ZyXEL Communications FSG2200HNU User Manual
  1. Manuals
  2. Brands
  3. ZyXEL Communications Manuals
  4. Gateway
  5. FSG2200HNU
  6. User manual
ZyXEL Communications FSG2200HNU User Manual

ZyXEL Communications FSG2200HNU User Manual

Multiservice gateway iad with 802.11n wireless
Hide thumbs Also See for FSG2200HNU:
Table of Contents

Advertisement

Quick Links

Download this manual
FSG2200HNU
Multiservice Gateway IAD with 802.11n Wireless
Default Login Details
IP Address
https://192.168.1.1
User Name
Admin account: admin
User account: user
Password
Admin account: admin
User account: user
Firmware Version 1.00
www.zyxel.com
Edition 2, 10/2010
www.zyxel.com
Copyright © 2010
ZyXEL Communications Corporation

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the FSG2200HNU and is the answer not in the manual?

Questions and answers

Related Manuals for ZyXEL Communications FSG2200HNU

Summary of Contents for ZyXEL Communications FSG2200HNU

  • Page 1 Multiservice Gateway IAD with 802.11n Wireless Default Login Details IP Address https://192.168.1.1 User Name Admin account: admin User account: user Password Admin account: admin User account: user Firmware Version 1.00 www.zyxel.com Edition 2, 10/2010 www.zyxel.com Copyright © 2010 ZyXEL Communications Corporation...

  • Page 3: About This User's Guide

    Refer to the included CD for support documents. Documentation Feedback Send your comments, questions or suggestions to: techwriters@zyxel.com.tw Thank you! The Technical Writing Team, ZyXEL Communications Corp., 6 Innovation Road II, Science-Based Industrial Park, Hsinchu, 30099, Taiwan. Need More Help? More help is available at www.zyxel.com.
  • Page 4 • Product model and serial number. • Warranty Information. • Date that you received your device. • Brief description of the problem and the steps you took to solve it. FSG2200HNU User’s Guide...

  • Page 5: Document Conventions

    For example, “k” for kilo may denote “1000” or “1024”, “M” for mega may denote “1000000” or “1048576” and so on. • “e.g.,” is a shorthand for “for instance”, and “i.e.,” means “that is” or “in other words”. FSG2200HNU User’s Guide...
  • Page 6 Icons Used in Figures Figures in this User’s Guide may use the following generic icons. The ZyXEL Device icon is not an exact representation of your device. ZyXEL Device Computer Notebook computer Server DSLAM Firewall Telephone Switch Router FSG2200HNU User’s Guide...

  • Page 7: Safety Warnings

    Your product is marked with this symbol, which is known as the WEEE mark. WEEE stands for Waste Electronics and Electrical Equipment. It means that used electrical and electronic products should not be mixed with general waste. Used electrical and electronic equipment should be treated separately. FSG2200HNU User’s Guide...
  • Page 8 Safety Warnings FSG2200HNU User’s Guide...

  • Page 9: Table Of Contents

    Policy Route .......................... 191 Dynamic DNS Setup ......................197 Service Control ........................199 TR-069 ............................ 203 System ........................... 207 Logs ............................211 Tools ............................. 217 Diagnostic ..........................231 Account ........................... 233 Troubleshooting ........................235 Product Specifications ......................243 FSG2200HNU User’s Guide...
  • Page 10 Contents Overview FSG2200HNU User’s Guide...

  • Page 11: Table Of Contents

    2.1.1 Accessing the Web Configurator ................29 2.2 Web Configurator Main Screen ................... 31 2.2.1 Title Bar ........................31 2.2.2 Navigation Panel ......................32 2.2.3 Main Window ......................36 2.2.4 Status Bar ........................36 Chapter 3 Tutorial ............................. 37 FSG2200HNU User’s Guide...
  • Page 12 5.2 Internet Connection Screen ....................76 5.2.1 WAN Connection Configuration ................77 5.2.2 Egress Queue Information Edit Screen ..............86 5.3 Default Gateway Screen ..................... 88 5.4 Multicast Screen ......................... 88 5.5 Technical Reference ......................89 Chapter 6 LAN Setup........................93 FSG2200HNU User’s Guide...
  • Page 13 8.2.1 Configuring the Port Forwarding Screen ..............125 8.2.2 The Port Forwarding Edit Screen ................127 8.3 NAT Technical Reference ....................128 8.3.1 NAT Definitions ......................128 8.3.2 What NAT Does ....................... 129 8.3.3 How NAT Works ....................... 129 8.3.4 NAT Application ......................131 FSG2200HNU User’s Guide...
  • Page 14 11.2 MAC Filter Screen ......................170 Chapter 12 Firewall........................... 171 12.1 Overview .......................... 171 12.1.1 What You Can Do in the Firewall Screens ............. 171 12.1.2 What You Need to Know About Firewall ..............171 12.2 The Firewall Screen ......................172 FSG2200HNU User’s Guide...
  • Page 15 16.2 Configuring Dynamic DNS ....................197 Chapter 17 Service Control ........................199 17.1 Overview ......................... 199 17.1.1 What You Can Do in this Chapter ................199 17.1.2 What You Need to Know ..................199 17.2 The Service Control Screen .................... 200 FSG2200HNU User’s Guide...
  • Page 16 21.4 Restart ..........................223 21.5 Technical Reference ......................224 21.5.1 Tool Examples ......................224 Chapter 22 Diagnostic.......................... 231 22.1 Overview ......................... 231 22.1.1 What You Can Do in the Diagnostic Screens ............231 22.2 The General Diagnostic Screen ..................231 FSG2200HNU User’s Guide...
  • Page 17 Appendix B Setting Up Your Computer’s IP Address ............267 Appendix C Pop-up Windows, JavaScripts and Java Permissions ........297 Appendix D Wireless LANs ....................307 Appendix E Common Services..................... 331 Appendix F Open Software Announcements ............... 335 Appendix G Legal Information....................341 Index............................345 FSG2200HNU User’s Guide...
  • Page 18 Table of Contents FSG2200HNU User’s Guide...

  • Page 19: User's Guide

    User’s Guide...

  • Page 21: Introducing The Zyxel Device

    You can then use the QoS, Firewall and VoIP functions on the ZyXEL Device. You can also connect the LAN port of your ZyXEL Device to a broadband modem or router to access the Internet via an Ethernet connection. FSG2200HNU User’s Guide...

  • Page 22: Voip Features

    ZyXEL Device to make and receive VoIP telephone calls: Figure 2 ZyXEL Device’s VoIP Application Fiber PSTN The ZyXEL Device sends your call to a VoIP service provider’s SIP server which forwards your calls to either VoIP or PSTN phones. FSG2200HNU User’s Guide...

  • Page 23: Zyxel Device's Usb Support

    The following figure shows how you can set up the FTU2000 at home. Using a coaxial cable, connect the FTU2000 to the television. Use a fiber optic cable to connect the FTU2000 to a fiber optic outlet in your home. Figure 4 FTU2000 Setup FSG2200HNU User’s Guide...

  • Page 24: Ways To Manage The Zyxel Device

    • Web Configurator. This is recommended for everyday management of the ZyXEL Device using a (supported) web browser. • Command Line Interface. Line commands are mostly used for troubleshooting by service engineers. • FTP for firmware upgrades and configuration backup/restore. FSG2200HNU User’s Guide...

  • Page 25: Good Habits For Managing The Zyxel Device

    The ZyXEL Device has an Ethernet connection with a Orange device on the Local Area Network (LAN). Blinking The ZyXEL Device is sending/receiving data to /from the LAN. The ZyXEL Device does not have an Ethernet connection with the LAN. FSG2200HNU User’s Guide...
  • Page 26 The phone port does not have a SIP account registered. USB 1 ~ 2 Green The ZyXEL Device recognizes a USB connection. Blinking The ZyXEL Device is sending/receiving data to /from the USB device connected to it. The ZyXEL Device does not detect a USB connection. FSG2200HNU User’s Guide...

  • Page 27: The Reset Button

    • Press the WLAN button for one second and release it. The WLAN LED should change from on to off or vice versa. • Press the WLAN button for five seconds to turn on WPS. See Section 7.5 on page 117 for more on using WPS to configure your wireless clients. FSG2200HNU User’s Guide...
  • Page 28 Chapter 1 Introducing the ZyXEL Device FSG2200HNU User’s Guide...

  • Page 29: Introducing The Web Configurator

    Make sure your ZyXEL Device hardware is properly connected (refer to the Quick Start Guide). Launch your web browser. Type "192.168.1.1" as the URL. A password screen displays. • For administrator login, type “admin” (default) as the username and “admin” as the password, and click Login. FSG2200HNU User’s Guide...
  • Page 30 Login. Figure 7 Password Screen Note: For security reasons, the ZyXEL Device automatically logs you out if you do not use the web configurator for five minutes (default). If this happens, log in again. FSG2200HNU User’s Guide...

  • Page 31: Web Configurator Main Screen

    The title bar shows the following icons in the upper right corner. Table 2 Title Bar Icon Description Logout Click this icon to log out of the web configurator. Help Click this icon to open the help page for the current screen. FSG2200HNU User’s Guide...

  • Page 32: Navigation Panel

    IP addresses to individual MAC addresses (and host names). IP Alias Use this screen to configure another LAN network for the ZyXEL Device. This screen is not available in the user account. FSG2200HNU User’s Guide...
  • Page 33 ZyXEL Device. Firewall Services Use this screen to activate/deactivate the firewall and the default action to take on network traffic going in specific directions. FSG2200HNU User’s Guide...
  • Page 34 Log Settings Use this screen to select which logs and/or immediate alerts your device is to record. You can also set it to e- mail the logs to you. This screen is not available in the user account. FSG2200HNU User’s Guide...
  • Page 35 LINK Status Network Client List Wireless LAN General Security Scheduling Association List Port Forwarding VoIP Phonebook Speed Dial USB Services File Sharing Share Configuration Account Management Security MAC Filter MAC Filter Advanced Dynamic DNS Dynamic DNS Maintenance FSG2200HNU User’s Guide...

  • Page 36: Main Window

    Right after you log in, the Status screen is displayed. See Chapter 4 on page 63 for more information about the Status screen. 2.2.4 Status Bar Check the status bar when you click Apply or Save to verify that the configuration has been updated. FSG2200HNU User’s Guide...

  • Page 37: Tutorial

    Let’s say you are the network administrator of this company and you want to configure the ZyXEL Device so that the conditions cited above are met. The FSG2200HNU User’s Guide...
  • Page 38 DHCP server and video server. It has ZyXEL’s Vantage ACS installed which enables it to manage the devices remotely; and b) SIP server that provides VoIP services. Note: This tutorial only shows the configuration steps for the ZyXEL Device FSG2200HNU User’s Guide...

  • Page 39: Egress Queue Setup

    Queue Type SP (Strictly Priority) / Highest Shaping Rate Queue Index 2 This queue is dedicated to remote management, which enables the service provider to configure the ZyXEL Device without physically being in the site. FSG2200HNU User’s Guide...

  • Page 40: Wide Area Network (Wan) Service Setup

    Note: These values are based on a 10 GB connection, with 150 MB dedicated to the company’s Marketing division. You should have the following egress queues. 3.2.2 Wide Area Network (WAN) Service Setup After configuring the egress queues, create WAN interfaces for the services and assign them to the egress queues. FSG2200HNU User’s Guide...
  • Page 41 Egress Queue Queue 2 wan2 WAN Interface IP over Ethernet Service Description Data 802.1Q VLAN ID 802.1P Priority WAN service type Data Egress Queue Queue 4 wan3 WAN Interface IP over Ethernet Service Description VoIP 802.1Q VLAN ID FSG2200HNU User’s Guide...
  • Page 42 Note: If you selected PPP over Ethernet (PPPoE) as the WAN Interface, you need to enter your user name, password and static IP address (if supplied by your service provider). Refer to Section 5.2.1.2 on page 80 to see the screen. FSG2200HNU User’s Guide...
  • Page 43 DNS information in the following screen and click Next. Review the summary shown in the screen and click Save. You are redirected to the Network > WAN > Internet Connection screen where you should see the WAN interface and egress queues you have just configured. FSG2200HNU User’s Guide...

