ZyXEL Communications AX Series User Manual

ZyXEL Communications AX Series User Manual

Hide thumbs Also See for AX Series:
Table of Contents

Advertisement

User's Guide
AX/DX/EX/PX Series
Default Login Details
Version 5.15-5.50 Ed 1, 04/2021
LAN IP Address
http://192.168.1.1
Login
admin
Password
See the device label
Copyright © 2021 Zyxel Communications Corporation

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the AX Series and is the answer not in the manual?

Questions and answers

Summary of Contents for ZyXEL Communications AX Series

  • Page 1 User’s Guide AX/DX/EX/PX Series Default Login Details Version 5.15-5.50 Ed 1, 04/2021 LAN IP Address http://192.168.1.1 Login admin Password See the device label Copyright © 2021 Zyxel Communications Corporation...
  • Page 2 IMPORTANT! READ CAREFULLY BEFORE USE. KEEP THIS GUIDE FOR FUTURE REFERENCE. This is a series User’s Guide. Screenshots and graphics in this book may differ slightly from what you see due to differences in your product firmware or your computer operating system. Every effort has been made to ensure that the information in this manual is accurate.
  • Page 3: Document Conventions

    Document Conventions Warnings and Notes These are how warnings and notes are shown in this guide. Warnings tell you about things that could harm you or your Zyxel Device. Note: Notes tell you other important information (for example, other things you may need to configure or helpful tips) or recommendations.
  • Page 4: Table Of Contents

    Contents Overview Contents Overview User’s Guide ............................17 Introducing the Zyxel Device ......................18 Web Configurator ..........................43 Quick Start ............................. 52 Tutorials ..............................55 Technical Reference ........................83 Connection Status ..........................84 Broadband ............................93 Wireless ..............................129 Home Networking ..........................160 Routing ..............................
  • Page 5 Contents Overview Log Setting ............................355 Firmware Upgrade ..........................359 Backup/Restore ..........................361 Diagnostic ............................364 Troubleshooting ..........................371 Appendices .............................378 AX/DX/EX/PX Series User’s Guide...
  • Page 6: Table Of Contents

    Table of Contents Table of Contents Document Conventions ........................3 Contents Overview ..........................4 Table of Contents ..........................6 Part I: User’s Guide..................17 Chapter 1 Introducing the Zyxel Device ......................18 1.1 Overview ............................18 1.1.1 Multi-Gigabit Ethernet ......................20 1.2 Example Applications ........................20 1.2.1 Internet Access ........................
  • Page 7 Table of Contents 3.4.1 Successful Internet Connection ..................53 3.4.2 Unsuccessful Internet Connection ..................54 3.5 Quick Start Setup – WiFi ......................... 54 3.6 Quick Start Setup – Finish ....................... 54 Chapter 4 Tutorials ...............................55 4.1 Overview ............................55 4.2 Wired Network Setup ........................55 4.2.1 Setting Up a DSL Connection ....................
  • Page 8 Table of Contents 5.2.1 LAN ............................90 Chapter 6 Broadband............................93 6.1 Overview ............................93 6.1.1 What You Can Do in this Chapter ..................93 6.1.2 What You Need to Know ..................... 94 6.1.3 Before You Begin ........................97 6.2 Broadband Settings (for DX3300-T0, DX3301-T0, DX5301-B2/B3 and DX5401-B0) ....97 6.2.1 Add or Edit Internet Connection ..................
  • Page 9 Table of Contents Chapter 8 Home Networking ..........................160 8.1 Overview ............................160 8.1.1 What You Can Do in this Chapter ..................160 8.1.2 What You Need To Know ....................160 8.1.3 Before You Begin ......................... 162 8.2 LAN Setup ............................162 8.3 Static DHCP ...........................
  • Page 10 Table of Contents 10.4 Queue Setup ..........................201 10.5 QoS Classification Setup ......................203 10.5.1 Add or Edit QoS Class ....................... 204 10.6 QoS Shaper Setup ........................208 10.6.1 Add or Edit a QoS Shaper ....................209 10.7 QoS Policer Setup ........................209 10.7.1 Add or Edit a QoS Policer ....................
  • Page 11 Table of Contents 13.1.1 What You Can Do in this Chapter ................... 238 13.2 VLAN Group Settings ........................239 13.2.1 Add or Edit a VLAN Group ....................239 Chapter 14 Interface Grouping ..........................241 14.1 Interface Grouping Overview ....................241 14.1.1 What You Can Do in this Chapter ................... 241 14.2 Interface Grouping ........................
  • Page 12 Table of Contents 17.2 MAC Filter ............................ 265 17.2.1 Add New Rule ........................266 Chapter 18 Parental Control ..........................267 18.1 Parental Control Overview ......................267 18.2 Parental Control Settings For DX/EX3300, DX/EX3301, EX5300, EX5301, DX5301-B2/B3 and DX/ EX5401 ............................267 18.2.1 Add or Edit a Parental Control Profile ................
  • Page 13 Table of Contents 21.4 Phone ............................299 21.4.1 Phone Device ........................299 21.4.2 Phone Device Edit ......................300 21.5 Phone Region ..........................301 21.6 Call Rule ............................302 21.7 Call History ........................... 302 21.8 Technical Reference ........................303 21.8.1 Quality of Service (QoS) ....................311 21.8.2 Phone Services Overview ....................
  • Page 14 Table of Contents 27.1 Overview ............................. 331 27.2 xDSL Statistics ..........................331 Chapter 28 WLAN Station Status .........................334 28.1 WLAN Station Status Overview ....................334 Chapter 29 Cellular Statistics ..........................336 29.1 Cellular Statistics Overview ......................336 29.2 Cellular Statistics Settings ......................336 Chapter 30 System...............................338 30.1 System Overview ........................
  • Page 15 Table of Contents 35.1 Email Notification Overview ...................... 352 35.2 Email Notification ........................352 35.2.1 Email Notification Edit ....................... 353 Chapter 36 Log Setting ............................355 36.1 Log Setting Overview ......................... 355 36.2 Log Settings ..........................355 36.2.1 Example Email Log ......................357 Chapter 37 Firmware Upgrade ...........................359 37.1 Overview .............................
  • Page 16 Table of Contents Appendix A Customer Support ..................... 379 Appendix B IPv6..........................385 Appendix C Legal Information ...................... 391 Index ..............................397 AX/DX/EX/PX Series User’s Guide...
  • Page 17: User's Guide

    User’s Guide...
  • Page 18: Introducing The Zyxel Device

    H A P T E R Introducing the Zyxel Device 1.1 Overview Zyxel Device refers to these models as outlined below. • AX7501-B0 • DX5401-B0 • EX5401-B0 • DX3300-T0 • EX3300-T0 • EX5501-B0 • DX3301-T0 • EX3301-T0 • PX7501-B0 • DX5301-B2 •...
  • Page 19 Chapter 1 Introducing the Zyxel Device Table 1 Zyxel Device Comparison Table (continued) AX7501-B0 DX3300-T0 DX3301-T0 DX5301-B2 DX5301-B3 DX5401-B0 2.5 Gbe LAN 10 Gbe LAN 1G AON (SFP) 1G Ethernet (SFP) 2.5G GPON (SFP) 10G AON (SFP) 10G Ethernet (SFP) 10G XGPON (SFP+) USB Port for...
  • Page 20: Multi-Gigabit Ethernet

    Chapter 1 Introducing the Zyxel Device Table 2 Zyxel Device Comparison Table (continued) EX5501- PX7501 EX3300-T0 EX3301-T0 EX5300-B3 EX5301-B3 EX5401-B0 10G XGPON (SFP+) USB Port for USB 2.0 USB 2.0 USB 3.0 USB 3.0 USB 3.0 USB 3.0 USB 3.0 Cellular Backup, File Sharing and...
  • Page 21: Internet Access

    Chapter 1 Introducing the Zyxel Device 1.2.1 Internet Access The AX7501-B0, PX7501-B0, DX5401-B0 and EX5401-B0 provides shared Internet access by connecting a fiber cable provided by the ISP to the FIBRE port. It supports OMCI (ONU Management and Control Interface) to connect to the ISP’s OLT (Optical Line Terminal). The DX3300-T0, DX3301-T0, DX5301-B2/B3 and DX5401-B0 provide Internet access by connecting the WAN port to your ISP through DSL cables.
  • Page 22: Voip Applications

    Chapter 1 Introducing the Zyxel Device The Zyxel Device is a dual-band gateway that can use both 2.4G and 5G networks at the same time. You could use the 2.4 GHz band for regular Internet surfing and downloading while using the 5 GHz band for time sensitive traffic like high-definition video, music, and gaming.
  • Page 23: Ways To Manage The Zyxel Device

    Chapter 1 Introducing the Zyxel Device Figure 5 VoIP Application 1.3 Ways to Manage the Zyxel Device Use any of the following methods to manage the Zyxel Device. • Web Configurator. This is recommended for management of the Zyxel Device using a (supported) web browser.
  • Page 24: Top Or Front Panel

    Chapter 1 Introducing the Zyxel Device 1.5.1 Top or Front Panel The LED indicators are located on the top or front panel. Figure 6 LED Indicators (AX7501-B0 / PX7501-B0) Figure 7 LED Indicators (DX3300-T0 / DX3301-T0 / EX3300-T0 / EX3301-T0) AX/DX/EX/PX Series User’s Guide...
  • Page 25 Chapter 1 Introducing the Zyxel Device Figure 8 LED Indicators (DX5301-B2 / DX5301-B3 / EX5301-B3) AX/DX/EX/PX Series User’s Guide...
  • Page 26 Chapter 1 Introducing the Zyxel Device Figure 9 LED Indicators (EX5300-B3) Figure 10 LED Indicators (DX5401-B0 / EX5401-B0) AX/DX/EX/PX Series User’s Guide...
  • Page 27 Chapter 1 Introducing the Zyxel Device Figure 11 LED Indicators (EX5501-B0) None of the LEDs are on if the Zyxel Device is not receiving power. Table 4 LED Descriptions (AX7501, EX5501 and PX7501) COLOR STATUS DESCRIPTION POWER Green The Zyxel Device is receiving power and ready for use. Blinking The Zyxel Device is self-testing.
  • Page 28 Chapter 1 Introducing the Zyxel Device Table 4 LED Descriptions (AX7501, EX5501 and PX7501) (continued) COLOR STATUS DESCRIPTION 10G LAN (for Green The Zyxel Device has a successful 10/100/10000 Mbps Ethernet connection AX7501-B0/ with a device on the Local Area Network (LAN) through the 10G LAN port. PX7501-B0) Blinking The Zyxel Device is sending or receiving data to/from the LAN at 10/100/...
  • Page 29 Chapter 1 Introducing the Zyxel Device Table 5 LED Descriptions (DX3300-T0 / EX3300-T0) COLOR STATUS DESCRIPTION Power Green The Zyxel Device is receiving power and ready for use. Blinking The Zyxel Device is self-testing. The Zyxel Device detected an error while self-testing, or there is a device malfunction.
  • Page 30 Chapter 1 Introducing the Zyxel Device Table 6 LED Descriptions (DX3301-T0 / EX3301-T0) (continued) COLOR STATUS DESCRIPTION DSL / Green The VDSL / ADSL link is up. Ethernet Slow Blinking The Zyxel Device is looking for a VDSL / ADSL link. Fast Blinking The Zyxel Device is initializing the VDSL / ADSL link.
  • Page 31 Chapter 1 Introducing the Zyxel Device Table 7 LED Descriptions (DX5301-B2/B3, EX5300-B3 and EX5301-B3) COLOR STATUS DESCRIPTION POWER Green The Zyxel Device is receiving power and ready for use. Blinking The Zyxel Device is self-testing. The Zyxel Device detected an error while self-testing, or there is a device malfunction.
  • Page 32 Chapter 1 Introducing the Zyxel Device Table 7 LED Descriptions (DX5301-B2/B3, EX5300-B3 and EX5301-B3) (continued) COLOR STATUS DESCRIPTION WiFi 2.4G Green The 2.4G wireless network is activated. Blinking The Zyxel Device is communicating with 2.4G wireless clients. The 2.4G wireless network is not activated. Amber Blinking The Zyxel Device is setting up a WPS connection with a 2.4G wireless...
  • Page 33: Bottom Or Back Panel

    Chapter 1 Introducing the Zyxel Device Table 8 LED Descriptions (DX5401-B0 / EX5401-B0) (continued) COLOR STATUS DESCRIPTION LAN1 – 4 Green The Zyxel Device has a successful 10/100/1000 Mbps Ethernet connection with a device on the Local Area Network (LAN). Blinking The Zyxel Device is sending or receiving data to/from the LAN at 10/ 100/1000 Mbps.
  • Page 34 Chapter 1 Introducing the Zyxel Device Figure 13 DX3300-T0 Back Panel Figure 14 DX3301-T0 Back Panel AX/DX/EX/PX Series User’s Guide...
  • Page 35 Chapter 1 Introducing the Zyxel Device Figure 15 DX5301-B2 / DX5301-B3 Back Panel Figure 16 DX5401-B0 Back Panel AX/DX/EX/PX Series User’s Guide...
  • Page 36 Chapter 1 Introducing the Zyxel Device Figure 17 EX3300-T0 Back Panel Figure 18 EX3301-T0 Back Panel AX/DX/EX/PX Series User’s Guide...
  • Page 37 Chapter 1 Introducing the Zyxel Device Figure 19 EX5300-B3 Back Panel AX/DX/EX/PX Series User’s Guide...
  • Page 38 Chapter 1 Introducing the Zyxel Device Figure 20 EX5301-B3 Back Panel Figure 21 EX5401-B0 Back Panel AX/DX/EX/PX Series User’s Guide...
  • Page 39 Chapter 1 Introducing the Zyxel Device Figure 22 EX5501-B0 Bottom Panel Figure 23 PX7501-B0 Bottom Panel The following table describes the items on the bottom and side panels of EX5501, AX7501 and PX7501. Table 9 Panel Ports and Buttons LABEL DESCRIPTION 2.5G WAN For EX5501...
  • Page 40 Chapter 1 Introducing the Zyxel Device Table 10 Panel Ports and Buttons (continued) LABEL DESCRIPTION The USB port is used for cellular WAN backup, file-sharing, and media server. For DX3300-T0, DX3301-T0, DX5301-B2/B3 and DX5401-B0, connect a DSL cable to the DSL port for Internet connection.
  • Page 41 Chapter 1 Introducing the Zyxel Device Figure 26 Connecting the Fiber Cables Transceiver Removal Use the following steps to remove an SFP transceiver. Attach an ESD preventive wrist strap to your wrist and to a bare metal surface on the chassis. Remove the fiber cables from the transceiver.
  • Page 42: Wps Button

    Chapter 1 Introducing the Zyxel Device 1.5.3 WPS Button You can use the WPS button to quickly set up a secure wireless connection between the Zyxel Device and a WPS-compatible client by adding one device at a time. To activate WPS: Make sure the POWER LED is on and not blinking.
  • Page 43: Web Configurator

    H A P T E R Web Configurator 2.1 Overview The Web Configurator is an HTML-based management interface that allows easy system setup and management through Internet browser. Use a browser that supports HTML5, such as Microsoft Edge, Internet Explorer 11, Mozilla Firefox, or Google Chrome. The recommended minimum screen resolution is 1024 by 768 pixels.
  • Page 44 Chapter 2 Web Configurator Note: The first time you enter the password, you will be asked to change it. Make sure the new password must contain at least one uppercase letter, one lowercase letter and one number. The Connection Status screen appears. Use this screen to configure basic Internet access and wireless settings.
  • Page 45: Web Configurator Layout

    Chapter 2 Web Configurator 2.2 Web Configurator Layout Figure 32 Screen Layout As illustrated above, the main screen is divided into these parts: • A – Settings Icon (Navigation Panel and Side Bar) • B – Layout Icon • C – Main Window 2.2.1 Settings Icon Click this icon ( to see the side bar and navigation panel.
  • Page 46 Chapter 2 Web Configurator Figure 33 Side Bar The icons provide the following functions. Table 11 Web Configurator Icons in the Title Bar ICON DESCRIPTION Wizard: Click this icon to open screens where you can configure the Zyxel Device’s time zone and wireless settings.
  • Page 47 Chapter 2 Web Configurator Figure 34 Navigation Panel Table 12 Navigation Panel Summary LINK FUNCTION Connection Status Use this screen to configure basic Internet access, wireless settings, and parental control settings. This screen also shows the network status of the Zyxel Device and computers/devices connected to it.
  • Page 48 Chapter 2 Web Configurator Table 12 Navigation Panel Summary (continued) LINK FUNCTION UPnP Use this screen to turn UPnP and UPnP NAT-T on or off. Additional Use this screen to configure IP alias and public static IP. Subnet STB Vendor ID Use this screen to configure the Vendor IDs of the connected Set Top Box (STB) devices, which have the Zyxel Device automatically create static DHCP entries for the STB devices when they request IP addresses.
  • Page 49 Chapter 2 Web Configurator Table 12 Navigation Panel Summary (continued) LINK FUNCTION Use this screen to activate protection against Denial of Service (DoS) attacks. MAC Filter MAC Filter Use this screen to block or allow traffic from devices of certain MAC addresses to the Zyxel Device.
  • Page 50: Layout Icon

