Page 1 P-334WH 802.11g High Power Wireless Router User’s Guide Version 3.60 Edition 1 8/2006...
Page 3: Copyright
Published by ZyXEL Communications Corporation. All rights reserved. Disclaimer ZyXEL does not assume any liability arising out of the application or use of any products, or software described herein. Neither does it convey any license under its patent rights nor the patent rights of others.
Page 4: Certifications
P-334WH User’s Guide Certifications Federal Communications Commission (FCC) Interference Statement The device complies with Part 15 of FCC rules. Operation is subject to the following two conditions: • This device may not cause harmful interference. • This device must accept any interference received, including interference that may cause undesired operations.
Page 5 Cet appareil numérique de la classe B est conforme à la norme NMB-003 du Canada. Viewing Certifications 1 Go to http://www.zyxel.com. 2 Select your product from the drop-down list box on the ZyXEL home page to go to that product's page. 3 Select the certification you wish to view from this page.
Page 6: Safety Warnings
P-334WH User’s Guide Safety Warnings For your safety, be sure to read and follow all warning notices and instructions. • Do NOT use this product near water, for example, in a wet basement or near a swimming pool. • Do NOT expose your device to dampness, dust or corrosive liquids.
Page 7 P-334WH User’s Guide This product is recyclable. Dispose of it properly. Safety Warnings...
Page 8: Zyxel Limited Warranty
Any replacement will consist of a new or re-manufactured functionally equivalent product of equal or higher value, and will be solely at the discretion of ZyXEL. This warranty shall not apply if the product has been modified, misused, tampered with, damaged by an act of God, or subjected to abnormal working conditions.
Page 9: Customer Support
P-334WH User’s Guide Customer Support Please have the following information ready when you contact customer support. • Product model and serial number. • Warranty Information. • Date that you received your device. • Brief description of the problem and the steps you took to solve it.
Page 10 P-334WH User’s Guide METHOD SUPPORT E-MAIL TELEPHONE WEB SITE REGULAR MAIL SALES E-MAIL FTP SITE LOCATION support@zyxel.no +47-22-80-61-80 www.zyxel.no ZyXEL Communications A/S Nils Hansens vei 13 NORWAY sales@zyxel.no +47-22-80-61-81 0667 Oslo Norway info@pl.zyxel.com +48 (22) 333 8250 www.pl.zyxel.com ZyXEL Communications ul.
Page 11: Table Of Contents
ZyXEL Limited Warranty..................8 Customer Support....................9 Table of Contents ....................11 Preface ........................27 Chapter 1 Getting to Know Your ZyXEL Device..............29 1.1 ZyXEL Device Overview ..................29 1.2 ZyXEL Device Features ..................29 1.2.1 Physical Features ..................29 1.2.2 Non-Physical Features ................30 1.2.3 Wireless Features ..................32...
Page 12 P-334WH User’s Guide 2.4.4 Navigation Panel ..................46 2.4.5 Summary: Bandwidth Management Monitor ...........49 2.4.6 Summary: DHCP Table ................50 2.4.7 Summary: Packet Statistics ..............50 2.4.8 Summary: Wireless Station Status ............51 Chapter 3 Connection Wizard....................53 3.1 Wizard Setup ......................53 3.2 Connection Wizard: STEP 1: System Information ..........54 3.2.1 System Name ...................54...
Page 13 P-334WH User’s Guide Chapter 5 Wireless Tutorial..................... 83 5.1 Example Parameters ..................83 5.2 Configuring the AP .....................83 5.3 Configuring the Wireless Client ................85 5.3.1 Connecting to a Wireless LAN ..............86 5.3.2 Creating and Using a Profile ..............88 Chapter 6 WAN......................... 93 6.1 WAN Overview ....................93...
Page 14 12.1 Introduction to Firewall .................135 12.1.1 What is a Firewall? ................135 12.1.2 Stateful Inspection Firewall ..............135 12.1.3 About the ZyXEL Device Firewall ............135 12.1.4 Guidelines For Enhancing Security With Your Firewall ......136 12.2 Triangle Routes ....................136 12.2.1 Triangle Routes and IP Alias ..............137 12.3 General Firewall Screen...
Page 15 P-334WH User’s Guide 13.3 Days and Times .....................141 13.4 Filter Screen ....................141 13.5 Schedule ......................143 13.6 Customizing Keyword Blocking URL Checking ..........144 13.6.1 Domain Name or IP Address URL Checking ........144 13.6.2 Full Path URL Checking ...............144 13.6.3 File Name URL Checking ..............145 Chapter 14 Static Route Screens ...................
Page 16 20.2.2 Restore Configuration ................187 20.2.3 Back to Factory Defaults ...............188 20.3 Restart Screen ....................189 Chapter 21 Configuration Mode ..................... 191 Chapter 22 Troubleshooting ....................193 22.1 Problems Starting Up the ZyXEL Device ............193 22.2 Problems with the LAN ...................193 Table of Contents...
Page 17 P-334WH User’s Guide 22.3 Problems with the WAN .................194 22.4 Problems Accessing the ZyXEL Device ............195 22.5 Problems with Restricted Web Pages and Keyword Blocking .......195 22.6 Problems with the Password ................196 22.7 Problems with Remote Management .............196 22.7.1 Pop-up Windows, JavaScripts and Java Permissions ......196 22.7.1.1 Internet Explorer Pop-up Blockers ..........196...
Page 18 P-334WH User’s Guide Table of Contents...
Page 19 P-334WH User’s Guide List of Figures Figure 1 Secure Internet Access via Cable, DSL or Wireless Modem ........ 34 Figure 2 WLAN Application Example .................. 34 Figure 3 WiFi WAN Router Application ................35 Figure 4 System Operating Mode ..................35 Figure 5 Front Panel ......................
Page 20 Figure 44 ZyXEL Utility: Link Info ..................88 Figure 45 ZyXEL Utility: Profile ................... 88 Figure 46 ZyXEL Utility: Add New Profile ................89 Figure 47 ZyXEL Utility: Profile Security ................89 Figure 48 ZyXEL Utility: Profile Encryption ................. 89 Figure 49 Profile: Wireless Protocol Settings.
Page 21 P-334WH User’s Guide Figure 80 Example of Static Routing Topology ..............147 Figure 81 IP Static Route ....................148 Figure 82 Static Route Setup ....................149 Figure 83 Subnet-based Bandwidth Management Example ..........152 Figure 84 Bandwidth Management: General ..............157 Figure 85 Bandwidth Management: Advanced ..............
Page 22 P-334WH User’s Guide Figure 123 Windows XP: Start Menu .................. 215 Figure 124 Windows XP: Control Panel ................215 Figure 125 Windows XP: Control Panel: Network Connections: Properties ....... 216 Figure 126 Windows XP: Local Area Connection Properties ..........216 Figure 127 Windows XP: Internet Protocol (TCP/IP) Properties .........
Page 23 P-334WH User’s Guide List of Tables Table 1 Front Panel LEDs ....................36 Table 2 Status Screen Icon Key ..................39 Table 3 Web Configurator Status Screen (Router Mode) ..........40 Table 4 Status Screen Icon Key ..................42 Table 5 Web Configurator Status Screen (AP Mode) ............43 Table 6 Status Screen Icon Key ..................
Page 24 P-334WH User’s Guide Table 37 WAN > Advanced ....................102 Table 38 WiFi WAN > Internet Connection ................. 104 Table 39 WiFi WAN > WiFi ....................106 Table 40 WiFi: Static WEP Encryption ................108 Table 41 WiFi: WPA-PSK/WPA2-PSK ................110 Table 42 WiFi WAN >...
Page 25 P-334WH User’s Guide Table 80 Troubleshooting Starting Up Your ZyXEL Device ..........193 Table 81 Troubleshooting the LAN ..................193 Table 82 Troubleshooting the WAN ..................194 Table 83 Troubleshooting Accessing the ZyXEL Device ............ 195 Table 84 Troubleshooting Restricted Web Pages and Keyword Blocking ......195 Table 85 Troubleshooting the Password ................
Page 26 P-334WH User’s Guide Table 123 RFC-2408 ISAKMP Payload Types ..............260 Table 124 NetBIOS Filter Default Settings ................. 264 Table 125 Examples of Services ..................265 Table 126 Abbreviations Used in the Example Internal SPTGEN Screens Table ....272 Table 127 Menu 1 General Setup ..................272 Table 128 Menu 3 .......................
Page 27: Preface
Settings and then click Control Panel. • “e.g.,” is a shorthand for “for instance”, and “i.e.,” means “that is” or “in other words”. • The P-334WH may be referred to as the “ZyXEL Device” in this User’s Guide. Preface...
Page 28 P-334WH User’s Guide Graphics Icons Key ZyXEL Device Computer Notebook computer Server DSLAM Firewall Modem Switch Router Wireless Signal Preface...
Page 29: Getting To Know Your Zyxel Device
The ZyXEL Device is the ideal secure wireless firewall router for all data passing between the Internet and LAN’s. You can also deploy the ZyXEL Device as an access point (AP) or a WiFi WAN router that allows you to access the Internet via a wireless WAN connection.
Page 30: Non-Physical Features
A combination of switch and router makes your ZyXEL Device a cost-effective and viable network solution. You can add up to four computers to the ZyXEL Device without the cost of a hub. Add more than four computers to your LAN by using a hub.
Page 31: Dynamic Dns Support
IP Alias allows you to partition a physical network into logical networks over the same Ethernet interface. The ZyXEL Device supports three logical LAN interfaces via its single physical Ethernet LAN interface with the ZyXEL Device itself as the gateway for each LAN network.
Page 32: Wireless Features
• Firewall logs. • Content filtering logs. Upgrade ZyXEL Device Firmware via LAN The firmware of the ZyXEL Device can be upgraded via the LAN (refer to the Maintenance- Tools-Firmware screen). Embedded FTP and TFTP Servers The ZyXEL Device’s embedded FTP and TFTP Servers enable fast firmware upgrades as well as configuration file backups and restoration.
Page 33: Applications For The Zyxel Device
Router. 1.3.1 Router Mode The ZyXEL Device is in Router mode by default and function as a normal (wireless) router. 1.3.1.1 Secure Broadband Internet Access via Cable, DSL or Wireless Modem You can connect a cable modem, DSL or wireless modem to the ZyXEL Device for broadband Internet access via an Ethernet or a wireless port on the modem.
Page 34: Wireless Lan Application
Figure 2 WLAN Application Example 1.3.2 Access Point Mode You can have the ZyXEL Device works as a pure access point (AP). When the ZyXEL Device is in Access Point mode, all LAN and WAN ports act as a hub.
Page 35: Configuring Operating Mode
P-334WH User’s Guide When the ZyXEL Device is in WiFi WAN Router mode, all LAN and WAN ports act as a hub. You cannot connect them to a modem or router. In this mode, the ZyXEL Device does not allow network access to wireless clients (WLAN).
Page 36: Front Panel Leds
The ZyXEL Device is sending/receiving data. None The WAN connection is not ready, or has failed. MODE Green The ZyXEL Device is in WiFi WAN router mode. Amber The ZyXEL Device is in access point mode. None The ZyXEL Device is in router mode.
Page 37: Introducing The Web Configurator
