P-330W 802.11g Secure Wireless Internet Sharing Router User’s Guide Version 1.
ZyXEL P-330W User’s Guide Copyright Copyright © 2005 by ZyXEL Communications Corporation. The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation.
ZyXEL P-330W User’s Guide Federal Communications Commission (FCC) Interference Statement This device complies with Part 15 of FCC rules. Operation is subject to the following two conditions: • This device may not cause harmful interference. • This device must accept any interference received, including interference that may cause undesired operations. This equipment has been tested and found to comply with the limits for a Class B digital device pursuant to Part 15 of the FCC Rules.
ZyXEL P-330W User’s Guide ZyXEL Limited Warranty ZyXEL warrants to the original end user (purchaser) that this product is free from any defects in materials or workmanship for a period of up to two years from the date of purchase.
ZyXEL P-330W User’s Guide Customer Support Please have the following information ready when you contact customer support. • • • • Product model and serial number. Warranty Information. Date that you received your device. Brief description of the problem and the steps you took to solve it. METHOD SUPPORT E-MAIL TELEPHONE WEB SITE LOCATION SALES E-MAIL FAX FTP SITE support@zyxel.com +1-800-255-4101 +1-714-632-0882 www.us.zyxel.com sales@zyxel.com +1-714-632-0858 ftp.us.zyxel.
ZyXEL P-330W User’s Guide Table of Contents Copyright .................................................................................................................. 2 Federal Communications Commission (FCC) Interference Statement ............... 3 ZyXEL Limited Warranty.......................................................................................... 4 Customer Support.................................................................................................... 5 Preface ................
ZyXEL P-330W User’s Guide 1.3.2 Internet Access Application ......................................................................22 Chapter 2 Introducing the Web Configurator........................................................................ 24 2.1 Web Configurator Overview ...............................................................................24 2.2 Accessing the P-330W Web Configurator ..........................................................24 2.2.0.1 Resetting the P-330W ...............
ZyXEL P-330W User’s Guide Chapter 5 Wireless .................................................................................................................. 44 5.1 Wireless LAN Overview .....................................................................................44 5.1.1 IBSS ..........................................................................................................44 5.1.2 BSS ........................................................................................................
ZyXEL P-330W User’s Guide 6.7 WAN Port ...........................................................................................................73 6.7.1 Static IP Encapsulation .............................................................................73 6.7.2 DHCP IP Encapsulation ............................................................................75 6.7.3 PPPoE Encapsulation ...............................................................................76 6.7.4 PPTP Encapsulation ............
ZyXEL P-330W User’s Guide List of Figures Figure 1 Secure Internet Access via Cable, DSL or Wireless Modem ................................ 22 Figure 2 Internet Access Application Example .................................................................... 22 Figure 3 The MAIN MENU Screen of the Web Configurator ............................................... 25 Figure 4 Wizard 2: DHCP Client Encapsulation ..................................................................
ZyXEL P-330W User’s Guide Figure 37 The Advanced Menu Options ............................................................................. 66 Figure 38 Advanced: Access Control .................................................................................. 67 Figure 39 Advanced: Dynamic DNS ................................................................................... 68 Figure 40 Advanced: DMZ ..................................................................................................
ZyXEL P-330W User’s Guide Figure 80 Macintosh OS X: Network ................................................................................... 112 Figure 81 Peer-to-Peer Communication in an Ad-hoc Network .......................................... 115 Figure 82 ESS Provides Campus-Wide Coverage ............................................................. 116 Figure 83 Sequences for EAP MD5–Challenge Authentication ..........................................
ZyXEL P-330W User’s Guide 13 List of Figures
ZyXEL P-330W User’s Guide List of Tables Table 1 IEEE 802.11b ......................................................................................................... 19 Table 2 IEEE 802.11g ......................................................................................................... 20 Table 3 Screens Summary ................................................................................................. 26 Table 4 Wizard 2: Ethernet Encapsulation ...........................................