    Chapter 2 Web Configurator Table 12 Navigation Panel Summary (continued) LINK FUNCTION Cellular Cellular Statistics Use this screen to look at the cellular Internet connection status. Statistics GPON Status GPON Status Use this screen to view the fiber transceiver’s TX power and RX power level and its temperature.
  • Page 51 Chapter 2 Web Configurator Figure 35 Screen Order AX/DX/EX/PX Series User’s Guide...
  • Page 52: Quick Start

    H A P T E R Quick Start 3.1 Overview Use the Wizard screens to configure the Zyxel Device’s time zone and wireless settings. Note: See the technical reference chapters for background information on the features in this chapter. 3.2 Quick Start Setup You can click the Wizard icon in the side bar to open the Wizard screens.
  • Page 53: Quick Start Setup - Internet Connection

    Chapter 3 Quick Start Figure 37 Wizard – Time Zone 3.4 Quick Start Setup – Internet Connection Select the Internet connection mode of the Zyxel Device. Click Next to continue. Figure 38 Wizard – Internet 3.4.1 Successful Internet Connection The Zyxel Device has Internet access. Figure 39 Wizard –...
  • Page 54: Unsuccessful Internet Connection

    Chapter 3 Quick Start 3.4.2 Unsuccessful Internet Connection The Zyxel Device did not detect a WAN connection. Figure 40 Wizard – Internet Connection is Down 3.5 Quick Start Setup – WiFi Turn WiFi on or off. If you keep it on, record the WiFi Name and Password in this screen so you can configure your wireless clients to connect to the Zyxel Device.
  • Page 55: Tutorials

    H A P T E R Tutorials 4.1 Overview This chapter shows you how to use the Zyxel Device’s various features. • Wired Network Setup • WiFi Network Setup • USB Applications • Network Security • Internet Calls • Device Maintenance 4.2 Wired Network Setup This section shows you how to set up a DSL or Ethernet connection.
  • Page 56 Chapter 4 Tutorials In this example, the DSL connection has the following information. General Name MyDSLConnection Type ADSL over ATM Connection Mode Routing Encapsulation PPPoE IPv6/IPv4 Mode IPv4 ATM PVC Configuration VPI/VCI 36/48 Encapsulation Mode LLC/SNAP-Bridging Service Category UBR without PCR Account Information PPP User Name 1234@DSL-Ex.com...
  • Page 57 Chapter 4 Tutorials Try to connect to a website to see if you have correctly set up your Internet connection. AX/DX/EX/PX Series User’s Guide...
  • Page 58: Setting Up An Ethernet Connection

    Chapter 4 Tutorials The new connection is displayed on the Broadband screen. 4.2.2 Setting Up an Ethernet Connection If you connect to the Internet through an Ethernet connection, you need to connect a broadband modem or router with Internet access to the WAN Ethernet port on the Zyxel Device. You need to configure the Internet settings from the broadband modem or router on the Zyxel Device.
  • Page 59 Chapter 4 Tutorials In this example, configure the following information for the Ethernet connection. General Name My ETH Connection Type Ethernet Connection Mode Routing Encapsulation IPoE IPv6/IPv4 Mode IPv4 Only Enter the General settings provided by your Internet service provider. Enter a Name to identify your WAN connection.
  • Page 60: Wifi Network Setup

    Chapter 4 Tutorials Go to the Network Setting > Broadband screen to view the established Ethernet connection. The new connection is displayed on the Broadband screen. 4.3 WiFi Network Setup In this example, you want to set up a WiFi network so that you can use your notebook to access the Internet.
  • Page 61: Changing Security On A Wifi Network

    Chapter 4 Tutorials 4.3.1 Changing Security on a WiFi Network This example changes the default security settings of a WiFi network to the following: SSID Example Security Mode WPA2-PSK Pre-Shared Key DoNotStealMyWirelessNetwork 802.11 Mode 802.11b/g/n Mixed Go to the Network Setting > Wireless > General screen. Select More Secure as the security level and WPA2-PSK as the security mode.
  • Page 62 Chapter 4 Tutorials AX/DX/EX/PX Series User’s Guide...
  • Page 63: Connecting To The Zyxel Device's Wifi Network Using Wps

    Chapter 4 Tutorials Go to the Wireless > Others screen. Set 802.11 Mode to 802.11b/g/n Mixed, and then click Apply. You can now use the WPS feature to establish a WiFi connection between your notebook and the Zyxel Device (see Section 4.3.2 on page 63).
  • Page 64 Chapter 4 Tutorials In Windows 10, click on the Network icon in the system tray to open the list of available WiFi networks. Locate the WiFi network of the Zyxel Device. The default WiFi network name is “Zyxel_XXXX” (2.4G) or “Zyxel_XXXX_5G”...
  • Page 65 Chapter 4 Tutorials The Zyxel Device sends the WiFi network settings to Windows using WPS. Windows displays “Getting settings from the router”. AX/DX/EX/PX Series User’s Guide...
  • Page 66 Chapter 4 Tutorials The WiFi device is then able to connect to the WiFi network securely. 4.3.2.2 WPS PIN Configuration The WPS PIN (Personal Identification Number) method is a more secure version of WPS, used by WiFi- enabled devices such as printers. To use this connection method, you need to log into the Zyxel Device’s Web Configurator.
  • Page 67: Usb Applications

    Chapter 4 Tutorials Within 2 minutes, enable WPS on the WiFi device. The Zyxel Device authenticates the WiFi device using the PIN, and then sends the WiFi network settings to the device using WPS. This process may take up to 2 minutes. The WiFi device is then able to connect to the WiFi network securely.
  • Page 68 Chapter 4 Tutorials Connect your USB device to the USB port of the Zyxel Device. Go to the Network Setting > USB Service > File Sharing screen. Enable File Sharing Services and click Apply to activate the file sharing function. The Zyxel Device automatically adds your USB device to the Information table.
  • Page 69 Chapter 4 Tutorials The Add New Share screen appears. Select your USB device from the Volume drop-down list box. Enter a Description name for the added share to identify the device. Click Browse and the Browse Directory screen appears. On the Browse Directory screen, select the folder that you want to add as a share. In this example, select BobShare and then click OK.
  • Page 70 Chapter 4 Tutorials In Access Level, select Public to let the share to be accessed by all users connected to the Zyxel Device. Otherwise, select Security to let the share to be accessed by specific users to access only. Click OK to save the settings. To set Access level to Security, you need to create one or more users accounts.
  • Page 71 Chapter 4 Tutorials File sharing is now configured. You can see the USB storage device listed in the table below. 4.4.1.2 Accessing Your Shared Files From a Computer You can use Windows Explorer to access the USB storage devices connected to the Zyxel Device. Note: This example shows you how to use Microsoft Windows 10 to browse shared files in a share called (usb1_sda)Zoeys file.
  • Page 72: Using Ftp

    Chapter 4 Tutorials 4.4.2 Using FTP This section shows how to use an FTP program to access files on an USB storage device connected to the Zyxel Device. Note: This example uses the FileZilla FTP program to browse your shared files. In FileZilla, enter the IP address of the Zyxel Device (The default IP is 192.168.1.1), your account’s Username, Password and Port number, and then click Quickconnect.
  • Page 73: Parental Control

    Chapter 4 Tutorials Select IPv4 Firewall/IPv6 Firewall to enable the firewall, and then click Apply. Open the Access Control screen to create a rule. Click Add New ACL Rule to set up a rule. Filter Name: Enter a name to identify the firewall rule. Source IP Address: Enter the IP address of the computer that initializes traffic for the application or service.
  • Page 74 Chapter 4 Tutorials 4.5.2.1 Configuring a Parental Control Schedule Parental Control Profile allows you to set up a schedule rule for Internet usage. Use this feature to limit the days and times a user can access the Internet. This example shows you how to block an user from accessing the Internet during time for studying. Use the parameter below to configure a schedule rule.
  • Page 75: Configuring A Mac Address Filter

    Chapter 4 Tutorials Use this screen to edit the Parental Control schedule. Click Add New Schedule to add a second schedule. Use the parameter given above to configure the time settings of your schedules. Click Save to save the settings. 4.5.3 Configuring a MAC Address Filter You can use a MAC address filter to exclusively allow or permanently block someone from the WiFi network.
  • Page 76: Internet Calls

    Chapter 4 Tutorials Go to the Security > MAC Filter > MAC Filter screen. Under MAC Address Filter, select Enable. Click Add New Rule to add a new entry. Select Active, and then enter the Host Name and MAC Address of computer B.
  • Page 77: Adding A Sip Account

    Chapter 4 Tutorials Go to the VoIP > SIP > SIP Service Provider screen. Click the Add New Provider button to add the SIP Service Provider. Figure 41 VoIP > SIP > SIP Service Provider On the Add New Provider screen, select Enable SIP Service Provider. Enter SIP Service Provider Name of up to 64 ASCII printable characters.
  • Page 78 Chapter 4 Tutorials Open the Web Configurator. Go to the VoIP > SIP > SIP Account screen. Click the Add New Account button on the SIP Account screen to add a SIP account and map it to a phone port. Figure 43 VoIP >...
  • Page 79: Configuring A Phone

    Chapter 4 Tutorials 4.6.4 Configuring a Phone You must now configure the phone port to use the SIP account you just configured. Go to the VoIP > Phone > Phone Device screen. Click the Modify icon of PHONE1 to configure PHONE1 on your Zyxel Device. The following screen appears.
  • Page 80: Making A Voip Call

    Chapter 4 Tutorials 4.6.5 Making a VoIP Call Follow these steps to make a phone calling using Voice over IP (VoIP). Make sure you connect a telephone to phone port 1 on the Zyxel Device. Make sure the Zyxel Device is turned on and connected to the Internet. Pick up the phone receiver.
  • Page 81: Restoring The Device Configuration

    Chapter 4 Tutorials 4.7.3 Restoring the Device Configuration This section shows you how to restore a previously-saved configuration file from your computer to your Zyxel Device. Go to the Maintenance > Backup/Restore screen. Under Restore Configuration, click Browse/Choose File, and then select the configuration file that you want to upload.
  • Page 82 Chapter 4 Tutorials The Zyxel Device automatically restarts after the configuration file is successfully uploaded. Wait for one minute before logging into the Zyxel Device again. Go to the Connection Status page to check the firmware version after the reboot. AX/DX/EX/PX Series User’s Guide...
  • Page 83: Technical Reference

    Technical Reference...
  • Page 84: Connection Status

    H A P T E R Connection Status 5.1 Connection Status Overview After you log into the Web Configurator, the Connection Status screen appears. You can configure basic Internet access and wireless settings in this screen. It also shows the network status of the Zyxel Device and computers or devices connected to it.
  • Page 85: System Info

    Chapter 5 Connection Status 5.1.2 System Info Use this screen to view the basic system information of the Zyxel Device. Figure 49 System Info Click the Arrow icon ( ) to view more information on the status of your firewall and interfaces (WAN, LAN, and WLAN).
  • Page 86 Chapter 5 Connection Status Figure 50 System Info: Detailed Information Each field is described in the following table. Table 13 System Info: Detailed Information LABEL DESCRIPTION Host Name This field displays the Zyxel Device system name. It is used for identification. Model Name This shows the model number of your Zyxel Device.
  • Page 87 Chapter 5 Connection Status Table 13 System Info: Detailed Information (continued) LABEL DESCRIPTION Interface Status Virtual ports are shown here. You can see the ports in use and their transmission rate. WAN Information (These fields display when you have an Ethernet WAN connection.) Name This field displays the name given to the Internet connection.
  • Page 88: Wifi Settings

    Chapter 5 Connection Status Table 13 System Info: Detailed Information (continued) LABEL DESCRIPTION 802.11 Mode This displays the type of 802.11 mode the WiFi interface is using in the WLAN. This displays whether WPS is activated on the WiFi interface. 5.1.3 WiFi Settings Use this screen to enable or disable the main wireless network.
  • Page 89: Guest Wifi Settings

    Chapter 5 Connection Status Table 14 WiFi Settings: Configuration (continued) LABEL DESCRIPTION Hide WiFi network Select this check box to hide the SSID in the outgoing beacon frame so a station cannot name obtain the SSID through scanning using a site survey tool. Note: Disable WPS in the Network Setting >...
  • Page 90: Lan

    Chapter 5 Connection Status To assign different SSIDs to the 2.4G and 5G guest wireless networks, clear the Keep 2.4G and 5G the same check box in the WiFi Settings screen, and the Guest WiFi Settings screen will change. Note: Keep 2.4G and 5G the same check box cannot be turned off if MESH is enabled (see Network Settings >...
  • Page 91 Chapter 5 Connection Status Figure 55 LAN Click the Arrow icon ( ) to configure the LAN IP settings and DHCP setting for your Zyxel Device. Figure 56 LAN Setup Each field is described in the following table. Table 16 Status Screen LABEL DESCRIPTION LAN IP Setup...
  • Page 92 Chapter 5 Connection Status Table 16 Status Screen (continued) LABEL DESCRIPTION DHCP Server This is the period of time a DHCP-assigned address is valid, before it expires. Lease Time When a client connects to the Zyxel Device, DHCP automatically assigns the client an IP addresses from the IP address pool.
  • Page 93: Broadband

    H A P T E R Broadband 6.1 Overview This chapter discusses the Zyxel Device’s Broadband screens. Use these screens to configure your Zyxel Device for Internet access. A WAN (Wide Area Network) connection is an outside connection to another network or the Internet. It connects your private networks, such as a LAN (Local Area Network) and other networks, so that a computer in one location can communicate with computers in other locations.
  • Page 94: What You Need To Know

    Chapter 6 Broadband Table 17 WAN Setup Overview LAYER-2 INTERNET CONNECTION INTERFACE CONNECTION MODE ENCAPSULATION CONNECTION SETTINGS Ethernet Routing PPPoE PPP user name and password, WAN IPv4/IPv6 IP address, routing feature, DNS server, VLAN, QoS, and MTU IPoE WAN IPv4/IPv6 IP address, NAT, DNS server and routing feature Bridge VLAN Note: This table is for EX3300-T0, EX3301-T0, EX5300, EX5301, EX5401-B0, EX5501, AX7501 and PX7501.
  • Page 95 Chapter 6 Broadband If your ISP assigns you a static WAN IP address, they should also assign you the subnet mask and DNS server IP addresses. Asynchronous Transfer Mode (ATM) is a WAN networking technology that provides high-speed data transfer. ATM uses fixed-size packets of information called cells. With ATM, a high QoS (Quality of Service) can be guaranteed.
  • Page 96 Chapter 6 Broadband IPv6 Rapid Deployment Use IPv6 Rapid Deployment (6rd) when the local network uses IPv6 and the ISP has an IPv4 network. When the Zyxel Device has an IPv4 WAN address and you set IPv6/IPv4 Mode to IPv4 Only, you can enable 6rd to encapsulate IPv6 packets in IPv4 packets to cross the ISP’s IPv4 network.
  • Page 97: Before You Begin

    Chapter 6 Broadband Figure 59 Dual Stack Lite 6.1.3 Before You Begin You need to know your Internet access settings such as encapsulation and WAN IP address. Get this information from your ISP. 6.2 Broadband Settings (for DX3300-T0, DX3301-T0, DX5301-B2/B3 and DX5401-B0) Use this screen to change your Zyxel Device’s Internet access settings.
  • Page 98 Chapter 6 Broadband Figure 60 Network Setting > Broadband The following table describes the labels in this screen. Table 19 Network Setting > Broadband LABEL DESCRIPTION Add New WAN Click this button to create a new connection. Interface This is the index number of the entry. Name This is the service name of the connection.
  • Page 99: Add Or Edit Internet Connection

