Documentation Feedback Send your comments, questions or suggestions to: techwriters@zyxel.com.tw Thank you! The Technical Writing Team, ZyXEL Communications Corp., 6 Innovation Road II, Science-Based Industrial Park, Hsinchu, 30099, Taiwan. Need More Help? More help is available at www.zyxel.com.
Page 4
• Product model and serial number. • Warranty Information. • Date that you received your device. • Brief description of the problem and the steps you took to solve it. P-663HN-51 User’s Guide...
Syntax Conventions • The P-663HN-51 may be referred to as the “ZyXEL Device”, the “device” or the “system” in this User’s Guide. • Product labels, screen names, field labels and field choices are all in bold font.
Page 6
Icons Used in Figures Figures in this User’s Guide may use the following generic icons. The ZyXEL Device icon is not an exact representation of your device. ZyXEL Device Computer Notebook computer Server DSLAM Firewall Telephone Switch Router P-663HN-51 User’s Guide...
Your product is marked with this symbol, which is known as the WEEE mark. WEEE stands for Waste Electronics and Electrical Equipment. It means that used electrical and electronic products should not be mixed with general waste. Used electrical and electronic equipment should be treated separately. P-663HN-51 User’s Guide...
Page 17
Appendix B Pop-up Windows, JavaScripts and Java Permissions ........243 Appendix C IP Addresses and Subnetting ................253 Appendix D Wireless LANs ....................265 Appendix E Common Services..................... 281 Appendix F Open Software Announcements ............... 285 Appendix G Legal Information....................291 Index............................295 P-663HN-51 User’s Guide...
Page 18
Table of Contents P-663HN-51 User’s Guide...
In the ZyXEL Device product name, “H” denotes an integrated 4-port switch (hub). Model names ending in “1”, for example P-663HN-51, denote a device that works over the analog telephone system, POTS (Plain Old Telephone Service). The DSL RJ-14 connects to your ADSL-enabled telephone lines.
Actual speeds attained also depend on the distance from your ISP, line quality, etc. 1.2 Ways to Manage the ZyXEL Device Use any of the following methods to manage the ZyXEL Device. This is the theoretical maximum rate under ideal conditions. P-663HN-51 User’s Guide...
Install the POTS splitters at the point where the telephone lines enter your premises. Connect the side labeled “Phone” to your telephone. Connect the side labeled “Modem” or “DSL” to your ZyXEL Device. Connect the side labeled “Line” to the telephone wall jack. P-663HN-51 User’s Guide...
After you are done, make sure that your telephone works. If your telephone does not work, disconnect the microfilter and contact either your local telephone company or the provider of the microfilter. Figure 3 Connecting a Microfilter P-663HN-51 User’s Guide...
After you are done making the hardware connections, press the power button to the ON position. Look at the LEDs (lights) on the front panel. The following figure shows the ZyXEL Device’s LEDs. Figure 4 Front Panel P-663HN-51 User’s Guide...
Page 26
The ZyXEL Device attempted to make an IP connection but failed. Possible causes are no response from a DHCP server, no PPPoE response, PPPoE authentication failed. The ZyXEL Device does not have an IP connection. P-663HN-51 User’s Guide...
23). Assign your computer a static IP address (choose one from 192.168.1.2 to 192.168.1.254). See Appendix A on page 217 for how to change your computer’s IP address. Launch your web browser. Type "192.168.1.1" as the URL. P-663HN-51 User’s Guide...
The user account can only access the ZyXEL Device from the LAN. For user access, enter the user account’s user name (user) and password (1234 is the default) and click OK to view the status only. The following screen appears. Figure 6 User Status Screen P-663HN-51 User’s Guide...
Make sure the POWER LED is on (not blinking). Press the RESET button for ten seconds or until the POWER LED begins to blink and then release it. When the POWER LED begins to blink, the defaults have been restored and the ZyXEL Device restarts. P-663HN-51 User’s Guide...
This screen displays statistics about the ZyXEL Device’s LAN connections. This screen displays statistics about the ZyXEL Device’s WAN connections. This screen shows low-level ATM protocol statistics. ADSL This screen displays statistics about the ZyXEL Device’s ADSL connection. P-663HN-51 User’s Guide...
Page 31
Dynamic DNS A dynamic DNS service lets the ZyXEL Device use a Web name like *.yourhost.dyndns.org while using a dynamic IP address. This lets others access the ZyXEL Device from the Internet without knowing it’s IP address. P-663HN-51 User’s Guide...
Page 32
TR-069 Client Use this screen to allow a Auto-Configuration Server (ACS) to manage the ZyXEL Device. Internet Time Use this screen to configure how the ZyXEL Device synchronizes its internal clock with a time server on the Internet. P-663HN-51 User’s Guide...
Page 33
Save/Reboot Use this screen to save all of your ZyXEL Device’s settings and reboot the ZyXEL Device without turning the power off. Logout Exit the web configurator. Note: Click Management > Logout to exit the web configurator. P-663HN-51 User’s Guide...
Page 34
Chapter 2 Introducing the Web Configurator P-663HN-51 User’s Guide...
Setup > WAN > Add (or Edit). Use the following screen (and the ones that come after it) to configure your Internet connection. See Chapter 5 on page 53 for more information. Figure 8 Advanced Setup > WAN > Add P-663HN-51 User’s Guide...
ZyXEL Device. Click Management > Access Control > Passwords to display the screen shown next. Use this screen to change the password. See Section 25.5 on page 195 for details. Figure 9 Management > Access Control > Passwords P-663HN-51 User’s Guide...
The Device Info > Summary screen displays when you log in. To get to it from another screen, just click Device Info > Summary. This screen displays general information about the ZyXEL Device. Figure 10 Device Info > Summary P-663HN-51 User’s Guide...
Page 38
If the primary server does not respond when the ZyXEL Device tries to Server resolve a domain name, the ZyXEL Device tries the server displayed in this field. Local Mac This is the MAC (Media Access Control) address the ZyXEL Device uses Address for it’s LAN connections. P-663HN-51 User’s Guide...
This is whether or not packet level QoS is enabled for the WAN connection. State This is whether or the WAN connection is enabled. Status This is the WAN connection’s current ADSL line state. IPv4 Address This is the WAN connection’s IP (version 4) address. P-663HN-51 User’s Guide...
This field displays the number of error packets received on or sent through the interface. Drops This field displays the number of incoming or outgoing packets dropped. Reset Click this button to have the ZyXEL Device clear the current LAN interface Statistics statistics and start collecting them again. P-663HN-51 User’s Guide...
This field displays the number of error packets received on or sent through the WAN connection. Drops This field displays the number of incoming or outgoing packets dropped. Reset Click this button to have the ZyXEL Device clear the current WAN statistics Statistics and start collecting them again. P-663HN-51 User’s Guide...
How many cells the ZyXEL Device received on disabled ports. Enable Errors In PTI Errors How many cells the ZyXEL Device received with an ATM header that had a Payload Type Indicator (PTI). In Idle Cells How many idle cells the ZyXEL Device received. P-663HN-51 User’s Guide...
Page 43
How many PDUs the ZyXEL Device discarded because the length in the Errors AAL5 trailer did not match the PDU length. Reset Click this button to have the ZyXEL Device clear the current ATM statistics Statisitcs and start collecting them again. P-663HN-51 User’s Guide...
Trellis coding helps to reduce the noise in ADSL transmissions. Trellis may reduce throughput but it makes the connection more stable. “RS” coding stands for Reed-Solomon error correction. Status This shows the ADSL link’s connection status. P-663HN-51 User’s Guide...
Page 45
LCD Errors The number of 1-second intervals since reset where loss of cell delineation occurred. Total Cells The total numbers of downstream and upstream ATM cells. Data Cells The total numbers of downstream and upstream data cells. P-663HN-51 User’s Guide...
Figure 16 Device Info > Statistics > ADSL > ADSL BER Test Select for how many seconds to perform the test and click Start. Figure 17 Device Info > Statistics > ADSL > ADSL BER Test: Results P-663HN-51 User’s Guide...
"1" for directly connected networks. The number must be between "1" and "15"; a number greater than "15" means the link is down. The smaller the number, the lower the "cost". P-663HN-51 User’s Guide...
TCP/IP configuration at start-up from a server. You can configure the ZyXEL Device as a DHCP server or disable it. When configured as a server, the ZyXEL Device provides the TCP/IP configuration for the clients. If DHCP P-663HN-51 User’s Guide...
