter 13 Static Route P-870HNU-51b User’s Guide...
  • Page 189: Rip

    14.1 Overview Routing Information Protocol (RIP, RFC 1058 and RFC 1389) allows a device to exchange routing information with other routers. 14.1.1 What You Can Do in this Chapter The RIP screen lets you set up RIP settings on the Device (Section 14.2 on page 189).
  • Page 190 Chapter 14 RIP Table 59 Advanced > RIP LABEL DESCRIPTION Operation Select Passive to have the Device update the routing table based on the RIP packets received from neighbors but not advertise its route information to other routers in this interface. Select Active to have the Device advertise its route information and also listen for routing updates from neighboring routers.
  • Page 191: Quality Of Service (Qos)

    Quality of Service (QoS) 15.1 Overview Quality of Service (QoS) refers to both a network’s ability to deliver data with minimum delay, and the networking methods used to control the use of bandwidth. Without QoS, all traffic data is equally likely to be dropped when the network is congested. This can cause a reduction in network performance and make the network inadequate for time-critical application such as video-on- demand.
  • Page 192: What You Need To Know

    Chapter 15 Quality of Service (QoS) 15.2 What You Need to Know The following terms and concepts may help as you read through this chapter. QoS versus Cos QoS is used to prioritize source-to-destination traffic flows. All packets in the same flow are given the same priority.
  • Page 193: The Quality Of Service General Screen

    Chapter 15 Quality of Service (QoS) Traffic Policing Traffic policing is the limiting of the input or output transmission rate of a class of traffic on the basis of user-defined criteria. Traffic policing methods measure traffic flows against user-defined criteria and identify it as either conforming, exceeding or violating the criteria. Traffic Rate Traffic Rate Time...
  • Page 194: The Queue Setup Screen

    Chapter 15 Quality of Service (QoS) The following table describes the labels in this screen. Table 60 QoS General LABEL DESCRIPTION Enable QoS Select the check box to turn on QoS to improve your network performance. WAN Managed Enter the amount of upstream bandwidth for the WAN interface that you want to Upstream allocate using QoS.
  • Page 195: Adding A Qos Queue

    Chapter 15 Quality of Service (QoS) The following table describes the labels in this screen. Table 61 QoS Queue Setup LABEL DESCRIPTION Click this button to create a new entry. This is the index number of this entry. Active Select the check box to enable the queue. Name This shows the descriptive name of this queue.
  • Page 196: The Class Setup Screen

    Chapter 15 Quality of Service (QoS) Table 62 QoS Queue Setup: Add LABEL DESCRIPTION Outgoing Select the WAN interface to which this queue is applied. Interface Priority Select the priority level (from 1 to 7) of this queue. The smaller the number, the higher the priority level. Traffic assigned to higher priority queues gets through faster while traffic in lower priority queues is dropped if the network is congested.
  • Page 197 Chapter 15 Quality of Service (QoS) Click QoS > Class Setup to open the following screen. Figure 101 QoS Class Setup The following table describes the labels in this screen. Table 63 QoS Class Setup LABEL DESCRIPTION Click this button to create a new classifier. Order This field displays the index number of the classifier.
  • Page 198: Qos Class Edit

    Chapter 15 Quality of Service (QoS) 15.5.1 QoS Class Edit Click the Add button or the Edit icon in the Class Setup screen to configure a classifier. Figure 102 QoS Class Setup: Add P-870HNU-51b User’s Guide...
  • Page 199 Chapter 15 Quality of Service (QoS) The following table describes the labels in this screen. Table 64 QoS Class Configuration LABEL DESCRIPTION Class Configuration Enable Select to enable or disable this classifier. Class Name Enter a descriptive name of up to 20 printable English keyboard characters, including spaces.
  • Page 200 Chapter 15 Quality of Service (QoS) Table 64 QoS Class Configuration (continued) LABEL DESCRIPTION MAC Mask Type the mask for the specified MAC address to determine which bits a packet’s MAC address should match. Enter “f” for each bit of the specified source MAC address that the traffic’s MAC address should match.
  • Page 201: The Policer Setup Screen

    Chapter 15 Quality of Service (QoS) Table 64 QoS Class Configuration (continued) LABEL DESCRIPTION TCP ACK This field is available only when you select IP in the Ether Type field. If you select this option, the matched TCP packets must contain the ACK (Acknowledge) flag.
  • Page 202: Adding A Qos Policer

    Chapter 15 Quality of Service (QoS) Table 65 QoS Policer Setup LABEL DESCRIPTION Active Select the check box to enable the policer. Name This shows the descriptive name of this queue. Regulated These are the policer’s member QoS classes (classifiers). Classes Meter Type This shows which QoS metering algorithm the policer uses to shape traffic.
  • Page 203 Chapter 15 Quality of Service (QoS) Table 66 QoS Policer Setup: Add LABEL DESCRIPTION Meter Type Select how the policer shapes the traffic of the member QoS classes. The Simple Token Bucket algorithm uses tokens in a bucket to control when traffic can be transmitted.
  • Page 204: The Qos Monitor Screen