    Chapter 6 Broadband 6.2.1 Add or Edit Internet Connection Click Add New WAN Interface in the Broadband screen or the Edit icon next to an existing WAN interface to open the following screen. Use this screen to configure a WAN connection. The screen varies depending on the mode, encapsulation, and IPv6 or IPv4 mode you select.
  • Page 100 Chapter 6 Broadband Figure 61 Network Setting > Broadband > Add or Edit New WAN Interface (Routing Mode) AX/DX/EX/PX Series User’s Guide...
  • Page 101 Chapter 6 Broadband The following table describes the labels in this screen. Table 20 Network Setting > Broadband > Add or Edit New WAN Interface (Routing Mode) LABEL DESCRIPTION General Click this switch to enable or disable the interface. When the switch goes to the right , the function is enabled.
  • Page 102 Chapter 6 Broadband Table 20 Network Setting > Broadband > Add or Edit New WAN Interface (Routing Mode) (continued) LABEL DESCRIPTION 802.1p IEEE 802.1p defines up to 8 separate traffic types by inserting a tag into a MAC-layer frame that contains bits to define class of service.
  • Page 103 Chapter 6 Broadband Table 20 Network Setting > Broadband > Add or Edit New WAN Interface (Routing Mode) (continued) LABEL DESCRIPTION The 6RD (IPv6 rapid deployment) fields display when you set the IPv6/IPv4 Mode field to IPv4 Only. See IPv6 Rapid Deployment on page 96 for more information.
  • Page 104 Chapter 6 Broadband Table 20 Network Setting > Broadband > Add or Edit New WAN Interface (Routing Mode) (continued) LABEL DESCRIPTION Primary DNS Enter the first IPv6 DNS server address assigned by the ISP. Server Secondary DNS Enter the second IPv6 DNS server address assigned by the ISP. Server IPv6 Routing Feature (This is available only when you select IPv4 IPv6 DualStack or IPv6 Only in the IPv4/IPv6 Mode field.
  • Page 105 Chapter 6 Broadband Bridge Mode Click the Add new WAN Interface in the Network Setting > Broadband screen or the Edit icon next to the connection you want to configure. The following example screen displays when you select Bridge mode. Figure 62 Network Setting >...
  • Page 106: Broadband Settings (For Ex3300-T0, Ex3301-T0, Ex5300, Ex5301, Ex5401-B0, Ex5501, Ax7501 And Px7501)

    Chapter 6 Broadband Table 21 Network Setting > Broadband > Add/Edit New WAN Interface (Bridge Mode) (continued) LABEL DESCRIPTION ATM PVC Configuration (This is available only when it shows ADSL over ATM in the Type field.) VPI [0–255] The valid range for the VPI is 0 to 255. Enter the VPI assigned to you. VCI [32–...
  • Page 107 Chapter 6 Broadband Figure 63 Network Setting > Broadband (EX3300 and EX3301) Figure 64 Network Setting > Broadband (EX5300, EX5301, EX5401 and EX5501) Figure 65 Network Setting > Broadband (AX7501 and PX7501) The following table describes the labels in this screen. Table 22 Network Setting >...
  • Page 108: Add Or Edit Internet Connection

    Chapter 6 Broadband Table 22 Network Setting > Broadband (for EX3300, EX3301, EX5300, EX5301, EX5401, EX5501, AX7501 and PX7501) (continued) LABEL DESCRIPTION 802.1p This indicates the 802.1p priority level assigned to traffic sent through this connection. This displays N/A when there is no priority level assigned. 802.1q This indicates the VLAN ID number assigned to traffic sent through this connection.
  • Page 109 Chapter 6 Broadband Figure 66 Network Setting > Broadband > Add or Edit New WAN Interface (EX3300, EX3301, EX5300, EX5301, EX5401-B0 and EX5501 – Routing Mode) AX/DX/EX/PX Series User’s Guide...
  • Page 110 Chapter 6 Broadband Figure 67 Network Setting > Broadband > Add or Edit New WAN Interface (AX7501 and PX7501 – Routing Mode) AX/DX/EX/PX Series User’s Guide...
  • Page 111 Chapter 6 Broadband The following table describes the labels in this screen. Table 23 Network Setting > Broadband > Add or Edit New WAN Interface (Routing Mode) LABEL DESCRIPTION General Click this switch to enable or disable the interface. When the switch goes to the right , the function is enabled.
  • Page 112 Chapter 6 Broadband Table 23 Network Setting > Broadband > Add or Edit New WAN Interface (Routing Mode) (continued) LABEL DESCRIPTION IP Address (This is available only when you select IPv4 Only or IPv4 IPv6 DualStack in the IPv4/IPv6 Mode field.) Obtain an IP A static IP address is a fixed IP that your ISP gives you.
  • Page 113 Chapter 6 Broadband Table 23 Network Setting > Broadband > Add or Edit New WAN Interface (Routing Mode) (continued) LABEL DESCRIPTION option 61 Select this and enter any string that identifies the device. IAID Enter the Identity Association Identifier (IAID) of the device, for example, the WAN connection index number.
  • Page 114 Chapter 6 Broadband Table 23 Network Setting > Broadband > Add or Edit New WAN Interface (Routing Mode) (continued) LABEL DESCRIPTION Select Manually Configured if you have the IPv4 address of the relay server. Otherwise, select Automatically configured by DHCPC to have the Zyxel Device detect it automatically through DHCP.
  • Page 115: Cellular Backup

    Chapter 6 Broadband Table 24 Network Setting > Broadband > Add or Edit New WAN Interface (Bridge Mode) (continued) LABEL DESCRIPTION Mode Select Bridge when your ISP provides you more than one IP address and you want the connected computers to get individual IP address from ISP’s DHCP server directly. If you select Bridge, you cannot use routing functions, such as QoS, Firewall, DHCP server and NAT on traffic from the selected LAN ports.
  • Page 116 Chapter 6 Broadband Note: If you select Drop in the Current Cellular Connection field, the will drop the Zyxel Device cellular WAN connection when the Time Budget or Data Budget is reached. It may take some time for the cellular WAN connection to be disconnected when the Time Budget or Data Budget is reached.
  • Page 117 Chapter 6 Broadband Figure 71 Network > Broadband > Cellular Backup (Budget Setup) The following table describes the labels in this screen. Table 25 Network Setting > Broadband > Cellular Backup LABEL DESCRIPTION General Cellular Backup Click this switch to have the Zyxel Device use the cellular connection as your WAN or a backup when the wired WAN connection fails.
  • Page 118 Chapter 6 Broadband Table 25 Network Setting > Broadband > Cellular Backup (continued) LABEL DESCRIPTION Ping the Host Select this to have the Zyxel Device ping the particular host name or IP address you typed in this field. Cellular Connection Settings Card This field displays the manufacturer and model name of your cellular card if you inserted one in description...
  • Page 119 Chapter 6 Broadband Table 25 Network Setting > Broadband > Cellular Backup (continued) LABEL DESCRIPTION Mail Account Select an email address you have configured in Maintenance > E-mail Notification. The Zyxel Device uses the corresponding mail server to send notifications. You must have configured a mail server already in the Maintenance >...
  • Page 120: Broadband Advanced Screen

    Chapter 6 Broadband Table 25 Network Setting > Broadband > Cellular Backup (continued) LABEL DESCRIPTION Data Budget Select the check boxes and enter a number from 1 to 99 in the percentage fields. If you change the value after you configure and enable budget control, the Zyxel Device resets the statistics. % of time budget/data budget...
  • Page 121 Chapter 6 Broadband Note: If the settings in the screen are changed, the Zyxel Device will re-establish the DSL connections. Table 26 VDSL Profiles MAX. NUMBER OF CARRIER BANDWIDTH DOWNSTREAM PROFILE DOWNSTREAM BANDWIDTH POWER (DBM) (MHZ) THROUGHPUT CARRIERS (KHZ) (MBIT/S) 8.832 2048 4.3125...
  • Page 122 Chapter 6 Broadband Figure 72 Network Setting > Broadband > Advanced AX/DX/EX/PX Series User’s Guide...
  • Page 123 Chapter 6 Broadband The following table describes the labels in this screen. Table 27 Network Setting > Broadband > Advanced LABEL DESCRIPTION DSL Capabilities PhyR US Enable or disable PhyR US (upstream) for upstream transmission to the WAN. PhyR US should be enabled if data being transmitted upstream is sensitive to noise.
  • Page 124: Technical Reference

    Chapter 6 Broadband Table 27 Network Setting > Broadband > Advanced (continued) LABEL DESCRIPTION 8a, 8b, 8c, 8d, The G.993.2 VDSL standard defines a wide range of profiles that can be used in different VDSL 12a, 12b, 17a, deployment settings, such as in a central office, a street cabinet or a building. 35b US0 The Zyxel Device must comply with at least one profile specified in G.993.2.
  • Page 125 Chapter 6 Broadband Operationally, PPPoE saves significant effort for both you and the ISP or carrier, as it requires no specific configuration of the broadband modem at the customer site. By implementing PPPoE directly on the Zyxel Device (rather than individual computers), the computers on the LAN do not need PPPoE software installed, since the Zyxel Device does that part of the task.
  • Page 126 Chapter 6 Broadband The following figure illustrates the relationship between PCR, SCR and MBS. Figure 73 Example of Traffic Shaping ATM Traffic Classes These are the basic ATM traffic classes defined by the ATM Forum Traffic Management 4.0 Specification. Constant Bit Rate (CBR) Constant Bit Rate (CBR) provides fixed bandwidth that is always available even if no data is being sent.
  • Page 127 Chapter 6 Broadband IP Address Assignment A static IP is a fixed IP that your ISP gives you. A dynamic IP is not fixed; the ISP assigns you a different one each time. The Single User Account feature can be enabled or disabled if you have either a dynamic or static IP.
  • Page 128 Chapter 6 Broadband Internet Group Multicast Protocol (IGMP) is a network-layer protocol used to establish membership in a Multicast group - it is not used to carry user data. IGMP version 2 (RFC 2236) is an improvement over version 1 (RFC 1112) but IGMP version 1 is still in wide use. If you would like to read more detailed information about interoperability between IGMP version 2 and version 1, please see sections 4 and 5 of RFC 2236.
  • Page 129: Wireless

    H A P T E R Wireless 7.1 Overview This chapter describes the Zyxel Device’s Network Setting > Wireless screens. Use these screens to set up your Zyxel Device’s WiFi network and security settings. 7.1.1 What You Can Do in this Chapter This section describes the Zyxel Device’s Wireless screens.
  • Page 130: Wireless General Settings

    Chapter 7 Wireless WiFi6 / IEEE 802.11ax WiFi6 is backwards compatible with IEEE 802.11a/b/g/n/ac and is most suitable in areas with a high concentration of users. WiFi6 devices support Target Wakeup Time (TWT) allowing them to automatically power down when they are inactive. The following table displays the comparison of the different WiFi standards.
  • Page 131 Chapter 7 Wireless Figure 74 Network Setting > Wireless > General The following table describes the general WiFi labels in this screen. Table 29 Network Setting > Wireless > General LABEL DESCRIPTION Wireless Wireless Select Keep the same settings for 2.4G and 5G wireless networks and the 2.4 GHz and 5 GHz wireless networks will use the same SSID and wireless security settings.
  • Page 132 Chapter 7 Wireless Table 29 Network Setting > Wireless > General (continued) LABEL DESCRIPTION Wireless Network Setup Band This shows the wireless band which this radio profile is using. 2.4GHz is the frequency used by IEEE 802.11b/g/n/ax wireless clients while 5GHz is used by IEEE 802.11a/n/ac/ax wireless clients. Wireless Click this switch to enable or disable WiFi in this field.
  • Page 133: No Security

    Chapter 7 Wireless Table 29 Network Setting > Wireless > General (continued) LABEL DESCRIPTION Security Mode Select More Secure (Recommended) to add security on this wireless network. The wireless clients which want to associate to this network must have same wireless security settings as the Zyxel Device.
  • Page 134 Chapter 7 Wireless Figure 76 Wireless > General: More Secure: WPA3-SAE/WPA2-PSK The following table describes the labels in this screen. Table 31 Wireless > General: More Secure: WPA3-SAE/WPA2-PSK LABEL DESCRIPTION Security Level Select More Secure to enable WPA3-SAE/WPA2-PSK data encryption. Security Mode Select WPA3-SAE/WPA2-PSK from the drop-down list box.
  • Page 135: Guest/More Ap

    Chapter 7 Wireless 7.3 Guest/More AP Use this screen to configure a guest wireless network that allows access to the Internet through the Zyxel Device. Click Network Setting > Wireless > Guest/More AP. The screen appears as shown. This allows you to use one access point to provide several BSSs simultaneously.
  • Page 136 Chapter 7 Wireless Click the Modify icon in the More AP screen. The following screen displays. Figure 78 Network Setting > Wireless > More AP Edit The following table describes the fields in this screen. Table 34 Network Setting > Wireless > Guest/More AP > Edit LABEL DESCRIPTION Wireless Network Setup...
  • Page 137 Chapter 7 Wireless Table 34 Network Setting > Wireless > Guest/More AP > Edit (continued) LABEL DESCRIPTION Wireless The SSID (Service Set IDentity) identifies the service set with which a wireless device is associated. Network Name Wireless devices associating to the access point (AP) must have the same SSID. Enter a descriptive name (up to 32 English keyboard characters) for WiFi.
  • Page 138: Mac Authentication

    Chapter 7 Wireless Table 34 Network Setting > Wireless > Guest/More AP > Edit (continued) LABEL DESCRIPTION Cancel Click Cancel to exit this screen without saving any changes. Click OK to save your changes. 7.5 MAC Authentication Use this screen to give exclusive access to specific devices (Allow) or exclude specific devices from accessing the Zyxel Device (Deny), based on the MAC address of each device.
  • Page 139: Wps

    Chapter 7 Wireless Table 35 Network Setting > Wireless > MAC Authentication (continued) LABEL DESCRIPTION Add new MAC This field is available when you select Deny or Allow in the MAC Restrict Mode field. address Click this if you want to add a new MAC address entry to the MAC filter list below. WiFi Enter the MAC addresses of the devices that are allowed or denied access to the Zyxel...
  • Page 140 Chapter 7 Wireless Figure 80 Network Setting > Wireless > WPS The following table describes the labels in this screen. Table 36 Network Setting > Wireless > WPS LABEL DESCRIPTION General Click to enable ( ) and have the Zyxel Device activate WPS. Otherwise, it is disabled. Add a new device with WPS Method Method 1 PBC Use this section to set up a WPS WiFi network using Push Button Configuration (PBC).
  • Page 141: Wmm

    Chapter 7 Wireless Table 36 Network Setting > Wireless > WPS (continued) LABEL DESCRIPTION Method 3 Use this section to set up a WPS WiFi network by entering the PIN of the Zyxel Device into the client. Click this switch to make it turn blue. Click Apply to activate WPS method 3 on the Zyxel Device.
  • Page 142: Others Screen

    Chapter 7 Wireless The following table describes the labels in this screen. Table 37 Network Setting > Wireless > WMM LABEL DESCRIPTION WiFi WMM of SSID Select On to have the Zyxel Device automatically give the network (SSIDx) a priority level WiFi according to the ToS value in the IP header of packets it sends.
  • Page 143 Chapter 7 Wireless The following table describes the labels in this screen. Table 38 Network Setting > Wireless > Others LABEL DESCRIPTION RTS/CTS Data with its frame size larger than this value will perform the RTS (Request To Send)/CTS (Clear Threshold To Send) handshake.
  • Page 144: Channel Status

    Chapter 7 Wireless Table 38 Network Setting > Wireless > Others (continued) LABEL DESCRIPTION 802.11 Protection Enabling this feature can help prevent collisions in mixed-mode networks (networks with both IEEE 802.11b and IEEE 802.11g traffic). Select Auto to have the wireless devices transmit data after a RTS/CTS handshake. This helps improve IEEE 802.11g performance.
  • Page 145: Mesh

    Chapter 7 Wireless Figure 83 Network Setting > Wireless > Channel Status 7.10 MESH Use this screen to enable or disable MPro Mesh for MPro Mesh-supported devices. MPro Mesh is the Zyxel implantation of WiFi-Alliance Easy Mesh. It supports AP steering, band steering, auto-configuration and other advances for your wireless network.
  • Page 146 Chapter 7 Wireless Figure 84 Mesh Application A controller can automatically configure WiFi settings on extenders in the network as well as optimize bandwidth usage. The controller optimizes bandwidth usage by directing wireless clients to an extender (AP steering) or 2.4G or 5G band (band steering) that is less busy. AP Steering AP steering allows wireless clients to roam seamlessly between Mesh supported devices in your Mesh network by using the same SSID and WiFi password.
  • Page 147 Chapter 7 Wireless Figure 86 Band Steering Application Note: For AP steering and band steering to work, the controller and all the APs in the network need to have the same SSID and password. Therefore, we recommend using the controller to change the SSID and password. When MPro Mesh is enabled: •...
  • Page 148: Technical Reference

    Chapter 7 Wireless Figure 87 Network > Wireless > MESH Press the WPS button for more than 5 seconds on the Zyxel Device. Click Add Extender in the MPro Mesh App. Install from Google Play or the Apple App store. 7.11 Technical Reference This section discusses wireless LANs in depth.
  • Page 149 Chapter 7 Wireless Figure 88 Example of a WiFi Network The WiFi network is the part in the blue circle. In this WiFi network, devices A and B use the access point (AP) to interact with the other devices (such as the printer) or with the Internet. Your Zyxel Device is the Every WiFi network must follow these basic guidelines.
  • Page 150: Additional Wireless Terms

