ZyXEL Communications P-660H-T1 v3s User Manual

Adsl2+ 4-port gateway
Hide thumbs Also See for P-660H-T1 v3s:
Table of Contents

Advertisement

Quick Links

P-660H-T1v3s
ADSL2+ 4-port Gateway
Default Login Details
IP Address
http://192.168.1.1
Password
Firmware Version 3.12
www.zyxel.com
Edition 2, 6/2010
www.zyxel.com
1234
Copyright © 2010
ZyXEL Communications Corporation

Advertisement

Table of Contents
loading

Summary of Contents for ZyXEL Communications P-660H-T1 v3s

  • Page 1 P-660H-T1v3s ADSL2+ 4-port Gateway Default Login Details IP Address http://192.168.1.1 Password 1234 Firmware Version 3.12 www.zyxel.com Edition 2, 6/2010 www.zyxel.com Copyright © 2010 ZyXEL Communications Corporation...
  • Page 3: About This User's Guide

    Help us help you. Send all User Guide-related comments, questions or suggestions for improvement to the following address, or use e-mail instead. Thank you! The Technical Writing Team, ZyXEL Communications Corp., 6 Innovation Road II, Science-Based Industrial Park, Hsinchu, 300, Taiwan.
  • Page 4 About This User's Guide Customer Support In the event of problems that cannot be solved by using this manual, you should contact your vendor. If you cannot contact your vendor, then contact a ZyXEL office for the region in which you bought the device. See http://www.zyxel.com/ web/contact_us.php for contact information.
  • Page 5: Document Conventions

    Document Conventions Document Conventions Warnings and Notes These are how warnings and notes are shown in this User’s Guide. Warnings tell you about things that could harm you or your device. Note: Notes tell you other important information (for example, other things you may need to configure or helpful tips) or recommendations.
  • Page 6 Document Conventions Icons Used in Figures Figures in this User’s Guide may use the following generic icons. The P-660H- T1v3s icon is not an exact representation of your device. P-660H-T1v3s Computer Notebook computer Server Firewall Telephone Router Switch P-660H-T1v3s User’s Guide...
  • Page 7: Safety Warnings

    Safety Warnings Safety Warnings • Do NOT use this product near water, for example, in a wet basement or near a swimming pool. • Do NOT expose your device to dampness, dust or corrosive liquids. • Do NOT store things on the device. •...
  • Page 8 Safety Warnings P-660H-T1v3s User’s Guide...
  • Page 9: Table Of Contents

    Contents Overview Contents Overview User’s Guide ........................... 19 Introduction ..........................21 The Web Configurator ....................... 27 Status Screens .......................... 33 Tutorials ............................. 37 Setup Wizard ..........................57 Technical Reference ......................67 WAN Setup ..........................69 LAN Setup ..........................89 Network Address Translation (NAT) ..................105 Firewalls ..........................
  • Page 10 Contents Overview P-660H-T1v3s User’s Guide...
  • Page 11: Table Of Contents

    Table of Contents Table of Contents About This User's Guide ......................3 Document Conventions......................5 Safety Warnings........................7 Contents Overview ........................9 Table of Contents........................11 Part I: User’s Guide................19 Chapter 1 Introduction ..........................21 1.1 Overview ..........................21 1.2 Ways to Manage the P-660H-T1v3s ..................
  • Page 12 Table of Contents Chapter 4 Tutorials ........................... 37 4.1 Overview ..........................37 4.2 Configuring the MAC Address Filter ..................37 4.3 Setting Up NAT Port Forwarding ..................38 4.3.1 Default Server ......................39 4.3.2 Port Forwarding ......................40 4.3.3 Special Note ....................... 42 4.4 Access the P-660H-T1v3s Using DDNS ................
  • Page 13 Table of Contents 6.4.2 Multiplexing ........................ 83 6.4.3 VPI and VCI ....................... 84 6.4.4 IP Address Assignment ....................84 6.4.5 Keep Alive/Nailed-Up Connection (PPP) ..............84 6.4.6 NAT ..........................85 6.5 Traffic Shaping ........................85 6.5.1 ATM Traffic Classes ....................86 Chapter 7 LAN Setup..........................
  • Page 14 Table of Contents 8.6.2 What NAT Does ......................116 8.6.3 How NAT Works ......................117 8.6.4 NAT Application ......................118 8.6.5 NAT Mapping Types ....................118 8.6.6 Port Translation ......................119 Chapter 9 Firewalls..........................121 9.1 Overview ..........................121 9.1.1 What You Can Do in the Firewall Screens ............... 121 9.1.2 What You Need to Know ..................
  • Page 15 Table of Contents 13.2 The QoS Screen ......................143 13.2.1 The QoS Settings Summary Screen ..............145 13.3 QoS Technical Reference ....................146 13.3.1 IEEE 802.1p ......................146 13.3.2 IP Precedence ......................147 13.3.3 Automatic Priority Queue Assignment ..............147 Chapter 14 Dynamic DNS Setup ......................
  • Page 16 Table of Contents Chapter 18 Logs ............................177 18.1 Overview .......................... 177 18.1.1 What You Can Do in the Log Screens ..............177 18.1.2 What You Need To Know ..................177 18.2 The System Log Screen ....................178 Chapter 19 Tools............................
  • Page 17 Table of Contents Appendix C IP Addresses and Subnetting ................245 Appendix D Services ......................255 Appendix E Legal Information ....................259 Index............................263 P-660H-T1v3s User’s Guide...
  • Page 18 Table of Contents P-660H-T1v3s User’s Guide...
  • Page 19: User's Guide

    User’s Guide...
  • Page 21: Introduction

    H A P T E R Introduction 1.1 Overview The P-660H-T1v3s is an ADSL2+ router. By integrating DSL and NAT, you are provided with ease of installation and high-speed, shared Internet access. The P- 660HW-Tx v3 is also a complete security solution with a robust firewall and content filtering.
  • Page 22: Good Habits For Device Management

    Chapter 1 Introduction 1.2.1 Good Habits for Device Management Do the following things regularly to make the P-660H-T1v3s more secure and to manage the P-660H-T1v3s more effectively. • Change the password. Use a password that’s not easy to guess and that consists of different types of characters, such as numbers and letters.
  • Page 23: Leds (Lights)

    Chapter 1 Introduction Use content filtering to block access to specific web sites, with URL’s containing keywords that you specify. You can define time periods and days during which content filtering is enabled and include or exclude particular computers on your network from content filtering.
  • Page 24: The Reset Button

    Chapter 1 Introduction The following table describes the labels in this picture. Table 1 LED Descriptions COLOR STATUS DESCRIPTION POWER Green The P-660H-T1v3s is receiving power and ready for use. The P-660H-T1v3s detected an error while self- testing, or there is a device malfunction. The P-660H-T1v3s is not receiving power.
  • Page 25: Using The Reset Button

    Chapter 1 Introduction 1.5.1 Using the Reset Button Make sure the POWER LED is on (not blinking). To set the device back to the factory default settings, press the RESET button for ten seconds or until the POWER LED begins to blink and then release it. When the POWER LED begins to blink, the defaults have been restored and the device restarts.
  • Page 26 Chapter 1 Introduction P-660H-T1v3s User’s Guide...
  • Page 27: The Web Configurator

    H A P T E R The Web Configurator 2.1 Overview The Web Configurator is an HTML-based management interface that allows easy device setup and management using a web browser. The minimum requirements to use the Web Configurator: • A modern web browser, such as Internet Explorer 7 or Firefox 3.5. •...
  • Page 28 Chapter 2 The Web Configurator 660H-T1v3s, type the admin password (1234 by default) in the password screen and click Login. Click Cancel to revert to the default user password in the password field. If you have changed the password, enter your password and click Login.
  • Page 29: Main Screen

    Chapter 2 The Web Configurator Select Go to Wizard setup and click Apply to display the wizard main screen. Otherwise, select Go to Advanced setup and click Apply to display the Status screen. Figure 5 Wizard or Advanced Mode Screen Note: For security reasons, the P-660H-T1v3s automatically logs you out if you do not use the Web Configurator for five minutes.
  • Page 30: Title Bar

    Chapter 2 The Web Configurator The main screen is divided into these parts: • A - title bar • B - navigation panel • C - main window • D - status bar 2.2.1 Title Bar The title bar provides some icons in the upper right corner. The icons provide the following functions.
  • Page 31 Chapter 2 The Web Configurator Table 3 Navigation Panel Summary LINK FUNCTION Use this screen to configure LAN TCP/IP settings, enable Any IP and other advanced properties. DHCP Setup Use this screen to configure LAN DHCP settings. Client List Use this screen to view current DHCP client information and to always assign specific IP addresses to individual MAC addresses (and host names).
  • Page 32: Main Window

    Chapter 2 The Web Configurator Table 3 Navigation Panel Summary LINK FUNCTION UPnP Use this screen to turn UPnP on or off. Maintenance System General Use this screen to configure your device’s name, domain name, management inactivity timeout and password. Time and Date Use this screen to change your P-660H-T1v3s’s time and date.
  • Page 33: Status Screens

    H A P T E R Status Screens 3.1 Overview Use the Status screens to look at the current status of the device, system resources, and interfaces (LAN and WAN). The Status screen also provides detailed information from Any IP and DHCP and statistics from bandwidth management, and traffic.
  • Page 34 Chapter 3 Status Screens Each field is described in the following table. Table 4 Status Screen LABEL DESCRIPTION Refresh Interval Select how often you want the P-660H-T1v3s to update this screen. Apply Click this to update this screen immediately. Device Information Host Name This field displays the P-660H-T1v3s system name.
  • Page 35 Chapter 3 Status Screens Table 4 Status Screen LABEL DESCRIPTION Security Firewall This displays whether or not the P-660H-T1v3s’s firewall is activated. Click this to go to the screen where you can change it. System Status System This field displays how long the P-660H-T1v3s has been running since it Uptime last started up.
  • Page 36 Chapter 3 Status Screens P-660H-T1v3s User’s Guide...
  • Page 37: Tutorials

    H A P T E R Tutorials 4.1 Overview This chapter shows you how to use the P-660H-T1v3s’s various features. • Configuring the MAC Address Filter • Setting Up NAT Port Forwarding • Access the P-660H-T1v3s Using DDNS • Configuring Static Route for Routing to Another Network •...
  • Page 38: Setting Up Nat Port Forwarding