    Chapter 15 Quality of Service (QoS) 15.7 The QoS Monitor Screen To view the Device’s QoS packet statistics, click Advanced > QoS > Monitor. The screen appears as shown. Figure 105 QoS > Monitor The following table describes the labels in this screen. Table 67 QoS >...
  • Page 205: Technical Reference

    Chapter 15 Quality of Service (QoS) 15.8 Technical Reference The following section contains additional technical information about the Device features described in this chapter. IEEE 802.1Q Tag The IEEE 802.1Q standard defines an explicit VLAN tag in the MAC header to identify the VLAN membership of a frame across bridges.
  • Page 206: Token Bucket

    Chapter 15 Quality of Service (QoS) DSCP is backward compatible with the three precedence bits in the ToS octet so that non-DiffServ compliant, ToS-enabled network device will not conflict with the DSCP mapping. DSCP (6 bits) Unused (2 bits) The DSCP value determines the forwarding behavior, the PHB (Per-Hop Behavior), that each packet gets across the DiffServ network.
  • Page 207: Dynamic Dns Setup

    Dynamic DNS Setup 16.1 Overview Dynamic DNS allows you to update your current dynamic IP address with one or many dynamic DNS services so that anyone can contact you (in NetMeeting, CU-SeeMe, etc.). You can also access your FTP server or Web site on your own computer using a domain name (for instance myhost.dhs.org, where myhost is a name of your choice) that will never change instead of using an IP address that changes each time you reconnect.
  • Page 208: The Dynamic Dns Screen

    Chapter 16 Dynamic DNS Setup 16.3 The Dynamic DNS Screen To change your Device’s DDNS, click Advanced > Dynamic DNS. The screen appears as shown. Figure 106 Advanced > Dynamic DNS The following table describes the fields in this screen. Table 69 Advanced >...
  • Page 209 Chapter 16 Dynamic DNS Setup Table 69 Advanced > Dynamic DNS (continued) LABEL DESCRIPTION Apply Click Apply to save your changes back to the Device. Cancel Click Cancel to begin configuring this screen afresh. P-870HNU-51b User’s Guide...
  • Page 210 Chapter 16 Dynamic DNS Setup P-870HNU-51b User’s Guide...
  • Page 211: Remote Management

    Remote Management 17.1 Overview This chapter explains how to configure the TR-069 settings and access control settings on the Device. 17.1.1 What You Can Do in this Chapter • The TR-069 screen lets you configure the Device’s TR-069 auto-configuration settings (Section 17.2 on page 211).
  • Page 212 Chapter 17 Remote Management Click Advanced > Remote MGMT to open the following screen. Use this screen to configure your P-870HN to be managed by an ACS. Figure 107 TR-069 The following table describes the fields in this screen. Table 70 TR-069 LABEL DESCRIPTION Inform...
  • Page 213: The Ip Address Screen

    Chapter 17 Remote Management Table 70 TR-069 (continued) LABEL DESCRIPTION Connection Enter the connection request password. Request Password When the ACS makes a connection request to the Device, this password is used to authenticate the ACS. Connection This shows the connection request URL. Request URL The ACS can use this URL to make a connection request to the Device.
  • Page 214: Adding An Ip Address

    Chapter 17 Remote Management 17.3.1 Adding an IP Address Click the Add button in the IP Address screen to open the following screen. Figure 109 IP Address: Add The following table describes the fields in this screen. Table 72 IP Address: Add LABEL DESCRIPTION IP Address...
  • Page 215: Universal Plug-And-Play (Upnp)

    Universal Plug-and-Play (UPnP) 18.1 Overview Universal Plug and Play (UPnP) is a distributed, open networking standard that uses TCP/IP for simple peer-to-peer network connectivity between devices. A UPnP device can dynamically join a network, obtain an IP address, convey its capabilities and learn about other devices on the network. In turn, a device can leave a network smoothly and automatically when it is no longer in use.
  • Page 216: Upnp And Zyxel

    Chapter 18 Universal Plug-and-Play (UPnP) When a UPnP device joins a network, it announces its presence with a multicast message. For security reasons, the Device allows multicast messages on the LAN only. All UPnP-enabled devices may communicate freely with each other without additional configuration. Disable UPnP if this is not your intention.
  • Page 217 Chapter 18 Universal Plug-and-Play (UPnP) Installing UPnP in Windows Me Follow the steps below to install the UPnP in Windows Me. Click Start and Control Panel. Double-click Add/Remove Programs. Click on the Windows Setup tab and select Communication in the Components selection box. Click Details.
  • Page 218: Installing Upnp In Windows Xp

