ZyXEL Communications Prestige 661H Series Manuals

Manuals and User Guides for ZyXEL Communications Prestige 661H Series. We have 3 ZyXEL Communications Prestige 661H Series manuals available for free PDF download: User Manual, Quick Start Manual

ZyXEL Communications Prestige 661H Series User Manual (547 pages)

ADSL 2+ Security Gateway

Brand: ZyXEL Communications | Category: Gateway | Size: 15 MB

Copyright
2
Federal Communications Commission (FCC) Interference Statement
3
Safety Warnings
4
Zyxel Limited Warranty
5
Customer Support
6
Table of Contents
8
List of Figures
24
List of Tables
32
Preface
38
Introduction to DSL
40
Chapter 1 Getting to Know Your Prestige

42
- Introducing the Prestige
  42
  - Table 1 ADSL Standards
    42
  - Features of the Prestige
    43
    
    Traffic Redirect
    44
    
    Dynamic Dns Support
    45
    
    P-661HW Wireless Features
    46
  - Applications for the Prestige
    47
    
    Protected Internet Access
    47
    
    LAN to LAN Application
    48
    
    Figure 1 Protected Internet Access Applications
    48
  - Figure 2 P-661HW LAN-To-LAN Application Example
    49
  - Figure 3 P-661H Front Panel
    49
  - Figure 4 P-661HW Front Panel
    49
  - Front Panel Leds
    49
  - Table 2 Front Panel Leds
    49
Chapter 2 Introducing the Web Configurator

52
- Web Configurator Overview
  52
Chapter 3 Wizard Setup for Internet Access

58
- Introduction
  58
Chapter 4 Wizard Setup for Media Bandwidth Management

68
Chapter 5 LAN Setup

72
- LAN Overview
  72
  - Lans, Wans and the Prestige
    72
  - DHCP Setup
    72
    
    Figure 20 LAN and WAN IP Addresses
    72
    
    IP Pool Setup
    73
  - DNS Server Address
    73
  - DNS Server Address Assignment
    73
- Lan Tcp/Ip
  74
  - IP Address and Subnet Mask
    74
    
    Private IP Addresses
    74
  - RIP Setup
    75
  - Multicast
    75
  - Any IP
    76
    
    Figure 21 any IP Example
    76
    
    How any IP Works
    77
  - Configuring LAN
    77
  - Figure 22 LAN Setup
    78
  - Table 14 LAN Setup
    78
- Configuring Static DHCP
  79
- Figure 23 LAN: Static DHCP
  80
- Table 15 LAN: Static DHCP
  80
Chapter 6 Wireless LAN (Prestige 661HW)

82
- Introduction
  82
- Wireless Security Overview
  82
  - Encryption
    82
  - Authentication
    82
  - Restricted Access
    83
  - Hide Prestige Identity
    83
  - Configuring Wireless LAN on the Prestige
    83
- Configuring the Wireless Screen
  84
  - WEP Encryption
    84
  - Wireless G
    84
  - Figure 24 Wireless Security Methods
    84
  - Figure 25 Wireless Screen
    85
  - Table 16 Wireless LAN
    85
- Configuring MAC Filters
  87
- Figure 26 MAC Address Filter
  87
- Introduction to WPA
  88
- Configuring IEEE 802.1X and WPA
  90
- Configuring Local User Authentication
  96
- Figure 34 Local User Database
  96
- Table 22 Local User Database
  96
- Configuring RADIUS
  97
- Figure 35 RADIUS
  97
- Table 23 RADIUS
  97
- Introduction to OTIST
  98
  - Enabling OTIST
    98
    
    Figure 36 OTIST
    99
    
    Table 24 OTIST
    99
    
    Wireless Client
    100
  - Starting OTIST
    100
  - Figure 37 Example Wireless Client OTIST Screen
    100
  - Figure 38 Security Key
    100
  - Figure 39 OTIST in Progress (Prestige)
    100
  - Figure 40 OTIST in Progress (Client)
    100
  - Notes on OTIST
    101
  - Figure 41 no AP with OTIST Found
    101
  - Figure 42 Start OTIST
    101
Chapter 7 WAN Setup