    Chapter 4 Tutorials Click Security > Filter > IP/MAC Filter to open the following screen. For Rule Type, select MAC. Enter the MAC Address of the computer (B) that you want to block. Click the SAVE button. 4.3 Setting Up NAT Port Forwarding This tutorial shows you how to configure the port settings on a P-660H-T1v3s to allow an Xbox to communicate with the online Xbox live service.
  • Page 39: Default Server

    Chapter 4 Tutorials UDP: 53, 88, 3074 You can set up the port settings in two waysL: either set the Xbox 360’s IP address as the default server; or configure the port settings for Xbox 360. 4.3.1 Default Server It is much easier to set the Xbox 360’s IP address as the default server if it is not already assigned to another server.
  • Page 40: Port Forwarding

    Chapter 4 Tutorials Click Network > NAT > Port Forwarding. Enter the Xbox 360’s IP address in the Default Server field. Click Apply. 4.3.2 Port Forwarding If the default server is already assigned to another server, configure the ports for Xbox 360.
  • Page 41 Chapter 4 Tutorials Click Network > NAT > Port Forwarding. Select User define from the Service Name field. Configure the screen as follows to open TCP/UDP port 53 for Xbox 360. Click Apply. P-660H-T1v3s User’s Guide...
  • Page 42: Special Note

    Chapter 4 Tutorials Repeat steps 2 and 3 to open the rest of the ports for Xbox 360. The port forwarding settings you configured are listed in the Port Forwarding screen. 4.3.3 Special Note In this tutorial, all port 80 traffic is forwarded to Xbox 360, but port 80 is also the default listening port for remote management via WWW.
  • Page 43: Access The P-660H-T1V3S Using Ddns

    Chapter 4 Tutorials 4.4 Access the P-660H-T1v3s Using DDNS If you connect your P-660H-T1v3s to the Internet and it uses a dynamic WAN IP address, it is inconvenient for you to manage the device from the Internet. The P- 660H-T1v3s’s WAN IP address changes dynamically. Dynamic DNS (DDNS) allows you to access the P-660H-T1v3s using a domain name.
  • Page 44: Configuring The P-660H-T1V3S For Remote Management

    Chapter 4 Tutorials 4.4.2 Configuring the P-660H-T1v3s for Remote Management By default, your P-660H-T1v3s firewall is enabled to secure your network from external access. In this section, you activate DDNS with the settings from the previous section, and then modify the Remote Management settings to allow a connection to be initiated from a single external IP address.
  • Page 45: Testing The Ddns Setting

    Chapter 4 Tutorials The WWW screen opens. Configure the following settings: Server Port: The default web (HTTP) port that allows traffic to and from the WAN is 80. If you open this port to allow for external communication requests, then that would make quite a hole in the device’s security.
  • Page 46: Configuring Static Route For Routing To Another Network

    Chapter 4 Tutorials 4.5 Configuring Static Route for Routing to Another Network In order to extend your Intranet and control traffic flowing directions, you may connect a router to the P-660H-T1v3s’s LAN. The router may be used to separate two department networks. This tutorial shows how to configure a static routing rule for two network routings.
  • Page 47 Chapter 4 Tutorials You need to specify a static routing rule on the P-660H-T1v3s to specify R as the router in charge of forwarding traffic to N2. In this case, the P-660H-T1v3s routes traffic from A to R and then R routes the traffic to B. This tutorial uses the following example IP settings: Table 5 IP Settings in this Tutorial DEVICE / COMPUTER...
  • Page 48: Multiple Public And Private Ip Address Mappings

    Chapter 4 Tutorials Configure the Static Route Setup screen using the following settings: Enter a destination IP address of 192.168.10.0 and a subnet mask 255.255.255.0 for N2. Enter 192.168.1.253 (R’s N1 address) in the Gateway IP Address field. Click Apply. Now B should be able to receive traffic from A.
  • Page 49: Full Feature Nat + Many-To-Many No Overload Mapping

    Chapter 4 Tutorials This tutorial uses the following example settings: Table 6 IP Settings in this Tutorial DEVICE / COMPUTER IP ADDRESS The P-660H-T1v3s’s WAN 172.16.1.253 (IP-1) 172.16.1.254 (IP-2) The P-660H-T1v3s’s LAN 192.168.1.1 192.168.1.2 192.168.1.3 a.b.c.d To do this, you can use either of the following settings: •...
  • Page 50 Chapter 4 Tutorials Select Active Network Address Translation(NAT) and Full Feature in the General screen. Click Apply. Click the Address Mapping tab, and then click the Edit icon on a new rule. Configure the rule using the following settings: • Type: Many-to-Many No Overload •...
  • Page 51: Full Feature Nat + One-To-One Mapping

    Chapter 4 Tutorials 4.6.2 Full Feature NAT + One-to-One Mapping Use this setting if your applications must use fixed public IP addresses and the applications can be initiated either from the Intranet computers (A and B) or the Internet computer (C). For example, gaming application. To configure this setting: Click Network >...
  • Page 52: Multiple Wan Connections Example

    Chapter 4 Tutorials Configure two rules for the one-to-one mappings: • Rule 1 (This maps the public IP address 172.16.1.253 to the private IP address 192.168.1.2) Type: One-to-One Local Start IP: 192.168.1.2 Global Start IP: 172.16.1.253 • Rule 2 (This maps the public IP address 172.16.1.254 to the private IP address 192.168.1.3) Type: One-to-One Local Start IP: 192.168.1.3...
  • Page 53: Multiple Pvcs With Qos

    Chapter 4 Tutorials • The connection with VPI/VCI, 0/35, is dedicated for general data transmission. Figure 8 Example for Multiple WAN Connections 4.8 Multiple PVCs with QoS This tutorial is only applicable for an ISP engineer. An ISP may configure multiple PVCs for seperating different subscriber application traffic.
  • Page 54: Configuring Multiple Pvcs And Atm-Qos

    Chapter 4 Tutorials 4.8.1 Configuring Multiple PVCs and ATM-QoS This section shows you how to configure two PVCs and specify a proper ATM-QoS type for each PVC. Click Network > WAN > Internet Access Setup, configure the settings you (ISP) want to provide to the subscriber for general data transmission. This tutorial uses the following example settings: •...
  • Page 55 Chapter 4 Tutorials Click the Advanced Setup button to display the following options. Select UBR in the ATM QoS Type field. Click Apply. Click the More Connections tab and then click the Edit icon next for an entry. Then configure the screen using the following example settings: •...
  • Page 56 Chapter 4 Tutorials Click Apply. Click the Advanced Setup button and then select CBR in the ATM QoS Type field. Click Apply. P-660H-T1v3s User’s Guide...
  • Page 57: Setup Wizard

    H A P T E R Setup Wizard 5.1 Overview Use the wizard setup screens to configure your system for Internet access with the information given to you by your ISP. Note: See the advanced menu chapters for detailed information on these fields. 5.2 Internet Access Wizard Setup After you enter the password to access the web configurator, select Go to Wizard setup and click Apply.
  • Page 58 Chapter 5 Setup Wizard Click INTERNET SETUP to configure the system for Internet access. Figure 10 Wizard Welcome Your ZyXEL device attempts to detect your DSL connection and your connection type. The following screen appears if a connection is not detected. Check your hardware connections and click Restart the INTERNET SETUP Wizard to return to the wizard welcome screen.
  • Page 59 Chapter 5 Setup Wizard The following screen displays if a PPPoE or PPPoA connection is detected. Enter your Internet account information (username, password and/or service name) exactly as provided by your ISP. Then click Next. Figure 12 Auto-Detection: PPPoE The following screen appears if the ZyXEL device detects a connection but not the connection type.
  • Page 60: Manual Configuration

    Chapter 5 Setup Wizard 5.2.1 Manual Configuration If the P-660H-T1v3s fails to detect your DSL connection type but the physical line is connected, enter your Internet access information in the wizard screen exactly as your service provider gave it to you. Leave the defaults in any fields for which you were not given information.
  • Page 61 Chapter 5 Setup Wizard Table 7 Internet Access Wizard Setup: ISP Parameters LABEL DESCRIPTION Multiplexing Select the multiplexing method used by your ISP from the Multiplex drop-down list box either VC-based or LLC-based. Virtual Circuit VPI (Virtual Path Identifier) and VCI (Virtual Channel Identifier) define a virtual circuit.
  • Page 62 Chapter 5 Setup Wizard The following table describes the fields in this screen. Table 8 Internet Connection with PPPoE LABEL DESCRIPTION User Name Enter the user name exactly as your ISP assigned. If assigned a name in the form user@domain where domain identifies a service name, then enter both components exactly as given.
  • Page 63 Chapter 5 Setup Wizard The following table describes the fields in this screen. Table 9 Internet Connection with RFC 1483 LABEL DESCRIPTION IP Address This field is available if you select Routing in the Mode field. Type your ISP assigned IP address in this field. Back Click this to return to the previous screen without saving.
  • Page 64 Chapter 5 Setup Wizard The following table describes the fields in this screen. Table 10 Internet Connection with ENET ENCAP LABEL DESCRIPTION Obtain an IP A static IP address is a fixed IP that your ISP gives you. A dynamic IP Address address is not fixed;...
  • Page 65 Chapter 5 Setup Wizard The following table describes the fields in this screen. Table 11 Internet Connection with PPPoA LABEL DESCRIPTION User Name Enter the login name that your ISP gives you. Password Enter the password associated with the user name above. Back Click this to return to the previous screen without saving.
  • Page 66 Chapter 5 Setup Wizard P-660H-T1v3s User’s Guide...
  • Page 67: Technical Reference

    Technical Reference...
  • Page 69: Wan Setup

    H A P T E R WAN Setup 6.1 Overview This chapter describes how to configure WAN settings from the WAN screens. Use these screens to configure your P-660H-T1v3s for Internet access. A WAN (Wide Area Network) connection is an outside connection to another network or the Internet.
  • Page 70: Before You Begin

    Chapter 6 WAN Setup Encapsulation Method Encapsulation is used to include data from an upper layer protocol into a lower layer protocol. To set up a WAN connection to the Internet, you need to use the same encapsulation method used by your ISP (Internet Service Provider). If your ISP offers a dial-up Internet connection using PPPoE (PPP over Ethernet) or PPPoA, they should also provide a username and password (and service name) for user authentication.
  • Page 71: The Internet Access Setup Screen