    Chapter 18 Universal Plug-and-Play (UPnP) In the Communications window, select the Universal Plug and Play check box in the Components selection box. Figure 112 Add/Remove Programs: Windows Setup: Communication: Components Click OK to go back to the Add/Remove Programs Properties window and click Next. Restart the computer when prompted.
  • Page 219 Chapter 18 Universal Plug-and-Play (UPnP) The Windows Optional Networking Components Wizard window displays. Select Networking Service in the Components selection box and click Details. Figure 114 Windows Optional Networking Components Wizard In the Networking Services window, select the Universal Plug and Play check box. Figure 115 Networking Services P-870HNU-51b User’s Guide...
  • Page 220: Using Upnp In Windows Xp Example

    Chapter 18 Universal Plug-and-Play (UPnP) Click OK to go back to the Windows Optional Networking Component Wizard window and click Next. 18.5 Using UPnP in Windows XP Example This section shows you how to use the UPnP feature in Windows XP. You must already have UPnP installed in Windows XP and UPnP activated on the Device.
  • Page 221 Chapter 18 Universal Plug-and-Play (UPnP) In the Internet Connection Properties window, click Settings to see the port mappings there were automatically created. Figure 117 Internet Connection Properties P-870HNU-51b User’s Guide...
  • Page 222 Chapter 18 Universal Plug-and-Play (UPnP) You may edit or delete the port mappings or click Add to manually add port mappings. Figure 118 Internet Connection Properties: Advanced Settings Figure 119 Internet Connection Properties: Advanced Settings: Add When the UPnP-enabled device is disconnected from your computer, all port mappings will be deleted automatically.
  • Page 223: Web Configurator Easy Access

    Chapter 18 Universal Plug-and-Play (UPnP) Select Show icon in notification area when connected option and click OK. An icon displays in the system tray. Figure 120 System Tray Icon Double-click on the icon to display your current Internet connection status. Figure 121 Internet Connection Status Web Configurator Easy Access With UPnP, you can access the web-based configurator on the Device without finding out the IP...
  • Page 224 Chapter 18 Universal Plug-and-Play (UPnP) Select My Network Places under Other Places. Figure 122 Network Connections An icon with the description for each UPnP-enabled device displays under Local Network. P-870HNU-51b User’s Guide...
  • Page 225 Chapter 18 Universal Plug-and-Play (UPnP) Right-click on the icon for your Device and select Invoke. The web configurator login screen displays. Figure 123 Network Connections: My Network Places Right-click on the icon for your Device and select Properties. A properties window displays with basic information about the Device.
  • Page 226 Chapter 18 Universal Plug-and-Play (UPnP) P-870HNU-51b User’s Guide...
  • Page 227: System Settings

    System Settings 19.1 Overview This chapter shows you how to configure system related settings, such as system time, password, name, the domain name and the inactivity timeout interval. 19.1.1 What You Can Do in this Chapter • The General screen lets you configure system settings (Section 19.2 on page 227).
  • Page 228 Chapter 19 System Settings Table 74 Maintenance > System > Genera LABEL DESCRIPTION New Password Type your new system password (up to 30 characters). Note that as you type a password, the screen displays a (*) for each character you type. After you change the password, use the new password to access the Device.
  • Page 229: The Time Setting Screen

    Chapter 19 System Settings 19.3 The Time Setting Screen To change your Device’s time and date, click Maintenance > System > Time Setting. The screen appears as shown. Use this screen to configure the Device’s time based on your local time zone. Figure 126 Maintenance >...
  • Page 230 Chapter 19 System Settings Table 75 Maintenance > System > Time Setting (continued) LABEL DESCRIPTION Current Date This field displays the date of your Device. Each time you reload this page, the Device synchronizes the date with the time server. Time and Date Setup Manual...
  • Page 231 Chapter 19 System Settings Table 75 Maintenance > System > Time Setting (continued) LABEL DESCRIPTION Apply Click Apply to save your changes back to the Device. Cancel Click Cancel to begin configuring this screen afresh. P-870HNU-51b User’s Guide...
  • Page 232 Chapter 19 System Settings P-870HNU-51b User’s Guide...
  • Page 233: Logs

    Logs 20.1 Overview This chapter contains information about configuring general log settings and viewing the Device’s logs. The web configurator allows you to choose which categories of events and/or alerts to have the Device log and then display the logs or have the Device send them to a syslog server. 20.1.1 What You Can Do in this Chapter •...
  • Page 234: The Log Settings Screen

    Chapter 20 Logs The following table describes the fields in this screen. Table 76 Maintenance > Logs > View Log LABEL DESCRIPTION Display Select a severity level of logs to view. The Device displays the logs with the severity level equal to or higher than what you selected. This field is a sequential value and is not associated with a specific entry.
  • Page 235 Chapter 20 Logs Table 77 Maintenance > Logs > Log Settings LABEL DESCRIPTION Mode Select Local to record the logs and store them in the local memory of the Device only. Select Remote to send logs to the specified log server. Select Both to record the logs and store them in the local memory and also send logs to the log server.
  • Page 236 Chapter 20 Logs P-870HNU-51b User’s Guide...
  • Page 237: Tools