102
- WAN Overview
  102
  - Encapsulation
    102
    
    Enet Encap
    102
    
    PPP over Ethernet
    102
    
    Pppoa
    102
    
    Rfc 1483
    103
  - Multiplexing
    103
    
    VC-Based Multiplexing
    103
    
    LLC-Based Multiplexing
    103
  - VPI and VCI
    103
  - IP Address Assignment
    103
    
    IP Assignment with Pppoa or Pppoe Encapsulation
    103
    
    IP Assignment with RFC 1483 Encapsulation
    104
    
    IP Assignment with ENET ENCAP Encapsulation
    104
  - Nailed-Up Connection (PPP)
    104
  - Nat
    104
- Metric
  104
- Pppoe Encapsulation
  105
- Traffic Shaping
  105
- Zero Configuration Internet Access
  106
- Figure 43 Example of Traffic Shaping
  106
- Configuring WAN Setup
  107
- Figure 44 WAN Setup (Pppoe)
  108
- Table 25 WAN Setup
  108
- Traffic Redirect
  110
- Configuring WAN Backup
  111
- Figure 45 Traffic Redirect Example
  111
- Figure 46 Traffic Redirect LAN Setup
  111
- Figure 47 WAN Backup
  112
- Table 26 WAN Backup
  112
Chapter 8 Network Address Translation (NAT) Screens

114
- NAT Overview
  114
  - NAT Definitions
    114
  - Table 27 NAT Definitions
    114
  - What NAT Does
    115
  - How NAT Works
    115
  - NAT Application
    116
  - Figure 48 How NAT Works
    116
  - Figure 49 NAT Application with IP Alias
    116
  - NAT Mapping Types
    117
  - Table 28 NAT Mapping Types
    117
- SUA (Single User Account) Versus NAT
  118
- SUA Server
  118
- Selecting the NAT Mode
  119
- Figure 50 Multiple Servers Behind NAT Example
  119
- Configuring SUA Server
  120
- Figure 51 NAT Mode
  120
- Table 30 NAT Mode
  120
- Figure 52 Edit SUA/NAT Server Set
  121
- Table 31 Edit SUA/NAT Server Set
  121
- Configuring Address Mapping
  122
- Figure 53 Address Mapping Rules
  122
- Table 32 Address Mapping Rules
  122
- Editing an Address Mapping Rule
  123
- Figure 54 Address Mapping Rule Edit
  123
- Table 33 Address Mapping Rule Edit
  124
Chapter 9 Dynamic DNS Setup

126
- Dynamic DNS
  126
  - DYNDNS Wildcard
    126
- Configuring Dynamic DNS
  126
- Figure 55 Dynamic DNS
  127
- Table 34 Dynamic DNS
  127
Chapter 10 Time and Date

128
- Configuring Time and Date
  128
- Figure 56 Time and Date
  128
- Table 35 Time and Date
  129
Chapter 11 Firewalls

130
- Firewall Overview
  130
- Types of Firewalls
  130
  - Packet Filtering Firewalls
    130
  - Application-Level Firewalls
    130
  - Stateful Inspection Firewalls
    131
- Introduction to Zyxel's Firewall
  131
  - Denial of Service Attacks
    132
- Denial of Service
  132
  - Basics
    132
  - Figure 57 Prestige Firewall Application
    132
  - Types of Dos Attacks
    133
    
    Table 36 Common IP Ports
    133
    
    Figure 58 Three-Way Handshake
    134
    
    Figure 59 SYN Flood
    134
    
    Figure 60 Smurf Attack
    135
    
    ICMP Vulnerability
    135
    
    Illegal Commands (Netbios and SMTP)
    135
    
    Table 37 ICMP Commands that Trigger Alerts
    135
    
    Table 38 Legal Netbios Commands
    135
    
    Traceroute
    136
- Stateful Inspection
  136
  - Table 39 Legal SMTP Commands
    136
  - Figure 61 Stateful Inspection
    137
  - Stateful Inspection Process
    137
  - Stateful Inspection and the Prestige
    138
  - TCP Security
    138
  - UDP/ICMP Security
    139
  - Upper Layer Protocols
    139
- Guidelines for Enhancing Security with Your Firewall
  139
  - Security in General
    140
- Packet Filtering Vs Firewall
  141
  - Packet Filtering
    141
    