    Chapter 6 WAN Setup 6.2 The Internet Access Setup Screen Use this screen to change your P-660H-T1v3s’s WAN settings. Click Network > WAN > Internet Access Setup. The screen differs by the WAN type and encapsulation you select. Figure 22 Network > WAN >Internet Access Setup (PPPoE) P-660H-T1v3s User’s Guide...
  • Page 72 Chapter 6 WAN Setup The following table describes the labels in this screen. Table 12 Network > WAN > Internet Access Setup LABEL DESCRIPTION Line ADSL Mode Select the modulation supported by your ISP. Use Auto Sync-Up if you are not sure which mode to choose from. The P-660H-T1v3s dynamically diagnoses the mode supported by the ISP and selects the best compatible one for your connection.
  • Page 73 Chapter 6 WAN Setup Table 12 Network > WAN > Internet Access Setup (continued) LABEL DESCRIPTION Encapsulation Select the method of encapsulation used by your ISP from the drop- down list box. Choices vary depending on the mode you select in the Mode field.
  • Page 74 Chapter 6 WAN Setup Table 12 Network > WAN > Internet Access Setup (continued) LABEL DESCRIPTION IP Address This option is available if you select Routing in the Mode field. A static IP address is a fixed IP that your ISP gives you. A dynamic IP address is not fixed;...
  • Page 75: Advanced Internet Access Setup

    Chapter 6 WAN Setup 6.2.1 Advanced Internet Access Setup Use this screen to edit your P-660H-T1v3s's advanced WAN settings. Click the Advanced Setup button in the Internet Access Setup screen. The screen appears as shown. Figure 23 Network > WAN > Internet Access Setup: Advanced Setup The following table describes the labels in this screen.
  • Page 76 Chapter 6 WAN Setup Table 13 Network > WAN > Internet Access Setup: Advanced Setup (continued) LABEL DESCRIPTION Multicast Multicast packets are sent to a group of computers on the LAN and are an alternative to unicast packets (packets sent to one computer) and broadcast packets (packets sent to every computer).
  • Page 77: The More Connections Screen

    Chapter 6 WAN Setup 6.3 The More Connections Screen The P-660H-T1v3s allows you to configure more than one Internet access connection. To configure additional Internet access connections click Network > WAN > More Connections. The screen differs by the encapsulation you select. When you use the WAN >...
  • Page 78: More Connections Edit

    Chapter 6 WAN Setup 6.3.1 More Connections Edit Use this screen to configure a connection. Click the edit icon in the More Connections screen to display the following screen. Figure 25 Network > WAN > More Connections: Edit P-660H-T1v3s User’s Guide...
  • Page 79 Chapter 6 WAN Setup The following table describes the labels in this screen. Table 15 Network > WAN > More Connections: Edit LABEL DESCRIPTION General Active Select the check box to activate or clear the check box to deactivate this connection. Node Name Enter a unique, descriptive name of up to 13 ASCII characters for this connection.
  • Page 80 Chapter 6 WAN Setup Table 15 Network > WAN > More Connections: Edit (continued) LABEL DESCRIPTION IP Address This option is available if you select Routing in the Mode field. A static IP address is a fixed IP that your ISP gives you. A dynamic IP address is not fixed;...
  • Page 81: Configuring More Connections Advanced Setup

    Chapter 6 WAN Setup 6.3.2 Configuring More Connections Advanced Setup Use this screen to edit your P-660H-T1v3s's advanced WAN settings. Click the Advanced Setup button in the More Connections Edit screen. The screen appears as shown. Figure 26 Network > WAN > More Connections: Edit: Advanced Setup The following table describes the labels in this screen.
  • Page 82: Wan Technical Reference

    Chapter 6 WAN Setup Table 16 Network > WAN > More Connections: Edit: Advanced Setup (continued) LABEL DESCRIPTION Maximum Burst Size Maximum Burst Size (MBS) refers to the maximum number of cells that can be sent at the peak rate. Type the MBS, which is less than 65535.
  • Page 83: Multiplexing

    Chapter 6 WAN Setup For the service provider, PPPoE offers an access and authentication method that works with existing access control systems (for example RADIUS). One of the benefits of PPPoE is the ability to let you access one of multiple network services, a function known as dynamic service selection.
  • Page 84: Vpi And Vci

    Chapter 6 WAN Setup LLC-based Multiplexing In this case one VC carries multiple protocols with protocol identifying information being contained in each packet header. Despite the extra bandwidth and processing overhead, this method may be advantageous if it is not practical to have a separate VC for each carried protocol, for example, if charging heavily depends on the number of simultaneous VCs.
  • Page 85: Nat

    Chapter 6 WAN Setup a nailed-up connection. The first is that idle timeout is disabled. The second is that the P-660H-T1v3s will try to bring up the connection when turned on and whenever the connection is down. A nailed-up connection can be very expensive for obvious reasons.
  • Page 86: Atm Traffic Classes

    Chapter 6 WAN Setup The following figure illustrates the relationship between PCR, SCR and MBS. Figure 27 Example of Traffic Shaping 6.5.1 ATM Traffic Classes These are the basic ATM traffic classes defined by the ATM Forum Traffic Management 4.0 Specification. Constant Bit Rate (CBR) Constant Bit Rate (CBR) provides fixed bandwidth that is always available even if no data is being sent.
  • Page 87 Chapter 6 WAN Setup levels, SCR defines the minimum level. An example of an VBR-nRT connection would be non-time sensitive data file transfers. Unspecified Bit Rate (UBR) The Unspecified Bit Rate (UBR) ATM traffic class is for bursty data transfers. However, UBR doesn't guarantee any bandwidth and only delivers traffic when the network has spare bandwidth.
  • Page 88 Chapter 6 WAN Setup P-660H-T1v3s User’s Guide...
  • Page 89: Lan Setup

    H A P T E R LAN Setup 7.1 Overview A Local Area Network (LAN) is a shared communication system to which many networking devices are connected. It is usually located in one immediate area such as a building or floor of a building. Use the LAN screens to help you configure a LAN DHCP server and manage IP addresses.
  • Page 90 Chapter 7 LAN Setup IP Address IP addresses identify individual devices on a network. Every networking device (including computers, servers, routers, printers, etc.) needs an IP address to communicate across the network. These networking devices are also known as hosts. Subnet Mask Subnet masks determine the maximum number of possible hosts on a network.
  • Page 91: Before You Begin

    Chapter 7 LAN Setup Finding Out More Section 7.6 on page 98 for technical background information on LANs. 7.1.3 Before You Begin Find out the MAC addresses of your network devices if you intend to add them to the DHCP Client List screen. 7.2 The IP Screen Use this screen to set the Local Area Network IP address and subnet mask of your P-660H-T1v3s.
  • Page 92: The Advanced Lan Ip Setup Screen

    Chapter 7 LAN Setup The following table describes the fields in this screen. Table 17 Network > LAN > IP LABEL DESCRIPTION IP Address Enter the LAN IP address you want to assign to your P-660H-T1v3s in dotted decimal notation, for example, 192.168.1.1 (factory default). IP Subnet Mask Type the subnet mask of your network in dotted decimal notation, for example 255.255.255.0 (factory default).
  • Page 93: The Dhcp Setup Screen

    Chapter 7 LAN Setup 7.3 The DHCP Setup Screen Use this screen to configure the DNS server information that the P-660H-T1v3s sends to the DHCP client devices on the LAN. Click Network > DHCP Setup to open this screen. Figure 30 Network > LAN > DHCP Setup The following table describes the labels in this screen.
  • Page 94: The Client List Screen

    Chapter 7 LAN Setup Table 19 Network > LAN > DHCP Setup LABEL DESCRIPTION First DNS Select Obtained From ISP if your ISP dynamically assigns DNS Server server information (and the P-660H-T1v3s's WAN IP address). Second DNS Server Select User-Defined if you have the IP address of a DNS server. Enter the DNS server's IP address in the field to the right.
  • Page 95 Chapter 7 LAN Setup Use this screen to change your P-660H-T1v3s’s static DHCP settings. Click Network > LAN > Client List to open the following screen. Figure 31 Network > LAN > Client List The following table describes the labels in this screen. Table 20 Network >...
  • Page 96: The Ip Alias Screen

    Chapter 7 LAN Setup 7.5 The IP Alias Screen IP alias allows you to partition a physical network into different logical networks over the same Ethernet interface. The P-660H-T1v3s supports three logical LAN interfaces via its single physical Ethernet interface with the P-660H-T1v3s itself as the gateway for each LAN network.
  • Page 97 Chapter 7 LAN Setup The following table describes the labels in this screen. Table 21 Network > LAN > IP Alias LABEL DESCRIPTION IP Alias 1 Select the check box to configure another LAN network for the P-660H- T1v3s. IP Address Enter the IP address of your P-660H-T1v3s in dotted decimal notation.
  • Page 98: Lan Technical Reference

    Chapter 7 LAN Setup 7.6 LAN Technical Reference This section provides some technical background information about the topics covered in this chapter. 7.6.1 LANs, WANs and the ZyXEL Device The actual physical connection determines whether the P-660H-T1v3s ports are LAN or WAN ports. There are two separate IP networks, one inside the LAN network and the other outside the WAN network as shown next.
  • Page 99: Dns Server Addresses

    Chapter 7 LAN Setup 7.6.3 DNS Server Addresses DNS (Domain Name System) maps a domain name to its corresponding IP address and vice versa. The DNS server is extremely important because without it, you must know the IP address of a computer before you can access it. The DNS server addresses you enter when you set up DHCP are passed to the client machines along with the assigned IP address and subnet mask.
  • Page 100 Chapter 7 LAN Setup Network Address Translation (NAT) feature of the P-660H-T1v3s. The Internet Assigned Number Authority (IANA) reserved this block of addresses specifically for private use; please do not use any other number unless you are told otherwise. Let's say you select 192.168.1.0 as the network number; which covers 254 individual addresses, from 192.168.1.1 to 192.168.1.254 (zero and 255 are reserved).
  • Page 101: Rip Setup

    Chapter 7 LAN Setup 7.6.5 RIP Setup RIP (Routing Information Protocol) allows a router to exchange routing information with other routers. The RIP Direction field controls the sending and receiving of RIP packets. When set to: • Both - the P-660H-T1v3s will broadcast its routing table periodically and incorporate the RIP information that it receives.
  • Page 102: Any Ip