ZyXEL P-330W User’s Guide Table 37 Advanced: Ping ................................................................................................... 83 Table 38 Advanced: DoS .................................................................................................... 84 Table 39 Advanced: Diagnostic .......................................................................................... 85 Table 40 Administrator: Remote Management .................................................................
ZyXEL P-330W User’s Guide Preface Congratulations on your purchase of the P-330W, 802.11g Secure Wireless Internet Sharing Router. This manual is designed to guide you through the configuration of your P-330W for its various applications. This manual may refer to the P-330W or 802.11g Secure Wireless Internet Sharing Router as the router. Note: Register your product online to receive e-mail notices of firmware upgrades and information at www.us.zyxel.com.
ZyXEL P-330W User’s Guide Graphics Icons Key P-330W Computer Notebook computer Server DSLAM Firewall Modem Switch Router Wireless Signal 17 Preface
ZyXELP-330W User’s Guide CHAPTER 1 Getting to Know Your P-330W This chapter introduces the main features and applications of the P-330W. 1.1 P-330W Internet Security Gateway Overview The P-330W is the ideal secure gateway for all data passing between the Internet and LAN’s. By integrating NAT, firewall, wireless access point and 4-port switch, ZyXEL’s P-330W is a complete security solution that protects your Intranet and efficiently manages data traffic on your network.
ZyXEL P-330W User’s Guide 1.2.1.4 Time and Date The P-330W allows you to get the current time and date from an external server when you turn on your P-330W. You can also set the time manually. 1.2.1.5 Reset Button The P-330W reset button is built into the rear panel. You can use this button to either cause the P-330W to reboot, or to reset the P-330W to factor defaults. Use this button to restore the factory default password to 1234; IP address to 192.168.1.1, subnet mask to 255.255.255.
ZyXELP-330W User’s Guide 1.2.3.3 802.11g Wireless LAN Standard The P-330W, complies with the 802.11g wireless standard and is also fully compatible with the 802.11b standard. This means an 802.11b radio card can interface directly with an 802.11g device (and vice versa) at 11 Mbps or lower depending on range. 802.11g has several intermediate rate steps between the maximum and minimum data rates. The 802.11g data rate and modulation are as follows: Table 2 IEEE 802.
ZyXEL P-330W User’s Guide 1.2.3.9 Network Address Translation (NAT) Network Address Translation (NAT) allows the translation of an Internet protocol address used within one network (for example a private IP address used in a local network) to a different IP address known within another network (for example a public IP address used on the Internet). 1.2.3.10 Port Forwarding Use this feature to forward incoming service requests to a server on your local network.
ZyXELP-330W User’s Guide Figure 1 Secure Internet Access via Cable, DSL or Wireless Modem 1.3.2 Internet Access Application Add a wireless LAN to your existing network without expensive network cables. Wireless stations can move freely anywhere in the coverage area and use resources on the wired network.
ZyXEL P-330W User’s Guide 23 Chapter 1 Getting to Know Your P-330W
ZyXELP-330W User’s Guide CHAPTER 2 Introducing the Web Configurator This chapter describes how to access the P-330W web configurator and provides an overview of its screens. 2.1 Web Configurator Overview The embedded web configurator allows you to manage the P-330W from anywhere through a browser such as Microsoft Internet Explorer or Netscape Navigator. Use Internet Explorer 6.0 and later or Netscape Navigator 7.0 and later versions with JavaScript enabled.
ZyXEL P-330W User’s Guide 2.2.0.1.1 Procedure To Use The Reset Button 1 Make sure the PWR LED is on (not blinking). 2 Press the RESET button for approximately ten seconds or until the PWR LED begins to blink and then release it. When the PWR LED begins to blink, the defaults have been restored and the P-330W restarts. (If you press the RESET button for less than 5 seconds, the P-330W will reboot, but will not reset the configuration). 2.2.
ZyXELP-330W User’s Guide The following table describes the sub-menus. Table 3 Screens Summary LINK TAB FUNCTION SETUP WIZARD Use these screens for initial configuration including general setup, Wireless LAN setup, ISP parameters for Internet Access and WAN IP/DNS Server/MAC address assignment. OPERATION MODE Use this screen to switch the P-330W between gateway, bridge, and wireless client mode.