H A P T E R Introducing the Web Configurator This chapter describes how to access the ZyXEL Device web configurator and provides an overview of its screens. 2.1 Web Configurator Overview The web configurator is an HTML-based management interface that allows easy ZyXEL Device setup and management via Internet browser.
Page 38: Resetting The Zyxel Device
2.4.1 Router Mode Status The following screen displays when the ZyXEL Device is set to router mode. The ZyXEL Device is in router mode by default. Chapter 2 Introducing the Web Configurator...
Page 39: Figure 7 Web Configurator Status Screen (Router Mode)
Click this icon to open a web help page relevant to the screen you are currently configuring. Click this icon to open the setup wizard. The ZyXEL Device has a connection wizard and a bandwidth management wizard. Click this icon to view copyright and a link for related product information.
Page 40: Table 3 Web Configurator Status Screen (Router Mode)
- MAC Address This shows the wireless adapter MAC Address of your device. - Name(SSID) This shows a descriptive name used to identify the ZyXEL Device in the wireless LAN. - Channel This shows the channel number which you select manually or the ZyXEL Device automatically scans and selects.
Page 41: Access Point Mode Status
- Configuration Mode This shows whether the advanced screens of each feature are turned on (Advanced) or not (Basic). - System Operation Mode This shows whether the ZyXEL Device is working as a router, access point or WiFi WAN router. Interface Status Interface This displays the ZyXEL Device port types.
Page 42: Figure 8 Web Configurator Status Screen (Ap Mode)
Click this icon to open a web help page relevant to the screen you are currently configuring. Click this icon to open the setup wizard. The ZyXEL Device has a connection wizard and a bandwidth management wizard. Click this icon to view copyright and a link for related product information.
Page 43: Table 5 Web Configurator Status Screen (Ap Mode)
- Configuration Mode This shows whether the advanced screens of each feature are turned on (Advanced) or not (Basic). - System Operation Mode This shows whether the ZyXEL Device is working as a router, access point or WiFi WAN router. Interface Status Interface This displays the ZyXEL Device port types.
Page 44: Wifi Wan Router Mode Status
Use this screen to view the wireless stations that are currently associated to the ZyXEL Device. 2.4.3 WiFi WAN Router Mode Status The following screen displays when the ZyXEL Device is set to WiFi WAN router mode. Figure 9 Web Configurator Status Screen (WiFi WAN Router Mode) Chapter 2 Introducing the Web Configurator...
Page 45: Table 6 Status Screen Icon Key
Click this icon to open a web help page relevant to the screen you are currently configuring. Click this icon to open the setup wizard. The ZyXEL Device has a connection wizard and a bandwidth management wizard. Click this icon to view copyright and a link for related product information.
Page 46: Navigation Panel
- Configuration Mode This shows whether the advanced screens of each feature are turned on (Advanced) or not (Basic). - System Operation Mode This shows whether the ZyXEL Device is working as a router, access point or WiFi WAN router. Interface Status Interface This displays the ZyXEL Device port types.
Page 47: Table 8 Router, Ap And Wifi Wan Router Mode Features Comparison
The following table describes the sub-menus. Table 9 Screens Summary LINK FUNCTION Status This screen shows the ZyXEL Device’s general device, system and interface status information. Use this screen to access the wizard, and summary statistics tables. Network Chapter 2 Introducing the Web Configurator...
Page 48 Filter Use this screen to block certain web features and sites containing certain keywords in the URL. Schedule Use this screen to set the days and times for the ZyXEL Device to perform content filtering. Management Static Route IP Static Route Use this screen to configure IP static routes.
Page 49: Summary: Bandwidth Management Monitor
This screen allows you to display or hide the advanced screens or features. Sys OP Mode General This screen allows you to configure and have the ZyXEL Device work as a router, access point or WiFi WAN router. 2.4.5 Summary: Bandwidth Management Monitor Select the BW MGMT Monitor (Details...) hyperlink in Status screen.
Page 50: Summary: Dhcp Table
TCP/IP configuration at start-up from a server. You can configure the ZyXEL Device as a DHCP server or disable it. When configured as a server, the ZyXEL Device provides the TCP/IP configuration for the clients. If DHCP service is disabled, you must have another DHCP server on your LAN, or else the computer must be manually configured.
Page 51: Summary: Wireless Station Status
Click Stop to stop refreshing statistics, click Stop. 2.4.8 Summary: Wireless Station Status Click the WLAN Station Status (Details...) hyperlink in the Status screen. View the wireless stations that are currently associated to the ZyXEL Device in the Association List screen. Chapter 2 Introducing the Web Configurator...
Page 52: Figure 13 Summary: Wireless Association List
P-334WH User’s Guide This screen is not available when the ZyXEL Device is in WiFi WAN router mode. Figure 13 Summary: Wireless Association List The following table describes the labels in this screen. Table 12 Summary: Wireless Association List LABEL DESCRIPTION This is the index number of an associated wireless station.
Page 53: Chapter 3 Connection Wizard
Leave a field blank if you don’t have that information. Note: The wizard is for setting up Internet access when the ZyXEL Device is in router mode only. If the ZyXEL Device is in AP or WiFi WAN router mode, using the Wizard will reset the operating mode to router mode (the default).
Page 54: Connection Wizard: Step 1: System Information
• In Windows XP, click Start, My Computer, View system information and then click the Computer Name tab. Note the entry in the Full computer name field and enter it as the ZyXEL Device System Name. Chapter 3 Connection Wizard...
Page 55: Domain Name
DESCRIPTION System Name System Name is a unique name to identify the ZyXEL Device in an Ethernet network. Enter a descriptive name. This name can be up to 30 alphanumeric characters long. Spaces are not allowed, but dashes "-" and underscores "_" are accepted.
Page 56: Figure 18 Wizard Step 2: Wireless Lan
Enter a descriptive name (up to 32 printable 7-bit ASCII characters) for the wireless LAN. If you change this field on the ZyXEL Device, make sure all wireless stations use the same SSID in order to access the network. Security Select a Security level from the drop-down list box.
Page 57: Basic(Wep) Security
Table 15 Wizard Step 2: Basic(WEP) Security LABEL DESCRIPTION Passphrase Type a Passphrase (up to 32 printable characters) and click Generate. The ZyXEL Device automatically generates a WEP key. Select 64-bit WEP, 128-bit WEP or 256-bit WEP to allow data encryption. Encryption ASCII Select this option in order to enter ASCII characters as the WEP keys.
Page 58: Extend(Wpa-Psk Or Wpa2-Psk) Security
LABEL DESCRIPTION Key 1 to Key 4 The WEP keys are used to encrypt data. Both the ZyXEL Device and the wireless stations must use the same WEP key for data transmission. If you chose 64-bit WEP, then enter any 5 ASCII characters or 10 hexadecimal characters ("0-9", "A-F").
Page 59: Connection Wizard: Step 3: Internet Configuration
P-334WH User’s Guide 3.4 Connection Wizard: STEP 3: Internet Configuration The ZyXEL Device offers three Internet connection types. They are Ethernet, PPP over Ethernet or PPTP. The wizard attempts to detect which WAN connection type you are using. If the wizard does not detect a connection type, you must select one from the drop-down list box.
Page 60: Pppoe Connection
By implementing PPPoE directly on the ZyXEL Device (rather than individual computers), the computers on the LAN do not need PPPoE software installed, since the ZyXEL Device does that part of the task. Furthermore, with NAT, all of the LAN's computers will have Internet access.
Page 61: Pptp Connection
PPTP supports on-demand, multi-protocol, and virtual private networking over public networks, such as the Internet. Refer to the appendix for more information on PPTP. Note: The ZyXEL Device supports one PPTP server connection at any given time. Chapter 3 Connection Wizard...
Page 62: Figure 24 Wizard Step 3: Pptp Connection
Select this radio button if your ISP did not assign you a fixed IP address. from ISP Use fixed IP Select this radio button, provided by your ISP to give the ZyXEL Device a fixed, address unique IP address. My IP Address Type the (static) IP address assigned to you by your ISP.
Page 63: Your Ip Address
P-334WH User’s Guide 3.4.4 Your IP Address The following wizard screen allows you to assign a fixed IP address or give the ZyXEL Device an automatically assigned IP address depending on your ISP. Figure 25 Wizard Step 3: Your IP Address...
Page 64: Ip Address And Subnet Mask
Once you have decided on the network number, pick an IP address that is easy to remember, for instance, 192.168.1.1, for your ZyXEL Device, but make sure that no other device on your network is using that IP address.
Page 65: Wan Ip And Dns Server Address Assignment
The DNS server is extremely important because without it, you must know the IP address of a computer before you can access it. The ZyXEL Device uses a system DNS server (in the order you specify here) to resolve domain names for DDNS and the time server.
Page 66: Wan Mac Address
This screen allows users to configure the WAN port's MAC address by either using the ZyXEL Device’s MAC address, copying the MAC address from a computer on your LAN or manually entering a MAC address. Once it is successfully configured, the address will be copied to the "rom"...
Page 67: Connection Wizard: Step 4: Bandwidth Management
Bandwidth management allows you to control the amount of bandwidth going out through the ZyXEL Device’s WAN, LAN or WLAN port and prioritize the distribution of the bandwidth according to the traffic type. This helps keep one service from using all of the available bandwidth and shutting out other users.
Page 68: Connection Wizard Complete
Follow the on-screen instructions and click Finish to complete the wizard setup. Figure 30 Connection Wizard Complete Well done! You have successfully set up your ZyXEL Device to operate on your network and access the Internet. Chapter 3 Connection Wizard...
Page 69: Chapter 4 Wireless Lan
The wireless network is the part in the blue circle. In this wireless network, devices A and B are called wireless clients. The wireless clients use the access point (AP) to interact with other devices (such as the printer) or with the Internet. Your ZyXEL Device is the AP. Every wireless network must follow these basic guidelines.
Page 70: Wireless Security Overview
P-334WH User’s Guide • Every wireless client in the same wireless network must use security compatible with the Security stops unauthorized devices from using the wireless network. It can also protect the information that is sent in the wireless network.
Page 71: Encryption
P-334WH User’s Guide For wireless networks, there are two typical places to store the user names and passwords for each user. • In the AP: this feature is called a local user database or a local database. • In a RADIUS server: this is a server used in businesses more than in homes.