    Chapter 7 LAN Setup The P-660H-T1v3s supports IGMP version 1 (IGMP-v1), IGMP version 2 (IGMP- v2) and IGMP version 3 (IGMP-v3). At start up, the P-660H-T1v3s queries all directly connected networks to gather group membership. After that, the P-660H- T1v3s periodically updates this information. IP multicasting can be enabled/ disabled on the P-660H-T1v3s LAN and/or WAN interfaces in the web configurator (LAN;...
  • Page 103 Chapter 7 LAN Setup The Any IP feature does not apply to a computer using either a dynamic IP address or a static IP address that is in the same subnet as the P-660H-T1v3s’s IP address. Note: You must enable NAT/SUA to use the Any IP feature on the P-660H-T1v3s. How Any IP Works Address Resolution Protocol (ARP) is a protocol for mapping an Internet Protocol address (IP address) to a physical machine address, also known as a Media Access...
  • Page 104 Chapter 7 LAN Setup P-660H-T1v3s User’s Guide...
  • Page 105: Network Address Translation (Nat)

    H A P T E R Network Address Translation (NAT) 8.1 Overview This chapter discusses how to configure NAT on the P-660H-T1v3s. NAT (Network Address Translation - NAT, RFC 1631) is the translation of the IP address of a host in a packet, for example, the source address of an outgoing packet, used within one network to a different IP address known within another network.
  • Page 106 Chapter 8 Network Address Translation (NAT) In the simplest form, NAT changes the source IP address in a packet received from a subscriber (the inside local address) to another (the inside global address) before forwarding the packet to the WAN side. When the response comes back, NAT translates the destination address (the inside global address) back to the inside local address before forwarding it to the original inside host.
  • Page 107: The Nat General Setup Screen

    Chapter 8 Network Address Translation (NAT) 8.2 The NAT General Setup Screen Use this screen to activate NAT. Click Network > NAT to open the following screen. Note: You must create a firewall rule in addition to setting up SUA/NAT, to allow traffic from the WAN to be forwarded through the P-660H-T1v3s.
  • Page 108: The Port Forwarding Screen

    Chapter 8 Network Address Translation (NAT) Table 22 Network > NAT > General (continued) LABEL DESCRIPTION Apply Click this to save your changes. Cancel Click this to restore your previously saved settings. 8.3 The Port Forwarding Screen Note: This screen is available only when you select SUA only in the NAT > General screen.
  • Page 109: Configuring The Port Forwarding Screen

    Chapter 8 Network Address Translation (NAT) Configuring Servers Behind Port Forwarding (Example) Let's say you want to assign ports 21-25 to one FTP, Telnet and SMTP server (A in the example), port 80 to another (B in the example) and assign a default server IP address of 192.168.1.35 to a third (C in the example).
  • Page 110 Chapter 8 Network Address Translation (NAT) The following table describes the fields in this screen. Table 23 Network > NAT > Port Forwarding LABEL DESCRIPTION Default Server Setup Default In addition to the servers for specified services, NAT supports a default Server server.
  • Page 111: The Port Forwarding Rule Edit Screen

    Chapter 8 Network Address Translation (NAT) 8.3.2 The Port Forwarding Rule Edit Screen Use this screen to edit a port forwarding rule. Click the rule’s edit icon in the Port Forwarding screen to display the screen shown next. Figure 39 Network > NAT > Port Forwarding: Edit The following table describes the fields in this screen.
  • Page 112: The Address Mapping Screen

    Chapter 8 Network Address Translation (NAT) Table 24 Network > NAT > Port Forwarding: Edit (continued) LABEL DESCRIPTION Apply Click this to save your changes. Cancel Click this to restore your previously saved settings. 8.4 The Address Mapping Screen Note: The Address Mapping screen is available only when you select Full Feature in the NAT >...
  • Page 113 Chapter 8 Network Address Translation (NAT) The following table describes the fields in this screen. Table 25 Network > NAT > Address Mapping LABEL DESCRIPTION This is the rule index number. Local Start IP This is the starting Inside Local IP Address (ILA). Local IP addresses are N/A for Server port mapping.
  • Page 114: The Address Mapping Rule Edit Screen

    Chapter 8 Network Address Translation (NAT) 8.4.1 The Address Mapping Rule Edit Screen Use this screen to edit an address mapping rule. Click the rule’s edit icon in the Address Mapping screen to display the screen shown next. Figure 41 Network > NAT > Address Mapping: Edit The following table describes the fields in this screen.
  • Page 115: The Sip Alg Screen

    Chapter 8 Network Address Translation (NAT) Table 26 Network > NAT > Address Mapping: Edit (continued) LABEL DESCRIPTION Server Only available when Type is set to Server. Mapping Set Select a number from the drop-down menu to choose a port forwarding set.
  • Page 116: Nat Technical Reference

    Chapter 8 Network Address Translation (NAT) 8.6 NAT Technical Reference This chapter contains more information regarding NAT. 8.6.1 NAT Definitions Inside/outside denotes where a host is located relative to the P-660H-T1v3s, for example, the computers of your subscribers are the inside hosts, while the web servers on the Internet are the outside hosts.
  • Page 117: How Nat Works

    Chapter 8 Network Address Translation (NAT) outside world. If you do not define any servers (for Many-to-One and Many-to- Many Overload mapping – see Table 29 on page 119), NAT offers the additional benefit of firewall protection. With no servers defined, your P-660H-T1v3s filters out all incoming inquiries, thus preventing intruders from probing your network.
  • Page 118: Nat Application

    Chapter 8 Network Address Translation (NAT) 8.6.4 NAT Application The following figure illustrates a possible NAT application, where three inside LANs (logical LANs using IP alias) behind the P-660H-T1v3s can communicate with three distinct WAN networks. Figure 44 NAT Application With IP Alias 8.6.5 NAT Mapping Types NAT supports five types of IP/port mapping.
  • Page 119: Port Translation

    Chapter 8 Network Address Translation (NAT) Port numbers do NOT change for One-to-One and Many-to-Many No Overload NAT mapping types. The following table summarizes these types. Table 29 NAT Mapping Types TYPE IP MAPPING One-to-One ILA1 IGA1 Many-to-One (SUA/PAT) ILA1 IGA1 ILA2...
  • Page 120 Chapter 8 Network Address Translation (NAT) port 8100 of traffic received on the WAN port (also IP address a.b.c.d) to port 80, but sends it to server B (IP address 192.168.1.34). Note: In this example, anyone wanting to access server A from the Internet must use port 8080.
  • Page 121: Firewalls

    H A P T E R Firewalls 9.1 Overview This chapter shows you how to enable the P-660H-T1v3s firewall. Use the firewall to protect your P-660H-T1v3s and network from attacks by hackers on the Internet and control access to it. By default the firewall: •...
  • Page 122 Chapter 9 Firewalls Denials of Service (DoS) attacks are aimed at devices and networks with a connection to the Internet. Their goal is not to steal information, but to disable a device or network so users no longer have access to network resources. The ZyXEL Device is pre-configured to automatically detect and thwart all known DoS attacks.
  • Page 123: The Firewall Screen

    Chapter 9 Firewalls 9.2 The Firewall Screen Use this screen to enable firewall and/or SPI. Click Advanced Setup > Firewall to display the following screen. Figure 46 Advanced Setup > Firewall The following table describes the labels in this screen. Table 30 Advanced >...
  • Page 124 Chapter 9 Firewalls P-660H-T1v3s User’s Guide...
  • Page 125: Filters

    H A P T E R Filters 10.1 Overview This chapter introduces three types of filters supported by the P-660H-T1v3s. You can configure rules to restrict traffic by IP addresses, MAC addresses, application types and/or URLs. 10.1.1 What You Can Do in the Filter Screens •...
  • Page 126: The Url Filter Screen

    Chapter 10 Filters 10.2 The URL Filter Screen Use this screen to block websites by URL. Click Security > Filter and select URL Filter in the Filter Type Selection field.. The screen appears as shown. Figure 47 Security > Filter > URL Filter The following table describes the labels in this screen.
  • Page 127: The Application Filter Screen

    Chapter 10 Filters 10.3 The Application Filter Screen Use this screen to allow or deny traffic for certain types of applications. The application filter provides a convenient way to manage the use of various applications on the network. Click Security > Filter and select Application Filter in the Filter Type Selection field.
  • Page 128: The Ip/Mac Filter Screen

    Chapter 10 Filters 10.4 The IP/MAC Filter Screen Use this screen to create and apply IP/MAC filters. Click Security > Filter and select IP/MAC Filter in the Filter Type Selection field. The screen appears as shown. Figure 49 Security> Filter / IP/MAC Filter The following table describes the labels in this screen.
  • Page 129 Chapter 10 Filters Table 33 Security > Filter > IP/MAC Filter (continued) LABEL DESCRIPTION IP/MAC Filter Rule Select the index number of the filter rule. Index Rule Type Select IP or MAC type to configure the rule. Use the IP Filter to block traffic by IP addresses. Use the MAC Filter to block traffic by MAC address.
  • Page 130 Chapter 10 Filters Table 33 Security > Filter > IP/MAC Filter (continued) LABEL DESCRIPTION SAVE Click this to save your changes. DELETE Click this to remove the filter rule. CANCEL Click this to restore your previously saved settings. P-660H-T1v3s User’s Guide...
  • Page 131: Static Route

    H A P T E R Static Route 11.1 Overview The P-660H-T1v3s usually uses the default gateway to route outbound traffic from computers on the LAN to the Internet. To have the P-660H-T1v3s send data to devices not reachable through the default gateway, use static routes. For example, the next figure shows a computer (A) connected to the P-660H- T1v3s’s LAN interface.
  • Page 132: The Static Route Screen

    Chapter 11 Static Route 11.2 The Static Route Screen Use this screen to view the static route rules. Click Advanced > Static Route to open the Static Route screen. Figure 51 Advanced > Static Route The following table describes the labels in this screen. Table 34 Advanced >...
  • Page 133: Static Route Edit

    Chapter 11 Static Route Table 34 Advanced > Static Route LABEL DESCRIPTION Apply Click this to save your changes. Cancel Click this to restore your previously saved settings. 11.2.1 Static Route Edit Use this screen to configure the required information for a static route. Select a static route index number and click Edit.
  • Page 134 Chapter 11 Static Route P-660H-T1v3s User’s Guide...
  • Page 135: Q/1P

    H A P T E R 802.1Q/1P 12.1 Overview This chapter describes how to configure the 802.1Q/1P settings. A Virtual Local Area Network (VLAN) allows a physical network to be partitioned into multiple logical networks. A VLAN group can be treated as an individual device.
  • Page 136 Chapter 12 802.1Q/1P IEEE 802.1Q Tagged VLAN Tagged VLAN uses an explicit tag (VLAN ID) in the MAC header to identify the VLAN membership of a frame across bridges - they are not confined to the device on which they were created. The VLAN ID associates a frame with a specific VLAN and provides the information that devices need to process the frame across the network.
  • Page 137: The Group Setting Screen