Page 49
IP Address This field displays the IP address assigned to the DHCP client. Expires In This field displays for how much longer the host has the lease for the assigned IP address. P-663HN-51 User’s Guide...
Page 50
Chapter 4 Device Information P-663HN-51 User’s Guide...
Despite the extra bandwidth and processing overhead, this method may be advantageous if it is not practical to have a separate VC for each carried protocol, for example, if charging heavily depends on the number of simultaneous VCs. P-663HN-51 User’s Guide...
The following figure illustrates the relationship between PCR, SCR and MBS. Figure 21 Example of Traffic Shaping 5.2.1 ATM Traffic Classes These are the basic ATM traffic classes defined by the ATM Forum Traffic Management 4.0 Specification. P-663HN-51 User’s Guide...
5.3 WAN Click Advanced Setup > WAN to open the following screen. This screen displays your ZyXEL Device’s WAN Internet access settings. You can also edit those settings and add more settings. The screen differs by the encapsulation. P-663HN-51 User’s Guide...
Page 56
Click this button to go to a screen where you can configure settings for a new WAN connection. Remove To remove a WAN connection, select its Remove check box and click the Remove button. Save/Reboot Click this button to apply and save your changes. The ZyXEL Device restarts. P-663HN-51 User’s Guide...
802.1q. Separate VLANs can be used to give different priorities to the traffic from different ports. 802.1Q VLAN ID When you enable VLAN multiplexing, type the VLAN ID that the ZyXEL Device is to add to the traffic sent through this WAN connection. P-663HN-51 User’s Guide...
PPP session based on RFC1483 and sends it through an ATM PVC (Permanent Virtual Circuit) to the Internet Service Provider’s (ISP) DSLAM (digital access multiplexer). Please refer to RFC 2364 for more information on PPPoA. Refer to RFC 1661 for more information on PPP. P-663HN-51 User’s Guide...
ZyXEL Device passes traffic through to another device (a computer or router for example) that handles authenticating with the ISP. 5.6 Encapsulation There are two conventions to identify what protocols the virtual circuit (VC) is carrying. Be sure to use the encapsulation method required by your ISP. P-663HN-51 User’s Guide...
5.7 WAN Connection Type and Encapsulation Mode This is the second WAN setup add (or edit) screen. Use this screen to configure WAN connection type and encapsulation mode. Figure 24 Advanced Setup > WAN > Add (2) P-663HN-51 User’s Guide...
A nailed-up connection can be very expensive for obvious reasons. Do not specify a nailed-up connection unless your telephone company offers flat- rate service or you need a constant connection and the cost is of no concern P-663HN-51 User’s Guide...
The following table describes the labels in this screen. Table 15 Advanced Setup > WAN > Add (3: PPPoA) LABEL DESCRIPTION PPP User Name Enter the login name that your ISP gives you. PPP Password Enter the password associated with the user name above. P-663HN-51 User’s Guide...
Page 63
ZyXEL Device is its default gateway and DNS server. • The ZyXEL Device extends the ISP’s IP subnet to the LAN computer. • The ZyXEL Device bridges packets between the DSL and LAN interface, except for packets destined for the ZyXEL Device's LAN IP address. P-663HN-51 User’s Guide...
Page 64
IP address when it connects. Enable PPP debug Select this to turn on the debug mode for the PPP connection. mode Back Click this to return to the previous screen. Next Click this to go to the following screen. P-663HN-51 User’s Guide...
PPP Password Enter the password associated with the user name above. PPPoE Service Type the PPPoE service name given to you by your ISP. PPPoE uses a Name service name to identify and reach the PPPoE server. P-663HN-51 User’s Guide...
Page 66
ZyXEL Device is its default gateway and DNS server. • The ZyXEL Device extends the ISP’s IP subnet to the LAN computer. • The ZyXEL Device bridges packets between the DSL and LAN interface, except for packets destined for the ZyXEL Device's LAN IP address. P-663HN-51 User’s Guide...
Page 67
Disable PPPoE pass through if you do not need to allow hosts on the LAN to use PPPoE client software on their computers to connect to the ISP. Back Click this to return to the previous screen. Next Click this to go to the following screen. P-663HN-51 User’s Guide...
The ISP automatically assigns the WAN connection an IP address when it connects. Use the following Select this option to use a specific default gateway. Either enter the default gateway gateway’s IP address or select the WAN interface to use to connect to P-663HN-51 User’s Guide...
DESCRIPTION WAN IP Address Enter the IP address from the ISP. Use dotted decimal notation (like 192.168.1.1 for example). WAN Subnet Enter the subnet mask from the ISP. Use dotted decimal notation (like Mask 255.255.0.0 for example). P-663HN-51 User’s Guide...
Click this to go to the following screen. 5.15 IGMP Multicast Traditionally, IP packets are transmitted in one of either two ways - Unicast (1 sender - 1 recipient) or Broadcast (1 sender - everybody on the network). P-663HN-51 User’s Guide...
Page 71
After that, the ZyXEL Device periodically updates this information. IP multicasting can be enabled/disabled on the ZyXEL Device LAN and/or WAN interfaces in the web configurator (LAN; WAN). Select None to disable IP multicasting on these interfaces. P-663HN-51 User’s Guide...
Turn this on to allow multicast traffic and have the ZyXEL Device act as an IGMP proxy. Enable WAN Select this option to use this WAN connection or clear the option to Service not use this WAN connection. P-663HN-51 User’s Guide...
OK, click Save to save the settings. Use the Save/Reboot button in the Advanced Setup > WAN screen to restart the ZyXEL Device and use the WAN connection settings. Figure 31 Advanced Setup > WAN > Add (Summary: MER) P-663HN-51 User’s Guide...
Page 74
Chapter 5 WAN Setup P-663HN-51 User’s Guide...
The actual physical connection determines whether the ZyXEL Device ports are LAN or WAN ports. There are two separate IP networks, one inside the LAN network and the other outside the WAN network as shown next. Figure 32 LAN and WAN IP Addresses P-663HN-51 User’s Guide...
192.168.1.1, for your ZyXEL Device, but make sure that no other device on your network is using that IP address. The subnet mask specifies the network number portion of an IP address. Your ZyXEL Device will compute the subnet mask automatically based on the IP P-663HN-51 User’s Guide...
IP multicast computers. The address 224.0.0.1 is used for query messages and is assigned to the permanent group of all IP hosts (including gateways). All hosts must join the 224.0.0.1 group in order P-663HN-51 User’s Guide...
• Dynamic port mapping • Learning public IP addresses • Assigning lease times to mappings Windows Messenger is an example of an application that supports NAT traversal and UPnP. See the NAT chapter for more information on NAT. P-663HN-51 User’s Guide...
All UPnP-enabled devices may communicate freely with each other without additional configuration. Disable UPnP if this is not your intention. You must have IIS (Internet Information Services) enabled on the Windows web server for UPnP to work. P-663HN-51 User’s Guide...
The following table describes the fields in this screen. Table 21 Advanced Setup > LAN LABEL DESCRIPTION IP Address Enter the LAN IP address of your ZyXEL Device in dotted decimal notation, for example, 192.168.1.1 (factory default). Subnet Mask Type the subnet mask. P-663HN-51 User’s Guide...
Page 81
ZyXEL Device in dotted decimal notation, for example, 10.0.0.1. Type LAN interface the subnet mask. Save Click Save to save your changes to the ZyXEL Device. Save/Reboot Click this button to apply and save your changes. The ZyXEL Device restarts. P-663HN-51 User’s Guide...
MAC Address Enter the MAC address to which to assign this entry’s IP address. IP Address Enter the IP address to assign to a device with this entry’s MAC address. Save/Apply Click this to save your changes. P-663HN-51 User’s Guide...
You can allocate a server IP address that corresponds to a port or a range of ports. Many residential broadband ISP accounts do not allow you to run any server processes (such as a Web or FTP server) from your location. Your ISP may P-663HN-51 User’s Guide...
ISP assigns the WAN IP address. The NAT network appears as a single host on the Internet. Figure 35 Multiple Servers Behind NAT Example 7.3 Configuring Virtual Servers Note: The NAT screens are available only when you enable NAT in the WAN configuration. P-663HN-51 User’s Guide...
Page 85
These are the ports the ZyXEL Device uses for the traffic that it Start, Internal forwards based on this virtual server entry. Port End Server IP This is the LAN IP address to which the ZyXEL Device forwards the Address incoming traffic. P-663HN-51 User’s Guide...