ZyXEL P-330W User’s Guide Table 3 Screens Summary LINK TAB FUNCTION Administrator Statistics This screen contains administrative and system-related information. Time Zone Setting Use this screen to change your P-330W’s time and date or enable NTP server use. Upgrade Firmware Use this screen to upload firmware to your P-330W. LOG OUT 27 Click this label to exit the web configurator.
ZyXELP-330W User’s Guide CHAPTER 3 Wizard Setup This chapter provides information on the Wizard Setup screens in the web configurator. 3.1 Wizard Setup Overview The web configurator’s setup wizard helps you configure your device to access the Internet. The second screen has five variations depending on what encapsulation type you use. Refer to your ISP checklist in the Quick Start Guide to know what to enter in each field. Leave a field blank if you don’t have that information.
ZyXEL P-330W User’s Guide Figure 5 Wizard 2: Static IP Encapsulation The following table describes the labels in this screen. Table 4 Wizard 2: Ethernet Encapsulation LABEL DESCRIPTION ISP Parameters for Internet Access IP Address The fixed IP address should be in the same subnet as your broadband modem or router. This should be provided to you by your ISP Subnet Mask Enter a Subnet Mask appropriate to your network.
ZyXELP-330W User’s Guide One of the benefits of PPPoE is the ability to let end users access one of multiple network services, a function known as dynamic service selection. This enables the service provider to easily create and offer new IP services for specific users. Operationally, PPPoE saves significant effort for both the subscriber and the ISP/carrier, as it requires no specific configuration of the broadband modem at the subscriber’s site.
ZyXEL P-330W User’s Guide Refer to the appendix for more information on PPTP. Note: The P-330W supports one PPTP server connection at any given time. Figure 7 Wizard 2: PPTP Encapsulation The following table describes the fields in this screen Table 6 Wizard 2: PPTP Encapsulation LABEL DESCRIPTION ISP Parameters for Internet Access IP Address Type the (static) IP address assigned to you by your ISP. IP Subnet Mask Type the subnet mask assigned to you by your ISP.
ZyXELP-330W User’s Guide Figure 8 Wizard 2: L2TP Encapsulation The following table describes the fields in this screen Table 7 Wizard 2: L2TP Encapsulation LABEL DESCRIPTION Attain IP Automatically Select this if your ISP automatically assigns you an IP Address. Set IP Manually Select this if your ISP has assigned you a fixed IP address. IP Address Type the (static) IP address assigned to you by your ISP. IP Subnet Mask Type the subnet mask assigned to you by your ISP.
ZyXEL P-330W User’s Guide Figure 9 Wizard 3: Wireless LAN Basic Setup The following table describes the labels in this screen. Table 8 Wizard 3: Wireless LAN Basic Setup LABEL DESCRIPTION Band Choose the operating mode of your wireless access point. 2.4Ghz (B+G) offers the greatest compatibility. 2.4 GHz (B) will only allow 802.11b clients to connect to the wireless LAN. 2.4 GHz (G) will only allow 802.11g clients to connect to the wireless LAN.
ZyXELP-330W User’s Guide 3.4.1 No Encryption Choose None to allow the WLAN to operate without encryption. Warning: With no encryption enabled anyone will be able to access your network and view any data you send over the wireless LAN. 3.4.2 WEP Encryption Choose WEP to setup WEP Encryption parameters. Figure 10 Wizard 4: Wireless LAN Setup: WEP Security The following table describes the labels in this screen.
ZyXEL P-330W User’s Guide Table 9 Wizard 4: Wireless LAN Setup: WEP Security LABEL DESCRIPTION Cancel Click Cancel to abort the setup wizard. Back Click Back to display the previous screen. Next Click Next to proceed to the next screen. 3.4.3 WPA (TKIP) Choose WPA (TKIP) security in the Wireless LAN Setup screen to set up a Pre-Shared Key using TKIP encryption. Figure 11 Wizard 4: Wireless LAN Setup: WPA Security The following table describes the labels in this screen.
