Page 1 P-661HNU-Fx 801.11n Wireless ADSL+ 4-port Security Gateway Default Login Details IP Address https://192.168.1.1 Admin User Name: admin Password: 1234 User User Name: user Password: 1234 Firmware Version 3.10 www.zyxel.com Edition 1, 10/2010 www.zyxel.com Copyright © 2010 ZyXEL Communications Corporation...
Page 3: About This User's Guide
About This User's Guide About This User's Guide Intended Audience This manual is intended for people who want to configure the ZyXEL Device using the web configurator. Related Documentation • Quick Start Guide The Quick Start Guide is designed to help you get up and running right away. It contains information on setting up your network and configuring for Internet access.
Page 4 • Knowledge Base If you have a specific question about your product, the answer may be here. This is a collection of answers to previously asked questions about ZyXEL products. • Forum This contains discussions on ZyXEL products. Learn from others who use ZyXEL products and share your experiences as well.
Page 5: Document Conventions
Syntax Conventions • The P-661HNU-Fx may be referred to as the “ZyXEL Device”, the “device”, the “system” or the “product” in this User’s Guide. • Product labels, screen names, field labels and field choices are all in bold font.
Page 6 Document Conventions Icons Used in Figures Figures in this User’s Guide may use the following generic icons. The ZyXEL Device icon is not an exact representation of your device. ZyXEL Device Computer Notebook computer Server Firewall Router Switch P-661HNU-Fx User’s Guide...
Page 7: Safety Warnings
Your product is marked with this symbol, which is known as the WEEE mark. WEEE stands for Waste Electronics and Electrical Equipment. It means that used electrical and electronic products should not be mixed with general waste. Used electrical and electronic equipment should be treated separately. P-661HNU-Fx User’s Guide...
Page 8 Safety Warnings P-661HNU-Fx User’s Guide...
Page 9: Table Of Contents
System Monitor ........................241 User Account ........................... 245 Remote MGMT ........................247 System ............................. 249 Time Setting ..........................251 Log Setting ..........................253 Firmware Upgrade ........................255 Backup/Restore ........................257 Diagnostic ..........................261 Troubleshooting ........................265 Product Specifications ......................273 P-661HNU-Fx User’s Guide...
Page 10 Contents Overview P-661HNU-Fx User’s Guide...
Page 11: Table Of Contents
1.2 Applications for the ZyXEL Device ..................21 1.2.1 Internet Access ......................22 1.2.2 Wireless Connection ....................23 1.2.3 ZyXEL Device’s USB and Print Server Support ............23 1.3 The WPS/WLAN Button ...................... 24 1.4 Ways to Manage the ZyXEL Device ..................25 1.5 Good Habits for Managing the ZyXEL Device ..............
Page 12 3.3.1 Example Parameters ....................41 3.3.2 Configuring the AP ..................... 41 3.3.3 Configuring the Wireless Client using the ZyXEL Utility ..........42 3.3.4 Configuring the Wireless Client using the WPS PIN number ........49 3.4 Setting Up NAT Port Forwarding ..................50 3.5 Using the File Sharing Feature ....................
Page 13 7.7 Technical Reference ......................154 7.8 Installing UPnP in Windows Example ................158 7.9 Using UPnP in Windows XP Example ................162 Chapter 8 Routing ..........................169 8.1 Overview ........................... 169 8.2 Configuring Static Route ....................170 P-661HNU-Fx User’s Guide...
Page 14 11.4.2 What NAT Does ...................... 195 11.4.3 How NAT Works ..................... 195 Chapter 12 Dynamic DNS ........................197 12.1 Overview ......................... 197 12.1.1 What You Need To Know ..................197 12.2 The Dynamic DNS Screen ....................198 P-661HNU-Fx User’s Guide...
Page 15 16.3 The VPN Edit Screen ..................... 222 16.4 Configuring Advanced Settings ..................226 16.5 Viewing SA Monitor ......................228 16.6 IPSec VPN Technical Reference ..................229 16.6.1 IPSec Architecture ....................229 16.6.2 IPSec and NAT ....................... 230 P-661HNU-Fx User’s Guide...
Page 16 20.1.1 What You Need to Know ..................249 20.2 The System Screen ......................249 Chapter 21 Time Setting .......................... 251 21.1 Overview .......................... 251 21.2 The Time Setting Screen ....................251 Chapter 22 Log Setting ........................... 253 P-661HNU-Fx User’s Guide...
Page 17 Chapter 26 Troubleshooting........................265 26.1 Overview .......................... 265 26.2 Power, Hardware Connections, and LEDs ..............265 26.3 ZyXEL Device Access and Login ..................266 26.4 Internet Access ........................ 268 26.5 Wireless Internet Access ....................270 26.6 USB Device Connection ....................271 26.7 UPnP ..........................
Page 18 Table of Contents Appendix G Legal Information....................393 Index............................1 P-661HNU-Fx User’s Guide...
Page 19: User's Guide
User’s Guide...
Page 21: Introduction
• “U” denotes a USB port used to set up a 3G WAN connection via a 3G wireless dongle or share files via a USB memory stick or a USB hard drive. The ZyXEL Device can also function as a print server with a USB printer connected.
Page 22: Internet Access
3G wireless dongle attached to use 3G as your WAN. You can also have the ZyXEL Device use the 3G WAN connection as a backup. That means the ZyXEL Device switches to the 3G wireless WAN connection if the wired DSL connection fails.
Page 23: Wireless Connection
Use QoS to efficiently manage traffic on your network by giving priority to certain types of traffic and/or to particular computers. For example, you could make sure that the ZyXEL Device gives email high priority, and/or limit bandwidth devoted to the boss’s excessive file downloading.
Page 24: The Wps/Wlan Button
Place the devices you want to connect near one another. Press the WPS button on top of the ZyXEL Device for more than five seconds and release it to turn the WPS function on. Repeat this procedure when you want to turn the WPS function off.
Page 25: Ways To Manage The Zyxel Device
Chapter 1 Introduction Note: You must activate WPS in the ZyXEL Device and in another wireless device within two minutes of each other. See Chapter 6 on page 132 for more information. 1.4 Ways to Manage the ZyXEL Device Use any of the following methods to manage the ZyXEL Device.
Page 26: Good Habits For Managing The Zyxel Device
Chapter 1 Introduction 1.5 Good Habits for Managing the ZyXEL Device Do the following things regularly to make the ZyXEL Device more secure and to manage the ZyXEL Device more effectively. • Change the password. Use a password that’s not easy to guess and that consists of different types of characters, such as numbers and letters.
Page 27: The Reset Button
Blinking The WPS connection is being configured. The wireless network is not activated. Green This light applies when the ZyXEL Device is in DSL WAN mode. The DSL line is up. Blinking The ZyXEL Device is attempting to synchronize DSL signal.
Page 28 Chapter 1 Introduction P-661HNU-Fx User’s Guide...
Page 29: Introducing The Web Configurator
Internet Explorer. 2.1.1 Accessing the Web Configurator Make sure your ZyXEL Device hardware is properly connected (refer to the Quick Start Guide). Launch your web browser. Type "192.168.1.1" as the URL.
Page 30 Login. Figure 6 Password Screen Note: For security reasons, the ZyXEL Device automatically logs you out if you do not use the web configurator for five minutes (default). If this happens, log in again. The following screen displays if you have not yet changed your password. It is strongly recommended you change the default password.
Page 31 Chapter 2 Introducing the Web Configurator The Connection Status screen appears. Figure 8 Connection Status Click System Info to display the System Info screen, where you can view the ZyXEL Device’s interface and system information. P-661HNU-Fx User’s Guide...
Page 32: The Web Configurator Layout
• A - title bar • B - main window • C - navigation panel 2.2.1 Title Bar The title bar shows the following icon in the upper right corner. Click this icon to log out of the web configurator. P-661HNU-Fx User’s Guide...
Page 33: Main Window
ZyXEL Device’s ports. The connected ports are in color and disconnected ports are gray. 2.2.3 Navigation Panel Use the menu items on the navigation panel to open screens to configure ZyXEL Device features. The following table describes each menu item. Table 2 Navigation Panel Summary...
Page 34 MAC addresses. UPnP Use this screen to enable the UPnP function. File Sharing Use this screen to enable file sharing via the ZyXEL Device. Printer Server Use this screen to enable or disable sharing of a USB printer via your ZyXEL Device.
Page 35 Traffic Status Use this screen to view the status of all network traffic going through the WAN port of the ZyXEL Device. Use this screen to view the status of all network traffic going through the LAN ports of the ZyXEL Device.
Page 36 Chapter 2 Introducing the Web Configurator P-661HNU-Fx User’s Guide...
Page 37: Tutorials
Connect the ZyXEL Device properly. Refer to the Quick Start Guide for details on the ZyXEL Device’s hardware connections. Connect one end of a DSL cable to the DSL port of your ZyXEL Device. The other end should be connected to the DSL port in your house, the DSL/Modem jack on a splitter or another DSL router/modem provided by your ISP.
Page 38 Chapter 3 Tutorials Connect one end of an Ethernet cable to one of the Ethernet ports on the ZyXEL Device and the other end to the computer that you will use to browse or access the web configurator. Connect the ZyXEL Device to a power source, turn it on and wait for the POWER LED to become a steady green.
Page 39 PPPoE Passthrough: Disabled NAT: Enabled IGMP Multicast Proxy: Enabled Apply as Default Gateway: Enable DNS Server: Static DNS IP Address (Primary: 192.168.1.254 Secondary: 192.168.1.253) Enter or select these values and click Apply. This completes your DSL WAN connection setting. P-661HNU-Fx User’s Guide...
Page 40: How To Set Up A Wireless Network
You should see a summary of your new DSL connection setup in the Broadband screen as follows. Try to connect to a website, such as “www.zyxel.com” to see if you have correctly set up your Internet connection. Be sure to contact your service provider for any information you need to configure the WAN screens.
Page 41: Example Parameters
Security WPA-PSK (Pre-Shared Key: ThisismyWPA-PSKpre-sharedkey) We use the P-661HNU-F1 web screens and M-302 utility screens as an example. The screens may vary slightly for different models. 3.3.2 Configuring the AP Follow the steps below to configure the wireless settings on your AP.
Page 42: Connecting To A Wireless Lan
3.3.3 Configuring the Wireless Client using the ZyXEL Utility This section describes how to connect the wireless client to a network using a ZyXEL USB Wireless adapter and the ZyXEL utility. Follow these steps only if you are using this utility.
Page 43 After you install the ZyXEL utility and then insert the wireless client, follow the steps below to connect to a network using the Site Survey screen. Open the ZyXEL utility and click the Site Survey tab to open the screen shown next.
Page 44 Exit button to return to the Site Survey screen. Tutorial: Security Settings The Confirm Save window appears. Check your settings and click Save to continue. Tutorial: Confirm Save P-661HNU-Fx User’s Guide...
Page 45: Creating And Using A Profile
Chapter 3 Tutorials The ZyXEL utility returns to the Link Info screen while it connects to the wireless network using your settings. When the wireless link is established, the ZyXEL utility icon in the system tray turns green and the Link Info screen displays details of the active connection.
Page 46 Chapter 3 Tutorials Open the ZyXEL utility and click the Profile tab to open the screen shown next. Click Add to configure a new profile. Tutorial: Profile The Add New Profile screen appears. The wireless client automatically searches for available wireless networks, and displays them in the Scan Info box. Click Scan if you want to search again.
Page 47 This screen varies depending on the encryption method you selected in the previous screen. Enter the pre-shared key and leave the encryption type at the default setting. Tutorial: Profile Encryption In the next screen, leave both boxes selected. Tutorial: Wireless Protocol Settings. P-661HNU-Fx User’s Guide...
Page 48 Note: Only one profile can be activated and used at any given time. Tutorial: Activate When you activate the new profile, the ZyXEL utility returns to the Link Info screen while it connects to the AP using your settings. When the wireless link is established, the ZyXEL utility icon in the system tray turns green and the Link Info screen displays details of the active connection.
Page 49: Configuring The Wireless Client Using The Wps Pin Number
WPS PIN method. You need to log into the Web Configurator for this. Place a WPS-enabled device that supports the WPS PIN configuration method near the ZyXEL Device. Log into the ZyXEL Device’s web configurator at http://192.168.1.1 (see Introducing the Web Configurator on page for more details on this).
Page 50: Setting Up Nat Port Forwarding
Device. In order for players on the Internet (like A in the figure below) to communicate with the Doom server, you need to configure the port settings and IP address on the ZyXEL Device. Traffic should be forwarded to the port 666 of the Doom server computer which has an IP address of 192.168.1.34.
Page 51 The port forwarding settings you configured should appear in the table. Make sure the Status check box for this rule is selected. Click Apply to have the ZyXEL Device start forwarding port 666 traffic to the computer with IP address 192.168.1.34.
Page 52: Using The File Sharing Feature
3.5.1.2 Set up File Sharing on Your ZyXEL Device You also need to set up file sharing on your ZyXEL Device in order to share files. Click Add new share in the File Sharing screen. Select your USB device from the Volume drop-down list box.
Page 53 You can add a description for the share or leave it blank. The Add Share Directory screen should look like the following. Leave the Access Level as Public to allow anyone connected to the ZyXEL Device to access the share. Tutorial: USB Services > File Sharing > Share Configuration Set the Access Level to Security if you wish to restrict access to the share for certain users.
Page 54 It is case sensitive and it must be between 5 and 15 characters long. 11 This sets up the file sharing server. You can see the USB storage device listed in the table below. Tutorial: USB Services > File Sharing > Share Configuration (2) P-661HNU-Fx User’s Guide...
Page 55: Access Your Shared Files From A Computer
Windows 2000 Professional operating system. Some menu items may look different on your operating system. The TCP/IP port must be configured with the IP address of the ZyXEL Device and must use the LPR protocol to communicate with the printer. Consult your operating systems documentation for instructions on how to do this or follow the instructions below if you have a Windows 2000/XP operating system.
Page 56 The Printers folder opens up. First you need to open up the properties windows for the printer you want to configure a TCP/IP port. Locate your printer. Right click on your printer and select Properties. Tutorial: Open Printer Properties P-661HNU-Fx User’s Guide...
Page 57 A Printer Ports window appears. Select Standard TCP/IP Port and click New Port... Tutorial: Add a Port Window Add Standard TCP/IP Printer Port Wizard window opens up. Click Next to start configuring the printer port. Tutorial: Add a Port Wizard P-661HNU-Fx User’s Guide...