Enter the LAN IP address to which the ZyXEL Device should forward the Address traffic. Save/Apply When using a pre-defined service, if you do not want to modify the port numbers, you can click this button to save the changes and have the ZyXEL Device start using them. P-663HN-51 User’s Guide...
LAN can use the service in the same manner. This way you do not need to configure a new IP address each time you want a different LAN computer to use the application. P-663HN-51 User’s Guide...
Page 88
Protocol) or two hours with TCP/IP (Transfer Control Protocol/Internet Protocol). Click Advanced Setup > NAT > Port Triggering to open the following screen. Use this screen to change your ZyXEL Device’s trigger port settings. Figure 39 Advanced Setup > NAT > Port Triggering P-663HN-51 User’s Guide...
Click Advanced Setup > NAT > Port Triggering > Add to open the following screen. Use this screen to change your ZyXEL Device’s trigger port settings. Figure 40 Advanced Setup > NAT > Port Triggering > Add P-663HN-51 User’s Guide...
Note: If you do not assign a DMZ host IP address, the ZyXEL Device discards all packets received for ports that are not specified here or in the remote management setup. P-663HN-51 User’s Guide...
Page 91
Specify the IP address of the LAN computer to which you want to send IP Address packets from ports that are not specified in the applications in the virtual server configuration. Save/Apply Click this button to save the changes and have the ZyXEL Device start using them. P-663HN-51 User’s Guide...
This is the IP address and subnet mask of a computer on the Internet to Address / which this entry applies. Mask Dest. Port This is the destination port for traffic to which this entry applies. Remove To remove a rule, select its Remove check box and click the Remove button. P-663HN-51 User’s Guide...
This is the IP address and subnet mask of a computer on the Internet to IP Address which this entry applies. Destination Type the subnet mask of a computer on the Internet to which this entry Subnet applies. Mask P-663HN-51 User’s Guide...
Address / entry allows traffic from the Internet. Mask Dest. Port This is the destination port for traffic to which this entry applies. Remove To remove a rule, select its Remove check box and click the Remove button. P-663HN-51 User’s Guide...
Type the IP address of a computer on the Internet to which this entry Address applies. Source Type the subnet mask of a computer on the Internet to which this entry Subnet Mask applies. Source Port Type the source port for traffic (from the Internet) to which this entry applies. P-663HN-51 User’s Guide...
Page 97
Type the destination port for traffic to which this entry applies. Port Select the WAN interface(s) to which this rule applies. Interfaces Save/Apply Click this button to save the changes and have the ZyXEL Device start using them. P-663HN-51 User’s Guide...
This is the ending time for the blocked access period. Click this button to go to a screen where you can configure settings for a new entry. Remove To remove an entry, select its Remove check box and click the Remove button. P-663HN-51 User’s Guide...
Select to which days of the week the blocking schedule applies. Start Blocking This is the beginning time for the blocking period. Include a two-digit Time number of hours followed by a colon and a. two-digit number of hours. P-663HN-51 User’s Guide...
Page 101
End Blocking Time This is the ending time for the blocking period. Include a two-digit number of hours followed by a colon and a. two-digit number of hours. Save/Apply Click this button to save the changes and have the ZyXEL Device start using them. P-663HN-51 User’s Guide...
Note: The ZyXEL Device applies QoS to upstream traffic (going out through the WAN interface). 10.1.1 IEEE 802.1Q Tag The IEEE 802.1Q standard defines an explicit VLAN tag in the MAC header to identify the VLAN membership of a frame across bridges. A VLAN tag includes the P-663HN-51 User’s Guide...
DiffServ-compliant network devices along the route based on the application types and traffic flow. Packets are marked with DiffServ Code Points (DSCPs) indicating the level of service desired. This allows the intermediary DiffServ-compliant network devices P-663HN-51 User’s Guide...
Resources can then be allocated according to the DSCP values and the configured policies. 10.2 Configuring QoS General Screen Click Advanced > Quality of Service to open the screen as shown next. P-663HN-51 User’s Guide...
Page 106
You can select a specific DSCP mark to use or have the DSCP Mark ZyXEL Device automatically select a DSCP mark to use. Save/Apply Click this button to save the changes and have the ZyXEL Device start using them. P-663HN-51 User’s Guide...
Click this button to go to a screen where you can configure settings for a new QoS queue. Remove To remove an entry select its Remove check box and click the Remove button. Save/Reboot Click this button to apply and save your changes. The ZyXEL Device restarts. P-663HN-51 User’s Guide...
Set the queue’s priority relative to the other queues. The lower the Precedence number, the higher the priority. 1 is the highest priority. 4 is the lowest. Save/Apply Click this button to save the changes and have the ZyXEL Device start using them. P-663HN-51 User’s Guide...
This is the DSCP mark. Source Addr./ This is the IP address (and optionally the subnet mask) of the device Mask that sent the traffic. Source Port This is the port number that a device used to send the traffic. P-663HN-51 User’s Guide...
Click Advanced > Quality of Service > QoS Classification and then the Add or Edit button to configure a classifier. There are two sets of classification rules. Set-1 is based on different fields within the TCP/UDP/IP layer plus the physical P-663HN-51 User’s Guide...
Page 111
Table 39 QoS Class Configuration LABEL DESCRIPTION Traffic Class Type a name for the classifier. Name Rule Order Select the classifier’s place in the classifiers list. Rule Status Select whether or not the classifier is to be active. P-663HN-51 User’s Guide...
Page 112
Specify the MAC address subnet mask of the device that the traffic is Mask going to. 802.1p Priority Specify the IEEE 802.1p mark on the traffic. Save/Apply Click this button to save the changes and have the ZyXEL Device start using them. P-663HN-51 User’s Guide...
Page 113
Chapter 10 Quality of Service (QoS) P-663HN-51 User’s Guide...
Page 114
Chapter 10 Quality of Service (QoS) P-663HN-51 User’s Guide...
The ISP automatically assigns the WAN connection Gateway an IP address when it connects. Use Default If the ISP gave you a static (fixed) IP address, select this option and Gateway IP enter the connection’s IP address. Address P-663HN-51 User’s Guide...
Internet through the default gateway (R1). You create one static route to connect to services offered by your ISP behind router R2. You create another static route to communicate with a separate network behind a router (R3) connected to the LAN. Figure 54 Example of Static Routing Topology P-663HN-51 User’s Guide...
11.3.1 Static Route Add Click Advanced > Routing > Static Route > Add to open the following screen. Use this screen to configure the required information for a static route. Figure 56 Advanced > Routing > Static Route > Add P-663HN-51 User’s Guide...
Page 118
Interface If the static route should send traffic through a specific ZyXEL Device interface, select this option and choose the interface. Save/Apply Click this button to save the changes and have the ZyXEL Device start using them. P-663HN-51 User’s Guide...
Multicasting can reduce the load on non-router machines since they generally do not listen to the RIP multicast address and so will not receive the RIP packets. However, if one router uses multicasting, then all routers on your network must use multicasting, also. P-663HN-51 User’s Guide...
Page 120
Enabled Select or clear this field to turn RIP on or off for the interface. Save/Apply Click this button to save the changes and have the ZyXEL Device start using them. P-663HN-51 User’s Guide...
It does not mean you can leave the DNS servers out of the DHCP setup under all circumstances. If your ISP gives you explicit DNS servers, make sure that you enter their IP addresses in the LAN Setup screen. P-663HN-51 User’s Guide...
These fields are available when you clear Enable Automatic server Assigned DNS. Secondary DNS Enter the IP addresses of the DNS servers the ZyXEL Device is to use. server Save Click Save to save your changes to the ZyXEL Device. P-663HN-51 User’s Guide...
If you have a private WAN IP address, then you cannot use Dynamic DNS. Section 14.2 on page 124 for configuration instruction. P-663HN-51 User’s Guide...
To remove a DDNS entry, select its Remove check box and click the Remove button. Click this button to go to a screen where you can configure settings for a new DDNS entry. Remove To remove an entry, select its Remove check box and click the Remove button. P-663HN-51 User’s Guide...
Dynamic DNS Username Type your user name for this DDNS host name. Password Type the password assigned for this DDNS host name. Save/Apply Click this button to save the changes and have the ZyXEL Device start using them. P-663HN-51 User’s Guide...
Page 126
Chapter 14 Dynamic DNS Setup P-663HN-51 User’s Guide...