    Chapter 7 Wireless 7.11.2 Additional Wireless Terms The following table describes some WiFi network terms and acronyms used in the Zyxel Device’s Web Configurator. Table 39 Additional WiFi Terms TERM DESCRIPTION RTS/CTS Threshold In a WiFi network which covers a large area, WiFi devices are sometimes not aware of each other’s presence.
  • Page 151 Chapter 7 Wireless Vanishing Point (which you know was made in 1971) you could use “70dodchal71vanpoi” as your security key. The following sections introduce different types of WiFi security you can set up in the WiFi network. 7.11.3.1 SSID Normally, the Zyxel Device acts like a beacon and regularly broadcasts the SSID in the area. You can hide the SSID instead, in which case the Zyxel Device does not broadcast the SSID.
  • Page 152: Signal Problems

    Chapter 7 Wireless The types of encryption you can choose depend on the type of authentication. (See Section 7.11.3.3 on page 151 for information about this.) Table 40 Types of Encryption for Each Type of Authentication NO AUTHENTICATION RADIUS SERVER Weakest No Security WPA-PSK...
  • Page 153: Mbssid

    Chapter 7 Wireless Figure 89 Basic Service Set 7.11.6 MBSSID Traditionally, you need to use different APs to configure different Basic Service Sets (BSSs). As well as the cost of buying extra APs, there is also the possibility of channel interference. The Zyxel Device’s MBSSID (Multiple Basic Service Set IDentifier) function allows you to use one access point to provide several BSSs simultaneously.
  • Page 154: Wifi Protected Setup (Wps)

    Chapter 7 Wireless Use short preamble if you are sure all WiFi devices on the network support it, and to provide more efficient communications. Use the dynamic setting to automatically use short preamble when all WiFi devices on the network support it, otherwise the Zyxel Device uses long preamble.
  • Page 155 Chapter 7 Wireless Use the PIN method instead of the push-button configuration (PBC) method if you want to ensure that the connection is established between the devices you specify, not just the first two devices to activate WPS in range of each other. However, you need to log into the configuration interfaces of both devices to use the PIN method.
  • Page 156 Chapter 7 Wireless Figure 90 Example WPS Process: PIN Method 7.11.8.3 How WPS Works When two WPS-enabled devices connect, each device must assume a specific role. One device acts as the registrar (the device that supplies network and security settings) and the other device acts as the enrollee (the device that receives network and security settings.
  • Page 157 Chapter 7 Wireless Figure 91 How WPS Works The roles of registrar and enrollee last only as long as the WPS setup process is active (2 minutes). The next time you use WPS, a different device can be the registrar if necessary. The WPS connection process is like a handshake;...
  • Page 158 Chapter 7 Wireless Figure 92 WPS: Example Network Step 1 In step 2, you add another WiFi client to the network. You know that Client 1 supports registrar mode, but it is better to use AP1 for the WPS handshake with the new client since you must connect to the access point anyway in order to use the network.
  • Page 159 Chapter 7 Wireless Figure 94 WPS: Example Network Step 3 7.11.8.5 Limitations of WPS WPS has some limitations of which you should be aware. • When you use WPS, it works between two devices only. You cannot enroll multiple devices simultaneously, you must enroll one after the other.
  • Page 160: Home Networking

    H A P T E R Home Networking 8.1 Overview A Local Area Network (LAN) is a shared communication system to which many computers are attached. A LAN is usually located in one immediate area such as a building or floor of a building. The LAN screens can help you configure a LAN DHCP server and manage IP addresses.
  • Page 161 Chapter 8 Home Networking Subnet Mask The subnet mask specifies the network number portion of an IP address. Your Zyxel Device will compute the subnet mask automatically based on the IP address that you entered. You do not need to change the subnet mask computed by the Zyxel Device unless you are instructed to do otherwise.
  • Page 162: Before You Begin

    Chapter 8 Home Networking Cautions with UPnP The automated nature of NAT traversal applications in establishing their own services and opening firewall ports may present network security issues. Network information and configuration may also be obtained and modified by users in some network environments. When a UPnP device joins a network, it announces its presence with a multicast message.
  • Page 163 Chapter 8 Home Networking Figure 96 Network Setting > Home Networking > LAN Setup AX/DX/EX/PX Series User’s Guide...
  • Page 164 Chapter 8 Home Networking The following table describes the fields in this screen. Table 41 Network Setting > Home Networking > LAN Setup LABEL DESCRIPTION Interface Group Group Name This displays the name of the group that your Zyxel Device belongs to. LAN IP Setup IP Address Enter the LAN IP address you want to assign to your Zyxel Device in dotted decimal notation,...
  • Page 165 Chapter 8 Home Networking Table 41 Network Setting > Home Networking > LAN Setup (continued) LABEL DESCRIPTION Link Local Address A link-local address uniquely identifies a device on the local network (the LAN). It is similar to Type a “private IP address” in IPv6. You can have the same link-local address on multiple interfaces on a device.
  • Page 166: Static Dhcp

    Chapter 8 Home Networking Table 41 Network Setting > Home Networking > LAN Setup (continued) LABEL DESCRIPTION DNS Query Scenario Select how the Zyxel Device handles clients’ DNS information requests. IPv4/IPv6 DNS Server: The Zyxel Device forwards the requests to both the IPv4 and IPv6 DNS servers and sends clients the first DNS information it receives.
  • Page 167 Chapter 8 Home Networking The following table describes the labels in this screen. Table 42 Network Setting > Home Networking > Static DHCP LABEL DESCRIPTION Static DHCP Click this to configure a static DHCP entry. Configuration This is the index number of the entry. Status This field displays whether the client is connected to the Zyxel Device.
  • Page 168: Upnp

    Chapter 8 Home Networking Table 43 Static DHCP: Static DHCP Configuration LABEL DESCRIPTION IP Address Enter the IP address that you want to assign to the computer on your LAN with the MAC address that you will also specify if you select Manual Input in the previous field. Click OK to save your changes.
  • Page 169: Lan Additional Subnet

    Chapter 8 Home Networking The following table describes the labels in this screen. Table 44 Network Settings > Home Networking > UPnP LABEL DESCRIPTION UPnP State UPnP Select Enable to activate UPnP. Be aware that anyone could use a UPnP application to open the Web Configurator's login screen without entering the Zyxel Device's IP address (although you must still enter the password to access the Web Configurator).
  • Page 170 Chapter 8 Home Networking Figure 100 Network Setting > Home Networking > Additional Subnet The following table describes the labels in this screen. Table 45 Network Setting > Home Networking > Additional Subnet LABEL DESCRIPTION IP Alias Setup Group Name Select the interface group name for which you want to configure the IP alias settings.
  • Page 171: Stb Vendor Id

    Chapter 8 Home Networking Table 45 Network Setting > Home Networking > Additional Subnet (continued) LABEL DESCRIPTION IPv4 Address Enter the public IP address provided by your ISP. Subnet Mask Enter the public IPv4 subnet mask provided by your ISP. Offer Public IP Click this switch to enable or disable the Zyxel Device to provide public IP addresses by DHCP by DHCP...
  • Page 172: Wake On Lan

    Chapter 8 Home Networking 8.7 Wake on LAN Wake on LAN (WoL) allows you to remotely turn on a device on the network, such as a computer, storage device or media server. To use this feature the remote hardware (for example the network adapter on a computer) must support Wake On LAN using the ‘Magic Packet’...
  • Page 173: Technical Reference

    Chapter 8 Home Networking Click Network Setting > Home Networking > TFTP Server Name to open this screen. Figure 103 Network Setting > Home Networking > TFTP Server Name The following table describes the labels in this screen. Table 48 Network Setting > Home Networking > TFTP Server Name LABEL DESCRIPTION TFTP Server...
  • Page 174: Turn On Upnp In Windows 7 Example

    Chapter 8 Home Networking Private IP Addresses Every machine on the Internet must have a unique address. If your networks are isolated from the Internet, for example, only between your two branch offices, you can assign any IP addresses to the hosts without problems.
  • Page 175: Auto-Discover Your Upnp-Enabled Network Device

    Chapter 8 Home Networking Select Turn on network discovery and click Save Changes. Network discovery allows your computer to find other computers and devices on the network and other computers on the network to find your computer. This makes it easier to share files and printers. 8.10.1 Auto-discover Your UPnP-enabled Network Device Before you follow these steps, make sure you already have UPnP activated on the Zyxel Device and in your computer.
  • Page 176 Chapter 8 Home Networking Open Windows Explorer and click Network. Right-click the Zyxel Device icon and select Properties. Figure 105 Network Connections In the Internet Connection Properties window, click Settings to see port mappings. Figure 106 Internet Connection Properties You may edit or delete the port mappings or click Add to manually add port mappings. AX/DX/EX/PX Series User’s Guide...
  • Page 177 Chapter 8 Home Networking Figure 107 Internet Connection Properties: Advanced Settings Figure 108 Internet Connection Properties: Advanced Settings: Add Note: When the UPnP-enabled device is disconnected from your computer, all port mappings will be deleted automatically. Click OK. Check the network icon on the system tray to see your Internet connection status. Figure 109 System Tray Icon To see more details about your current Internet connection status, right click the network icon in the system tray and click Open Network and Sharing Center.
  • Page 178: Turn On Upnp In Windows 10 Example

    Chapter 8 Home Networking Figure 110 Internet Connection Status 8.11 Turn on UPnP in Windows 10 Example This section shows you how to use the UPnP feature in Windows 10. UPnP server is installed in Windows 10. Activate UPnP on the Zyxel Device by clicking Network Setting > Home Networking > UPnP. Make sure the computer is connected to the LAN port of the Zyxel Device.
  • Page 179 Chapter 8 Home Networking Click Change advanced sharing settings. Under Domain, select Turn on network discovery and click Save Changes. Network discovery allows your computer to find other computers and devices on the network and other computers on the network to find your computer.
  • Page 180: Auto-Discover Your Upnp-Enabled Network Device

    Chapter 8 Home Networking 8.11.1 Auto-discover Your UPnP-enabled Network Device Before you follow these steps, make sure you already have UPnP activated on the Zyxel Device and in your computer. Make sure your computer is connected to the LAN port of the Zyxel Device. Open File Explorer and click Network.
  • Page 181 Chapter 8 Home Networking Figure 111 Network Connections In the Internet Connection Properties window, click Settings to see port mappings. Figure 112 Internet Connection Properties You may edit or delete the port mappings or click Add to manually add port mappings. AX/DX/EX/PX Series User’s Guide...
  • Page 182 Chapter 8 Home Networking Figure 113 Internet Connection Properties: Advanced Settings Figure 114 Internet Connection Properties: Advanced Settings: Add Note: When the UPnP-enabled device is disconnected from your computer, all port mappings will be deleted automatically. Click OK. Check the network icon on the system tray to see your Internet connection status. Figure 115 System Tray Icon To see more details about your current Internet connection status, right click the network icon in the system tray and click Open Network &...
  • Page 183: Web Configurator Easy Access In Windows 7

    Chapter 8 Home Networking Figure 116 Internet Connection Status 8.12 Web Configurator Easy Access in Windows 7 With UPnP, you can access the Web-based Configurator on the Zyxel Device without needing to find out the IP address of the Zyxel Device first. This comes helpful if you do not know the IP address of the Zyxel Device.
  • Page 184 Chapter 8 Home Networking Figure 117 Network Connections An icon with the description for each UPnP-enabled device displays under Network Infrastructure. Right-click the icon for your Zyxel Device and select View device webpage. The Web Configurator login screen displays. Figure 118 Network Connections: My Network Places Right-click the icon for your Zyxel Device and select Properties.
  • Page 185: Web Configurator Easy Access In Windows 10

    Chapter 8 Home Networking Figure 119 Network Connections: My Network Places: Properties: Example 8.13 Web Configurator Easy Access in Windows 10 Follow the steps below to access the Web Configurator. Open File Explorer. Click Network. AX/DX/EX/PX Series User’s Guide...
  • Page 186 Chapter 8 Home Networking Figure 120 Network Connections An icon with the description for each UPnP-enabled device displays under Network Infrastructure. Right-click the icon for your Zyxel Device and select View device webpage. The Web Configurator login screen displays. Figure 121 Network Connections: Network Infrastructure Right-click the icon for your Zyxel Device and select Properties.
  • Page 187: Dhcp Setup

    Chapter 8 Home Networking Figure 122 Network Connections: Network Infrastructure: Properties: Example 8.13.1 DHCP Setup DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individual clients to obtain TCP/IP configuration at start-up from a server. You can configure the Zyxel Device as a DHCP server or disable it.
  • Page 188: Lan Tcp/Ip

    Chapter 8 Home Networking • Some ISPs choose to disseminate the DNS server addresses using the DNS server extensions of IPCP (IP Control Protocol) after the connection is up. If your ISP did not give you explicit DNS servers, chances are the DNS servers are conveyed through IPCP negotiation.
  • Page 189 Chapter 8 Home Networking You can obtain your IP address from the IANA, from an ISP or it can be assigned from a private network. If you belong to a small organization and your Internet access is through an ISP, the ISP can provide you with the Internet addresses for your local networks.
  • Page 190: Routing

    H A P T E R Routing 9.1 Overview The Zyxel Device usually uses the default gateway to route outbound traffic from computers on the LAN to the Internet. To have the Zyxel Device send data to devices not reachable through the default gateway, use static routes.
  • Page 191: Add Or Edit Static Route

    Chapter 9 Routing Figure 124 Network Setting > Routing > Static Route The following table describes the labels in this screen. Table 49 Network Setting > Routing > Static Route LABEL DESCRIPTION Add New Static Click this to set up a new static route on the Zyxel Device. Route This is the number of an individual static route.
  • Page 192 Chapter 9 Routing Figure 125 Network Setting > Routing > Static Route > Add New Static Route The following table describes the labels in this screen. Table 50 Network Setting > Routing > Static Route > Add New Static Route LABEL DESCRIPTION Active...
  • Page 193: Dns Route

    Chapter 9 Routing 9.3 DNS Route Use this screen to view and configure DNS routes on the Zyxel Device. A DNS route entry defines a policy for the Zyxel Device to forward a particular DNS query to a specific WAN interface. Click Network Setting >...
  • Page 194: Policy Route

    Chapter 9 Routing The following table describes the labels in this screen. Table 52 Network Setting > Routing > DNS Route > Add New DNS Route LABEL DESCRIPTION Active Enable DNS route in your Zyxel Device Domain Name Enter the domain name you want to resolve. You can use the wildcard character, an “*”...
  • Page 195: Add Or Edit Policy Route

    Chapter 9 Routing Table 53 Network Setting > Routing > Policy Route (continued) LABEL DESCRIPTION Source MAC This is the source MAC address. Source This is the interface from which the matched traffic is sent. Interface WAN Interface This is the WAN interface through which the traffic is routed. Modify Click the Edit icon to edit this policy.
  • Page 196: Rip Overview

    Chapter 9 Routing Table 54 Policy Route: Add or Edit (continued) LABEL DESCRIPTION Protocol Select the transport layer protocol (TCP, UDP, or None). Source Port Enter the source port number. Source MAC Enter the source MAC address. Source Interface Type the name of the interface from which the matched traffic is sent. (ex: br0 or LAN1 –...
  • Page 197 Chapter 9 Routing Table 55 Network Setting > Routing > RIP LABEL DESCRIPTION Version The RIP version controls the format and the broadcasting method of the RIP packets that the Zyxel Device sends (it recognizes both formats when receiving). RIPv1 is universally supported but RIPv2 carries more information.
  • Page 198: Quality Of Service (Qos)

    H A P T E R Quality of Service (QoS) 10.1 QoS Overview Quality of Service (QoS) refers to both a network’s ability to deliver data with minimum delay, and the networking methods used to control the use of bandwidth. Without QoS, all traffic data is equally likely to be dropped when the network is congested.
  • Page 199 Chapter 10 Quality of Service (QoS) QoS versus CoS QoS is used to prioritize source-to-destination traffic flows. All packets in the same flow are given the same priority. CoS (class of service) is a way of managing traffic in a network by grouping similar types of traffic together and treating each type as a class.
  • Page 200: Quality Of Service General Settings

    Chapter 10 Quality of Service (QoS) The Zyxel Device supports three incoming traffic metering algorithms: Token Bucket Filter (TBF), Single Rate Two Color Maker (srTCM), and Two Rate Two Color Marker (trTCM). You can specify actions which are performed on the colored packets. See Section 10.8 on page 212 for more information on each metering algorithm.
  • Page 201: Queue Setup

