Page 1 P-660HN-T1H 802.11n Wireless ADSL2+ 4-port Gateway Default Login Details IP Address http://192.168.1.1 Password 1234 Firmware Version 3.40 Edition 2, 8/2010 www.zyxel.com www.zyxel.com Copyright © 2010 ZyXEL Communications Corporation...
Page 3: About This User's Guide
Documentation Feedback Send your comments, questions or suggestions to: techwriters@zyxel.com.tw Thank you! The Technical Writing Team, ZyXEL Communications Corp., 6 Innovation Road II, Science-Based Industrial Park, Hsinchu, 30099, Taiwan. Need More Help? More help is available at www.zyxel.com.
Page 4 Graphics in this book may differ slightly from the product due to differences in operating systems, operating system versions, or if you installed updated firmware/software for your device. Every effort has been made to ensure that the information in this manual is accurate. P-660HN-T1H User’s Guide...
Page 5: Document Conventions
Syntax Conventions • The P-660HN-T1H may be referred to as the “ZyXEL Device”, the “device”, the “system” or the “product” in this User’s Guide. • Product labels, screen names, field labels and field choices are all in bold font.
Page 6 Icons Used in Figures Figures in this User’s Guide may use the following generic icons. The ZyXEL Device icon is not an exact representation of your device. ZyXEL Device Computer Notebook computer Server Firewall Telephone Router Switch P-660HN-T1H User’s Guide...
Page 7: Safety Warnings
Your product is marked with this symbol, which is known as the WEEE mark. WEEE stands for Waste Electronics and Electrical Equipment. It means that used electrical and electronic products should not be mixed with general waste. Used electrical and electronic equipment should be treated separately. P-660HN-T1H User’s Guide...
Page 8 Safety Warnings P-660HN-T1H User’s Guide...
Page 9: Table Of Contents
Dynamic DNS Setup ........................ 177 Remote Management ......................179 Universal Plug-and-Play (UPnP) ..................... 189 CWMP ............................. 201 System Settings ........................205 Logs ............................209 Tools ............................219 Diagnostic ..........................227 Troubleshooting ........................231 Product Specifications ......................237 P-660HN-T1H User’s Guide...
Page 10 Contents Overview P-660HN-T1H User’s Guide...
Page 11: Table Of Contents
2.2 The Main Screen ......................... 29 2.2.1 Title Bar ........................30 2.2.2 Navigation Panel ......................30 2.2.3 Main Window ......................32 2.2.4 Status Bar ........................32 Chapter 3 Status Screens ........................33 3.1 Overview ..........................33 3.2 The Status Screen ....................... 33 P-660HN-T1H User’s Guide...
Page 12 6.3 The More Connections Screen .................... 77 6.3.1 More Connections Edit ....................78 6.3.2 Configuring More Connections Advanced Setup ............80 6.4 WAN Technical Reference ....................81 6.4.1 Encapsulation ......................81 6.4.2 Multiplexing ........................ 83 6.4.3 VPI and VCI ....................... 83 P-660HN-T1H User’s Guide...
Page 13 8.2.4 WPA(2) Authentication ..................... 107 8.2.5 Wireless LAN Advanced Setup ................108 8.2.6 MAC Filter ......................110 8.3 The More AP Screen ......................111 8.3.1 More AP Edit ......................112 8.4 The WPS Screen ........................113 8.5 The WPS Station Screen ....................114 P-660HN-T1H User’s Guide...
Page 14 10.1.2 What You Need to Know About Firewall ..............149 10.2 The Firewall Screen ......................151 Chapter 11 Filters ............................. 153 11.1 Overview ......................... 153 11.1.1 What You Can Do in the Filter Screens ..............153 11.1.2 What You Need to Know About Filtering ..............153 P-660HN-T1H User’s Guide...
Page 15 15.1.2 What You Need To Know About DDNS ..............177 15.2 The Dynamic DNS Screen ....................178 Chapter 16 Remote Management......................179 16.1 Overview .......................... 179 16.1.1 What You Can Do in the Remote Management Screens ........180 P-660HN-T1H User’s Guide...
Page 16 20.1.1 What You Need To Know About Logs ..............209 20.2 The System Log Screen ....................209 20.3 Log Descriptions .......................211 Chapter 21 Tools............................219 21.1 Overview .......................... 219 21.1.1 What You Can Do in the Tool Screens ..............219 21.2 The Firmware Screen ...................... 219 P-660HN-T1H User’s Guide...
Page 17 Appendix B IP Addresses and Subnetting ................269 Appendix C Pop-up Windows, JavaScripts and Java Permissions ........279 Appendix D Wireless LANs ....................289 Appendix E Services ......................305 Appendix F Legal Information ....................309 Index............................313 P-660HN-T1H User’s Guide...
Page 18 Table of Contents P-660HN-T1H User’s Guide...
Page 19: User's Guide
User’s Guide...
Page 21: Introduction
Introduction 1.1 Overview The P-660HN-T1H is an ADSL2+ router. By integrating DSL and NAT, you are provided with ease of installation and high-speed, shared Internet access. The P- 660HN-T1H is also a complete security solution with a robust firewall and content filtering.
Page 22: Good Habits For Managing The Zyxel Device
Your ZyXEL Device provides shared Internet access by connecting the DSL port to the DSL or MODEM jack on a splitter or your telephone jack. Computers can connect to the ZyXEL Device’s LAN ports (or wirelessly). Figure 1 ZyXEL Device’s Router Features P-660HN-T1H User’s Guide...
Page 23: Using The Wps/Wlan Button
Press the WPS button on another WPS-enabled device within range of the ZyXEL Device. The WPS/WLAN LED should flash while the ZyXEL Device sets up a WPS connection with the other wireless device. Once the connection is successfully made, the WPS/WLAN LED shines green. P-660HN-T1H User’s Guide...
Page 24: Leds (Lights)
Blinking The ZyXEL Device is setting up a WPS connection. The wireless network is not activated. Green The DSL line is up. Blinking The ZyXEL Device is initializing the DSL line. (DSL) The DSL line is down. P-660HN-T1H User’s Guide...
Page 25: The Reset Button
To set the device back to the factory default settings, press the RESET button for ten seconds or until the POWER LED begins to blink and then release it. When the POWER LED begins to blink, the defaults have been restored and the device restarts. P-660HN-T1H User’s Guide...
Page 26 Chapter 1 Introduction P-660HN-T1H User’s Guide...
Page 27: The Web Configurator
Internet Explorer. 2.1.1 Accessing the Web Configurator Make sure your ZyXEL Device hardware is properly connected (refer to the Quick Start Guide). Launch your web browser. Type "192.168.1.1" as the URL. P-660HN-T1H User’s Guide...
Page 28 Enter a new password, retype it to confirm and click Apply; alternatively click Ignore to proceed to the main menu if you do not want to change the password now. Figure 4 Change Password Screen P-660HN-T1H User’s Guide...
Page 29: The Main Screen
Note: For security reasons, the ZyXEL Device automatically logs you out if you do not use the web configurator for five minutes (default). If this happens, log in again. 2.2 The Main Screen Figure 6 Main Screen P-660HN-T1H User’s Guide...
Page 30: Title Bar
Client List Use this screen to view current DHCP client information and to always assign specific IP addresses to individual MAC addresses (and host names). IP Alias Use this screen to partition your LAN interface into subnets. P-660HN-T1H User’s Guide...
Page 31 Use this screen to configure through which interface(s) and from which IP address(es) users can use Telnet to manage the ZyXEL Device. Use this screen to configure through which interface(s) and from which IP address(es) users can use FTP to access the ZyXEL Device. P-660HN-T1H User’s Guide...
Page 32: Main Window
Right after you log in, the Status screen is displayed. See Chapter 3 on page 33 for more information about the Status screen. 2.2.4 Status Bar Check the status bar when you click Apply or OK to verify that the configuration has been updated. P-660HN-T1H User’s Guide...
Page 33: Status Screens
(LAN and WAN). The Status screen also provides detailed information from DHCP and statistics from bandwidth management, and traffic. 3.2 The Status Screen Use this screen to view the status of the ZyXEL Device. Click Status to open this screen. Figure 7 Status Screen P-660HN-T1H User’s Guide...
Page 34 Click this to go to the screen where you can change it. WLAN Information ESSID This is the descriptive name used to identify the ZyXEL Device in a wireless LAN. Click this to go to the screen where you can change it. P-660HN-T1H User’s Guide...
Page 35 See Section 21.4 on page 225, or turn off the device (unplug the power) for a few seconds. Interface Status Interface This column displays each interface the ZyXEL Device has. P-660HN-T1H User’s Guide...
Page 36 For the LAN interface, this displays the port speed and duplex setting. For the DSL interface, it displays the downstream and upstream transmission rate. For the WLAN interface, it displays the maximum transmission rate when WLAN is enabled or N/A when WLAN is disabled. P-660HN-T1H User’s Guide...
Page 37: Tutorials
Internet through the AP. Thomas has to configure the wireless network settings on the ZyXEL Device. Then he can set up a wireless network using WPS (Section 4.2.2 on page 39) or manual configuration (Section 4.2.3 on page 44). P-660HN-T1H User’s Guide...
Page 38: Configuring The Wireless Network Settings
Click Network > Wireless LAN to open the AP screen. Configure the screen using the provided parameters (see page 38). Click Apply. Click the Advanced Setup button and select 802.11b+g+n in the 802.11 Mode field. Click Apply. P-660HN-T1H User’s Guide...
Page 39: Using Wps
Make sure that you have installed the wireless client driver and utility in your notebook. In the wireless client utility, go to the WPS setting page. Enable WPS and press the WPS button (Start or WPS button). P-660HN-T1H User’s Guide...
Page 40 The ZyXEL Device sends the proper configuration settings to the wireless client. This may take up to two minutes. The wireless client is then able to communicate with the ZyXEL Device securely. P-660HN-T1H User’s Guide...
Page 41: Wireless Client
The following figure shows you an example of how to set up a wireless network and its security by pressing a button on both ZyXEL Device and wireless client. Example WPS Process: PBC Method ZyXEL Device Wireless Client WITHIN 2 MINUTES Press and hold for 5 seconds SECURITY INFO COMMUNICATION P-660HN-T1H User’s Guide...
Page 42 The ZyXEL Device authenticates the wireless client and sends the proper configuration settings to the wireless client. This may take up to two minutes. The wireless client is then able to communicate with the ZyXEL Device securely. P-660HN-T1H User’s Guide...
Page 43 The following figure shows you how to set up a wireless network and its security on a ZyXEL Device and a wireless client by using PIN method. Example WPS Process: PIN Method Wireless Client ZyXEL Device WITHIN 2 MINUTES Authentication by PIN SECURITY INFO COMMUNICATION P-660HN-T1H User’s Guide...
Page 44: Without Wps
Here is how Thomas can set up a schedule to turn on the wireless network at specific time and days. Click Network > Wireless Network > Scheduling to open the following screen. P-660HN-T1H User’s Guide...
Page 45: Configuring The Mac Address Filter
Internet so that she can concentrate on preparing for her final exams. Josephine’s computer connects wirelessly to the Internet through the ZyXEL Device. Thomas can deny access to the wireless network using the MAC address of Josephine’s computer. Thomas Josephine P-660HN-T1H User’s Guide...
Page 46 Click Network > LAN > Client List to open the following screen. Look for the MAC address of Josephine’s computer. Click Network > Wireless LAN to open the AP screen. Click the Edit button in the MAC Filter field. P-660HN-T1H User’s Guide...
Page 47: Configuring Static Route For Routing To Another Network
In the following figure, router R is connected to the ZyXEL Device’s LAN. R connects to two networks, N1 (192.168.1.x/24) and N2 (192.168.10.x/24). If you want to send traffic from computer A (in N1 network) to computer B (in N2 P-660HN-T1H User’s Guide...
Page 48 A to R and then R routes the traffic to B. This tutorial uses the following example IP settings: Table 5 IP Settings in this Tutorial DEVICE / COMPUTER IP ADDRESS The ZyXEL Device’s WAN 172.16.1.1 The ZyXEL Device’s LAN 192.168.1.1 192.168.1.34 R’s N1 192.168.1.253 P-660HN-T1H User’s Guide...