Page 72: General Wireless Lan Screen
When you select WPA2 or WPA2-PSK in your ZyXEL Device, you can also select an option (WPA Compatible) to support WPA as well. In this case, if some wireless clients support WPA and some support WPA2, you should set up WPA2-PSK or WPA2 (depending on the type of wireless network login) and select the WPA Compatible option in the ZyXEL Device.
Page 73: No Security
Auto Channel Selection. Refer to the Connection Wizard chapter for more information on channels. Auto Channel Select the check box to have the ZyXEL Device automatically scan for and select a Selection channel which is not used by another device.
Page 74: Wep Encryption
Both the wireless stations and the access points must use the same WEP key. Your ZyXEL Device allows you to configure up to four 64-bit, 128-bit or 256-bit WEP keys but only one key can be enabled at any one time.
Page 75: Figure 34 Wireless: Static Wep Encryption
Passphrase Enter a passphrase (password phrase) of up to 32 printable characters and click Generate. The ZyXEL Device automatically generates four different WEP keys and displays them in the Key fields below. Select 64-bit WEP, 128-bit WEP or 256-bit WEP to enable data encryption.
Page 76: Wpa-Psk/Wpa2-Psk
DESCRIPTION Key 1 to Key 4 The WEP keys are used to encrypt data. Both the ZyXEL Device and the wireless stations must use the same WEP key for data transmission. If you chose 64-bit WEP, then enter any 5 ASCII characters or 10 hexadecimal characters ("0-9", "A-F").
Page 77: Wpa/Wpa2
This check box is available only when you select WPA2-PSK or WPA2 in the Security Mode field. Select the check box to have both WPA2 and WPA wireless clients be able to communicate with the ZyXEL Device even when the ZyXEL Device is using WPA2- PSK or WPA2. Pre-Shared Key The encryption mechanisms used for WPA/WPA2 and WPA-PSK/WPA2-PSK are the same.
Page 78: Figure 36 Wireless: Wpa/Wpa2
This check box is available only when you select WPA2-PSK or WPA2 in the Security Mode field. Select the check box to have both WPA2 and WPA wireless clients be able to communicate with the ZyXEL Device even when the ZyXEL Device is using WPA2-PSK or WPA2. ReAuthentication...
Page 79: Mac Filter
Click Reset to reload the previous configuration for this screen. 4.4 MAC Filter The MAC filter screen allows you to configure the ZyXEL Device to give exclusive access to up to 32 devices (Allow) or exclude up to 32 devices from accessing the ZyXEL Device (Deny).
Page 80: Figure 37 Mac Address Filter
Filter Action Define the filter action for the list of MAC addresses in the MAC Address table. Select Deny to block access to the ZyXEL Device, MAC addresses not listed will be allowed to access the ZyXEL Device Select Allow to permit access to the ZyXEL Device, MAC addresses not listed will be denied access to the ZyXEL Device.
Page 81: Wireless Lan Advanced Screen
2432. Output Power Set the output power of the ZyXEL Device in this field. If there is a high density of APs within an area, decrease the output power of the ZyXEL Device to reduce interference with other APs.
Page 82 P-334WH User’s Guide Chapter 4 Wireless LAN...
Page 83: Chapter 5 Wireless Tutorial
An access point (AP) or wireless router is referred to as “AP” and a computer with a wireless network card or USB/PCI adapter is referred to as “wireless client” here. We use the P-334WH web screens and M-302 utility screens as an example. The screens may vary slightly for different models.
Page 84: Figure 39 Ap: Wireless Lan > General
P-334WH User’s Guide Figure 39 AP: Wireless LAN > General 3 Make sure the Enable Wireless LAN check box is selected. 4 Enter SSID_Example3 as the SSID, select a channel or select Auto Channel Selection to have the AP choose a channel which is not used by another AP and display the channel number in the field below after you click Apply.
Page 85: Configuring The Wireless Client
P-334WH User’s Guide Figure 40 AP: Status 7 Click the WLAN Station Status hyperlink in the AP’s Status screen. You can see if any wireless client has connected to the AP. Figure 41 AP: Status: WLAN Station Status 5.3 Configuring the Wireless Client This section describes how to connect the wireless client to a network.
Page 86: Connecting To A Wireless Lan
P-334WH User’s Guide 5.3.1 Connecting to a Wireless LAN The following sections show you how to join a wireless network using the ZyXEL utility, as in the following diagram. The wireless client is labeled C and the access point is labeled AP.
Page 87: Figure 42 Zyxel Utility: Security Settings
4 The Confirm Save window appears. Check your settings and click Save to continue. Figure 43 ZyXEL Utility: Confirm Save 5 The ZyXEL utility returns to the Link Info screen while it connects to the wireless network using your settings. When the wireless link is established, the ZyXEL utility icon in the system tray turns green and the Link Info screen displays details of the active connection.
Page 88: Creating And Using A Profile
“PN_Example3” and the pre-shared key is “ThisismyWPA-PSKpre- sharedkey”. You have chosen the profile name “PN_Example3”. 1 Open the ZyXEL utility and click the Profile tab to open the screen shown next. Click Add to configure a new profile.
Page 89: Figure 46 Zyxel Utility: Add New Profile
You can also configure your profile for a wireless network that is not in the list. Figure 46 ZyXEL Utility: Add New Profile 3 Give the profile a descriptive name (of up to 32 printable ASCII characters). Select Infrastructure and either manually enter or select the AP's SSID in the Scan Info table and click Select.
Page 90: Figure 49 Profile: Wireless Protocol Settings
Note: Only one profile can be activated and used at any given time. Figure 51 Profile: Activate 9 When you activate the new profile, the ZyXEL utility returns to the Link Info screen while it connects to the AP using your settings. When the wireless link is established, the ZyXEL utility icon in the system tray turns green and the Link Info screen displays details of the active connection.
Page 91 P-334WH User’s Guide 10Open your Internet browser, enter http://www.zyxel.com or the URL of any other web site in the address bar and press ENTER. If you are able to access the web site, your new profile is successfully configured. 11If you cannot access the Internet go back to the Profile screen, select the profile you are using and click Edit.
Page 92 P-334WH User’s Guide Chapter 5 Wireless Tutorial...
Page 93: Chapter 6 Wan
P-334WH User’s Guide H A P T E R This chapter describes how to configure WAN settings. 6.1 WAN Overview See the chapter about the connection wizard for more information on the fields in the WAN screens. 6.2 WAN MAC Address The MAC address screen allows users to configure the WAN port's MAC address by either using the factory default or cloning the MAC address from a computer on your LAN.
Page 94: Internet Connection
The ZyXEL Device supports both IGMP version 1 (IGMP-v1) and IGMP version 2 (IGMP- v2). At start up, the ZyXEL Device queries all directly connected networks to gather group membership. After that, the ZyXEL Device periodically updates this information. IP multicasting can be enabled/disabled on the ZyXEL Device LAN and/or WAN interfaces in the web configurator (LAN;...
Page 95: Table 34 Ethernet Encapsulation
Type the domain name of the Telia login server, for example login1.telia.com. Login only) Relogin Every(min) The Telia server logs the ZyXEL Device out if the ZyXEL Device does not log in (Telia Login only) periodically. Type the number of minutes from 1 to 59 (30 default) for the ZyXEL Device to wait between logins.
Page 96: Pppoe Encapsulation
By implementing PPPoE directly on the ZyXEL Device (rather than individual computers), the computers on the LAN do not need PPPoE software installed, since the ZyXEL Device does that part of the task. Furthermore, with NAT, all of the LANs’ computers will have access.
Page 97: Figure 53 Pppoe Encapsulation
Encapsulation The PPP over Ethernet choice is for a dial-up connection using PPPoE. The ZyXEL Device supports PPPoE (Point-to-Point Protocol over Ethernet). PPPoE is an IETF Draft standard (RFC 2516) specifying how a personal computer (PC) interacts with a broadband modem (i.e. xDSL, cable, wireless, etc.) connection.
Page 98 DNS Servers First DNS Server Select From ISP if your ISP dynamically assigns DNS server information (and the ZyXEL Device's WAN IP address). The field to the right displays the (read-only) Second DNS DNS server IP address that the ISP assigns.
Page 99: Pptp Encapsulation
P-334WH User’s Guide 6.4.3 PPTP Encapsulation Point-to-Point Tunneling Protocol (PPTP) is a network protocol that enables secure transfer of data from a remote client to a private server, creating a Virtual Private Network (VPN) using TCP/IP-based networks. PPTP supports on-demand, multi-protocol and virtual private networking over public networks, such as the Internet.
Page 100: Table 36 Pptp Encapsulation
My IP Address Type the (static) IP address assigned to you by your ISP. My IP Subnet Mask Your ZyXEL Device will automatically calculate the subnet mask based on the IP address that you assign. Unless you are implementing subnetting, use the subnet mask computed by the ZyXEL Device.
Page 101: Advanced Wan Screen
First DNS Server Select From ISP if your ISP dynamically assigns DNS server information (and the ZyXEL Device's WAN IP address). The field to the right displays the (read- Second DNS Server only) DNS server IP address that the ISP assigns.
Page 102: Table 37 Wan > Advanced
WAN and from the WAN to the LAN. Allow Trigger Dial Select this option to allow NetBIOS packets to initiate calls. Apply Click Apply to save your changes back to the ZyXEL Device. Reset Click Reset to begin configuring this screen afresh. Chapter 6 WAN...
Page 103: Chapter 7 Wifi Wan
WAN screens. See the appendices for more detailed information about wireless networks. 7.2 Internet Connection To change your ZyXEL Device’s Internet access settings, click Network > WiFi WAN. Note: You can set the ZyXEL Device to WiFi WAN router mode only when you use Ethernet encapsulation. Chapter 7 WiFi WAN...
Page 104: Figure 56 Wifi Wan > Internet Connection
Table 38 WiFi WAN > Internet Connection LABEL DESCRIPTION Encapsulation You can use Ethernet encapsulation only when the ZyXEL Device is in WiFi WAN Router mode. Service Type Choose from Standard, Telstra (RoadRunner Telstra authentication method), RR- Manager (Roadrunner Manager authentication method), RR-Toshiba (Roadrunner Toshiba authentication method) or Telia Login.
Page 105: Wifi Screen
Click Reset to begin configuring this screen afresh. 7.3 WiFi Screen When the ZyXEL Device is set to WiFi WAN router mode, use the WiFi screen to connect to a specified wireless network or any available wireless network within range. The ZyXEL Device and the wireless network must use the same wireless and wireless security settings.
Page 106: Figure 57 Wifi Wan > Wifi
WiFi network User Defined Select this option to have the ZyXEL Device connect to a wireless network with the SSID SSID you specified in the Name (SSID) field. Name(SSID) The SSID (Service Set IDentity) identifies the Service Set with which the ZyXEL Device will associate.