  • Page 44: Setting The Default Gateway

    Select from which interface the ZyXEL Device acquires its gateway address and DNS information by default. Click Network > WAN > Default Gateway to open the following screen. For this tutorial, you want Remote Management (or wan1) to be the default interface. FSG2200HNU User’s Guide...

  • Page 45: Checking The Wan Configuration

    Type show interfaces. You should see the WAN interfaces you have just configured in the previous sections. This concludes the WAN screens configuration tutorial. You have set up the WAN interfaces for the services needed by the Marketing division of the company. FSG2200HNU User’s Guide...

  • Page 46: How To Set Up A Wireless Network

    Open the Network > Wireless LAN > General screen in the AP’s web configurator. Tutorial: Network > Wireless LAN > General Make sure Enable Wireless LAN is selected. Enter “SSID_Example3” as the SSID and select a channel which is not used by another AP. FSG2200HNU User’s Guide...
  • Page 47 Click Apply. Tutorial: Network > Wireless LAN > Security Open the Status screen. Verify your wireless and wireless security settings under Device Information and check if the WLAN connection is up under Interface Status. Tutorial: Status FSG2200HNU User’s Guide...

  • Page 48: Configuring The Wireless Client

    IDentity (SSID) and WPA-PSK pre-shared key. In this example, the SSID is “SSID_Example3” and the pre-shared key is “ThisismyWPA-PSKpre-sharedkey”. After you install the ZyXEL utility and then insert the wireless client, follow the steps below to connect to a network using the Site Survey screen. FSG2200HNU User’s Guide...
  • Page 49 Use the Next button to move on to the next screen. You can use the Back button at any time to return to the previous screen, or the Exit button to return to the Site Survey screen. Tutorial: Security Settings FSG2200HNU User’s Guide...
  • Page 50 A profile lets you easily connect to the same wireless network again later. You can also configure different profiles for different networks, for example if you connect a notebook computer to wireless networks at home and at work. FSG2200HNU User’s Guide...
  • Page 51 Tutorial: Add New Profile Give the profile a descriptive name (of up to 32 printable ASCII characters). Select Infrastructure and either manually enter or select the AP's SSID in the Scan Info table and click Select. FSG2200HNU User’s Guide...
  • Page 52 This screen varies depending on the encryption method you selected in the previous screen. Enter the pre-shared key and leave the encryption type at the default setting. Tutorial: Profile Encryption In the next screen, leave both boxes selected. Tutorial: Wireless Protocol Settings. FSG2200HNU User’s Guide...
  • Page 53 11 If you cannot access the Internet go back to the Profile screen, select the profile you are using and click Edit. Check the details you entered previously. Also, refer to the Troubleshooting section of this User's Guide or contact your network administrator if necessary. FSG2200HNU User’s Guide...

  • Page 54: How To Make A Voip Call

    SIP1 account to make outgoing calls. Select the SIP1 check box in the SIP Account(s) to Receive Incoming Call section to have the phone (connected to the first phone port) receive phone calls for the SIP1 account. FSG2200HNU User’s Guide...

  • Page 55: Using The File Sharing Feature

    To set up file sharing you need to set up a user account, enable file sharing and set up your share(s). 3.5.1.1 Set up a User Account Before you can share files you need a user account. FSG2200HNU User’s Guide...
  • Page 56 You also need to set up file sharing on your ZyXEL Device in order to share files. Go to USB Services > File Sharing > Share Configuration to enable file sharing and enter a workgroup name. Click Apply to save your settings. Tutorial: USB Services > File Sharing > Share Configuration FSG2200HNU User’s Guide...

  • Page 57: Access Your Shared Files From A Computer

    Note: The examples in this User’s Guide show you how to use Microsoft’s Windows XP to browse your shared files. Refer to your operating system’s documentation for how to browse your file structure. Open Windows Explorer to access the ZyXEL share using Windows Explorer browser. FSG2200HNU User’s Guide...

  • Page 58: Configuring The Policy Route Screens

    5.2.2 on page 86 for information on these screens. Refer to Section 3.2 on page for the tutorial on this.) You should then do the following: • Configure a policy route to forward your computer’s traffic to the Management interface. FSG2200HNU User’s Guide...
  • Page 59 (AA:FF:AA:FF:AA:FF for example) of your computer and map it to the policy route you created. QoS Example Traffic routed to another WAN interface ZyXEL Device Traffic routed to the Management interface Your computer IP=192.168.1.23 and/or MAC=AA:FF:AA:FF:AA:FF E-mail: Management interface FSG2200HNU User’s Guide...
  • Page 60 Type the IP address of your computer - 192.168.1.23. Type the IP Subnet Mask if you know it. This maps your computer’s IP address and MAC address, as well as traffic coming from your computer, to the Management interface. FSG2200HNU User’s Guide...

  • Page 61: Technical Reference

    Technical Reference...

  • Page 63: Status Screens

    (LAN, WAN and WLAN), and SIP accounts. You can also register and unregister SIP accounts. The Status screen also provides detailed information from DHCP and statistics from VoIP, and traffic. Click Status to open this screen. Figure 9 Status Screen FSG2200HNU User’s Guide...
  • Page 64 This is the channel number used by the ZyXEL Device now. Security This displays the type of security mode the ZyXEL Device is using in the Mode wireless LAN. Click this to change the security mode. System Status FSG2200HNU User’s Guide...
  • Page 65 Click this link to display the MAC address(es) of the wireless stations List that are currently associating with the ZyXEL Device. See Section 4.3 on page VoIP Status Click this link to view statistics about your VoIP usage. See Section 4.5 on page FSG2200HNU User’s Guide...
  • Page 66 You can change this in VoIP > SIP > SIP Account. This field displays the account number and service domain of the SIP account. You can change these in VoIP > SIP > SIP Service Provider. FSG2200HNU User’s Guide...

  • Page 67: Dhcp Client List

    Click this to save your changes back to the ZyXEL Device. Reset Click this to begin configuring this screen afresh. Refresh Click this to reload the DHCP table. You can also access this screen by clicking Network > LAN > Client List. FSG2200HNU User’s Guide...

  • Page 68: Wlan Client List

    You can also access this screen by clicking Network > Wireless LAN > Association List. 4.4 Packet Statistics Click Status > Summary > Packet Statistics to access this screen. Read-only information here includes port status and packet specific statistics. Also provided FSG2200HNU User’s Guide...
  • Page 69 This indicates the number of transmitted packets on this interface. Errs This indicates the number of frames with errors transmitted on this interface. Drops This indicates the number of outgoing packets dropped on this interface. LAN Statistics Interface This field displays the Ethernet ports. FSG2200HNU User’s Guide...

  • Page 70: Voip Statistics

    Interval field above. Stop Click this button to halt the refreshing of the system statistics. 4.5 VoIP Statistics Click Status > Summary > VoIP Status to access this screen. Figure 13 Status > Summary > VoIP Status FSG2200HNU User’s Guide...
  • Page 71 This field displays what voice codec is being used for a current VoIP call through a phone port. Peer Number This field displays the SIP number of the party that is currently engaged in a VoIP call through a phone port. FSG2200HNU User’s Guide...
  • Page 72 Set Interval. Set Interval Click this to make the ZyXEL Device update the screen based on the amount of time you specified in Poll Interval. Stop Click this to make the ZyXEL Device stop updating the screen. FSG2200HNU User’s Guide...

  • Page 73: Wan Setup

    DNS server. • Use Multicast screen (Section 5.4 on page 88) to select the WAN interface for multicast traffic. Multicast delivers IP packets to just a group of hosts on the network. FSG2200HNU User’s Guide...

  • Page 74: What You Need To Know

    Egress Queue You can configure up to four (4) egress queues for packets going out of your ZyXEL Device. You must assign an egress queue for each added WAN interface. There are two types of queues as follows: FSG2200HNU User’s Guide...

  • Page 75: Before You Begin

    WAN. • See Chapter 3 on page 37 for WAN tutorials. 5.1.3 Before You Begin You need to know your Internet access settings such as encapsulation and WAN IP address. Get this information from your ISP. FSG2200HNU User’s Guide...

  • Page 76: Internet Connection Screen

    This indicates the 802.1P priority level assigned to traffic sent through this connection. This displays N/A when there is no priority level assigned. Egress Queue This identifies the egress queue of the outgoing traffic flow for this interface. FSG2200HNU User’s Guide...

  • Page 77: Wan Connection Configuration

    Note: The succeeding sections show the step-by-step process of adding a WAN connection. Make sure you have the correct information from your ISP. The screens that appear when you click Next depend on the WAN interface type of your Internet connection. FSG2200HNU User’s Guide...
  • Page 78 Chapter 5 WAN Setup 5.2.1.1 WAN Interface This screen displays when you add or edit a new WAN connection. Figure 18 Network > WAN > Internet Connection > Add/Edit: WAN Service FSG2200HNU User’s Guide...
  • Page 79 You can configure the egress queue settings to suit the network’s needs. Queue Type This shows the queue type, whether it is Strictly Priority (SP) or Weighted Fair Queueing (WFQ). Refer to Egress Queue on page 74 more information on these queue types. FSG2200HNU User’s Guide...
  • Page 80 Note: The screen varies according to the WAN Service Type selected in the previous screen. See Section 5.5 on page 89 for more information. PPPoE This screen displays when you select PPP over Ethernet (PPPoE). Figure 19 Network > WAN > Internet Connection > Add/Edit: WAN IP Settings (PPPoE) FSG2200HNU User’s Guide...
  • Page 81 Internet. Select this check box to have the ZyXEL Device enable this feature. Back Click this button to return to the previous screen. Next Click this button to continue. FSG2200HNU User’s Guide...
  • Page 82 Enable ICMP Internet Control Message Protocol (ICMP) is a message control and Response error-reporting protocol between a host server and a gateway to the Internet. Select this check box to have the ZyXEL Device enable this feature. FSG2200HNU User’s Guide...
  • Page 83 Click this button to continue to a summary of your bridging WAN service type (refer to Section 5.2.1.4 on page 85). 5.2.1.3 DNS Server Click Next in Network > WAN > Internet Connection > Add/Edit: WAN IP Settings (PPPoE/IPoE) to open the following screen. FSG2200HNU User’s Guide...
  • Page 84 Enter the first DNS server address assigned by the ISP. server Secondary Enter the second DNS server address assigned by the ISP. DNS server Back Click this button to return to the previous screen. Next Click this button to continue. FSG2200HNU User’s Guide...
  • Page 85 This shows whether NAT is active or not for this connection. IGMP Multicast This shows whether IGMP multicasting is active or not for this connection. Back Click this button to return to the previous screen. Save Click this button to save your changes. FSG2200HNU User’s Guide...

  • Page 86: Egress Queue Information Edit Screen

    Click this button to save your changes. 5.2.2 Egress Queue Information Edit Screen Use this screen to configure the egress queues. To open this screen, click the Edit icon in the Egress Queue Information of the Network > WAN screen. FSG2200HNU User’s Guide...
  • Page 87 WAN interface. Shaping Rate This shows the maximum transmission rate allowed for traffic on this (kbps) queue. Apply Click this to save your changes back to the ZyXEL Device. Cancel Click this to begin configuring this screen afresh. FSG2200HNU User’s Guide...