    Tools Do not interrupt the file transfer process as this may PERMANENTLY DAMAGE your Device. 21.1 Overview This chapter explains how to upload new firmware, manage configuration files and restart your Device. Use the instructions in this chapter to change the device’s configuration file or upgrade its firmware. After you configure your device, you can backup the configuration file to a computer.
  • Page 238 Chapter 21 Tools Do NOT turn off the Device while firmware upload is in progress! Figure 129 Maintenance > Tools > Firmware The following table describes the labels in this screen. Table 78 Maintenance > Tools > Firmware LABEL DESCRIPTION Current This is the present Firmware version and the date created.
  • Page 239: The Configuration Screen

    Chapter 21 Tools The Device automatically restarts in this time causing a temporary network disconnect. In some operating systems, you may see the following icon on your desktop. Figure 131 Network Temporarily Disconnected After two minutes, log in again and check your new firmware version in the Status screen. If the upload was not successful, the following screen will appear.
  • Page 240: Backup Configuration

    Chapter 21 Tools Backup Configuration Backup Configuration allows you to back up (save) the Device’s current configuration to a file on your computer. Once your Device is configured and functioning properly, it is highly recommended that you back up your configuration file before making configuration changes. The backup configuration file will be useful in case you need to return to your previous settings.
  • Page 241: Reset To Factory Defaults

    Chapter 21 Tools If the upload was not successful, the following screen will appear. Click Tools > Configuration to go back to the Configuration screen. Figure 136 Configuration Upload Error Reset to Factory Defaults Click the Reset button to clear all user-entered configuration information and return the Device to its factory defaults.
  • Page 242 Chapter 21 Tools P-870HNU-51b User’s Guide...
  • Page 243: Diagnostic

    Diagnostic 22.1 Overview The Diagnostic screens display information to help you identify problems with the Device. The route between a CO VDSL switch and one of its CPE may go through switches owned by independent organizations. A connectivity fault point generally takes time to discover and impacts subscriber’s network access.
  • Page 244: The General Diagnostic Screen

    Chapter 22 Diagnostic 22.3 The General Diagnostic Screen Click Maintenance > Diagnostic to open the screen shown next. Ping and traceroute help check availability of remote hosts and also help troubleshoot network or Internet connections. Figure 139 Maintenance > Diagnostic > General The following table describes the fields in this screen.
  • Page 245: The 802.1Ag Screen

    Chapter 22 Diagnostic 22.4 The 802.1ag Screen Click Maintenance > Diagnostic > 8.2.1ag to open the following screen. Use this screen to perform CFM actions. Figure 140 802.1ag The following table describes the fields in this screen. Table 81 Maintenance > Diagnostic > 802.1ag LABEL DESCRIPTION 802.1ag...
  • Page 246: The Oam Ping Test Screen

    Chapter 22 Diagnostic Table 81 Maintenance > Diagnostic > 802.1ag (continued) LABEL DESCRIPTION Maintenance Select the format which the Device uses to send this MA information in the Association (MA) domain (MD). Options are VID, String and Integer. Format If you select VID or Integer, the Device adds the VLAN ID you specified for an MA in the CCM.
  • Page 247 Chapter 22 Diagnostic PVC. The Device sends an OAM F4 or F5 packet to the DSLAM or ATM switch and then returns it to the Device. The test result then displays in the text box. ATM sets up virtual circuits over which end systems communicate. The terminology for virtual circuits is as follows: •...
  • Page 248 Chapter 22 Diagnostic Note: This screen is available only when you configure an ATM layer-2 interface. Figure 142 Maintenance > Diagnostic > OAM Ping Test The following table describes the fields in this screen. Table 82 Maintenance > Diagnostic > OAM Ping Test LABEL DESCRIPTION Select a PVC on which you want to perform the loopback test.
  • Page 249: Troubleshooting

    Troubleshooting This chapter offers some suggestions to solve problems you might encounter. The potential problems are divided into the following categories. • Power, Hardware Connections, and LEDs • Device Access and Login • Internet Access • Wireless LAN Troubleshooting 23.1 Power, Hardware Connections, and LEDs The Device does not turn on.
  • Page 250: Device Access And Login

    Chapter 23 Troubleshooting 23.2 Device Access and Login I forgot the IP address for the Device. The default IP address is 192.168.1.1. If you changed the IP address and have forgotten it, you might get the IP address of the Device by looking up the IP address of the default gateway for your computer.
  • Page 251: Internet Access

    Chapter 23 Troubleshooting • If your computer is connected wirelessly, use a computer that is connected to a ETHERNET port. I can see the Login screen, but I cannot log in to the Device. Make sure you have entered the user name and password correctly. The default user name and password can be found on the cover of this User’s Guide.
  • Page 252: Wireless Lan Troubleshooting