DSL Setup This chapter explains how to configure ADSL port settings. 15.1 DSL Setup Click Advanced > DSL to open the following screen where you can configure the ZyXEL Device’s DSL settings. Figure 61 Advanced > DSL P-663HN-51 User’s Guide...
Page 128
Select this if you are using only one DSL line. This has the ZyXEL Enable Device disable DSL1 and only use DSL2. Save/Reboot Click this button to save the changes and have the ZyXEL Device restart and use them. P-663HN-51 User’s Guide...
Interface Groups let you map ports to PVCs and create bridging groups. 16.2 Interface Groups Setup Click Advanced Setup > Interface Groups to open the following screen. Use this screen to map ports to PVCs and create bridging groups. Figure 62 Advanced Setup > Interface Groups P-663HN-51 User’s Guide...
Page 130
These are the interfaces that belong to the group. Click Add to open a screen where you can add a new entry. Save/Apply Click this button to save the changes and have the ZyXEL Device start using them. P-663HN-51 User’s Guide...
The following table describes the labels in this screen. Table 49 Advanced Setup > Interface Groups > Add LABEL DESCRIPTION Group Name Configure a name to identify the group. Grouped Select interfaces to add to the group. Interfaces Available Interfaces P-663HN-51 User’s Guide...
Page 132
If you want LAN clients to get public IP addresses, you can list their Clients With the DHCP vendor IDs here. following DHCP Vendor IDs Save/Apply Click this button to save the changes and have the ZyXEL Device start using them. P-663HN-51 User’s Guide...
There are commercial certification authorities like CyberTrust or VeriSign and government certification authorities. You can use the ZyXEL Device to generate certification requests that contain identifying information and public keys and then send the certification requests to a certification authority. P-663HN-51 User’s Guide...
Click Advanced Setup > Certificate to open the following screen. Figure 65 Trusted CAs P-663HN-51 User’s Guide...
Page 135
Click Remove to delete the imported CA certificate from the ZyXEL Device. Import Click this to open a screen where you can save the certificate of a Certificate certification authority that you trust, from your computer to the ZyXEL Device. P-663HN-51 User’s Guide...
O (Organization or company) and C (Country). It is recommended that each certificate have unique subject information. Certificate This is the certificate’s information displayed in plain text. Back Click this to return to the previous screen. P-663HN-51 User’s Guide...
Open the trusted CA certificate in notepad and copy its information and paste it into this field. Apply Click this to save the certificate on the ZyXEL Device. 17.3 Certificates Technical Reference This section provides technical background information about the topics covered in this chapter. P-663HN-51 User’s Guide...
• Key distribution is simple and very secure since you can freely distribute public keys and you never need to transmit private keys. Self-signed Certificates You can have the ZyXEL Device act as a certification authority and sign its own certificates. P-663HN-51 User’s Guide...
Trusted Remote Host Certificate Fingerprints A certificate’s fingerprints are message digests calculated using the MD5 or SHA1 algorithms. The following procedure describes how to use a certificate’s fingerprint to verify that you have the remote host’s correct certificate. P-663HN-51 User’s Guide...
Page 140
Details tab and scroll down to the Thumbprint Algorithm and Thumbprint fields. Figure 69 Certificate Details Verify (over the phone for example) that the remote host has the same information in the Thumbprint Algorithm and Thumbprint fields. P-663HN-51 User’s Guide...
• The Advanced Setup screen lets you change the wireless mode and make other advanced wireless configuration changes (Section 18.8 on page 155). • Use the WPS Station screen (Section 18.9 on page 159) to view information about the wireless stations connected to the ZyXEL Device. P-663HN-51 User’s Guide...
IDentifier”. The “service set” is the network, so the “service set identifier” is the network’s name. This helps you identify your wireless network when wireless networks’ coverage areas overlap and you have a variety of networks to choose from. P-663HN-51 User’s Guide...
Page 143
A good way to come up with effective security keys, passwords and so on is to use obscure information that you personally will easily remember, and to enter it in a way that appears random and does not include real words. For example, if your P-663HN-51 User’s Guide...
• What advanced options do you want to configure, if any? If you want to configure advanced options, ensure that you know precisely what you want to do. If you do not want to configure advanced options, leave them alone. 18.4 Wireless Basic Click Wireless to open the Basic screen. P-663HN-51 User’s Guide...
Page 145
Disable WMM WMM (Wifi MultiMedia) automatically prioritizes services according to the Advertise ToS value in the IP header of packets. Turn off WMM advertising if your wireless clients are not able to associate with an AP using WMM. P-663HN-51 User’s Guide...
Page 146
ToS value in the IP header of packets. Turn off WMM if your wireless clients are not able to associate with an AP using WMM. Max Clients Specify the greatest number of wireless clients allowed to simultaneously connect to this wireless network on the ZyXEL Device. P-663HN-51 User’s Guide...
Save/Apply Click this button to save the changes and have the ZyXEL Device start using them. 18.5 Wireless Security Click Wireless > Security to open the Wireless Security screen. Use this screen to configure wireless security settings. P-663HN-51 User’s Guide...
Page 148
WPS Setup Use WiFi Protected Setup (WPS) to quickly set up a wireless network without having to manually configure settings. Set up each WPS connection between two devices at a time. Enable WPS Turn WPS on or off. P-663HN-51 User’s Guide...
Page 149
Windows Vista as an external registrar. Push Button and PIN are reserved for future use and have no effect at the time of writing. Note: After you click Config AP you must enter the ZyXEL Device’s PIN in the external registrar within two minutes. P-663HN-51 User’s Guide...
Page 150
This field is available only with WPA-PSK or WPA2-PSK network authentication. Type a pre-shared key from 8 to 63 case-sensitive ASCII characters (including spaces and symbols) or 64 hexadecimal digits. Click the link to see the key in plain text. P-663HN-51 User’s Guide...
Page 151
WEP (Wired Equivalent Privacy) provides data encryption to prevent unauthorized wireless stations from accessing data transmitted over the wireless network. Encryption If you are using WEP encryption, select 64-bit or 128-bit to set the Strength length of the encryption key. P-663HN-51 User’s Guide...
00:A0:C5:00:00:02. You need to know the MAC addresses of the devices to configure this screen. Use this screen to change your ZyXEL Device’s MAC filter settings.Click Wireless > MAC Filter. The following screen displays. Figure 72 Wireless > MAC Filter P-663HN-51 User’s Guide...
ZyXEL Device. Enter the MAC addresses in a valid MAC address format, that is, six hexadecimal character pairs, for example, 12:34:56:78:9a:bc. Save/Apply Click this button to save the changes and have the ZyXEL Device start using them. P-663HN-51 User’s Guide...
Access Point mode for AP and bridge functionality or Bridge mode for bridge functionality only. You can also list the MAC addresses of the peer APs with which to establish wireless links. Figure 75 Wireless > Bridge P-663HN-51 User’s Guide...
Click this button to save the changes and have the ZyXEL Device start using them. 18.8 The Advanced Setup Screen To configure advanced wireless settings, click Network > Wireless LAN > Advanced Setup. The screen appears as shown. P-663HN-51 User’s Guide...
Page 156
ZyXEL Device automatically determine a channel to use. If you are having problems with wireless interference, changing the channel may help. Try to use a channel that is as many channels away from any channels used by neighboring APs as possible. P-663HN-51 User’s Guide...
Page 157
Select a data rate at which the ZyXEL Device transmits wireless multicast traffic. If you select a high rate, multicast traffic may occupy all the bandwidth and cause network congestion. Basic Rate Select a minimum transmission rate. P-663HN-51 User’s Guide...
Page 158
When using WMM, you can enable this to have the ZyXEL Device not Acknowledgement re-send data if an error occurs. This can increase throughput speed but may also increase errors, especially in an environment with a lot of Radio Frequency (RF) noise. Otherwise leave it disabled. P-663HN-51 User’s Guide...
This is the name of the wireless network on the ZyXEL Device to which the wireless client is connected. Interface This is the name of the wireless LAN interface on the ZyXEL Device to which the wireless client is connected. Refresh Click this button to update the information in the screen. P-663HN-51 User’s Guide...
The SSID is the name of the wireless network. It stands for Service Set IDentity. • If two wireless networks overlap, they should use a different channel. Like radio stations or television channels, each wireless network uses a specific channel, or frequency, to send and receive information. P-663HN-51 User’s Guide...