ZyXELP-330W User’s Guide Figure 12 Wizard 4: Wireless LAN Setup: WPA2 Security The following table describes the labels in this screen. Table 11 Wizard 4: Wireless LAN Setup: WPA2 Security LABEL DESCRIPTION WPA Format You can choose to enter the pre-shared key manually in HEX format or use a passphrase. Note, many client devices only allow entry via passphrase. Pre-Shared Key For Passphrase: Type from 8 to 63 case-sensitive ASCII characters. For HEX: Type a 64 character hex key.
ZyXEL P-330W User’s Guide Figure 13 Wizard 4: Wireless LAN Setup: WPA2 Security The following table describes the labels in this screen. Table 12 Wizard 4: Wireless LAN Setup: WPA2 Security LABEL DESCRIPTION WPA Format You can choose to enter the pre-shared key manually in HEX format or use a passphrase. Note, many client devices only allow entry via passphrase. Pre-Shared Key For Passphrase: Type from 8 to 63 case-sensitive ASCII characters. For HEX: Type a 64 character hex key.
ZyXEL P-330W User’s Guide CHAPTER 4 System Screens This chapter provides information on the options configurable from the main System screens. Figure 14 System Screen Menu Options 4.1 Setup Wizard See the Setup Wizard chapter for more information on this selection. 4.2 Operation Mode Click Operation Mode to open the Operation Mode screen.
ZyXEL P-330W User’s Guide Figure 15 Operation Mode Setup The following table describes the labels in this screen. Table 13 System General Setup LABEL DESCRIPTION Gateway This is the standard operating mode. The P-330W takes on all the usual roles of a home router, including NAT, DHCP Server, and Firewall. Bridge Select this to turn your P-330W into a pure bridge, directly linking all computers on your network to the WAN. In this mode, you have no protection from Internet based threats.
ZyXEL P-330W User’s Guide 4.3.1 DHCP Setup DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individual clients to obtain TCP/IP configuration at start-up from a server. You can configure the P330W as a DHCP server or disable it. When configured as a server, the P-330W provides the TCP/IP configuration for the clients. If DHCP service is disabled, you must have another DHCP server on your LAN, or else the computer must be manually configured. 4.3.
ZyXEL P-330W User’s Guide Figure 16 LAN IP Setup The following table describes the labels in this screen. Table 14 LAN IP Setup LABEL DESCRIPTION IP Address Type the IP address of your P-330W in dotted decimal notation 192.168.1.1 (factory default). IP Subnet Mask The subnet mask specifies the network number portion of an IP address. Your P330W will automatically calculate the subnet mask based on the IP address that you assign.
ZyXEL P-330W User’s Guide Figure 17 Password The following table describes the labels in this screen. Table 15 Password LABEL DESCRIPTION New Password Type the new password in this field. The password is case sensitive and may be up to 36 characters long. Confirmed Password Type the new password again in this field. Save Click Save to save your changes back to the P-330W. Reset Click Reset to begin configuring this screen afresh. 4.
ZyXEL P-330W User’s Guide Figure 18 Status The following table describes the labels in this screen. Table 16 Status LABEL DESCRIPTION Connection Method This is the method you have selected for connection to the Internet. You can change it using the Setup Wizard. Internet IP Address This is the WAN port IP address. Connection Details This button opens a new window that provides you with more detail on the WAN connection. LAN IP Address This is the LAN port IP address.
ZyXEL P-330W User’s Guide CHAPTER 5 Wireless This chapter discusses how to configure the Wireless screens on the P-330W. 5.1 Wireless LAN Overview This section introduces the wireless LAN(WLAN) and some basic scenarios. 5.1.1 IBSS An Independent Basic Service Set (IBSS), also called an Ad-hoc network, is the simplest WLAN configuration.
ZyXEL P-330W User’s Guide Figure 20 Basic Service set 5.1.3 ESS An Extended Service Set (ESS) consists of a series of overlapping BSSs, each containing an access point, with each access point connected together by a wired network. This wired connection between APs is called a Distribution System (DS). An ESSID (ESS IDentification) uniquely identifies each ESS. All access points and their associated wireless stations within the same ESS must have the same ESSID in order to communicate.