Page 49 Type 192.168.1.253 (R’s N1 address) in the Gateway IP Address field. Click Apply. Now B should be able to receive traffic from A. You may need to additionally configure B’s firewall settings to allow specific traffic to pass through. P-660HN-T1H User’s Guide...
Page 50: Multiple Public And Private Ip Address Mappings
172.16.1.254 (IP-2) The ZyXEL Device’s LAN 192.168.1.1 192.168.1.2 192.168.1.3 a.b.c.d To do this, you can use either of the following settings: • Full Feature NAT with many-to-many no overload mapping • Full Feature NAT with one-to-one mapping P-660HN-T1H User’s Guide...
Page 51: Full Feature Nat + Many-To-Many No Overload Mapping
General screen. Click Apply. Click the Address Mapping tab, and then click the Edit icon on a new rule. Configure the rule using the following settings: • Type: Many-to-Many No Overload • Local IP addresses: 192.168.1.2 ~ 192.168.1.3 P-660HN-T1H User’s Guide...
Page 52: Full Feature Nat + One-To-One Mapping
Intranet computers (A and B) or the Internet computer (C). For example, gaming application. IP-1 To configure this setting: Click Network > NAT. Select Active Network Address Translation(NAT) and Full Feature in the General screen. Click Apply. P-660HN-T1H User’s Guide...
Page 53: Multiple Wan Connections Example
Click Apply on each of the screens. 4.6 Multiple WAN Connections Example This example shows an application for multiple WAN connections. Your ISP may configure more than one WAN connection on the ZyXEL Device to record traffic statistics or calculate service charges. P-660HN-T1H User’s Guide...
Page 54 • The connection with VPI/VCI, 0/33, is dedicated for Media-On-Demand (MOD) service. • The connection with VPI/VCI, 0/34, is dedicated for VoIP service. • The connection with VPI/VCI, 0/35, is dedicated for general data transmission. Figure 8 Example for Multiple WAN Connections P-660HN-T1H User’s Guide...
Page 55: Technical Reference
Technical Reference...
Page 57: Internet And Wireless Setup Wizard
After you enter the password to access the web configurator, select Go to Wizard setup and click Apply. Otherwise, click the wizard icon ( ) in the top right corner of the web configurator to go to the wizards. Figure 9 Select a Mode P-660HN-T1H User’s Guide...
Page 58: Internet And Wireless Setup Wizard
ISP. See Section 5.2.1 on page 60 for more details. If you would like to skip your Internet setup and configure the wireless LAN settings, leave Yes selected and click Next. Figure 11 Auto Detection: No DSL Connection P-660HN-T1H User’s Guide...
Page 59 The following screen appears if the ZyXEL device detects a connection but not the connection type. Click Next and refer to Section 5.2.1 on page 60 on how to manually configure the ZyXEL Device for Internet access. Figure 13 Auto Detection: Failed P-660HN-T1H User’s Guide...
Page 60: Manual Configuration
Choices vary depending on what you select in the Mode field. If you select Bridge in the Mode field, select either PPPoA or RFC 1483. If you select Routing in the Mode field, select PPPoA, RFC 1483, ENET ENCAP or PPPoE. P-660HN-T1H User’s Guide...
Page 61 The next wizard screen varies depending on what mode and encapsulation type you use. All screens shown are with routing mode. Configure the fields and click Next to continue. See Section 5.3 on page 66 for wireless connection wizard setup Figure 15 Internet Connection with PPPoE P-660HN-T1H User’s Guide...
Page 62 Type the name of your PPPoE service here. Name Back Click this to return to the previous screen without saving. Apply Click this to save your changes. Exit Click this to close the wizard screen without saving. Figure 16 Internet Connection with RFC 1483 P-660HN-T1H User’s Guide...
Page 63 Click this to return to the previous screen without saving. Next Click this to continue to the next wizard screen. Exit Click this to close the wizard screen without saving. Figure 17 Internet Connection with ENET ENCAP P-660HN-T1H User’s Guide...
Page 64 As above. Server Back Click this to return to the previous screen without saving. Apply Click this to save your changes. Exit Click this to close the wizard screen without saving. Figure 18 Internet Connection with PPPoA P-660HN-T1H User’s Guide...
Page 65 Password setup to go back to the screen where you can modify them. Figure 19 Connection Test Failed-1 • If the following screen displays, check if your account is activated or click Restart the Internet/Wireless Setup Wizard to verify your Internet access settings. Figure 20 Connection Test Failed-2. P-660HN-T1H User’s Guide...
Page 66: Wireless Connection Wizard Setup
The following table describes the labels in this screen. Table 12 Wireless LAN Setup Wizard 1 LABEL DESCRIPTION Active Select the check box to turn on the wireless LAN. Back Click this to return to the previous screen without saving. P-660HN-T1H User’s Guide...
Page 67 Select Disable wireless security to have no wireless LAN security configured and your network is accessible to any wireless networking device that is within range. Back Click this to return to the previous screen without saving. P-660HN-T1H User’s Guide...
Page 68: Manually Assign A Wpa-Psk Key
You need to configure an authentication server to do this. Back Click this to return to the previous screen without saving. Next Click this to continue to the next wizard screen. Exit Click this to close the wizard screen without saving. P-660HN-T1H User’s Guide...
Page 69: Manually Assign A Wep Key
Click this to return to the previous screen without saving. Next Click this to continue to the next wizard screen. Exit Click this to close the wizard screen without saving. Click Apply to save your wireless LAN settings. Figure 26 Wireless LAN Setup 3 P-660HN-T1H User’s Guide...
Page 70 Refer to the rest of this guide for more detailed information on the complete range of ZyXEL Device features. If you cannot access the Internet, open the web configurator again to confirm that the Internet settings you configured in the wizard setup are correct. P-660HN-T1H User’s Guide...
Page 71: Wan Setup
To set up a WAN connection to the Internet, you need to use the same encapsulation method used by your ISP (Internet Service Provider). If your ISP offers a dial-up Internet connection using PPPoE (PPP over Ethernet) or PPPoA, P-660HN-T1H User’s Guide...
Page 72: Before You Begin
Finding Out More Section 6.4 on page 81 for technical background information on WAN. 6.1.3 Before You Begin You need to know your Internet access settings such as encapsulation and WAN IP address. Get this information from your ISP. P-660HN-T1H User’s Guide...
Page 73: The Internet Access Setup Screen
ISP and selects the best compatible one for your connection. Other options are ADSL2+, ADSL2, G.DMT, T1.413 and G.lite. ADSL Type Select the type supported by your ISP. Available options are ANNEX A, ANNEX A/L, ANNEX M and ANNEX A/L/M. P-660HN-T1H User’s Guide...
Page 74 This option is available if you select ENET ENCAP in the Encapsulation field. Enter a subnet mask in dotted decimal notation. ENET ENCAP This option is available if you select ENET ENCAP in the Gateway Encapsulation field. Specify a gateway IP address (supplied by your ISP). P-660HN-T1H User’s Guide...
Page 75: Advanced Internet Access Setup
Use this screen to edit your ZyXEL Device's advanced WAN settings. Click the Advanced Setup button in the Internet Access Setup screen. The screen appears as shown. Figure 30 Network > WAN > Internet Access Setup: Advanced Setup P-660HN-T1H User’s Guide...
Page 76 Enter the MTU in this field. For ENET ENCAP, the MTU value is 1500. For PPPoE, the MTU value is 1492. For PPPoA and RFC 1483, the MTU is 65535. Back Click this to return to the previous screen without saving. P-660HN-T1H User’s Guide...
Page 77: The More Connections Screen
This is the name you gave to the Internet connection. VPI/VCI This field displays the Virtual Path Identifier (VPI) and Virtual Channel Identifier (VCI) numbers configured for this WAN connection. Encapsulation This field indicates the encapsulation method of the Internet connection. P-660HN-T1H User’s Guide...
Page 78: More Connections Edit
Click this to restore your previously saved settings. 6.3.1 More Connections Edit Use this screen to configure a connection. Click the edit icon in the More Connections screen to display the following screen. Figure 32 Network > WAN > More Connections: Edit P-660HN-T1H User’s Guide...
Page 79 If you use RFC 1483, enter the IP address given by your ISP in the IP Address field. Subnet Mask This option is available if you select ENET ENCAP in the Encapsulation field. Enter a subnet mask in dotted decimal notation. P-660HN-T1H User’s Guide...
Page 80: Configuring More Connections Advanced Setup
Use this screen to edit your ZyXEL Device's advanced WAN settings. Click the Advanced Setup button in the More Connections Edit screen. The screen appears as shown. Figure 33 Network > WAN > More Connections: Edit: Advanced Setup P-660HN-T1H User’s Guide...
Page 81: Wan Technical Reference
6.4 WAN Technical Reference This section provides some technical background information about the topics covered in this chapter. 6.4.1 Encapsulation Be sure to use the encapsulation method required by your ISP. The ZyXEL Device supports the following methods. P-660HN-T1H User’s Guide...
Page 82: Enet Encap
PPPoA. Refer to RFC 1661 for more information on PPP. 6.4.1.4 RFC 1483 RFC 1483 describes two methods for Multiprotocol Encapsulation over ATM Adaptation Layer 5 (AAL5). The first method allows multiplexing of multiple protocols over a single ATM virtual circuit (LLC-based multiplexing) and the second P-660HN-T1H User’s Guide...
Page 83: Multiplexing
If you have a dynamic IP, then the IP Address and Gateway IP Address fields are not applicable (N/A). If you have a static IP, then you only need to fill in the IP Address field and not the Gateway IP Address field. P-660HN-T1H User’s Guide...
Page 84: Nailed-Up Connection (Ppp)
(but not higher) than the maximum line speed. 1 ATM cell is 53 bytes (424 bits), so a maximum speed of 832Kbps gives a maximum PCR of 1962 cells/sec. This rate is not guaranteed because it is dependent on the line speed. P-660HN-T1H User’s Guide...
Page 85: Atm Traffic Classes
Variable Bit Rate (VBR) The Variable Bit Rate (VBR) ATM traffic class is used with bursty connections. Connections that use the Variable Bit Rate (VBR) traffic class can be grouped into real time (VBR-RT) or non-real time (VBR-nRT) connections. P-660HN-T1H User’s Guide...
Page 86 Unspecified Bit Rate (UBR) The Unspecified Bit Rate (UBR) ATM traffic class is for bursty data transfers. However, UBR doesn't guarantee any bandwidth and only delivers traffic when the network has spare bandwidth. An example application is background file transfer. P-660HN-T1H User’s Guide...
Page 87: Lan Setup
(Section 7.4 on page 92) to assign IP addresses on the LAN to specific individual computers based on their MAC Addresses. • Use the IP Alias screen (Section 7.5 on page 93) to change your ZyXEL Device’s IP alias settings. P-660HN-T1H User’s Guide...
Page 88: What You Need To Know About Lan
DNS (Domain Name System) is for mapping a domain name to its corresponding IP address and vice versa. The DNS server is extremely important because without it, you must know the IP address of a networking device before you can access it. P-660HN-T1H User’s Guide...
Page 89: Before You Begin
Enter the IP subnet mask into the IP Subnet Mask field. Unless instructed otherwise it is best to leave this alone, the configurator will automatically compute a subnet mask based upon the IP address you entered. Click Apply to save your settings. Figure 35 Network > LAN > IP P-660HN-T1H User’s Guide...
Page 90: The Advanced Lan Ip Setup Screen
The ZyXEL Device supports IGMP-v1, IGMP-v2 and IGMP-v3. Select None to disable Back Click this to return to the previous screen without saving. Apply Click this to save your changes. Cancel Click this to restore your previously saved settings. P-660HN-T1H User’s Guide...
Page 91: The Dhcp Setup Screen
This field specifies the size, or count of the IP address pool. Remote DHCP If Relay is selected in the DHCP field above then enter the IP Server address of the actual remote DHCP server here. DNS Server P-660HN-T1H User’s Guide...
Page 92: The Client List Screen
Enter the IP address that you want to assign to the computer on your LAN with the MAC address that you will also specify. MAC Address Enter the MAC address of a computer on your LAN. Click this to add a static DHCP entry. P-660HN-T1H User’s Guide...
Page 93: The Ip Alias Screen