Page 107: No Security
P-334WH User’s Guide 7.3.1 No Security If wireless security is not enabled on the access point, select No Security to have the ZyXEL Device communicate with the access point without any data encryption. Figure 58 WiFi: No Security 7.3.2 WEP Encryption WEP encryption scrambles the data transmitted between the wireless clients and the access points to keep network communications private.
Page 108: Figure 59 Wifi: Static Wep Encryption
Passphrase Enter a passphrase (password phrase) of up to 32 printable characters and click Generate. The ZyXEL Device automatically generates four different WEP keys and displays them in the Key fields below. Select 64-bit WEP, 128-bit WEP or 256-bit WEP to enable data encryption.
Page 109: Wpa-Psk/Wpa2-Psk
DESCRIPTION Key 1 to Key 4 The WEP keys are used to encrypt data. Both the ZyXEL Device and the access point must use the same WEP key for data transmission. If you chose 64-bit WEP, then enter any 5 ASCII characters or 10 hexadecimal characters ("0-9", "A-F").
Page 110: Advanced Wifi Wan Screen
Click Reset to reload the previous configuration for this screen. 7.4 Advanced WiFi WAN Screen To change your ZyXEL Device’s advanced WiFi WAN settings, click Network > WiFi WAN > Advanced. The screen appears as shown. Figure 61 WiFi WAN > Advanced The following table describes the labels in this screen.
Page 111 It is the maximum data fragment size that can be sent. Enter a value between Threshold 256 and 2432. Apply Click Apply to save your changes back to the ZyXEL Device. Reset Click Reset to begin configuring this screen afresh. Chapter 7 WiFi WAN...
Page 112 P-334WH User’s Guide Chapter 7 WiFi WAN...
Page 113: Chapter 8 Lan
DHCP client capability. 8.2.1 Factory LAN Defaults The LAN parameters of the ZyXEL Device are preset in the factory with the following values: • IP address of 192.168.1.1 with subnet mask of 255.255.255.0 (24 bits) •...
Page 114: Ip Address And Subnet Mask
The ZyXEL Device supports both IGMP version 1 (IGMP-v1) and IGMP version 2 (IGMP- v2). At start up, the ZyXEL Device queries all directly connected networks to gather group membership. After that, the ZyXEL Device periodically updates this information. IP multicasting can be enabled/disabled on the ZyXEL Device LAN and/or WAN interfaces in the web configurator (LAN;...
Page 115: Lan Ip Alias
Ethernet interface with the ZyXEL Device itself as the gateway for each LAN network. To change your ZyXEL Device’s IP alias settings, click Network > LAN > IP Alias. The screen appears as shown. Figure 63 LAN IP Alias...
Page 116: Advanced Lan Screen
Reset Click Reset to begin configuring this screen afresh. 8.5 Advanced LAN Screen To change your ZyXEL Device’s advanced IP settings, click Network > LAN > Advanced. The screen appears as shown. Figure 64 Advanced LAN The following table describes the labels in this screen.
Page 117 Clear this check box to block all NetBIOS packets going from the LAN to the WAN and from the WAN to the LAN. Apply Click Apply to save your changes back to the ZyXEL Device. Reset Click Reset to begin configuring this screen afresh.
Page 118 P-334WH User’s Guide Chapter 8 LAN...
Page 119: Chapter 9 Dhcp Server
TCP/IP configuration at start-up from a server. You can configure the ZyXEL Device as a DHCP server or disable it. When configured as a server, the ZyXEL Device provides the TCP/IP configuration for the clients. If DHCP service is disabled, you must have another DHCP server on your LAN, or else the computer must be manually configured.
Page 120: Dhcp Server Advanced Screen
00:A0:C5:00:00:02. To change your ZyXEL Device’s static DHCP settings, click Network > DHCP Server > Advanced. The following screen displays. Figure 66 DHCP Server Advanced...
Page 121: Client List Screen
DNS Servers Assigned by DHCP Server The ZyXEL Device passes a DNS (Domain Name System) server IP address (in the order you specify here) to the DHCP clients. The ZyXEL Device only passes this information to the LAN DHCP clients when you select the Enable DHCP Server check box.
Page 122: Figure 67 Client List
Reserve Select this check box to have the ZyXEL Device always assign this IP address to this MAC address (and host name). After you click Apply, the MAC address and IP address also display in the Advanced screen (where you can edit them).
Page 123: Network Address Translation (Nat)
H A P T E R Network Address Translation (NAT) This chapter discusses how to configure NAT on the ZyXEL Device. 10.1 NAT Overview NAT (Network Address Translation - NAT, RFC 1631) is the translation of the IP address of a host in a packet.
Page 124: Configuring Servers Behind Port Forwarding (Example)
P-334WH User’s Guide 10.2.2 Configuring Servers Behind Port Forwarding (Example) Let's say you want to assign ports 21-25 to one FTP, Telnet and SMTP server (A in the example), port 80 to another (B in the example) and assign a default server IP address of 192.168.1.35 to a third (C in the example).
Page 125: Nat Application Screen
Application screen. If you do not assign a Default Server IP address, the ZyXEL Device discards all packets received for ports that are not specified in the Application screen or remote management.
Page 126: Figure 70 Nat Application
DESCRIPTION Game List Update A game list includes the pre-defined service name(s) and port number(s). You can edit and upload it to the ZyXEL Device to replace the existing entries in the second field next to Service Name. File Path Type in the location of the file you want to upload in this field or click Browse...
Page 127: Game List Example
P-334WH User’s Guide Table 50 NAT Application (continued) LABEL DESCRIPTION Service Name Type a name (of up to 31 printable characters) to identify this rule in the first field next to Service Name. Otherwise, select a predefined service in the second field next to Service Name.
Page 128: Trigger Port Forwarding
Trigger port forwarding solves this problem by allowing computers on the LAN to dynamically take turns using the service. The ZyXEL Device records the IP address of a LAN computer that sends traffic to the WAN to request a service with a specific port number and protocol (a "trigger"...
Page 129: Trigger Port Forwarding Example
1 Jane requests a file from the Real Audio server (port 7070). 2 Port 7070 is a “trigger” port and causes the ZyXEL Device to record Jane’s computer IP address. The ZyXEL Device associates Jane's computer IP address with the "incoming"...
Page 130: Figure 73 Nat Advanced
P-334WH User’s Guide Figure 73 NAT Advanced The following table describes the labels in this screen. Table 51 NAT Advanced LABEL DESCRIPTION Max NAT/Firewall Type a number ranging from 1 to 2048 to limit the number of NAT/firewall sessions Session Per User that a host can create.
Page 131 Type a port number or the ending port number in a range of port numbers. Trigger The trigger port is a port (or a range of ports) that causes (or triggers) the ZyXEL Device to record the IP address of the LAN computer that sent the traffic to a server on the WAN.
Page 132 P-334WH User’s Guide Chapter 10 Network Address Translation (NAT)
Page 133: Chapter 11 Dynamic Dns
Note: If you have a private WAN IP address, then you cannot use Dynamic DNS. 11.2 Dynamic DNS Screen To change your ZyXEL Device’s DDNS, click Network > DDNS. The screen appears as shown. Chapter 11 Dynamic DNS...
Page 134: Figure 74 Dynamic Dns
Type the IP address of the host name(s). Use this if you have a static IP Address address. Apply Click Apply to save your changes back to the ZyXEL Device. Reset Click Reset to begin configuring this screen afresh. Chapter 11 Dynamic DNS...
Page 135: Chapter 12 Firewall
Enable Firewall check box). The ZyXEL Device's purpose is to allow a private Local Area Network (LAN) to be securely connected to the Internet. The ZyXEL Device can be used to prevent theft, destruction and modification of data, as well as log events, which may be important to the security of your network.
Page 136: Guidelines For Enhancing Security With Your Firewall
7 Keep the firewall in a secured (locked) room. 12.2 Triangle Routes If an alternate gateway on the LAN has an IP address in the same subnet as the ZyXEL Device’s LAN IP address, return traffic may not go through the ZyXEL Device. This is called an asymmetrical or “triangle”...
Page 137: Triangle Routes And Ip Alias
2 The ZyXEL Device reroutes the packet to Gateway A, which is in Subnet 2. 3 The reply from the WAN goes to the ZyXEL Device. 4 The ZyXEL Device then sends it to the computer on the LAN in Subnet 1. Figure 75 Using IP Alias to Solve the Triangle Route Problem 12.3 General Firewall Screen...
Page 138: Services Screen
Click Security > Firewall > Services. The screen appears as shown next. If an outside user attempts to probe an unsupported port on your ZyXEL Device, an ICMP response packet is automatically returned. This allows the outside user to know the ZyXEL Device exists.
Page 139: Figure 77 Firewall Services
Respond to Ping The ZyXEL Device will not respond to any incoming Ping requests when Disable is selected. Select LAN to reply to incoming LAN Ping requests. Select WAN to reply to incoming WAN Ping requests. Otherwise select LAN & WAN to reply to both incoming LAN and WAN Ping requests.
Page 140 Select this option to prevent hackers from finding the ZyXEL Device by probing for requests for unused ports. If you select this option, the ZyXEL Device will not respond to port unauthorized request(s) for unused ports, thus leaving the unused ports and the ZyXEL Device services unseen.
Page 141: Chapter 13 Content Filtering
The ZyXEL Device can block web features such as ActiveX controls, Java applets, cookies and disable web proxies. 13.3 Days and Times The ZyXEL Device also allows you to define time periods and days during which the ZyXEL Device performs content filtering. 13.4 Filter Screen Click Security >...
Page 142: Figure 78 Content Filter: Filter
P-334WH User’s Guide Figure 78 Content Filter: Filter The following table describes the labels in this screen. Table 55 Content Filter: Filter LABEL DESCRIPTION Trusted Computer To enable this feature, type an IP address of any one of the computers in your IP Address network that you want to have as a trusted computer.
Page 143: Schedule
LABEL DESCRIPTION Enable URL The ZyXEL Device can block Web sites with URLs that contain certain keywords Keyword Blocking in the domain name or IP address. For example, if the keyword "bad" was enabled, all sites containing this keyword in the domain name or IP address will be blocked, e.g., URL http://www.website.com/bad.html would be blocked.
Page 144: Customizing Keyword Blocking Url Checking
By default, the ZyXEL Device checks the URL’s domain name or IP address when performing keyword blocking. This means that the ZyXEL Device checks the characters that come before the first slash in the URL. For example, with the URL www.zyxel.com.tw/news/pressroom.php, content filtering only searches for keywords within www.zyxel.com.tw.
Page 145: File Name Url Checking
P-334WH User’s Guide 13.6.3 File Name URL Checking Filename URL checking has the ZyXEL Device check all of the characters in the URL. For example, filename URL checking searches for keywords within the URL www.zyxel.com.tw/news/pressroom.php. Use the ip urlfilter customize actionFlags 8 [disable | enable] command to extend (or not extend) the keyword blocking search to include the URL's complete filename.