    When to Use Filtering
    141
  - Firewall
    141
    
    When to Use the Firewall
    141
Chapter 12 Firewall Configuration

144
- Access Methods
  144
- Firewall Policies Overview
  144
- Rule Logic Overview
  145
  - Rule Checklist
    145
  - Security Ramifications
    145
  - Key Fields for Configuring Rules
    146
    
    Action
    146
    
    Service
    146
    
    Source Address
    146
    
    Destination Address
    146
- Connection Direction
  146
  - LAN to WAN Rules
    146
  - Alerts
    147
- Configuring Basic Firewall Settings
  147
- Figure 62 Firewall: Default Policy
  147
- Table 40 Firewall: Default Policy
  147
- Rule Summary
  148
  - Figure 63 Firewall: Rule Summary
    148
  - Table 41 Rule Summary
    149
  - Configuring Firewall Rules
    150
  - Figure 64 Firewall: Edit Rule
    151
  - Table 42 Firewall: Edit Rule
    152
- Customized Services
  153
- Creating/Editing a Customized Service
  153
- Figure 65 Firewall: Customized Services
  153
- Table 43 Customized Services
  153
- Example Firewall Rule
  154
- Figure 66 Firewall: Configure Customized Services
  154
- Table 44 Firewall: Configure Customized Services
  154
- Figure 67 Firewall Example: Rule Summary
  155
- Figure 68 Firewall Example: Edit Rule: Destination Address
  156
- Figure 69 Edit Custom Port Example
  156
- Figure 70 Firewall Example: Edit Rule: Select Customized Services
  157
- Predefined Services
  158
- Figure 71 Firewall Example: Rule Summary: My Service
  158
- Table 45 Predefined Services
  158
- Anti-Probing
  160
- Dos Thresholds
  161
  - Figure 72 Firewall: Anti Probing
    161
  - Table 46 Firewall: Anti Probing
    161
  - Half-Open Sessions
    162
    
    TCP Maximum Incomplete and Blocking Time
    162
    
    Figure 73 Firewall: Threshold
    163
    
    Table 47 Firewall: Threshold
    163
  - Threshold Values
    162
Chapter 13 Content Filtering

166
- Content Filtering Overview
  166
- Configuring Keyword Blocking
  166
- Figure 74 Content Filter: Keyword
  166
- Configuring the Schedule
  167
- Figure 75 Content Filter: Schedule
  167
- Table 48 Content Filter: Keyword
  167
- Configuring Trusted Computers
  168
- Figure 76 Content Filter: Trusted
  168
- Table 49 Content Filter: Schedule
  168
- Table 50 Content Filter: Trusted
  168
Chapter 14 Introduction to Ipsec

170
- VPN Overview
  170
  - Ipsec
    170
  - Security Association
    170
  - Other Terminology
    170
    
    Encryption
    170
    
    Data Confidentiality
    171
    
    Data Integrity
    171
    
    Data Origin Authentication
    171
  - VPN Applications
    171
- Ipsec Architecture
  171
  - Figure 77 Encryption and Decryption
    171
  - Ipsec Algorithms
    172
  - Key Management
    172
- Encapsulation
  172
  - Figure 78 Ipsec Architecture
    172
  - Transport Mode
    173
  - Tunnel Mode
    173
- Ipsec and NAT
  173
- Figure 79 Transport and Tunnel Mode Ipsec Encapsulation
  173
- Table 51 VPN and NAT
  174
Chapter 15 VPN Screens