Page 58 Chapter 3 Tutorials Enter the IP address of the ZyXEL Device to which the printer is connected in the Printer Name or IP Address: field. In our example we use the default IP address of the ZyXEL Device, 192.168.1.1. The Port Name field updates automatically to reflect the IP address of the port.
Page 59 Tutorial: Custom Port Settings 12 Continue through the wizard, apply your settings and close the wizard window. Tutorial: Finish Adding the TCP/IP Port 13 Repeat steps 1 to 12 to add this printer to other computers on your network. P-661HNU-Fx User’s Guide...
Page 60 Chapter 3 Tutorials Add a New Printer Using Windows This example shows how to connect a printer to your ZyXEL Device using the Windows XP Professional operating system. Some menu items may look different on your operating system. Click Start > Control Panel > Printers and Faxes to open the Printers and Faxes screen.
Page 61 Select Local printer attached to this computer and click Next. Tutorial: Add Printer Wizard: Local or Network Printer Select Create a new port and Standard TCP/IP Port. Click Next. Tutorial: Add Printer Wizard: Select the Printer Port P-661HNU-Fx User’s Guide...
Page 62 Tutorial: Add a Port Wizard Enter the IP address of the ZyXEL Device to which the printer is connected in the Printer Name or IP Address: field. In our example we use the default IP address of the ZyXEL Device, 192.168.1.1.
Page 63 Chapter 3 Tutorials Select Custom under Device Type and click Settings. Tutorial: Custom Port Settings Confirm the IP address of the ZyXEL Device in the Printer Name or IP Address field. Select LPR under Protocol. 10 Type LP1 in the Queue Name field and click OK to go back to the previous screen and click Next.
Page 64 14 If your printer is not displayed in the list of Printers, you can insert the printer driver installation CD/disk or download the driver file to your computer, click Have Disk… and install the new printer driver. 15 Click Next to continue. Tutorial: Add Printer Wizard: Printer Driver P-661HNU-Fx User’s Guide...
Page 65 Tutorial: Add Printer Wizard: Name Your Printer 18 The ZyXEL Device is a print server itself and you do not need to have your computer act as a print server by sharing the printer with other users in the same...
Page 66 19 Select Yes and then click the Next button if you want to print a test page. A pop- up screen displays to ask if the test page printed correctly. Otherwise select No and then click Next to continue. Tutorial: Add Printer Wizard: Print Test Page P-661HNU-Fx User’s Guide...
Page 67 If the Print Center icon is not in the Macintosh Dock, proceed to the next step. On your desktop, double-click the Macintosh HD icon to open the Macintosh HD window. Tutorial: Macintosh HD Double-click the Applications folder. Tutorial: Macintosh HD folder P-661HNU-Fx User’s Guide...
Page 68 Set up your printer in the Printer List configuration screen. Select IP Printing from the drop-down list box. In the Printer’s Address field, type the IP address of your ZyXEL Device. Deselect the Use default queue on server check box.
Page 69 13 The Name LP1 on 192.168.1.1 displays in the Printer List field. The default printer Name displays in bold type. Tutorial: Print Server Your Macintosh print server driver setup is complete. You can now use the ZyXEL Device’s print server to print from a Macintosh computer. P-661HNU-Fx User’s Guide...
Page 70: Configuring The Mac Address Filter
He decided to prevent Josephine from accessing the Internet so that she can concentrate on preparing for her final exams. Josephine’s computer connects wirelessly to the Internet through the ZyXEL Device. Thomas decides to use the Security > MAC Filter screen to grant wireless network access to his computer but not to Josephine’s computer.
Page 71: Configuring Static Route For Routing To Another Network
In this case, B will never receive the traffic. You need to specify a static routing rule on the ZyXEL Device to specify R as the router in charge of forwarding traffic to N2. In this case, the ZyXEL Device routes...
Page 72 A to R and then R routes the traffic to B.This tutorial uses the following example IP settings: Table 3 IP Settings in this Tutorial DEVICE / COMPUTER IP ADDRESS The ZyXEL Device’s WAN 172.16.1.1 The ZyXEL Device’s LAN 192.168.1.1 192.168.1.34 R’s N1...
Page 73: Configuring Qos Queue And Class Setup
3.9 Configuring QoS Queue and Class Setup This section contains tutorials on how you can configure the QoS screen. Note: Voice traffic will not be affected by the user-defined QoS settings on the ZyXEL Device. It always gets the highest priority.
Page 74 Chapter 3 Tutorials Note: QoS is applied to traffic flowing out of the ZyXEL Device. Traffic that does not match this class is assigned a priority queue based on the internal QoS mapping table on the ZyXEL Device. QoS Example...
Page 75 Give a class name to this traffic, such as Email in this example. To Queue Link this to a queue created in the QoS > Queue Setup screen, which is the Email queue created in this example. P-661HNU-Fx User’s Guide...
Page 76: Access The Zyxel Device Using Ddns
Tutorial: Advanced > QoS > Monitor 3.10 Access the ZyXEL Device Using DDNS If you connect your ZyXEL Device to the Internet and it uses a dynamic WAN IP address, it is inconvenient for you to manage the device from the Internet. The...
Page 77: Registering A Ddns Account On Www.dyndns.org
• Host name: zyxelrouter.dyndns.org • Service Type: Host with IP address • IP Address: Enter the WAN IP address that your ZyXEL Device is currently using. You can find the IP address on the ZyXEL Device’s web configurator Status page.
Page 78: Configuring Ddns On Your Zyxel Device
• Enter the user name (UserName1) and password (12345). Click Apply. 3.10.3 Testing the DDNS Setting Now you should be able to access the ZyXEL Device from the Internet. To test this: Open a web browser on the computer (using the IP address a.b.c.d) that is connected to the Internet.
Page 79: Technical Reference
Technical Reference...
Page 81: Connection Status And System Info Screens
4.1 Overview After you log into the web configurator, the Connection Status screen appears. This shows the network connection status of the ZyXEL Device and clients connected to it. Use the System Info screen to look at the current status of the device, system resources and interfaces (LAN, WAN, WLAN and 3G).
Page 82 Chapter 4 Connection Status and System Info Screens If you prefer to view the status in a list, click List View in the Viewing mode selection box. You can configure how often you want the ZyXEL Device to update this screen in Refresh Interval.
Page 83: The System Info Screen
Each field is described in the following table. Table 4 System Info Screen LABEL DESCRIPTION Refresh Interval Select how often you want the ZyXEL Device to update this screen from the drop-down list box. Device Information Host Name This field displays the ZyXEL Device system name. It is used for identification.
Page 84 DHCP Server This field displays what DHCP services the ZyXEL Device is providing to the LAN. Choices are: Server - The ZyXEL Device is a DHCP server in the LAN. It assigns IP addresses to other computers in the LAN.
Page 85 This field displays how long the ZyXEL Device has been running since it Time last started up. The ZyXEL Device starts up when you plug it in, when you restart it (Maintenance > Reboot), or when you reset it (see Chapter 1 on page 27).
Page 86 Chapter 4 Connection Status and System Info Screens P-661HNU-Fx User’s Guide...
Page 87: Broadband
Figure 13 LAN and WAN You can attach a 3G wireless adapter to the USB port and set the ZyXEL Device to use this 3G connection as your WAN or a backup when if wired WAN connection fails.
Page 88: What You Can Do In This Chapter
WAN IP Address The WAN IP address is an IP address for the ZyXEL Device, which makes it accessible from an outside network. It is used by the ZyXEL Device to communicate with other devices in other networks. It can be static (fixed) or dynamically assigned by the ISP each time the ZyXEL Device tries to access the Internet.
Page 89: Before You Begin
Get this information from your ISP. 5.2 The Broadband Screen The ZyXEL Device must have a WAN interface to allow users to use the DSL port to access the Internet. Use the Broadband screen to view, remove or add a WAN interface.
Page 90: Add/Edit Internet Connection
Modify Click the Edit icon to configure the connection. Click the Delete icon to delete this connection from the ZyXEL Device. A window displays asking you to confirm that you want to delete the connection.
Page 91 Click the Add new WAN Interface in the Network Setting > Broadband screen or the Edit icon next to the connection you want to configure. Select Routing as the encapsulation mode and PPPoE as the WAN service type. Figure 16 Broadband Add/Edit: Routing- PPPoE P-661HNU-Fx User’s Guide...
Page 92 General Name Enter a service name of the connection. Type ADSL: The ZyXEL Device uses the ADSL technology for data transmission over the DSL port. Mode Select Routing (default) from the drop-down list box if your ISP give you one IP address only and you want multiple computers to share an Internet account.
Page 93 Multicast group - it is not used to carry user data. Select this option to have the ZyXEL Device act as an IGMP proxy on this connection. This allows the ZyXEL Device to get subscribing information and maintain a joined member list for each multicast group.
Page 94 DNS Server - This section is not available when you select Bridge in the WAN Service Type field. Obtain DNS info Select this to have the ZyXEL Device get the DNS server addresses Automatically from the ISP automatically. Use the following...
Page 95 Click the Add new WAN Interface in the Network Setting > Broadband screen or the Edit icon next to the connection you want to configure. Select Routing as the encapsulation mode and IPoE as the WAN service type. Figure 17 Broadband Add/Edit: Routing- IPoE P-661HNU-Fx User’s Guide...
Page 96 General Name Enter a service name of the connection. Type ADSL: The ZyXEL Device uses the ADSL technology for data transmission over the DSL port. Mode Select Routing (default) from the drop-down list box if your ISP give you one IP address only and you want multiple computers to share an Internet account.
Page 97 Multicast group - it is not used to carry user data. Select this option to have the ZyXEL Device act as an IGMP proxy on this connection. This allows the ZyXEL Device to get subscribing information and maintain a joined member list for each multicast group.
Page 98 General Name Enter a service name of the connection. Type ADSL: The ZyXEL Device uses the ADSL technology for data transmission over the DSL port. Mode Select Routing (default) from the drop-down list box if your ISP give you one IP address only and you want multiple computers to share an Internet account.
Page 99 Enter the user name exactly as your ISP assigned. If assigned a name in the form user@domain where domain identifies a service name, then enter both components exactly as given. PPP Password Enter the password associated with the user name above. P-661HNU-Fx User’s Guide...
Page 100 Multicast group - it is not used to carry user data. Select this option to have the ZyXEL Device act as an IGMP proxy on this connection. This allows the ZyXEL Device to get subscribing information and maintain a joined member list for each multicast group.
Page 101: Bridge Mode
Enter a service name of the connection. Type Select ADSL as the interface for which you want to configure here. The ZyXEL Device uses the ADSL technology for data transmission over the DSL port. Mode Select Bridge when your ISP provides you more than one IP address and you want the connected computers to get individual IP address from ISP’s DHCP server directly.
Page 102: The 3G Backup Screen
5.3 The 3G Backup Screen Use this screen to configure your 3G settings. Click Broadband > 3G Backup. At the time of writing, the 3G cards you can use in the ZyXEL Device are Huawei E220 and E270. Note: The actual data rate you obtain varies depending the 3G card you use, the signal strength to the service provider’s base station, and so on.
Page 103 LABEL DESCRIPTION 3G Backup Select this option to have the ZyXEL Device use the 3G connection as your WAN or a backup when the wired WAN connection fails. Card Description This field displays the manufacturer and model name of your 3G card if you inserted one in the ZyXEL Device.
Page 104: Technical Reference
Device features described in this chapter. Encapsulation Be sure to use the encapsulation method required by your ISP. The ZyXEL Device can work in bridge mode or routing mode. When the ZyXEL Device is in routing mode, it supports the following methods. P-661HNU-Fx User’s Guide...
Page 105 By implementing PPPoE directly on the ZyXEL Device (rather than individual computers), the computers on the LAN do not need PPPoE software installed, since the ZyXEL Device does that part of the task. Furthermore, with NAT, all of the LANs’ computers will have access.
Page 106 SCR again. At this time, more cells (up to the MBS) can be sent at the PCR again. If the PCR, SCR or MBS is set to the default of "0", the system will assign a maximum value that correlates to your upstream line rate. P-661HNU-Fx User’s Guide...
Page 107 It is commonly used for "bursty" traffic typical on LANs. PCR and MBS define the burst levels, SCR defines the minimum level. An example of an VBR-nRT connection would be non-time sensitive data file transfers. P-661HNU-Fx User’s Guide...
Page 108 4 and 5 of RFC 2236. The class D IP address is used to identify host groups and can be in the range 224.0.0.0 to 239.255.255.255. The address 224.0.0.0 is not assigned to any group and is used by IP multicast computers. The address P-661HNU-Fx User’s Guide...
Page 109 DNS server fields. If your ISP dynamically assigns the DNS server IP addresses (along with the ZyXEL Device’s WAN IP address), set the DNS server fields to get the DNS server address from the ISP. P-661HNU-Fx User’s Guide...
Page 110 UMTS-based 3G networks and allows for higher data transfer speeds. Fast A. The International Telecommunication Union (ITU) is an international organization within which governments and the private sector coordinate global telecom networks and services. P-661HNU-Fx User’s Guide...
Page 111: Wireless
• Use the General screen to enable the Wireless LAN, enter the SSID and select the wireless security mode (Section 6.2 on page 113). • Use the More AP screen to set up multiple wireless networks on your ZyXEL Device (Section 6.3 on page 121).
Page 112 The wireless network is the part in the blue circle. In this wireless network, devices A and B use the access point (AP) to interact with the other devices (such as the printer) or with the Internet. Your ZyXEL Device is the AP. Every wireless network must follow these basic guidelines: •...
Page 113: Before You Begin
Use this screen to enable the Wireless LAN, enter the SSID and select the wireless security mode. Note: If you are configuring the ZyXEL Device from a computer connected to the wireless LAN and you change the ZyXEL Device’s SSID or security settings, you will lose your wireless connection when you press Apply to confirm.
Page 114 Select this check box to hide the SSID in the outgoing beacon frame so a station cannot obtain the SSID through scanning using a site survey tool. BSSID This shows the MAC address of the wireless interface on the ZyXEL Device when wireless LAN is enabled. P-661HNU-Fx User’s Guide...
Page 115: No Security
Operating Channel field. Scan Click this button to have the ZyXEL Device immediately scan for and select a channel (which is not used by another device) whenever the device reboots or the wireless setting is changed.
Page 116: Basic (Static Wep/Shared Wep Encryption)
Chapter 6 Wireless Note: If you do not enable any wireless security on your ZyXEL Device, your network is accessible to any wireless networking device that is within range. Figure 24 Wireless > General: No Security The following table describes the labels in this screen.
Page 117 Shared Key mode and have the correct WEP key. WEP Key Enter a WEP key that will be used to encrypt data. Both the ZyXEL Device and the wireless stations must use the same WEP key for data transmission.