Page 146 P-334WH User’s Guide Chapter 13 Content Filtering...
Page 147: Chapter 14 Static Route Screens
However, the ZyXEL Device is unable to route a packet to network N3 because it doesn't know that there is a route through the same remote node router R1 (via gateway router R2). The static routes are for you to tell the ZyXEL Device about the networks beyond the remote nodes.
Page 148: Ip Static Route Screen
This is the IP address of the gateway. The gateway is an immediate neighbor of your ZyXEL Device that will forward the packet to the destination. On the LAN, the gateway must be a router on the same segment as your ZyXEL Device; over the WAN, the gateway must be the IP address of one of the remote nodes.
Page 149: Static Route Setup Screen
Enter the IP address of the gateway. The gateway is an immediate neighbor of Address your ZyXEL Device that will forward the packet to the destination. On the LAN, the gateway must be a router on the same segment as your ZyXEL Device; over the WAN, the gateway must be the IP address of one of the Remote Nodes.
Page 150 P-334WH User’s Guide Chapter 14 Static Route Screens...
Page 151: Chapter 15 Bandwidth Management
• The sum of the bandwidth allotments that apply to the LAN port (WAN to LAN, WLAN to LAN, LAN to LAN / ZyXEL Device) must be less than or equal to 100,000 kbps (you cannot configure the bandwidth budget for the LAN port).
Page 152: Subnet-Based Bandwidth Management
P-334WH User’s Guide 15.3 Subnet-based Bandwidth Management You can create bandwidth classes based on subnets. The following figure shows LAN subnets. You could configure one bandwidth class for subnet A and another for subnet B. Figure 83 Subnet-based Bandwidth Management Example 15.4 Application and Subnet-based Bandwidth Management...
Page 153: Bandwidth Management Priorities
P-334WH User’s Guide 15.5 Bandwidth Management Priorities The following table describes the priorities that you can apply to traffic that the ZyXEL Device forwards out through an interface. Table 60 Bandwidth Management Priorities PRIORITY LEVELS: TRAFFIC WITH A HIGHER PRIORITY GETS THROUGH FASTER WHILE TRAFFIC WITH A LOWER PRIORITY IS DROPPED IF THE NETWORK IS CONGESTED.
Page 154: Services And Port Numbers
P-334WH User’s Guide Table 61 Media Bandwidth Management Setup: Services (continued) SERVICE DESCRIPTION MSN Webcam MSN messenger allows you to chat online and send instant messages. If you use MSN messenger and also have a webcam, you can send your image/photo in real-...
Page 155 P-334WH User’s Guide Table 62 Commonly Used Services SERVICE DESCRIPTION IPSEC_TUNNEL(ESP:0) The IPSEC ESP (Encapsulation Security Protocol) tunneling protocol uses this service. IRC(TCP/UDP:6667) This is another popular Internet chat program. MSN Messenger(TCP:1863) Microsoft Networks’ messenger service uses this protocol. MULTICAST(IGMP:0) Internet Group Multicast Protocol is used when sending packets to a specific group of hosts.
Page 156: Default Bandwidth Management Classes And Priorities
With the automatic traffic classifier feature activated, the ZyXEL Device automatically assigns a default bandwidth management class and priority to traffic that does not match any of the user-defined rules. The traffic is classified based on the traffic type.
Page 157: Bandwidth Management General Configuration
This field is only applicable when you select the Enable Bandwidth Traffic Classifier Management check box. Select this check box to have the ZyXEL Device base on the default bandwidth classes to apply bandwidth management. Real-time packets, such as VoIP traffic always get higher priority.
Page 158: Bandwidth Management Advanced Configuration
P-334WH User’s Guide 15.9 Bandwidth Management Advanced Configuration Click Management > Bandwidth MGMT > Advanced to open the bandwidth management Advanced screen. Figure 85 Bandwidth Management: Advanced Chapter 15 Bandwidth Management...
Page 159: Table 65 Bandwidth Management: Advanced
Use this table to allocate specific amounts of bandwidth based on the pre-defined service. This is the number of an individual bandwidth management rule. Enable Select this check box to have the ZyXEL Device apply this bandwidth management rule. Service This is the name of the service.
Page 160: Rule Configuration With The Pre-Defined Service
P-334WH User’s Guide 15.9.1 Rule Configuration with the Pre-defined Service To edit a bandwidth management rule for the pre-defined service in the ZyXEL Device, click the Edit icon in the Application List table of the Advanced screen. The following screen displays.
Page 161: Rule Configuration With The User-Defined Service
P-334WH User’s Guide 15.9.2 Rule Configuration with the User-defined Service In addition to the pre-defined services, if you want to edit a bandwidth management rule for other applications and/or subnets, click the Edit icon in the User-defined Service table of the Advanced screen.
Page 162: Bandwidth Management Monitor
P-334WH User’s Guide 15.10 Bandwidth Management Monitor Click Management > Bandwidth MGMT > Monitor to open the bandwidth management Monitor screen. View the bandwidth usage of the WAN configured bandwidth rules. This is also shown as bandwidth usage over the bandwidth budget for each rule. The gray section of the bar represents the percentage of unused bandwidth and the blue color represents the percentage of bandwidth in use.
Page 163: Remote Management Screens
To disable remote management of a service, select Disable in the corresponding Server Access field. You may only have one remote management session running at a time. The ZyXEL Device automatically disconnects a remote management session of lower priority when another remote management session of higher priority starts.
Page 164: Remote Management And Nat
There is a default system management idle timeout of five minutes (three hundred seconds). The ZyXEL Device automatically logs you out if the management session remains idle for longer than this timeout period. The management session does not time out when a statistics screen is polling.
Page 165: Telnet
16.3 Telnet You can configure your ZyXEL Device for remote Telnet access as shown next. The administrator uses Telnet from a computer on a remote network to access the ZyXEL Device. Figure 90 Telnet Configuration on a TCP/IP Network Chapter 16 Remote Management Screens...
Page 166: Telnet Screen
Address ZyXEL Device using this service. Select All to allow any computer to access the ZyXEL Device using this service. Choose Selected to just allow the computer with the IP address that you specify to access the ZyXEL Device using this service.
Page 167: Dns Screen
Address ZyXEL Device using this service. Select All to allow any computer to access the ZyXEL Device using this service. Choose Selected to just allow the computer with the IP address that you specify to access the ZyXEL Device using this service.
Page 168: Figure 93 Dns Remote Management
A secured client is a “trusted” computer that is allowed to send DNS queries to the Address ZyXEL Device. Select All to allow any computer to send DNS queries to the ZyXEL Device. Choose Selected to just allow the computer with the IP address that you specify to send DNS queries to the ZyXEL Device.
Page 169: Chapter 17 Upnp
P-334WH User’s Guide H A P T E R UP N P This chapter introduces the Universal Plug and Play feature. 17.1 Universal Plug and Play Overview Universal Plug and Play (UPnP) is a distributed, open networking standard that uses TCP/IP for simple peer-to-peer network connectivity between devices.
Page 170: Upnp And Zyxel
All UPnP-enabled devices may communicate freely with each other without additional configuration. Disable UPnP if this is not your intention. 17.2 UPnP and ZyXEL ZyXEL has achieved UPnP certification from the Universal Plug and Play Forum UPnP™ Implementers Corp. (UIC). ZyXEL's UPnP implementation supports Internet Gateway Device (IGD) 1.0.
Page 171: Installing Upnp In Windows Example
LABEL DESCRIPTION Allow UPnP to pass UPnP broadcasts are only allowed on the LAN. If you block LAN-to-LAN/ZyXEL through Firewall Device traffic using the firewall, then you need to select this check box to allow UPnP-enabled traffic to pass through the firewall.
Page 172: Installing Upnp In Windows Xp
P-334WH User’s Guide 3 In the Communications window, select the Universal Plug and Play check box in the Components selection box. 4 Click OK to go back to the Add/Remove Programs Properties window and click Next. 5 Restart the computer when prompted.
Page 173: Using Upnp In Windows Xp Example
This section shows you how to use the UPnP feature in Windows XP. You must already have UPnP installed in Windows XP and UPnP activated on the ZyXEL device. Make sure the computer is connected to a LAN port of the ZyXEL device. Turn on your computer and the ZyXEL device.
Page 174: Web Configurator Easy Access
17.5.2 Web Configurator Easy Access With UPnP, you can access the web-based configurator on the ZyXEL device without finding out the IP address of the ZyXEL device first. This is helpful if you do not know the IP address of the ZyXEL device.
Page 175: Web Configurator Easy Access
17.5.3 Web Configurator Easy Access With UPnP, you can access the web-based configurator on the ZyXEL device without finding out the IP address of the ZyXEL device first. This is helpful if you do not know the IP address of the ZyXEL device.
Page 176 Other Places. 4 An icon with the description for each UPnP-enabled device displays under Local Network. 5 Right-click the icon for your ZyXEL device and select Invoke. The web configurator login screen displays. 6 Right-click the icon for your ZyXEL device and select Properties.
Page 177: Chapter 18 System
P-334WH User’s Guide H A P T E R System This chapter provides information on the System screens. 18.1 System Overview See the chapter about wizard setup for more information on the next few screens. 18.2 System General Screen Click Maintenance > System. The following screen displays.
Page 178: Time Setting Screen
18.3 Time Setting Screen To change your ZyXEL Device’s time and date, click Maintenance > System > Time Setting. The screen appears as shown. Use this screen to configure the ZyXEL Device’s time based on your local time zone. Chapter 18 System...
Page 179: Figure 96 Time Setting
Current Time and Date Current Time This field displays the time of your ZyXEL Device. Each time you reload this page, the ZyXEL Device synchronizes the time with the time server. Current Date This field displays the date of your ZyXEL Device.
Page 180 When you set Time and Date Setup to Manual, enter the new date in this field and then click Apply. Get from Time Select this radio button to have the ZyXEL Device get the time and date from the Server time server you specified below.
Page 181: Chapter 19 Logs
ZyXEL Device’s logs. Refer to the appendices for example log message explanations. 19.1 View Log The web configurator allows you to look at all of the ZyXEL Device’s logs in one location. Click Maintenance > Logs to open the View Log screen.
Page 182: Log Settings
Click Maintenance > Logs > Log Settings to open the Log Settings screen. Use the Log Settings screen to configure to where the ZyXEL Device is to send logs; the schedule for when the ZyXEL Device is to send the logs and which logs and/or immediate alerts the ZyXEL Device to send.