176
- Vpn/Ipsec Overview
  176
- Ipsec Algorithms
  176
  - AH (Authentication Header) Protocol
    176
  - ESP (Encapsulating Security Payload) Protocol
    177
- My IP Address
  177
- Table 52 AH and ESP
  177
- Secure Gateway Address
  178
  - Dynamic Secure Gateway Address
    178
- VPN Summary Screen
  178
- Figure 80 Ipsec Summary Fields
  179
- Figure 81 VPN Summary
  179
- Table 53 VPN Summary
  179
- Keep Alive
  180
- Remote DNS Server
  180
- ID Type and Content
  181
- Pre-Shared Key
  183
- Editing VPN Policies
  183
- Table 57 Mismatching ID Type and Content Configuration Example
  183
- Figure 83 VPN IKE
  184
- Table 58 VPN IKE
  185
- IKE Phases
  188
  - Figure 84 Two Phases to Set up the Ipsec SA
    188
  - Diffie-Hellman (DH) Key Groups
    189
  - Negotiation Mode
    189
  - Perfect Forward Secrecy (PFS)
    190
- Configuring Advanced IKE Settings
  190
- Figure 85 VPN IKE: Advanced Setup
  191
- Table 59 VPN IKE: Advanced Setup
  191
- Manual Key Setup
  193
  - Security Parameter Index (SPI)
    193
- Configuring Manual Key
  194
- Figure 86 VPN: Manual Key
  194
- Table 60 VPN: Manual Key
  195
- Viewing SA Monitor
  197
- Figure 87 VPN: SA Monitor
  197
- Configuring Global Setting
  198
- Figure 88 VPN: Global Setting
  198
- Table 61 VPN: SA Monitor
  198
- Table 62 VPN: Global Setting
  198
- Telecommuter Vpn/Ipsec Examples
  199
- VPN and Remote Management
  202
Chapter 16 Remote Management Configuration

204
- Remote Management Overview
  204
  - Remote Management Limitations
    204
  - Remote Management and NAT
    205
  - System Timeout
    205
- Telnet
  205
- Ftp
  205
- Figure 91 Telnet Configuration on a TCP/IP Network
  205
- Web
  206
- Configuring Remote Management
  206
- Figure 92 Remote Management
  206
- Table 65 Remote Management
  206
Chapter 17 Universal Plug-And-Play (Upnp)

208
Chapter 18 Logs Screens

222
- Logs Overview
  222
  - Alerts and Logs
    222
- Configuring Log Settings
  222
- Figure 108 Log Settings
  223
- Table 67 Log Settings
  223
- Displaying the Logs
  224
- SMTP Error Messages
  225
  - Figure 109 View Logs
    225
  - Table 68 View Logs
    225
  - Table 69 SMTP Error Messages
    225
  - Example E-Mail Log
    226
  - Figure 110 E-Mail Log Example
    226
Chapter 19 Media Bandwidth Management Advanced Setup

228
Chapter 20 Trend Micro Security Services

242
- Trend Micro Security Services Overview
  242
  - TMSS Web Page
    242
  - Figure 121 TMSS First Time Access
    242
  - Figure 122 Download Activex to View TMSS Web Page
    243
  - Figure 123 TMSS Web Page (Dashboard)
    243
  - Figure 124 TMSS Service Summary
    243
  - Figure 125 TMSS 3 Steps
    244
  - Figure 126 TMSS Registration Form
    244
- Configuring TMSS on the Prestige
  245
- Configuring Virus Protection
  247
- Figure 131 Virus Protection
  247
- Table 77 Service Settings
  247
- Table 78 Virus Protection
  248
- Parental Controls Configuration
  249
Chapter 21 Maintenance

254
- Maintenance Overview
  254
- System Status Screen
  254
  - Figure 135 System Status
    255
  - Table 81 System Status
    255
  - System Statistics
    256
  - Figure 136 System Status: Show Statistics
    257
  - Table 82 System Status: Show Statistics
    257
- DHCP Table Screen
  258
- Figure 137 DHCP Table
  258
- Table 83 DHCP Table
  258
- Any IP Table Screen
  259
- Wireless Screen
  259
  - Association List
    259
  - Figure 138 any IP Table
    259
  - Table 84 any IP Table
    259
- Diagnostic Screens
  260
  - Diagnostic General Screen
    260
  - Figure 139 Association List
    260
  - Table 85 Association List
    260
  - Diagnostic DSL Line Screen
    261
  - Figure 140 Diagnostic: General
    261
  - Table 86 Diagnostic: General
    261
  - Figure 141 Diagnostic: DSL Line
    262
  - Table 87 Diagnostic: DSL Line
    262
- Firmware Screen
  263
- Figure 142 Firmware Upgrade
  263
- Table 88 Firmware Upgrade
  263
- Figure 143 Network Temporarily Disconnected
  264
- Figure 144 Error Message
  264
Chapter 22 Introducing the SMT