    Chapter 12 802.1Q/1P 12.2 The Group Setting Screen Use this screen to activate 802.1Q/1P and display the VLAN groups. Click Advanced > 802.1Q/1P to display the following screen. Figure 54 Advanced > 802.1Q/1P > Group Setting The following table describes the labels in this screen. Table 36 Advanced >...
  • Page 138: Editing 802.1Q/1P Group Setting

    Chapter 12 802.1Q/1P Table 36 Advanced > 802.1Q/1P > Group Setting (continued) LABEL DESCRIPTION Port Number These columns display the VLAN’s settings for each port. A tagged port is marked as T, an untagged port is marked as U and ports not participating in a VLAN are marked as “–“.
  • Page 139 Chapter 12 802.1Q/1P The following table describes the labels in this screen. Table 37 Advanced > 802.1Q/1P > Group Setting > Edit LABEL DESCRIPTION Active Select this to make this VLAN group active. VLAN ID Assign a VLAN ID for the VLAN group. The valid VID range is between 1 and 4094.
  • Page 140: The 802.1Q/1P Port Setting Screen

    Chapter 12 802.1Q/1P 12.3 The 802.1Q/1P Port Setting Screen Use this screen to configure the PVID and assign traffic priority for each port. Click Advanced > 802.1Q/1P > Port Setting to display the following screen. Figure 56 Advanced > 802.1Q/1P > Port Setting The following table describes the labels in this screen.
  • Page 141: Quality Of Service (Qos)

    H A P T E R Quality of Service (QoS) 13.1 Overview Use the QoS screen to set up your P-660H-T1v3s to use QoS for traffic management. Quality of Service (QoS) refers to both a network’s ability to deliver data with minimum delay, and the networking methods used to control bandwidth.
  • Page 142: What You Can Do In The Qos Screens

    Chapter 13 Quality of Service (QoS) these two classes are assigned priority queue based on the internal QoS mapping table on the P-660H-T1v3s. Figure 57 QoS Example VoIP: Queue 6 50 Mbps Boss: Queue 5 IP=192.168.1.23 13.1.1 What You Can Do in the QoS Screens •...
  • Page 143: The Qos Screen

    Chapter 13 Quality of Service (QoS) device, such as a backbone switch, can provide specific treatment or service based on the tag or marker. Finding Out More Section 13.3 on page 146 for advanced technical information on QoS. 13.2 The QoS Screen Use this screen to enable or disable QoS and have the P-660H-T1v3s assign priority levels to traffic according to the port range, IEEE 802.1p priority level and/ or IP precedence.
  • Page 144 Chapter 13 Quality of Service (QoS) The following table describes the labels in this screen. Table 39 Advanced > QoS LABEL DESCRIPTION Quality of Service Use this field to turn on QoS to improve your network performance. You can give priority to traffic that the P-660H-T1v3s forwards out through the WAN interface.
  • Page 145: The Qos Settings Summary Screen

    Chapter 13 Quality of Service (QoS) Table 39 Advanced > QoS LABEL DESCRIPTION 802.1p Select a priority level (0 to 7) from the drop-down list box. Action IPP/DS Field Select IPP/TOS to specify an IP precedence range and type of services. Select DSCP to specify a DiffServ Code Point (DSCP) range.
  • Page 146: Qos Technical Reference

    Chapter 13 Quality of Service (QoS) The following table describes the labels in this screen. Table 40 Advanced Setup > QoS > QoS Settings Summary LABEL DESCRIPTION Rules This is the rule’s index number. Active This shows whether the rule is enabled or disabled. Physical Ports This is the physical port associated with the rule.
  • Page 147: Ip Precedence

    Chapter 13 Quality of Service (QoS) Table 41 IEEE 802.1p Priority Level and Traffic Type PRIORITY TRAFFIC TYPE LEVEL Level 5 Typically used for video that consumes high bandwidth and is sensitive to jitter. Level 4 Typically used for controlled load, latency-sensitive traffic such as SNA (Systems Network Architecture) transactions.
  • Page 148 Chapter 13 Quality of Service (QoS) Table 42 Internal Layer2 and Layer3 QoS Mapping LAYER 2 LAYER 3 IEEE 802.1P PRIORITY QUEUE USER PRIORITY TOS (IP IP PACKET PRECEDENCE) DSCP (ETHERNET LENGTH (BYTE) PRIORITY) 001110 250~1100 001100 001010 001000 010110 010100 010010 010000...
  • Page 149: Dynamic Dns Setup

    H A P T E R Dynamic DNS Setup 14.1 Overview Dynamic DNS allows you to update your current dynamic IP address with one or many dynamic DNS services so that anyone can contact you (in NetMeeting, CU- SeeMe, etc.). You can also access your FTP server or Web site on your own computer using a domain name (for instance myhost.dhs.org, where myhost is a name of your choice) that will never change instead of using an IP address that changes each time you reconnect.
  • Page 150: The Dynamic Dns Screen

    Chapter 14 Dynamic DNS Setup 14.2 The Dynamic DNS Screen Use this screen to change your P-660H-T1v3s’s DDNS. Click Advanced > Dynamic DNS. The screen appears as shown. Figure 60 Advanced > Dynamic DNS The following table describes the fields in this screen. Table 43 Advanced >...
  • Page 151: Remote Management

    H A P T E R Remote Management 15.1 Overview Remote management allows you to determine which services/protocols can access which P-660H-T1v3s interface (if any) from which computers. The following figure shows remote management of the P-660H-T1v3s coming in from the WAN. Figure 61 Remote Management From the WAN HTTP Telnet...
  • Page 152: What You Can Do In The Remote Management Screens

    Chapter 15 Remote Management To disable remote management of a service, select Disable in the corresponding Access Status field. You may only have one remote management session running at a time. The P- 660H-T1v3s automatically disconnects a remote management session of lower priority when another remote management session of higher priority starts.
  • Page 153: The Www Screen

    Chapter 15 Remote Management • There is already another remote management session with an equal or higher priority running. You may only have one remote management session running at one time. • There is a firewall rule that blocks it. Remote Management and NAT When NAT is enabled: •...
  • Page 154: The Telnet Screen

    Chapter 15 Remote Management The following table describes the labels in this screen. Table 44 Advanced > Remote Management > WWW LABEL DESCRIPTION Server Port You may change the server port number for a service, if needed. However, you must use the same port number in order to use that service for remote management.
  • Page 155: The Ftp Screen

    Chapter 15 Remote Management The following table describes the labels in this screen. Table 45 Advanced > Remote Management > Telnet LABEL DESCRIPTION Server Port You may change the server port number for a service if needed, however you must use the same port number in order to use that service for remote management.
  • Page 156: The Snmp Screen

    Chapter 15 Remote Management The following table describes the labels in this screen. Table 46 Advanced > Remote Management > FTP LABEL DESCRIPTION Port You may change the server port number for a service, if needed. However, you must use the same port number in order to use that service for remote management.
  • Page 157: The Dns Screen

    Chapter 15 Remote Management The following table describes the labels in this screen. Table 47 Advanced > Remote MGMT > SNMP LABEL DESCRIPTION Server Port You may change the server port number for a service if needed, however you must use the same port number in order to use that service for remote management.
  • Page 158: The Icmp Screen

    Chapter 15 Remote Management The following table describes the labels in this screen. Table 48 Advanced > Remote Management > DNS LABEL DESCRIPTION Server Port The DNS service port number is 53 and cannot be changed here. Server Access Select the interface(s) through which a computer may send DNS queries to the P-660H-T1v3s.
  • Page 159 Chapter 15 Remote Management The following table describes the labels in this screen. Table 49 Advanced > Remote Management > ICMP LABEL DESCRIPTION ICMP Internet Control Message Protocol is a message control and error- reporting protocol between a host server and a gateway to the Internet. ICMP uses Internet Protocol (IP) datagrams, but the messages are processed by the TCP/IP software and directly apparent to the application user.
  • Page 160 Chapter 15 Remote Management P-660H-T1v3s User’s Guide...
  • Page 161: Universal Plug-And-Play (Upnp)

    H A P T E R Universal Plug-and-Play (UPnP) 16.1 Overview Universal Plug and Play (UPnP) is a distributed, open networking standard that uses TCP/IP for simple peer-to-peer network connectivity between devices. A UPnP device can dynamically join a network, obtain an IP address, convey its capabilities and learn about other devices on the network.
  • Page 162 Chapter 16 Universal Plug-and-Play (UPnP) • Assigning lease times to mappings Windows Messenger is an example of an application that supports NAT traversal and UPnP. See the NAT chapter for more information on NAT. Cautions with UPnP The automated nature of NAT traversal applications in establishing their own services and opening firewall ports may present network security issues.
  • Page 163: The Upnp Screen

    Chapter 16 Universal Plug-and-Play (UPnP) 16.2 The UPnP Screen Use the following screen to configure the UPnP settings on your P-660H-T1v3s. Click Advanced > UPnP to display the screen shown next. Section 16.1 on page 161 for more information. Figure 68 Advanced > UPnP > General The following table describes the fields in this screen.
  • Page 164: Installing Upnp In Windows

    Chapter 16 Universal Plug-and-Play (UPnP) 16.2.1 Installing UPnP in Windows This section shows you how to configure or install UPnP in Windows. 16.2.1.1 Windows 7 Windows 7 already has UPnP installed. To enable it: Click Start > Control Panel and select Network and Internet. Click Network and Sharing Center.
  • Page 165 Chapter 16 Universal Plug-and-Play (UPnP) 16.2.1.2 Windows XP To install the UPnP in Windows XP: Click Start and Control Panel. Double-click Network Connections. In the Network Connections window, click Advanced in the main menu and select Optional Networking Components …. Network Connections The Windows Optional Networking Components Wizard window displays.
  • Page 166: Using Upnp In Windows Xp