    Chapter 23 Troubleshooting The Internet connection is slow or intermittent. There might be a lot of traffic on the network. Look at the LEDs, and check Section 1.7 on page If the Device is sending or receiving a lot of information, try closing some programs that use the Internet, especially peer-to-peer applications.
  • Page 253 Chapter 23 Troubleshooting Make sure your computer (with a wireless adapter installed) is within the transmission range of the Device. Check that both the Device and your wireless station are using the same wireless and wireless security settings. Make sure traffic between the WLAN and the LAN is not blocked by the firewall on the Device. Make sure you allow the Device to be remotely accessed through the WLAN interface.
  • Page 254 Chapter 23 Troubleshooting P-870HNU-51b User’s Guide...
  • Page 255: Product Specifications

    Product Specifications The following tables summarize the Device’s hardware and firmware features. 24.1 Hardware Specifications Table 83 Hardware Specifications Dimensions 231(W) x 147(D) x 57(H) mm Weight 950g Power Specification 12 V DC 1.5 A Built-in Switch Four auto-negotiating, auto MDI/MDI-X 10/100 Mbps RJ-45 Ethernet ports RESET Button Restores factory defaults Antenna...
  • Page 256 Chapter 24 Product Specifications Table 84 Firmware Specifications (continued) Wireless Functionality Allow the IEEE 802.11b, IEEE 802.11g and/or IEEE 802.11n wireless clients to connect to the Device wirelessly. Enable wireless security (WEP, (wireless devices only) WPA(2), WPA(2)-PSK) and/or MAC filtering to protect your wireless network.
  • Page 257 Chapter 24 Product Specifications Table 84 Firmware Specifications (continued) VDSL Standards VDSL line coding: ITU-T G.993.2 DMT modulation DSL handshake procedure protocol: ITU-T G.994.1 DSL physical layer management protocol: ITU-T G.997.1 VDSL band plan: 997 and 998 Support U0 band VDSL profiles: 8a, 8b, 8c, 8d, 12a, 12b, 17a VDSL speed: up to 100/50 Mbps@ 700 feet Support Annex A, Annex B and 5-band VDSL2...
  • Page 258: Wireless Features

    Chapter 24 Product Specifications Table 84 Firmware Specifications (continued) Other Protocol Support PPP (Point-to-Point Protocol) link layer protocol Transparent bridging for unsupported network layer protocols RIP I/RIP II ICMP IP Multicasting IGMP v1 and v2 IGMP Proxy Management Embedded Web Configurator Remote Firmware Upgrade Syslog TR-069...
  • Page 259 Chapter 24 Product Specifications Table 85 Wireless Features WPA2 WPA 2 is a wireless security standard that defines stronger encryption, authentication and key management than WPA. Other Wireless Features IEEE 802.11n Compliance Frequency Range: 2.4 GHz ISM Band Advanced Orthogonal Frequency Division Multiplexing (OFDM) Data Rates: 54Mbps, 11Mbps, 5.5Mbps, 2Mbps, and 1 Mbps Auto Fallback WPA2...
  • Page 260 Chapter 24 Product Specifications Table 86 Standards Supported (continued) STANDARD DESCRIPTION IEEE 802.11 Also known by the brand Wi-Fi, denotes a set of Wireless LAN/WLAN standards developed by working group 11 of the IEEE LAN/MAN Standards Committee (IEEE 802). IEEE 802.11b Uses the 2.4 gigahertz (GHz) band IEEE 802.11g Uses the 2.4 gigahertz (GHz) band...
  • Page 261: Appendix A Pop-Up Windows, Javascripts And Java Permissions

    Pop-up Windows, JavaScripts and Java Permissions In order to use the web configurator you need to allow: • Web browser pop-up windows from your device. • JavaScripts (enabled by default). • Java permissions (enabled by default). Note: Internet Explorer 6 screens are used here. Screens for other Internet Explorer versions may vary.
  • Page 262 Appendix A Pop-up Windows, JavaScripts and Java Permissions Clear the Block pop-ups check box in the Pop-up Blocker section of the screen. This disables any web pop-up blockers you may have enabled. Figure 144 Internet Options: Privacy Click Apply to save this setting. Enable Pop-up Blockers with Exceptions Alternatively, if you only want to allow pop-up windows from your device, see the following steps.
  • Page 263 Appendix A Pop-up Windows, JavaScripts and Java Permissions Select Settings…to open the Pop-up Blocker Settings screen. Figure 145 Internet Options: Privacy Type the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”.
  • Page 264 Appendix A Pop-up Windows, JavaScripts and Java Permissions Click Add to move the IP address to the list of Allowed sites. Figure 146 Pop-up Blocker Settings Click Close to return to the Privacy screen. Click Apply to save this setting. JavaScripts If pages of the web configurator do not display properly in Internet Explorer, check that JavaScripts are allowed.
  • Page 265 Appendix A Pop-up Windows, JavaScripts and Java Permissions In Internet Explorer, click Tools, Internet Options and then the Security tab. Figure 147 Internet Options: Security Click the Custom Level... button. Scroll down to Scripting. Under Active scripting make sure that Enable is selected (the default). Under Scripting of Java applets make sure that Enable is selected (the default).
  • Page 266: Java Permissions