Page 118: More Secure (Wpa(2)-Psk)
6.2.3 More Secure (WPA(2)-PSK) The WPA-PSK security mode provides both improved data encryption and user authentication over WEP. Using a Pre-Shared Key (PSK), both the ZyXEL Device and the connecting client share a common password in order to validate the connection.
Page 119: Wpa(2) Authentication
This field appears when you choose WPA-PSK2 as the Security Mode. Compatible Check this field to allow wireless devices using WPA-PSK security mode to connect to your ZyXEL Device. The ZyXEL Device supports WPA-PSK and WPA2-PSK simultaneously. Encryption If the security mode is WPA-PSK, the encryption mode is set to TKIP to enable Temporal Key Integrity Protocol (TKIP) security on your wireless network.
Page 120 Click more... to show more fields in this section. Click hide more to more hide them. WPA Compatible This field is only available for WPA2. Select this if you want the ZyXEL Device to support WPA and WPA2 simultaneously. P-661HNU-Fx User’s Guide...
Page 121: The More Ap Screen
AES provides superior security to TKIP. 6.3 The More AP Screen The ZyXEL Device can broadcast up to four wireless network names at the same time. This means that users can connect to the ZyXEL Device using different SSIDs. You can secure the connection on each SSID profile so that wireless clients connecting to the ZyXEL Device using different SSIDs cannot communicate with each other.
Page 122: Edit More Ap
The SSID (Service Set IDentity) identifies the service set with which Name (SSID) a wireless device is associated. Wireless devices associating to the access point (AP) must have the same SSID. Enter a descriptive name (up to 32 English keyboard characters) for the wireless LAN. P-661HNU-Fx User’s Guide...
Page 123: The Wps Screen
Click Back to exit this screen without saving. 6.4 The WPS Screen Use this screen to configure WiFi Protected Setup (WPS) on your ZyXEL Device. WPS allows you to quickly set up a wireless network with strong security, without having to configure security settings manually. Set up each WPS connection between two devices.
Page 124 Configuration (PBC). Click this button to add another WPS-enabled wireless device (within wireless range of the ZyXEL Device) to your wireless network. This button may either be a physical button on the outside of device, or a menu button similar to the WPS button on this screen.
Page 125: The Wmm Screen
WPS Configuration Summary AP PIN The PIN of the ZyXEL Device is shown here. Enter this PIN in the configuration utility of the device you want to connect to using WPS. The PIN is not necessary when you use WPS push-button method.
Page 126 LABEL DESCRIPTION Enable WMM of This enables the ZyXEL Device to automatically give a service a priority SSID1~4 level according to the ToS value in the IP header of packets it sends. WMM QoS (Wifi MultiMedia Quality of Service) gives high priority to voice and video, which makes them run more smoothly.
Page 127: Scheduling Screen
6.6 Scheduling Screen Click Network Setting > Wireless > Scheduling to open the Wireless LAN Scheduling screen. Use this screen to configure when the ZyXEL Device enables or disables the wireless LAN. Figure 32 Network Setting > Wireless > Scheduling The following table describes the labels in this screen.
Page 128: Additional Wireless Terms
By setting this value lower than the default value, the wireless devices must sometimes get permission to send information to the ZyXEL Device. The lower the value, the more often the devices must get permission. If this value is greater than the fragmentation threshold value (see below), then wireless devices never have to get permission to send information to the ZyXEL Device.
Page 129: Mac Address Filter
Normally, the ZyXEL Device acts like a beacon and regularly broadcasts the SSID in the area. You can hide the SSID instead, in which case the ZyXEL Device does not broadcast the SSID. In addition, you should change the default SSID to something that is difficult to guess.
Page 130: User Authentication
Chapter 6 Wireless You can use the MAC address filter to tell the ZyXEL Device which devices are allowed or not allowed to use the wireless network. If a device is allowed to use the wireless network, it still has to have the correct information (SSID, channel, and security).
Page 131: Signal Problems
Usually, you should set up the strongest encryption that every device in the wireless network supports. For example, suppose you have a wireless network with the ZyXEL Device and you do not have a RADIUS server. Therefore, there is no authentication. Suppose the wireless network has two devices. Device A only supports WEP, and device B supports WEP and WPA.
Page 132: Mbssid
• MBSSID should not replace but rather be used in conjunction with 802.1x security. 6.7.6 WiFi Protected Setup (WPS) Your ZyXEL Device supports WiFi Protected Setup (WPS), which is an easy way to set up a secure wireless network. WPS is an industry standard specification, defined by the WiFi Alliance.
Page 133: Push Button Configuration
Section 6.4 on page 123). Press the button on one of the devices (it doesn’t matter which). For the ZyXEL Device you must press the WPS button for more than three seconds. Within two minutes, press the button on the other device. The registrar sends the network name (SSID) and security key through an secure connection to the enrollee.
Page 134 Look for the client’s WPS PIN; it will be displayed either on the device, or in the WPS section of the client’s configuration interface (see the device’s User’s Guide for how to find the WPS PIN - for the ZyXEL Device, see Section 6.4 on page 123).
Page 135: How Wps Works
PSK or WPA2-PSK pre-shared key to the enrollee. Whether WPA-PSK or WPA2-PSK is used depends on the standards supported by the devices. If the registrar is already part of a network, it sends the existing information. If not, it generates the SSID and WPA(2)-PSK randomly. P-661HNU-Fx User’s Guide...
Page 136 It will be the registrar in all subsequent WPS connections in which it is involved. If you want a configured AP to act as an enrollee, you must reset it to its factory defaults. P-661HNU-Fx User’s Guide...
Page 137: Example Wps Network Setup
In this case, AP1 must be the registrar, since it is configured (it already has security information for the network). AP1 supplies the existing security information to Client 2. Figure 37 WPS: Example Network Step 2 REGISTRAR EXISTING CONNECTION CLIENT 1 ENROLLEE CLIENT 2 P-661HNU-Fx User’s Guide...
Page 138: Limitations Of Wps
(if the device supports this feature). Then, you can enter the key into the non-WPS device and join the network as normal (the non-WPS device must also support WPA-PSK or WPA2-PSK). P-661HNU-Fx User’s Guide...
Page 139 Check the MAC addresses of your wireless clients (usually printed on a label on the bottom of the device). If there is an unknown MAC address you can remove it or reset the AP. P-661HNU-Fx User’s Guide...
Page 140 Chapter 6 Wireless P-661HNU-Fx User’s Guide...
Page 141: Home Networking
(Section 7.2 on page 145). • Use the DHCP Server screen to configure the DNS server information that the ZyXEL Device sends to the DHCP client devices on the LAN (Section 7.3 on page 146). • Use the UPnP screen to enable UPnP (Section 7.4 on page...
Page 142: What You Need To Know
DHCP DHCP (Dynamic Host Configuration Protocol) allows clients to obtain TCP/IP configuration at start-up from a server. This ZyXEL Device has a built-in DHCP server capability that assigns IP addresses and DNS servers to systems that support DHCP client capability.
Page 143 When settings are set to default, each USB device connected to the ZyXEL Device is given a folder, called a “share”. If a USB hard drive connected to the ZyXEL Device has more than one partition, then each partition will be allocated a share.
Page 144 Chapter 7 Home Networking different file systems. The file sharing feature on your ZyXEL Device supports File Allocation Table (FAT), FAT32, and New Technology File System (NTFS). Common Internet File System The ZyXEL Device uses Common Internet File System (CIFS) protocol for its file sharing functions.
Page 145: The Lan Setup Screen
DESCRIPTION LAN IP Setup IP Address Enter the LAN IP address you want to assign to your ZyXEL Device in dotted decimal notation, for example, 192.168.1.1 (factory default). IP Subnet Mask Type the subnet mask of your network in dotted decimal notation, for example 255.255.255.0 (factory default).
Page 146: The Static Dhcp Screen
LABEL DESCRIPTION DHCP Select Enable to have your ZyXEL Device assign IP addresses, an IP default gateway and DNS servers to LAN computers and other devices that are DHCP clients. If you select Disable, you need to manually configure the IP addresses of the computers and other devices on your LAN.
Page 147 Chapter 7 Home Networking Use this screen to change your ZyXEL Device’s static DHCP settings. Click Network Setting > Home Networking > Static DHCP to open the following screen. Figure 40 Network Setting > Home Networking > Static DHCP The following table describes the labels in this screen.
Page 148: The Upnp Screen
158 for more information on UPnP. Use the following screen to configure the UPnP settings on your ZyXEL Device. Click Network Setting > Home Networking > UPnP to display the screen shown next.
Page 149: The File Sharing Screen
Chapter 7 Home Networking 7.5 The File Sharing Screen You can share files on a USB memory stick or hard drive connected to your ZyXEL Device with users on your network. The following figure is an overview of the ZyXEL Device’s file server feature.
Page 150 Chapter 7 Home Networking Use this screen to set up file sharing using the ZyXEL Device. To access this screen, click Network Setting > Home Networking > File Sharing. Figure 44 Network Setting > Home Networking > File Sharing Each field is described in the following table.
Page 151: Add/Edit File Sharing
Click Cancel to restore your previously saved settings. 7.5.2 Add/Edit File Sharing Use these screens to set up a new share or edit an existing share on the ZyXEL Device. Click Add New share in the File Sharing screen or click the Edit icon next to an existing share to change the settings.
Page 152: Add New User
Click on the Edit icon under the Modify label to change a share’s settings. 7.5.3 Add New User Use these screens to set up a new user or edit an existing user on the ZyXEL Device. Click Add New User in the File Sharing screen or click the Edit icon next to an existing user to change the settings.
Page 153: The Print Server Screen
Chapter 7 Home Networking 7.6 The Print Server Screen The ZyXEL Device allows you to share a USB printer on your LAN. You can do this by connecting a USB printer the USB port on the ZyXEL Device and then configuring a TCP/IP port on the computers connected to your network.
Page 154: Technical Reference
TCP/IP configuration at start-up from a server. You can configure the ZyXEL Device as a DHCP server or disable it. When configured as a server, the ZyXEL Device provides the TCP/IP configuration for the clients. If you turn DHCP service off, you must have another DHCP server on your LAN, or else the computer must be manually configured.
Page 155 Chapter 7 Home Networking IP Pool Setup The ZyXEL Device is pre-configured with a pool of IP addresses for the DHCP clients (DHCP Pool). See the product specifications in the appendices. Do not assign static IP addresses from the DHCP pool to your LAN computers.
Page 156 RFC 1597, “Address Allocation for Private Internets” and RFC 1466, “Guidelines for Management of IP Address Space”. ZyXEL Device Print Server Compatible USB Printers The following is a list of USB printer models compatible with the ZyXEL Device print server. Table 32 Compatible USB Printers...
Page 157 Deskjet 1125C Deskjet 1180C Deskjet 1220C Deskjet F4185 Laserjet 1022 Laserjet 1200 Laserjet 2200D Laserjet 2420 Color Laserjet 1500L Laserjet 3015 Officejet 4255 Officejet 5510 Officejet 5610 Officejet 7210 Officejet Pro L7380 Photosmart 2610 Photosmart 3110 Photosmart 7150 P-661HNU-Fx User’s Guide...
Page 158: Installing Upnp In Windows Example
This section shows how to install UPnP in Windows Me and Windows XP. Installing UPnP in Windows Me Follow the steps below to install the UPnP in Windows Me. Click Start and Control Panel. Double-click Add/Remove Programs. P-661HNU-Fx User’s Guide...
Page 159 Click the Windows Setup tab and select Communication in the Components selection box. Click Details. Figure 50 Add/Remove Programs: Windows Setup: Communication In the Communications window, select the Universal Plug and Play check box in the Components selection box. Figure 51 Add/Remove Programs: Windows Setup: Communication: Components P-661HNU-Fx User’s Guide...
Page 160 Follow the steps below to install the UPnP in Windows XP. Click Start and Control Panel. Double-click Network Connections. In the Network Connections window, click Advanced in the main menu and select Optional Networking Components …. Figure 52 Network Connections P-661HNU-Fx User’s Guide...
Page 161 Chapter 7 Home Networking The Windows Optional Networking Components Wizard window displays. Select Networking Service in the Components selection box and click Details. Figure 53 Windows Optional Networking Components Wizard P-661HNU-Fx User’s Guide...
Page 162: Using Upnp In Windows Xp Example
UPnP installed in Windows XP and UPnP activated on the ZyXEL Device. Make sure the computer is connected to a LAN port of the ZyXEL Device. Turn on your computer and the ZyXEL Device. Auto-discover Your UPnP-enabled Network Device Click Start and Control Panel.
Page 163 Chapter 7 Home Networking Right-click the icon and select Properties. Figure 55 Network Connections P-661HNU-Fx User’s Guide...
Page 164 Chapter 7 Home Networking In the Internet Connection Properties window, click Settings to see the port mappings there were automatically created. Figure 56 Internet Connection Properties P-661HNU-Fx User’s Guide...
Page 165 You may edit or delete the port mappings or click Add to manually add port mappings. Figure 57 Internet Connection Properties: Advanced Settings Figure 58 Internet Connection Properties: Advanced Settings: Add When the UPnP-enabled device is disconnected from your computer, all port mappings will be deleted automatically. P-661HNU-Fx User’s Guide...
Page 166 Web Configurator Easy Access With UPnP, you can access the web-based configurator on the ZyXEL Device without finding out the IP address of the ZyXEL Device first. This comes helpful if you do not know the IP address of the ZyXEL Device.
Page 167 Chapter 7 Home Networking Select My Network Places under Other Places. Figure 61 Network Connections An icon with the description for each UPnP-enabled device displays under Local Network. P-661HNU-Fx User’s Guide...
Page 168 Chapter 7 Home Networking Right-click on the icon for your ZyXEL Device and select Invoke. The web configurator login screen displays. Figure 62 Network Connections: My Network Places Right-click on the icon for your ZyXEL Device and select Properties. A properties window displays with basic information about the ZyXEL Device.
Page 169: Routing
8.1 Overview The ZyXEL Device usually uses the default gateway to route outbound traffic from computers on the LAN to the Internet. To have the ZyXEL Device send data to devices not reachable through the default gateway, use static routes.
Page 170: Configuring Static Route
Chapter 8 Routing 8.2 Configuring Static Route Use this screen to view and configure IP static routes on the ZyXEL Device. Click Network Setting > Routing to open the following screen. Figure 65 Network Setting > Routing The following table describes the labels in this screen.
Page 171: Add/Edit Static Route
You must have the WAN interface(s) already configured in the Broadband screen. Apply Click Apply to save your changes. Back Click Back to exit this screen without saving. P-661HNU-Fx User’s Guide...
Page 172 Chapter 8 Routing P-661HNU-Fx User’s Guide...
Page 173: Dns Route