Page 183: Figure 98 Log Settings
ZyXEL Device sends. Not all ZyXEL Device models have this field. Send Log To The ZyXEL Device sends logs to the e-mail address specified in this field. If this field is left blank, the ZyXEL Device does not send logs via e-mail.
Page 184 Enter the time of the day in 24-hour format (for example 23:00 equals 11:00 pm) to send the logs. Clear log after Select the checkbox to delete all the logs after the ZyXEL Device sends an E- sending mail mail of the logs.
Page 185: Chapter 20 Tools
(.zip) files before you can upload them. Upload Click Upload to begin the upload process. This process may take up to two minutes. Note: Do not turn off the ZyXEL Device while firmware upload is in progress! Chapter 20 Tools...
Page 186: Configuration Screen
After you see the Firmware Upload In Process screen, wait two minutes before logging into the ZyXEL Device again. Figure 100 Upload Warning The ZyXEL Device automatically restarts in this time causing a temporary network disconnect. In some operating systems, you may see the following icon on your desktop. Figure 101 Network Temporarily Disconnected After two minutes, log in again and check your new firmware version in the Status screen.
Page 187: Backup Configuration
Backup configuration allows you to back up (save) the ZyXEL Device’s current configuration to a file on your computer. Once your ZyXEL Device is configured and functioning properly, it is highly recommended that you back up your configuration file before making configuration changes.
Page 188: Back To Factory Defaults
If you uploaded the default configuration file you may need to change the IP address of your computer to be in the same subnet as that of the default ZyXEL Device IP address (192.168.1.1). See your Quick Start Guide for details on how to set up your computer’s IP address.
Page 189: Restart Screen
20.3 Restart Screen System restart allows you to reboot the ZyXEL Device without turning the power off. Click Maintenance > Tools > Restart. Click Restart to have the ZyXEL Device reboot. This does not affect the ZyXEL Device's configuration. Figure 107 System Restart...
Page 190 P-334WH User’s Guide Chapter 20 Tools...
Page 191: Chapter 21 Configuration Mode
P-334WH User’s Guide H A P T E R Configuration Mode Click Maintenance > Config Mode to open the following screen. This screen allows you to hide or display the advanced screens of some feaures or the advanced features, such as MAC filter or static route.
Page 192 P-334WH User’s Guide Table 79 Config Mode: Advanced Screens CATEGORY LINK Management Static Route IP Static Route Bandwidth MGMT Advanced Monitor Remote MGMT Telnet Maintenance Logs Log Settings Chapter 21 Configuration Mode...
Page 193: Chapter 22 Troubleshooting
Check for faulty Ethernet cables. Make sure your computer’s Ethernet card is working properly. I cannot access Make sure that the IP address and the subnet mask of the ZyXEL Device and your the ZyXEL computer(s) are on the same subnet.
Page 194: Problems With The Wan
Verify your WAN settings. Refer to the chapter on WAN setup. Make sure you entered the correct user name and password. If the ZyXEL Device is in AP mode, make sure the ZyXEL Device is connected to a modem or router.
Page 195: Problems Accessing The Zyxel Device
Your computer’s and the ZyXEL Device’s IP addresses must be on the same subnet for LAN access. If you changed the ZyXEL Device’s LAN IP address, then enter the new one as the URL. See the following section to check that pop-up windows, JavaScripts and Java permissions are allowed.
Page 196: Problems With The Password
LAN or WAN. When NAT is enabled: • Use the ZyXEL Device's WAN IP address when configuring from the WAN. • Use the ZyXEL Device's LAN IP address when configuring from the LAN. 22.7.1 Pop-up Windows, JavaScripts and Java Permissions In order to use the web configurator you need to allow: •...
Page 197: Figure 109 Pop-Up Blocker
P-334WH User’s Guide 22.7.1.1.1 Disable pop-up Blockers 1 In Internet Explorer, select Tools, Pop-up Blocker and then select Turn Off Pop-up Blocker. Figure 109 Pop-up Blocker You can also check if pop-up blocking is disabled in the Pop-up Blocker section in the Privacy tab.
Page 198: Figure 111 Internet Options
P-334WH User’s Guide 22.7.1.1.2 Enable pop-up Blockers with Exceptions Alternatively, if you only want to allow pop-up windows from your device, see the following steps. 1 In Internet Explorer, select Tools, Internet Options and then the Privacy tab. 2 Select Settings…to open the Pop-up Blocker Settings screen.
Page 199: Javascripts
P-334WH User’s Guide Figure 112 Pop-up Blocker Settings 5 Click Close to return to the Privacy screen. 6 Click Apply to save this setting. 22.7.1.2 JavaScripts If pages of the web configurator do not display properly in Internet Explorer, check that JavaScripts are allowed.
Page 200: Figure 113 Internet Options
P-334WH User’s Guide Figure 113 Internet Options 2 Click the Custom Level... button. 3 Scroll down to Scripting. 4 Under Active scripting make sure that Enable is selected (the default). 5 Under Scripting of Java applets make sure that Enable is selected (the default).
Page 201: Java Permissions
P-334WH User’s Guide Figure 114 Security Settings - Java Scripting 22.7.1.3 Java Permissions 1 From Internet Explorer, click Tools, Internet Options and then the Security tab. 2 Click the Custom Level... button. 3 Scroll down to Microsoft VM. 4 Under Java permissions make sure that a safety level is selected.
Page 202: Figure 115 Security Settings - Java
P-334WH User’s Guide Figure 115 Security Settings - Java 22.7.1.3.1 JAVA (Sun) 1 From Internet Explorer, click Tools, Internet Options and then the Advanced tab. 2 Make sure that Use Java 2 for <applet> under Java (Sun) is selected. 3 Click OK to close the window.
Page 203: Activex Controls In Internet Explorer
P-334WH User’s Guide Figure 116 Java (Sun) 22.7.2 ActiveX Controls in Internet Explorer If ActiveX is disabled, you will not be able to download ActiveX controls or to use Trend Micro Security Serivces. Make sure that ActiveX controls are allowed in Internet Explorer.
Page 204: Figure 117 Internet Options Security
P-334WH User’s Guide Figure 117 Internet Options Security 3 Scroll down to ActiveX controls and plug-ins. 4 Under Download signed ActiveX controls select the Prompt radio button. 5 Under Run ActiveX controls and plug-ins make sure the Enable radio button is selected.
Page 205: Figure 118 Security Setting Activex Controls
P-334WH User’s Guide Figure 118 Security Setting ActiveX Controls Chapter 22 Troubleshooting...
Page 206 P-334WH User’s Guide Chapter 22 Troubleshooting...
Page 207: Product Specifications
ZyXEL Device. Firmware Upgrade Download new firmware (when available) from the ZyXEL web site and use the web configurator, an FTP or a TFTP tool to put it on the ZyXEL Device. Note: Only upload firmware for your specific model! Configuration Backup &...
Page 208 Internet. DHCP (Dynamic Host Use this feature to have the ZyXEL Device assign IP addresses, an IP Configuration Protocol) default gateway and DNS servers to computers on your network.
Page 209: Wall-Mounting Instructions
4 Make sure the screws are snugly fastened to the wall. They need to hold the weight of the ZyXEL Device with the connection cables. 5 Align the holes on the back of the ZyXEL Device with the screws on the wall. Hang the ZyXEL Device on the screws.
Page 210 P-334WH User’s Guide Appendix B Wall-mounting Instructions...
Page 211: Setting Up Your Computer's Ip Address
After the appropriate TCP/IP components are installed, configure the TCP/IP settings in order to "communicate" with your network. If you manually assign IP information instead of using dynamic assignment, make sure that your computers have IP addresses that place them in the same subnet as the ZyXEL Device’s LAN port. Windows 95/98/Me Click Start, Settings, Control Panel and double-click the Network icon to open the Network window.
Page 212: Figure 120 Windows 95/98/Me: Network: Configuration
P-334WH User’s Guide Figure 120 WIndows 95/98/Me: Network: Configuration Installing Components The Network window Configuration tab displays a list of installed components. You need a network adapter, the TCP/IP protocol and Client for Microsoft Networks. If you need the adapter: 1 In the Network window, click Add.
Page 213: Figure 121 Windows 95/98/Me: Tcp/Ip Properties: Ip Address
P-334WH User’s Guide 3 Select Microsoft from the list of manufacturers. 4 Select Client for Microsoft Networks from the list of network clients and then click 5 Restart your computer so the changes you made take effect. Configuring 1 In the Network window Configuration tab, select your network adapter's TCP/IP entry and click Properties 2 Click the IP Address tab.
Page 214: Figure 122 Windows 95/98/Me: Tcp/Ip Properties: Dns Configuration
5 Click OK to save and close the TCP/IP Properties window. 6 Click OK to close the Network window. Insert the Windows CD if prompted. 7 Turn on your ZyXEL Device and restart your computer when prompted. Verifying Settings 1 Click Start and then Run.
Page 215: Figure 123 Windows Xp: Start Menu
P-334WH User’s Guide Figure 123 Windows XP: Start Menu 2 In the Control Panel, double-click Network Connections (Network and Dial-up Connections in Windows 2000/NT). Figure 124 Windows XP: Control Panel 3 Right-click Local Area Connection and then click Properties. Appendix C Setting up Your Computer’s IP Address...
Page 216: Figure 125 Windows Xp: Control Panel: Network Connections: Properties
P-334WH User’s Guide Figure 125 Windows XP: Control Panel: Network Connections: Properties 4 Select Internet Protocol (TCP/IP) (under the General tab in Win XP) and then click Properties. Figure 126 Windows XP: Local Area Connection Properties 5 The Internet Protocol TCP/IP Properties window opens (the General tab in Windows XP).
Page 217: Figure 127 Windows Xp: Internet Protocol (Tcp/Ip) Properties
P-334WH User’s Guide • If you have a static IP address click Use the following IP Address and fill in the IP address, Subnet mask, and Default gateway fields. • Click Advanced. Figure 127 Windows XP: Internet Protocol (TCP/IP) Properties 6 If you do not know your gateway's IP address, remove any previously installed gateways in the IP Settings tab and click OK.
Page 218: Figure 128 Windows Xp: Advanced Tcp/Ip Properties
P-334WH User’s Guide Figure 128 Windows XP: Advanced TCP/IP Properties 7 In the Internet Protocol TCP/IP Properties window (the General tab in Windows XP): • Click Obtain DNS server address automatically if you do not know your DNS server IP address(es).
Page 219: Figure 129 Windows Xp: Internet Protocol (Tcp/Ip) Properties
10 Close the Network Connections window (Network and Dial-up Connections in Windows 2000/NT). 11Turn on your ZyXEL Device and restart your computer (if prompted). Verifying Settings 1 Click Start, All Programs, Accessories and then Command Prompt. 2 In the Command Prompt window, type "ipconfig" and then press [ENTER]. You can also open Network Connections, right-click a network connection, click Status and then click the Support tab.
Page 220: Figure 130 Macintosh Os 8/9: Apple Menu