LAN network. When you use IP alias, you can also configure firewall rules to control access between the LAN's logical networks (subnets). Note: Make sure that the subnets of the logical networks do not overlap. P-660HN-T1H User’s Guide...
Page 94: Configuring The Lan Ip Alias Screen
Alternatively, click the right mouse button to copy and/or paste the IP address. IP Subnet Mask Your ZyXEL Device will automatically calculate the subnet mask based on the IP address that you assign. Unless you are implementing subnetting, use the subnet mask computed by the ZyXEL Device. P-660HN-T1H User’s Guide...
Page 95: Lan Technical Reference
By default, RIP direction is set to Both and the Version set to RIP-1. Apply Click this to save your changes. Cancel Click this to restore your previously saved settings. 7.6 LAN Technical Reference This section provides some technical background information about the topics covered in this chapter. P-660HN-T1H User’s Guide...
Page 96: Lans, Wans And The Zyxel Device
IP address of a computer before you can access it. The DNS server addresses you enter when you set up DHCP are passed to the client machines along with the assigned IP address and subnet mask. There are two ways that an ISP disseminates the DNS server addresses. P-660HN-T1H User’s Guide...
Page 97: Lan Tcp/Ip
192.168.1.1, for your ZyXEL Device, but make sure that no other device on your network is using that IP address. The subnet mask specifies the network number portion of an IP address. Your ZyXEL Device will compute the subnet mask automatically based on the IP P-660HN-T1H User’s Guide...
Page 98: Rip Setup
The Version field controls the format and the broadcasting method of the RIP packets that the ZyXEL Device sends (it recognizes both formats when receiving). RIP-1 is universally supported; but RIP-2 carries more information. RIP-1 is P-660HN-T1H User’s Guide...
Page 99: Multicast
After that, the ZyXEL Device periodically updates this information. IP multicasting can be enabled/ disabled on the ZyXEL Device LAN and/or WAN interfaces in the web configurator (LAN; WAN). Select None to disable IP multicasting on these interfaces. P-660HN-T1H User’s Guide...
Page 100 Chapter 7 LAN Setup P-660HN-T1H User’s Guide...
Page 101: Wireless Lan
Distribution System, in which the ZyXEL Device acts as a bridge with other ZyXEL access points. • Use the Scheduling screen (see Section 8.7 on page 117) to configure the dates/times to enable or disable the wireless LAN. P-660HN-T1H User’s Guide...
Page 102: What You Need To Know About Wireless
8.1.3 Before You Start Before you start using these screens, ask yourself the following questions. See Section 8.1.2 on page 102 if some of the terms used here are not familiar to you. P-660HN-T1H User’s Guide...
Page 103: The Ap Screen
8.2 The AP Screen Use this screen to configure the wireless settings of your ZyXEL Device. Click Network > Wireless LAN to open the AP screen. Figure 42 Network > Wireless LAN > AP P-660HN-T1H User’s Guide...
Page 104: No Security
8.2.1 No Security In the Network > Wireless LAN > AP screen, select No Security from the Security Mode list to allow wireless devices to communicate with the ZyXEL Device without any data encryption or authentication. P-660HN-T1H User’s Guide...
Page 105: Wep Encryption
WPA2-PSK if all your wireless devices support it, or use WPA or WPA2 if your wireless devices support it and you have a RADIUS server. If your wireless devices support nothing stronger than WEP, use the highest encryption level available. Figure 44 Network > Wireless LAN > AP: Static WEP P-660HN-T1H User’s Guide...
Page 106: Wpa(2)-Psk
The re- keying process is the WPA(2) equivalent of automatically changing the WEP key for an AP and all stations in a WLAN on a periodic basis. P-660HN-T1H User’s Guide...
Page 107: Wpa(2) Authentication
The re- keying process is the WPA(2) equivalent of automatically changing the WEP key for an AP and all stations in a WLAN on a periodic basis. P-660HN-T1H User’s Guide...
Page 108: Wireless Lan Advanced Setup
Table 31 Network > Wireless LAN > AP: Advanced Setup LABEL DESCRIPTION RTS/CTS Enter a value between 0 and 2432. Threshold Fragmentation This is the maximum data fragment size that can be sent. Enter a value Threshold between 256 and 2432. P-660HN-T1H User’s Guide...
Page 109 Device. The transmission rate of your ZyXEL Device might be reduced. Back Click this to return to the previous screen without saving. Apply Click this to save your changes. Cancel Click this to restore your previously saved settings. P-660HN-T1H User’s Guide...
Page 110: Mac Filter
Enter the MAC addresses of the wireless devices that are allowed or denied Address access to the ZyXEL Device in these address fields. Enter the MAC addresses in a valid MAC address format, that is, six hexadecimal character pairs, for example, 12:34:56:78:9a:bc. P-660HN-T1H User’s Guide...
Page 111: The More Ap Screen
Modify Click the Edit icon to configure the SSID profile. Click the Remove icon to hide the SSID in the outgoing beacon frame so a station cannot obtain the SSID through scanning using a site survey tool. P-660HN-T1H User’s Guide...
Page 112: More Ap Edit
ZyXEL Device using this SSID. Edit Click this to go to the MAC Filter screen to configure MAC filter settings. See Section 8.2.6 on page 110 for more details. P-660HN-T1H User’s Guide...
Page 113: The Wps Screen
Figure 51 Network > Wireless LAN > WPS The following table describes the labels in this screen. Table 35 Network > Wireless LAN > WPS LABEL DESCRIPTION WPS Setup WPS Setup Select the check box to activate WPS on the ZyXEL Device. P-660HN-T1H User’s Guide...
Page 114: The Wps Station Screen
Use this screen to set up a WPS wireless network using either Push Button Configuration (PBC) or PIN Configuration. Click Network > Wireless LAN > WPS Station. The following screen displays. Figure 52 Network > Wireless LAN > WPS Station P-660HN-T1H User’s Guide...
Page 115: The Wds Screen
Note: WDS security is independent of the security settings between the ZyXEL Device and any wireless clients. Note: At the time of writing, WDS is compatible with other ZyXEL APs only. Not all models support WDS links. Check your other AP’s documentation. P-660HN-T1H User’s Guide...
Page 116 (six hexadecimal character pairs, for example 12:34:56:78:9a:bc). Enter a Pre-Shared Key (PSK) from 8 to 63 case-sensitive ASCII characters (including spaces and symbols). Apply Click this to save your changes. Cancel Click this to restore your previously saved settings. P-660HN-T1H User’s Guide...
Page 117: The Scheduling Screen
For example, if you set the time range from 12:00 to 23:00, the wireless LAN will be turned on only during this time period. Apply Click this to save your changes. Reset Click this to restore your previously saved settings. P-660HN-T1H User’s Guide...
Page 118: Wireless Lan Technical Reference
• An “ad-hoc” type of network is one in which there is no access point. Wireless clients connect to one another in order to exchange information. The following figure provides an example of a wireless network. Figure 55 Example of a Wireless Network P-660HN-T1H User’s Guide...
Page 119 This allows a variety of networks to exist in the same place without interfering with one another. When you create a network, you must select a channel to use. Since the available unlicensed spectrum varies from one country to another, the number of available channels also varies. P-660HN-T1H User’s Guide...
Page 120: Additional Wireless Terms
“key” phrase) can access the network. Second, they encrypt. This means that the information sent over the air is encoded. Only people with the code key can understand the information, and only people who have been authenticated are given the code key. P-660HN-T1H User’s Guide...
Page 121: Mac Address Filter
Some wireless devices, such as scanners, can detect wireless networks but cannot use wireless networks. These kinds of wireless devices might not have MAC addresses. Hexadecimal characters are 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, A, B, C, D, E, and F. P-660HN-T1H User’s Guide...
Page 122: User Authentication
The types of encryption you can choose depend on the type of authentication. (See Section 8.8.3.3 on page 122 for information about this.) Table 40 Types of Encryption for Each Type of Authentication NO AUTHENTICATION RADIUS SERVER Weakest No Security Static WEP WPA-PSK Strongest WPA2-PSK WPA2 P-660HN-T1H User’s Guide...
Page 123: Signal Problems
(AP). Intra-BSS traffic is traffic between wireless stations in the BSS. When Intra-BSS traffic blocking is disabled, wireless station A and B can access the wired network P-660HN-T1H User’s Guide...
Page 124: Mbssid
BSSIDs (they are in different BSSs), but have the same keys, they may hear each other’s communications (but not communicate with each other). • MBSSID should not replace but rather be used in conjunction with 802.1x security. P-660HN-T1H User’s Guide...
Page 125: Wireless Distribution System (Wds)
Number that allows one device to authenticate the other) in each of the two devices. When WPS is activated on a device, it has two minutes to find another device that also has WPS activated. Then, the two devices connect and set up a secure network by themselves. P-660HN-T1H User’s Guide...
Page 126: Push Button Configuration
Then, when WPS is activated on the first device, it presents its PIN to the second device. If the PIN matches, one device sends the network and security information to the other, allowing it to join the network. P-660HN-T1H User’s Guide...
Page 127 On a computer connected to the wireless client, try to connect to the Internet. If you can connect, WPS was successful. If you cannot connect, check the list of associated wireless clients in the AP’s configuration utility. If you see the wireless client in the list, WPS was successful. P-660HN-T1H User’s Guide...
Page 128 PSK or WPA2-PSK pre-shared key to the enrollee. Whether WPA-PSK or WPA2-PSK is used depends on the standards supported by the devices. If the registrar is already part of a network, it sends the existing information. If not, it generates the SSID and WPA(2)-PSK randomly. P-660HN-T1H User’s Guide...
Page 129 It will be the registrar in all subsequent WPS connections in which it is involved. If you want a configured AP to act as an enrollee, you must reset it to its factory defaults. P-660HN-T1H User’s Guide...
Page 130 CLIENT 1 ENROLLEE CLIENT 2 In step 3, you add another access point (AP2) to your network. AP2 is out of range of AP1, so you cannot use AP1 for the WPS handshake with the new access P-660HN-T1H User’s Guide...
Page 131 (if the device supports this feature). Then, you can enter the key into the non-WPS device and join the network as normal (the non-WPS device must also support WPA-PSK or WPA2-PSK). P-660HN-T1H User’s Guide...
Page 132 Check the MAC addresses of your wireless clients (usually printed on a label on the bottom of the device). If there is an unknown MAC address you can remove it or reset the AP. P-660HN-T1H User’s Guide...
Page 133: Network Address Translation (Nat)
IP address of a host when the packet is in the local network, while the global address refers to the IP address of the host when the same packet is traveling in the WAN side. P-660HN-T1H User’s Guide...
Page 134 • Choose SUA Only if you have just one public WAN IP address for your ZyXEL Device. • Choose Full Feature if you have multiple public WAN IP addresses for your ZyXEL Device. Finding Out More Section 9.6 on page 144 for advanced technical information on NAT. P-660HN-T1H User’s Guide...
Page 135: The Nat General Setup Screen
NAT sessions they can establish. If your network has a large number of users using peer to peer applications, you can lower this number to ensure no single client is exhausting all of the available NAT sessions. P-660HN-T1H User’s Guide...
Page 136: The Port Forwarding Screen
A default server receives packets from ports that are not specified in this screen. Note: If you do not assign a Default Server IP address, the ZyXEL Device discards all packets received for ports that are not specified here or in the remote management setup. P-660HN-T1H User’s Guide...
Page 137: Configuring The Port Forwarding Screen
9.3.1 Configuring the Port Forwarding Screen Click Network > NAT > Port Forwarding to open the following screen. Appendix E on page 305 for port numbers commonly used for particular services. Figure 65 Network > NAT > Port Forwarding P-660HN-T1H User’s Guide...