DNS queries for certain domain names through a specific WAN interface to its DNS server(s). The ZyXEL Device uses a system DNS server (in the order you specify in the Broadband screen) to resolve domain names that do not match any DNS routing entry.
Page 174: What You Can Do In This Chapter
Chapter 9 DNS Route 9.1.1 What You Can Do in this Chapter The DNS Route screens let you view and configure DNS routes on the ZyXEL Device (Section 9.2 on page 174). 9.2 The DNS Route Screen The DNS Route screens let you view and configure DNS routes on the ZyXEL Device.
Page 175: Add/Edit Dns Route Edit
Enter the domain name you want to resolve. You can use the wildcard character, an “*” (asterisk) as the left most part of a domain name, such as *.example.com. The ZyXEL Device forwards DNS queries for any domain name ending in example.com to the WAN interface specified in this route.
Page 176 Chapter 9 DNS Route P-661HNU-Fx User’s Guide...
Page 177: Quality Of Service (Qos)
10.1.1 What You Can Do in this Chapter • Use the General screen to enable QoS, set the bandwidth, and allow the ZyXEL Device to automatically assign priority to upstream traffic according to the IEEE 802.1p priority level, IP precedence or packet length (Section 10.2 on page...
Page 178: What You Need To Know
10.2 The QoS General Screen Use this screen to enable or disable QoS, set the bandwidth, and select to have the ZyXEL Device automatically assign priority to upstream traffic according to the IEEE 802.1p priority level, IP precedence or packet length.
Page 179 Select the check box to turn on QoS to improve your network performance. You can give priority to traffic that the ZyXEL Device forwards out through the WAN interface. Give high priority to voice and video to make them run more smoothly. Similarly, give low priority to many large file downloads so that they do not reduce the quality of other applications.
Page 180: The Queue Setup Screen
Select the check box to enable the queue. Name This shows the descriptive name of this queue. Interface This shows the name of the ZyXEL Device’s interface through which traffic in this queue passes. Priority This shows the priority of this queue.
Page 181: Add/Edit A Qos Queue
Weight Select the weight (from 1 to 15) of this queue. If two queues have the same priority level, the ZyXEL Device divides the bandwidth across the queues according to their weights. Queues with larger weights get more bandwidth than queues with smaller weights.
Page 182 (such as Telnet) to form a flow. You can give different priorities to traffic that the ZyXEL Device forwards out through the WAN interface. Give high priority to voice and video to make them run more smoothly.
Page 183: Add/Edit Qos Class
The following table describes the labels in this screen. Table 41 Class Setup: Add/Edit LABEL DESCRIPTION Class Configuration Active Select to enable this classifier. Class Name Enter a descriptive name of up to 32 printable English keyboard characters, including spaces. P-661HNU-Fx User’s Guide...
Page 184 This field is available only when you select the Ether Type check box in Criteria Configuration-Basic section. If you select Mark, enter a DSCP value with which the ZyXEL Device replaces the DSCP field in the packets. If you select Unchange, the ZyXEL Device keep the DSCP field in the packets.
Page 185 0 and 63 in the field provided. TCP ACK This field is available only when you select IP in the Ether Type field. If you select this option, the matched TCP packets must contain the ACK (Acknowledge) flag. P-661HNU-Fx User’s Guide...
Page 186: The Qos Monitor Screen
Click Back to return to the previous screen without saving. 10.5 The QoS Monitor Screen To view the ZyXEL Device’s QoS packet statistics, click Network Setting > QoS > Monitor. The screen appears as shown. Figure 75 Network Setting > QoS > Monitor...
Page 187: Qos Technical Reference
Table 42 Network Setting > QoS > Monitor LABEL DESCRIPTION Monitor Refresh Interval Select how often you want the ZyXEL Device to update this screen. Select No Refresh to stop refreshing statistics. Status This is the index number of the entry. Name This shows the name of the WAN interface on the ZyXEL Device.
Page 188 DiffServ network. Based on the marking rule, different kinds of traffic can be marked for different kinds of forwarding. Resources can then be allocated according to the DSCP values and the configured policies. P-661HNU-Fx User’s Guide...
Page 189: Network Address Translation (Nat)
The following terms and concepts may help as you read this chapter. Inside/Outside and Global/Local Inside/outside denotes where a host is located relative to the ZyXEL Device, for example, the computers of your subscribers are the inside hosts, while the web servers on the Internet are the outside hosts.
Page 190: The Port Forwarding Screen
Let's say you want to assign ports 21-25 to one FTP, Telnet and SMTP server (A in the example), port 80 to another (B in the example) and assign a default server IP address of 192.168.1.35 to a third (C in the example). You assign the LAN IP P-661HNU-Fx User’s Guide...
Page 191: The Port Forwarding Screen
This shows the WAN interface through which the service is forwarded. Start Port This is the first external port number that identifies a service. End Port This is the last external port number that identifies a service. P-661HNU-Fx User’s Guide...
Page 192: The Port Forwarding Edit Screen
Enter a name to identify this rule using keyboard characters (A-Z, a-z, 1- 2 and so on). WAN Interface Select the WAN interface through which the service is forwarded. You must have already configured a WAN connection with NAT enabled. P-661HNU-Fx User’s Guide...
Page 193: The Sessions Screen
External Start Port field above. Translation This shows the port number to which you want the ZyXEL Device to Start Port translate the incoming port. For a range of ports, enter the first number of the range to which you want the incoming ports translated.
Page 194: Technical Reference
11.4.1 NAT Definitions Inside/outside denotes where a host is located relative to the ZyXEL Device, for example, the computers of your subscribers are the inside hosts, while the web servers on the Internet are the outside hosts.
Page 195: What Nat Does
IP source address (and TCP or UDP source port numbers for Many-to-One and Many-to-Many Overload NAT mapping) in each packet and then forwards it to the Internet. The ZyXEL Device keeps track of the original addresses P-661HNU-Fx User’s Guide...
Page 196 Figure 80 How NAT Works NAT Table Inside Local Inside Global IP Address IP Address 192.168.1.10 IGA 1 192.168.1.13 192.168.1.11 IGA 2 192.168.1.12 IGA 3 192.168.1.13 IGA 4 192.168.1.12 192.168.1.10 IGA1 Inside Local Inside Global Address (ILA) Address (IGA) 192.168.1.11 192.168.1.10 P-661HNU-Fx User’s Guide...
Page 197: Dynamic Dns
Dynamic DNS 12.1 Overview This chapter discusses how to configure your ZyXEL Device to use Dynamic DNS. Dynamic DNS allows you to update your current dynamic IP address with one or many dynamic DNS services so that anyone can contact you (in applications such as NetMeeting and CU-SeeMe).
Page 198: The Dynamic Dns Screen
12.2 The Dynamic DNS Screen Use the Dynamic DNS screen to enable DDNS and configure the DDNS settings on the ZyXEL Device. To change your ZyXEL Device’s DDNS, click Network Setting > Dynamic DNS. The screen appears as shown. Figure 81 Network Setting > DNS The following table describes the fields in this screen.
Page 199: Firewall
H A P T E R Firewall 13.1 Overview Use the ZyXEL Device firewall screens to enable and configure the firewall that protects your ZyXEL Device and network from attacks by hackers on the Internet and control access to it. By default the firewall: •...
Page 200: What You Need To Know
It is designed to protect against Denial of Service (DoS) attacks when activated. The ZyXEL Device's purpose is to allow a private Local Area Network (LAN) to be securely connected to the Internet. The ZyXEL Device can be used to prevent theft, destruction and modification of data, as well as log events, which may be important to the security of your network.
Page 201: The General Screen
Chapter 13 Firewall 13.2 The General Screen Use this screen to enable or disable the ZyXEL Device’s firewall. Click Security > Firewall to open the General screen. Figure 83 Security > Firewall > General The following table describes the labels in this screen.
Page 202 Gnutella service. Select TCP type and enter a port range of 6345-6349. Click this to add the selected service in Available Services to the Blocked Services list. Note that the service is blocked immediately after clicking this. P-661HNU-Fx User’s Guide...
Page 203: Firewall Technical Reference
13.4.2 Security Considerations Note: Incorrectly configuring the firewall may block valid access or introduce security risks to the ZyXEL Device and your protected network. Use caution when creating or deleting firewall rules and test your rules after you configure them.
Page 204 Internet to the LAN, Internet users may be able to connect to computers with running FTP servers. Does this rule conflict with any existing rules? Once these questions have been answered, adding rules is simply a matter of entering the information into the correct fields in the web configurator screens. P-661HNU-Fx User’s Guide...
Page 205: Mac Filter
MAC Filter 14.1 Overview This chapter discusses MAC address filtering. You can configure the ZyXEL Device to permit access to clients based on their MAC addresses in the MAC Filter screen. This applies to wired and wireless connections. 14.1.1 What You Need to Know Every Ethernet device has a unique MAC (Media Access Control) address.
Page 206: The Mac Filter Screen
Chapter 14 MAC Filter 14.2 The MAC Filter Screen Use the MAC Filter screen to allow wireless clients access to the ZyXEL Device. To change your ZyXEL Device’s MAC filter settings, click Security > MAC Filter. The screen appears as shown.
Page 207: Certificates
• Use the Local Certificate screens to view and import the ZyXEL Device’s CA- signed certificates (Section 15.2 on page 210). • Use the Trusted CA screens to save the certificates of trusted CAs to the ZyXEL Device. You can also export the certificates to a computer (Section 15.2.1 on page 212).
Page 208 Certification Path A certification path is the hierarchy of certification authority certificates that validate a certificate. The ZyXEL Device does not trust a certificate if any certificate on its path has expired or been revoked. Certificate Directory Servers Certification authorities maintain directory servers with databases of valid and revoked certificates.
Page 209: Verifying A Certificate
15.1.3 Verifying a Certificate Before you import a trusted CA or trusted remote host certificate into the ZyXEL Device, you should verify that you have the actual certificate. This is especially true of trusted CA certificates since the ZyXEL Device also trusts any valid certificate signed by any of the imported trusted CA certificates.
Page 210: Local Certificates
Possible examples would be over the telephone or through an HTTPS connection. 15.2 Local Certificates Use this screen to view the ZyXEL Device’s summary list of certificates and certification requests. You can import the following certificates to your ZyXEL Device: •...
Page 211 Browse to find it. Browse Click Browse to find the certificate file you want to upload. Current File This field displays the name used to identify this certificate. It is recommended that you give each certificate a unique name. P-661HNU-Fx User’s Guide...
Page 212: Trusted Cas
Use this screen to view a summary list of certificates of the certification authorities that you have set the ZyXEL Device to accept as trusted. The ZyXEL Device accepts any valid certificate signed by a certification authority on this list as being trustworthy;...
Page 213: Trusted Ca Import
Use this screen to view in-depth information about the certification authority’s certificate, change the certificate’s name and set whether or not you want the ZyXEL Device to check a certification authority’s list of revoked certificates before trusting a certificate issued by the certification authority.
Page 214 (via floppy disk for example). Back Click this to return to the previous screen. P-661HNU-Fx User’s Guide...
Page 215: Vpn Certificates
DESCRIPTION Import Click this button to open a screen where you can save the certificate of Certificate a certification authority that you trust to the ZyXEL Device. Name This field displays the name used to identify this certificate. Subject This field displays information that identifies the owner of the certificate, such as Common Name (CN), OU (Organizational Unit or department), Organization (O), State (ST) and Country (C).
Page 216: Import Certificate
This is the key known only to the parties that exchange information. Write the key between BEGIN CERTIFICATE and END CERTIFICATE Apply Click Apply to save the certificate on the ZyXEL Device. Back Click Back to return to the previous screen.
Page 217: Vpn
(Section 16.2 on page 220) to view the configured VPN policies and add, edit or remove a VPN policy. • Use the Monitor screen (Section 16.5 on page 228) to display and manage the current active VPN connections. P-661HNU-Fx User’s Guide...
Page 218: What You Need To Know About Ipsec Vpn
Y established first. My IP Address My IP Address is the WAN IP address of the ZyXEL Device. The ZyXEL Device has to rebuild the VPN tunnel if My IP Address changes after setup. The following applies if this field is configured as 0.0.0.0: •...
Page 219: Before You Begin
Gateway Address field if the remote secure gateway has a dynamic WAN IP address and is using DDNS. The ZyXEL Device has to rebuild the VPN tunnel each time the remote secure gateway’s WAN IP address changes (there may be a delay until the DDNS servers are updated with the remote gateway’s new WAN IP...
Page 220: Vpn Setup Screen
VPN policy is active. No signifies that this VPN policy is not active. Tunnel Name This field displays the identification name for this VPN policy. Local Address This field will display the IP addres used by the ZyXEL Device. P-661HNU-Fx User’s Guide...
Page 221 Click the Edit icon to go to the screen where you can edit the VPN configuration. Click the Remove icon to remove an existing VPN configuration. Apply Click this to save your changes and apply them to the ZyXEL Device. Cancel Click this return your settings to their last saved values. P-661HNU-Fx User’s Guide...
Page 222: The Vpn Edit Screen
NAT Traversal Select this check box if you want to set up a VPN tunnel when there are NAT routers between the ZyXEL Device and remote IPSec router. The remote IPSec router must also enable NAT traversal, and the NAT routers have to forward UDP port 4500 packets to the remote IPSec router behind the NAT router.
Page 223 SAs connecting through a secure gateway must have the same negotiation mode. Local Specify the IP addresses of the devices behind the ZyXEL Device that can use the VPN tunnel. The local IP addresses must correspond to the remote IPSec router's configured remote IP addresses.
Page 224 When you select DNS or E-mail in the Local ID Type field, type a domain name or e-mail address by which to identify this ZyXEL Device in the local Content field. Use up to 31 ASCII characters including spaces, although trailing spaces are truncated.
Page 225 For IP, type the IP address of the computer with which you will make the VPN connection. If you configure this field to 0.0.0.0 or leave it blank, the ZyXEL Device will use the address in the Secure Gateway Address field (refer to the Secure Gateway Address field description).
Page 226: Configuring Advanced Settings
SHA1 algorithm is generally considered stronger than MD5, but is slower. Select MD5 for minimal security and SHA-1 for more security. SHA2-256 or SHA2-512 are part of the SHA2 set of cryptographic functions and they are considered even more secure than MD5 and SHA1. P-661HNU-Fx User’s Guide...
Page 227 Choose DH2, DH5 or DH14 from the drop-down list box to enable PFS. DH2 refers to Diffie-Hellman Group 2, a 1024-bit random number. DH5 refers to Diffie-Hellman Group5, a 1536-bit random number, and DH14 refers to Diffie-Hellman Group 14, providing 2048 bits of key strength. P-661HNU-Fx User’s Guide...