    Chapter 16 Universal Plug-and-Play (UPnP) In the Networking Services window, select the Universal Plug and Play check box. Networking Services Click OK to go back to the Windows Optional Networking Component Wizard window and click Next. 16.2.2 Using UPnP in Windows XP This section shows you how to use the UPnP feature in Windows XP.
  • Page 167 Chapter 16 Universal Plug-and-Play (UPnP) 16.2.2.1 Auto-discover Your UPnP-enabled Network Device Click Start and Control Panel. Double-click Network Connections. An icon displays under Internet Gateway. Right-click the icon and select Properties. Network Connections In the Internet Connection Properties window, click Settings to see the port mappings there were automatically created.
  • Page 168 Chapter 16 Universal Plug-and-Play (UPnP) You may edit or delete the port mappings or click Add to manually add port mappings. Internet Connection Properties: Advanced Settings Internet Connection Properties: Advanced Settings: Add When the UPnP-enabled device is disconnected from your computer, all port mappings will be deleted automatically.
  • Page 169 Chapter 16 Universal Plug-and-Play (UPnP) Double-click on the icon to display your current Internet connection status. Internet Connection Status 16.2.2.2 Web Configurator Easy Access With UPnP, you can access the web-based configurator on the P-660H-T1v3s without finding out the IP address of the P-660H-T1v3s first. This comes helpful if you do not know the IP address of the P-660H-T1v3s.
  • Page 170 Chapter 16 Universal Plug-and-Play (UPnP) Right-click on the icon for your P-660H-T1v3s and select Invoke. The web configurator login screen displays. Network Connections: My Network Places Right-click on the icon for your P-660H-T1v3s and select Properties. A properties window displays with basic information about the P-660H-T1v3s. Network Connections: My Network Places: Properties: Example P-660H-T1v3s User’s Guide...
  • Page 171: System Settings

    H A P T E R System Settings 17.1 Overview This chapter shows you how to configure system related settings, such as system time, password, name, the domain name and the inactivity timeout interval. 17.1.1 What You Can Do in the System Settings Screens •...
  • Page 172: The General Screen

    Chapter 17 System Settings 17.2 The General Screen Use this screen to configure system settings such as the system and domain name, inactivity timeout interval and system password. The System Name is for identification purposes. However, because some ISPs check this name you should enter your computer's "Computer Name". To find your computer in Windows XP, right-click over My Computer and select Properties.
  • Page 173: The Time And Date Screen

    Chapter 17 System Settings Table 51 Maintenance > System > General LABEL DESCRIPTION Apply Click this to save your changes. Cancel Click this to restore your previously saved settings. 17.3 The Time and Date Screen Use this screen to configure the P-660H-T1v3s’s time based on your local time zone.
  • Page 174 Chapter 17 System Settings The following table describes the fields in this screen. Table 52 Maintenance > System > Time and Date LABEL DESCRIPTION Current Time Current Time This field displays the time of your P-660H-T1v3s. Each time you reload this page, the P-660H-T1v3s synchronizes the time with the time server.
  • Page 175 Chapter 17 System Settings Table 52 Maintenance > System > Time and Date (continued) LABEL DESCRIPTION Daylight Daylight saving is a period from late spring to early fall when many Savings countries set their clocks ahead of normal local time by one hour to give more daytime light in the evening.
  • Page 176 Chapter 17 System Settings P-660H-T1v3s User’s Guide...
  • Page 177: Logs

    H A P T E R Logs 18.1 Overview This chapter contains information about configuring general log settings and viewing the P-660H-T1v3s’s logs. The web configurator allows you to choose which categories of events and/or alerts to have the P-660H-T1v3s log and then display the logs or have the P-660H- T1v3s send them to an administrator (as e-mail) or to a syslog server.
  • Page 178: The System Log Screen

    Chapter 18 Logs 18.2 The System Log Screen Use the System Log screen to see the logs for the categories that you select. Click Maintenance > Logs to open this screen. Figure 71 Maintenance > Logs > View Log The following table describes the fields in this screen. Table 53 Maintenance >...
  • Page 179: Tools

    H A P T E R Tools 19.1 Overview This chapter explains how to upload new firmware, manage configuration files and restart your P-660H-T1v3s. Use the instructions in this chapter to change the device’s configuration file or upgrade its firmware. After you configure your device, you can backup the configuration file to a computer.
  • Page 180: What You Need To Know About Tools

    Chapter 19 Tools 19.1.2 What You Need To Know About Tools Filename Conventions The configuration file (often called the romfile or rom-0) contains the factory default settings in the menus such as password, DHCP Setup, TCP/IP Setup, etc. It arrives from ZyXEL with a “rom” filename extension. Once you have customized the P-660H-T1v3s's settings, they can be saved back to your computer under a filename of your choosing.
  • Page 181: Before You Begin

    Chapter 19 Tools FTP Restrictions FTP will not work when: The firewall is active (turn the firewall off or create a firewall rule to allow access from the WAN). You have disabled the FTP service in the Remote Management screen. The IP you entered in the Secured Client IP field does not match the client IP.
  • Page 182 Chapter 19 Tools Restore Using FTP Session Example Figure 72 Restore Using FTP Session Example ftp> put config.rom rom-0 200 Port command okay 150 Opening data connection for STOR rom-0 226 File received OK 221 Goodbye for writing flash ftp: 16384 bytes sent in 0.06Seconds 273.07Kbytes/sec. ftp>quit Refer to Section 19.1.2 on page 180...
  • Page 183 Chapter 19 Tools FTP Session Example of Firmware File Upload Figure 73 FTP Session Example of Firmware File Upload 331 Enter PASS command Password: 230 Logged in ftp> bin 200 Type I OK ftp> put firmware.bin ras 200 Port command okay 150 Opening data connection for STOR ras 226 File received OK ftp: 1103936 bytes sent in 1.10Seconds 297.89Kbytes/sec.
  • Page 184 Chapter 19 Tools UNIX, use “get” to transfer from the device to the computer, “put” the other way around, and “binary” to set binary transfer mode. TFTP Upload Command Example The following is an example TFTP command: tftp [-i] host put firmware.bin ras Where “i”...
  • Page 185 Chapter 19 Tools FTP Command Configuration Backup Example This figure gives an example of using FTP commands from the DOS command prompt to save your device’s configuration onto your computer. Figure 74 FTP Session Example 331 Enter PASS command Password: 230 Logged in ftp>...
  • Page 186 Chapter 19 Tools Use telnet from your computer to connect to the P-660H-T1v3s and log in. Because TFTP does not have any security checks, the P-660H-T1v3s records the IP address of the telnet client and accepts TFTP requests only from this address. Enter command “sys stdio 0”...
  • Page 187: The Firmware Screen

    Chapter 19 Tools Table 56 General Commands for GUI-based TFTP Clients (continued) COMMAN DESCRIPTION Binary Transfer the file in binary mode. Abort Stop transfer of the file. Refer to Section 19.1.2 on page 180 to read about configurations that disallow TFTP and FTP over WAN.
  • Page 188 Chapter 19 Tools Table 57 Maintenance > Tools > Firmware (continued) LABEL DESCRIPTION Browse... Click this to find the .bin file you want to upload. Remember that you must decompress compressed (.zip) files before you can upload them. Upload Click this to begin the upload process. This process may take up to two minutes.
  • Page 189: The Configuration Screen

    Chapter 19 Tools If the upload was not successful, the following screen will appear. Click Return to go back to the Firmware screen. Figure 78 Error Message 19.3 The Configuration Screen Section 19.1.4 on page 181 for transferring configuration files using FTP/TFTP commands.
  • Page 190 Chapter 19 Tools Backup Configuration Backup Configuration allows you to back up (save) the P-660H-T1v3s’s current configuration to a file on your computer. Once your P-660H-T1v3s is configured and functioning properly, it is highly recommended that you back up your configuration file before making configuration changes.
  • Page 191 Chapter 19 Tools The P-660H-T1v3s automatically restarts in this time causing a temporary network disconnect. In some operating systems, you may see the following icon on your desktop. Figure 81 Network Temporarily Disconnected If you uploaded the default configuration file you may need to change the IP address of your computer to be in the same subnet as that of the default device IP address (192.168.1.1).
  • Page 192: The Restart Screen

    Chapter 19 Tools Reset to Factory Defaults Click the Reset button to clear all user-entered configuration information and return the P-660H-T1v3s to its factory defaults. The following warning screen appears. Figure 83 Reset Warning Message Figure 84 Reset In Process Message You can also press the RESET button on the rear panel to reset the factory defaults of your P-660H-T1v3s.
  • Page 193: Diagnostic

    H A P T E R Diagnostic 20.1 Overview These read-only screens display information to help you identify problems with the P-660H-T1v3s. 20.1.1 What You Can Do in the Diagnostic Screens • Use the General Diagnostic screen (Section 20.2 on page 193) to ping an IP address.
  • Page 194: The Dsl Line Diagnostic Screen

    Chapter 20 Diagnostic The following table describes the fields in this screen. Table 59 Maintenance > Diagnostic > General LABEL DESCRIPTION TCP/IP Type the IP address of a computer that you want to ping in order to test a Address connection.
  • Page 195 Chapter 20 Diagnostic The following table describes the fields in this screen. Table 60 Maintenance > Diagnostic > DSL Line LABEL DESCRIPTION ATM Status Click this to view your DSL connection’s Asynchronous Transfer Mode (ATM) statistics. ATM is a networking technology that provides high- speed data transfer.
  • Page 196 Chapter 20 Diagnostic Table 60 Maintenance > Diagnostic > DSL Line (continued) LABEL DESCRIPTION DSL Line Click this to view statistics about the DSL connections. Status noise margin downstream is the signal to noise ratio for the downstream part of the connection (coming into the P-660H-T1v3s from the ISP).
  • Page 197: Troubleshooting

    H A P T E R Troubleshooting This chapter offers some suggestions to solve problems you might encounter. The potential problems are divided into the following categories. • Power, Hardware Connections, and LEDs • P-660H-T1v3s Access and Login • • Internet Access 21.1 Power, Hardware Connections, and LEDs The P-660H-T1v3s does not turn on.
  • Page 198: P-660H-T1V3S Access And Login

    Chapter 21 Troubleshooting Check the hardware connections. Inspect your cables for damage. Contact the vendor to replace any damaged cables. Turn the P-660H-T1v3s off and on. If the problem continues, contact the vendor. 21.2 P-660H-T1v3s Access and Login I forgot the IP address for the P-660H-T1v3s. The default IP address is 192.168.1.1.
  • Page 199 Chapter 21 Troubleshooting • If you changed the IP address (Section 7.2 on page 91), use the new IP address. • If you changed the IP address and have forgotten it, see the troubleshooting suggestions for I forgot the IP address for the P-660H-T1v3s. Check the hardware connections, and make sure the LEDs are behaving as expected.
  • Page 200: Internet Access