ZyXEL P-330W User’s Guide Figure 21 Extended Service Set 5.1.4 RTS/CTS A hidden node occurs when two stations are within range of the same access point, but are not within range of each other. The following figure illustrates a hidden node. Both stations (STA) are within range of the access point (AP) or wireless gateway, but out-of-range of each other, so they cannot “hear” each other, that is they do not know if the channel is currently being used. Therefore, they are considered hidden from each other.
ZyXEL P-330W User’s Guide 5.2 Configuring Wireless Note: If you are configuring the P-330W from a computer connected to the wireless LAN and you change the P-330W’s SSID or WEP settings, you will lose your wireless connection when you press Save. You must then change the wireless settings of your computer to match the P-330W’s new settings. Click the WIRELESS link to open the Wireless Options screen. Figure 23 The Wireless Options Screen 5.
ZyXEL P-330W User’s Guide Figure 24 Wireless: Basic Settings The following table describes the basic wireless LAN labels in this screen. Table 17 Wireless: Basic Settings LABEL DESCRIPTION Disable Access Select this check box to disable the wireless LAN capabilities of your P-330W. Point Band Choose the operating mode of your wireless access point. 2.4Ghz (B+G) offers the greatest compatibility. 2.4 GHz (B) will only allow 802.11b clients to connect to the wireless LAN. 2.4 GHz (G) will only allow 802.
ZyXEL P-330W User’s Guide 5.4 Wireless Advanced Settings Click ADVANCED SETTINGS to configure the advanced settings of your wireless LAN. 5.4.1 Authentication Three different methods can be used to authenticate wireless stations to the network: Open System, Shared Key, and Auto. The following figure illustrates the steps involved. Figure 25 WEP Authentication Steps Open system authentication involves an unencrypted two-message procedure.
ZyXEL P-330W User’s Guide When your P-330W's authentication method is set to open system, it will only accept open system authentication requests. The same is true for shared key authentication. However, when it is set to auto authentication, the P-330W will accept either type of authentication request and the P-330W will fall back to use open authentication if the shared key does not match. 5.4.2 Preamble Type A preamble is used to synchronize the transmission timing in your wireless network.
ZyXEL P-330W User’s Guide Table 18 Wireless: Advanced Settings LABEL DESCRIPTION Broadcast SSID Select this to hide the SSID in the outgoing beacon frame so a station cannot obtain the SSID through passive scanning using a site survey tool. IAPP Used in a multiple AP environment where 802.1x is used for authentication. Save Click Save to save your changes back to the P-330W. Reset Click Reset to reload the previous configuration for this screen. 5.
ZyXEL P-330W User’s Guide Figure 28 Wireless Security Setup: No Security The following table describes the labels in this screen. Table 19 Wireless Security Setup: No Security LABEL DESCRIPTION Encryption Choose None from the drop-down list box. Use 802.1x Authentication Mark this check box to enable 802.1x security using an external RADIUS server. Data will not be encrypted, however wireless clients will be required to authenticate before they are allowed to pass traffic to the network.
ZyXEL P-330W User’s Guide 5.6 Security Parameters Summary Refer to this table to see what other security parameters you should configure for each Authentication Method/ key management protocol type. You enter manual keys by first selecting 64-bit WEP or 128-bit WEP from the WEP Encryption field and then typing the keys (in ASCII or hexadecimal format) in the key text boxes. MAC address filters are not dependent on how you configure these security features.
ZyXEL P-330W User’s Guide Figure 29 Wireless Security Setup: WEP Encryption The following table describes the wireless LAN security labels in this screen Table 21 Wireless Security Setup: Static WEP Encryption LABEL DESCRIPTION Encryption Choose WEP from the drop-down list box. Set WEP Key Click this to configure WEP without 802.1x. Use 802.1x Authentication Mark the check box here to use 802.1x authentication. WEP Encryption Select 64-bit WEP or 128-bit WEP. Used only when using 802.