Page 228: Viewing Sa Monitor
IPSec router is there before it transmits data. The remote IPSec router must support DPD. If there has been no traffic for at least 15 seconds, the ZyXEL Device sends a message to the remote IPSec router. If the remote IPSec router responds, the ZyXEL Device transmits the data.
Page 229: Ipsec Vpn Technical Reference
(Authentication Header) protocol (RFC 2402) describe the packet formats and the default standards for packet structure (including implementation algorithms). The Encryption Algorithm describes the use of encryption techniques such as DES (Data Encryption Standard) and Triple DES algorithms. P-661HNU-Fx User’s Guide...
Page 230: Ipsec And Nat
VPN. 16.6.2 IPSec and NAT Read this section if you are running IPSec on a host computer behind the ZyXEL Device. NAT is incompatible with the AH protocol in both Transport and Tunnel mode.
Page 231: Vpn, Nat, And Nat Traversal
VPN device at the receiving end finds a mismatch between the hash value and the data and assumes that the data has been maliciously altered. NAT is not normally compatible with ESP in transport mode either, but the ZyXEL Device’s NAT Traversal feature provides a way to handle this. NAT traversal allows you to set up an IKE SA when there are NAT routers between the two IPSec routers.
Page 232: Encapsulation
Transport Tunnel Transport Tunnel Y* - This is supported in the ZyXEL Device if you enable NAT traversal. 16.6.4 Encapsulation The two modes of operation for IPSec VPNs are Transport mode and Tunnel mode. Figure 103 Transport and Tunnel Mode IPSec Encapsulation Tunnel Mode Tunnel mode encapsulates the entire IP packet to transmit it securely.
Page 233: Ike Phases
• Choose an authentication algorithm • Choose whether to enable Perfect Forward Secrecy (PFS) using Diffie-Hellman public-key cryptography – see Appendix D on page 335. Select None (the default) to disable PFS. • Choose Tunnel mode or Transport mode. P-661HNU-Fx User’s Guide...
Page 234: Negotiation Mode
The following figure depicts an example where three VPN tunnels are created from ZyXEL Device A; one to branch office 2, one to branch office 3 and another to headquarters. In order to access computers that use private domain names on the headquarters (HQ) network, the ZyXEL Device at branch office 1 uses the Intranet P-661HNU-Fx User’s Guide...
Page 235: Id Type And Content
(seeSection 16.6.11 on page 237 for a telecommuter configuration example). Regardless of the ID type and content configuration, the ZyXEL Device does not allow you to save multiple active rules with overlapping local and remote IP addresses. With main mode (seeSection 16.6.6 on page...
Page 236: Id Type And Content Examples
TYPE= Type the IP address of the computer with which you will make the VPN connection or leave the field blank to have the ZyXEL Device automatically use the address in the Secure Gateway Address field. Type a domain name (up to 31 characters) by which to identify the remote IPSec router.
Page 237: Pre-Shared Key
The two ZyXEL Devices in this example cannot complete their negotiation because ZyXEL Device B’s Local ID type is IP, but ZyXEL Device A’s Peer ID type is set to E-mail. An “ID mismatched” message displays in the IPSEC LOG.
Page 238: Telecommuters Sharing One Vpn Rule Example
Telecommuters can each use a separate VPN rule to simultaneously access a ZyXEL Device at headquarters. They can use different IPSec parameters. The local IP addresses (or ranges of addresses) of the rules configured on the ZyXEL Device P-661HNU-Fx User’s Guide...
Page 239 IPSec routers should not overlap. See the following table and figure for an example where three telecommuters each use a different VPN rule for a VPN connection with a ZyXEL Device located at headquarters. The ZyXEL Device at headquarters (HQ in the figure) identifies each incoming SA by its ID type and content and uses the appropriate VPN rule to establish the VPN connection.
Page 240 Chapter 16 VPN Table 68 Telecommuters Using Unique VPN Rules Example (continued) TELECOMMUTERS HEADQUARTERS Telecommuter B Headquarters ZyXEL Device Rule 2: (telecommuterb.dydns.org) Local ID Type: DNS Peer ID Type: DNS Local ID Content: telecommuterb.com Peer ID Content: telecommuterb.com Local IP Address: 192.168.3.2 Secure Gateway Address: telecommuterb.com...
Page 241: System Monitor
• Use the LAN screen to view the LAN traffic statistics (Section 17.3 on page 242). • Use the NAT screen to view the NAT status of the ZyXEL Device’s client(s) (Section 17.4 on page 243). • Use the 3G Backup screen to view the 3G connection traffic statistics (Section 17.5 on page...
Page 242: The Lan Status Screen
Status This shows the number of bytes received and sent through the WAN interface of the ZyXEL Device. Refresh Select how often you want the ZyXEL Device to update this screen from Interval the drop-down list box. Connected This shows the name of the WAN interface that is currently connected.
Page 243: The Nat Status Screen
The following table describes the fields in this screen. Table 70 System Monitor > Traffic Status > LAN LABEL DESCRIPTION Refresh Select how often you want the ZyXEL Device to update this screen from Interval the drop-down list box. Interface This shows the LAN or WLAN interface.
Page 244: The 3G Backup Status Screen
Status This shows the number of bytes received and sent through the 3G interface of the ZyXEL Device. Refresh Select how often you want the ZyXEL Device to update this screen from Interval the drop-down list box. Connected This shows the name of the 3G connection interface that is currently Interface connected.
Page 245: User Account
(*) for each character you type. After you change the password, use the new password to access the ZyXEL Device. Retype to Type the new password again for confirmation. Confirm P-661HNU-Fx User’s Guide...
Page 246 Chapter 18 User Account Table 73 Maintenance > User Account (continued) LABEL DESCRIPTION Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. P-661HNU-Fx User’s Guide...
Page 247: Remote Mgmt
H A P T E R Remote MGMT 19.1 Overview Remote MGMT allows you to manage your ZyXEL Device from a remote location through the following interfaces: • LAN and WLAN • WAN only Note: The ZyXEL Device is managed using the web configurator.
Page 248: The Remote Mgmt Screen
Chapter 19 Remote MGMT 19.2 The Remote MGMT Screen Use this screen to decide what services you may use to access which ZyXEL Device interface. Click Maintenance > Remote MGMT to open the following screen. Figure 113 Maintenance > Remote MGMT The following table describes the fields in this screen.
Page 249: System
Windows computer. In Windows XP, click start, My Computer, View system information and then click the Computer Name tab. Note the entry in the Full computer name field and enter it as the ZyXEL Device System Name. P-661HNU-Fx User’s Guide...
Page 250 (not recommended). Apply Click this to save your changes back to the ZyXEL Device. Cancel Click this to begin configuring this screen afresh. P-661HNU-Fx User’s Guide...
Page 251: Time Setting
21.2 The Time Setting Screen To change your ZyXEL Device’s time and date, click Maintenance > Time Setting. The screen appears as shown. Use this screen to configure the ZyXEL Device’s time based on your local time zone. Figure 115 Maintenance > Time Setting The following table describes the fields in this screen.
Page 252 Table 76 Maintenance > Time Setting (continued) LABEL DESCRIPTION Get from Time The ZyXEL Device get the time and date from the time server you Server specified below. Time Protocol This shows the time service protocol that your time server sends when you turn on the ZyXEL Device.
Page 253: Log Setting
H A P T E R Log Setting 22.1 Overview You can configure where the ZyXEL Device sends logs and which logs and/or immediate alerts the ZyXEL Device records in the Log Setting screen. 22.2 The Log Setting Screen To change your ZyXEL Device’s log settings, click Maintenance > Log Setting.
Page 254 Table 77 Maintenance > Log Setting LABEL DESCRIPTION Syslog The ZyXEL Device sends a log to an external syslog server. Select the Logging Enable check box to enable syslog logging. Syslog Server Enter the server name or IP address of the syslog server that will log the selected categories of logs.
Page 255: Firmware Upgrade
H A P T E R Firmware Upgrade 23.1 Overview This chapter explains how to upload new firmware to your ZyXEL Device. You can download new firmware releases from your nearest ZyXEL FTP site (or www.zyxel.com) to use to upgrade your device’s performance.
Page 256 After you see the firmware updating screen, wait two minutes before logging into the ZyXEL Device again. Figure 118 Firmware Uploading The ZyXEL Device automatically restarts in this time causing a temporary network disconnect. In some operating systems, you may see the following icon on your desktop.
Page 257: Backup/Restore
Backup Configuration Backup Configuration allows you to back up (save) the ZyXEL Device’s current configuration to a file on your computer. Once your ZyXEL Device is configured and functioning properly, it is highly recommended that you back up your configuration file before making configuration changes. The backup configuration file will be useful in case you need to return to your previous settings.
Page 258 Click this to begin the upload process. Reset Click this to reset your device settings back to the factory default. Do not turn off the ZyXEL Device while configuration file upload is in progress. After the ZyXEL Device configuration has been restored successfully, the login screen appears.
Page 259: The Reboot Screen
System restart allows you to reboot the ZyXEL Device remotely without turning the power off. You may need to do this if the ZyXEL Device hangs, for example. Click Maintenance > Reboot. Click the Reboot button to have the ZyXEL Device reboot.
Page 260 Chapter 24 Backup/Restore P-661HNU-Fx User’s Guide...
Page 261: Diagnostic
You can use different diagnostic methods to test a connection and see the detailed information. These read-only screens display information to help you identify problems with the ZyXEL Device. 25.1.1 What You Can Do in this Chapter • Use the Ping screen to ping an IP address and see the ping statistics (Section 25.2 on page...
Page 262: The Dsl Line Screen
Click Ping and the ping statistics will show in the diagnostic. 25.3 The DSL Line Screen Click Maintenance > Diagnostic > DSL Line to open the screen shown next. Figure 125 Maintenance > Diagnostic > DSL Line P-661HNU-Fx User’s Guide...
Page 263 Test The ZyXEL Device sends an OAM F5 packet to the DSLAM/ATM switch and then returns it (loops it back) to the ZyXEL Device. The ATM loopback test is useful for troubleshooting problems with the DSLAM and ATM network. P-661HNU-Fx User’s Guide...
Page 264 Status 1. noise margin downstream is the signal to noise ratio for the downstream part of the connection (coming into the ZyXEL Device from the ISP). It is measured in decibels. The higher the number the more signal and less noise there is.
Page 265: Troubleshooting
The ZyXEL Device does not turn on. None of the LEDs turn on. Make sure the ZyXEL Device is turned on. Make sure you are using the power adaptor or cord included with the ZyXEL Device. Make sure the power adaptor or cord is connected to the ZyXEL Device and plugged in to an appropriate power source.
Page 266: Zyxel Device Access And Login
If you changed the IP address and have forgotten it, you might get the IP address of the ZyXEL Device by looking up the IP address of the default gateway for your computer. To do this in most Windows computers, click Start > Run, enter cmd, and then enter ipconfig.
Page 267 Advanced Suggestions • Try to access the ZyXEL Device using another service, such as Telnet. If you can access the ZyXEL Device, check the remote management settings and firewall rules to find out why the ZyXEL Device does not respond to HTTP.
Page 268: Internet Access
LAN by the WPS/WLAN button or the Network Setting > Wireless > General screen. Turn the ZyXEL Device off. Disconnect all the cables from your device, and follow the directions in the Quick Start Guide again. If the problem continues, contact your ISP.
Page 269 Your WAN interface must enable VLAN and fill each WAN connection with different VLAN IDs. I cannot access the Internet anymore. I had access to the Internet (with the ZyXEL Device), but my Internet connection is not available anymore. Check the hardware connections, and make sure the LEDs are behaving as expected.
Page 270: Wireless Internet Access
Wireless security is vital to your network. It protects communications between wireless stations, access points and the wired network. The available security modes in your ZyXEL device are as follows: • WPA2-PSK: (recommended) This uses a pre-shared key with the WPA2 standard.
Page 271: Usb Device Connection
The USB device is properly connected, but I cannot see it when I open My Computer If the USB device is connected to the ZyXEL Device, it won’t be listed directly under My Computer in Windows. To access the USB device - see Section 3.5.2 on...
Page 272: Upnp
26.7 UPnP When using UPnP and the ZyXEL Device reboots, my computer cannot detect UPnP and refresh My Network Places > Local Network. Disconnect the Ethernet cable from the ZyXEL Device’s LAN port or from your computer. Re-connect the Ethernet cable.
Page 273: Product Specifications
H A P T E R Product Specifications The following tables summarize the ZyXEL Device’s hardware and firmware features. Hardware Specifications Table 82 Hardware Specifications Dimensions 260 (W) x 135 (D) x 42 (H) mm Weight 400 g Power Specification 12V 1.0A DC...
Page 274 Configuration Backup Make a copy of the ZyXEL Device’s configuration. You can put it & Restoration back on the ZyXEL Device later if you decide to revert back to an earlier configuration. Network Address Each computer on your network must have its own unique IP Translation (NAT) address.
Page 275 Chapter 27 Product Specifications Table 83 Firmware Specifications (continued) Logs Use logs for troubleshooting. You can send logs from the ZyXEL Device to an external syslog server. Universal Plug and A UPnP-enabled device can dynamically join a network, obtain an...
Page 276 CLI (Command Line Interpreter) Firmware upgrade via HTTP Configuration file extraction using CLI, SFTP, SCP and TR-069. Factory reset vis CLI, TR-069 and physical button Telnet for remote management Remote Firmware Upgrade Syslog TR-069, TR-064, TR-068v2, TR098, TR-106 P-661HNU-Fx User’s Guide...
Page 277: Wireless Features
Multiple SSID Multiple SSID allows the ZyXEL Device to operate up to 4 different wireless networks simultaneously, each with independently configurable wireless and security settings. MAC Address Filtering Your device can check the MAC addresses of clients against a list of allowed MAC addresses.
Page 278 Multiprotocol Encapsulation over ATM Adaptation Layer 5 RFC 1631 IP Network Address Translator (NAT) RFC 1661 The Point-to-Point Protocol (PPP) RFC 2236 Internet Group Management Protocol, Version 2 RFC 2516 A Method for Transmitting PPP Over Ethernet (PPPoE) P-661HNU-Fx User’s Guide...
Page 279: Wall-Mounting Instructions
DSL Forum LAN-Side DSL CPE Configuration 1.363.5 Compliant AAL5 SAR (Segmentation And Re-assembly) Wall-mounting Instructions Do the following to hang your ZyXEL Device on a wall. Note: See Table 82 on page 273 for the size of screws to use and how far apart to place them.
Page 280 Make sure the screws are snugly fastened to the wall. They need to hold the weight of the ZyXEL Device with the connection cables. Align the holes on the back of the ZyXEL Device with the screws on the wall. Hang the ZyXEL Device on the screws.
Page 281 Chapter 27 Product Specifications P-661HNU-Fx User’s Guide...
Page 282 Chapter 27 Product Specifications P-661HNU-Fx User’s Guide...
Page 283: Appendix A Ip Addresses And Subnetting
192.168.1.1). Each of these four parts is known as an octet. An octet is an eight-digit binary number (for example 11000000, which is 192 in decimal notation). Therefore, each octet has a possible range of 00000000 to 11111111 in binary, or 0 to 255 in decimal. P-661HNU-Fx User’s Guide...