Page 138 Click the delete icon to delete an existing port forwarding rule. Note that subsequent address mapping rules move up by one when you take this action. Apply Click this to save your changes. Cancel Click this to restore your previously saved settings. P-660HN-T1H User’s Guide...
Page 139: The Port Forwarding Rule Edit Screen
Port translated, the device automatically calculates the last port of the translated port range. Back Click this to return to the previous screen without saving. P-660HN-T1H User’s Guide...
Page 140: The Address Mapping Screen
4, rules 5 to 7 will be pushed up by 1 rule, so old rules 5, 6 and 7 become new rules 4, 5 and 6. To change your ZyXEL Device’s address mapping settings, click Network > NAT > Address Mapping to open the following screen. Figure 67 Network > NAT > Address Mapping P-660HN-T1H User’s Guide...
Page 141 Click the edit icon to go to the screen where you can edit the address mapping rule. Click the delete icon to delete an existing address mapping rule. Note that subsequent address mapping rules move up by one when you take this action. P-660HN-T1H User’s Guide...
Page 142: The Address Mapping Rule Edit Screen
255.255.255.255 as the Local End IP address. This field is N/A for One-to-One and Server mapping types. Global Start This is the starting global IP address (IGA). Enter 0.0.0.0 here if you have a dynamic IP address from your ISP. P-660HN-T1H User’s Guide...
Page 143: The Alg Screen
Table 46 Network > NAT > ALG LABEL DESCRIPTION Enable SIP ALG Select this to make sure SIP (VoIP) works correctly with port- forwarding and address-mapping rules. Apply Click this to save your changes. Reset Click this to restore your previously saved settings. P-660HN-T1H User’s Guide...
Page 144: Nat Technical Reference
The global IP addresses for the inside hosts can be either static or dynamically assigned by the ISP. In addition, you can designate servers, for example, a web server and a telnet server, on your local network and make them accessible to the P-660HN-T1H User’s Guide...
Page 145: How Nat Works
Figure 70 How NAT Works NAT Table Inside Local Inside Global IP Address IP Address 192.168.1.10 IGA 1 192.168.1.13 192.168.1.11 IGA 2 192.168.1.12 IGA 3 192.168.1.13 IGA 4 192.168.1.12 192.168.1.10 IGA1 Inside Local Inside Global Address (ILA) Address (IGA) 192.168.1.11 192.168.1.10 P-660HN-T1H User’s Guide...
Page 146: Nat Application
• Many-to-Many No Overload: In Many-to-Many No Overload mode, the ZyXEL Device maps each local IP address to a unique global IP address. • Server: This type allows you to specify inside servers of different services behind the NAT to be accessible to the outside world. P-660HN-T1H User’s Guide...
Page 147 ILA2 IGA1 … Many-to-Many Overload ILA1 IGA1 ILA2 IGA2 ILA3 IGA1 ILA4 IGA2 … Many-to-Many No Overload ILA1 IGA1 ILA2 IGA2 ILA3 IGA3 … Server Server 1 IP IGA1 Server 2 IP IGA1 Server 3 IP IGA1 P-660HN-T1H User’s Guide...
Page 148 Chapter 9 Network Address Translation (NAT) P-660HN-T1H User’s Guide...
Page 149: Firewall
Once the queue is full, the system will ignore all incoming SYN requests, making the system unavailable for legitimate users. Denials of Service (DoS) attacks are aimed at devices and networks with a connection to the Internet. Their goal is not to steal information, but to disable a P-660HN-T1H User’s Guide...
Page 150 Filtering decisions are based not only on rules but also context. For example, traffic from the WAN may only be allowed to cross the firewall in response to a request from the LAN. P-660HN-T1H User’s Guide...
Page 151: The Firewall Screen
SAVE Click this to save your changes. CANCEL Click this to restore your previously saved settings. Enabling SPI blocks all traffic initiated from the WAN side, including the DMZ, virtual server and ACL on the WAN side. P-660HN-T1H User’s Guide...
Page 152 Chapter 10 Firewall P-660HN-T1H User’s Guide...
Page 153: Filters
An IP/MAC filter set consists of one or more filter rules. The ZyXEL Device allows you to configure up to twelve filter sets with six rules in each set, for a total of 72 filter rules in the system. P-660HN-T1H User’s Guide...
Page 154: The Url Filter Screen
This is the index number of the filter rule. This is the URL you have configured the ZyXEL Device to block. Apply Click this to save your changes. Delete Click this to remove the filter rule. Cancel Click this to restore your previously saved settings. P-660HN-T1H User’s Guide...
Page 155: The Application Filter Screen
Use this field to allow or deny Yahoo Messenger traffic Real Audio/Video Use this field to allow or deny transferring RealPlayer format files. Apply Click this to save your changes. Cancel Click this to restore your previously saved settings. P-660HN-T1H User’s Guide...
Page 156: The Ip/Mac Filter Screen
Interface Select the PVC to which to apply the filter. Direction Apply the filter to Both, Incoming or Outgoing traffic direction. IP/MAC Filter Rule Editing IP/MAC Filter Rule Select the index number of the filter rule. Index P-660HN-T1H User’s Guide...
Page 157 This is the destination port number. Protocol This is the upper layer protocol. Unmatched When a packet doesn’t match the rule, this is the action the ZyXEL Device takes on the packet. SAVE Click this to save your changes. P-660HN-T1H User’s Guide...
Page 158 Chapter 11 Filters Table 52 Access Management > Filter (IP/MAC) (continued) LABEL DESCRIPTION DELETE Click this to remove the filter rule. CANCEL Click this to restore your previously saved settings. P-660HN-T1H User’s Guide...
Page 159: Static Route
ISP behind router R2. You create another static route to communicate with a separate network behind a router R3 connected to the LAN. Figure 76 Example of Static Routing Topology P-660HN-T1H User’s Guide...
Page 160: What You Can Do In The Static Route Screens
Gateway This is the IP address of the gateway. The gateway is a router or switch on the same network segment as the device's LAN or WAN port. The gateway helps forward packets to their destinations. P-660HN-T1H User’s Guide...
Page 161: Static Route Edit
LAN or WAN port. The gateway helps forward packets to their destinations. Back Click this to return to the previous screen without saving. Apply Click this to save your changes. Cancel Click this to restore your previously saved settings. P-660HN-T1H User’s Guide...
Page 162 Chapter 12 Static Route P-660HN-T1H User’s Guide...
Page 163: Q/1P
13.1.2 What You Need to Know About 802.1Q/1P IEEE 802.1P Priority IEEE 802.1P specifies the user priority field and defines up to eight separate traffic types by inserting a tag into a MAC-layer frame that contains bits to define class of service. P-660HN-T1H User’s Guide...
Page 164: The 802.1Q/1P Group Setting Screen
13.2 The 802.1Q/1P Group Setting Screen Use this screen to activate 802.1Q/1P and display the VLAN groups. Click Advanced > 802.1Q/1P to display the following screen. P-660HN-T1H User’s Guide...
Page 165 Click the Edit button to configure the the ports in the VLAN group. Click the Remove button to delete the VLAN group. Apply Click this to save your changes. Cancel Click this to restore your previously saved settings. P-660HN-T1H User’s Guide...
Page 166: Editing 802.1Q/1P Group Setting
This field displays the types of ports available to join the VLAN group. Control Select Fixed for the port to be a permanent member of the VLAN group. Select Forbidden if you want to prohibit the port from joining the VLAN group. P-660HN-T1H User’s Guide...
Page 167: The 802.1Q/1P Port Setting Screen
13.3 The 802.1Q/1P Port Setting Screen Use this screen to configure the PVID for each port. Click Advanced > 802.1Q/ 1P > Port Setting to display the following screen. Figure 82 Advanced > 802.1Q/1P > Port Setting P-660HN-T1H User’s Guide...
Page 168 Assign a VLAN ID for the port. The valid VID range is between 1 and 4094. The ZyXEL Device assigns the PVID to untagged frames or priority-tagged frames received on this port. Apply Click this to save your changes. Cancel Click this to restore your previously saved settings. P-660HN-T1H User’s Guide...
Page 169: Quality Of Service (Qos)
(6) to VoIP traffic from the LAN interface, so that voice traffic would not get delayed when there is network congestion. Traffic from the boss’s IP address (192.168.1.23 for example) is mapped to queue 5. Traffic that does not match P-660HN-T1H User’s Guide...
Page 170: What You Can Do In The Qos Screens
When the packet passes through a compatible network, the networking device, such as a backbone switch, can provide specific treatment or service based on the tag or marker. Finding Out More Section 14.3 on page 174 for advanced technical information on QoS. P-660HN-T1H User’s Guide...
Page 171: The Qos Screen
Use this screen to enable or disable QoS and have the ZyXEL Device assign priority levels to traffic according to the port range, IEEE 802.1p priority level and/ or IP precedence. Click Advanced Setup > QoS to open the screen as shown next. Figure 84 Advanced Setup > QoS P-660HN-T1H User’s Guide...
Page 172 Select IPP/TOS to specify an IP precedence range and type of services. Select DSCP to specify a DiffServ Code Point (DSCP) range. IP Precedence Enter a range from 0 to 7 for IP precedence. Zero is the lowest priority Range and seven is the highest. P-660HN-T1H User’s Guide...
Page 173: The Qos Settings Summary Screen
Use this screen to display a summary of rules and actions configured for the ZyXEL Device. In the Advanced > QoS screen, click the QoS Settings Summary button to open the following screen. Figure 85 Advanced Setup > QoS > QoS Settings Summary P-660HN-T1H User’s Guide...
Page 174: Qos Technical Reference
Table 60 IEEE 802.1p Priority Level and Traffic Type PRIORITY TRAFFIC TYPE LEVEL Level 7 Typically used for network control traffic such as router configuration messages. Level 6 Typically used for voice traffic that is especially sensitive to jitter (jitter is the variations in delay). P-660HN-T1H User’s Guide...
Page 175: Ip Precedence
Table 61 Internal Layer2 and Layer3 QoS Mapping LAYER 2 LAYER 3 IEEE 802.1P PRIORITY QUEUE USER PRIORITY TOS (IP IP PACKET PRECEDENCE) DSCP (ETHERNET LENGTH (BYTE) PRIORITY) 000000 000000 >1100 P-660HN-T1H User’s Guide...
Page 176 IEEE 802.1P PRIORITY QUEUE USER PRIORITY TOS (IP IP PACKET PRECEDENCE) DSCP (ETHERNET LENGTH (BYTE) PRIORITY) 001110 250~1100 001100 001010 001000 010110 010100 010010 010000 011110 <250 011100 011010 011000 100110 100100 100010 100000 101110 101000 110000 111000 P-660HN-T1H User’s Guide...
Page 177: Dynamic Dns Setup
IP address as yourhost.dyndns.org. This feature is useful if you want to be able to use, for example, www.yourhost.dyndns.org and still reach your hostname. If you have a private WAN IP address, then you cannot use Dynamic DNS. P-660HN-T1H User’s Guide...
Page 178: The Dynamic Dns Screen
Type your user name. Password Type the password assigned to you. Enable Select the check box to enable DynDNS Wildcard. Wildcard Option Apply Click this to save your changes. Cancel Click this to restore your previously saved settings. P-660HN-T1H User’s Guide...
Page 179: Remote Management
To disable remote management of a service, select Disable in the corresponding Service Access field. You may only have one remote management session running at a time. The ZyXEL Device automatically disconnects a remote management session of lower priority P-660HN-T1H User’s Guide...
Page 180: What You Can Do In The Remote Management Screens
• There is already another remote management session with an equal or higher priority running. You may only have one remote management session running at one time. • There is a firewall rule that blocks it. P-660HN-T1H User’s Guide...
Page 181: The Www Screen
Note: If you disable the WWW service in the Remote MGMT > WWW screen, then the ZyXEL Device blocks all HTTP connection attempts. 16.2.1 Configuring the WWW Screen Click Advanced > Remote MGMT to display the WWW screen. Figure 88 Advanced > Remote MGMT > WWW P-660HN-T1H User’s Guide...
Page 182: The Telnet Screen
You can use Telnet to access the ZyXEL Device’s command line interface. Specify which interfaces allow Telnet access and from which IP address the access can come. Click Advanced > Remote MGMT > Telnet tab to display the screen as shown. Figure 89 Advanced > Remote MGMT > Telnet P-660HN-T1H User’s Guide...
Page 183: The Ftp Screen
Use this screen to specify which interfaces allow FTP access and from which IP address the access can come. To change your ZyXEL Device’s FTP settings, click Advanced > Remote MGMT > FTP. The screen appears as shown. Figure 90 Advanced > Remote MGMT > FTP P-660HN-T1H User’s Guide...
Page 184: The Snmp Screen