266
- SMT Introduction
  266
  - Procedure for SMT Configuration Via Telnet
    266
  - Entering Password
    266
  - Prestige SMT Menus Overview
    267
  - Figure 145 Login Screen
    267
  - Table 89 SMT Menus Overview
    267
- Navigating the SMT Interface
  268
- Changing the System Password
  270
- Table 92 Main Menu Summary
  270
- Figure 146 Menu 23.1 Change Password
  271
Chapter 23 Menu 1 General Setup

272
- General Setup
  272
- Procedure to Configure Menu 1
  272
Chapter 24 Menu 2 WAN Backup Setup

276
- Introduction to WAN Backup Setup
  276
- Configuring WAN Backup in Menu 2
  276
Chapter 25 Menu 3 LAN Setup

280
- LAN Setup
  280
  - General Ethernet Setup
    280
  - Figure 151 Menu 3 LAN Setup
    280
  - Figure 152 Menu 3.1 LAN Port Filter Setup
    280
- Protocol Dependent Ethernet Setup
  281
- TCP/IP Ethernet Setup and DHCP
  281
- Figure 153 Menu 3.2 TCP/IP and DHCP Ethernet Setup
  281
- Table 97 DHCP Ethernet Setup
  282
- Table 98 TCP/IP Ethernet Setup
  282
Chapter 26 Wireless LAN Setup

284
- Wireless LAN Overview
  284
- Wireless LAN Setup
  284
Chapter 27 Internet Access

288
- Internet Access Overview
  288
- IP Policies
  288
- IP Alias
  288
- IP Alias Setup
  289
- Figure 156 IP Alias Network Example
  289
- Figure 157 Menu 3.2 TCP/IP and DHCP Setup
  289
- Route IP Setup
  290
- Figure 158 Menu 3.2.1 IP Alias Setup
  290
- Table 101 Menu 3.2.1 IP Alias Setup
  290
- Internet Access Configuration
  291
- Figure 159 Menu 1 General Setup
  291
- Figure 160 Menu 4 Internet Access Setup
  291
- Table 102 Menu 4 Internet Access Setup
  292
Chapter 28 Remote Node Configuration

294
Chapter 29 Static Route Setup

304
Chapter 30 Bridging Setup

308
Chapter 31 Network Address Translation (NAT)

312
Chapter 32 Enabling the Firewall

328
- Remote Management and the Firewall
  328
- Access Methods
  328
- Enabling the Firewall
  328
- Figure 200 Menu 21.2 Firewall Setup
  329
Chapter 33 Filter Configuration

330
Chapter 34 SNMP Configuration

344
- About SNMP
  344
- Figure 216 SNMP Management Model
  344
- Supported Mibs
  345
- SNMP Configuration
  345
- SNMP Traps
  346
- Figure 217 Menu 22 SNMP Configuration
  346
- Table 118 Menu 22 SNMP Configuration
  346
- Table 119 SNMP Traps
  346
- Table 120 Ports and Permanent Virtual Circuits
  347
Chapter 35 System Security

348
Chapter 36 System Information and Diagnosis

354
Chapter 37 Firmware and Configuration File Maintenance

364
Chapter 38 System Maintenance

376
Chapter 39 Remote Management

382
- Remote Management Overview
  382
- Remote Management
  382
- Remote Management and NAT
  384
- System Timeout
  384
Chapter 40 IP Policy Routing

386
Chapter 41 Call Scheduling

396
Chapter 42 Vpn/Ipsec Setup

400
- Vpn/Ipsec Overview
  400
- Ipsec Summary Screen
  400
- Figure 260 Menu 27 Vpn/Ipsec Setup
  400
- Figure 261 Menu 27.1 Ipsec Summary
  401
- Table 137 Menu 27.1 Ipsec Summary
  401
- Ipsec Setup
  403
- Figure 262 Menu 27.1.1 Ipsec Setup
  403
- Table 138 Menu 27.1.1 Ipsec Setup
  403
- IKE Setup
  406
- Figure 263 Menu 27.1.1.1KE Setup
  407
- Table 139 Menu 27.1.1.1 IKE Setup
  407
- Manual Setup
  408
Chapter 43 SA Monitor