  • Page 88: Default Gateway Screen

    Use this screen to select the WAN interface for multicast traffic. Multicast delivers IP packets to just a group of hosts on the network. Refer to Multicast on page Click Network > WAN > Multicast to open the following screen. Figure 27 Network > WAN > Multicast FSG2200HNU User’s Guide...

  • Page 89: Technical Reference

    (RFC 2516) specifying how a personal computer (PC) interacts with a broadband modem (DSL, cable, wireless, etc.) connection. For the service provider, PPPoE offers an access and authentication method that works with existing access control systems (for example RADIUS). FSG2200HNU User’s Guide...
  • Page 90 VLAN also increases network performance by limiting broadcasts to a smaller and more manageable logical broadcast domain. In traditional switched environments, all broadcast packets go to each and every individual port. With VLAN, all broadcasts are confined to a specific broadcast domain. FSG2200HNU User’s Guide...
  • Page 91 224.0.0.1 is used for query messages and is assigned to the permanent group of all IP hosts (including gateways). All hosts must join the 224.0.0.1 group in order to participate in IGMP. The address 224.0.0.2 is assigned to the multicast routers group. FSG2200HNU User’s Guide...
  • Page 92 Internet Control Message Protocol (ICMP) is a message control and error-reporting protocol between a host server and a gateway to the Internet. ICMP uses Internet Protocol (IP) datagrams, but the messages are processed by the TCP/IP software and directly apparent to the application user. FSG2200HNU User’s Guide...

  • Page 93: Lan Setup

    96) to assign IP addresses on the LAN to specific individual computers based on their MAC Addresses. • Use the IP Alias screen (Section 6.5 on page 98) to configure another LAN network for the ZyXEL Device. FSG2200HNU User’s Guide...

  • Page 94: What You Need To Know

    DHCP are passed to the client machines along with the assigned IP address and subnet mask. 6.1.3 Before You Begin Find out the MAC addresses of your network devices if you intend to add them to the DHCP Client List screen. FSG2200HNU User’s Guide...

  • Page 95: The Ip Screen

    Click this to begin configuring this screen afresh. 6.3 DHCP Server Screen Use this screen to configure the DNS server information that the ZyXEL Device sends to the DHCP client devices on the LAN. Figure 29 Network > LAN > DHCP Server FSG2200HNU User’s Guide...

  • Page 96: The Client List Screen

    Use this table to assign IP addresses on the LAN to specific individual computers based on their MAC Addresses. Every Ethernet device has a unique MAC (Media Access Control) address. The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters, for example, 00:A0:C5:00:00:02. FSG2200HNU User’s Guide...
  • Page 97 You can select up to 128 entries in this table. Apply Click this to save your changes back to the ZyXEL Device. Reset Click this to begin configuring this screen afresh. Refresh Click this to reload the DHCP table. FSG2200HNU User’s Guide...

  • Page 98: Ip Alias Screen

    Click this to save your changes back to the ZyXEL Device. Reset Click this to begin configuring this screen afresh. 6.6 Technical Reference This section provides some technical background information about the topics covered in this chapter. FSG2200HNU User’s Guide...
  • Page 99 Similar to the way houses on a street share a common street name, so too do computers on a LAN share one common network number. Where you obtain your network number depends on your particular situation. If the ISP or your network administrator assigns you a block of registered IP FSG2200HNU User’s Guide...
  • Page 100 Note: Regardless of your particular situation, do not create an arbitrary IP address; always follow the guidelines above. For more information on address assignment, please refer to RFC 1597, “Address Allocation for Private Internets” and RFC 1466, “Guidelines for Management of IP Address Space”. FSG2200HNU User’s Guide...
  • Page 101 Note: Make sure that the subnets of the logical networks do not overlap. The following figure shows a LAN divided into subnets A and B. Figure 33 Physical Network & Partitioned Logical Networks A: 192.168.1.1 - 192.168.1.24 Ethernet Interface B: 192.168.2.1 - 192.168.2.24 FSG2200HNU User’s Guide...
  • Page 102 Chapter 6 LAN Setup FSG2200HNU User’s Guide...

  • Page 103: Wireless Lan

    Figure 34 Example of a Wireless Network Ethernet 7.1.1 What You Can Do in this Chapter This chapter describes the ZyXEL Device’s Network > Wireless LAN screens. Use these screens to set up your ZyXEL Device’s wireless connection. FSG2200HNU User’s Guide...

  • Page 104: What You Need To Know

    Wireless Network Construction Wireless networks consist of wireless clients, access points and bridges. • A wireless client is a radio connected to a user’s computer. FSG2200HNU User’s Guide...
  • Page 105 This allows a variety of networks to exist in the same place without interfering with one another. When you create a network, you must select a channel to use. Since the available unlicensed spectrum varies from one country to another, the number of available channels also varies. FSG2200HNU User’s Guide...
  • Page 106 Because wireless networks are radio networks, their signals are subject to limitations of distance, interference and absorption. Problems with distance occur when the two radios are too far apart. Problems with interference occur when other radio waves interrupt the data signal. Interference FSG2200HNU User’s Guide...

  • Page 107: Before You Begin

    LAN and you change the ZyXEL Device’s SSID or security settings, you will lose your wireless connection when you press Apply to confirm. You must then change the wireless settings of your computer to match the ZyXEL Device’s new settings. FSG2200HNU User’s Guide...
  • Page 108 Note: SSID1 is enabled by default and cannot be disabled. Hide SSID Select this check box to hide the SSID in the outgoing beacon frame so a station cannot obtain the SSID through scanning using a site survey tool. FSG2200HNU User’s Guide...
  • Page 109 Check this to use Short GI (Guard Interval). The guard interval is the gap introduced between data transmission from users in order to reduce interference. Reducing the GI increases data transfer rates but also increases interference. Increasing the GI reduces data transfer rates but also reduces interference. FSG2200HNU User’s Guide...

  • Page 110: The Security Screens

    Use this screen to set up wireless security of your ZyXEL Device. Click Network > Wireless LAN > Security to open the following screen. The screen varies depending on the wireless security you select. Figure 36 Network > Wireless LAN > Security FSG2200HNU User’s Guide...

  • Page 111: No Security

    (AP) to keep network communications private. Both the wireless stations and the access points must use the same WEP key. There are two types of WEP authentication namely, Open System (Static WEP) and Shared Key (Shared WEP). FSG2200HNU User’s Guide...
  • Page 112 (ASCII string) or 10 or 26 hexadecimal characters ("0-9", "A-F") for a 64- bit or 128-bit WEP key respectively. Apply Click this to save your changes back to the ZyXEL Device. Reset Click this to reload the previous configuration for this screen. FSG2200HNU User’s Guide...

  • Page 113: Wpa-Psk/Wpa2-Psk Authentication

    WPA2-PSK are the same. The only difference between the two is that WPA-PSK/WPA2-PSK uses a simple common password, instead of user-specific credentials. Type a pre-shared key from 8 to 63 case-sensitive ASCII characters (including spaces and symbols). FSG2200HNU User’s Guide...

  • Page 114: Wpa/Wpa2 Authentication

    The WPA security mode is a security subset of WPA2. It requires the presence of a RADIUS server on your network in order to validate user credentials. This encryption standard is slightly older than WPA2 and therefore is more compatible with older devices. FSG2200HNU User’s Guide...
  • Page 115 Select PKT to have the ZyXEL Device automatically disconnects a wireless station from the wired network after a certain number of packets have been processed. • Select NONE if you do not want the connection between the ZyXEL Device and a wireless station to time out. FSG2200HNU User’s Guide...

  • Page 116: The Qos Screen

    Click this to save your changes back to the ZyXEL Device. Reset Click this to reload the previous configuration for this screen. 7.4 The QoS Screen This screen allows you to enable or disable wireless quality of service. FSG2200HNU User’s Guide...

  • Page 117: Wps

    Note: The ZyXEL Device applies the security settings of the SSID1 profile (see Section 7.2 on page 107). If you want to use the WPS feature, make sure you have set the security mode of SSID1 to WPA-PSK, WPA2-PSK or No Security. FSG2200HNU User’s Guide...
  • Page 118 Click this button to remove all configured wireless and wireless security settings for WPS connections on the ZyXEL Device. Apply Click this to save your changes back to the ZyXEL Device. Refresh Click this to reload the previous configuration for this screen. FSG2200HNU User’s Guide...

  • Page 119: Wps Station

    You can find the PIN either on the outside of the device, or by checking the device’s settings. Note: You must also activate WPS on that device within two minutes to have it present its PIN to the ZyXEL Device. FSG2200HNU User’s Guide...

  • Page 120: Scheduling Screen

    For example, you want the wireless network to be only available during work hours. Check Mon ~ Fri in the day column, and specify 8:00 ~ 18:00 in the time table. Apply Click this to save your changes. Reset Click this to restore your previously saved settings. FSG2200HNU User’s Guide...

  • Page 121: Association List Screen

    This field displays the time a wireless station first associated with the ZyXEL Device. Refresh Click this to reload the screen. 7.9 Wireless LAN Technical Reference The following section contains additional technical information about the ZyXEL Device features described in this chapter. FSG2200HNU User’s Guide...
  • Page 122 Fragmentation A small fragmentation threshold is recommended for busy networks, Threshold while a larger threshold provides faster performance if the network is not very busy. Refer to Appendix D on page 307 for more information. FSG2200HNU User’s Guide...

  • Page 123: Network Address Translation (Nat)

    In the simplest form, NAT changes the source IP address in a packet received from a subscriber (the inside local address) to another (the inside global address) before forwarding the packet to the WAN side. When the response comes back, FSG2200HNU User’s Guide...

  • Page 124: Port Forwarding

    Let's say you want to assign ports 21-25 to one FTP, Telnet and SMTP server (A in the example), port 80 to another (B in the example) and assign a default server IP address of 192.168.1.35 to a third (C in the example). You assign the LAN IP FSG2200HNU User’s Guide...

  • Page 125: Configuring The Port Forwarding Screen

    Internal port and Protocol fields. Otherwise, select User Define to open the Rule Setup screen where you can manually enter the port number(s) and select the IP protocol. WAN Interface Select the WAN interface through which the service is forwarded. FSG2200HNU User’s Guide...
  • Page 126 This is the first internal port number that identifies a service. Port Internal End This is the last internal port number that identifies a service. Port Server IP This is the server’s IP address. Address Protocol This shows the IP protocol. FSG2200HNU User’s Guide...

  • Page 127: The Port Forwarding Edit Screen

    To forward only one port, enter the port number again in the External End Port field. To forward a series of ports, enter the start port number here and the end port number in the External End Port field. FSG2200HNU User’s Guide...

  • Page 128: Nat Technical Reference

    IP address of a host used in a packet. Thus, an inside local address (ILA) is the IP address of an inside host in a packet when the packet is still in the local network, while an inside global address (IGA) is the IP address of the same inside FSG2200HNU User’s Guide...

  • Page 129: What Nat Does

    IP source address (and TCP or UDP source port numbers for Many-to-One and Many-to-Many Overload NAT mapping) in each packet and then forwards it to the Internet. The ZyXEL Device keeps track of the original addresses FSG2200HNU User’s Guide...
  • Page 130 Figure 49 How NAT Works NAT Table Inside Local Inside Global IP Address IP Address 192.168.1.10 IGA 1 192.168.1.13 192.168.1.11 IGA 2 192.168.1.12 IGA 3 192.168.1.13 IGA 4 192.168.1.12 192.168.1.10 IGA1 Inside Local Inside Global Address (ILA) Address (IGA) 192.168.1.11 192.168.1.10 FSG2200HNU User’s Guide...