Page 284: Subnet Masks
Table 86 IP Address Network Number and Host ID Example OCTET: OCTET: OCTET: OCTET (192) (168) IP Address (Binary) 11000000 10101000 00000001 00000010 Subnet Mask (Binary) 11111111 11111111 11111111 00000000 Network Number 11000000 10101000 00000001 Host ID 00000010 P-661HNU-Fx User’s Guide...
Page 285 MAXIMUM NUMBER OF SUBNET MASK HOST ID SIZE HOSTS 8 bits 255.0.0.0 24 bits – 2 16777214 16 bits 255.255.0.0 16 bits – 2 65534 24 bits 255.255.255.0 8 bits – 2 29 bits 255.255.255.248 3 bits – 2 P-661HNU-Fx User’s Guide...
Page 286 In this example, the company network address is 192.168.1.0. The first three octets of the address (192.168.1) are the network number, and the remaining octet is the host ID, allowing a maximum of 2 – 2 or 254 possible hosts. P-661HNU-Fx User’s Guide...
Page 287 You can “borrow” one of the host ID bits to divide the network 192.168.1.0 into two separate sub-networks. The subnet mask is now 25 bits (255.255.255.128 or /25). The “borrowed” host ID bit can have a value of either 0 or 1, allowing two subnets; 192.168.1.0 /25 and 192.168.1.128 /25. P-661HNU-Fx User’s Guide...
Page 288 Similarly, to divide a 24-bit address into four subnets, you need to “borrow” two host ID bits to give four possible combinations (00, 01, 10 and 11). The subnet mask is 26 bits (11111111.11111111.11111111.11000000) or 255.255.255.192. P-661HNU-Fx User’s Guide...
Page 289 Table 93 Subnet 4 LAST OCTET BIT IP/SUBNET MASK NETWORK NUMBER VALUE IP Address 192.168.1. IP Address (Binary) 11000000.10101000.00000001. 11000000 Subnet Mask (Binary) 11111111.11111111.11111111. 11000000 Subnet Address: Lowest Host ID: 192.168.1.193 192.168.1.192 Broadcast Address: Highest Host ID: 192.168.1.254 192.168.1.255 P-661HNU-Fx User’s Guide...
Page 290 The following table is a summary for subnet planning on a network with a 16-bit network number. Table 96 16-bit Network Number Subnet Planning NO. “BORROWED” NO. HOSTS PER SUBNET MASK NO. SUBNETS HOST BITS SUBNET 255.255.128.0 (/17) 32766 255.255.192.0 (/18) 16382 P-661HNU-Fx User’s Guide...
Page 291 You must also enable Network Address Translation (NAT) on the ZyXEL Device. Once you have decided on the network number, pick an IP address for your ZyXEL Device that is easy to remember (for instance, 192.168.1.1) but make sure that no other device on your network is using that IP address.
Page 292 A has a static (or fixed) IP address that is the same as the IP address that a DHCP server assigns to computer B which is a DHCP client. Neither can access the Internet. This problem can be solved by assigning a different static IP P-661HNU-Fx User’s Guide...
Page 293 Figure 132 Conflicting Computer IP Addresses Example Conflicting Computer and Router IP Addresses Example More than one device can not use the same IP address. In the following example, the computer and the router’s LAN port both use 192.168.1.1 as the IP address. P-661HNU-Fx User’s Guide...
Page 294 Appendix A IP Addresses and Subnetting The computer cannot access the Internet. This problem can be solved by assigning a different IP address to the computer or the router’s LAN port. Figure 133 Conflicting Computer and Router IP Addresses Example P-661HNU-Fx User’s Guide...
Page 295: Appendix B Setting Up Your Computer's Ip Address
P P E N D I X Setting Up Your Computer’s IP Address Note: Your specific ZyXEL Device may not support all of the operating systems described in this appendix. See the product specifications for more information about which operating systems are supported.
Page 296 Appendix B Setting Up Your Computer’s IP Address Click Start > Control Panel. Figure 134 Windows XP: Start Menu In the Control Panel, click the Network Connections icon. Figure 135 Windows XP: Control Panel P-661HNU-Fx User’s Guide...
Page 297 Right-click Local Area Connection and then select Properties. Figure 136 Windows XP: Control Panel > Network Connections > Properties On the General tab, select Internet Protocol (TCP/IP) and then click Properties. Figure 137 Windows XP: Local Area Connection Properties P-661HNU-Fx User’s Guide...
Page 298 DNS server and an Alternate DNS server, if that information was provided. Click OK to close the Internet Protocol (TCP/IP) Properties window. Click OK to close the Local Area Connection Properties window. Verifying Settings Click Start > All Programs > Accessories > Command Prompt. P-661HNU-Fx User’s Guide...
Page 299: Windows Vista
Windows Vista This section shows screens from Windows Vista Professional. Click Start > Control Panel. Figure 139 Windows Vista: Start Menu In the Control Panel, click the Network and Internet icon. Figure 140 Windows Vista: Control Panel P-661HNU-Fx User’s Guide...
Page 300 Figure 142 Windows Vista: Network and Sharing Center Right-click Local Area Connection and then select Properties. Figure 143 Windows Vista: Network and Sharing Center Note: During this procedure, click Continue whenever Windows displays a screen saying that it needs your permission to continue. P-661HNU-Fx User’s Guide...
Page 301 Appendix B Setting Up Your Computer’s IP Address Select Internet Protocol Version 4 (TCP/IPv4) and then select Properties. Figure 144 Windows Vista: Local Area Connection Properties P-661HNU-Fx User’s Guide...
Page 302 DNS server and an Alternate DNS server, if that information was provided.Click Advanced. Click OK to close the Internet Protocol (TCP/IP) Properties window. 10 Click OK to close the Local Area Connection Properties window. Verifying Settings Click Start > All Programs > Accessories > Command Prompt. P-661HNU-Fx User’s Guide...
Page 303 This section shows screens from Windows 7 Enterprise. Click Start > Control Panel. Figure 146 Windows 7: Start Menu In the Control Panel, click View network status and tasks under the Network and Internet category. Figure 147 Windows 7: Control Panel P-661HNU-Fx User’s Guide...
Page 304 Figure 148 Windows 7: Network And Sharing Center Double click Local Area Connection and then select Properties. Figure 149 Windows 7: Local Area Connection Status Note: During this procedure, click Continue whenever Windows displays a screen saying that it needs your permission to continue. P-661HNU-Fx User’s Guide...
Page 305 Appendix B Setting Up Your Computer’s IP Address Select Internet Protocol Version 4 (TCP/IPv4) and then select Properties. Figure 150 Windows 7: Local Area Connection Properties P-661HNU-Fx User’s Guide...
Page 306 Click OK to close the Internet Protocol (TCP/IP) Properties window. Click OK to close the Local Area Connection Properties window. Verifying Settings Click Start > All Programs > Accessories > Command Prompt. In the Command Prompt window, type "ipconfig" and then press [ENTER]. P-661HNU-Fx User’s Guide...
Page 307 Figure 152 Windows 7: Internet Protocol Version 4 (TCP/IPv4) Properties Mac OS X: 10.3 and 10.4 The screens in this section are from Mac OS X 10.4 but can also apply to 10.3. Click Apple > System Preferences. Figure 153 Mac OS X 10.4: Apple Menu P-661HNU-Fx User’s Guide...
Page 308 In the System Preferences window, click the Network icon. Figure 154 Mac OS X 10.4: System Preferences When the Network preferences pane opens, select Built-in Ethernet from the network connection type list, and then click Configure. Figure 155 Mac OS X 10.4: Network Preferences P-661HNU-Fx User’s Guide...
Page 309 Figure 156 Mac OS X 10.4: Network Preferences > TCP/IP Tab. For statically assigned settings, do the following: • From the Configure IPv4 list, select Manually. • In the IP Address field, type your IP address. • In the Subnet Mask field, type your subnet mask. P-661HNU-Fx User’s Guide...
Page 310 Click Apply Now and close the window. Verifying Settings Check your TCP/IP properties by clicking Applications > Utilities > Network Utilities, and then selecting the appropriate Network Interface from the Info tab. Figure 158 Mac OS X 10.4: Network Utility P-661HNU-Fx User’s Guide...
Page 311 The screens in this section are from Mac OS X 10.5. Click Apple > System Preferences. Figure 159 Mac OS X 10.5: Apple Menu In System Preferences, click the Network icon. Figure 160 Mac OS X 10.5: Systems Preferences P-661HNU-Fx User’s Guide...
Page 312 From the Configure list, select Using DHCP for dynamically assigned settings. For statically assigned settings, do the following: • From the Configure list, select Manually. • In the IP Address field, enter your IP address. • In the Subnet Mask field, enter your subnet mask. P-661HNU-Fx User’s Guide...
Page 313 Appendix B Setting Up Your Computer’s IP Address • In the Router field, enter the IP address of your ZyXEL Device. Figure 162 Mac OS X 10.5: Network Preferences > Ethernet Click Apply and close the window. P-661HNU-Fx User’s Guide...
Page 314 The following screens use the default Ubuntu 8 installation. Note: Make sure you are logged in as the root administrator. Follow the steps below to configure your computer IP address in GNOME: P-661HNU-Fx User’s Guide...
Page 315 When the Network Settings window opens, click Unlock to open the Authenticate window. (By default, the Unlock button is greyed out until clicked.) You cannot make changes to your configuration unless you first enter your admin password. Figure 165 Ubuntu 8: Network Settings > Connections P-661HNU-Fx User’s Guide...
Page 316 In the Authenticate window, enter your admin account name and password then click the Authenticate button. Figure 166 Ubuntu 8: Administrator Account Authentication In the Network Settings window, select the connection that you want to configure, then click Properties. Figure 167 Ubuntu 8: Network Settings > Connections P-661HNU-Fx User’s Guide...
Page 317 • In the Configuration list, select Static IP address if you have a static IP address. Fill in the IP address, Subnet mask, and Gateway address fields. Click OK to save the changes and close the Properties dialog box and return to the Network Settings screen. P-661HNU-Fx User’s Guide...
Page 318 Figure 169 Ubuntu 8: Network Settings > DNS Click the Close button to apply the changes. Verifying Settings Check your TCP/IP properties by clicking System > Administration > Network Tools, and then selecting the appropriate Network device from the Devices P-661HNU-Fx User’s Guide...
Page 319 The following screens use the default openSUSE 10.3 installation. Note: Make sure you are logged in as the root administrator. Follow the steps below to configure your computer IP address in the KDE: P-661HNU-Fx User’s Guide...
Page 320 Click K Menu > Computer > Administrator Settings (YaST). Figure 171 openSUSE 10.3: K Menu > Computer Menu When the Run as Root - KDE su dialog opens, enter the admin password and click OK. Figure 172 openSUSE 10.3: K Menu > Computer Menu P-661HNU-Fx User’s Guide...
Page 321 Figure 173 openSUSE 10.3: YaST Control Center When the Network Settings window opens, click the Overview tab, select the appropriate connection Name from the list, and then click the Configure button. Figure 174 openSUSE 10.3: Network Settings P-661HNU-Fx User’s Guide...
Page 322 Select Dynamic Address (DHCP) if you have a dynamic IP address. Select Statically assigned IP Address if you have a static IP address. Fill in the IP address, Subnet mask, and Hostname fields. Click Next to save the changes and close the Network Card Setup window. P-661HNU-Fx User’s Guide...
Page 323 If you know your DNS server IP address(es), click the Hostname/DNS tab in Network Settings and then enter the DNS server information in the fields provided. Figure 176 openSUSE 10.3: Network Settings Click Finish to save your settings and close the window. P-661HNU-Fx User’s Guide...
Page 324 From the Options sub-menu, select Show Connection Information. Figure 177 openSUSE 10.3: KNetwork Manager When the Connection Status - KNetwork Manager window opens, click the Statistics tab to see if your connection is working properly. Figure 178 openSUSE: Connection Status - KNetwork Manager P-661HNU-Fx User’s Guide...
Page 325: Appendix C Pop-Up Windows, Java Script And Java Permissions
Disable Pop-up Blockers In Internet Explorer, select Tools, Pop-up Blocker and then select Turn Off Pop-up Blocker. Figure 179 Pop-up Blocker You can also check if pop-up blocking is disabled in the Pop-up Blocker section in the Privacy tab. P-661HNU-Fx User’s Guide...
Page 326 Click Apply to save this setting. Enable Pop-up Blockers with Exceptions Alternatively, if you only want to allow pop-up windows from your device, see the following steps. In Internet Explorer, select Tools, Internet Options and then the Privacy tab. P-661HNU-Fx User’s Guide...
Page 327 Select Settings…to open the Pop-up Blocker Settings screen. Figure 181 Internet Options: Privacy Type the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”. For example, http://192.168.167.1. P-661HNU-Fx User’s Guide...
Page 328 Figure 182 Pop-up Blocker Settings Click Close to return to the Privacy screen. Click Apply to save this setting. JavaScript If pages of the web configurator do not display properly in Internet Explorer, check that JavaScript are allowed. P-661HNU-Fx User’s Guide...
Page 329 Figure 183 Internet Options: Security Click the Custom Level... button. Scroll down to Scripting. Under Active scripting make sure that Enable is selected (the default). Under Scripting of Java applets make sure that Enable is selected (the default). P-661HNU-Fx User’s Guide...
Page 330: Java Permissions
Figure 184 Security Settings - Java Scripting Java Permissions From Internet Explorer, click Tools, Internet Options and then the Security tab. Click the Custom Level... button. Scroll down to Microsoft VM. Under Java permissions make sure that a safety level is selected. P-661HNU-Fx User’s Guide...
Page 331 Click OK to close the window. Figure 185 Security Settings - Java JAVA (Sun) From Internet Explorer, click Tools, Internet Options and then the Advanced tab. Make sure that Use Java 2 for <applet> under Java (Sun) is selected. P-661HNU-Fx User’s Guide...
Page 332 Mozilla Firefox 2.0 screens are used here. Screens for other versions may vary. You can enable Java, JavaScript and pop-ups in one screen. Click Tools, then click Options in the screen that appears. Figure 187 Mozilla Firefox: Tools > Options P-661HNU-Fx User’s Guide...
Page 333 Appendix C Pop-up Windows, Java Script and Java Permissions Click Content.to show the screen below. Select the check boxes as shown in the following screen. Figure 188 Mozilla Firefox Content Security P-661HNU-Fx User’s Guide...
Page 334 Appendix C Pop-up Windows, Java Script and Java Permissions P-661HNU-Fx User’s Guide...
Page 335: Appendix D Wireless Lans
(AP). Intra-BSS traffic is traffic between wireless clients in the BSS. When Intra-BSS is enabled, wireless client A and B can access the wired network and communicate P-661HNU-Fx User’s Guide...
Page 336 This wired connection between APs is called a Distribution System (DS). This type of wireless LAN topology is called an Infrastructure WLAN. The Access Points not only provide communication with the wired network but also mediate wireless network traffic in the immediate neighborhood. P-661HNU-Fx User’s Guide...
Page 337 A hidden node occurs when two stations are within range of the same access point, but are not within range of each other. The following figure illustrates a hidden node. Both stations (STA) are within range of the access point (AP) or P-661HNU-Fx User’s Guide...
Page 338 RTS (Request To Send)/CTS (Clear to Send) handshake will never occur as data frames will be fragmented before they reach RTS/CTS size. Note: Enabling the RTS Threshold causes redundant network overhead that could negatively affect the throughput performance instead of providing a remedy. P-661HNU-Fx User’s Guide...
Page 339: Fragmentation Threshold
Use the dynamic setting to automatically use short preamble when all wireless devices on the network support it, otherwise the ZyXEL Device uses long preamble. Note: The wireless devices MUST use the same preamble mode in order to communicate.