    Chapter 21 Troubleshooting If this does not work, you have to reset the device to its factory defaults. See Section 21.1 on page 197. I cannot Telnet to the P-660H-T1v3s. See the troubleshooting suggestions for I cannot see or access the Login screen in the web configurator.
  • Page 201 Chapter 21 Troubleshooting Turn the P-660H-T1v3s off and on. If the problem continues, contact your ISP. The Internet connection is slow or intermittent. There might be a lot of traffic on the network. Look at the LEDs, and check Section 1.4 on page 23.
  • Page 202 Chapter 21 Troubleshooting P-660H-T1v3s User’s Guide...
  • Page 203: Product Specifications

    H A P T E R Product Specifications 22.1 Hardware Specifications The following table summarizes the P-660H-T1v3s’s hardware features. Table 61 Hardware Specifications Dimensions 180W x 127D x 37H Weight 280 g Power Output 9VDC@0.6A Built-in Switch Four auto-negotiating, auto MDI/MDI-X 10/100 Mbps RJ-45 Ethernet ports DSL Port 1 RJ-11 for Annex A...
  • Page 204: Firmware Specifications

    Chapter 22 Product Specifications 22.2 Firmware Specifications The following table summarizes the P-660H-T1v3s’s firmware features. Table 62 Firmware Specifications Default IP Address 192.168.1.1 Default Subnet Mask 255.255.255.0 (24 bits) Default Admin 1234 Password Static DHCP Addresses Static Routes Device Management Use the web configurator to easily configure the rich range of features on the P-660H-T1v3s.
  • Page 205 Chapter 22 Product Specifications Table 62 Firmware Specifications (continued) Firewall Your device has a stateful inspection firewall with DoS (Denial of Service) protection. By default, when the firewall is activated, all incoming traffic from the WAN to the LAN is blocked unless it is initiated from the LAN.
  • Page 206 Chapter 22 Product Specifications Table 62 Firmware Specifications (continued) ADSL Standards ANSI T1.413, Issue 2; G.dmt (G.992.1) ADSL2 G.dmt.bis (G.992.3) ADSL2 G.lite.bis (G.992.4) ADSL2+ (G.992.5) Reach-Extended ADSL (RE ADSL) SRA (Seamless Rate Adaptation) Auto-negotiating rate adaptation ADSL physical connection ATM AAL5 (ATM Adaptation Layer type Multi-protocol over AAL5 (RFC2684/1483) PPP over ATM AAL5 (RFC2364) PPP over Ethernet for DSL connection (RFC2516)
  • Page 207: Standards Support

    Chapter 22 Product Specifications Table 62 Firmware Specifications (continued) Other Protocol PPP (Point-to-Point Protocol) link layer protocol Support IP routing DNS Proxy Transparent bridging for unsupported network layer protocols RIP I/RIP II ICMP Dynamic DNS (www.dyndns.org) DHCP client/server/relay ATM QoS IP Multicasting IGMP v1, v2 IGMP Proxy 802.1Q/1P...
  • Page 208 Chapter 22 Product Specifications Table 63 Standards Supported (continued) STANDARD DESCRIPTION RFC 1483 Multiprotocol Encapsulation over ATM Adaptation Layer 5 RFC 1631 IP Network Address Translator (NAT) RFC 1661 The Point-to-Point Protocol (PPP) RFC 1723 RIP-2 (Routing Information Protocol) RFC 2236 Internet Group Management Protocol, Version 2.
  • Page 209: Appendices And Index

    Appendices and Index Note: The appendices provide general information. Some details may not apply to your P-660H-T1v3s.
  • Page 211: Appendix A Setting Up Your Computer's Ip Address

    P P E N D I X Setting up Your Computer’s IP Address All computers must have a 10M or 100M Ethernet adapter card and TCP/IP installed. Windows 95/98/Me/NT/2000/XP/Vista, Macintosh OS 7 and later operating systems and all versions of UNIX/LINUX include the software components you need to install and use TCP/IP on your computer.
  • Page 212 Appendix A Setting up Your Computer’s IP Address Windows 95/98/Me Click Start, Settings, Control Panel and double-click the Network icon to open the Network window. Figure 88 WIndows 95/98/Me: Network: Configuration Installing Components The Network window Configuration tab displays a list of installed components. You need a network adapter, the TCP/IP protocol and Client for Microsoft Networks.
  • Page 213 Appendix A Setting up Your Computer’s IP Address Select Microsoft from the list of manufacturers. Select TCP/IP from the list of network protocols and then click OK. If you need Client for Microsoft Networks: Click Add. Select Client and then click Add. Select Microsoft from the list of manufacturers.
  • Page 214 Appendix A Setting up Your Computer’s IP Address Click the DNS Configuration tab. • If you do not know your DNS information, select Disable DNS. • If you know your DNS information, select Enable DNS and type the information in the fields below (you may not need to fill them all in). Figure 90 Windows 95/98/Me: TCP/IP Properties: DNS Configuration Click the Gateway tab.
  • Page 215 Appendix A Setting up Your Computer’s IP Address Windows 2000/NT/XP The following example figures use the default Windows XP GUI theme. Click start (Start in Windows 2000/NT), Settings, Control Panel. Figure 91 Windows XP: Start Menu In the Control Panel, double-click Network Connections (Network and Dial- up Connections in Windows 2000/NT).
  • Page 216 Appendix A Setting up Your Computer’s IP Address Right-click Local Area Connection and then click Properties. Figure 93 Windows XP: Control Panel: Network Connections: Properties Select Internet Protocol (TCP/IP) (under the General tab in Win XP) and then click Properties. Figure 94 Windows XP: Local Area Connection Properties The Internet Protocol TCP/IP Properties window opens (the General tab in Windows XP).
  • Page 217 Appendix A Setting up Your Computer’s IP Address • If you have a dynamic IP address click Obtain an IP address automatically. • If you have a static IP address click Use the following IP Address and fill in the IP address, Subnet mask, and Default gateway fields. •...
  • Page 218 Appendix A Setting up Your Computer’s IP Address • Click OK when finished. Figure 96 Windows XP: Advanced TCP/IP Properties In the Internet Protocol TCP/IP Properties window (the General tab in Windows XP): • Click Obtain DNS server address automatically if you do not know your DNS server IP address(es).
  • Page 219 Appendix A Setting up Your Computer’s IP Address If you have previously configured DNS servers, click Advanced and then the DNS tab to order them. Figure 97 Windows XP: Internet Protocol (TCP/IP) Properties Click OK to close the Internet Protocol (TCP/IP) Properties window. Click Close (OK in Windows 2000/NT) to close the Local Area Connection Properties window.
  • Page 220 Appendix A Setting up Your Computer’s IP Address Click the Start icon, Control Panel. Figure 98 Windows Vista: Start Menu In the Control Panel, double-click Network and Internet. Figure 99 Windows Vista: Control Panel Click Network and Sharing Center. Figure 100 Windows Vista: Network And Internet P-660H-T1v3s User’s Guide...
  • Page 221 Appendix A Setting up Your Computer’s IP Address Click Manage network connections. Figure 101 Windows Vista: Network and Sharing Center Right-click Local Area Connection and then click Properties. Note: During this procedure, click Continue whenever Windows displays a screen saying that it needs your permission to continue. Figure 102 Windows Vista: Network and Sharing Center P-660H-T1v3s User’s Guide...
  • Page 222 Appendix A Setting up Your Computer’s IP Address Select Internet Protocol Version 4 (TCP/IPv4) and click Properties. Figure 103 Windows Vista: Local Area Connection Properties The Internet Protocol Version 4 (TCP/IPv4) Properties window opens (the General tab). • If you have a dynamic IP address click Obtain an IP address automatically.
  • Page 223 Appendix A Setting up Your Computer’s IP Address • Click Advanced. Figure 104 Windows Vista: Internet Protocol Version 4 (TCP/IPv4) Properties If you do not know your gateway's IP address, remove any previously installed gateways in the IP Settings tab and click OK. Do one or more of the following if you want to configure additional IP addresses: •...
  • Page 224 Appendix A Setting up Your Computer’s IP Address • Click OK when finished. Figure 105 Windows Vista: Advanced TCP/IP Properties In the Internet Protocol Version 4 (TCP/IPv4) Properties window, (the General tab): • Click Obtain DNS server address automatically if you do not know your DNS server IP address(es).
  • Page 225 Appendix A Setting up Your Computer’s IP Address If you have previously configured DNS servers, click Advanced and then the DNS tab to order them. Figure 106 Windows Vista: Internet Protocol Version 4 (TCP/IPv4) Properties 10 Click OK to close the Internet Protocol Version 4 (TCP/IPv4) Properties window.
  • Page 226 Appendix A Setting up Your Computer’s IP Address Macintosh OS 8/9 Click the Apple menu, Control Panel and double-click TCP/IP to open the TCP/ IP Control Panel. Figure 107 Macintosh OS 8/9: Apple Menu P-660H-T1v3s User’s Guide...
  • Page 227 Appendix A Setting up Your Computer’s IP Address Select Ethernet built-in from the Connect via list. Figure 108 Macintosh OS 8/9: TCP/IP For dynamically assigned settings, select Using DHCP Server from the Configure: list. For statically assigned settings, do the following: •...
  • Page 228 Appendix A Setting up Your Computer’s IP Address Macintosh OS X Click the Apple menu, and click System Preferences to open the System Preferences window. Figure 109 Macintosh OS X: Apple Menu Click Network in the icon bar. • Select Automatic from the Location list. •...
  • Page 229 Appendix A Setting up Your Computer’s IP Address • From the Configure box, select Manually. • Type your IP address in the IP Address box. • Type your subnet mask in the Subnet mask box. • Type the IP address of your P-660H-T1v3s in the Router address box. Click Apply Now and close the window.
  • Page 230 Appendix A Setting up Your Computer’s IP Address Double-click on the profile of the network card you wish to configure. The Ethernet Device General screen displays as shown. Figure 112 Red Hat 9.0: KDE: Ethernet Device: General • If you have a dynamic IP address, click Automatically obtain IP address settings with and select dhcp from the drop down list.
  • Page 231 Appendix A Setting up Your Computer’s IP Address Click the Activate button to apply the changes. The following screen displays. Click Yes to save the changes in all screens. Figure 114 Red Hat 9.0: KDE: Network Configuration: Activate After the network card restart process is complete, make sure the Status is Active in the Network Configuration screen.
  • Page 232 Appendix A Setting up Your Computer’s IP Address • If you have a static IP address, enter static in the BOOTPROTO= field. Type IPADDR= followed by the IP address (in dotted decimal notation) and type NETMASK= followed by the subnet mask. The following example shows an example where the static IP address is 192.168.1.10 and the subnet mask is 255.255.255.0.
  • Page 233 Appendix A Setting up Your Computer’s IP Address Verifying Settings Enter ifconfig in a terminal screen to check your TCP/IP properties. Figure 119 Red Hat 9.0: Checking TCP/IP Properties [root@localhost]# ifconfig eth0 Link encap:Ethernet HWaddr 00:50:BA:72:5B:44 inet addr:172.23.19.129 Bcast:172.23.19.255 Mask:255.255.255.0 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1...
  • Page 234 Appendix A Setting up Your Computer’s IP Address P-660H-T1v3s User’s Guide...
  • Page 235: Appendix B Pop-Up Windows, Javascripts And Java Permissions