  • Page 131: Nat Application

    =IP2 (IGA 2) NAT Server 192.168.2.1 LAN3: 192.168.3.X Network Server Server in “R&D”=192.168.3.1 R&D Network =IP3 (IGA 3) NAT Server WAN Addresses: LAN Addresses: (Default IPs) 192.168.3.1 IGA 1 ---------------> 192.168.1.1 IGA 2 ---------------> 192.168.2.1 IGA 3 ---------------> 192.168.3.1 FSG2200HNU User’s Guide...
  • Page 132 Chapter 8 Network Address Translation (NAT) FSG2200HNU User’s Guide...

  • Page 133: Voice

    You don’t necessarily need to use all these screens to set up your account. In fact, if your service provider did not supply information on a particular field in a screen, it is usually best to leave it at its default setting. FSG2200HNU User’s Guide...

  • Page 134: What You Need To Know

    How to Find Out More Chapter 3 on page 37 for a tutorial showing how to set up these screens in an example scenario. Section 9.7 on page 147 for advanced technical information on SIP. FSG2200HNU User’s Guide...

  • Page 135: Before You Begin

    Note: Click Advanced to see all the fields in the screen. You don’t necessarily need to use all these fields to set up your account. Click Basic to see and configure only the fields needed for this feature. Figure 51 VoIP > SIP > SIP Service Provider (Advanced) FSG2200HNU User’s Guide...
  • Page 136 Enter the IP address or domain name of the SIP register server, if your Server Address VoIP service provider gave you one. Otherwise, enter the same address you entered in the SIP Server Address field. You can use up to 95 printable ASCII characters. FSG2200HNU User’s Guide...
  • Page 137 RTP DSCP Enter the DSCP (DiffServ Code Point) number for RTP voice Priority Setting transmissions. The ZyXEL Device creates Class of Service (CoS) priority tags with this number to RTP traffic that it transmits. Timer Setting FSG2200HNU User’s Guide...

  • Page 138: Dial Plan Rules

    Dial plan rules follow these conventions: • The collection of rules is in parentheses (). • Rules are separated by the | (bar) symbol. • “x” stands for a wildcard and can be any digit from 0 to 9. FSG2200HNU User’s Guide...

  • Page 139: The Sip Account Screen

    Use this screen to maintain basic information about each SIP account. You can also enable and disable each SIP account, configure the volume, echo cancellation and VAD (Voice Activity Detection) settings for each individual phone port on the ZyXEL Device. FSG2200HNU User’s Guide...
  • Page 140 Echo Cancellation G.168 is an ITU-T standard for eliminating the echo caused by the sound of your voice reverberating in the telephone receiver while you talk. To access this screen, click VoIP > SIP > SIP Account. FSG2200HNU User’s Guide...
  • Page 141 Note: Click Advanced to see all the fields in the screen. You don’t necessarily need to use all these fields to set up your account. Click Basic to see and configure only the fields needed for this feature. Figure 52 VoIP > SIP > SIP Account (Advanced) FSG2200HNU User’s Guide...
  • Page 142 Minimum is the quietest, and Maximum is the loudest. Active G.168 Select this if you want to eliminate the echo caused by the sound of (Echo your voice reverberating in the telephone receiver while you talk. Cancellation) FSG2200HNU User’s Guide...
  • Page 143 Apply Click this to save your changes and to apply them to the ZyXEL Device. Cancel Click this to set every field in this screen to its last-saved value. FSG2200HNU User’s Guide...

  • Page 144: The Analog Phone Screen

    Click this to go to a screen where you can configure the SIP number for the SIP account. Apply Click this to save your changes and to apply them to the ZyXEL Device. Cancel Click this to set every field in this screen to its last-saved value. FSG2200HNU User’s Guide...

  • Page 145: The Phone Region Screen

    You also have to create speed-dial entries if you want to call SIP numbers that contain letters. Once you have configured a speed dial rule, you can use a shortcut (the speed dial number, #01 for example) on your phone's keypad to call the phone number. FSG2200HNU User’s Guide...
  • Page 146 Use this field to edit or erase the speed-dial entry. Click the Edit icon to copy the information for this speed-dial entry into the Speed Dial section, where you can change it. Click the Remove icon to erase this speed-dial entry. FSG2200HNU User’s Guide...

  • Page 147: Sip Technical Reference

    SIP identity is called a SIP URI (Uniform Resource Identifier). A SIP account's URI identifies the SIP account in a way similar to the way an e-mail address identifies an e-mail account. The format of a SIP identity is SIP- Number@SIP-Service-Domain. FSG2200HNU User’s Guide...
  • Page 148 Authorization Requirements SIP registrations (and subsequent SIP requests) require a username and password for authorization. These credentials are validated via a challenge / response system using the HTTP digest mechanism (as detailed in RFC3261, "SIP: Session Initiation Protocol"). FSG2200HNU User’s Guide...
  • Page 149 In the following example, you want to use client device A to call someone who is using client device C. The client device (A in the figure) sends a call invitation to the SIP proxy server (B). FSG2200HNU User’s Guide...
  • Page 150 In the following example, you want to use client device A to call someone who is using client device C. Client device A sends a call invitation for C to the SIP redirect server (B). The SIP redirect server sends the invitation back to A with C’s IP address (or domain name). FSG2200HNU User’s Guide...
  • Page 151 SIP Call Progression The following figure displays the basic steps in the setup and tear down of a SIP call. A calls B. Table 44 SIP Call Progression 1. INVITE 2. Ringing 3. OK 4. ACK FSG2200HNU User’s Guide...
  • Page 152 • G.729 is an Analysis-by-Synthesis (AbS) hybrid waveform codec that uses a filter based on information about how the human vocal tract produces sounds. G.729 provides good sound quality and reduces the required bandwidth to 8 kbps. FSG2200HNU User’s Guide...

  • Page 153: Quality Of Service (Qos)

    The ZyXEL Device does not support pulse dialing at the time of writing. The ZyXEL Device does not support DiffServ at the time of writing. FSG2200HNU User’s Guide...

  • Page 154: Phone Services Overview

    Supplementary services such as call hold, call waiting, and call transfer. are generally available from your VoIP service provider. The ZyXEL Device supports the following services: • Call Hold • Call Waiting • Making a Second Call • Call Transfer • Three-Way Conference FSG2200HNU User’s Guide...
  • Page 155 2. Put a current call on hold to answer an incoming call. 3. Separate the current three-way conference call into two individual calls (one is on-line, the other is on hold). Flash Create three-way conference connection. Flash *98# Transfer the call to another phone. FSG2200HNU User’s Guide...
  • Page 156 Intercom. After you hear the ring signal or the second party answers it, hang up the phone. European Three-Way Conference Use the following steps to make three-way conference calls. FSG2200HNU User’s Guide...
  • Page 157 Hang up the phone to drop the connection. If you want to separate the activated three-way conference into two individual connections (one is on-line, the other is on hold), press the flash key and press “2”. FSG2200HNU User’s Guide...
  • Page 158 Chapter 9 Voice FSG2200HNU User’s Guide...

  • Page 159: File Sharing

    (Section 10.2 on page 161) to enable file sharing server on the ZyXEL Device and configure the workgroup name. • Use the Account Management screen (Section 10.3 on page 166) to set up and configure a file sharing account. FSG2200HNU User’s Guide...

  • Page 160: What You Need To Know

    10.1.3 Before You Begin Make sure the ZyXEL Device is connected to your network and turned on. Connect the USB device to one of the ZyXEL Device’s USB ports. Make sure the ZyXEL Device is connected to your network. FSG2200HNU User’s Guide...

  • Page 161: The Share Configuration Screen

    Each field is described in the following table. Table 46 USB Services > File Sharing > Share Configuration LABEL DESCRIPTION Enable File Select this to enable file sharing through the ZyXEL Device. Sharing Services (SMB) Server Configuration FSG2200HNU User’s Guide...
  • Page 162 Click the Remove icon to delete this share in the list. You will be asked to confirm this action. Apply Click this to save your changes to the ZyXEL Device. Cancel Click this to set every field in this screen to its last-saved value. FSG2200HNU User’s Guide...

  • Page 163: Share Configuration Add Screen

    You can allow or disallow access simply by moving Available Users to the Allow Users box. Apply Click this button to save your settings. Cancel Click this button to return all fields in this screen to their previous values. FSG2200HNU User’s Guide...
  • Page 164 ‘.’ shows the current directory of the USB storage device. Date This shows the date when the folder was last available. Apply Click this button to save your settings. Cancel Click this button to return all fields in this screen to their previous values. FSG2200HNU User’s Guide...

  • Page 165: Share Configuration Edit Screen

    You can allow or disallow access simply by moving Available Users to the Allow Users box. Apply Click this button to save your settings. Cancel Click this button to return all fields in this screen to their previous values. FSG2200HNU User’s Guide...

  • Page 166: The Account Management Screen

    This field shows the list of user names already configured on the ZyXEL Device. Modify Click the Edit icon to change the settings of an existing user account. Click the Remove icon to delete this entry in the list. You will be asked to confirm this action. FSG2200HNU User’s Guide...

  • Page 167: Account Management Add Or Edit Screen

    Enter the password for this account. The password can be 5 to 15 Password alpha-numeric characters long. Retype New Retype the password. Password/ Retype Password Apply Click this to save your changes to the ZyXEL Device. Reset Click this to set the fields in this screen to their defaults. FSG2200HNU User’s Guide...
  • Page 168 Chapter 10 File Sharing FSG2200HNU User’s Guide...

  • Page 169: Mac Filter

    Every Ethernet device has a unique MAC (Media Access Control) address. The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters, for example, 00:A0:C5:00:00:02. You need to know the MAC address of the devices to configure this screen. FSG2200HNU User’s Guide...

  • Page 170: Mac Filter Screen

    ZyXEL Device in these address fields. Enter the MAC addresses in a valid MAC address format, that is, six hexadecimal character pairs, for example, 12:34:56:78:9a:bc. Apply Click this to save your changes back to the ZyXEL Device. Reset Click this to reload the previous configuration for this screen. FSG2200HNU User’s Guide...

  • Page 171: Firewall

    Use the Firewall screen (Section 12.2 on page 172) to enable enable LAN-to- WAN services blocking on the ZyXEL Device. 12.1.2 What You Need to Know About Firewall The following terms and concepts may help as you read this chapter. FSG2200HNU User’s Guide...

  • Page 172: The Firewall Screen

    12.2 The Firewall Screen Use this screen to enable service blocking and to maintain the list of services you want to block. To access this screen, click Security > Firewall > Services. FSG2200HNU User’s Guide...
  • Page 173 Select TCP, UDP or TCP and UDP, based on which one the custom port uses. Port Number Enter the range of port numbers that defines the service. For example, suppose you want to define the Gnutella service. Select TCP type and enter a port range of 6345-6349. FSG2200HNU User’s Guide...

  • Page 174: Firewall Technical Reference

    Consider these security ramifications before creating a rule: Does this rule stop LAN users from accessing critical resources on the Internet? For example, if IRC is blocked, are there users that require this service? FSG2200HNU User’s Guide...
  • Page 175 Chapter 12 Firewall Does this rule conflict with any existing rules? Once these questions have been answered, adding rules is simply a matter of entering the information into the correct fields in the web configurator screens. FSG2200HNU User’s Guide...
  • Page 176 Chapter 12 Firewall FSG2200HNU User’s Guide...

  • Page 177: Certificates

    Tim wants to send a private message to Jenny. Tim generates a public-private key pair. What is encrypted with one key can only be decrypted using the other. Tim keeps the private key and makes the public key openly available. FSG2200HNU User’s Guide...
  • Page 178 • Key distribution is simple and very secure since you can freely distribute public keys and you never need to transmit private keys. Certificate File Formats The certification authority certificate that you want to import has to be in one of these file formats: FSG2200HNU User’s Guide...

  • Page 179: Verifying A Certificate

    Browse to where you have the certificate saved on your computer. Make sure that the certificate has a “.cer” or “.crt” file name extension. Figure 71 Certificates on Your Computer FSG2200HNU User’s Guide...