Page 340 IEEE802.1x EAP with RADIUS Server Authentication Wi-Fi Protected Access (WPA) WPA2 Most Secure Note: You must enable the same wireless security settings on the ZyXEL Device and on all wireless clients that you want to associate with it. P-661HNU-Fx User’s Guide...
Page 341 The following types of RADIUS messages are exchanged between the access point and the RADIUS server for user authentication: • Access-Request Sent by an access point requesting authentication. • Access-Reject Sent by a RADIUS server rejecting access. • Access-Accept Sent by a RADIUS server allowing access. P-661HNU-Fx User’s Guide...
Page 342 The wireless client ‘proves’ that it knows the password by encrypting the password with the challenge and sends back the information. Password is not sent in plain text. P-661HNU-Fx User’s Guide...
Page 343 However, PEAP only supports EAP methods, such as EAP-MD5, EAP-MSCHAPv2 and EAP-GTC (EAP-Generic Token Card), for client authentication. EAP-GTC is implemented only by Cisco. LEAP LEAP (Lightweight Extensible Authentication Protocol) is a Cisco implementation of IEEE 802.1x. P-661HNU-Fx User’s Guide...
Page 344: Dynamic Wep Key Exchange
RADIUS server, you should use WPA2-PSK (WPA2-Pre-Shared Key) that only requires a single (identical) password entered into each access point, wireless gateway and wireless client. As long as the passwords match, a wireless client will be granted access to a WLAN. P-661HNU-Fx User’s Guide...
Page 345 The common-password approach makes WPA(2)-PSK susceptible to brute-force password-guessing attacks but it’s still an improvement over WEP as it employs a consistent, single, alphanumeric password to derive a PMK which is used to generate unique temporal encryption P-661HNU-Fx User’s Guide...
Page 346 The RADIUS server then checks the user's identification against its database and grants or denies network access accordingly. A 256-bit Pairwise Master Key (PMK) is derived from the authentication process by the RADIUS server and the client. P-661HNU-Fx User’s Guide...
Page 347 The AP checks each wireless client's password and allows it to join the network only if the password matches. The AP and wireless clients generate a common PMK (Pairwise Master Key). The key itself is not sent over the network, but is derived from the PSK and the SSID. P-661HNU-Fx User’s Guide...
Page 348: Security Parameters Summary
Enable without Dynamic WEP Open Enable with Dynamic WEP Key Enable without Dynamic WEP Disable Shared Enable with Dynamic WEP Key Enable without Dynamic WEP Disable TKIP/AES Enable WPA-PSK TKIP/AES Disable WPA2 TKIP/AES Enable WPA2-PSK TKIP/AES Disable P-661HNU-Fx User’s Guide...
Page 349: Antenna Characteristics
Types of Antennas for WLAN There are two types of antennas used for wireless LAN applications. P-661HNU-Fx User’s Guide...
Page 350 For directional antennas, point the antenna in the direction of the desired coverage area. WiFi Protected Setup Your ZyXEL Device supports WiFi Protected Setup (WPS), which is an easy way to set up a secure wireless network. WPS is an industry standard specification, defined by the WiFi Alliance.
Page 351 Look for a WPS button on each device. If the device does not have one, log into its configuration utility and locate the button (see the device’s User’s Guide for how to do this - for the ZyXEL Device, see Section 6.4 on page 123).
Page 352 PIN. Select the PIN connection mode (not PBC connection mode). See the device’s User’s Guide for how to do this - for the ZyXEL Device, see Section 6.4 on page 123.
Page 353 Authentication Protocol) tunnel and sends the network name (SSID) and the WPA- PSK or WPA2-PSK pre-shared key to the enrollee. Whether WPA-PSK or WPA2-PSK is used depends on the standards supported by the devices. If the registrar is P-661HNU-Fx User’s Guide...
Page 354 WPS, it becomes “configured”. A configured wireless client can still act as enrollee or registrar in subsequent WPS connections, but a configured access point can no longer act as enrollee. It will be the registrar in all P-661HNU-Fx User’s Guide...
Page 355 In this case, AP1 must be the registrar, since it is configured (it already has security information for the network). AP1 supplies the existing security information to Client 2. Figure 198 WPS: Example Network Step 2 REGISTRAR EXISTING CONNECTION CLIENT 1 ENROLLEE CLIENT 2 P-661HNU-Fx User’s Guide...
Page 356 (if the device supports this feature). Then, you can enter the key into the non-WPS device and join the network as normal (the non-WPS device must also support WPA-PSK or WPA2-PSK). P-661HNU-Fx User’s Guide...
Page 357 Check the MAC addresses of your wireless clients (usually printed on a label on the bottom of the device). If there is an unknown MAC address you can remove it or reset the AP. P-661HNU-Fx User’s Guide...
Page 358 Appendix D Wireless LANs P-661HNU-Fx User’s Guide...
Page 359: Appendix E Common Services
Border Gateway Protocol. BOOTP_CLIENT DHCP Client. BOOTP_SERVER DHCP Server. CU-SEEME 7648 A popular videoconferencing solution from White Pines Software. 24032 TCP/UDP Domain Name Server, a service that matches web names (for example www.zyxel.com) to IP numbers. P-661HNU-Fx User’s Guide...
Page 360 ICMP echo requests to test whether or not a remote host is reachable. POP3 Post Office Protocol version 3 lets a client computer get e-mail from a POP3 server through a temporary connection (TCP/IP or other). P-661HNU-Fx User’s Guide...
Page 361 Access Controller Access Control System). TELNET Telnet is the login and terminal emulation protocol common on the Internet and in UNIX environments. It operates over TCP/IP networks. Its primary function is to allow users to log into remote host systems. P-661HNU-Fx User’s Guide...
Page 362 Table 101 Commonly Used Services (continued) NAME PROTOCOL PORT(S) DESCRIPTION TFTP Trivial File Transfer Protocol is an Internet file transfer protocol similar to FTP, but uses the UDP (User Datagram Protocol) rather than TCP (Transmission Control Protocol). VDOLIVE 7000 Another videoconferencing solution. P-661HNU-Fx User’s Guide...
Page 363: Appendix F Open Software Announcements
CAREFULLY BEFORE COMPLETING THE INSTALLATION PROCESS AS INSTALLING THE SOFTWARE WILL INDICATE YOUR ASSENT TO THEM. IF YOU DO NOT AGREE TO THESE TERMS, THEN ZyXEL IS UNWILLING TO LICENSE THE SOFTWARE TO YOU, IN WHICH EVENT YOU SHOULD RETURN THE UNINSTALLED SOFTWARE AND PACKAGING TO THE PLACE FROM WHICH IT WAS ACQUIRED OR ZyXEL, AND YOUR MONEY WILL BE REFUNDED.
Page 364 Software as long as this License Agreement remains in full force and effect. Ownership of the Software, Documentation and all intellectual property rights therein shall remain at all times with ZyXEL. Any other use of the Software by any other entity is strictly forbidden and is a violation of this License Agreement.
Page 365 ZyXEL has provided, as part of the Software package, access to certain third party software as a convenience. To the extent...
Page 366 SOFTWARE, AND NO WARRANTIES SHALL APPLY AFTER THAT PERIOD. 7.Limitation of Liability IN NO EVENT WILL ZyXEL BE LIABLE TO YOU OR ANY THIRD PARTY FOR ANY INCIDENTAL OR CONSEQUENTIAL DAMAGES (INCLUDING, WITHOUT LIMITATION, INDIRECT, SPECIAL, PUNITIVE, OR EXEMPLARY DAMAGES FOR LOSS OF...
Page 367 Software and Documentation in your possession or under your control. ZyXEL may terminate this License Agreement for any reason, including, but not limited to, if ZyXEL finds that you have violated any of the terms of this License Agreement. Upon notification of termination, you agree to destroy or return to ZyXEL all copies of the Software and Documentation and to certify in writing that all known copies, including backup copies, have been destroyed.
Page 368 For at least three (3) years from the date of distribution of the applicable product or software, we will give to anyone who contacts us at the ZyXEL Technical Support (support@zyxel.com.tw), for a charge of no more than our cost of physically performing source code distribution, a complete machine-readable copy of the complete corresponding source code for the version of the Programs that we distributed to you if we are in possession of such.
Page 369 Also, for each author's protection and ours, we want to make certain that everyone understands that there is no warranty for this free software. If the P-661HNU-Fx User’s Guide...
Page 370 Program a copy of this License along with the Program. You may charge a fee for the physical act of transferring a copy, and you may at your option offer warranty protection in exchange for a fee. P-661HNU-Fx User’s Guide...
Page 371 Program with the Program (or with a work based on the Program) on a volume of a storage or distribution medium does not bring the other work under the scope of this License. P-661HNU-Fx User’s Guide...
Page 372 Program is void, and will automatically terminate your rights under this License. However, parties who have received copies, or rights, from you under this License will not have their licenses terminated so long as such parties remain in full compliance. P-661HNU-Fx User’s Guide...
Page 373 This section is intended to make thoroughly clear what is believed to be a consequence of the rest of this License. P-661HNU-Fx User’s Guide...
Page 374 THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION. P-661HNU-Fx User’s Guide...
Page 375 MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THEAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHERLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,OUT OF OR IN P-661HNU-Fx User’s Guide...
Page 376 CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY P-661HNU-Fx User’s Guide...
Page 377 THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A P-661HNU-Fx User’s Guide...
Page 378 Lesser GPL. It also counts as the successor of the GNU Library Public License, version 2, hence the version number 2.1. Preamble The licenses for most software are designed to take away your freedom to share and change it. By contrast, the GNU General Public Licenses are intended to P-661HNU-Fx User’s Guide...
Page 379 Also, if the library is modified by someone else and passed on, the recipients should know that what they have is not the original version, so that the original author's reputation will not be affected by problems that might be introduced by others. P-661HNU-Fx User’s Guide...
Page 380 For example, permission to use the GNU C Library in non-free programs enables many more people to use the whole GNU operating system, as well as its variant, the GNU/Linux operating system. P-661HNU-Fx User’s Guide...
Page 381 Activities other than copying, distribution and modification are not covered by this License; they are outside its scope. The act of running a program using the Library is not P-661HNU-Fx User’s Guide...
Page 382 Library, the distribution of the whole must be on the terms of this License, whose permissions for other licensees extend to the entire whole, and thus to each and every part regardless of who P-661HNU-Fx User’s Guide...
Page 383 Library (because it contains portions of the Library), rather than a "work that uses the library". The executable is therefore covered by this License. Section 6 states terms for distribution of such P-661HNU-Fx User’s Guide...
Page 384 Library. A suitable mechanism is one that (1) uses at run time a copy of the library already present on the user's computer system, rather than copying library functions into the executable, and (2) will operate properly with a modified P-661HNU-Fx User’s Guide...
Page 385 8. You may not copy, modify, sublicense, link with, or distribute the Library except as expressly provided under this License. Any attempt otherwise to copy, modify, sublicense, link with, or distribute the Library is void, and will automatically terminate your rights under this License. However, parties who have received P-661HNU-Fx User’s Guide...
Page 386 Many people have made generous contributions to the wide range of software distributed through that system in reliance on consistent application of that system; it is up to the author/donor to decide if he or she is P-661HNU-Fx User’s Guide...
Page 387 OR OTHER PARTIES PROVIDE THE LIBRARY "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE P-661HNU-Fx User’s Guide...
Page 388 1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. 2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. P-661HNU-Fx User’s Guide...
Page 389 PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. P-661HNU-Fx User’s Guide...
Page 390 Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: 1. Redistributions of source code must retain the copyright notice, this list of conditions and the following disclaimer. P-661HNU-Fx User’s Guide...
Page 391 SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. The licence and distribution terms for any publically available version or derivative of this code cannot be changed. i.e. this code cannot simply be copied and put under another distribution licence [including the GNU Public Licence.] P-661HNU-Fx User’s Guide...
Page 392 Appendix F Open Software Announcements P-661HNU-Fx User’s Guide...
Page 393: Legal Information
ZyXEL further reserves the right to make changes in any products described herein without notice. This publication is subject to change without notice. Your use of the ZyXEL Device is subject to the terms and conditions of any related service providers. Certifications Federal Communications Commission (FCC) Interference Statement The device complies with Part 15 of FCC rules.
Page 394 • Simultaneous transmission by using the 3g dongle is intended for this device. • IEEE 802.11b or 802.11g or 802.11n(20MHz) operation of this product in the U.S.A. is firmware-limited to channels 1 through 11. IEEE 802.11n(40MHz) operation of this product in the U.S.A. is firmware-limited to channels 3 through P-661HNU-Fx User’s Guide...
Page 395: Zyxel Limited Warranty
2454 MHz et 2483,5 MHz. Viewing Certifications Go to http://www.zyxel.com. Select your product on the ZyXEL home page to go to that product's page. Select the certification you wish to view from this page. ZyXEL Limited Warranty...
Page 396 This warranty is in lieu of all other warranties, express or implied, including any implied warranty of merchantability or fitness for a particular use or purpose. ZyXEL shall in no event be held liable for indirect or consequential damages of any kind to the purchaser.
Page 397 CTS (Clear to Send) CTS threshold backup configuration bandwidth management Basic Service Set, see BSS blinking LEDs data fragment threshold Broadband default LAN IP address broadcast Denial of Service, see DoS 131, 335 example P-661HNU-Fx User’s Guide...
Page 398 Extended Service Set IDentification 114, 122 initialization vector (IV) Extended Service Set, see ESS inside header external antenna install UPnP Windows Me Windows XP intended audience Internet access Internet Assigned Numbers Authority File Sharing See IANA file sharing P-661HNU-Fx User’s Guide...
Page 399 Local Area Network, see LAN Network Address Translation, see NAT login network map passwords logout automatic logs 241, 253 operation humidity operation temperature outside header 83, 205 MAC address filter MAC address filtering P-661HNU-Fx User’s Guide...
Page 400 VPN security, network service access control Service Set 114, 122 SSID activation 177, 178, 187 MBSSID Quality of Service, see QoS stateful inspection Quick Start Guide static route status status indicators storage humidity storage temperature RADIUS P-661HNU-Fx User’s Guide...
Page 401 Universal Plug and Play, see UPnP security tutorial upgrading firmware wireless client WPA supplicants UPnP forum wireless LAN security issues authentication 128, 130 USB features example USB printer channel encryption example fragmentation threshold limitations P-661HNU-Fx User’s Guide...
Page 402 WPA-PSK wireless client supplicant with RADIUS application example WPA2 user authentication vs WPA2-PSK wireless client supplicant with RADIUS application example WPA2-Pre-Shared Key, see WPA2-PSK WPA2-PSK 344, 345 application example WPA-PSK 131, 345 application example 132, 135 example P-661HNU-Fx User’s Guide...
Page 403 Index P-661HNU-Fx User’s Guide...
Page 404 Index P-661HNU-Fx User’s Guide...