P-334WH User’s Guide Figure 130 Macintosh OS 8/9: Apple Menu 2 Select Ethernet built-in from the Connect via list. Figure 131 Macintosh OS 8/9: TCP/IP 3 For dynamically assigned settings, select Using DHCP Server from the Configure: list. Appendix C Setting up Your Computer’s IP Address...
Page 221: Figure 132 Macintosh Os X: Apple Menu
• Type your subnet mask in the Subnet mask box. • Type the IP address of your ZyXEL Device in the Router address box. 5 Close the TCP/IP Control Panel. 6 Click Save if prompted, to save changes to your configuration.
Page 222: Figure 133 Macintosh Os X: Network
• Type your subnet mask in the Subnet mask box. • Type the IP address of your ZyXEL Device in the Router address box. 5 Click Apply Now and close the window. 6 Turn on your ZyXEL Device and restart your computer (if prompted).
Page 223: Figure 134 Red Hat 9.0: Kde: Network Configuration: Devices
P-334WH User’s Guide Note: Make sure you are logged in as the root administrator. Using the K Desktop Environment (KDE) Follow the steps below to configure your computer IP address using the KDE. 1 Click the Red Hat button (located on the bottom left corner), select System Setting and click Network.
Page 224: Figure 136 Red Hat 9.0: Kde: Network Configuration: Dns
P-334WH User’s Guide • If you have a dynamic IP address click Automatically obtain IP address settings with and select dhcp from the drop down list. • If you have a static IP address click Statically set IP Addresses and fill in the Address, Subnet mask, and Default Gateway Address fields.
Page 225: Figure 138 Red Hat 9.0: Dynamic Ip Address Setting In Ifconfig-Eth0
P-334WH User’s Guide 1 Assuming that you have only one network card on the computer, locate the ifconfig- configuration file (where is the name of the Ethernet card). Open the eth0 eth0 configuration file with any plain text editor. •...
Page 226: Figure 141 Red Hat 9.0: Restart Ethernet Card
P-334WH User’s Guide Figure 141 Red Hat 9.0: Restart Ethernet Card [root@localhost init.d]# network restart Shutting down interface eth0: [OK] Shutting down loopback interface: [OK] Setting network parameters: [OK] Bringing up loopback interface: [OK] Bringing up interface eth0: [OK] Verifying Settings Enter in a terminal screen to check your TCP/IP properties.
Page 227: Ip Addresses And Subnetting
P-334WH User’s Guide P P E N D I X IP Addresses and Subnetting This appendix introduces IP addresses, IP address classes and subnet masks. You use subnet masks to subdivide a network into smaller logical networks. Introduction to IP Addresses An IP address has two parts: the network number and the host ID.
Page 228: Table 89 Classes Of Ip Addresses
P-334WH User’s Guide The following table shows the network number and host ID arrangement for classes A, B and Table 89 Classes of IP Addresses IP ADDRESS OCTET 1 OCTET 2 OCTET 3 OCTET 4 Class A Network number Host ID...
Page 229: Table 91 "Natural" Masks
P-334WH User’s Guide Subnet Masks A subnet mask is used to determine which bits are part of the network number, and which bits are part of the host ID (using a logical AND operation). A subnet mask has 32 bits. If a bit in the subnet mask is a “1” then the corresponding bit in the IP address is part of the network number.
Page 230: Table 93 Two Subnets Example
P-334WH User’s Guide Table 92 Alternative Subnet Mask Notation (continued) SUBNET MASK SUBNET MASK “1” BITS LAST OCTET BIT VALUE DECIMAL 255.255.255.240 1111 0000 255.255.255.248 1111 1000 255.255.255.252 1111 1100 The first mask shown is the class “C” natural mask. Normally if no mask is specified it is understood that the natural mask is being used.
Page 231: Table 94 Subnet 1
P-334WH User’s Guide Table 94 Subnet 1 (continued) LAST OCTET BIT IP/SUBNET MASK NETWORK NUMBER VALUE Subnet Address: 192.168.1.0 Lowest Host ID: 192.168.1.1 Broadcast Address: Highest Host ID: 192.168.1.126 192.168.1.127 Table 95 Subnet 2 IP/SUBNET MASK NETWORK NUMBER LAST OCTET BIT VALUE IP Address 192.168.1.
Page 232: Table 97 Subnet 2
P-334WH User’s Guide Table 96 Subnet 1 (continued) LAST OCTET BIT IP/SUBNET MASK NETWORK NUMBER VALUE Subnet Address: 192.168.1.0 Lowest Host ID: 192.168.1.1 Broadcast Address: Highest Host ID: 192.168.1.62 192.168.1.63 Table 97 Subnet 2 LAST OCTET BIT IP/SUBNET MASK NETWORK NUMBER...
Page 233: Table 100 Eight Subnets
P-334WH User’s Guide The following table shows class C IP address last octet values for each subnet. Table 100 Eight Subnets BROADCAST SUBNET SUBNET ADDRESS FIRST ADDRESS LAST ADDRESS ADDRESS The following table is a summary for class “C” subnet planning.
Page 234: Table 102 Class B Subnet Planning
P-334WH User’s Guide The following table is a summary for class “B” subnet planning. Table 102 Class B Subnet Planning NO. “BORROWED” HOST NO. HOSTS PER SUBNET MASK NO. SUBNETS BITS SUBNET 255.255.128.0 (/17) 32766 255.255.192.0 (/18) 16382 255.255.224.0 (/19) 8190 255.255.240.0 (/20)
Page 235: Appendix E Wireless Lans
P-334WH User’s Guide P P E N D I X Wireless LANs Wireless LAN Topologies This section discusses ad-hoc and infrastructure wireless LAN topologies. Ad-hoc Wireless LAN Configuration The simplest WLAN configuration is an independent (Ad-hoc) WLAN that connects a set of computers with wireless adapters (A, B, C).
Page 236: Figure 144 Basic Service Set
P-334WH User’s Guide Figure 144 Basic Service Set An Extended Service Set (ESS) consists of a series of overlapping BSSs, each containing an access point, with each access point connected together by a wired network. This wired connection between APs is called a Distribution System (DS).
Page 237: Figure 145 Infrastructure Wlan
P-334WH User’s Guide Figure 145 Infrastructure WLAN Channel A channel is the radio frequency(ies) used by IEEE 802.11a/b/g wireless devices. Channels available depend on your geographical area. You may have a choice of channels (for your region) so you should use a different channel than an adjacent AP (access point) to reduce interference.
Page 238: Fragmentation Threshold
P-334WH User’s Guide Figure 146 RTS/CTS When station A sends data to the AP, it might not know that the station B is already using the channel. If these two stations send data at the same time, collisions may occur when both sets of data arrive at the AP at the same time, resulting in a loss of messages for both stations.
Page 239: Table 103 Ieee 802.11G
P-334WH User’s Guide A large Fragmentation Threshold is recommended for networks not prone to interference while you should set a smaller threshold for busy networks or networks that are prone to interference. If the Fragmentation Threshold value is smaller than the RTS/CTS value (see previously) you set then the RTS (Request To Send)/CTS (Clear to Send) handshake will never occur as data frames will be fragmented before they reach RTS/CTS size.
Page 240: Table 104 Wireless Security Levels
Wi-Fi Protected Access (WPA) Most Secure WPA2 Note: You must enable the same wireless security settings on the ZyXEL Device and on all wireless clients that you want to associate with it. IEEE 802.1x In June 2001, the IEEE 802.1x standard was designed to extend the features of IEEE 802.11 to support extended authentication as well as providing additional accounting and control features.
Page 241: Types Of Radius Messages
P-334WH User’s Guide RADIUS RADIUS is based on a client-server model that supports authentication, authorization and accounting. The access point is the client and the server is the RADIUS server. The RADIUS server handles the following tasks: • Authentication Determines the identity of the users.
Page 242: Types Of Authentication
P-334WH User’s Guide In order to ensure network security, the access point and the RADIUS server use a shared secret key, which is a password, they both know. The key is not sent over the network. In addition to the shared key, password information exchanged is also encrypted to protect the network from unauthorized access.
Page 243: Table 105 Comparison Of Eap Authentication Types
P-334WH User’s Guide PEAP (Protected EAP) Like EAP-TTLS, server-side certificate authentication is used to establish a secure connection, then use simple username and password methods through the secured connection to authenticate the clients, thus hiding client identity. However, PEAP only supports EAP methods, such as EAP-MD5, EAP-MSCHAPv2 and EAP-GTC (EAP-Generic Token Card), for client authentication.
Page 244: Wpa And Wpa2
P-334WH User’s Guide WPA and WPA2 Wi-Fi Protected Access (WPA) is a subset of the IEEE 802.11i standard. WPA2 (IEEE 802.11i) is a wireless security standard that defines stronger encryption, authentication and key management than WPA. Key differences between WPA or WPA2 and WEP are improved data encryption and user authentication.
Page 245: Wireless Client Wpa Supplicants
P-334WH User’s Guide By generating unique data encryption keys for every data packet and by creating an integrity checking mechanism (MIC), with TKIP and AES it is more difficult to decrypt data on a Wi-Fi network than WEP and difficult for an intruder to break into the network.
Page 246: Figure 147 Wpa(2) With Radius Application Example
P-334WH User’s Guide 3 The RADIUS server distributes a Pairwise Master Key (PMK) key to the AP that then sets up a key hierarchy and management system, using the pair-wise key to dynamically generate unique data encryption keys to encrypt every data packet that is wirelessly communicated between the AP and the wireless clients.
Page 247: Figure 148 Wpa(2)-Psk Authentication
P-334WH User’s Guide Figure 148 WPA(2)-PSK Authentication Security Parameters Summary Refer to this table to see what other security parameters you should configure for each Authentication Method/ key management protocol type. MAC address filters are not dependent on how you configure these security features.
Page 248 P-334WH User’s Guide Appendix E Wireless LANs...
Page 249: Appendix F Command Interpreter
If your device has SMT, enter 24 in the main menu to bring up the system maintenance menu. Enter 8 to go to Menu 24.8 - Command Interpreter Mode. If your device does not have SMT, simply Telnet to the ZyXEL Device’s IP address. You will log directly into the command interpreter.
Page 250 P-334WH User’s Guide Appendix F Command Interpreter...
Page 251: Appendix G Log Descriptions
P-334WH User’s Guide P P E N D I X Log Descriptions This appendix provides descriptions of example log messages. Table 107 System Maintenance Logs LOG MESSAGE DESCRIPTION The router has adjusted its time based on information from the Time calibration is time server.
Page 252: Table 108 System Error Logs
P-334WH User’s Guide Table 107 System Maintenance Logs (continued) LOG MESSAGE DESCRIPTION Someone has logged on to the router's web configurator Successful HTTPS login interface using HTTPS protocol. Someone has failed to log on to the router's web configurator HTTPS login failed interface using HTTPS protocol.
Page 253: Table 110 Tcp Reset Logs
P-334WH User’s Guide Table 110 TCP Reset Logs LOG MESSAGE DESCRIPTION The router sent a TCP reset packet when a host was under a SYN Under SYN flood attack, flood attack (the TCP incomplete count is per destination host.) sent TCP RST...
Page 254: Table 112 Icmp Logs
P-334WH User’s Guide Table 112 ICMP Logs LOG MESSAGE DESCRIPTION ICMP access matched the default policy and was blocked Firewall default policy: ICMP or forwarded according to the user's setting. For type and <Packet Direction>, <type:%d>, code details, see Table 121 on page 259.