    Chapter 10 Quality of Service (QoS) Figure 131 Network > QoS > General The following table describes the labels in this screen. Table 56 Network Setting > QoS > General LABEL DESCRIPTION Select the Enable check box to turn on QoS to improve your network performance. WAN Managed Enter the amount of upstream bandwidth for the WAN interfaces that you want to allocate using Upstream...
  • Page 202 Chapter 10 Quality of Service (QoS) Use this screen to configure QoS queue assignment to decide the priority on WAN or LAN interfaces. Traffic with higher priority gets through faster than those with lower priority. Low-priority traffic is dropped first when the network is congested. Note: Configure the priority level for a QoS queue from 1 to 8.
  • Page 203: Qos Classification Setup

    Chapter 10 Quality of Service (QoS) Table 57 Network Setting > QoS > Queue Setup (continued) LABEL DESCRIPTION Weight This shows the weight of this queue. Buffer This shows the queue management algorithm used for this queue. Management Queue management algorithms determine how the Zyxel Device should handle packets when it receives too many (network congestion).
  • Page 204: Add Or Edit Qos Class

    Chapter 10 Quality of Service (QoS) The following table describes the labels in this screen. Table 58 Network Setting > QoS > Classification Setup LABEL DESCRIPTION Add New Click this to create a new classifier. Classification Order This is the index number of the entry. The classifiers are applied in order of their numbering. Status This field displays whether the classifier is active or not.
  • Page 205 Chapter 10 Quality of Service (QoS) Figure 134 Classification Setup: Add or Edit AX/DX/EX/PX Series User’s Guide...
  • Page 206 Chapter 10 Quality of Service (QoS) The following table describes the labels in this screen. Table 59 Classification Setup: Add or Edit LABEL DESCRIPTION Step1: Class Configuration Active Click this switch to enable or disable the classifier. When the switch turns blue , the function is enabled.
  • Page 207 Chapter 10 Quality of Service (QoS) Table 59 Classification Setup: Add or Edit (continued) LABEL DESCRIPTION Service This field is available only when you select IP in the Ether Type field. This field simplifies classifier configuration by allowing you to select a predefined application. When you select a predefined application, you do not configure the rest of the filter fields.
  • Page 208: Qos Shaper Setup

    Chapter 10 Quality of Service (QoS) Table 59 Classification Setup: Add or Edit (continued) LABEL DESCRIPTION 802.1P Mark Select a priority level with which the Zyxel Device replaces the IEEE 802.1p priority field in the packets. If you select Unchange, the Zyxel Device keep the 802.1p priority field in the packets. Step4: Class Routing Forward to Select a WAN interface through which traffic of this class will be forwarded out.
  • Page 209: Add Or Edit A Qos Shaper

    Chapter 10 Quality of Service (QoS) Table 60 Network Setting > QoS > Shaper Setup (continued) LABEL DESCRIPTION Rate Limit This shows the average rate limit of traffic bursts for this shaper. Modify Click the Edit icon to edit the shaper. Click the Delete icon to delete an existing shaper.
  • Page 210: Add Or Edit A Qos Policer

    Chapter 10 Quality of Service (QoS) Figure 137 Network Setting > QoS > Policer Setup The following table describes the labels in this screen. Table 62 Network Setting > QoS > Policer Setup LABEL DESCRIPTION Add new Policer Click this to create a new entry. This is the index number of the entry.
  • Page 211 Chapter 10 Quality of Service (QoS) Figure 138 Policer Setup: Add or Edit The following table describes the labels in this screen. Table 63 Policer Setup: Add/Edit LABEL DESCRIPTION Active Click this switch to enable or disable the policer. When the switch turns blue , the function is enabled.
  • Page 212: Technical Reference

    Chapter 10 Quality of Service (QoS) Table 63 Policer Setup: Add/Edit (continued) LABEL DESCRIPTION Committed Specify the committed burst size for packet bursts. This must be equal to or less than the peak Burst Size burst size (two rate three color) or excess burst size (single rate three color) if it is also configured. This is the maximum size of the (first) token bucket in a traffic metering algorithm.
  • Page 213 Chapter 10 Quality of Service (QoS) IEEE 802.1Q Tag The IEEE 802.1Q standard defines an explicit VLAN tag in the MAC header to identify the VLAN membership of a frame across bridges. A VLAN tag includes the 12-bit VLAN ID and 3-bit user priority. The VLAN ID associates a frame with a specific VLAN and provides the information that devices need to process the frame across the network.
  • Page 214 Chapter 10 Quality of Service (QoS) different kinds of forwarding. Resources can then be allocated according to the DSCP values and the configured policies. IP Precedence Similar to IEEE 802.1p prioritization at layer-2, you can use IP precedence to prioritize packets in a layer-3 network.
  • Page 215 Chapter 10 Quality of Service (QoS) Table 65 Internal Layer2 and Layer3 QoS Mapping (continued) LAYER 2 LAYER 3 PRIORITY IEEE 802.1P USER QUEUE TOS (IP IP PACKET LENGTH PRIORITY (ETHERNET DSCP PRECEDENCE) (BYTE) PRIORITY) 100110 100100 100010 100000 101110 101000 110000 111000...
  • Page 216 Chapter 10 Quality of Service (QoS) The srTCM evaluates incoming packets and marks them with one of three colors which refer to packet loss priority levels. High packet loss priority level is referred to as red, medium is referred to as yellow and low is referred to as green.
  • Page 217: Network Address Translation (Nat)

    H A P T E R Network Address Translation (NAT) 11.1 Overview NAT (Network Address Translation – NAT, RFC 1631) is the translation of the IP address of a host in a packet, for example, the source address of an outgoing packet, used within one network to a different IP address known within another network.
  • Page 218: Port Forwarding Overview

    Chapter 11 Network Address Translation (NAT) Port Forwarding A port forwarding set is a list of inside (behind NAT on the LAN) servers, for example, web or FTP, that you can make visible to the outside world even though NAT makes your whole inside network appear as a single computer to the outside world.
  • Page 219: Add Or Edit Port Forwarding

    Chapter 11 Network Address Translation (NAT) Note: TCP port 7547 is reserved for system use. Figure 140 Network Setting > NAT > Port Forwarding The following table describes the fields in this screen. Table 66 Network Setting > NAT > Port Forwarding LABEL DESCRIPTION Add New Rule...
  • Page 220 Chapter 11 Network Address Translation (NAT) Figure 141 Port Forwarding: Add or Edit Note: To configure port forwarding, you need to have the same configurations in the Start Port, End Port, Translation Start Port, and Translation End Port fields. To configure port translation, you need to have different configurations in the Start Port, End Port, Translation Start Port, and Translation End Port fields.
  • Page 221: Port Triggering

    Chapter 11 Network Address Translation (NAT) Table 67 Port Forwarding: Add or Edit (continued) LABEL DESCRIPTION Start Port Configure this for a user-defined entry. Enter the original destination port for the packets. To forward only one port, enter the port number again in the End Port field. To forward a series of ports, enter the start port number here and the end port number in the End Port field.
  • Page 222 Chapter 11 Network Address Translation (NAT) Figure 142 Trigger Port Forwarding Process: Example Jane requests a file from the Real Audio server (port 7070). Port 7070 is a “trigger” port and causes the Zyxel Device to record Jane’s computer IP address. The Zyxel Device associates Jane's computer IP address with the "open"...
  • Page 223: Add Or Edit Port Triggering Rule

    Chapter 11 Network Address Translation (NAT) Table 68 Network Setting > NAT > Port Triggering (continued) LABEL DESCRIPTION Status This field displays whether the port triggering rule is active or not. A yellow bulb signifies that this rule is active. A gray bulb signifies that this rule is not active. Service Name This field displays the name of the service used by this rule.
  • Page 224: Dmz

    Chapter 11 Network Address Translation (NAT) The following table describes the labels in this screen. Table 69 Port Triggering: Add or Edit LABEL DESCRIPTION Active Click to enable (blue switch) or disable (gray switch) to activate or deactivate the rule. Service Name Enter a name to identify this rule using keyboard characters (A –...
  • Page 225: Alg

    Chapter 11 Network Address Translation (NAT) Figure 145 Network Setting > NAT > DMZ The following table describes the fields in this screen. Table 70 Network Setting > NAT > DMZ LABEL DESCRIPTION Default Server Enter the IP address of the default server which receives packets from ports that are not Address specified in the Port Forwarding screen.
  • Page 226: Address Mapping

    Chapter 11 Network Address Translation (NAT) Figure 146 Network Setting > NAT > ALG The following table describes the fields in this screen. Table 71 Network Setting > NAT > ALG LABEL DESCRIPTION NAT ALG Enable this to make sure applications such as FTP and file transfer in IM applications work correctly with port-forwarding and address-mapping rules.
  • Page 227: Add New Rule Screen

    Chapter 11 Network Address Translation (NAT) Figure 147 Network Setting > NAT > Address Mapping The following table describes the fields in this screen. Table 72 LABEL DESCRIPTION Rule Name This is the name of the rule. Local Start IP This is the starting Inside Local IP Address (ILA).
  • Page 228 Chapter 11 Network Address Translation (NAT) Figure 148 Network Setting > NAT > Address Mapping > Add New Rule The following table describes the fields in this screen. Table 73 Network Setting > NAT > Address Mapping > Add New Rule LABEL DESCRIPTION Rule Name...
  • Page 229: Sessions

    Chapter 11 Network Address Translation (NAT) 11.7 Sessions Use this screen to limit the number of concurrent NAT sessions a client can use, to ensure that no single client uses up too many available NAT sessions. Some applications, such as P2P file sharing, demand a greater number of NAT sessions in order to get a better uploading and downloading rate.
  • Page 230: Nat Definitions

    Chapter 11 Network Address Translation (NAT) 11.8.1 NAT Definitions Inside or outside denotes where a host is located relative to the Zyxel Device, for example, the computers of your subscribers are the inside hosts, while the web servers on the Internet are the outside hosts.
  • Page 231: How Nat Works

    Chapter 11 Network Address Translation (NAT) 11.8.3 How NAT Works Each packet has two addresses – a source address and a destination address. For outgoing packets, the ILA (Inside Local Address) is the source address on the LAN, and the IGA (Inside Global Address) is the source address on the WAN.
  • Page 232 Chapter 11 Network Address Translation (NAT) Figure 151 NAT Application With IP Alias Port Forwarding: Services and Port Numbers The most often used port numbers are shown in the following table. Please refer to RFC 1700 for further information about port numbers. Please also refer to the Supporting CD for more examples and details on port forwarding and NAT.
  • Page 233 Chapter 11 Network Address Translation (NAT) Port Forwarding Example Let's say you want to assign ports 21 – 25 to one FTP, Telnet and SMTP server (A in the example), port 80 to another (B in the example) and assign a default server IP address of 192.168.1.35 to a third (C in the example).
  • Page 234: Dns

    H A P T E R 12.1 DNS Overview DNS (Domain Name System) is for mapping a domain name to its corresponding IP address and vice versa. The DNS server is extremely important because without it, you must know the IP address of a machine before you can access it.
  • Page 235: What You Need To Know

    Chapter 12 DNS 12.1.2 What You Need To Know DYNDNS Wildcard Enabling the wildcard feature for your host causes *.yourhost.dyndns.org to be aliased to the same IP address as yourhost.dyndns.org. This feature is useful if you want to be able to use, for example, www.yourhost.dyndns.org and still reach your hostname.
  • Page 236: Add Or Edit Dns Entry

    Chapter 12 DNS 12.2.1 Add or Edit DNS Entry You can manually add or edit the Zyxel Device’s DNS name and IP address entry. Click Add New DNS Entry in the DNS Entry screen or the Edit icon next to the entry you want to edit. The screen shown next appears.
  • Page 237 Chapter 12 DNS Figure 155 Network Setting > DNS > Dynamic DNS The following table describes the fields in this screen. Table 79 Network Setting > DNS > Dynamic DNS LABEL DESCRIPTION Dynamic DNS Setup Dynamic DNS Select Enable to use dynamic DNS. Service Provider Select your Dynamic DNS service provider from the drop-down list box.
  • Page 238: Vlan Group

    H A P T E R VLAN Group 13.1 Overview A VLAN (Virtual Local Area Network) allows a physical network to be partitioned into multiple logical networks. Devices on a logical network belong to one group. A device can belong to more than one group.
  • Page 239: Vlan Group Settings

    Chapter 13 VLAN Group 13.2 VLAN Group Settings This screen shows the VLAN groups created on the Zyxel Device. Click Network Setting > VLAN Group to open the following screen. Figure 157 Network Setting > VLAN Group The following table describes the fields in this screen. Table 80 Network Setting >...
  • Page 240 Chapter 13 VLAN Group Figure 158 Add or Edit VLAN Group The following table describes the fields in this screen. Table 81 Add/Edit VLAN Group LABEL DESCRIPTION VLAN Group Enter a name to identify this group. You can enter up to 30 characters. You can use letters, Name numbers, hyphens (–) and underscores (_).
  • Page 241: Interface Grouping

    H A P T E R Interface Grouping 14.1 Interface Grouping Overview By default, all LAN and WAN interfaces on the Zyxel Device are in the same group and can communicate with each other. Create interface groups to have the Zyxel Device assign IP addresses in different domains to different groups.
  • Page 242: Interface Group Configuration

    Chapter 14 Interface Grouping You can use this screen to create new user-defined interface groups or modify existing ones. Interfaces that do not belong to any user-defined group always belong to the default group. Click Network Setting > Interface Grouping to open the following screen. Figure 160 Network Setting >...
  • Page 243 Chapter 14 Interface Grouping Figure 161 Interface Group Configuration (DX3300-T0, DX3301-T0, DX5301-B2/B3 and DX5401-B0) AX/DX/EX/PX Series User’s Guide...
  • Page 244 Chapter 14 Interface Grouping Figure 162 Interface Group Configuration (EX3300-T0, EX3301-T0, EX5300, EX5301, EX5401-B0, and EX5501) AX/DX/EX/PX Series User’s Guide...
  • Page 245 Chapter 14 Interface Grouping Figure 163 Interface Group Configuration (AX7501 and PX7501) The following table describes the fields in this screen. Table 83 Interface Group Configuration LABEL DESCRIPTION Group Name Enter a name to identify this group. You can enter up to 30 characters. You can use letters, numbers, hyphens (–) and underscores (_).
  • Page 246: Interface Grouping Criteria

    Chapter 14 Interface Grouping Table 83 Interface Group Configuration (continued) LABEL DESCRIPTION Automatically Click Add to identify LAN hosts to add to the interface group by criteria such as the type of the Add Clients With hardware or firmware. See Section 14.2.2 on page 246 for more information.
  • Page 247 Chapter 14 Interface Grouping The following table describes the fields in this screen. Table 84 Interface Grouping Criteria LABEL DESCRIPTION Source MAC Enter the source MAC address of the packet. Address DHCP Option 60 Select this option and enter the Vendor Class Identifier (Option 60) of the matched traffic, such as the type of the hardware or firmware.
  • Page 248: Usb Service

    H A P T E R USB Service 15.1 USB Service Overview You can share files on a USB memory stick or hard drive connected to your Zyxel Device with users on your network. The following figure is an overview of the Zyxel Device’s file server feature. Computers A and B can access files on a USB device (C) which is connected to the Zyxel Device.
  • Page 249: Before You Begin

    Chapter 15 USB Service Shares When settings are set to default, each USB device connected to the Zyxel Device is given a folder, called a “share”. If a USB hard drive connected to the Zyxel Device has more than one partition, then each partition will be allocated a share.
  • Page 250 Chapter 15 USB Service Figure 166 Network Setting > USB Service Note: The Share Directory List is only visible when you connect a USB device. Each field is described in the following table. Table 85 Network Setting > USB Service > File Sharing LABEL DESCRIPTION Information...
  • Page 251: Add New Share

    Chapter 15 USB Service Table 85 Network Setting > USB Service > File Sharing (continued) LABEL DESCRIPTION Share Path This field displays the location in the USB of the file you shared. Share This field displays a description of the file you shared. Description Modify Click the Edit icon to change the settings of an existing share.
  • Page 252: Add New User Screen

    Chapter 15 USB Service The following table describes the labels in this menu. Table 86 Network Setting > USB Service > Media Server LABEL DESCRIPTION Volume Select the volume in the USB storage device that you want to add as a share in the Zyxel Device.
  • Page 253 Chapter 15 USB Service To change your Zyxel Device’s media server settings, click Network Setting > USB Service > Media Server. The screen appears as shown. Figure 168 Network Setting > USB Service > Media Server The following table describes the labels in this menu. Table 87 Network Setting >...
  • Page 254: Firewall

    H A P T E R Firewall 16.1 Overview This chapter shows you how to enable the Zyxel Device firewall. Use the firewall to protect your Zyxel Device and network from attacks by hackers on the Internet and control access to it. The firewall: •...
  • Page 255: Firewall