412
- SA Monitor Overview
  412
- Using SA Monitor
  412
- Figure 265 Menu 27.2 SA Monitor
  413
- Table 142 Menu 27.2 SA Monitor
  413
Chapter 44 Troubleshooting

416
- Problems Starting up the Prestige
  416
- Problems with the LAN
  416
- Table 143 Troubleshooting Starting up Your Prestige
  416
- Table 144 Troubleshooting the LAN
  416
- Problems with the WAN
  417
- Table 145 Troubleshooting the WAN
  417
- Problems Accessing the Prestige
  418
  - Pop-Up Windows, Javascripts and Java Permissions
    418
    
    Internet Explorer Pop-Up Blockers
    418
    
    Table 146 Troubleshooting Accessing the Prestige
    418
    
    Figure 266 Pop-Up Blocker
    419
    
    Figure 267 Internet Options
    419
    
    Figure 268 Internet Options
    420
    
    Javascripts
    421
    
    Figure 269 Pop-Up Blocker Settings
    421
    
    Figure 270 Internet Options
    422
    
    Java Permissions
    423
    
    Figure 271 Security Settings - Java Scripting
    423
    
    Figure 272 Security Settings - Java
    424
  - Activex Controls in Internet Explorer
    425
  - Figure 273 Java (Sun)
    425
  - Figure 274 Internet Options Security
    426
  - Figure 275 Security Setting Activex Controls
    427
- Product Specifications
  428

ZyXEL Communications Prestige 661H Series Quick Start Manual (19 pages)

ADSL/(WLAN) Router

Brand: ZyXEL Communications | Category: Network Router | Size: 1 MB

ZyXEL Communications Prestige 661H Series Quick Start Manual (13 pages)

ADSL 2+ Gateway

Brand: ZyXEL Communications | Category: Gateway | Size: 1 MB

ZyXEL Communications Categories

Gateway

Network Router

Switch Wireless Router Adapter

More ZyXEL Communications Manuals

ZyXEL Communications Prestige 661H Series Manuals

ZyXEL Communications Prestige 661H Series User Manual (547 pages)

Table of Contents

Chapter 1 Getting to Know Your Prestige

Chapter 2 Introducing the Web Configurator

Chapter 3 Wizard Setup for Internet Access

Chapter 4 Wizard Setup for Media Bandwidth Management

Chapter 5 LAN Setup

Chapter 6 Wireless LAN (Prestige 661HW)

Chapter 7 WAN Setup

Chapter 8 Network Address Translation (NAT) Screens

Chapter 9 Dynamic DNS Setup

Chapter 10 Time and Date

Chapter 11 Firewalls

Chapter 12 Firewall Configuration

Chapter 13 Content Filtering

Chapter 14 Introduction to Ipsec

Chapter 15 VPN Screens

Chapter 16 Remote Management Configuration

Chapter 17 Universal Plug-And-Play (Upnp)

Chapter 18 Logs Screens

Chapter 19 Media Bandwidth Management Advanced Setup

Chapter 20 Trend Micro Security Services

Chapter 21 Maintenance

Chapter 22 Introducing the SMT

Chapter 23 Menu 1 General Setup

Chapter 24 Menu 2 WAN Backup Setup

Chapter 25 Menu 3 LAN Setup

Chapter 26 Wireless LAN Setup

Chapter 27 Internet Access

Chapter 28 Remote Node Configuration

Chapter 29 Static Route Setup

Chapter 30 Bridging Setup

Chapter 31 Network Address Translation (NAT)

Chapter 32 Enabling the Firewall

Chapter 33 Filter Configuration

Chapter 34 SNMP Configuration

Chapter 35 System Security

Chapter 36 System Information and Diagnosis

Chapter 37 Firmware and Configuration File Maintenance

Chapter 38 System Maintenance

Chapter 39 Remote Management

Chapter 40 IP Policy Routing

Chapter 41 Call Scheduling

Chapter 42 Vpn/Ipsec Setup

Chapter 43 SA Monitor

Chapter 44 Troubleshooting

ZyXEL Communications Prestige 661H Series Quick Start Manual (19 pages)

Table of Contents

ZyXEL Communications Prestige 661H Series Quick Start Manual (13 pages)

Table of Contents

Related Products

ZyXEL Communications Categories