    Appendix A Pop-up Windows, JavaScripts and Java Permissions Click OK to close the window. Figure 148 Security Settings - Java Scripting Java Permissions From Internet Explorer, click Tools, Internet Options and then the Security tab. Click the Custom Level... button. Scroll down to Microsoft VM.
  • Page 267 Appendix A Pop-up Windows, JavaScripts and Java Permissions Click OK to close the window. Figure 149 Security Settings - Java JAVA (Sun) From Internet Explorer, click Tools, Internet Options and then the Advanced tab. Make sure that Use Java 2 for <applet> under Java (Sun) is selected. P-870HNU-51b User’s Guide...
  • Page 268 Appendix A Pop-up Windows, JavaScripts and Java Permissions Click OK to close the window. Figure 150 Java (Sun) Mozilla Firefox Mozilla Firefox 2.0 screens are used here. Screens for other versions may vary. You can enable Java, Javascripts and pop-ups in one screen. Click Tools, then click Options in the screen that appears.
  • Page 269 Appendix A Pop-up Windows, JavaScripts and Java Permissions Click Content.to show the screen below. Select the check boxes as shown in the following screen. Figure 152 Mozilla Firefox Content Security P-870HNU-51b User’s Guide...
  • Page 270 Appendix A Pop-up Windows, JavaScripts and Java Permissions P-870HNU-51b User’s Guide...
  • Page 271: Appendix B Ipv6

    IPv6 Overview IPv6 (Internet Protocol version 6), is designed to enhance IP address size and features. The increase in IPv6 address size to 128 bits (from the 32-bit IPv4 address) allows up to 3.4 x 10 addresses. IPv6 Addressing The 128-bit IPv6 address is written as eight 16-bit hexadecimal blocks separated by colons (:). This is an example IPv6 address 2001:0db8:1a2b:0015:0000:0000:1a2f:0000.
  • Page 272 Appendix B IPv6 Global Address A global address uniquely identifies a device on the Internet. It is similar to a “public IP address” in IPv4. A global unicast address starts with a 2 or 3. Unspecified Address An unspecified address (0:0:0:0:0:0:0:0 or ::) is used as the source address when a device does not have its own address.
  • Page 273 Appendix B IPv6 Table 89 Reserved Multicast Address (continued) MULTICAST ADDRESS FF08:0:0:0:0:0:0:0 FF09:0:0:0:0:0:0:0 FF0A:0:0:0:0:0:0:0 FF0B:0:0:0:0:0:0:0 FF0C:0:0:0:0:0:0:0 FF0D:0:0:0:0:0:0:0 FF0E:0:0:0:0:0:0:0 FF0F:0:0:0:0:0:0:0 Subnet Masking Both an IPv6 address and IPv6 subnet mask compose of 128-bit binary digits, which are divided into eight 16-bit blocks and written in hexadecimal notation. Hexadecimal uses four bits for each character (1 ~ 10, A ~ F).
  • Page 274 Appendix B IPv6 combines its interface ID and global and subnet information advertised from the router. This is a routable global IP address. DHCPv6 The Dynamic Host Configuration Protocol for IPv6 (DHCPv6, RFC 3315) is a server-client protocol that allows a DHCP server to assign and pass IPv6 network addresses, prefixes and other configuration information to DHCP clients.
  • Page 275 Appendix B IPv6 such as the system name. The interface-ID option provides slot number, port information and the VLAN ID to the DHCPv6 server. The remote-ID option (if any) is stripped from the Relay-Reply messages before the relay agent sends the packets to the clients. The DHCP server copies the interface-ID option from the Relay-Forward message into the Relay-Reply message and sends it to the relay agent.
  • Page 276 Appendix B IPv6 On the ZyXEL Device, you can either set up a configured tunnel or an automatic 6to4 tunnel. The following describes each method. Configured Tunnel A configured tunnel is a point-to-point tunnelling mechanism that encapsulates an IPv6 address with an IPv4 address.
  • Page 277 Appendix B IPv6 For example, if you have an IPv4 address of 192.168.1.1 (first converted to binary notation and then to the colon hexadecimal representation of ), then the 6to4 addresses is c0a8:0101 2002:c0a8:0101::1/ Example - Enabling IPv6 on Windows XP/2003/Vista By default, Windows XP and Windows 2003 support IPv6.
  • Page 278 Appendix B IPv6 Double click Dibbler - a DHCPv6 client. Click Start and then OK. Now your computer can obtain an IPv6 address from a DHCPv6 server. Example - Enabling IPv6 on Windows 7 Windows 7 supports IPv6 by default. DHCPv6 is also enabled when you enable IPv6 on a Windows 7 computer.
  • Page 279 Appendix B IPv6 Click Close to exit the Local Area Connection Status screen. Select Start > All Programs > Accessories > Command Prompt. Use the ipconfig command to check your dynamic IPv6 address. This example shows a global address (2001:b021:2d::1000) obtained from a DHCP server. C:\>ipconfig Windows IP Configuration Ethernet adapter Local Area Connection:...
  • Page 280 Appendix B IPv6 P-870HNU-51b User’s Guide...
  • Page 281: Appendix C Common Services