SNMP agent functionality, which allows a manager station to manage and monitor the ZyXEL Device through the network. The ZyXEL Device supports SNMP version one (SNMPv1) and version two (SNMPv2c). The next figure illustrates an SNMP management operation. Figure 91 SNMP Management Model P-660HN-T1H User’s Guide...
Page 185: Configuring Snmp
IP Address SNMP agent on the ZyXEL Device. Select All to allow any computer to access the SNMP agent. Choose Selected to just allow the computer with the IP address that you specify to access the SNMP agent. P-660HN-T1H User’s Guide...
Page 186: The Dns Screen
Choose Selected to just allow the computer with the IP address that you specify to send DNS queries to the ZyXEL Device. Apply Click this to save your changes. Cancel Click this to restore your previously saved settings. P-660HN-T1H User’s Guide...
Page 187: The Icmp Screen
Select WAN to reply to incoming WAN Ping requests. Otherwise select LAN & WAN to reply to both incoming LAN and WAN Ping requests. Apply Click this to save your changes. Cancel Click this to restore your previously saved settings. P-660HN-T1H User’s Guide...
Page 188 Chapter 16 Remote Management P-660HN-T1H User’s Guide...
Page 189: Universal Plug-And-Play (Upnp)
UPnP devices and enable exchange of simple product and service descriptions. NAT traversal allows the following: • Dynamic port mapping • Learning public IP addresses • Assigning lease times to mappings P-660HN-T1H User’s Guide...
Page 190 UPnP and ZyXEL ZyXEL has achieved UPnP certification from the Universal Plug and Play Forum UPnP™ Implementers Corp. (UIC). ZyXEL's UPnP implementation supports Internet Gateway Device (IGD) 1.0. See the following sections for examples of installing and using UPnP. P-660HN-T1H User’s Guide...
Page 191: The Upnp Screen
UPnP enabled device; this eliminates the need to manually configure port forwarding for the UPnP enabled application. Apply Click this to save your changes. Cancel Click this to restore your previously saved settings. P-660HN-T1H User’s Guide...
Page 192: Installing Upnp In Windows Example
Follow the steps below to install the UPnP in Windows Me. Click Start and Control Panel. Double-click Add/Remove Programs. Click on the Windows Setup tab and select Communication in the Components selection box. Click Details. Add/Remove Programs: Windows Setup: Communication P-660HN-T1H User’s Guide...
Page 193 Click OK to go back to the Add/Remove Programs Properties window and click Next. Restart the computer when prompted. Installing UPnP in Windows XP Follow the steps below to install the UPnP in Windows XP. Click Start and Control Panel. Double-click Network Connections. P-660HN-T1H User’s Guide...
Page 194 In the Network Connections window, click Advanced in the main menu and select Optional Networking Components …. Network Connections The Windows Optional Networking Components Wizard window displays. Select Networking Service in the Components selection box and click Details. Windows Optional Networking Components Wizard P-660HN-T1H User’s Guide...
Page 195: Using Upnp In Windows Xp Example
Make sure the computer is connected to a LAN port of the ZyXEL Device. Turn on your computer and the ZyXEL Device. Auto-discover Your UPnP-enabled Network Device Click Start and Control Panel. Double-click Network Connections. An icon displays under Internet Gateway. P-660HN-T1H User’s Guide...
Page 196 Chapter 17 Universal Plug-and-Play (UPnP) Right-click the icon and select Properties. Network Connections In the Internet Connection Properties window, click Settings to see the port mappings there were automatically created. Internet Connection Properties P-660HN-T1H User’s Guide...
Page 197 You may edit or delete the port mappings or click Add to manually add port mappings. Internet Connection Properties: Advanced Settings Internet Connection Properties: Advanced Settings: Add When the UPnP-enabled device is disconnected from your computer, all port mappings will be deleted automatically. P-660HN-T1H User’s Guide...
Page 198 IP address of the ZyXEL Device first. This comes helpful if you do not know the IP address of the ZyXEL Device. Follow the steps below to access the web configurator. Click Start and then Control Panel. Double-click Network Connections. P-660HN-T1H User’s Guide...
Page 199 Chapter 17 Universal Plug-and-Play (UPnP) Select My Network Places under Other Places. Network Connections An icon with the description for each UPnP-enabled device displays under Local Network. P-660HN-T1H User’s Guide...
Page 200 Network Connections: My Network Places Right-click on the icon for your ZyXEL Device and select Properties. A properties window displays with basic information about the ZyXEL Device. Network Connections: My Network Places: Properties: Example P-660HN-T1H User’s Guide...
Page 201: Cwmp
ZyXEL device. In order to use CWMP, you need to configure the following steps: Activate CWMP Specify the URL, username and password. Activate periodic inform and specify an interval value. P-660HN-T1H User’s Guide...
Page 202: The Cwmp Setup Screen
This user name on the management server and the ZyXEL Device must be the same. Type a user name of up to 255 printable characters found on an English-language keyboard. Spaces and characters such as @#$%^&*()_+ are allowed. P-660HN-T1H User’s Guide...
Page 203 Enter a value between 1 and 86400 seconds. Apply Click this to save your changes. Cancel Click this to restore your previously saved settings. P-660HN-T1H User’s Guide...
Page 204 Chapter 18 CWMP P-660HN-T1H User’s Guide...
Page 205: System Settings
(Section 19.3 on page 206) to set the system time. 19.2 The General Screen Use this screen to configure system admin password. Click Maintenance > System to open the General screen. Figure 98 Maintenance > System > General P-660HN-T1H User’s Guide...
Page 206: The Time And Date Screen
Use this screen to configure the ZyXEL Device’s time based on your local time zone. To change your ZyXEL Device’s time and date, click Maintenance > System > Time and Date. The screen appears as shown. Figure 99 Maintenance > System > Time and Date P-660HN-T1H User’s Guide...
Page 207 Daylight saving is a period from late spring to early fall when many Savings countries set their clocks ahead of normal local time by one hour to give more daytime light in the evening. Select this option if you use Daylight Saving Time. P-660HN-T1H User’s Guide...
Page 208 In Germany for instance, you would type 2 because Germany's time zone is one hour ahead of GMT or UTC (GMT+1). Apply Click this to save your changes. Cancel Click this to restore your previously saved settings. P-660HN-T1H User’s Guide...
Page 209: Logs
20.2 The System Log Screen Use the System Log screen to configure and view the logs you wish to display. To change your ZyXEL Device’s log settings, click Maintenance > Logs > Log Settings. The screen appears as shown. P-660HN-T1H User’s Guide...
Page 210 Select the types of logs that you want to display and record. Then click Submit to display the details. Clear Log Click this to delete all the logs. Save Log Click this to save the logs in a text file. P-660HN-T1H User’s Guide...
Page 211: Log Descriptions
The router is saving configuration changes. Configuration Change: PC = 0x%x, Task ID = 0x%x Someone has logged on to the router’s SSH server. Successful SSH login Someone has failed to log on to the router’s SSH SSH login failed server. P-660HN-T1H User’s Guide...
Page 212 [ TCP | UDP | IGMP | ESP | GRE | OSPF ] The router sent a message to notify a user that Router sent blocked web site the router blocked access to a web site that the message: TCP user requested. P-660HN-T1H User’s Guide...
Page 213 Attempted access matched a configured filter rule [ TCP | UDP | ICMP | IGMP | (denoted by its set and rule number) and was blocked Generic ] packet filter or forwarded according to the rule. matched (set: %d, rule: %d) P-660HN-T1H User’s Guide...
Page 214 Opening The PPP connection’s Challenge Handshake Authentication Protocol ppp:CHAP Opening stage is opening. The PPP connection’s Internet Protocol Control Protocol stage is ppp:IPCP starting. Starting The PPP connection’s Internet Protocol Control Protocol stage is ppp:IPCP Opening opening. P-660HN-T1H User’s Guide...
Page 215 The firewall detected a TCP teardrop attack. teardrop TCP The firewall detected an UDP teardrop attack. teardrop UDP The firewall detected an ICMP teardrop attack. teardrop ICMP (type:%d, code:%d) The firewall detected a TCP illegal command attack. illegal command TCP P-660HN-T1H User’s Guide...
Page 216 DIRECTION DESCRIPTION DIRECTION (L to W) LAN to WAN ACL set for packets traveling from the LAN to the WAN. (W to L) WAN to LAN ACL set for packets traveling from the WAN to the LAN. P-660HN-T1H User’s Guide...
Page 217 Redirect datagrams for the Type of Service and Host Echo Echo message Time Exceeded Time to live exceeded in transit Fragment reassembly time exceeded Parameter Problem Pointer indicates the error Timestamp Timestamp request message Timestamp Reply Timestamp reply message Information Request P-660HN-T1H User’s Guide...
Page 218 Please refer to RFC 2408 for detailed information on each type. Table 89 RFC-2408 ISAKMP Payload Types LOG DISPLAY PAYLOAD TYPE Security Association Proposal PROP Transform TRANS Key Exchange Identification Certificate Certificate Request CER_REQ Hash HASH Signature Nonce NONCE Notification NOTFY Delete Vendor ID P-660HN-T1H User’s Guide...
Page 219: Tools
Click Maintenance > Tools to open the Firmware screen. Follow the instructions in this screen to upload firmware to your ZyXEL Device. The upload process uses HTTP (Hypertext Transfer Protocol) and may take up to two minutes. After a successful upload, the system will reboot. P-660HN-T1H User’s Guide...
Page 220 Click this to begin the upload process. This process may take up to two minutes. After you see the Firmware Upload in Progress screen, wait two minutes before logging into the ZyXEL Device again. Figure 102 Firmware Upload In Progress P-660HN-T1H User’s Guide...
Page 221 After two minutes, log in again and check your new firmware version in the Status screen. If the upload was not successful, the following screen will appear. Click Return to go back to the Firmware screen. Figure 104 Error Message P-660HN-T1H User’s Guide...
Page 222: The Configuration Screen
The backup configuration file will be useful in case you need to return to your previous settings. Click Backup to save the ZyXEL Device’s current configuration to your computer. P-660HN-T1H User’s Guide...
Page 223 If you uploaded the default configuration file you may need to change the IP address of your computer to be in the same subnet as that of the default device IP address (192.168.1.1). See Appendix A on page 245 for details on how to set up your computer’s IP address. P-660HN-T1H User’s Guide...
Page 224 Figure 110 Reset In Process Message You can also press the RESET button on the rear panel to reset the factory defaults of your ZyXEL Device. Refer to Section 1.6 on page 25 for more information on the RESET button. P-660HN-T1H User’s Guide...
Page 225: The Restart Screen
You may need to do this if the ZyXEL Device hangs, for example. Click Maintenance > Tools > Restart. Click Restart to have the ZyXEL Device reboot. This does not affect the ZyXEL Device's configuration. Figure 111 Maintenance > Tools >Restart P-660HN-T1H User’s Guide...
Page 226 Chapter 21 Tools P-660HN-T1H User’s Guide...
Page 227: Diagnostic
228) to view the DSL line statistics and reset the ADSL line. 22.2 The General Screen Use this screen to ping an IP address. Click Maintenance > Diagnostic to open the screen shown next. Figure 112 Maintenance > Diagnostic > General P-660HN-T1H User’s Guide...
Page 228: The Dsl Line Screen
22.3 The DSL Line Screen Use this screen to view the DSL line statistics and reset the ADSL line. Click Maintenance > Diagnostic > DSL Line to open the screen shown next. Figure 113 Maintenance > Diagnostic > DSL Line P-660HN-T1H User’s Guide...
Page 229 ZyXEL Device sends an OAM F5 packet to the DSLAM/ATM switch and then returns it (loops it back) to the ZyXEL Device. The ATM loopback test is useful for troubleshooting problems with the DSLAM and ATM network. P-660HN-T1H User’s Guide...
Page 230 Reset ADSL Line Successfully!" Capture All Click this to display information and statistics about your ZyXEL Device’s Logs ATM statistics, DSL connection statistics, DHCP settings, firmware version, WAN and gateway IP address, VPI/VCI and LAN IP address. P-660HN-T1H User’s Guide...
Page 231: Troubleshooting
Turn the ZyXEL Device off and on. If the problem continues, contact the vendor. One of the LEDs does not behave as expected. Make sure you understand the normal behavior of the LED. See Section 1.5 on page P-660HN-T1H User’s Guide...