Normally, the ZyXEL Device acts like a beacon and regularly broadcasts the SSID in the area. You can hide the SSID instead, in which case the ZyXEL Device does not broadcast the SSID. In addition, you should change the default SSID to something that is difficult to guess. P-663HN-51 User’s Guide...
Some wireless devices, such as scanners, can detect wireless networks but cannot use wireless networks. These kinds of wireless devices might not have MAC addresses. Hexadecimal characters are 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, A, B, C, D, E, and F. P-663HN-51 User’s Guide...
Page 163
ZyXEL Device. Many types of encryption use a key to protect the information in the wireless network. The longer the key, the stronger the encryption. Every device in the wireless network must have the same key. P-663HN-51 User’s Guide...
(SSID) and security key through an secure connection to the enrollee. If you need to make sure that WPS worked, check the list of associated wireless clients in the AP’s configuration utility. If you see the wireless client in the list, WPS was successful. P-663HN-51 User’s Guide...
On a computer connected to the wireless client, try to connect to the Internet. If you can connect, WPS was successful. If you cannot connect, check the list of associated wireless clients in the AP’s configuration utility. If you see the wireless client in the list, WPS was successful. P-663HN-51 User’s Guide...
Page 166
PSK or WPA2-PSK pre-shared key to the enrollee. Whether WPA-PSK or WPA2-PSK is used depends on the standards supported by the devices. If the registrar is already part of a network, it sends the existing information. If not, it generates the SSID and WPA(2)-PSK randomly. P-663HN-51 User’s Guide...
Page 167
It will be the registrar in all subsequent WPS connections in which it is involved. If you want a configured AP to act as an enrollee, you must reset it to its factory defaults. P-663HN-51 User’s Guide...
Page 168
CLIENT 1 ENROLLEE CLIENT 2 In step 3, you add another access point (AP2) to your network. AP2 is out of range of AP1, so you cannot use AP1 for the WPS handshake with the new access P-663HN-51 User’s Guide...
Page 169
(if the device supports this feature). Then, you can enter the key into the non-WPS device and join the network as normal (the non-WPS device must also support WPA-PSK or WPA2-PSK). P-663HN-51 User’s Guide...
Go to the ZyXEL Device’s Wireless > Security screen and copy the ZyXEL Device’s identification PIN. In Windows Vista, go to your network connections and double-click the ZyXEL AP icon to open the Windows Connect Now (WCN) screens. P-663HN-51 User’s Guide...
Page 171
Windows Vista computer authenticates them whenever they connect to the wireless network. After the WPS process finishes (the enrollee is able to access the ZyXEL Device) you can repeat these steps to add more wireless clients one at a time. P-663HN-51 User’s Guide...
Page 172
Chapter 18 Wireless LAN P-663HN-51 User’s Guide...
DSL2 must be connected and working to pass the ADSL synchronization test. If you are not using single line mode, the ADSL synchronization test can be passed if either DSL line is connected and working. Figure 85 Diagnostics P-663HN-51 User’s Guide...
The backup configuration file will be useful in case you need to return to your previous settings. Figure 86 Management > Settings > Backup Click Backup Settings to save the ZyXEL Device’s current configuration to your computer. P-663HN-51 User’s Guide...
You may need to change the IP address of your computer to be in the same subnet as that of the ZyXEL Device’s IP address (192.168.1.1). See the appendix for details on how to set up your computer’s IP address. P-663HN-51 User’s Guide...
You may need to change the IP address of your computer to be in the same subnet as that of the default ZyXEL Device IP address (192.168.1.1). See the appendix for details on how to set up your computer’s IP address. P-663HN-51 User’s Guide...
21.2 System Log Click Management > System Log to open the following screen. Click View System Log screen to see the logs, or Configure System Log to configure the logging settings. Figure 90 Management > System Log P-663HN-51 User’s Guide...
This is the log’s category. Severity This is the event’s degree of seriousness. Message This field states the reason for the log. Refresh Click Refresh to renew the log screen. Close Click this to close the window. P-663HN-51 User’s Guide...
Server UDP Enter the UDP port number the ZyXEL Device is to use when sending Port syslog events to the syslog server. Save/Apply Click this button to save the changes and have the ZyXEL Device start using them. P-663HN-51 User’s Guide...
An agent is a management software module that resides in a managed device (the ZyXEL Device). An agent translates the local management information from the managed device into a form compatible with SNMP. The manager is the console P-663HN-51 User’s Guide...
• ICMP mib • IP mib • SNMP mib • SYSOR mib • TCP mib • UDP mib The ZyXEL Device uses these MIBs to provide read-only information. You cannot use SNMP to configure the ZyXEL Device. P-663HN-51 User’s Guide...
The ZyXEL Device sends a coldStart trap when the power is turned Save/Apply Click this button to save the changes and have the ZyXEL Device start using them. Port Enter the port number upon which the station listens for SNMP traps. P-663HN-51 User’s Guide...
ACS and specify the ACS IP address or domain name and username and password. Use this screen to configure your ZyXEL Device’s settings for CPE WAN Management Protocol (CWMP). Click Management > TR-069 Client. The following screen appears. Figure 95 Management > TR-069 Client P-663HN-51 User’s Guide...
Connection Enter the password for the ACS for reauthentication in case the Request connection is interrupted. Password Save/Apply Click this to save the changes. GetRPCMethod Click this to get a list of commands accepted by the ACS. P-663HN-51 User’s Guide...
Second NTP time Enter the IP address or URL of the time server that the ZyXEL Device server should use to update time and date settings if it cannot get a response from the first time server. P-663HN-51 User’s Guide...
Page 192
Choose the time zone of your location. This sets the time difference between your time zone and Greenwich Mean Time (GMT). Save/Apply Click this button to save the changes and have the ZyXEL Device start using them. P-663HN-51 User’s Guide...
Use the access control screens to enable or disable service access to the ZyXEL Device. 25.2 Service Access Control Screen To open this screen, click Management > Access Control > Services. Figure 97 Management > Access Control > Services P-663HN-51 User’s Guide...
Enable this to have the ZyXEL Device check the source IP address of Mode incoming local management sessions. IP Address This is the IP address of a trusted computer from which you can manage the ZyXEL Device. P-663HN-51 User’s Guide...
Click this button to save the changes and have the ZyXEL Device start using them. 25.5 Passwords Click Management > Access Control > Passwords to open the following screen. Use this screen to configure the ZyXEL Device’s passwords. P-663HN-51 User’s Guide...
Page 196
ZyXEL Device. Confirm Type the new password again to make sure it is entered properly. Password Save/Apply Click this button to save the changes and have the ZyXEL Device start using them. P-663HN-51 User’s Guide...
Clear this to allow users to access the ZyXEL Device’s system information summary page without entering the ZyXEL Device’s user account’s user name and password. Save/Apply Click this button to save the changes and have the ZyXEL Device start using them. P-663HN-51 User’s Guide...
Page 198
Chapter 25 Access Control P-663HN-51 User’s Guide...
Only use firmware for your device’s specific model. Refer to the label on the bottom of your device. Click Management > Update Software to open the following screen. Follow the instructions in this screen to upload firmware to your ZyXEL Device. Figure 102 Management > Update Software P-663HN-51 User’s Guide...
Page 200
ZyXEL Device automatically restarts causing a temporary network disconnect. In some operating systems, you may see the following icon on your desktop. Figure 103 Network Temporarily Disconnected After the ZyXEL Device finishes restarting, log in again and check your new firmware version in the Status screen. P-663HN-51 User’s Guide...
Click Management > Save/Reboot to open the following screen. Click Save/ Reboot to save all of your ZyXEL Device’s settings and reboot the without turning the power off. Figure 104 Management > Save/Reboot 27.2 Logout Click Management > Logout to exit the web configurator. P-663HN-51 User’s Guide...
Page 202
Chapter 27 Save/Reboot and Logout P-663HN-51 User’s Guide...
Turn the ZyXEL Device off and on. If the problem continues, contact the vendor. One of the LEDs does not behave as expected. Make sure you understand the normal behavior of the LED. See Section 1.5 on page P-663HN-51 User’s Guide...
If this does not work, you have to reset the device to its factory defaults. See Section 2.3 on page I cannot see or access the Login screen in the web configurator. Make sure you are using the correct IP address. • The default IP address is 192.168.1.1. P-663HN-51 User’s Guide...