  • Page 180: My Certificates

    Use this screen to view the ZyXEL Device’s summary list of certificates and certification requests. You can import the following certificates to your ZyXEL Device: • Web Server - This certificate secures HTTP connections. • SSH/SCP/SFTP - This certificate secures remote connections. FSG2200HNU User’s Guide...
  • Page 181 Click this button and then Save in the File Download screen. The Save As screen opens, browse to the location that you want to use and click Save. Key Type This field applies to the SSH/SCP/SFTP certificate. file format of the current certificate. This shows the FSG2200HNU User’s Guide...

  • Page 182: Trusted Cas

    Subject This field displays identifying information about the certificate’s owner, such as CN (Common Name), OU (Organizational Unit or department), O (Organization or company) and C (Country). It is recommended that each certificate have unique subject information. FSG2200HNU User’s Guide...

  • Page 183: Trusted Ca Import

    Click Security > Certificates > Trusted CAs to open the Trusted CAs screen and then click Import to open the Trusted CA Import screen. Follow the instructions in this screen to save a trusted certification authority’s certificate to the ZyXEL Device. FSG2200HNU User’s Guide...

  • Page 184: Trusted Ca Details

    Use this screen to view in-depth information about the certification authority’s certificate, change the certificate’s name and set whether or not you want the ZyXEL Device to check a certification authority’s list of revoked certificates before trusting a certificate issued by the certification authority. FSG2200HNU User’s Guide...
  • Page 185 ZyXEL Device to check the CRL that the certification authority issues before trusting a certificate issued by the certification authority. Cancel Click this to quit and return to the Trusted CAs screen. FSG2200HNU User’s Guide...
  • Page 186 Chapter 13 Certificates FSG2200HNU User’s Guide...

  • Page 187: Static Route

    LAN. Figure 77 Example of Static Routing Topology 14.1.1 What You Can Do in this Chapter Use the Static Route screens (Section 14.2 on page 188) to view and configure IP static routes on the ZyXEL Device. FSG2200HNU User’s Guide...

  • Page 188: Configuring Static Route

    Click the Edit icon to go to the screen where you can set up a static route on the ZyXEL Device. Click the Remove icon to remove a static route from the ZyXEL Device. A window displays asking you to confirm that you want to delete the route. FSG2200HNU User’s Guide...

  • Page 189: Static Route Add/Edit

    Back Click this to return to the previous screen without saving. Apply Click this to save your changes back to the ZyXEL Device. Reset Click this to begin configuring this screen afresh. FSG2200HNU User’s Guide...
  • Page 190 Chapter 14 Static Route FSG2200HNU User’s Guide...

  • Page 191: Policy Route

    • Load Sharing – Network administrators can use IPPR to distribute traffic among multiple paths. Routing Policy Individual routing policies are used as part of the overall IPPR process. A policy defines the matching criteria and the action to take when a packet meets the FSG2200HNU User’s Guide...

  • Page 192: The Rule Setup Screen

    For example, you can configure a classifier to select traffic from the same protocol port (such as Telnet) to form a flow. Click Advanced > Policy Route to open the following screen. Figure 80 Advanced > Policy Route FSG2200HNU User’s Guide...

  • Page 193: Rule Setup Add/Edit

    The action is taken only when all the criteria are met. Policy-based routing is applied to incoming packets for each interface before normal routing. The ZyXEL Device does not perform normal routing on packets that match any of the policy routes. FSG2200HNU User’s Guide...
  • Page 194 DSCP Mark If you select Mark, enter a DSCP value with which the ZyXEL Device replaces the DSCP field in the packets. If you select Unchange, the ZyXEL Device keep the DSCP field in the packets. FSG2200HNU User’s Guide...
  • Page 195 Others IP Protocol Select this option and choose either TCP or UDP protocol (service type). DSCP Select this option and specify a DSCP (DiffServ Code Point) number between 0 and 63 in the field provided. FSG2200HNU User’s Guide...
  • Page 196 Select this option to exclude the packets that match the specified criteria from this classifier. Back Click this to return to the previous screen without saving. Apply Click this to save your changes back to the ZyXEL Device. Cancel Click this to begin configuring this screen afresh. FSG2200HNU User’s Guide...

  • Page 197: Dynamic Dns Setup

    (Section 16.2 on page 197) to enable DDNS and configure the DDNS settings on the ZyXEL Device. 16.2 Configuring Dynamic DNS To change your ZyXEL Device’s DDNS, click Advanced > Dynamic DNS. The screen appears as shown. FSG2200HNU User’s Guide...
  • Page 198 You can specify up to two host names in the field separated by a comma (","). User Name Type your user name. Password Type the password assigned to you. Apply Click this to save your changes back to the ZyXEL Device. Reset Click this to begin configuring this screen afresh. FSG2200HNU User’s Guide...

  • Page 199: Service Control

    • Secure Copy (SC) is a secure way of transferring files between computers. It uses port 22. • SSH File Transfer Protocol or Secure File Transfer Protocol (SFTP) is an old way of transferring files between computers. It uses port 22. FSG2200HNU User’s Guide...

  • Page 200: The Service Control Screen

    This is the service you may use to access the ZyXEL Device. LAN/WLAN Select the Enable check box for the corresponding services that you want to allow access to the ZyXEL Device from the LAN and WLAN. FSG2200HNU User’s Guide...
  • Page 201 Click this link to open the Network > WAN > Internet Connection screen. Apply Click this button to save your changes back to the ZyXEL Device. FSG2200HNU User’s Guide...
  • Page 202 Chapter 17 Service Control FSG2200HNU User’s Guide...

  • Page 203: Chapter 18 Tr-069

    ACS address or domain name as well as the username and password. 18.1.1 What You Can Do in this Chapter Use the TR-069 screen (Section 18.2 on page 204) to set the ZyXEL Device’s auto configuration and dynamic service configuration options. FSG2200HNU User’s Guide...

  • Page 204: What You Need To Know

    The ZyXEL Device can be configured to periodically check for updates from the auto-configuration server so that the end user need not be worried about it. 18.2 The TR-069 Screen Use this screen to set the ZyXEL Device’s auto configuration and dynamic service configuration options. FSG2200HNU User’s Guide...
  • Page 205 Enter the time interval in seconds between the device’s attempt to Interval connect to the Auto Configuration Server (ACS) to send information and check for configuration updates. This works in tandem with the PeriodicInform Time and is not mutually exclusive of it. FSG2200HNU User’s Guide...
  • Page 206 If the inform time is set for some point in the future, then the ZyXEL Device interpolates backwards to the current time and actually begins at the appropriate time based on this interpolation. Apply Click this to save the changes. Cancel Click this to begin configuring this screen afresh. FSG2200HNU User’s Guide...

  • Page 207: System

    DHCP Server. Often your ISP or a router on your network performs this function. A LAN (local area network) is typically a network which covers a small area, made up of computers and other devices which share resources such as Internet access and printers. FSG2200HNU User’s Guide...

  • Page 208: The System General Screen

    "0" means a management session never times out, no matter how long it has been left idle (not recommended). Apply Click this to save your changes back to the ZyXEL Device. Reset Click this to begin configuring this screen afresh. FSG2200HNU User’s Guide...

  • Page 209: The Time Setting Screen

    Check with your ISP/network administrator if you are unsure of this information. Time Zone Setup Time Zone Choose the time zone of your location. This will set the time difference between your time zone and Greenwich Mean Time (GMT). FSG2200HNU User’s Guide...
  • Page 210 Germany for instance, you would type 2 because Germany's time zone is one hour ahead of GMT or UTC (GMT+1). Apply Click this to save your changes back to the ZyXEL Device. Reset Click this to begin configuring this screen afresh. FSG2200HNU User’s Guide...

  • Page 211: Logs

    Syslog is defined in RFC 3164. The RFC defines the packet format, content and system log related information of syslog messages. Each syslog message has a FSG2200HNU User’s Guide...

  • Page 212: The View Log Screen

    Log entries in red indicate alerts. The log wraps around and deletes the old entries after it fills. Click a column heading to sort the entries. A triangle indicates ascending or descending sort order. Figure 88 Maintenance > Logs > View Log FSG2200HNU User’s Guide...

  • Page 213: The Log Settings Screen

    Use the Log Settings screen to configure where the ZyXEL Device sends logs and which logs and/or immediate alerts the ZyXEL Device records. To change your ZyXEL Device’s log settings, click Maintenance > Logs > Log Settings. The screen appears as shown. Figure 89 Maintenance > Logs > Log Settings FSG2200HNU User’s Guide...

  • Page 214: Log Descriptions

    Outgoing call from SIP number has terminated. Show Out Call End [SIP the call duration. Number],Duration: Seconds Incoming call from SIP number has been established. Incoming Call Established [SIP Number] Outgoing call to SIP number has been established. Outgoing Call Established [SIP Number] FSG2200HNU User’s Guide...
  • Page 215 Activate call forwarding on No Reply to the registered Enable CFNR destination. DeActivate call forwarding on No Reply to the registered Disable CFNR destination. Activate call forwarding on No Busy to the registered Enable CFB destination. FSG2200HNU User’s Guide...
  • Page 216 Table 73 VoIP Miscellaneous LOG MESSAGE DESCRIPTION DeActivate call forwarding on No Busy to the registered Disable CFB destination. One-shot enable call waiting. temp. enable CallWaiting temp. disable CallWaiting One-shot disable call waiting. CallWaiting Interrogation Interrogation the call waiting status. FSG2200HNU User’s Guide...

  • Page 217: Tools

    The configuration file (often called the romfile or rom-0) contains the factory default settings in the menus such as password, DHCP Setup, and TCP/IP Setup. It arrives from ZyXEL with a “rom” filename extension. Once you have customized FSG2200HNU User’s Guide...
  • Page 218 This is the generic name for the firmware *.bin on the ZyXEL Device. FTP Restrictions FTP will not work when: The firewall is active (turn the firewall off or create a firewall rule to allow access from the WAN). FSG2200HNU User’s Guide...

  • Page 219: Before You Begin

    Table 75 Maintenance > Tools > Firmware Upgrade LABEL DESCRIPTION Current This is the present Firmware version. Firmware Version File Path Type in the location of the file you want to upload in this field or click Browse ... to find it. FSG2200HNU User’s Guide...
  • Page 220 After two minutes, log in again and check your new firmware version in the Status screen. If the upload was not successful, the following screen will appear. Click Return to go back to the Firmware screen. Figure 93 Error Message FSG2200HNU User’s Guide...

  • Page 221: The Configuration Screen

    The backup configuration file will be useful in case you need to return to your previous settings. Click Backup to save the ZyXEL Device’s current configuration to your computer. FSG2200HNU User’s Guide...
  • Page 222 If you uploaded the default configuration file you may need to change the IP address of your computer to be in the same subnet as that of the default device IP address (192.168.1.1). See Appendix B on page 267 for details on how to set up your computer’s IP address. FSG2200HNU User’s Guide...

  • Page 223: Reset To Factory Defaults

    System restart allows you to reboot the ZyXEL Device without turning the power off. Click Maintenance > Tools > Restart. Click Restart to have the ZyXEL Device reboot. This does not affect the ZyXEL Device's configuration. Figure 99 Maintenance > Tools > Restart Screen FSG2200HNU User’s Guide...