    Common Services The following table lists some commonly-used services and their associated protocols and port numbers. For a comprehensive list of port numbers, ICMP type/code numbers and services, visit the IANA (Internet Assigned Number Authority) web site. • Name: This is a short, descriptive name for the service. You can use this one or create a different one, if you like.
  • Page 282 Appendix C Common Services Table 90 Commonly Used Services (continued) NAME PROTOCOL PORT(S) DESCRIPTION HTTP Hyper Text Transfer Protocol - a client/ server protocol for the world wide web. HTTPS HTTPS is a secured http session often used in e-commerce. ICMP User-Defined Internet Control Message Protocol is often...
  • Page 283 Appendix C Common Services Table 90 Commonly Used Services (continued) NAME PROTOCOL PORT(S) DESCRIPTION SMTP Simple Mail Transfer Protocol is the message-exchange standard for the Internet. SMTP enables you to move messages from one e-mail server to another. SNMP TCP/UDP Simple Network Management Program.
  • Page 284 Appendix C Common Services P-870HNU-51b User’s Guide...
  • Page 285: Appendix D Open Software Announcements

    Open Software Announcements End-User License Agreement for “P-870HNU-51b” WARNING: ZyXEL Communications Corp. IS WILLING TO LICENSE THE SOFTWARE TO YOU ONLY UPON THE CONDITION THAT YOU ACCEPT ALL OF THE TERMS CONTAINED IN THIS LICENSE AGREEMENT. PLEASE READ THE TERMS CAREFULLY BEFORE COMPLETING THE INSTALLATION PROCESS AS INSTALLING THE SOFTWARE WILL INDICATE YOUR ASSENT TO THEM.
  • Page 286 Appendix D Open Software Announcements The Software and Documentation contain material that is protected by international copyright law, trade secret law, international treaty provisions, and the applicable national laws of each respective country. All rights not granted to you herein are expressly reserved by ZyXEL. You may not remove any proprietary notice of ZyXEL or any of its licensors from any copy of the Software or Documentation.
  • Page 287 Appendix D Open Software Announcements THIRTY (30) DAYS FROM THE DATE OF PURCHASE OF THE SOFTWARE, AND NO WARRANTIES SHALL APPLY AFTER THAT PERIOD. 7.Limitation of Liability IN NO EVENT WILL ZyXEL BE LIABLE TO YOU OR ANY THIRD PARTY FOR ANY INCIDENTAL OR CONSEQUENTIAL DAMAGES (INCLUDING, WITHOUT LIMITATION, INDIRECT, SPECIAL, PUNITIVE, OR EXEMPLARY DAMAGES FOR LOSS OF BUSINESS, LOSS OF PROFITS, BUSINESS INTERRUPTION, OR LOSS OF BUSINESS INFORMATION) ARISING OUT OF THE USE OF OR INABILITY TO USE THE...
  • Page 288 No part may be reproduced or transmitted in any form or by any means, electronic or mechanical, for any purpose, except the express written permission of ZyXEL Communications Corporation. This Product includes MIPS Linux kernel , Bridge-Utils, BusyBox, ebtables, bftpd, iproute2, iptables, udhcp, wput, Dnsmasq and zebra software under GPL 2.0 license.
  • Page 289 Appendix D Open Software Announcements (and charge for this service if you wish), that you receive source code or can get it if you want it, that you can change the software or use pieces of it in new free programs; and that you know you can do these things.
  • Page 290 Appendix D Open Software Announcements b) You must cause any work that you distribute or publish, that in whole or in part contains or is derived from the Program or any part thereof, to be licensed as a whole at no charge to all third parties under the terms of this License.
  • Page 291 Appendix D Open Software Announcements 4. You may not copy, modify, sublicense, or distribute the Program except as expressly provided under this License. Any attempt otherwise to copy, modify, sublicense or distribute the Program is void, and will automatically terminate your rights under this License. However, parties who have received copies, or rights, from you under this License will not have their licenses terminated so long as such parties remain in full compliance.
  • Page 292 Appendix D Open Software Announcements 10. If you wish to incorporate parts of the Program into other free programs whose distribution conditions are different, write to the author to ask for permission. For software which is copyrighted by the Free Software Foundation, write to the Free Software Foundation; we sometimes make exceptions for this.
  • Page 293 Appendix D Open Software Announcements of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
  • Page 294 Appendix D Open Software Announcements --------------- ============================================================= ======= * Copyright (c) 1998-2008 The OpenSSL Project. All rights reserved. * Redistribution and use in source and binary forms, with or without * modification, are permitted provided that the following conditions * are met: * 1.
  • Page 295 Appendix D Open Software Announcements * 5. Products derived from this software may not be called "OpenSSL" nor may "OpenSSL" appear in their names without prior written permission of the OpenSSL Project. * 6. Redistributions of any form whatsoever must retain the following acknowledgment: "This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://www.openssl.org/)"...
  • Page 296 Appendix D Open Software Announcements Original SSLeay License ----------------------- /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) * All rights reserved. * This package is an SSL implementation written * by Eric Young (eay@cryptsoft.com). * The implementation was written so as to conform with Netscapes SSL. * This library is free for commercial and non-commercial use as long as * the following conditions are aheared to.
  • Page 297 Appendix D Open Software Announcements * 1. Redistributions of source code must retain the copyright notice, this list of conditions and the following disclaimer. * 2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.
  • Page 298 Appendix D Open Software Announcements * derivative of this code cannot be changed. i.e. this code cannot simply be * copied and put under another distribution licence * [including the GNU Public Licence.] This Product includes Dhcpv6 software under BSD license Copyright (c) [dates as appropriate to package] The Regents of the University of California.
  • Page 299 Appendix D Open Software Announcements binary forms, with or without modification, of the software and documentation provided that the following conditions are met: 0. If you receive a version of the software that is specifically labelled as not being for redistribution (check the version message and/or README), you are not permitted to redistribute that version of the software in any way or form.
  • Page 300 Appendix D Open Software Announcements WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHORS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS;...
  • Page 301: Appendix E Legal Information