1234. This field is case-sensitive, so make sure [Caps Lock] is not on. Turn the ZyXEL Device off and on. If this does not work, you have to reset the device to its factory defaults. See Section 2.3 on page 28.3 Internet Access I cannot access the Internet. P-663HN-51 User’s Guide...
Page 208
Internet, especially peer-to-peer applications. Reboot the ZyXEL Device. Turn the ZyXEL Device off and on. If the problem continues, contact the network administrator or vendor, or try one of the advanced suggestions. P-663HN-51 User’s Guide...
20%~85% (non-condensing) Storage Humidity 10%~95% (non-condensing) Table 76 Firmware Specifications FEATURE DESCRIPTION Default IP Address 192.168.1.1 Default Subnet Mask 255.255.255.0 (24 bits) Admin User Name admin User User Name user Support User Name support Default Password 1234 P-663HN-51 User’s Guide...
Page 210
IP Multicasting IGMP v1 and v2 IGMP Proxy UPnP Management Use the embedded web configurator to easily configure the rich range of features on the ZyXEL Device. SNMP manageable Syslog Built-in diagnostic tools for ADSL circuitry and LAN ports P-663HN-51 User’s Guide...
Page 211
Dynamic DNS Support With Dynamic DNS (Domain Name System) support, you can use a fixed URL, www.zyxel.com for example, with a dynamic IP address. You must register for this service with a Dynamic DNS service provider. P-663HN-51 User’s Guide...
Page 212
ADSL by doubling the number of downstream bits. ITU G.998.1 (G.bond ATM-based Multi-Pair Bonding ATM) RFC 1112 (IGMP v1) Internet Group Management Protocol, Version 1 RFC 2236 (IGMP v2) Internet Group Management Protocol, Version 2 RFC 867 Daytime Protocol P-663HN-51 User’s Guide...
The ZyXEL Device’s RJ-14 DSL connector handles both the DSL 1 and DSL 2 connections. • Pins 3 and 4 are for DSL 1. • Pins 2 and 5 are for DSL 2. Figure 105 DSL Connector Pin Assignments DSL 2 DSL 1 P-663HN-51 User’s Guide...
12V 1.5 A Switching Power Adapter INPUT POWER 100-240 VAC, 50/60 HZ, 0.5 A OUTPUT POWER 12 VDC, 1.5 A POWER CONSUMPTION 18 W MAX. SAFETY STANDARDS UL, CUL (UL 60950-1 FIRST EDITION CSA C22.2 NO. 60950-1-03 1ST.) P-663HN-51 User’s Guide...
Appendices and Index Setting Up Your Computer’s IP Address (217) IP Addresses and Subnetting (253) Pop-up Windows (201) Common Services (281) Legal Information (291) Customer Support (25) Index (295)
229 • Linux: Ubuntu 8 (GNOME) page 232 • Linux: openSUSE 10.3 (KDE) page 237 Windows XP/NT/2000 The following example uses the default Windows XP display theme but can also apply to Windows 2000 and Windows NT. P-663HN-51 User’s Guide...
Page 218
Appendix A Setting Up Your Computer’s IP Address Click Start > Control Panel. Figure 106 Windows XP: Start Menu In the Control Panel, click the Network Connections icon. Figure 107 Windows XP: Control Panel P-663HN-51 User’s Guide...
Page 219
Right-click Local Area Connection and then select Properties. Figure 108 Windows XP: Control Panel > Network Connections > Properties On the General tab, select Internet Protocol (TCP/IP) and then click Properties. Figure 109 Windows XP: Local Area Connection Properties P-663HN-51 User’s Guide...
Page 220
DNS server and an Alternate DNS server, if that information was provided. Click OK to close the Internet Protocol (TCP/IP) Properties window. Click OK to close the Local Area Connection Properties window. Verifying Settings Click Start > All Programs > Accessories > Command Prompt. P-663HN-51 User’s Guide...
Windows Vista This section shows screens from Windows Vista Professional. Click Start > Control Panel. Figure 111 Windows Vista: Start Menu In the Control Panel, click the Network and Internet icon. Figure 112 Windows Vista: Control Panel P-663HN-51 User’s Guide...
Page 222
Figure 114 Windows Vista: Network and Sharing Center Right-click Local Area Connection and then select Properties. Figure 115 Windows Vista: Network and Sharing Center Note: During this procedure, click Continue whenever Windows displays a screen saying that it needs your permission to continue. P-663HN-51 User’s Guide...
Page 223
Appendix A Setting Up Your Computer’s IP Address Select Internet Protocol Version 4 (TCP/IPv4) and then select Properties. Figure 116 Windows Vista: Local Area Connection Properties P-663HN-51 User’s Guide...
Page 224
DNS server and an Alternate DNS server, if that information was provided.Click Advanced. Click OK to close the Internet Protocol (TCP/IP) Properties window. 10 Click OK to close the Local Area Connection Properties window. Verifying Settings Click Start > All Programs > Accessories > Command Prompt. P-663HN-51 User’s Guide...
Page 225
Mac OS X: 10.3 and 10.4 The screens in this section are from Mac OS X 10.4 but can also apply to 10.3. Click Apple > System Preferences. Figure 118 Mac OS X 10.4: Apple Menu P-663HN-51 User’s Guide...
Page 226
In the System Preferences window, click the Network icon. Figure 119 Mac OS X 10.4: System Preferences When the Network preferences pane opens, select Built-in Ethernet from the network connection type list, and then click Configure. Figure 120 Mac OS X 10.4: Network Preferences P-663HN-51 User’s Guide...
Page 227
Figure 121 Mac OS X 10.4: Network Preferences > TCP/IP Tab. For statically assigned settings, do the following: • From the Configure IPv4 list, select Manually. • In the IP Address field, type your IP address. • In the Subnet Mask field, type your subnet mask. P-663HN-51 User’s Guide...
Page 228
Click Apply Now and close the window. Verifying Settings Check your TCP/IP properties by clicking Applications > Utilities > Network Utilities, and then selecting the appropriate Network Interface from the Info tab. Figure 123 Mac OS X 10.4: Network Utility P-663HN-51 User’s Guide...
Page 229
The screens in this section are from Mac OS X 10.5. Click Apple > System Preferences. Figure 124 Mac OS X 10.5: Apple Menu In System Preferences, click the Network icon. Figure 125 Mac OS X 10.5: Systems Preferences P-663HN-51 User’s Guide...
Page 230
From the Configure list, select Using DHCP for dynamically assigned settings. For statically assigned settings, do the following: • From the Configure list, select Manually. • In the IP Address field, enter your IP address. • In the Subnet Mask field, enter your subnet mask. P-663HN-51 User’s Guide...
Page 231
Appendix A Setting Up Your Computer’s IP Address • In the Router field, enter the IP address of your ZyXEL Device. Figure 127 Mac OS X 10.5: Network Preferences > Ethernet Click Apply and close the window. P-663HN-51 User’s Guide...
Page 232
The following screens use the default Ubuntu 8 installation. Note: Make sure you are logged in as the root administrator. Follow the steps below to configure your computer IP address in GNOME: P-663HN-51 User’s Guide...
Page 233
When the Network Settings window opens, click Unlock to open the Authenticate window. (By default, the Unlock button is greyed out until clicked.) You cannot make changes to your configuration unless you first enter your admin password. Figure 130 Ubuntu 8: Network Settings > Connections P-663HN-51 User’s Guide...
Page 234
In the Authenticate window, enter your admin account name and password then click the Authenticate button. Figure 131 Ubuntu 8: Administrator Account Authentication In the Network Settings window, select the connection that you want to configure, then click Properties. Figure 132 Ubuntu 8: Network Settings > Connections P-663HN-51 User’s Guide...
Page 235
• In the Configuration list, select Static IP address if you have a static IP address. Fill in the IP address, Subnet mask, and Gateway address fields. Click OK to save the changes and close the Properties dialog box and return to the Network Settings screen. P-663HN-51 User’s Guide...
Page 236
Figure 134 Ubuntu 8: Network Settings > DNS Click the Close button to apply the changes. Verifying Settings Check your TCP/IP properties by clicking System > Administration > Network Tools, and then selecting the appropriate Network device from the Devices P-663HN-51 User’s Guide...
Page 237
The following screens use the default openSUSE 10.3 installation. Note: Make sure you are logged in as the root administrator. Follow the steps below to configure your computer IP address in the KDE: P-663HN-51 User’s Guide...