This manual is also suitable for:

P-661h-61 P-661h-63 P-661h-d1 P-661h-d3 P-661hnu-f1 P-661hnu-fx

ZyXEL Communications P-661HNU Manual

About this User's Guide

Document Conventions

Safety Warnings

Contents Overview

Table of Contents

User's Guide

PART I User's Guide

Chapter 1 Introduction

Chapter 2 Introducing the Web Configurator

Chapter 3 Tutorials

Technical Reference

Part II: Technical Reference

Chapter 4 Connection Status and System Info Screens

Chapter 5 Broadband

Chapter 6 Wireless

Chapter 7 Home Networking

Chapter 8 Routing

Chapter 9 DNS Route

Chapter 10 Quality of Service (Qos)

Chapter 11 Network Address Translation (NAT)

Chapter 12 Dynamic DNS

Chapter 13 Firewall

Chapter 14 MAC Filter

Chapter 15 Certificates

Chapter 16 VPN

Chapter 17 System Monitor

Chapter 18 User Account

Chapter 19 Remote MGMT

Chapter 20 System

Chapter 21 Time Setting

Chapter 22 Log Setting

Chapter 23 Firmware Upgrade

Chapter 24 Backup/Restore

Chapter 25 Diagnostic

Chapter 26 Troubleshooting

Chapter 27 Product Specifications

Appendix A IP Addresses and Subnetting

Appendix B Setting up Your Computer's IP Address

Appendix C Pop-Up Windows, Java Script and Java Permissions

Appendix D Wireless Lans

Appendix E Common Services

Appendix F Open Software Announcements

Quick Links

Related Manuals for ZyXEL Communications P-661HNU

Summary of Contents for ZyXEL Communications P-661HNU