Page 232: Zyxel Device Access And Login
If this does not work, you have to reset the device to its factory defaults. See Section 1.6 on page I cannot see or access the Login screen in the web configurator. Make sure you are using the correct IP address. • The default IP address is 192.168.1.1. P-660HN-T1H User’s Guide...
Page 233 If this does not work, you have to reset the device to its factory defaults. See Section 23.1 on page 231. I cannot Telnet to the ZyXEL Device. See the troubleshooting suggestions for I cannot see or access the Login screen in the web configurator. Ignore the suggestions about your browser. P-660HN-T1H User’s Guide...
Page 234: Internet Access
Check the hardware connections, and make sure the LEDs are behaving as expected. See the Quick Start Guide and Section 1.5 on page Turn the ZyXEL Device off and on. If the problem continues, contact your ISP. P-660HN-T1H User’s Guide...
Page 235 If the problem continues, contact the network administrator or vendor, or try one of the advanced suggestions. Advanced Suggestions • Check the settings for QoS. If it is disabled, you might consider activating it. If it is enabled, you might consider raising or lowering the priority for some applications. P-660HN-T1H User’s Guide...
Page 236 Chapter 23 Troubleshooting P-660HN-T1H User’s Guide...
Page 237: Product Specifications
0º C ~ 40º C Temperature Storage Temperature -20º ~ 60º C Operation Humidity 20% ~ 90% RH Storage Humidity 20% ~ 90% RH 24.2 Firmware Specifications Table 95 Firmware Specifications Default IP Address 192.168.1.1 Default Subnet Mask 255.255.255.0 (24 bits) P-660HN-T1H User’s Guide...
Page 238 Use logs for troubleshooting. You can send logs from the ZyXEL Device to an external syslog server. Universal Plug and A UPnP-enabled device can dynamically join a network, obtain an Play (UPnP) IP address and convey its capabilities to other devices on the network. P-660HN-T1H User’s Guide...
Page 239 Ethernet interface. Your device supports three logical LAN interfaces via its single physical Ethernet interface with the your device itself as the gateway for each LAN network. Packet Filters Your device’s packet filtering function allows added network security and management. P-660HN-T1H User’s Guide...
Page 240 ADSL physical connection ATM AAL5 (ATM Adaptation Layer type Support multi-protocol over AAL5 (RFC2684/1483) Support PPP over ATM AAL5 (RFC2364) PPP over Ethernet support for DSL connection (RFC 2516) Support VC-based and LLC-based multiplexing Support up to 8 PVCs I.610 F4/F5 OAM TR-067/TR-100 supported P-660HN-T1H User’s Guide...
Page 241: Wireless Features
Wi-Fi Protected Access (WPA) is a subset of the IEEE 802.11i security standard. Key differences between WPA and WEP are user authentication and improved data encryption. WPA2 WPA 2 is a wireless security standard that defines stronger encryption, authentication and key management than WPA. P-660HN-T1H User’s Guide...
Page 242 The Point-to-Point Protocol (PPP) RFC 1723 RIP-2 (Routing Information Protocol) RFC 2236 Internet Group Management Protocol, Version 2. RFC 2364 PPP over AAL5 (PPP over ATM over ADSL) RFC 2408 Internet Security Association and Key Management Protocol (ISAKMP) P-660HN-T1H User’s Guide...
Page 243 MS PPTP (Microsoft's implementation of Point to Point Tunneling Protocol) MBM v2 Media Bandwidth Management v2 RFC 2383 ST2+ over ATM Protocol Specification - UNI 3.1 Version TR-069 TR-069 DSL Forum Standard for CPE Wan Management. 1.363.5 Compliant AAL5 SAR (Segmentation And Re-assembly) P-660HN-T1H User’s Guide...
Page 244: Power Adaptor Specifications
Power Consumption 7.7 Watt max Safety Standards ANSI/UL 60950-1, CSA 60950-1 EUROPEAN PLUG STANDARDS AC Power Adapter Model Input Power AC 230Volts/50Hz Output Power DC 12Volts/1.0A Power Consumption 8.3 Watt max Safety Standards CE, GS or TUV, EN60950-1 P-660HN-T1H User’s Guide...
Page 245: Appendix A Setting Up Your Computer's Ip Address
"communicate" with your network. If you manually assign IP information instead of using dynamic assignment, make sure that your computers have IP addresses that place them in the same subnet as the ZyXEL Device’s LAN port. P-660HN-T1H User’s Guide...
Page 246 In the Network window, click Add. Select Adapter and then click Add. Select the manufacturer and model of your network adapter and then click OK. If you need TCP/IP: In the Network window, click Add. Select Protocol and then click Add. P-660HN-T1H User’s Guide...
Page 247 • If your IP address is dynamic, select Obtain an IP address automatically. • If you have a static IP address, select Specify an IP address and type your information into the IP Address and Subnet Mask fields. Figure 115 Windows 95/98/Me: TCP/IP Properties: IP Address P-660HN-T1H User’s Guide...
Page 248 Click Start and then Run. In the Run window, type "winipcfg" and then click OK to open the IP Configuration window. Select your network adapter. You should see your computer's IP address, subnet mask and default gateway. P-660HN-T1H User’s Guide...
Page 249 The following example figures use the default Windows XP GUI theme. Click start (Start in Windows 2000/NT), Settings, Control Panel. Figure 117 Windows XP: Start Menu In the Control Panel, double-click Network Connections (Network and Dial- up Connections in Windows 2000/NT). Figure 118 Windows XP: Control Panel P-660HN-T1H User’s Guide...
Page 250 Figure 119 Windows XP: Control Panel: Network Connections: Properties Select Internet Protocol (TCP/IP) (under the General tab in Win XP) and then click Properties. Figure 120 Windows XP: Local Area Connection Properties The Internet Protocol TCP/IP Properties window opens (the General tab in Windows XP). P-660HN-T1H User’s Guide...
Page 251 Gateway. To manually configure a default metric (the number of transmission hops), clear the Automatic metric check box and type a metric in Metric. • Click Add. • Repeat the previous three steps for each default gateway you want to add. P-660HN-T1H User’s Guide...
Page 252 • Click Obtain DNS server address automatically if you do not know your DNS server IP address(es). • If you know your DNS server IP address(es), click Use the following DNS server addresses, and type them in the Preferred DNS server and Alternate DNS server fields. P-660HN-T1H User’s Guide...
Page 253: Windows Vista
In the Command Prompt window, type "ipconfig" and then press [ENTER]. You can also open Network Connections, right-click a network connection, click Status and then click the Support tab. Windows Vista This section shows screens from Windows Vista Enterprise Version 6.0. P-660HN-T1H User’s Guide...
Page 254 Click the Start icon, Control Panel. Figure 124 Windows Vista: Start Menu In the Control Panel, double-click Network and Internet. Figure 125 Windows Vista: Control Panel Click Network and Sharing Center. Figure 126 Windows Vista: Network And Internet P-660HN-T1H User’s Guide...
Page 255 Figure 127 Windows Vista: Network and Sharing Center Right-click Local Area Connection and then click Properties. Note: During this procedure, click Continue whenever Windows displays a screen saying that it needs your permission to continue. Figure 128 Windows Vista: Network and Sharing Center P-660HN-T1H User’s Guide...
Page 256 • If you have a dynamic IP address click Obtain an IP address automatically. • If you have a static IP address click Use the following IP address and fill in the IP address, Subnet mask, and Default gateway fields. P-660HN-T1H User’s Guide...
Page 257 Gateway. To manually configure a default metric (the number of transmission hops), clear the Automatic metric check box and type a metric in Metric. • Click Add. • Repeat the previous three steps for each default gateway you want to add. P-660HN-T1H User’s Guide...
Page 258 • Click Obtain DNS server address automatically if you do not know your DNS server IP address(es). • If you know your DNS server IP address(es), click Use the following DNS server addresses, and type them in the Preferred DNS server and Alternate DNS server fields. P-660HN-T1H User’s Guide...
Page 259 Click Start, All Programs, Accessories and then Command Prompt. In the Command Prompt window, type "ipconfig" and then press [ENTER]. You can also open Network Connections, right-click a network connection, click Status and then click the Support tab. P-660HN-T1H User’s Guide...
Page 260 Appendix A Setting up Your Computer’s IP Address Macintosh OS 8/9 Click the Apple menu, Control Panel and double-click TCP/IP to open the TCP/ IP Control Panel. Figure 133 Macintosh OS 8/9: Apple Menu P-660HN-T1H User’s Guide...
Page 261 Close the TCP/IP Control Panel. Click Save if prompted, to save changes to your configuration. Turn on your ZyXEL Device and restart your computer (if prompted). Verifying Settings Check your TCP/IP properties in the TCP/IP Control Panel window. P-660HN-T1H User’s Guide...
Page 262: Macintosh Os X
• Select Built-in Ethernet from the Show list. • Click the TCP/IP tab. For dynamically assigned settings, select Using DHCP from the Configure list. Figure 136 Macintosh OS X: Network For statically assigned settings, do the following: P-660HN-T1H User’s Guide...
Page 263 Follow the steps below to configure your computer IP address using the KDE. Click the Red Hat button (located on the bottom left corner), select System Setting and click Network. Figure 137 Red Hat 9.0: KDE: Network Configuration: Devices P-660HN-T1H User’s Guide...
Page 264 If you know your DNS server IP address(es), click the DNS tab in the Network Configuration screen. Enter the DNS server information in the fields provided. Figure 139 Red Hat 9.0: KDE: Network Configuration: DNS Click the Devices tab. P-660HN-T1H User’s Guide...
Page 265 • If you have a dynamic IP address, enter dhcp in the BOOTPROTO= field. The following figure shows an example. Figure 141 Red Hat 9.0: Dynamic IP Address Setting in ifconfig-eth0 DEVICE=eth0 ONBOOT=yes BOOTPROTO=dhcp USERCTL=no PEERDNS=yes TYPE=Ethernet P-660HN-T1H User’s Guide...
Page 266 Figure 144 Red Hat 9.0: Restart Ethernet Card [root@localhost init.d]# network restart Shutting down interface eth0: [OK] Shutting down loopback interface: [OK] Setting network parameters: [OK] Bringing up loopback interface: [OK] Bringing up interface eth0: [OK] P-660HN-T1H User’s Guide...
Page 267: Verifying Settings
HWaddr 00:50:BA:72:5B:44 inet addr:172.23.19.129 Bcast:172.23.19.255 Mask:255.255.255.0 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:717 errors:0 dropped:0 overruns:0 frame:0 TX packets:13 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:100 RX bytes:730412 (713.2 Kb) TX bytes:1570 (1.5 Kb) Interrupt:10 Base address:0x1000 [root@localhost]# P-660HN-T1H User’s Guide...
Page 268 Appendix A Setting up Your Computer’s IP Address P-660HN-T1H User’s Guide...
Page 269: Appendix B Ip Addresses And Subnetting
192.168.1.1). Each of these four parts is known as an octet. An octet is an eight-digit binary number (for example 11000000, which is 192 in decimal notation). Therefore, each octet has a possible range of 00000000 to 11111111 in binary, or 0 to 255 in decimal. P-660HN-T1H User’s Guide...
Page 270: Subnet Masks
ID of an IP address (192.168.1.2 in decimal). Table 99 Subnet Masks OCTET: OCTET: OCTET: OCTET (192) (168) IP Address (Binary) 11000000 10101000 00000001 00000010 Subnet Mask (Binary) 11111111 11111111 11111111 00000000 Network Number 11000000 10101000 00000001 Host ID 00000010 P-660HN-T1H User’s Guide...
Page 271 MAXIMUM NUMBER OF SUBNET MASK HOST ID SIZE HOSTS 8 bits 255.0.0.0 24 bits – 2 16777214 16 bits 255.255.0.0 16 bits – 2 65534 24 bits 255.255.255.0 8 bits – 2 29 bits 255.255.255.2 3 bits – 2 P-660HN-T1H User’s Guide...
Page 272 In this example, the company network address is 192.168.1.0. The first three octets of the address (192.168.1) are the network number, and the remaining octet is the host ID, allowing a maximum of 2 – 2 or 254 possible hosts. P-660HN-T1H User’s Guide...
Page 273 The “borrowed” host ID bit can have a value of either 0 or 1, allowing two subnets; 192.168.1.0 /25 and 192.168.1.128 /25. The following figure shows the company network after subnetting. There are now two sub-networks, A and B. Figure 148 Subnetting Example: After Subnetting P-660HN-T1H User’s Guide...
Page 274 Table 104 Subnet 2 LAST OCTET BIT IP/SUBNET MASK NETWORK NUMBER VALUE IP Address 192.168.1. IP Address (Binary) 11000000.10101000.00000001. 01000000 Subnet Mask (Binary) 11111111.11111111.11111111. 11000000 Subnet Address: Lowest Host ID: 192.168.1.65 192.168.1.64 Broadcast Address: Highest Host ID: 192.168.1.126 192.168.1.127 P-660HN-T1H User’s Guide...