Page 238
Click K Menu > Computer > Administrator Settings (YaST). Figure 136 openSUSE 10.3: K Menu > Computer Menu When the Run as Root - KDE su dialog opens, enter the admin password and click OK. Figure 137 openSUSE 10.3: K Menu > Computer Menu P-663HN-51 User’s Guide...
Page 239
Figure 138 openSUSE 10.3: YaST Control Center When the Network Settings window opens, click the Overview tab, select the appropriate connection Name from the list, and then click the Configure button. Figure 139 openSUSE 10.3: Network Settings P-663HN-51 User’s Guide...
Page 240
Select Dynamic Address (DHCP) if you have a dynamic IP address. Select Statically assigned IP Address if you have a static IP address. Fill in the IP address, Subnet mask, and Hostname fields. Click Next to save the changes and close the Network Card Setup window. P-663HN-51 User’s Guide...
Page 241
If you know your DNS server IP address(es), click the Hostname/DNS tab in Network Settings and then enter the DNS server information in the fields provided. Figure 141 openSUSE 10.3: Network Settings Click Finish to save your settings and close the window. P-663HN-51 User’s Guide...
Page 242
From the Options sub-menu, select Show Connection Information. Figure 142 openSUSE 10.3: KNetwork Manager When the Connection Status - KNetwork Manager window opens, click the Statistics tab to see if your connection is working properly. Figure 143 openSUSE: Connection Status - KNetwork Manager P-663HN-51 User’s Guide...
Disable Pop-up Blockers In Internet Explorer, select Tools, Pop-up Blocker and then select Turn Off Pop-up Blocker. Figure 144 Pop-up Blocker You can also check if pop-up blocking is disabled in the Pop-up Blocker section in the Privacy tab. P-663HN-51 User’s Guide...
Page 244
Click Apply to save this setting. Enable Pop-up Blockers with Exceptions Alternatively, if you only want to allow pop-up windows from your device, see the following steps. In Internet Explorer, select Tools, Internet Options and then the Privacy tab. P-663HN-51 User’s Guide...
Page 245
Select Settings…to open the Pop-up Blocker Settings screen. Figure 146 Internet Options: Privacy Type the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”. For example, http://192.168.167.1. P-663HN-51 User’s Guide...
Page 246
Figure 147 Pop-up Blocker Settings Click Close to return to the Privacy screen. Click Apply to save this setting. JavaScripts If pages of the web configurator do not display properly in Internet Explorer, check that JavaScripts are allowed. P-663HN-51 User’s Guide...
Page 247
Figure 148 Internet Options: Security Click the Custom Level... button. Scroll down to Scripting. Under Active scripting make sure that Enable is selected (the default). Under Scripting of Java applets make sure that Enable is selected (the default). P-663HN-51 User’s Guide...
Page 248
Figure 149 Security Settings - Java Scripting Java Permissions From Internet Explorer, click Tools, Internet Options and then the Security tab. Click the Custom Level... button. Scroll down to Microsoft VM. Under Java permissions make sure that a safety level is selected. P-663HN-51 User’s Guide...
Page 249
Click OK to close the window. Figure 150 Security Settings - Java JAVA (Sun) From Internet Explorer, click Tools, Internet Options and then the Advanced tab. Make sure that Use Java 2 for <applet> under Java (Sun) is selected. P-663HN-51 User’s Guide...
Page 250
Mozilla Firefox 2.0 screens are used here. Screens for other versions may vary. You can enable Java, Javascripts and pop-ups in one screen. Click Tools, then click Options in the screen that appears. Figure 152 Mozilla Firefox: Tools > Options P-663HN-51 User’s Guide...
Page 251
Appendix B Pop-up Windows, JavaScripts and Java Permissions Click Content.to show the screen below. Select the check boxes as shown in the following screen. Figure 153 Mozilla Firefox Content Security P-663HN-51 User’s Guide...
Page 252
Appendix B Pop-up Windows, JavaScripts and Java Permissions P-663HN-51 User’s Guide...
192.168.1.1). Each of these four parts is known as an octet. An octet is an eight-digit binary number (for example 11000000, which is 192 in decimal notation). Therefore, each octet has a possible range of 00000000 to 11111111 in binary, or 0 to 255 in decimal. P-663HN-51 User’s Guide...
Page 256
In this example, the company network address is 192.168.1.0. The first three octets of the address (192.168.1) are the network number, and the remaining octet is the host ID, allowing a maximum of 2 – 2 or 254 possible hosts. P-663HN-51 User’s Guide...
Page 257
You can “borrow” one of the host ID bits to divide the network 192.168.1.0 into two separate sub-networks. The subnet mask is now 25 bits (255.255.255.128 or /25). The “borrowed” host ID bit can have a value of either 0 or 1, allowing two subnets; 192.168.1.0 /25 and 192.168.1.128 /25. P-663HN-51 User’s Guide...
Page 258
Similarly, to divide a 24-bit address into four subnets, you need to “borrow” two host ID bits to give four possible combinations (00, 01, 10 and 11). The subnet mask is 26 bits (11111111.11111111.11111111.11000000) or 255.255.255.192. P-663HN-51 User’s Guide...
Page 259
Lowest Host ID: 192.168.1.129 192.168.1.128 Broadcast Address: Highest Host ID: 192.168.1.190 192.168.1.191 Table 86 Subnet 4 LAST OCTET BIT IP/SUBNET MASK NETWORK NUMBER VALUE IP Address 192.168.1. IP Address (Binary) 11000000.10101000.00000001 11000000 Subnet Mask (Binary) 11111111.11111111.11111111 11000000 P-663HN-51 User’s Guide...
Page 260
The following table is a summary for subnet planning on a network with a 24-bit network number. Table 88 24-bit Network Number Subnet Planning NO. “BORROWED” NO. HOSTS PER SUBNET MASK NO. SUBNETS HOST BITS SUBNET 255.255.255.128 (/25) 255.255.255.192 (/26) 255.255.255.224 (/27) 255.255.255.240 (/28) 255.255.255.248 (/29) 255.255.255.252 (/30) 255.255.255.254 (/31) P-663HN-51 User’s Guide...
Device that is easy to remember (for instance, 192.168.1.1) but make sure that no other device on your network is using that IP address. The subnet mask specifies the network number portion of an IP address. Your ZyXEL Device will compute the subnet mask automatically based on the IP P-663HN-51 User’s Guide...
Page 262
A has a static (or fixed) IP address that is the same as the IP address that a DHCP server assigns to computer B which is a DHCP client. Neither can access the Internet. This problem can be solved by assigning a different static IP P-663HN-51 User’s Guide...
Page 263
Figure 158 Conflicting Computer IP Addresses Example Conflicting Computer and Router IP Addresses Example More than one device can not use the same IP address. In the following example, the computer and the router’s LAN port both use 192.168.1.1 as the IP address. P-663HN-51 User’s Guide...
Page 264
Appendix C IP Addresses and Subnetting The computer cannot access the Internet. This problem can be solved by assigning a different IP address to the computer or the router’s LAN port. Figure 159 Conflicting Computer and Router IP Addresses Example P-663HN-51 User’s Guide...
(AP). Intra-BSS traffic is traffic between wireless clients in the BSS. When Intra-BSS is enabled, wireless client A and B can access the wired network and communicate P-663HN-51 User’s Guide...
Page 266
This wired connection between APs is called a Distribution System (DS). This type of wireless LAN topology is called an Infrastructure WLAN. The Access Points not only provide communication with the wired network but also mediate wireless network traffic in the immediate neighborhood. P-663HN-51 User’s Guide...
Page 267
A hidden node occurs when two stations are within range of the same access point, but are not within range of each other. The following figure illustrates a hidden node. Both stations (STA) are within range of the access point (AP) or P-663HN-51 User’s Guide...
Page 268
RTS (Request To Send)/CTS (Clear to Send) handshake will never occur as data frames will be fragmented before they reach RTS/CTS size. Note: Enabling the RTS Threshold causes redundant network overhead that could negatively affect the throughput performance instead of providing a remedy. P-663HN-51 User’s Guide...
IEEE 802.11g is fully compatible with the IEEE 802.11b standard. This means an IEEE 802.11b adapter can interface directly with an IEEE 802.11g access point (and vice versa) at 11 Mbps or lower depending on range. IEEE 802.11g has P-663HN-51 User’s Guide...
Page 270
IEEE802.1x EAP with RADIUS Server Authentication Wi-Fi Protected Access (WPA) WPA2 Most Secure Note: You must enable the same wireless security settings on the ZyXEL Device and on all wireless clients that you want to associate with it. P-663HN-51 User’s Guide...