    This publication is subject to change without notice. Trademarks ZyNOS (ZyXEL Network Operating System) is a registered trademark of ZyXEL Communications, Inc. Other trademarks mentioned in this publication are used for identification purposes only and may be properties of their respective owners.
  • Page 302: Fcc Radiation Exposure Statement

    Appendix E Legal Information If this device does cause harmful interference to radio/television reception, which can be determined by turning the device off and on, the user is encouraged to try to correct the interference by one or more of the following measures: Reorient or relocate the receiving antenna.
  • Page 303: Zyxel Limited Warranty

    Appendix E Legal Information Viewing Certifications Go to http://www.zyxel.com. Select your product on the ZyXEL home page to go to that product's page. Select the certification you wish to view from this page. ZyXEL Limited Warranty ZyXEL warrants to the original end user (purchaser) that this product is free from any defects in materials or workmanship for a period of up to two years from the date of purchase.
  • Page 304 Appendix E Legal Information P-870HNU-51b User’s Guide...
  • Page 305: Index

    Index Index CIFS CIFS (Common Internet File System) 167, 184 Common Internet File System (CIFS) 167, 184 Common Internet File System, see CIFS adding a printer example configuration 116, 122 Connectivity Check Messages, see CCMs antenna copyright Application Layer Gateway applications Internet access CoS technologies...
  • Page 306 Index DYNDNS wildcard HTTP (Hypertext Transfer Protocol) humidity EAP-MD5 ECHO IANA IEEE 802.11g wireless LAN encapsulated routing link protocol (ENET ENCAP) IEEE 802.11i Encapsulation IEEE 802.1Q IGMP 113, 116, 123, 124 PPP over Ethernet version PPPoA IGMP proxy encapsulation IGMP v1 ENET ENCAP IGMP v2 RFC 1483...
  • Page 307 Index 122, 151 and USB printer default server DMZ host LAN statistics 80, 82 external port LAN TCP/IP internal port port forwarding link trace port number 152, 156 Link Trace Message, see LTM services Link Trace Response, see LTR Symmetric logs NAT example overview...
  • Page 308 Index requirements product registration safety warnings Service Set Services sharing files 167, 184 SIP ALG SIP Application Layer Gateway 191, 205 marking SMTP setup SNMP tagging SNMP trap versus CoS static route 185, 189 Quality of Service, see QoS static VLAN Quick Start Guide status indicators storage humidity...
  • Page 309 Index WLAN button status unicast Universal Plug and Play application UPnP forum security issues printer sharing permanent virtual circuit see PVC Virtual Circuit (VC) Virtual Local Area Network See VLAN VLAN Introduction number of possible VIDs priority frame static VLAN ID VLAN Identifier See VID VLAN tag WAN (Wide Area Network)
  • Page 310 Index P-870HNU-51b User’s Guide...

Table of Contents