    P P E N D I X Pop-up Windows, JavaScripts and Java Permissions In order to use the web configurator you need to allow: • Web browser pop-up windows from your device. • JavaScripts (enabled by default). • Java permissions (enabled by default). Note: Internet Explorer 6 screens are used here.
  • Page 236 Appendix B Pop-up Windows, JavaScripts and Java Permissions In Internet Explorer, select Tools, Internet Options, Privacy. Clear the Block pop-ups check box in the Pop-up Blocker section of the screen. This disables any web pop-up blockers you may have enabled. Figure 121 Internet Options: Privacy Click Apply to save this setting.
  • Page 237 Appendix B Pop-up Windows, JavaScripts and Java Permissions Select Settings…to open the Pop-up Blocker Settings screen. Figure 122 Internet Options: Privacy Type the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”. For example, http://192.168.167.1. P-660H-T1v3s User’s Guide...
  • Page 238 Appendix B Pop-up Windows, JavaScripts and Java Permissions Click Add to move the IP address to the list of Allowed sites. Figure 123 Pop-up Blocker Settings Click Close to return to the Privacy screen. Click Apply to save this setting. JavaScripts If pages of the web configurator do not display properly in Internet Explorer, check that JavaScripts are allowed.
  • Page 239 Appendix B Pop-up Windows, JavaScripts and Java Permissions In Internet Explorer, click Tools, Internet Options and then the Security tab. Figure 124 Internet Options: Security Click the Custom Level... button. Scroll down to Scripting. Under Active scripting make sure that Enable is selected (the default). Under Scripting of Java applets make sure that Enable is selected (the default).
  • Page 240 Appendix B Pop-up Windows, JavaScripts and Java Permissions Click OK to close the window. Figure 125 Security Settings - Java Scripting Java Permissions From Internet Explorer, click Tools, Internet Options and then the Security tab. Click the Custom Level... button. Scroll down to Microsoft VM.
  • Page 241 Appendix B Pop-up Windows, JavaScripts and Java Permissions Click OK to close the window. Figure 126 Security Settings - Java JAVA (Sun) From Internet Explorer, click Tools, Internet Options and then the Advanced tab. Make sure that Use Java 2 for <applet> under Java (Sun) is selected. P-660H-T1v3s User’s Guide...
  • Page 242 Appendix B Pop-up Windows, JavaScripts and Java Permissions Click OK to close the window. Figure 127 Java (Sun) Mozilla Firefox Mozilla Firefox 2.0 screens are used here. Screens for other versions may vary. You can enable Java, Javascripts and pop-ups in one screen. Click Tools, then click Options in the screen that appears.
  • Page 243 Appendix B Pop-up Windows, JavaScripts and Java Permissions Click Content.to show the screen below. Select the check boxes as shown in the following screen. Figure 129 Mozilla Firefox Content Security P-660H-T1v3s User’s Guide...
  • Page 244 Appendix B Pop-up Windows, JavaScripts and Java Permissions P-660H-T1v3s User’s Guide...
  • Page 245: Appendix C Ip Addresses And Subnetting

    P P E N D I X IP Addresses and Subnetting This appendix introduces IP addresses and subnet masks. IP addresses identify individual devices on a network. Every networking device (including computers, servers, routers, printers, etc.) needs an IP address to communicate across the network.
  • Page 246 Appendix C IP Addresses and Subnetting The following figure shows an example IP address in which the first three octets (192.168.1) are the network number, and the fourth octet (16) is the host ID. Figure 130 Network Number and Host ID How much of the IP address is the network number and how much is the host ID varies according to the subnet mask.
  • Page 247 Appendix C IP Addresses and Subnetting By convention, subnet masks always consist of a continuous sequence of ones beginning from the leftmost bit of the mask, followed by a continuous sequence of zeros, for a total number of 32 bits. Subnet masks can be referred to by the size of the network number part (the bits with a “1”...
  • Page 248 Appendix C IP Addresses and Subnetting Notation Since the mask is always a continuous number of ones beginning from the left, followed by a continuous number of zeros for the remainder of the 32 bit mask, you can simply specify the number of ones instead of writing the value of each octet.
  • Page 249 Appendix C IP Addresses and Subnetting The following figure shows the company network before subnetting. Figure 131 Subnetting Example: Before Subnetting You can “borrow” one of the host ID bits to divide the network 192.168.1.0 into two separate sub-networks. The subnet mask is now 25 bits (255.255.255.128 or /25).
  • Page 250 Appendix C IP Addresses and Subnetting In a 25-bit subnet the host ID has 7 bits, so each sub-network has a maximum of – 2 or 126 possible hosts (a host ID of all zeroes is the subnet’s address itself, all ones is the subnet’s broadcast address).
  • Page 251 Appendix C IP Addresses and Subnetting Table 70 Subnet 3 LAST OCTET BIT IP/SUBNET MASK NETWORK NUMBER VALUE IP Address 192.168.1. IP Address (Binary) 11000000.10101000.00000001. 10000000 Subnet Mask (Binary) 11111111.11111111.11111111. 11000000 Subnet Address: Lowest Host ID: 192.168.1.129 192.168.1.128 Broadcast Address: Highest Host ID: 192.168.1.190 192.168.1.191 Table 71 Subnet 4...
  • Page 252 Appendix C IP Addresses and Subnetting Subnet Planning The following table is a summary for subnet planning on a network with a 24-bit network number. Table 73 24-bit Network Number Subnet Planning NO. “BORROWED” NO. HOSTS PER SUBNET MASK NO. SUBNETS HOST BITS SUBNET 255.255.255.128 (/25)
  • Page 253 Appendix C IP Addresses and Subnetting addresses, follow their instructions in selecting the IP addresses and the subnet mask. If the ISP did not explicitly give you an IP network number, then most likely you have a single user account and the ISP will assign you a dynamic IP address when the connection is established.
  • Page 254 Appendix C IP Addresses and Subnetting P-660H-T1v3s User’s Guide...
  • Page 255: Appendix D Services

    P P E N D I X Services The following table lists some commonly-used services and their associated protocols and port numbers. • Name: This is a short, descriptive name for the service. You can use this one or create a different one, if you like. •...
  • Page 256 Appendix D Services Table 75 Examples of Services NAME PROTOCOL PORT(S) DESCRIPTION User-Defined The IPSEC AH (Authentication Header) (IPSEC_TUNNEL) tunneling protocol uses this service. 5190 AOL’s Internet Messenger service. AUTH Authentication protocol used by some servers. Border Gateway Protocol. BOOTP_CLIENT DHCP Client.
  • Page 257 Appendix D Services Table 75 Examples of Services (continued) NAME PROTOCOL PORT(S) DESCRIPTION MSN Messenger 1863 Microsoft Networks’ messenger service uses this protocol. NetBIOS TCP/UDP The Network Basic Input/Output System is used for communication TCP/UDP between computers in a LAN. TCP/UDP TCP/UDP NEW-ICQ...
  • Page 258 Appendix D Services Table 75 Examples of Services (continued) NAME PROTOCOL PORT(S) DESCRIPTION SFTP The Simple File Transfer Protocol is an old way of transferring files between computers. SMTP Simple Mail Transfer Protocol is the message-exchange standard for the Internet. SMTP enables you to move messages from one e-mail server to another.
  • Page 259: Appendix E Legal Information

    ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation. All rights reserved. Disclaimer ZyXEL does not assume any liability arising out of the application or use of any products, or software described herein.
  • Page 260 Appendix E Legal Information • This device must accept any interference received, including interference that may cause undesired operations. This device has been tested and found to comply with the limits for a Class B digital device pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation.
  • Page 261 Appendix E Legal Information materials, ZyXEL will, at its discretion, repair or replace the defective products or components without charge for either parts or labor, and to whatever extent it shall deem necessary to restore the product or components to proper operating condition.
  • Page 262 Appendix E Legal Information P-660H-T1v3s User’s Guide...
  • Page 263: Index

    Index Index Numerics 76, 82 76, 81 76, 81, 86 802.1p 145, 146 76, 81 802.1Q/1P status activation group settings port settings priority PVID backup tagging frames 136, 139 configuration 184, 185, 190 broadcast activation 802.1Q/1P 76, 81, 86 dynamic DNS certifications DYNDNS wildcard notices...
  • Page 264 Index DDoS LAND attack DDoS Ping of Death default server, NAT 108, 110 status Denials of Service, see DoS SYN attack DHCP 90, 93, 98, 171 firmware 180, 187 diagnostic upgrading DiffServ Code Point, see DSCP version disclaimer forwarding ports 106, 108 activation 90, 93, 99, 157...
  • Page 265 Index nailed-up connection 74, 80, 84 Any IP 80, 105, 106, 116, 253 example activation client list address mapping DHCP rules 90, 93, 98 types 90, 93, 99 113, 114, 118 IGMP applications 90, 101 IP address IP alias 90, 91, 99 IP alias default server IP address 108, 110...
  • Page 266 Index PPPoE 73, 79, 82 private IP address product registration safety warnings 76, 81, 85 PVID Security Parameter Index, see SPI setup DHCP firewalls IP alias IP precedenceQoS IP precedence 802.1p 145, 146 IP/MAC filter activation 143, 144 port forwarding DSCP static route example...
  • Page 267 Index reset Virtual Channel Identifier, see VCI restoring configuration Virtual Local Area Network, see VLAN status 30, 33 Virtual Path Identifier, see VPI firewalls VLAN 802.1P priority activation time group settings port settings PVID tagging frames 136, 139 73, 79, 84 tagging frames 136, 139 Telnet...
  • Page 268 Index P-660H-T1v3s User’s Guide...
  • Page 269 Index P-660H-T1v3s User’s Guide...
  • Page 270 Index P-660H-T1v3s User’s Guide...
  • Page 271 Index P-660H-T1v3s User’s Guide...
  • Page 272 Index P-660H-T1v3s User’s Guide...

Table of Contents