Page 275 Similarly, use a 27-bit mask to create eight subnets (000, 001, 010, 011, 100, 101, 110 and 111). The following table shows IP address last octet values for each subnet. Table 107 Eight Subnets SUBNET LAST BROADCAST SUBNET FIRST ADDRESS ADDRESS ADDRESS ADDRESS P-660HN-T1H User’s Guide...
Page 276: Configuring Ip Addresses
255.255.255.248 (/29) 8192 255.255.255.252 (/30) 16384 255.255.255.254 (/31) 32768 Configuring IP Addresses Where you obtain your network number depends on your particular situation. If the ISP or your network administrator assigns you a block of registered IP P-660HN-T1H User’s Guide...
Page 277 Regardless of your particular situation, do not create an arbitrary IP address; always follow the guidelines above. For more information on address assignment, please refer to RFC 1597, Address Allocation for Private Internets and RFC 1466, Guidelines for Management of IP Address Space. P-660HN-T1H User’s Guide...
Page 278 Appendix B IP Addresses and Subnetting P-660HN-T1H User’s Guide...
Page 279: Appendix C Pop-Up Windows, Javascripts And Java Permissions
Disable Pop-up Blockers In Internet Explorer, select Tools, Pop-up Blocker and then select Turn Off Pop-up Blocker. Figure 149 Pop-up Blocker You can also check if pop-up blocking is disabled in the Pop-up Blocker section in the Privacy tab. P-660HN-T1H User’s Guide...
Page 280 Click Apply to save this setting. Enable Pop-up Blockers with Exceptions Alternatively, if you only want to allow pop-up windows from your device, see the following steps. In Internet Explorer, select Tools, Internet Options and then the Privacy tab. P-660HN-T1H User’s Guide...
Page 281 Select Settings…to open the Pop-up Blocker Settings screen. Figure 151 Internet Options: Privacy Type the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”. For example, http://192.168.167.1. P-660HN-T1H User’s Guide...
Page 282 Figure 152 Pop-up Blocker Settings Click Close to return to the Privacy screen. Click Apply to save this setting. JavaScripts If pages of the web configurator do not display properly in Internet Explorer, check that JavaScripts are allowed. P-660HN-T1H User’s Guide...
Page 283 Figure 153 Internet Options: Security Click the Custom Level... button. Scroll down to Scripting. Under Active scripting make sure that Enable is selected (the default). Under Scripting of Java applets make sure that Enable is selected (the default). P-660HN-T1H User’s Guide...
Page 284: Java Permissions
Figure 154 Security Settings - Java Scripting Java Permissions From Internet Explorer, click Tools, Internet Options and then the Security tab. Click the Custom Level... button. Scroll down to Microsoft VM. Under Java permissions make sure that a safety level is selected. P-660HN-T1H User’s Guide...
Page 285 Click OK to close the window. Figure 155 Security Settings - Java JAVA (Sun) From Internet Explorer, click Tools, Internet Options and then the Advanced tab. Make sure that Use Java 2 for <applet> under Java (Sun) is selected. P-660HN-T1H User’s Guide...
Page 286 Mozilla Firefox 2.0 screens are used here. Screens for other versions may vary. You can enable Java, Javascripts and pop-ups in one screen. Click Tools, then click Options in the screen that appears. Figure 157 Mozilla Firefox: Tools > Options P-660HN-T1H User’s Guide...
Page 287 Appendix C Pop-up Windows, JavaScripts and Java Permissions Click Content.to show the screen below. Select the check boxes as shown in the following screen. Figure 158 Mozilla Firefox Content Security P-660HN-T1H User’s Guide...
Page 288 Appendix C Pop-up Windows, JavaScripts and Java Permissions P-660HN-T1H User’s Guide...
Page 289: Appendix D Wireless Lans
(AP). Intra-BSS traffic is traffic between wireless clients in the BSS. When Intra-BSS is enabled, wireless client A and B can access the wired network and communicate P-660HN-T1H User’s Guide...
Page 290 This wired connection between APs is called a Distribution System (DS). This type of wireless LAN topology is called an Infrastructure WLAN. The Access Points not only provide communication with the wired network but also mediate wireless network traffic in the immediate neighborhood. P-660HN-T1H User’s Guide...
Page 291 AP is using channel 1, then you need to select a channel between 6 or 11. RTS/CTS A hidden node occurs when two stations are within range of the same access point, but are not within range of each other. The following figure illustrates a P-660HN-T1H User’s Guide...
Page 292 RTS (Request To Send)/CTS (Clear to Send) handshake will never occur as data frames will be fragmented before they reach RTS/CTS size. Note: Enabling the RTS Threshold causes redundant network overhead that could negatively affect the throughput performance instead of providing a remedy. P-660HN-T1H User’s Guide...
Page 293: Fragmentation Threshold
IEEE 802.11g is fully compatible with the IEEE 802.11b standard. This means an IEEE 802.11b adapter can interface directly with an IEEE 802.11g access point (and vice versa) at 11 Mbps or lower depending on range. IEEE 802.11g has P-660HN-T1H User’s Guide...
Page 294 IEEE802.1x EAP with RADIUS Server Authentication Wi-Fi Protected Access (WPA) WPA2 Most Secure Note: You must enable the same wireless security settings on the ZyXEL Device and on all wireless clients that you want to associate with it. P-660HN-T1H User’s Guide...
Page 295 The following types of RADIUS messages are exchanged between the access point and the RADIUS server for user authentication: • Access-Request Sent by an access point requesting authentication. • Access-Reject Sent by a RADIUS server rejecting access. • Access-Accept Sent by a RADIUS server allowing access. P-660HN-T1H User’s Guide...
Page 296: Types Of Eap Authentication
The wireless client ‘proves’ that it knows the password by encrypting the password with the challenge and sends back the information. Password is not sent in plain text. P-660HN-T1H User’s Guide...
Page 297 However, PEAP only supports EAP methods, such as EAP-MD5, EAP-MSCHAPv2 and EAP-GTC (EAP-Generic Token Card), for client authentication. EAP-GTC is implemented only by Cisco. LEAP LEAP (Lightweight Extensible Authentication Protocol) is a Cisco implementation of IEEE 802.1x. P-660HN-T1H User’s Guide...
Page 298: Dynamic Wep Key Exchange
RADIUS server, you should use WPA2-PSK (WPA2-Pre-Shared Key) that only requires a single (identical) password entered into each access point, wireless gateway and wireless client. As long as the passwords match, a wireless client will be granted access to a WLAN. P-660HN-T1H User’s Guide...
Page 299 The common-password approach makes WPA(2)-PSK susceptible to brute-force password-guessing attacks but it’s still an improvement over WEP as it employs a consistent, single, alphanumeric password to derive a PMK which is used to generate unique temporal encryption P-660HN-T1H User’s Guide...
Page 300 The RADIUS server then checks the user's identification against its database and grants or denies network access accordingly. A 256-bit Pairwise Master Key (PMK) is derived from the authentication process by the RADIUS server and the client. P-660HN-T1H User’s Guide...
Page 301 The AP checks each wireless client's password and allows it to join the network only if the password matches. The AP and wireless clients generate a common PMK (Pairwise Master Key). The key itself is not sent over the network, but is derived from the PSK and the SSID. P-660HN-T1H User’s Guide...
Page 302: Security Parameters Summary
Enable without Dynamic WEP Open Enable with Dynamic WEP Key Enable without Dynamic WEP Disable Shared Enable with Dynamic WEP Key Enable without Dynamic WEP Disable TKIP/AES Enable WPA-PSK TKIP/AES Disable WPA2 TKIP/AES Enable WPA2-PSK TKIP/AES Disable P-660HN-T1H User’s Guide...
Page 303: Antenna Characteristics
Types of Antennas for WLAN There are two types of antennas used for wireless LAN applications. P-660HN-T1H User’s Guide...
Page 304: Positioning Antennas
For omni-directional antennas mounted on a wall or ceiling, point the antenna down. For a single AP application, place omni-directional antennas as close to the center of the coverage area as possible. For directional antennas, point the antenna in the direction of the desired coverage area. P-660HN-T1H User’s Guide...
Page 305: Appendix E Services
• If the Protocol is TCP, UDP, or TCP/UDP, this is the IP port number. • If the Protocol is USER, this is the IP protocol number. • Description: This is a brief explanation of the applications that use this service or the situations in which this service is used. P-660HN-T1H User’s Guide...
Page 306 IMAP4 The Internet Message Access Protocol is used for e-mail. IMAP4S This is a more secure version of IMAP4 that runs over SSL. TCP/UDP 6667 This is another popular Internet chat program. P-660HN-T1H User’s Guide...
Page 307 Remote Login. ROADRUNNER TCP/UDP 1026 This is an ISP that provides services mainly for cable modems. RTELNET Remote Telnet. RTSP TCP/UDP The Real Time Streaming (media control) Protocol (RTSP) is a remote control for multimedia on the Internet. P-660HN-T1H User’s Guide...
Page 308 Internet and in UNIX environments. It operates over TCP/IP networks. Its primary function is to allow users to log into remote host systems. VDOLIVE 7000 A videoconferencing solution. The UDP port number is specified in the user- application. defined P-660HN-T1H User’s Guide...
Page 309: Appendix F Legal Information
ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation. All rights reserved. Disclaimer ZyXEL does not assume any liability arising out of the application or use of any products, or software described herein.
Page 310 • To comply with FCC RF exposure compliance requirements, a separation distance of at least 20 cm must be maintained between the antenna of this device and all persons. 注意 ! 依據低功率電波輻射性電機管理辦法第十二條經型式認證合格之低功率射頻電機，非經許可，公司、商號或使用者均不得擅自變更頻率、加大功率或變更原設計之特性及功能。第十四條低功率射頻電機之使用不得影響飛航安全及干擾合法通信；經發現有干擾現象時，應立即停用，並改善至無干擾時方得繼續使用。前項合法通信，指依電信規定作業之無線電信。低功率射頻電機須忍受合法通信或工業、科學及醫療用電波輻射性電機設備之干擾。 P-660HN-T1H User’s Guide...
Page 311: Zyxel Limited Warranty
Repair or replacement, as provided under this warranty, is the exclusive remedy of the purchaser. This warranty is in lieu of all other warranties, express or implied, including any implied warranty of merchantability or fitness for a particular use or P-660HN-T1H User’s Guide...
Page 312 Registration Register your product online to receive e-mail notices of firmware upgrades and information at www.zyxel.com for global products, or at www.us.zyxel.com for North American products. P-660HN-T1H User’s Guide...
Page 313: Index
76, 81, 85 Certificate Authority address mapping See CA. rules types certifications 141, 142, 146 notices administrator password 28, 206 viewing alerts channel alternative subnet mask notation interference antenna channel, wireless LAN directional gain omni-directional client list P-660HN-T1H User’s Guide...
Page 314 88, 91, 96 structure diagnostic IP/MAC filter DiffServ Code Point, see DSCP configuration MAC address disclaimer 110, 121 activation 88, 92, 96, 186 153, 154 Domain Name System, see DNS firewalls configuration DSCP DDoS DSL connections, status dynamic DNS P-660HN-T1H User’s Guide...
Page 315 136, 138 Management Information Base (MIB) ping private mapping address rules IP alias types configuration 141, 142, 146 NAT applications Maximum Burst Size, see MBS IP precedence Maximum Transmission Unit, see MTU 173, 175 P-660HN-T1H User’s Guide...
Page 316 SIP ALG 802.1p activation 173, 174 activation 171, 172 134, 135 DSCP Network Address Translation example see NAT IP precedence 173, 175 Network Address Translation, see NAT priority queue Quality of Service, see QoS P-660HN-T1H User’s Guide...
Page 317 LAN 104, 120 subnet mask 88, 97, 270 Security Parameter Index, see SPI subnetting Service Set IDentifier, see SSID Sustain Cell Rate, see SCR setup SYN attack DHCP firewalls syntax conventions IP alias system P-660HN-T1H User’s Guide...
Page 318 Universal Plug and Play, see UPnP setup upgrading firmware status UPnP traffic shaping activation example cautions 74, 79, 83 example 74, 79, 83 installation warranty NAT traversal note 115, 125 URL filter compatibility example web configurator 21, 27 login P-660HN-T1H User’s Guide...
Page 319 114, 115, 126 wizard example 107, 123 push button 23, 115, 126 authentication status reauthentication WPA-PSK 106, 123 pre-shared key 113, 125, 128 activation adding stations example limitations 114, 115, 126 push button 23, 115, 126 status P-660HN-T1H User’s Guide...
Page 320 Index P-660HN-T1H User’s Guide...
Page 321 Index P-660HN-T1H User’s Guide...
Page 322 Index P-660HN-T1H User’s Guide...