  • Page 224: Technical Reference

    TFTP and FTP over WAN. FTP and TFTP Firmware and Configuration File Uploads These examples show you how to upload firmware and configuration files. Do not interrupt the file transfer process as this may PERMANENTLY DAMAGE your device. FSG2200HNU User’s Guide...
  • Page 225 1103936 bytes sent in 1.10Seconds 297.89Kbytes/sec. ftp> quit More commands (found in GUI-based FTP clients) are listed in this chapter. Refer to Section 21.1.2 on page 217 to read about configurations that disallow TFTP and FTP over WAN. FSG2200HNU User’s Guide...
  • Page 226 (ras - name of the firmware on the device). Commands that you may see in GUI-based TFTP clients are listed earlier in this chapter. Using the FTP Commands to Back Up Configuration Launch the FTP client on your computer. FSG2200HNU User’s Guide...
  • Page 227 This is when a user I.D. and password is automatically supplied to the server for anonymous access. Anonymous logins will work only if your ISP or service administrator has enabled this option. Normal. The server requires a unique User ID and Password to login. FSG2200HNU User’s Guide...
  • Page 228 The following is an example TFTP command: tftp [-i] host get rom-0 config.rom where “i” specifies binary image transfer mode (use this mode when transferring binary files), “host” is the ZyXEL Device IP address, “get” transfers the file source FSG2200HNU User’s Guide...
  • Page 229 “ras” and for the configuration file, is “rom-0”. Binary Transfer the file in binary mode. Abort Stop transfer of the file. Refer to Section 21.1.2 on page 217 to read about configurations that disallow TFTP and FTP over WAN. FSG2200HNU User’s Guide...
  • Page 230 Chapter 21 Tools FSG2200HNU User’s Guide...

  • Page 231: Diagnostic

    Use the General Diagnostic screen (Section 22.2 on page 231) to ping an IP address. 22.2 The General Diagnostic Screen Click Maintenance > Diagnostic to open the screen shown next. Figure 103 Maintenance > Diagnostic > General FSG2200HNU User’s Guide...
  • Page 232 Table 79 Maintenance > Diagnostic > General ITEM DESCRIPTION TCP/IP Type the IP address of a computer that you want to ping in order to test a Address connection. Ping Click this button to ping the IP address that you entered. FSG2200HNU User’s Guide...

  • Page 233: Account

    Use this screen to change the password for the Administrator and User accounts for your ZyXEL Device. Click Maintenance > Account to open the screen shown next. Figure 104 Maintenance > Account > Admin Figure 105 Maintenance > Account > User FSG2200HNU User’s Guide...
  • Page 234 ZyXEL Device. Retype to Type the new password again for confirmation. Confirm Apply Click this to save your changes back to the ZyXEL Device. Cancel Click this to begin configuring this screen afresh. FSG2200HNU User’s Guide...

  • Page 235: Troubleshooting

    Make sure the power adaptor or cord is connected to the ZyXEL Device and plugged in to an appropriate power source. Make sure the power source is turned Turn the ZyXEL Device off and on. If the problem continues, contact the vendor. FSG2200HNU User’s Guide...

  • Page 236: Zyxel Device Access And Login

    I cannot see or access the Login screen in the web configurator. Make sure you are using the correct IP address. • The default IP address is 192.168.1.1. • If you changed the IP address (Section on page 99), use the new IP address. FSG2200HNU User’s Guide...
  • Page 237 If this does not work, you have to reset the device to its factory defaults. See Section 24.2 on page 235. I cannot Telnet to the ZyXEL Device. See the troubleshooting suggestions for I cannot see or access the Login screen in the web configurator. Ignore the suggestions about your browser. FSG2200HNU User’s Guide...

  • Page 238: Internet Access

    Check the hardware connections, and make sure the LEDs are behaving as expected. See the Quick Start Guide and Section 1.5 on page Turn the ZyXEL Device off and on. If the problem continues, contact your ISP. FSG2200HNU User’s Guide...

  • Page 239: Phone Calls And Voip

    The telephone port won’t work or the telephone lacks a dial tone. Check the telephone connections and telephone wire. I can access the Internet, but cannot make VoIP calls. The PHONE light should come on. Make sure that your telephone is connected to the PHONE port. FSG2200HNU User’s Guide...

  • Page 240: Multiple Sip Accounts

    2 is configured to use SIP account 2. In this case, every time you place a call through phone port 1, you are using your SIP account 1. Similarly, every time you place a call through phone port 2, you are using your SIP account 2. To apply FSG2200HNU User’s Guide...

  • Page 241: Incoming Calls

    SIP account 2, the phones connected to both phone port 1 and phone port 2 ring. In either case you are not sure which SIP account the call is coming from. Figure 108 Incoming Calls: Default PHONE 1 SIP 1 PHONE 2 SIP 2 FSG2200HNU User’s Guide...

  • Page 242: Usb Device Connection

    Reboot the ZyXEL Device. If you are connecting a USB hard drive that comes with an external power supply, make sure it is connected to an appropriate power source that is on. Re-connect your USB device to the ZyXEL Device. FSG2200HNU User’s Guide...

  • Page 243: Product Specifications

    Two USB v2.0 ports for file sharing Antenna Two 2 dBi external detachable antenna Operation 0º C ~ 40º C Temperature Storage Temperature -25º ~ 65º C Operation Humidity 20% ~ 85% RH Storage Humidity 20% ~ 90% RH FSG2200HNU User’s Guide...
  • Page 244 If you have a server (mail or web server for example) on your network, you can use this feature to let people access it from the Internet. IEEE 802.1Q and IEEE 802.1Q VLAN and IEEE 802.1P priority tags in implementing IEEE 802.1P QoS. FSG2200HNU User’s Guide...
  • Page 245 IP alias allows you to partition a physical network into logical networks over the same Ethernet interface. Your device supports three logical LAN interfaces via its single physical Ethernet interface with the your device itself as the gateway for each LAN network. FSG2200HNU User’s Guide...
  • Page 246 With this feature, you can set the ZyXEL Device to forward calls to a specified number, either unconditionally (always), when your number is busy, or when you do not answer. You can also forward incoming calls from one specified number to another. FSG2200HNU User’s Guide...
  • Page 247 (as total silence could easily be mistaken for a lost connection). Echo Cancellation You device supports G.168, an ITU-T standard for eliminating the echo caused by the sound of your voice reverberating in the telephone receiver while you talk. FSG2200HNU User’s Guide...
  • Page 248 Wireless LAN MAC Address Your device can check the MAC addresses of wireless stations Filtering (Security > Mac against a list of allowed or denied MAC addresses. Filter screen) FSG2200HNU User’s Guide...
  • Page 249 The following list, which is not exhaustive, illustrates the standards supported in the ZyXEL Device. Table 85 Standards Supported STANDARD DESCRIPTION RFC 867 Daytime Protocol RFC 868 Time Protocol. RFC 1058 RIP-1 (Routing Information Protocol) RFC 1112 IGMP v1 FSG2200HNU User’s Guide...
  • Page 250 TR-069 DSL Forum Standard for CPE Wan Management. FUNCTION REGION AND CERTIFICATION Safety EN60950-1 North America European Union (CE mark) EN55022 Class B EN61000-3-2 EN61000-3-3 European Union (CE mark) EN55024 Overvoltage ITU-T K.21 1.5KV for FXS 4KV for FXO FSG2200HNU User’s Guide...
  • Page 251 Drill two holes for the screws. Make sure the distance between the centers of the holes matches what is listed in the product specifications appendix. Be careful to avoid damaging pipes or cables located inside the wall when drilling holes for the screws. FSG2200HNU User’s Guide...
  • Page 252 ZyXEL Device with the connection cables. Align the holes on the back of the ZyXEL Device with the screws on the wall. Hang the ZyXEL Device on the screws. Figure 110 Wall-mounting Example: Horizontal Figure 111 Wall-mounting Example: Vertical FSG2200HNU User’s Guide...
  • Page 253 Chapter 25 Product Specifications The following are dimensions of an M4 tap screw and masonry plug used for wall mounting. All measurements are in millimeters (mm). Figure 112 Masonry Plug and M4 Tap Screw FSG2200HNU User’s Guide...
  • Page 254 Chapter 25 Product Specifications FSG2200HNU User’s Guide...

  • Page 255: Appendix A Ip Addresses And Subnetting

    192.168.1.1). Each of these four parts is known as an octet. An octet is an eight-digit binary number (for example 11000000, which is 192 in decimal notation). Therefore, each octet has a possible range of 00000000 to 11111111 in binary, or 0 to 255 in decimal. FSG2200HNU User’s Guide...
  • Page 256 Table 86 IP Address Network Number and Host ID Example OCTET: OCTET: OCTET: OCTET (192) (168) IP Address (Binary) 11000000 10101000 00000001 00000010 Subnet Mask (Binary) 11111111 11111111 11111111 00000000 Network Number 11000000 10101000 00000001 Host ID 00000010 FSG2200HNU User’s Guide...
  • Page 257 MAXIMUM NUMBER OF SUBNET MASK HOST ID SIZE HOSTS 8 bits 255.0.0.0 24 bits – 2 16777214 16 bits 255.255.0.0 16 bits – 2 65534 24 bits 255.255.255.0 8 bits – 2 29 bits 255.255.255.248 3 bits – 2 FSG2200HNU User’s Guide...
  • Page 258 In this example, the company network address is 192.168.1.0. The first three octets of the address (192.168.1) are the network number, and the remaining octet is the host ID, allowing a maximum of 2 – 2 or 254 possible hosts. FSG2200HNU User’s Guide...
  • Page 259 You can “borrow” one of the host ID bits to divide the network 192.168.1.0 into two separate sub-networks. The subnet mask is now 25 bits (255.255.255.128 or /25). The “borrowed” host ID bit can have a value of either 0 or 1, allowing two subnets; 192.168.1.0 /25 and 192.168.1.128 /25. FSG2200HNU User’s Guide...
  • Page 260 Similarly, to divide a 24-bit address into four subnets, you need to “borrow” two host ID bits to give four possible combinations (00, 01, 10 and 11). The subnet mask is 26 bits (11111111.11111111.11111111.11000000) or 255.255.255.192. FSG2200HNU User’s Guide...
  • Page 261 Table 93 Subnet 4 LAST OCTET BIT IP/SUBNET MASK NETWORK NUMBER VALUE IP Address 192.168.1. IP Address (Binary) 11000000.10101000.00000001. 11000000 Subnet Mask (Binary) 11111111.11111111.11111111. 11000000 Subnet Address: Lowest Host ID: 192.168.1.193 192.168.1.192 Broadcast Address: Highest Host ID: 192.168.1.254 192.168.1.255 FSG2200HNU User’s Guide...
  • Page 262 The following table is a summary for subnet planning on a network with a 16-bit network number. Table 96 16-bit Network Number Subnet Planning NO. “BORROWED” NO. HOSTS PER SUBNET MASK NO. SUBNETS HOST BITS SUBNET 255.255.128.0 (/17) 32766 255.255.192.0 (/18) 16382 FSG2200HNU User’s Guide...
  • Page 263 The subnet mask specifies the network number portion of an IP address. Your ZyXEL Device will compute the subnet mask automatically based on the IP address that you entered. You don't need to change the subnet mask computed by the ZyXEL Device unless you are instructed to do otherwise. FSG2200HNU User’s Guide...
  • Page 264 A has a static (or fixed) IP address that is the same as the IP address that a DHCP server assigns to computer B which is a DHCP client. Neither can access the Internet. This problem can be solved by assigning a different static IP FSG2200HNU User’s Guide...
  • Page 265 Figure 117 Conflicting Computer IP Addresses Example Conflicting Computer and Router IP Addresses Example More than one device can not use the same IP address. In the following example, the computer and the router’s LAN port both use 192.168.1.1 as the IP address. FSG2200HNU User’s Guide...
  • Page 266 Appendix A IP Addresses and Subnetting The computer cannot access the Internet. This problem can be solved by assigning a different IP address to the computer or the router’s LAN port. Figure 118 Conflicting Computer and Router IP Addresses Example FSG2200HNU User’s Guide...