Page 255: Table 115 Upnp Logs
The ZyXEL Device cannot get the IP address of the external content DNS resolving failed filtering via DNS query. Creating socket failed The ZyXEL Device cannot issue a query because TCP/IP socket creation failed, port:port number. Appendix G Log Descriptions...
Page 256: Table 117 Attack Logs
P-334WH User’s Guide Table 116 Content Filtering Logs (continued) LOG MESSAGE DESCRIPTION The connection to the external content filtering server failed. Connecting to content filter server fail License key is invalid The external content filtering license key is invalid. Table 117 Attack Logs...
Page 257: Table 118 Pki Logs
P-334WH User’s Guide Table 118 PKI Logs LOG MESSAGE DESCRIPTION The SCEP online certificate enrollment was successful. The Enrollment successful Destination field records the certification authority server IP address and port. The SCEP online certificate enrollment failed. The Destination field Enrollment failed records the certification authority server’s IP address and port.
Page 258: Table 119 802.1X Logs
P-334WH User’s Guide Table 119 802.1X Logs LOG MESSAGE DESCRIPTION A user was authenticated by the local user database. Local User Database accepts user. A user was not authenticated by the local user database Local User Database reports user because of an incorrect user password.
Page 259: Table 121 Icmp Notes
P-334WH User’s Guide Table 120 ACL Setting Notes (continued) PACKET DIRECTION DIRECTION DESCRIPTION (L to L/P) LAN to LAN/ ACL set for packets traveling from the LAN to the LAN or ZyXEL Device the ZyXEL Device. (W to W/P) WAN to WAN/...
Page 260: Table 122 Syslog Logs
P-334WH User’s Guide Table 121 ICMP Notes (continued) TYPE CODE DESCRIPTION Information request message Information Reply Information reply message Table 122 Syslog Logs LOG MESSAGE DESCRIPTION "This message is sent by the system ("RAS" displays as the <Facility*8 + Severity>Mon dd system name if you haven’t configured one) when the router...
Page 261: Figure 149 Displaying Log Categories Example
3 to record both logs and alerts for that category. Not every parameter is available with every category. 5 Use the command to store the settings in the ZyXEL Device (you must sys logs save do this in order to record logs).
Page 262: Log Command Example
P-334WH User’s Guide Log Command Example This example shows how to set the ZyXEL Device to record the access logs and alerts and then view the results. ras> sys logs load ras> sys logs category access 3 ras> sys logs save ras>...
Page 263: Netbios Filter Commands
• Allow or disallow NetBIOS packets to initiate calls. Display NetBIOS Filter Settings Syntax: sys filter netbios disp This command gives a read-only list of the current NetBIOS filter modes for the ZyXEL Device. NetBIOS Display Filter Settings Command Example =========== NetBIOS Filter Status ===========...
Page 264: Table 124 Netbios Filter Default Settings
P-334WH User’s Guide The filter types and their default settings are as follows. Table 124 NetBIOS Filter Default Settings NAME DESCRIPTION EXAMPLE Between LAN This field displays whether NetBIOS packets are blocked or forwarded Block and WAN between the LAN and the WAN.
Page 265: Appendix I Services
7648 A popular videoconferencing solution from White Pines Software. TCP/UDP 24032 TCP/UDP Domain Name Server, a service that matches web names (e.g. www.zyxel.com) to IP numbers. User-Defined The IPSEC ESP (Encapsulation Security (IPSEC_TUNNEL) Protocol) tunneling protocol uses this service. FINGER...
Page 266 P-334WH User’s Guide Table 125 Examples of Services (continued) NAME PROTOCOL PORT(S) DESCRIPTION HTTP Hyper Text Transfer Protocol - a client/ server protocol for the world wide web. HTTPS HTTPS is a secured http session often used in e-commerce. ICMP...
Page 267 P-334WH User’s Guide Table 125 Examples of Services (continued) NAME PROTOCOL PORT(S) DESCRIPTION RCMD Remote Command Service. REAL_AUDIO 7070 A streaming audio service that enables real time sound over the web. REXEC Remote Execution Daemon. RLOGIN Remote Login. ROADRUNNER TCP/UDP...
Page 268 P-334WH User’s Guide Table 125 Examples of Services (continued) NAME PROTOCOL PORT(S) DESCRIPTION TFTP Trivial File Transfer Protocol is an Internet file transfer protocol similar to FTP, but uses the UDP (User Datagram Protocol) rather than TCP (Transmission Control Protocol).
Page 269: Appendix J Internal Sptgen
– eliminating the need to navigate and configure individual screens for each ZyXEL Device. You can use FTP to get the Internal SPTGEN file. Then edit the file in a text editor and use FTP to upload it again to the same device or another one.
Page 270: Figure 152 Invalid Parameter Entered: Command Line Example
Figure 151 on page 269), then you disable every field in this menu. If you enter a parameter that is invalid in the Input column, the ZyXEL Device will not save the configuration and the command line will display the Field Identification Number.
Page 271: Figure 154 Internal Sptgen Ftp Download Example
2 Enter " ". The command “ ” sets the transfer mode to binary. 3 Upload your “ ” file from your computer to the ZyXEL Device using the “ ” rom-t command. computer to the ZyXEL Device. 4 Exit this FTP application.
Page 272: Table 126 Abbreviations Used In The Example Internal Sptgen Screens Table
MEANING Field Identification Number Field Name Parameter Values Allowed INPUT An example of what you may enter Applies to the ZyXEL Device. Table 127 Menu 1 General Setup / Menu 1 General Setup INPUT 10000000 = Configured <0(No) | 1(Yes)>...
Page 273 P-334WH User’s Guide Table 128 Menu 3 30100012 = Output protocol filters Set 4 = 256 30100013 = Output device filters Set 1 = 256 30100014 = Output device filters Set 2 = 256 30100015 = Output device filters Set 3...
Page 274 P-334WH User’s Guide Table 128 Menu 3 30201005 = Version <0(Rip-1) | 1(Rip-2B) |2(Rip-2M)> 30201006 = IP Alias #1 Incoming protocol filters = 256 Set 1 30201007 = IP Alias #1 Incoming protocol filters = 256 Set 2 30201008 =...
Page 275 P-334WH User’s Guide Table 128 Menu 3 INPUT 30500001 = ESSID Wireless 30500002 = Hide ESSID <0(No) | 1(Yes)> 30500003 = Channel ID <1|2|3|4|5|6|7 |8|9|10|11|12| 13> 30500004 = RTS Threshold <0 ~ 2432> = 2432 30500005 = FRAG. Threshold <256 ~ 2432>...
Page 276: Table 129 Menu 4 Internet Access Setup
P-334WH User’s Guide Table 129 Menu 4 Internet Access Setup / Menu 4 Internet Access Setup INPUT 40000000 = Configured <0(No) | 1(Yes)> 40000001 = <0(No) | 1(Yes)> 40000002 = Active <0(No) | 1(Yes)> 40000003 = ISP's Name = ChangeMe...
Page 277: Table 130 Menu 12
P-334WH User’s Guide Table 129 Menu 4 Internet Access Setup (continued) 40000027 = ATM QoS Type <0(CBR) | (1 (UBR)> 40000028 = Peak Cell Rate (PCR) 40000029 = Sustain Cell Rate (SCR) 40000030 = Maximum Burst Size(MBS) 40000031= RIP Direction <0(None) |...
Page 278: Table 131 Menu 15 Sua Server Setup
P-334WH User’s Guide Table 131 Menu 15 SUA Server Setup / Menu 15 SUA Server Setup INPUT 150000001 = SUA Server IP address for default = 0.0.0.0 port 150000002 = SUA Server #2 Active <0(No) | 1(Yes)> 150000003 = SUA Server #2 Protocol <0(All)|6(TCP)|17(U...
Page 279: Table 132 Menu 21.1 Filter Set #1
P-334WH User’s Guide Table 131 Menu 15 SUA Server Setup (continued) 150000031 = SUA Server #7 Local IP address = 0.0.0.0 150000032 = SUA Server #8 Active <0(No) | 1(Yes)> 150000033 = SUA Server #8 Protocol <0(All)|6(TCP)|17(U DP)> 150000034 =...
Page 280 P-334WH User’s Guide Table 132 Menu 21.1 Filter Set #1 (continued) 210101002 = IP Filter Set 1,Rule 1 Active <0(No)|1(Yes)> 210101003 = IP Filter Set 1,Rule 1 Protocol 210101004 = IP Filter Set 1,Rule 1 Dest IP address = 0.0.0.0...
Page 281: Table 133 Menu 21.1 Filer Set #2
P-334WH User’s Guide Table 132 Menu 21.1 Filter Set #1 (continued) 210102013 = IP Filter Set 1,Rule 2 Act Match <1(check next)|2(forward)| 3(drop)> 210102014 = IP Filter Set 1,Rule 2 Act Not Match <1(check next)|2(forward)| 3(drop)> Table 133 Menu 21.1 Filer Set #2, / Menu 21.1 filter set #2,...
Page 282: Table 134 Menu 23 System Menus
P-334WH User’s Guide Table 133 Menu 21.1 Filer Set #2, (continued) 210202001 = IP Filter Set 2, Rule 2 Type <0(none)|2(TCP/IP)> = 2 210202002 = IP Filter Set 2, Rule 2 Active <0(No)|1(Yes)> 210202003 = IP Filter Set 2, Rule 2 Protocol...
Page 283: Table 135 Menu 24.11 Remote Management Control
P-334WH User’s Guide Table 134 Menu 23 System Menus (continued) 230200005 = Authentication Server Shared Secret 111111111111 111111111111 1111 230200006 = Accounting Server Configured <0(No) | 1(Yes)> 230200007 = Accounting Server Active <0(No) | 1(Yes)> 230200008 = Accounting Server IP Address 192.168.1.44...
Page 284: Table 136 Command Examples
|3(Wan)> 241100009 = WEB Server Secured IP address = 0.0.0.0 Command Examples The following are example Internal SPTGEN screens associated with the ZyXEL Device’s command interpreter commands. Table 136 Command Examples INPUT /ci command (for annex a): wan adsl opencmd...
Page 285 P-334U/P-335U User’s Guide Index Numerics 802.11 Mode Certificate Authority certifications notices viewing Channel 40, 237 Interference Access point channel See also AP. Channel ID ActiveX Configuration Advanced Encryption Standard backup Alert reset the factory defaults alternative subnet mask notation restore Contact Information See also access point.
Page 286 Firewall overview IP Address 115, 125 guidelines IP address ICMP packets dynamic network security IP alias Stateful inspection IP packet transmission ZyXEL device firewall Broadcast Firmware upload Multicast file extension Unicast using HTTP IP Pool firmware version Fragmentation Threshold Fragmentation threshold...
Page 287 P-334U/P-335U User’s Guide NAT session Navigation Panel navigation panel Java NetBIOS 102, 116 see also Network Basic Input/Output System Network Address Translation 123, 125 Network Basic Input/Output System IP pool setup LAN overview LAN Setup Operating Channel LAN setup Output Power LAN TCP/IP Link type local (user) database...
Page 288: Figure 146 Rts/Cts
Service Set IDentity. See SSID. Trigger port forwarding example services process and port numbers and protocols Troubleshooting accessing the ZyXEL device Session Initiated Protocol Simple Mail Transfer Protocol password remote management SMTP starting up the device SNMP SSID...
Page 289 WiFi WAN router mode Xbox Live Wildcard Windows Networking Wireless association list wireless client Wireless Client WPA Supplicants Wireless LAN MAC Address Filtering ZyNOS Wireless LAN wizard ZyXEL Limited Warranty Wireless network Note basic guidelines channel encryption example MAC address filter overview security...

ZyXEL Communications P-334WH User Manual

Chapter 1 Getting to Know Your Zyxel Device

Chapter 2 Introducing the Web Configurator

Chapter 3 Connection Wizard

Chapter 4 Wireless LAN

Chapter 5 Wireless Tutorial

Chapter 6 WAN

Chapter 7 Wifi WAN

Chapter 8 LAN

Chapter 9 DHCP Server

Chapter 10 Network Address Translation (NAT)

Chapter 11 Dynamic DNS

Chapter 12 Firewall

Chapter 13 Content Filtering

Chapter 14 Static Route Screens

Chapter 15 Bandwidth Management

Quick Links

Troubleshooting

Related Manuals for ZyXEL Communications P-334WH

Summary of Contents for ZyXEL Communications P-334WH