ZyXEL Communications P-660HN-T1H User Manual

About this User's Guide

Document Conventions

Safety Warnings

Contents Overview

Table of Contents

User's Guide

PART I User's Guide

Chapter 1 Introduction

Chapter 2 The Web Configurator

Chapter 3 Status Screens

Chapter 4 Tutorials

Technical Reference

Part II: Technical Reference

Chapter 5 Internet and Wireless Setup Wizard

Chapter 6 WAN Setup

Chapter 7 LAN Setup

Chapter 8 Wireless LAN

Chapter 9 Network Address Translation (NAT)

Chapter 10 Firewall

Chapter 11 Filters

Chapter 12 Static Route

Chapter 13 Q/1P

Chapter 14 Quality of Service (Qos)

Chapter 15 Dynamic DNS Setup

Chapter 16 Remote Management

Chapter 17 Universal Plug-And-Play (Upnp)

Chapter 18 CWMP

Chapter 19 System Settings

Chapter 20 Logs

Chapter 21 Tools

Chapter 22 Diagnostic

Chapter 23 Troubleshooting

Chapter 24 Product Specifications

Appendix A Setting up Your Computer's IP Address

Appendix B IP Addresses and Subnetting

Appendix C Pop-Up Windows, Javascripts and Java Permissions

Appendix D Wireless Lans

Appendix E Services

Appendix F Legal Information

Index

Quick Links

Related Manuals for ZyXEL Communications P-660HN-T1H

Summary of Contents for ZyXEL Communications P-660HN-T1H