  • Page 267: Appendix B Setting Up Your Computer's Ip Address

    283 • Linux: Ubuntu 8 (GNOME) page 286 • Linux: openSUSE 10.3 (KDE) page 291 Windows XP/NT/2000 The following example uses the default Windows XP display theme but can also apply to Windows 2000 and Windows NT. FSG2200HNU User’s Guide...
  • Page 268 Appendix B Setting Up Your Computer’s IP Address Click Start > Control Panel. Figure 119 Windows XP: Start Menu In the Control Panel, click the Network Connections icon. Figure 120 Windows XP: Control Panel FSG2200HNU User’s Guide...
  • Page 269 Right-click Local Area Connection and then select Properties. Figure 121 Windows XP: Control Panel > Network Connections > Properties On the General tab, select Internet Protocol (TCP/IP) and then click Properties. Figure 122 Windows XP: Local Area Connection Properties FSG2200HNU User’s Guide...
  • Page 270 DNS server and an Alternate DNS server, if that information was provided. Click OK to close the Internet Protocol (TCP/IP) Properties window. Click OK to close the Local Area Connection Properties window. Verifying Settings Click Start > All Programs > Accessories > Command Prompt. FSG2200HNU User’s Guide...
  • Page 271 Windows Vista This section shows screens from Windows Vista Professional. Click Start > Control Panel. Figure 124 Windows Vista: Start Menu In the Control Panel, click the Network and Internet icon. Figure 125 Windows Vista: Control Panel FSG2200HNU User’s Guide...
  • Page 272 Figure 127 Windows Vista: Network and Sharing Center Right-click Local Area Connection and then select Properties. Figure 128 Windows Vista: Network and Sharing Center Note: During this procedure, click Continue whenever Windows displays a screen saying that it needs your permission to continue. FSG2200HNU User’s Guide...
  • Page 273 Appendix B Setting Up Your Computer’s IP Address Select Internet Protocol Version 4 (TCP/IPv4) and then select Properties. Figure 129 Windows Vista: Local Area Connection Properties FSG2200HNU User’s Guide...
  • Page 274 DNS server and an Alternate DNS server, if that information was provided.Click Advanced. Click OK to close the Internet Protocol (TCP/IP) Properties window. 10 Click OK to close the Local Area Connection Properties window. Verifying Settings Click Start > All Programs > Accessories > Command Prompt. FSG2200HNU User’s Guide...
  • Page 275 This section shows screens from Windows 7 Enterprise. Click Start > Control Panel. Figure 131 Windows 7: Start Menu In the Control Panel, click View network status and tasks under the Network and Internet category. Figure 132 Windows 7: Control Panel FSG2200HNU User’s Guide...
  • Page 276 Figure 133 Windows 7: Network And Sharing Center Double click Local Area Connection and then select Properties. Figure 134 Windows 7: Local Area Connection Status Note: During this procedure, click Continue whenever Windows displays a screen saying that it needs your permission to continue. FSG2200HNU User’s Guide...
  • Page 277 Appendix B Setting Up Your Computer’s IP Address Select Internet Protocol Version 4 (TCP/IPv4) and then select Properties. Figure 135 Windows 7: Local Area Connection Properties FSG2200HNU User’s Guide...
  • Page 278 Click OK to close the Internet Protocol (TCP/IP) Properties window. Click OK to close the Local Area Connection Properties window. Verifying Settings Click Start > All Programs > Accessories > Command Prompt. In the Command Prompt window, type "ipconfig" and then press [ENTER]. FSG2200HNU User’s Guide...
  • Page 279 Figure 137 Windows 7: Internet Protocol Version 4 (TCP/IPv4) Properties Mac OS X: 10.3 and 10.4 The screens in this section are from Mac OS X 10.4 but can also apply to 10.3. Click Apple > System Preferences. Figure 138 Mac OS X 10.4: Apple Menu FSG2200HNU User’s Guide...
  • Page 280 In the System Preferences window, click the Network icon. Figure 139 Mac OS X 10.4: System Preferences When the Network preferences pane opens, select Built-in Ethernet from the network connection type list, and then click Configure. Figure 140 Mac OS X 10.4: Network Preferences FSG2200HNU User’s Guide...
  • Page 281 Figure 141 Mac OS X 10.4: Network Preferences > TCP/IP Tab. For statically assigned settings, do the following: • From the Configure IPv4 list, select Manually. • In the IP Address field, type your IP address. • In the Subnet Mask field, type your subnet mask. FSG2200HNU User’s Guide...
  • Page 282 Click Apply Now and close the window. Verifying Settings Check your TCP/IP properties by clicking Applications > Utilities > Network Utilities, and then selecting the appropriate Network Interface from the Info tab. Figure 143 Mac OS X 10.4: Network Utility FSG2200HNU User’s Guide...
  • Page 283 The screens in this section are from Mac OS X 10.5. Click Apple > System Preferences. Figure 144 Mac OS X 10.5: Apple Menu In System Preferences, click the Network icon. Figure 145 Mac OS X 10.5: Systems Preferences FSG2200HNU User’s Guide...
  • Page 284 From the Configure list, select Using DHCP for dynamically assigned settings. For statically assigned settings, do the following: • From the Configure list, select Manually. • In the IP Address field, enter your IP address. • In the Subnet Mask field, enter your subnet mask. FSG2200HNU User’s Guide...
  • Page 285 Appendix B Setting Up Your Computer’s IP Address • In the Router field, enter the IP address of your ZyXEL Device. Figure 147 Mac OS X 10.5: Network Preferences > Ethernet Click Apply and close the window. FSG2200HNU User’s Guide...
  • Page 286 The following screens use the default Ubuntu 8 installation. Note: Make sure you are logged in as the root administrator. Follow the steps below to configure your computer IP address in GNOME: FSG2200HNU User’s Guide...
  • Page 287 When the Network Settings window opens, click Unlock to open the Authenticate window. (By default, the Unlock button is greyed out until clicked.) You cannot make changes to your configuration unless you first enter your admin password. Figure 150 Ubuntu 8: Network Settings > Connections FSG2200HNU User’s Guide...
  • Page 288 In the Authenticate window, enter your admin account name and password then click the Authenticate button. Figure 151 Ubuntu 8: Administrator Account Authentication In the Network Settings window, select the connection that you want to configure, then click Properties. Figure 152 Ubuntu 8: Network Settings > Connections FSG2200HNU User’s Guide...
  • Page 289 • In the Configuration list, select Static IP address if you have a static IP address. Fill in the IP address, Subnet mask, and Gateway address fields. Click OK to save the changes and close the Properties dialog box and return to the Network Settings screen. FSG2200HNU User’s Guide...
  • Page 290 Figure 154 Ubuntu 8: Network Settings > DNS Click the Close button to apply the changes. Verifying Settings Check your TCP/IP properties by clicking System > Administration > Network Tools, and then selecting the appropriate Network device from the Devices FSG2200HNU User’s Guide...
  • Page 291 The following screens use the default openSUSE 10.3 installation. Note: Make sure you are logged in as the root administrator. Follow the steps below to configure your computer IP address in the KDE: FSG2200HNU User’s Guide...
  • Page 292 Click K Menu > Computer > Administrator Settings (YaST). Figure 156 openSUSE 10.3: K Menu > Computer Menu When the Run as Root - KDE su dialog opens, enter the admin password and click OK. Figure 157 openSUSE 10.3: K Menu > Computer Menu FSG2200HNU User’s Guide...
  • Page 293 Figure 158 openSUSE 10.3: YaST Control Center When the Network Settings window opens, click the Overview tab, select the appropriate connection Name from the list, and then click the Configure button. Figure 159 openSUSE 10.3: Network Settings FSG2200HNU User’s Guide...
  • Page 294 Select Dynamic Address (DHCP) if you have a dynamic IP address. Select Statically assigned IP Address if you have a static IP address. Fill in the IP address, Subnet mask, and Hostname fields. Click Next to save the changes and close the Network Card Setup window. FSG2200HNU User’s Guide...
  • Page 295 If you know your DNS server IP address(es), click the Hostname/DNS tab in Network Settings and then enter the DNS server information in the fields provided. Figure 161 openSUSE 10.3: Network Settings Click Finish to save your settings and close the window. FSG2200HNU User’s Guide...
  • Page 296 From the Options sub-menu, select Show Connection Information. Figure 162 openSUSE 10.3: KNetwork Manager When the Connection Status - KNetwork Manager window opens, click the Statistics tab to see if your connection is working properly. Figure 163 openSUSE: Connection Status - KNetwork Manager FSG2200HNU User’s Guide...

  • Page 297: Appendix C Pop-Up Windows, Javascripts And Java Permissions

    Disable Pop-up Blockers In Internet Explorer, select Tools, Pop-up Blocker and then select Turn Off Pop-up Blocker. Figure 164 Pop-up Blocker You can also check if pop-up blocking is disabled in the Pop-up Blocker section in the Privacy tab. FSG2200HNU User’s Guide...
  • Page 298 Click Apply to save this setting. Enable Pop-up Blockers with Exceptions Alternatively, if you only want to allow pop-up windows from your device, see the following steps. In Internet Explorer, select Tools, Internet Options and then the Privacy tab. FSG2200HNU User’s Guide...
  • Page 299 Select Settings…to open the Pop-up Blocker Settings screen. Figure 166 Internet Options: Privacy Type the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”. For example, http://192.168.167.1. FSG2200HNU User’s Guide...
  • Page 300 Figure 167 Pop-up Blocker Settings Click Close to return to the Privacy screen. Click Apply to save this setting. JavaScripts If pages of the web configurator do not display properly in Internet Explorer, check that JavaScripts are allowed. FSG2200HNU User’s Guide...
  • Page 301 Figure 168 Internet Options: Security Click the Custom Level... button. Scroll down to Scripting. Under Active scripting make sure that Enable is selected (the default). Under Scripting of Java applets make sure that Enable is selected (the default). FSG2200HNU User’s Guide...
  • Page 302 Figure 169 Security Settings - Java Scripting Java Permissions From Internet Explorer, click Tools, Internet Options and then the Security tab. Click the Custom Level... button. Scroll down to Microsoft VM. Under Java permissions make sure that a safety level is selected. FSG2200HNU User’s Guide...
  • Page 303 Click OK to close the window. Figure 170 Security Settings - Java JAVA (Sun) From Internet Explorer, click Tools, Internet Options and then the Advanced tab. Make sure that Use Java 2 for <applet> under Java (Sun) is selected. FSG2200HNU User’s Guide...
  • Page 304 Mozilla Firefox 2.0 screens are used here. Screens for other versions may vary. You can enable Java, Javascripts and pop-ups in one screen. Click Tools, then click Options in the screen that appears. Figure 172 Mozilla Firefox: Tools > Options FSG2200HNU User’s Guide...
  • Page 305 Appendix C Pop-up Windows, JavaScripts and Java Permissions Click Content.to show the screen below. Select the check boxes as shown in the following screen. Figure 173 Mozilla Firefox Content Security FSG2200HNU User’s Guide...
  • Page 306 Appendix C Pop-up Windows, JavaScripts and Java Permissions FSG2200HNU User’s Guide...