    Chapter 16 Firewall to network resources. The Zyxel Device is pre-configured to automatically detect and thwart all known DoS attacks. DoS Thresholds For DoS attacks, the Zyxel Device uses thresholds to determine when to drop sessions that do not become fully established. These thresholds apply globally to all sessions. You can use the default threshold values, or you can change them to values more suitable to your security requirements.
  • Page 256: Firewall General Settings

    Chapter 16 Firewall • Use the DoS screen to activate protection against Denial of Service (DoS) attacks (Section 16.6 on page 261). 16.3 Firewall General Settings Use the firewall to protect your Zyxel Device and network from attacks by hackers on the Internet and control access to it.
  • Page 257: Protocol (Customized Services)

    Chapter 16 Firewall Table 88 Security > Firewall > General (continued) LABEL DESCRIPTION High This setting blocks all traffic to and from the Internet. Only local network traffic and LAN to WAN service (Telnet, FTP, HTTP, HTTPS, DNS, POP3, SMTP) is permitted. Medium This is the recommended setting.
  • Page 258: Add Customized Service

    Chapter 16 Firewall 16.4.1 Add Customized Service Add a customized rule or edit an existing rule by specifying the protocol and the port numbers. Click Add New Protocol Entry in the Protocol screen to display the following screen. Figure 172 Security > Firewall > Protocol: Add New Protocol Entry The following table describes the labels in this screen.
  • Page 259: Add New Acl Rule Screen

    Chapter 16 Firewall Figure 173 Security > Firewall > Access Control The following table describes the labels in this screen. Table 91 Security > Firewall > Rules LABEL DESCRIPTION Rules Storage Space This read-only bar shows how much of the Zyxel Device's memory for recording firewall Usage rules it is currently using.
  • Page 260 Chapter 16 Firewall Figure 174 Security > Firewall > Access Control > Add New ACL Rule The following table describes the labels in this screen. Table 92 Security > Firewall > Access Control > Add New ACL Rule LABEL DESCRIPTION Active Click the Active button to enable this ACL rule.
  • Page 261: Dos

    Chapter 16 Firewall Table 92 Security > Firewall > Access Control > Add New ACL Rule (continued) LABEL DESCRIPTION MAC Address Enter the MAC addresses of the wireless or LAN clients that are allowed access to the Zyxel Device in these address fields. Enter the MAC addresses in a valid MAC address format, that is, six hexadecimal character pairs, for example, 12:34:56:78:9a:bc.
  • Page 262: Firewall Technical Reference

    Chapter 16 Firewall The following table describes the labels in this screen. Table 93 Security > Firewall > DoS LABEL DESCRIPTION DoS Protection Enable this to protect against DoS attacks. The Zyxel Device will drop sessions that surpass Blocking maximum thresholds. Apply Click this to save your changes.
  • Page 263: Guidelines For Security Enhancement With Your Firewall

    Chapter 16 Firewall • WAN to Router By default the Zyxel Device stops computers on the WAN from managing the Zyxel Device. You could configure one of these rules to allow a WAN computer to manage the Zyxel Device. Note: You also need to configure the remote management settings to allow a WAN computer to manage the Zyxel Device.
  • Page 264 Chapter 16 Firewall Does this rule stop LAN users from accessing critical resources on the Internet? For example, if IRC (Internet Relay Chat) is blocked, are there users that require this service? Is it possible to modify the rule to be more specific? For example, if IRC is blocked for all users, will a rule that blocks just certain users be more effective? Does a rule that allows Internet users access to resources on the LAN create a security vulnerability? For example, if FTP ports (TCP 20, 21) are allowed from the Internet to the LAN, Internet users may be able to...
  • Page 265: Mac Filter

    H A P T E R MAC Filter 17.1 MAC Filter Overview You can configure the Zyxel Device to permit access to clients based on their MAC addresses in the MAC Filter screen. This applies to wired and wireless connections. Every Ethernet device has a unique MAC (Media Access Control) address.
  • Page 266: Add New Rule

    Chapter 17 MAC Filter Table 94 Security > MAC Filter (continued) LABEL DESCRIPTION Active Select Active to enable the MAC filter rule. The rule will not be applied if Allow is not selected under MAC Restrict Mode. Host Name Enter the host name of the wireless or LAN clients that are allowed access to the Zyxel Device.
  • Page 267: Parental Control

    H A P T E R Parental Control 18.1 Parental Control Overview Parental control allows you to limit the time a user can access the Internet and prevent users from viewing inappropriate content or participating in specified online activities. 18.2 Parental Control Settings For DX/EX3300, DX/EX3301, EX5300, EX5301, DX5301-B2/B3 and DX/EX5401 Use this screen to enable parental control and view parental control rules and schedules.
  • Page 268: Add Or Edit A Parental Control Profile

    Chapter 18 Parental Control The following table describes the fields in this screen. Table 96 Security > Parental Control LABEL DESCRIPTION Parental Control Click this switch to enable or disable parental control. When the switch goes to the right ( the function is enabled.
  • Page 269: Define A Schedule

    Chapter 18 Parental Control Figure 180 Parental Control: Scheduled Profile The following table describes the fields in this screen. Table 98 Parental Control: Add more Profile LABEL DESCRIPTION Parental Control Click this switch to enable or disable parental control. When the switch goes to the right ( the function is enabled.
  • Page 270: Parental Control Settings (For Ax7501/Px7501 And Ex5501)

    Chapter 18 Parental Control Figure 181 Parental Control > Add more Profile: Schedule The following table describes the fields in this screen. Table 99 Parental Control: Add more Profile LABEL DESCRIPTION Profile Name Enter a descriptive name for the profile. Internet Click this switch to enable or disable Internet access.
  • Page 271 Chapter 18 Parental Control Click Security > Parental Control to open the following screen. Figure 182 Security > Parental Control The following table describes the fields in this screen. Table 100 Security > Parental Control LABEL DESCRIPTION General Parental Control Select Enable to activate parental control on the Zyxel Device.
  • Page 272: Add Or Edit A Parental Control Profile

    Chapter 18 Parental Control 18.3.1 Add or Edit a Parental Control Profile Click Add new PCP in the Parental Control screen to add a new rule or click the Edit icon next to an existing rule to edit it. Use this screen to configure a restricted access schedule and/or URL filtering settings to block the users on your network from accessing certain web sites.
  • Page 273 Chapter 18 Parental Control Figure 184 Security > Parental Control > Add or Edit PCP (Network Service & Site/URL Keyword) The following table describes the fields in this screen. Table 101 Security > Parental Control >Add or Edit PCP LABEL DESCRIPTION General Active...
  • Page 274 Chapter 18 Parental Control Table 101 Security > Parental Control >Add or Edit PCP (continued) LABEL DESCRIPTION Service Name This shows the name of the rule. Protocol:Port This shows the protocol and the port of the rule. Modify Click the Edit icon to go to the screen where you can edit the rule. Click the Delete icon to delete an existing rule.
  • Page 275 Chapter 18 Parental Control Figure 186 Security > Parental Control > Add or Edit PCP > Add New Service The following table describes the fields in this screen. Table 102 Security > Parental Control > Add or Edit PCP > Add New Service LABEL DESCRIPTION Add New...
  • Page 276 Chapter 18 Parental Control The following table describes the fields in this screen. Table 103 Security > Parental Control > Add or Edit PCP > Add Keyword LABEL DESCRIPTION Site/URL Enter a keyword and click OK to have the Zyxel Device block access to the website URLs that Keyword contain the keyword.
  • Page 277: Scheduler Rule

    H A P T E R Scheduler Rule 19.1 Scheduler Rule Overview A Scheduler Rule allows you to define time periods and days during which the Zyxel Device allows certain actions. 19.2 Scheduler Rule Settings Use this screen to view, add, or edit time schedule rules. A scheduler rule is a reusable object that is applied to other features, such as Firewall Access Control.
  • Page 278 Chapter 19 Scheduler Rule Figure 189 Scheduler Rule: Add or Edit The following table describes the fields in this screen. Table 105 Scheduler Rule: Add or Edit LABEL DESCRIPTION Rule Name Enter a name (up to 31 printable English keyboard characters, not including spaces) for this schedule.
  • Page 279: Certificates

    H A P T E R Certificates 20.1 Certificates Overview The Zyxel Device can use certificates (also called digital IDs) to authenticate users. Certificates are based on public-private key pairs. A certificate contains the certificate owner’s identity and public key. Certificates provide a way to exchange public keys for use in authentication.
  • Page 280: Create Certificate Request

    Chapter 20 Certificates Figure 190 Security > Certificates > Local Certificates The following table describes the labels in this screen. Table 106 Security > Certificates > Local Certificates LABEL DESCRIPTION Replace Private Key/Certificate file in PEM format Private Key is Select the check box and enter the private key into the text box to store it on the Zyxel Device.
  • Page 281: View Certificate Request

    Chapter 20 Certificates name, and the default US two-letter country code (The US country code is by default and not changeable when sold in the U.S.) for the certificate. Figure 191 Create Certificate Request The following table describes the labels in this screen. Table 107 Create Certificate Request LABEL DESCRIPTION...
  • Page 282 Chapter 20 Certificates Figure 192 Certificate Request: View The following table describes the fields in this screen. Table 108 Certificate Request: View LABEL DESCRIPTION Name This field displays the identifying name of this certificate. Type This field displays general information about the certificate. ca means that a Certification Authority signed the certificate.
  • Page 283: Trusted Ca

    Chapter 20 Certificates Table 108 Certificate Request: View (continued) LABEL DESCRIPTION Signing Request This field displays the CSR (Certificate Signing Request) information of this certificate. The CSR will be provided to a certificate authority, and it includes information about the public key, organization name, domain name, location, and country of this certificate.
  • Page 284: Import Trusted Ca Certificate

    Chapter 20 Certificates 20.5 Import Trusted CA Certificate Click Import Certificate in the Trusted CA screen to open the Import Certificate screen. The Zyxel Device trusts any valid certificate signed by any of the imported trusted CA certificates. Certificates should be in one of the following formats: Binary X.509, PEM (base-64) encoded, Binary PKCS#7, or PEM (base-64) encoded PKCS#7.
  • Page 285: Certificates Technical Reference

    Chapter 20 Certificates Figure 195 Trusted CA: View The following table describes the labels in this screen. Table 111 Trusted CA: View LABEL DESCRIPTION Name This field displays the identifying name of this certificate. This read-only text box displays the certificate or certification request in Privacy Enhanced Mail (PEM) format.
  • Page 286: Verify A Certificate

    Chapter 20 Certificates Public and Private Keys When using public-key cryptology for authentication, each host has two keys. One key is public and can be made openly available; the other key is private and must be kept secure. Public-key encryption in general works as follows.
  • Page 287 Chapter 20 Certificates Make sure that the certificate has a “.cer” or “.crt” file name extension. Figure 196 Certificates on Your Computer Double-click the certificate’s icon to open the Certificate window. Click the Details tab and scroll down to the Thumbprint Algorithm and Thumbprint fields. Figure 197 Certificate Details Use a secure method to verify that the certificate owner has the same information in the Thumbprint Algorithm and Thumbprint fields.
  • Page 288: Voip

    H A P T E R VoIP 21.1 Overview You can make calls over the Internet using VoIP technology. For this, you first need to set up a SIP account with a SIP service provider. Use this chapter to: • Connect an analog phone to the Zyxel Device. •...
  • Page 289: Before You Begin

    Chapter 21 VoIP SIP stands for Session Initiation Protocol. SIP is a signaling standard that lets one network device (like a computer or the Zyxel Device) send messages to another. In VoIP, these messages are about phone calls over the network. For example, when you dial a number on your Zyxel Device, it sends a SIP message over the network asking the other device (the number you dialed) to take part in the call.
  • Page 290: Add Or Edit Sip Account

    Chapter 21 VoIP Figure 198 VoIP > SIP > SIP Account. The following table describes the labels in this screen. Table 112 VoIP > SIP > SIP Account LABEL DESCRIPTION Add New Account Click this to configure a SIP account. This is the index number of the entry.
  • Page 291 Chapter 21 VoIP Figure 199 VoIP > SIP > SIP Account > Add New Account or Edit AX/DX/EX/PX Series User’s Guide...
  • Page 292 Chapter 21 VoIP The following table describes the labels in this screen. Table 113 Voice > SIP > SIP Account > SIP Account Entry Edit LABEL DESCRIPTION SIP Account Selection SIP Account Selection This field displays ChangeMe if you are creating a new SIP account or the SIP account you are modifying.
  • Page 293 Chapter 21 VoIP Table 113 Voice > SIP > SIP Account > SIP Account Entry Edit (continued) LABEL DESCRIPTION Listening Volume Control Select the loudness that the Zyxel Device uses for speech that it receives from the peer device. Choices are Minimum, Middle, and Maximum. Enable G.
  • Page 294: Sip Service Provider

    Chapter 21 VoIP Table 113 Voice > SIP > SIP Account > SIP Account Entry Edit (continued) LABEL DESCRIPTION Hot Line / Warm Line Enter the number of the hot line or warm line that you want the Zyxel Device to dial. Number Warm Line Timer Enter a number of seconds that the Zyxel Device waits before dialing the warm line...
  • Page 295: Provider Entry Add Or Edit

    Chapter 21 VoIP 21.3.3 Provider Entry Add or Edit Use this screen to configure the SIP server information, the numbers for certain phone functions and dialing plan for a SIP service provider. Click VoIP > SIP > SIP Service Provider and then click the Modify icon next to a profile of SIP service provider settings to open the following screen.
  • Page 296 Chapter 21 VoIP Figure 201 VoIP > SIP > SIP Service Provider: Add New Provider or Edit AX/DX/EX/PX Series User’s Guide...
  • Page 297 Chapter 21 VoIP The following table describes the labels in this screen. Table 115 Voice > SIP > SIP Service Provider > Add New Provider or Edit LABEL DESCRIPTION SIP Service Provider Selection Service Provider Selection This field displays ADD_NEW if you are creating a new SIP service provider profile or the SIP service provider name you are modifying.
  • Page 298 Chapter 21 VoIP Table 115 Voice > SIP > SIP Service Provider > Add New Provider or Edit (continued) LABEL DESCRIPTION Bound Interface Name If you select AnyWAN, the Zyxel Device automatically activates the VoIP service when any WAN connection is up. If you select MultiWAN, you also need to select the pre-configured WAN connections.
  • Page 299: Phone

    Chapter 21 VoIP Table 115 Voice > SIP > SIP Service Provider > Add New Provider or Edit (continued) LABEL DESCRIPTION Min-SE Enter the minimum number of seconds the Zyxel Device lets a SIP session remain idle (without traffic) before it automatically disconnects the session. When two SIP devices start a SIP session, they must agree on an expiration time for idle sessions.
  • Page 300: Phone Device Edit

    Chapter 21 VoIP Table 116 VoIP > Phone > Phone Device LABEL DESCRIPTION Incoming SIP This field displays the SIP address that you use to receive calls on this phone port. Number Outgoing SIP This field displays the SIP address that you use to make calls on this phone port. Number Modify Click the Edit icon to configure the SIP account.
  • Page 301: Phone Region

    Chapter 21 VoIP Table 117 VoIP > Phone > Phone Device > Edit LABEL DESCRIPTION Immediate Dial Select this if you want to use the pound key (#) to tell the Zyxel Device to make the Enable phone call immediately, instead of waiting for the number of second you selected in the Dialog Interval Selection field of the VoIP >...
  • Page 302: Call Rule

    Chapter 21 VoIP 21.6 Call Rule Use this screen to add, edit, or remove speed-dial numbers for outgoing calls. Speed dial provides shortcuts for dialing frequently-used (VoIP) phone numbers. You also have to create speed-dial entries if you want to call SIP numbers that contain letters. Once you have configured a speed dial rule, you can use a shortcut (the speed dial number, #01 for example) on your phone's keypad to call the phone number.
  • Page 303: Technical Reference