Page 271
The following types of RADIUS messages are exchanged between the access point and the RADIUS server for user authentication: • Access-Request Sent by an access point requesting authentication. • Access-Reject Sent by a RADIUS server rejecting access. • Access-Accept Sent by a RADIUS server allowing access. P-663HN-51 User’s Guide...
Page 272
The wireless client ‘proves’ that it knows the password by encrypting the password with the challenge and sends back the information. Password is not sent in plain text. P-663HN-51 User’s Guide...
Page 273
However, PEAP only supports EAP methods, such as EAP-MD5, EAP-MSCHAPv2 and EAP-GTC (EAP-Generic Token Card), for client authentication. EAP-GTC is implemented only by Cisco. LEAP LEAP (Lightweight Extensible Authentication Protocol) is a Cisco implementation of IEEE 802.1x. P-663HN-51 User’s Guide...
Page 274
RADIUS server, you should use WPA2-PSK (WPA2-Pre-Shared Key) that only requires a single (identical) password entered into each access point, wireless gateway and wireless client. As long as the passwords match, a wireless client will be granted access to a WLAN. P-663HN-51 User’s Guide...
Page 275
The common-password approach makes WPA(2)-PSK susceptible to brute-force password-guessing attacks but it’s still an improvement over WEP as it employs a consistent, single, alphanumeric password to derive a PMK which is used to generate unique temporal encryption P-663HN-51 User’s Guide...
Page 276
The RADIUS server then checks the user's identification against its database and grants or denies network access accordingly. A 256-bit Pairwise Master Key (PMK) is derived from the authentication process by the RADIUS server and the client. P-663HN-51 User’s Guide...
Page 277
The AP checks each wireless client's password and allows it to join the network only if the password matches. The AP and wireless clients generate a common PMK (Pairwise Master Key). The key itself is not sent over the network, but is derived from the PSK and the SSID. P-663HN-51 User’s Guide...
Page 278
Enable without Dynamic WEP Open Enable with Dynamic WEP Key Enable without Dynamic WEP Disable Shared Enable with Dynamic WEP Key Enable without Dynamic WEP Disable TKIP/AES Enable WPA-PSK TKIP/AES Disable WPA2 TKIP/AES Enable WPA2-PSK TKIP/AES Disable P-663HN-51 User’s Guide...
Types of Antennas for WLAN There are two types of antennas used for wireless LAN applications. P-663HN-51 User’s Guide...
Page 280
For omni-directional antennas mounted on a wall or ceiling, point the antenna down. For a single AP application, place omni-directional antennas as close to the center of the coverage area as possible. For directional antennas, point the antenna in the direction of the desired coverage area. P-663HN-51 User’s Guide...
Border Gateway Protocol. BOOTP_CLIENT DHCP Client. BOOTP_SERVER DHCP Server. CU-SEEME 7648 A popular videoconferencing solution from White Pines Software. 24032 TCP/UDP Domain Name Server, a service that matches web names (for example www.zyxel.com) to IP numbers. P-663HN-51 User’s Guide...
Page 282
ICMP echo requests to test whether or not a remote host is reachable. POP3 Post Office Protocol version 3 lets a client computer get e-mail from a POP3 server through a temporary connection (TCP/IP or other). P-663HN-51 User’s Guide...
Page 283
Control System). TELNET Telnet is the login and terminal emulation protocol common on the Internet and in UNIX environments. It operates over TCP/IP networks. Its primary function is to allow users to log into remote host systems. P-663HN-51 User’s Guide...
Page 284
Table 94 Commonly Used Services (continued) NAME PROTOCOL PORT(S) DESCRIPTION TFTP Trivial File Transfer Protocol is an Internet file transfer protocol similar to FTP, but uses the UDP (User Datagram Protocol) rather than TCP (Transmission Control Protocol). VDOLIVE 7000 Another videoconferencing solution. P-663HN-51 User’s Guide...
P P E N D I X Open Software Announcements End-User License Agreement for "P-663HN-51" Note: WARNING: ZyXEL Communications Corp. IS WILLING TO LICENSE THE ENCLOSED SOFTWARE TO YOU ONLY UPON THE CONDITION THAT YOU ACCEPT ALL OF THE TERMS CONTAINED IN THIS LICENSE AGREEMENT.
Page 286
To the extent that the Software contains third party software, ZyXEL has no express or implied obligation to provide any technical or other support for such software. Please contact the appropriate software vendor or manufacturer directly for technical support and customer service related to its software and products. P-663HN-51 User’s Guide...
Page 287
LIABILITY WITH RESPECT TO ITS OBLIGATIONS UNDER THIS AGREEMENT OR OTHERWISE WITH RESPECT TO THE SOFTWARE AND DOCUMENTATION OR OTHERWISE SHALL BE EQUAL TO THE PURCHASE PRICE, BUT SHALL IN NO EVENT EXCEED THE PRODUCT'S PRICE. BECAUSE SOME STATES/COUNTRIES DO P-663HN-51 User’s Guide...
Page 288
Software License Agreement. 12.General This License Agreement shall be construed, interpreted and governed by the laws of Republic of China without regard to conflicts of laws provisions thereof. The P-663HN-51 User’s Guide...
Page 289
Agreement shall be interpreted so as to reasonably effect the intention of the parties. Note: Some components of the P-663HN-51 incorporate source code covered under the GPL License, LGPL License, BSD License, and BSD like License. To obtain the source code covered under those Licenses, please check ftp:// opensource.zyxel.com to get it.
Page 290
Appendix F Open Software Announcements P-663HN-51 User’s Guide...
ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation. All rights reserved. Disclaimer ZyXEL does not assume any liability arising out of the application or use of any products, or software described herein.
Page 292
• To comply with FCC RF exposure compliance requirements, a separation distance of at least 20 cm must be maintained between the antenna of this device and all persons. 注意 ! 依據 低功率電波輻射性電機管理辦法 第十二條 經型式認證合格之低功率射頻電機,非經許可,公司、商號或使用 者均不得擅自變更頻率、加大功率或變更原設計之特性及功能。 第十四條 低功率射頻電機之使用不得影響飛航安全及干擾合法通信;經發現 有干擾現象時,應立即停用,並改善至無干擾時方得繼續使用。 前項合法通信,指依電信規定作業之無線電信。低功率射頻電機須忍 P-663HN-51 User’s Guide...
God, or subjected to abnormal working conditions. Note Repair or replacement, as provided under this warranty, is the exclusive remedy of the purchaser. This warranty is in lieu of all other warranties, express or implied, P-663HN-51 User’s Guide...
Page 294
Registration Register your product online to receive e-mail notices of firmware upgrades and information at www.zyxel.com for global products, or at www.us.zyxel.com for North American products. P-663HN-51 User’s Guide...
209, 210 connection type copyright CoS (class of service) backing up configuration CTS (Clear to Send) backup settings Basic Service Set, See BSS Beacon Interval blocking schedule bridging groups default broadcast default gateway P-663HN-51 User’s Guide...
Page 296
71, 77, 78 PPP over Ethernet version PPPoA importing RFC 1483 trusted CA encryption incoming IP filtering Independent Basic Service Set See IBSS Ethernet connection test initialization vector (IV) Ethernet ports interfaces Extended Service Set IDentification static DHCP P-663HN-51 User’s Guide...
Page 297
Maximum Burst Size Layer 5 (AAL5) see MBS Point-to Point Protocol see PPP Message Integrity Check (MIC) port forwarding MIBs port mapping multicast 71, 77 ports multi-mode Ethernet multiplexing POTS 53, 59 LLC-based 53, 60 power specifications P-663HN-51 User’s Guide...
Page 298
RF (Radio Frequency) syntax conventions RFC 1058. See RIP. RFC 1389. See RIP. RFC 1483 RFC 1631 RFC 2131. See DHCP. temperature RFC 2132. See DHCP Temporal Key Integrity Protocol (TKIP) time direction zone P-663HN-51 User’s Guide...
Page 299
RADIUS application example Virtual Channel Connection (VCC) WPA2-Pre-Shared Key Virtual Channel Identifier WPA2-PSK 274, 275 see VCI application example virtual circuit WPA-PSK see VC application example virtual circuit (VC) Virtual Path Identifier see VPI virtual ports virtual servers warranty P-663HN-51 User’s Guide...