  • Page 307: Appendix D Wireless Lans

    (AP). Intra-BSS traffic is traffic between wireless clients in the BSS. When Intra-BSS is enabled, wireless client A and B can access the wired network and communicate FSG2200HNU User’s Guide...
  • Page 308 This wired connection between APs is called a Distribution System (DS). This type of wireless LAN topology is called an Infrastructure WLAN. The Access Points not only provide communication with the wired network but also mediate wireless network traffic in the immediate neighborhood. FSG2200HNU User’s Guide...
  • Page 309 A hidden node occurs when two stations are within range of the same access point, but are not within range of each other. The following figure illustrates a hidden node. Both stations (STA) are within range of the access point (AP) or FSG2200HNU User’s Guide...
  • Page 310 RTS (Request To Send)/CTS (Clear to Send) handshake will never occur as data frames will be fragmented before they reach RTS/CTS size. Note: Enabling the RTS Threshold causes redundant network overhead that could negatively affect the throughput performance instead of providing a remedy. FSG2200HNU User’s Guide...
  • Page 311 IEEE 802.11g is fully compatible with the IEEE 802.11b standard. This means an IEEE 802.11b adapter can interface directly with an IEEE 802.11g access point (and vice versa) at 11 Mbps or lower depending on range. IEEE 802.11g has FSG2200HNU User’s Guide...
  • Page 312 IEEE802.1x EAP with RADIUS Server Authentication Wi-Fi Protected Access (WPA) WPA2 Most Secure Note: You must enable the same wireless security settings on the ZyXEL Device and on all wireless clients that you want to associate with it. FSG2200HNU User’s Guide...
  • Page 313 The following types of RADIUS messages are exchanged between the access point and the RADIUS server for user authentication: • Access-Request Sent by an access point requesting authentication. • Access-Reject Sent by a RADIUS server rejecting access. • Access-Accept Sent by a RADIUS server allowing access. FSG2200HNU User’s Guide...
  • Page 314 The wireless client ‘proves’ that it knows the password by encrypting the password with the challenge and sends back the information. Password is not sent in plain text. FSG2200HNU User’s Guide...
  • Page 315 However, PEAP only supports EAP methods, such as EAP-MD5, EAP-MSCHAPv2 and EAP-GTC (EAP-Generic Token Card), for client authentication. EAP-GTC is implemented only by Cisco. LEAP LEAP (Lightweight Extensible Authentication Protocol) is a Cisco implementation of IEEE 802.1x. FSG2200HNU User’s Guide...
  • Page 316 RADIUS server, you should use WPA2-PSK (WPA2-Pre-Shared Key) that only requires a single (identical) password entered into each access point, wireless gateway and wireless client. As long as the passwords match, a wireless client will be granted access to a WLAN. FSG2200HNU User’s Guide...
  • Page 317 The common-password approach makes WPA(2)-PSK susceptible to brute-force password-guessing attacks but it’s still an improvement over WEP as it employs a consistent, single, alphanumeric password to derive a PMK which is used to generate unique temporal encryption FSG2200HNU User’s Guide...
  • Page 318 The RADIUS server then checks the user's identification against its database and grants or denies network access accordingly. A 256-bit Pairwise Master Key (PMK) is derived from the authentication process by the RADIUS server and the client. FSG2200HNU User’s Guide...
  • Page 319 The AP checks each wireless client's password and allows it to join the network only if the password matches. The AP and wireless clients generate a common PMK (Pairwise Master Key). The key itself is not sent over the network, but is derived from the PSK and the SSID. FSG2200HNU User’s Guide...
  • Page 320 Enable without Dynamic WEP Open Enable with Dynamic WEP Key Enable without Dynamic WEP Disable Shared Enable with Dynamic WEP Key Enable without Dynamic WEP Disable TKIP/AES Enable WPA-PSK TKIP/AES Disable WPA2 TKIP/AES Enable WPA2-PSK TKIP/AES Disable FSG2200HNU User’s Guide...
  • Page 321 Types of Antennas for WLAN There are two types of antennas used for wireless LAN applications. FSG2200HNU User’s Guide...
  • Page 322 Number that allows one device to authenticate the other) in each of the two devices. When WPS is activated on a device, it has two minutes to find another device that also has WPS activated. Then, the two devices connect and set up a secure network by themselves. FSG2200HNU User’s Guide...
  • Page 323 WPS in the area. However, you need to log into the configuration interfaces of both devices. Take the following steps to set up WPS using the PIN method. FSG2200HNU User’s Guide...
  • Page 324 On a computer connected to the wireless client, try to connect to the Internet. If you can connect, WPS was successful. If you cannot connect, check the list of associated wireless clients in the AP’s configuration utility. If you see the wireless client in the list, WPS was successful. FSG2200HNU User’s Guide...
  • Page 325 Authentication Protocol) tunnel and sends the network name (SSID) and the WPA- PSK or WPA2-PSK pre-shared key to the enrollee. Whether WPA-PSK or WPA2-PSK is used depends on the standards supported by the devices. If the registrar is FSG2200HNU User’s Guide...
  • Page 326 WPS, it becomes “configured”. A configured wireless client can still act as enrollee or registrar in subsequent WPS connections, but a configured access point can no longer act as enrollee. It will be the registrar in all FSG2200HNU User’s Guide...
  • Page 327 In this case, AP1 must be the registrar, since it is configured (it already has security information for the network). AP1 supplies the existing security information to Client 2. Figure 183 WPS: Example Network Step 2 REGISTRAR EXISTING CONNECTION CLIENT 1 ENROLLEE CLIENT 2 FSG2200HNU User’s Guide...
  • Page 328 (if the device supports this feature). Then, you can enter the key into the non-WPS device and join the network as normal (the non-WPS device must also support WPA-PSK or WPA2-PSK). FSG2200HNU User’s Guide...
  • Page 329 Check the MAC addresses of your wireless clients (usually printed on a label on the bottom of the device). If there is an unknown MAC address you can remove it or reset the AP. FSG2200HNU User’s Guide...
  • Page 330 Appendix D Wireless LANs FSG2200HNU User’s Guide...

  • Page 331: Appendix E Common Services

    Border Gateway Protocol. BOOTP_CLIENT DHCP Client. BOOTP_SERVER DHCP Server. CU-SEEME 7648 A popular videoconferencing solution from White Pines Software. 24032 TCP/UDP Domain Name Server, a service that matches web names (for example www.zyxel.com) to IP numbers. FSG2200HNU User’s Guide...
  • Page 332 ICMP echo requests to test whether or not a remote host is reachable. POP3 Post Office Protocol version 3 lets a client computer get e-mail from a POP3 server through a temporary connection (TCP/IP or other). FSG2200HNU User’s Guide...
  • Page 333 Access Controller Access Control System). TELNET Telnet is the login and terminal emulation protocol common on the Internet and in UNIX environments. It operates over TCP/IP networks. Its primary function is to allow users to log into remote host systems. FSG2200HNU User’s Guide...
  • Page 334 Table 101 Commonly Used Services (continued) NAME PROTOCOL PORT(S) DESCRIPTION TFTP Trivial File Transfer Protocol is an Internet file transfer protocol similar to FTP, but uses the UDP (User Datagram Protocol) rather than TCP (Transmission Control Protocol). VDOLIVE 7000 Another videoconferencing solution. FSG2200HNU User’s Guide...

  • Page 335: Appendix F Open Software Announcements

    P P E N D I X Open Software Announcements End-User License Agreement for “FSG2200HNU” Note: WARNING: ZyXEL Communications Corp. IS WILLING TO LICENSE THE SOFTWARE TO YOU ONLY UPON THE CONDITION THAT YOU ACCEPT ALL OF THE TERMS CONTAINED IN THIS LICENSE AGREEMENT. PLEASE...
  • Page 336 License Agreement to those persons employed by you who come into contact with the Software, and to use reasonable best efforts to ensure their compliance with such terms and conditions, including, without limitation, not FSG2200HNU User’s Guide...
  • Page 337 IMPOSED FROM TIME TO TIME. YOU SHALL NOT EXPORT THE SOFTWARE, DOCUMENTATION OR INFORMATION ABOUT THE SOFTWARE AND DOCUMENTATION WITHOUT COMPLYING WITH SUCH LAWS, REGULATIONS, ORDERS, OR OTHER RESTRICTIONS. YOU AGREE TO INDEMNIFY ZyXEL AGAINST ALL CLAIMS, LOSSES, DAMAGES, LIABILITIES, COSTS AND EXPENSES, FSG2200HNU User’s Guide...
  • Page 338 Agreement shall be interpreted so as to reasonably effect the intention of the parties. Note: Some components of this product incorporate source code covered under the open source code licenses. To obtain the source code covered under those Licenses, please check ZyXEL Technical Support (support@zyxel.com.tw) to get it. FSG2200HNU User’s Guide...
  • Page 339 1.0.0 http://www.linux-mtd.infradead.org/ ncurses http://www.gnu.org/software/ ncurses/ netatalk 2.0.3 http://liferea.sourceforge.net/ openssh 5.2p1 http://www.openssh.com p910nd 0.93 http://p910nd.sourceforge.net/ 2.4.4 http://www.roaringpenguin.com/ pppoe pure-ftpd 1.0.23 http://pureftpd.org samba 3.0.36 http://www.samba.org sntp http://www.broadcom.com syslog-ng 2.0.6 http://www.balabit.com/network- security/syslog-ng/ sysstat 8.1.8 http://pagesperso-orange.fr/ sebastien.godard/ FSG2200HNU User’s Guide...
  • Page 340 Appendix F Open Software Announcements WEB ADDRESS OF THE SOFTWARE 3RD PARTY SOFTWARE VERSION LICENSE TERM updatedd http://www.philipp-benner.de/ updatedd/ usbautomount 0.0.1 http://usbmount.alioth.debian.org/ wireless_tools 0.29 http://www.hpl.hp.com/ FSG2200HNU User’s Guide...

  • Page 341: Appendix G Legal Information

    ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation. All rights reserved. Disclaimer ZyXEL does not assume any liability arising out of the application or use of any products, or software described herein.
  • Page 342 To obtain the services of this warranty, contact your vendor. You may also refer to the warranty policy for the region in which you bought the device at http:// www.zyxel.com/web/support_warranty_info.php. FSG2200HNU User’s Guide...
  • Page 343 Appendix G Legal Information Registration Register your product online to receive e-mail notices of firmware upgrades and information at www.zyxel.com. FSG2200HNU User’s Guide...
  • Page 344 Appendix G Legal Information FSG2200HNU User’s Guide...

  • Page 345: Index

    Class of Service, see CoS blinking LEDs client-server protocol broadcast codecs comfort noise generation 140, 247 BYE request command interface Common Internet File System (CIFS) configuration configuration file copyright 177, 315 call forwarding CTS (Clear to Send) FSG2200HNU User’s Guide...
  • Page 346 DNS restrictions Dynamic Host Configuration Protocol, see DHCP FTP restrictions dynamic jitter buffer dynamic WEP key exchange G.168 140, 247 G.711 EAP Authentication G.729 EAP-MD5 group key update timer echo cancellation 140, 247 Encapsulation FSG2200HNU User’s Guide...
  • Page 347 Message Integrity Check, see MIC Internet Control Message Protocol, see ICMP Internet Service Provider, see ISP model name IP address 64, 99 MTU (Multi-Tenant Unit) default multicast multimedia IP Address Assignment multiple SIP accounts IP alias IP multicasting IP policy routing FSG2200HNU User’s Guide...
  • Page 348 RFC 1890 ports RFC 2327 power adaptor RFC 2516 power specifications RFC 3164 PPP (Point-to-Point Protocol) Link Layer RFC 3261 Protocol romfile PPP over Ethernet, see PPPoE router features PPPoE 74, 90, 245 routing Benefits routing policy FSG2200HNU User’s Guide...
  • Page 349 TPID service domain trademarks transparent bridging user agent trusted CAs, and certificates version 2 TTLS SNMP tutorial source-based routing VoIP speed dial wireless SSID Type of Service, see ToS stateful inspection static DHCP FSG2200HNU User’s Guide...
  • Page 350 WPA-PSK wireless client supplicant with RADIUS application example WPA2 user authentication Wide Area Network, see WAN vs WPA2-PSK warnings wireless client supplicant warranty with RADIUS application example note WPA2-Pre-Shared Key, see WPA2-PSK Web Configurator WPA2-PSK 316, 317 FSG2200HNU User’s Guide...
  • Page 351 Index application example WPA-PSK 113, 317 application example FSG2200HNU User’s Guide...
  • Page 352 Index FSG2200HNU User’s Guide...

Table of Contents