    Chapter 21 VoIP Figure 206 VoIP > Call History Each field is described in the following table. Table 120 VoIP > Call History > Call History LABEL DESCRIPTION Clear Click this button to remove all entries from the call history list. Refresh Click this button to renew the call history list.
  • Page 304 Chapter 21 VoIP VoIP VoIP is the sending of voice signals over Internet Protocol. This allows you to make phone calls and send faxes over the Internet at a fraction of the cost of using the traditional circuit-switched telephone network. You can also use servers to run telephone service applications like PBX services and voice mail. Internet Telephony Service Provider (ITSP) companies provide VoIP service.
  • Page 305 Chapter 21 VoIP A SIP registration has a limited lifespan. The User Agent Client must renew its registration within this lifespan. If it does not do so, the registration data will be deleted from the SIP registrar's database and the connection broken. The Zyxel Device attempts to register all enabled subscriber ports when it is switched on.
  • Page 306 Chapter 21 VoIP Figure 208 SIP Proxy Server SIP Redirect Server A SIP redirect server accepts SIP requests, translates the destination address to an IP address and sends the translated IP address back to the device that sent the request. Then the client device that originally sent the request can send requests to the IP address that it received back from the redirect server.
  • Page 307 Chapter 21 VoIP When you make a VoIP call using SIP, the RTP (Real time Transport Protocol) is used to handle voice data transfer. See RFC 1889 for details on RTP. Pulse Code Modulation Pulse Code Modulation (PCM) measures analog signal amplitudes at regular time intervals and converts them into bits.
  • Page 308 Chapter 21 VoIP The following figure shows the SIP and session traffic flow between the user agents (UA 1 and UA 2) and the proxy servers (this example shows two proxy servers, PROXY 1 and PROXY 2). Figure 210 SIP Call Through Proxy Servers The following table shows the SIP call progression.
  • Page 309 Chapter 21 VoIP User Agent 2 sends a response back to Proxy 2 indicating that the phone is ringing. The response is relayed back to User Agent 1 through Proxy 1. User Agent 2 sends an OK response to Proxy 2 after the call is answered. This is also relayed back to User Agent 1 through Proxy 1.
  • Page 310 Chapter 21 VoIP Custom Tones (IVR) IVR (Interactive Voice Response) is a feature that allows you to use your telephone to interact with the Zyxel Device. The Zyxel Device allows you to record custom tones for the Early Media and Music On Hold functions.
  • Page 311: Quality Of Service (Qos)

    Chapter 21 VoIP You can continue to add, listen to, or delete tones, or you can hang up the receiver when you are done. 21.8.1 Quality of Service (QoS) Quality of Service (QoS) refers to both a network's ability to deliver data with minimum delay, and the networking methods used to provide bandwidth for real-time multimedia applications.
  • Page 312 Chapter 21 VoIP • Call Return • Call Hold • Call Waiting • Making a Second Call • Call Transfer • Call Forwarding • Three-Way Conference • Internal Calls • Call Park and Pickup • Do not Disturb • IVR •...
  • Page 313 Chapter 21 VoIP Table 124 European Flash Key Commands COMMAND SUB-COMMAND DESCRIPTION Flash 1. Switch back and forth between two calls. 2. Put a current call on hold to answer an incoming call. 3. Separate the current three-way conference call into two individual calls (one is on-line, the other is on hold).
  • Page 314 Chapter 21 VoIP European Three-Way Conference Use the following steps to make three-way conference calls. When you are on the phone talking to someone, press the flash key to put the caller on hold and get a dial tone. Dial a phone number directly to make another call. When the second call is answered, press the flash key and press “3”...
  • Page 315 Chapter 21 VoIP Press the flash key to put the caller on hold. When you hear the dial tone, dial “*98#” followed by the number to which you want to transfer the call. After you hear the ring signal or the second party answers it, hang up the phone. USA Three-Way Conference Use the following steps to make three-way conference calls.
  • Page 316: Log

    H A P T E R 22.1 Log Overview These screens allow you to determine the categories of events and/or alerts that the Zyxel Device logs and then display these logs or have the Zyxel Device send them to an administrator (through email) or to a syslog server.
  • Page 317: System Log

    Chapter 22 Log Table 127 Syslog Severity Levels (continued) CODE SEVERITY Notice: There is a normal but significant condition on the system. Informational: The syslog contains an informational message. Debugging: The message is intended for debug-level purposes. 22.2 System Log Use the System Log screen to see the system logs.
  • Page 318 Chapter 22 Log Figure 213 System Monitor > Log > Security Log The following table describes the fields in this screen. Table 129 System Monitor > Log > Security Log LABEL DESCRIPTION Level Select a severity level from the drop-down list box. This filters search results according to the severity level you have selected.
  • Page 319: Traffic Status

    H A P T E R Traffic Status 23.1 Traffic Status Overview Use the Traffic Status screens to look at the network traffic status and statistics of the WAN/LAN interfaces and NAT. 23.1.1 What You Can Do in this Chapter •...
  • Page 320: Lan Status

    Chapter 23 Traffic Status The following table describes the fields in this screen. Table 130 System Monitor > Traffic Status > WAN LABEL DESCRIPTION Refresh Interval Select how often you want the Zyxel Device to update this screen. Connected This shows the name of the WAN interface that is currently connected. Interface Packets Sent Data...
  • Page 321: Nat Status

    Chapter 23 Traffic Status Figure 215 System Monitor > Traffic Status > LAN The following table describes the fields in this screen. Table 131 System Monitor > Traffic Status > LAN LABEL DESCRIPTION Refresh Interval Select how often you want the Zyxel Device to update this screen. Interface This shows the LAN or WLAN interface.
  • Page 322 Chapter 23 Traffic Status Figure 216 System Monitor > Traffic Status > NAT The following table describes the fields in this screen. Table 132 System Monitor > Traffic Status > NAT LABEL DESCRIPTION Refresh Interval Select how often you want the Zyxel Device to update this screen. Device Name This displays the name of the connected host.
  • Page 323: Voip Status

    H A P T E R VoIP Status 24.1 VoIP Status Screen Click System Monitor > VoIP Status to open the following screen. You can view the Voice over IP (VoIP) registration, current call status and phone numbers in this screen. Figure 217 System Monitor >...
  • Page 324 Chapter 24 VoIP Status Table 133 System Monitor > VoIP Status (continued) LABEL DESCRIPTION Registration Time This field displays the last time the Device successfully registered the SIP account. The field is blank if the Device has never successfully registered this account. This field displays the account number and service domain of the SIP account.
  • Page 325 Chapter 24 VoIP Status Table 133 System Monitor > VoIP Status (continued) LABEL DESCRIPTION To Phone Port Type This field displays the phone ports type used to receive the current VoIP call. Three possible type Type values will be displayed here: SIP – For the current call which is categorized as Outgoing Call in the Call Type field, this field will show the type SIP.
  • Page 326: Arp Table

    H A P T E R ARP Table 25.1 ARP Table Overview Address Resolution Protocol (ARP) is a protocol for mapping an Internet Protocol (IP) address to a physical machine address, known as a Media Access Control (MAC) address, on the local area network.
  • Page 327 Chapter 25 ARP Table Figure 218 System Monitor > ARP Table The following table describes the labels in this screen. Table 134 System Monitor > ARP Table LABEL DESCRIPTION This is the ARP table entry number. IPv4 / IPv6 This is the learned IPv4 or IPv6 IP address of a device connected to a port. Address MAC Address This is the MAC address of the device with the listed IP address.
  • Page 328: Routing Table

    H A P T E R Routing Table 26.1 Routing Table Overview Routing is based on the destination address only and the Zyxel Device takes the shortest path to forward a packet. 26.2 Routing Table The table below shows IPv4 and IPv6 routing information. The IPv4 subnet mask is ‘255.255.255.255’ for a host destination and ‘0.0.0.0’...
  • Page 329 Chapter 26 Routing Table Figure 219 System Monitor > Routing Table The following table describes the labels in this screen. Table 135 System Monitor > Routing Table LABEL DESCRIPTION IPv4 / IPv6 Routing Table Destination This indicates the destination IPv4 address or IPv6 address and prefix of this route. Gateway This indicates the IPv4 address or IPv6 address of the gateway that helps forward this route’s traffic.
  • Page 330 Chapter 26 Routing Table Table 135 System Monitor > Routing Table (continued) LABEL DESCRIPTION Flag This indicates the route status. U–Up: The route is up. !–Reject: The route is blocked and will force a route lookup to fail. G–Gateway: The route uses a gateway to forward traffic. H–Host: The target of the route is a host.
  • Page 331: Xdsl Statistics

    H A P T E R xDSL Statistics 27.1 Overview You can view information about DSL statistics, such as port details, in this screen. 27.2 xDSL Statistics Use this screen to view detailed DSL statistics. Click System Monitor > xDSL Statistics to open the following screen.
  • Page 332 Chapter 27 xDSL Statistics The following table describes the labels in this screen. Table 136 Status > xDSL Statistics LABEL DESCRIPTION Type Select the type of DSL line for refreshing statistics. Refresh Interval Select the time interval for refreshing statistics. Line Select which DSL line’s statistics you want to display.
  • Page 333 Chapter 27 xDSL Statistics Table 136 Status > xDSL Statistics (continued) LABEL DESCRIPTION This is the number of Errored Seconds meaning the number of seconds containing at least one error block or at least one defect. This is the number of Severely Errored Seconds meaning the number of seconds containing 30% or more error blocks or at least one defect.
  • Page 334: Wlan Station Status

    H A P T E R WLAN Station Status 28.1 WLAN Station Status Overview Click System Monitor > WLAN Station Status to open the following screen. Use this screen to view information and status of the wireless stations (wireless clients) that are currently associated with the Zyxel Device.
  • Page 335 Chapter 28 WLAN Station Status Table 137 System Monitor > WLAN Station Status (continued) LABEL DESCRIPTION The Signal-to-Noise Ratio (SNR) is the ratio between the received signal power and the received noise power. The greater the number, the better the quality of WiFi. The normal range is 15 to 40.
  • Page 336: Cellular Statistics

    H A P T E R Cellular Statistics 29.1 Cellular Statistics Overview Use the Cellular Statistics screens to look at cellular Internet connection status. By default, a cellular WAN connection is used as a backup for the wired DSL or Ethernet WAN connections. 29.2 Cellular Statistics Settings To open this screen, click System Monitor >...
  • Page 337 Chapter 29 Cellular Statistics The following table describes the labels in this screen. Table 138 System Monitor > Cellular Statistics LABEL DESCRIPTION Refresh Interval Select how often you want the Zyxel Device to update this screen. Select None to stop refreshing.
  • Page 338: System

    H A P T E R System 30.1 System Overview Use this screen to name your Zyxel Device (Host) and give it an associated domain name for identification purposes. 30.2 System Click Maintenance > System to open the following screen. Assign a unique name to the Zyxel Device so it can be easily recognized on your network.
  • Page 339: User Account

    H A P T E R User Account 31.1 User Account Overview In the User Account screen, you can view the settings of the “admin” and other user accounts that you use to log into the Zyxel Device to manage it. 31.2 User Account Click Maintenance >...
  • Page 340: User Account Add Or Edit

    Chapter 31 User Account Table 140 Maintenance > User Account (continued) LABEL DESCRIPTION Group This field displays whether this user has Administrator or User privileges. Remote This field displays whether this user can access the Zyxel Device with HTTP, Telnet or SSH through Privilege the WAN, LAN or LAN/WAN.
  • Page 341 Chapter 31 User Account Table 141 Maintenance > User Account > Add or Edit (continued) LABEL DESCRIPTION Password Type your new system password (up to 256 characters). Note that as you type a password, the screen displays a (*) for each character you type. After you change the password, use the new password to access the Zyxel Device.
  • Page 342: Remote Management

    H A P T E R Remote Management 32.1 Overview Remote management controls through which interfaces, which web services (such as HTTP, HTTPS, FTP, Telnet, SSH and Ping) can access the Zyxel Device. Note: The Zyxel Device is managed using the Web Configurator. 32.1.1 What You Can Do in this Chapter •...
  • Page 343 Chapter 32 Remote Management Figure 226 Maintenance > Remote Management > MGMT Services The following table describes the fields in this screen. Table 142 Maintenance > Remote Management LABEL DESCRIPTION WAN Interface Select Any_WAN to have the Zyxel Device automatically activate the remote management used for services service when any WAN connection is up.
  • Page 344: Trust Domain

    Chapter 32 Remote Management 32.3 Trust Domain Use this screen to view a list of public IP addresses which are allowed to access the Zyxel Device through the services configured in the Maintenance > Remote Management > MGMT Services screen. Click Maintenance >...
  • Page 345 Chapter 32 Remote Management The following table describes the fields in this screen. Table 144 Maintenance > Remote Management > Trust Domain > Add Trust Domain LABEL DESCRIPTION IP Address Enter a public IPv4/IPv6 IP address which is allowed to access the service on the Zyxel Device from the WAN.
  • Page 346: Snmp

    H A P T E R SNMP 33.1 Overview This chapter explains how to configure the SNMP settings on the Zyxel Device. Simple Network Management Protocol is a protocol used for exchanging management information between network devices. Your Zyxel Device supports SNMP agent functionality, which allows a manager station to manage and monitor the Zyxel Device through the network.
  • Page 347: Snmp Settings

    Chapter 33 SNMP • Get – Allows the manager to retrieve an object variable from the agent. • GetNext – Allows the manager to retrieve the next object variable from a table or list within an agent. In SNMPv1, when a manager wants to retrieve all elements of a table from an agent, it initiates a Get operation, followed by a series of GetNext operations.
  • Page 348 Chapter 33 SNMP Table 145 Maintenance > SNMP (continued) LABEL DESCRIPTION Trap Community Enter the Trap Community, which is the password sent with each trap to the SNMP manager. The default is public and allows all requests. System Name Enter the SNMP system name. System Location Enter the SNMP system location.
  • Page 349: Time Settings

    H A P T E R Time Settings 34.1 Time Settings Overview This chapter shows you how to configure system related settings, such as system date and time. 34.2 Time For effective scheduling and logging, the Zyxel Device system time must be accurate. Use this screen to configure the Zyxel Device’s time based on your local time zone.
  • Page 350 Chapter 34 Time Settings Figure 231 Maintenance > Time The following table describes the fields in this screen. Table 146 Maintenance > Time LABEL DESCRIPTION Current Date/Time Current Time This displays the time of your Zyxel Device. Each time you reload this screen, the Zyxel Device synchronizes the time with the time server. Current Date This displays the date of your Zyxel Device.
  • Page 351 Chapter 34 Time Settings Table 146 Maintenance > Time (continued) LABEL DESCRIPTION First – Fifth Time Select an NTP time server from the drop-down list box. Server Address Otherwise, select Other and enter the IP address or URL (up to 29 extended ASCII characters in length) of your time server.
  • Page 352: Email Notification

    H A P T E R Email Notification 35.1 Email Notification Overview A mail server is an application or a computer that can receive, forward and deliver email messages. To have the Zyxel Device send reports, logs or notifications through email, you must specify an email server and the email addresses of the sender and receiver.
  • Page 353: Email Notification Edit

    Chapter 35 Email Notification Table 147 Maintenance > E-mail Notification (continued) LABEL DESCRIPTION E-mail Address This field displays the email address that you want to be in the from or sender line of the email that the Zyxel Device sends. Remove Click this button to delete the selected entries.
  • Page 354 Chapter 35 Email Notification Table 148 E-mail Notification > Add (continued) LABEL DESCRIPTION Cancel Click this button to begin configuring this screen afresh. Click this button to save your changes and return to the previous screen. AX/DX/EX/PX Series User’s Guide...
  • Page 355: Log Setting

    H A P T E R Log Setting 36.1 Log Setting Overview You can configure where the Zyxel Device sends logs and which type of logs the Zyxel Device records in the Logs Setting screen. 36.2 Log Settings Use this screen to configure where the Zyxel Device sends logs, and which type of logs the Zyxel Device records.
  • Page 356 Chapter 36 Log Setting Figure 234 Maintenance > Log Setting AX/DX/EX/PX Series User’s Guide...
  • Page 357: Example Email Log

    Chapter 36 Log Setting The following table describes the fields in this screen. Table 149 Maintenance > Log Setting LABEL DESCRIPTION Syslog Settings Syslog Logging Click the switch (it will turn blue) to enable syslog logging. Mode Select Remote to have the Zyxel Device send it to an external syslog server. Select Local File to have the Zyxel Device save the log file on the Zyxel Device itself.
  • Page 358 Chapter 36 Log Setting • ‘End of Log’ message shows that a complete log has been sent. Figure 235 Email Log Example Subject: Firewall Alert From Date: Fri, 07 Apr 2000 10:05:42 From: user@zyxel.com user@zyxel.com 1|Apr 7 00 |From:192.168.1.1 To:192.168.1.255 |default policy |forward | 09:54:03 |UDP...
  • Page 359: Firmware Upgrade

    H A P T E R Firmware Upgrade 37.1 Overview This chapter explains how to upload new firmware to your Zyxel Device. You can download new firmware releases from your nearest Zyxel FTP site (or www.zyxel.com) to use to upgrade your Zyxel Device’s performance.
  • Page 360 Chapter 37 Firmware Upgrade The following table describes the labels in this screen. Table 150 Maintenance > Firmware Upgrade LABEL DESCRIPTION Upgrade Firmware Restore Click to enable this option that restores the factory-default to the Zyxel Device after upgrading Default the firmware.
  • Page 361: Backup/Restore

    H A P T E R Backup/Restore 38.1 Backup/Restore Overview Information related to factory default settings and backup configuration are shown in this screen. You can also use this to restore previous device configurations. 38.2 Backup/Restore Click Maintenance > Backup/Restore. Information related to factory defaults, backup configuration, and restoring configuration appears in this screen, as shown next.
  • Page 362 Chapter 38 Backup/Restore Restore Configuration Restore Configuration allows you to upload a new or previously saved configuration file from your computer to your Zyxel Device. Table 151 Restore Configuration LABEL DESCRIPTION File Path Type in the location of the file you want to upload in this field or click Choose File / Browse to find it. Choose File Click this to find the file you want to upload.
  • Page 363: Reboot

    Chapter 38 Backup/Restore 38.3 Reboot System Reboot allows you to reboot the Zyxel Device remotely without turning the power off. You may need to do this if the Zyxel Device hangs, for example. This does not affect the Zyxel Device's configuration.
  • Page 364: Diagnostic

    H A P T E R Diagnostic 39.1 Diagnostic Overview The Diagnostic screens display information to help you identify problems with the Zyxel Device. The route between an Ethernet switch and one of its Customer-Premises Equipment (CPE) may go through switches owned by independent organizations. A connectivity fault point generally takes time to discover and impacts subscriber’s network access.
  • Page 365: Ping/Traceroute/Nslookup Test

    Chapter 39 Diagnostic 39.3 Ping/TraceRoute/Nslookup Test Use this screen to ping, traceroute, or nslookup for troubleshooting. Ping and traceroute are used to test whether a particular host is reachable. After entering an IP address and clicking one of the buttons to start a test, the results will be shown in the Ping/Traceroute Test area.
  • Page 366: Ag (Cfm)

    Chapter 39 Diagnostic 39.4 802.1ag (CFM) Click Maintenance > Diagnostic > 802.1ag to open the following screen. Use this screen to configure and perform Connectivity Fault Management (CFM) actions as defined by the IEEE 802.1ag standard. CFM protocols include Continuity Check Protocol (CCP), Link Trace (LT), and Loopback (LB). Figure 243 Maintenance >...
  • Page 367: Ah (Oam)

    Chapter 39 Diagnostic Table 153 Maintenance > Diagnostic > 802.1ag (continued) LABEL DESCRIPTION Maintenance Select a level (0 – 7) under which you want to create an MA. Domain (MD) Level MD Name Enter a descriptive name for the MD (Maintenance Domain). This field only appears if the Y.1731 field is disabled.
  • Page 368: Oam Ping

    Chapter 39 Diagnostic Figure 244 Maintenance > Diagnostic > 802.3ah The following table describes the labels in this screen. Table 154 Maintenance > Diagnostics > 802.3ah LABEL DESCRIPTION IEEE 802.3ah Ethernet OAM Click this switch to enable or disable the Ethernet OAM on the specified interface. When the switch goes to the right , the function is enabled.
  • Page 369 Chapter 39 Diagnostic B3 sends an OAM F4 or F5 packet to the DSLAM or ATM switch and then returns it to the DX5301-B2/B3. The test result then displays in the text box. ATM sets up virtual circuits over which end systems communicate. The terminology for virtual circuits is as follows: •...
  • Page 370 Chapter 39 Diagnostic Figure 246 Maintenance > Diagnostic > OAM Ping The following table describes the labels in this screen. Table 155 Maintenance > Diagnostics > 802.3ah LABEL DESCRIPTION Select a PVC on which you want to perform the loopback test. F4 segment Press this to perform an OAM F4 segment loopback test.
  • Page 371: Troubleshooting

    H A P T E R Troubleshooting 40.1 Overview This chapter offers some suggestions to solve problems you might encounter. The potential problems are divided into the following categories. • Power and Hardware Problems • Device Access Problems • Internet Problems •...
  • Page 372: Device Access Problems

    Chapter 40 Troubleshooting If the problem continues, contact the vendor. 40.3 Device Access Problems I do not know the IP address of the Zyxel Device. The default IP address is 192.168.1.1. If you changed the IP address, you might be able to find the IP address of the Zyxel Device by looking up the IP address of your computer’s default gateway.
  • Page 373 Chapter 40 Troubleshooting If the problem continues, contact the network administrator or vendor, or try one of the advanced suggestions. Advanced Suggestions • Make sure you have logged out of any earlier management sessions using the same user account even if they were through a different interface or using a different browser. •...
  • Page 374 Chapter 40 Troubleshooting Apply for a user account. This tutorial uses UserName1 and 12345 as the username and password. Log into www.dyndns.org using your account. Add a new DDNS host name. This tutorial uses the following settings as an example. •...
  • Page 375: Internet Problems

    Chapter 40 Troubleshooting 40.4 Internet Problems I cannot access the Internet. Check the hardware connections and make sure the LEDs are behaving as expected. See the Quick Start Guide. Make sure you entered your ISP account information correctly on the Network Setting > Broadband screen.
  • Page 376: Usb Problems

    Chapter 40 Troubleshooting The following factors may cause interference: • Obstacles: walls, ceilings, furniture, and so on. • Building Materials: metal doors, aluminum studs. • Electrical devices: microwaves, monitors, electric motors, cordless phones, and other wireless devices. To optimize the speed and quality of your wireless connection, you can: •...
  • Page 377 Chapter 40 Troubleshooting Disconnect the Ethernet cable from the Zyxel Device’s Ethernet port or from your computer. Reconnect the Ethernet cable. Restart your computer. AX/DX/EX/PX Series User’s Guide...
  • Page 378: Appendices

    Appendices Appendices contain general information. Some information may not apply to your Zyxel Device.
  • Page 379: Appendix A Customer Support

    • Brief description of the problem and the steps you took to solve it. Corporate Headquarters (Worldwide) Taiwan • Zyxel Communications Corporation • http://www.zyxel.com Asia China • Zyxel Communications (Shanghai) Corp. Zyxel Communications (Beijing) Corp. Zyxel Communications (Tianjin) Corp. • https://www.zyxel.com/cn/zh/ India • Zyxel Technology India Pvt Ltd. • https://www.zyxel.com/in/en/ Kazakhstan •...
  • Page 380 • Zyxel Singapore Pte Ltd. • http://www.zyxel.com.sg Taiwan • Zyxel Communications Corporation • https://www.zyxel.com/tw/zh/ Thailand • Zyxel Thailand Co., Ltd. • https://www.zyxel.com/th/th/ Vietnam • Zyxel Communications Corporation-Vietnam Office • https://www.zyxel.com/vn/vi Europe Belarus • Zyxel BY • https://www.zyxel.by Belgium • Zyxel Communications B.V. • https://www.zyxel.com/be/nl/...
  • Page 381 Appendix A Customer Support • https://www.zyxel.com/be/fr/ Bulgaria • Zyxel България • https://www.zyxel.com/bg/bg/ Czech Republic • Zyxel Communications Czech s.r.o • https://www.zyxel.com/cz/cs/ Denmark • Zyxel Communications A/S • https://www.zyxel.com/dk/da/ Estonia • Zyxel Estonia • https://www.zyxel.com/ee/et/ Finland • Zyxel Communications • https://www.zyxel.com/fi/fi/ France •...
  • Page 382 • Zyxel Communications Poland • https://www.zyxel.com/pl/pl/ Romania • Zyxel Romania • https://www.zyxel.com/ro/ro Russia • Zyxel Russia • https://www.zyxel.com/ru/ru/ Slovakia • Zyxel Communications Czech s.r.o. organizacna zlozka • https://www.zyxel.com/sk/sk/ Spain • Zyxel Communications ES Ltd. • https://www.zyxel.com/es/es/ Sweden • Zyxel Communications • https://www.zyxel.com/se/sv/ Switzerland •...
  • Page 383 Appendix A Customer Support Turkey • Zyxel Turkey A.S. • https://www.zyxel.com/tr/tr/ • Zyxel Communications UK Ltd. • https://www.zyxel.com/uk/en/ Ukraine • Zyxel Ukraine • http://www.ua.zyxel.com South America Argentina • Zyxel Communications Corporation • https://www.zyxel.com/co/es/ Brazil • Zyxel Communications Brasil Ltda. • https://www.zyxel.com/br/pt/ Colombia •...
  • Page 384 Appendix A Customer Support Middle East • Zyxel Communications Corporation • https://www.zyxel.com/me/en/ North America • Zyxel Communications, Inc. – North America Headquarters • https://www.zyxel.com/us/en/ Oceania Australia • Zyxel Communications Corporation • https://www.zyxel.com/au/en/ Africa South Africa • Nology (Pty) Ltd. • https://www.zyxel.com/za/en/...
  • Page 385: Appendix B Ipv6

    P P E N D I X IPv6 Overview IPv6 (Internet Protocol version 6), is designed to enhance IP address size and features. The increase in IPv6 address size to 128 bits (from the 32-bit IPv4 address) allows up to 3.4 x 10 IP addresses.
  • Page 386 Appendix B IPv6 Unspecified Address An unspecified address (0:0:0:0:0:0:0:0 or ::) is used as the source address when a device does not have its own address. It is similar to “0.0.0.0” in IPv4. Loopback Address A loopback address (0:0:0:0:0:0:0:1 or ::1) allows a host to send packets to itself. It is similar to “127.0.0.1” in IPv4.
  • Page 387 Appendix B IPv6 Subnet Masking Both an IPv6 address and IPv6 subnet mask compose of 128-bit binary digits, which are divided into eight 16-bit blocks and written in hexadecimal notation. Hexadecimal uses four bits for each character (1 – 10, A – F). Each block’s 16 bits are then represented by four hexadecimal characters. For example, FFFF:FFFF:FFFF:FFFF:FC00:0000:0000:0000.
  • Page 388 Appendix B IPv6 DHCP Relay Agent A DHCP relay agent is on the same network as the DHCP clients and helps forward messages between the DHCP server and clients. When a client cannot use its link-local address and a well-known multicast address to locate a DHCP server on its network, it then needs a DHCP relay agent to send a message to a DHCP server that is not attached to the same network.
  • Page 389 Appendix B IPv6 receives a neighbor advertisement in response, it stores the neighbor’s link-layer address in the neighbor cache. When the Zyxel Device uses a router solicitation message to query for a router and receives a router advertisement message, it adds the router’s information to the neighbor cache, prefix list and destination cache.
  • Page 390 Appendix B IPv6 Click Close to exit the Local Area Connection Status screen. Select Start > All Programs > Accessories > Command Prompt. Use the ipconfig command to check your dynamic IPv6 address. This example shows a global address (2001:b021:2d::1000) obtained from a DHCP server. C:\>ipconfig Windows IP Configuration Ethernet adapter Local Area Connection:...
  • Page 391: Appendix C Legal Information

    The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of Zyxel Communications Corporation. Published by Zyxel Communications Corporation. All rights reserved.
  • Page 392 Appendix C Legal Information Български С настоящото Zyxel декларира, че това оборудване е в съответствие със съществените изисквания и другите (Bulgarian) приложими разпоредбите на Директива 2014/53/ЕC. National Restrictions • The Belgian Institute for Postal Services and Telecommunications (BIPT) must be notified of any outdoor wireless link having a range exceeding 300 meters.
  • Page 393 Appendix C Legal Information Română Prin prezenta, Zyxel declară că acest echipament este în conformitate cu cerinţele esenţiale şi alte prevederi relevante ale (Romanian) Directivei 2014/53/UE. Slovenčina Zyxel týmto vyhlasuje, že zariadenia spĺňa základné požiadavky a všetky príslušné ustanovenia Smernice 2014/53/EÚ. (Slovak) Slovenščina Zyxel izjavlja, da je ta oprema v skladu z bistvenimi zahtevami in ostalimi relevantnimi določili direktive 2014/53/EU.
  • Page 394 Appendix C Legal Information • CAUTION: Risk of explosion if battery is replaced by an incorrect type, dispose of used batteries according to the instruction. Dispose them at the applicable collection point for the recycling of electrical and electronic devices. For detailed information about recycling of this product, please contact your local city office, your household waste disposal service or the store where you purchased the product.
  • Page 395 Appendix C Legal Information 台灣 以下訊息僅適用於產品具有無線功能且銷售至台灣地區 • 第十二條 經型式認證合格之低功率射頻電機,非經許可,公司,商號或使用者均不得擅自變更頻率、加大功率或變更原設計之特性及功能。 • 第十四條 低功率射頻電機之使用不得影響飛航安全及干擾合法通信;經發現有干擾現象時,應立即停用,並改善至無干擾時方得繼續使用。 前項合法通信,指依電信法規定作業之無線電通信。 低功率射頻電機須忍受合法通信或工業、科學及醫療用電波輻射性電機設備之干擾。 • 無線資訊傳輸設備忍受合法通信之干擾且不得干擾合法通信;如造成干擾,應立即停用, 俟無干擾之虞,始得繼續使用。 • 無線資訊傳輸設備的製造廠商應確保頻率穩定性,如依製造廠商使用手冊上所述正常操作, 發射的信號應維持於操作頻帶中 • 使用無線產品時,應避免影響附近雷達系統之操作。 • 高增益指向性天線只得應用於固定式點對點系統。 以下訊息僅適用於產品屬於專業安裝並銷售至台灣地區 • 本器材須經專業工程⼈員安裝及設定,始得設置使用,且不得直接販售給⼀般消費者。 安全警告 - 為了您的安全,請先閱讀以下警告及指示 : • 請勿將此產品接近水、火焰或放置在高溫的環境。 • 避免設備接觸 : – 任何液體 - 切勿讓設備接觸水、雨水、高濕度、污水腐蝕性的液體或其他水份。 –...
  • Page 396 Appendix C Legal Information Explanation of the Symbols SYMBOL EXPLANATION Alternating current (AC): AC is an electric current in which the flow of electric charge periodically reverses direction. Direct current (DC): DC if the unidirectional flow or movement of electric charge carriers. Earth;...
  • Page 397: Index

    Index Index Numbers backup configuration Backup/Restore screen bandwidth capacity 2.5G WAN cable type 2.5G WiFi LED 28, 32 Basic Service Set, see BSS 5G WiFi LED blinking LEDs bottom panel IPv6 buttons Zyxel Device Bridge mode 105, 114 broadband Broadband screen access overview troubleshooting...
  • Page 398 Index import copyright 280, 283 public and private keys 213, 311 verification CoS technologies certificate request Create Certificate Request screen create creating certificates view CTS threshold 143, 150 certificates customer support advantages customized service authentication 279, 285 customized services 257, 258 creating public key replacing...
  • Page 399 Index DS, see differentiated services filters MAC address 138, 151 DSCP 213, 311 Finger services counters firewall port details enhancing security statistics LAND attack security considerations Dual Stack Lite traffic rule direction dual-band application Firewall DoS screen dual-band gateway Firewall General screen dynamic DNS firewall rules wildcard...
  • Page 400 Index ping prefix 95, 128, 385 prefix and length ICMP prefix delegation IEEE 802.11ax prefix length 95, 128, 385 IEEE 802.1Q subnet mask unspecified address IGMP IPv6 address version abbreviation method IPv6 firewall Import Certificate screen IPv6 rapid deployment importing trusted CAs iTunes server Inside Global Address, see IGA ITU-T...
  • Page 401 Index wireless LAN MGMT Services screen 342, 344 MTU (Multi-Tenant Unit) link trace Multi_WAN Link Trace Message, see LTM Remote Management Link Trace Response, see LTR multicast listening port multi-gigabit Local Area Network, see LAN multimedia Local Certificates screen Multiple BSS, see MBSSID Log Setting screen multiplexing LLC-based...
  • Page 402 Index problem troubleshooting Protocol (Customized Services) screen Packet Transfer Mode Protocol Entry parental control schedule setup 268, 269 password Push Button Configuration, see PBC admin lost push button, WPS user Peak Cell Rate (PCR) Per-Hop Behavior, see PHB 213, 311 198, 213, 311 phone functions marking...
  • Page 403 Index RTS threshold Trap 143, 150 versions SNMP trap srTCM security unusable network SSID wireless LAN MBSSID Security Log Static DHCP Security Parameter Index, see SPI Configuration service access control Static DHCP screen Service Set 132, 137 static route 190, 196 services configuration port forwarding...
  • Page 404 Index unusable USA type call service mode three-way conference USB port 314, 315 39, 40 thresholds data fragment 143, 150 RTS/CTS 143, 150 time top panel Vendor ID LED indicators Virtual Circuit (VC) Virtual Local Area Network See VLAN TPID VLAN Trace Route test Introduction...
  • Page 405 Index example fragmentation threshold 143, 150 limitations MAC address filter 138, 151 preamble 144, 150 RADIUS server RTS/CTS threshold 143, 150 security SSID status 154, 156 example limitations push button Wireless tutorial wizard setup Internet WLAN button WMM screen WPA2 WPA2-PSK WPA3-SAE (Simultaneous Authentication of Equals handshake)

Table of Contents