ZyXEL P-330W User’s Guide Figure 30 Wireless Security Setup: WEP Encryption The following table describes the wireless LAN security labels in this screen Table 22 Wireless Security Setup: WEP Encryption LABEL DESCRIPTION Key Length Select 64-bit WEP or 128-bit WEP. Key Format ASCII: Select this option in order to enter ASCII characters as WEP key. Hex: Select this option in order to enter hexadecimal characters as a WEP key.
ZyXEL P-330W User’s Guide 5.6.4 Introduction to WPA Wi-Fi Protected Access (WPA) is a subset of the IEEE 802.11i security specification draft. Key differences between WPA and WEP are user authentication and improved data encryption. 5.6.4.1 User Authentication WPA applies IEEE 802.1x and Extensible Authentication Protocol (EAP) to authenticate wireless clients using an external RADIUS database. See later in this chapter and the appendices for more information on IEEE 802.1x, RADIUS and EAP.
ZyXEL P-330W User’s Guide 5.6.4.3 WPA-PSK Application Example A WPA-PSK application looks as follows. 1 First enter identical passwords into the AP and all wireless clients. The Pre-Shared Key (PSK) must consist of between 8 and 63 ASCII characters (including spaces and symbols). 2 The AP checks each client’s password and (only) allows it to join the network if it matches its password. 3 The AP derives and distributes keys to the wireless clients.
ZyXEL P-330W User’s Guide Figure 32 Wireless Security Setup: WPA-PSK The following table describes the labels in this screen. Table 23 Wireless Security Setup: WPA-PSK LABEL DESCRIPTION Encryption Choose WPA (TKIP) from the drop-down list box for TKIP encryption. Choose WPA2 (AES) from the drop-down list box to use WPA2’s AES encryption. Choose WPA2 Mixed from the drop-down list box to allow both TKIP or AES encryption. WPA Authentication Mode Choose Personal to enable PSK mode.
ZyXEL P-330W User’s Guide 5.6.7 Introduction to RADIUS RADIUS is based on a client-sever model that supports authentication and accounting, where access point is the client and the server is the RADIUS server. The RADIUS server handles the following tasks among others: • Authentication Determines the identity of the users. • Accounting Keeps track of the client’s network activity.
ZyXEL P-330W User’s Guide In order to ensure network security, the access point and the RADIUS server use a shared secret key, which is a password, they both know. The key is not sent over the network. In addition to the shared key, password information exchanged is also encrypted to protect the wired network from unauthorized access. 5.6.7.5 EAP Authentication Overview EAP (Extensible Authentication Protocol) is an authentication protocol that runs on top of the IEEE802.
ZyXEL P-330W User’s Guide 2 The RADIUS server then checks the user's identification against its database and grants or denies network access accordingly. 3 The RADIUS server distributes a Pairwise Master Key (PMK) key to the AP that then sets up a key hierarchy and management system, using the pair-wise key to dynamically generate unique data encryption keys to encrypt every data packet that is wirelessly communicated between the AP and the wireless clients.
ZyXEL P-330W User’s Guide Figure 35 Wireless Security Setup: WPA With RADIUS The following table describes the labels in this screen. Table 24 Wireless Security Setup: WPA LABEL DESCRIPTION Encryption Choose WPA (TKIP) from the drop-down list box for TKIP encryption. Choose WPA2 (AES) from the drop-down list box to use WPA2’s AES encryption. Choose WPA2 Mixed from the drop-down list box to allow both TKIP or AES encryption.
ZyXEL P-330W User’s Guide Table 24 Wireless Security Setup: WPA LABEL DESCRIPTION Password Enter a password (up to 31 alphanumeric characters) as the key to be shared between the external authentication server and the P-330W. The key must be the same on the external authentication server and your P330W. The key is not sent over the network. Save Click Save to save your changes back to the P-330W. Reset Click Reset to reload the previous configuration for this screen. 5.
ZyXEL P-330W User’s Guide Figure 36 Wireless: Trusted Stations MAC Address Filter The following table describes the labels in this menu. Table 25 Wireless: Trusted Stations MAC Address Filter LABEL DESCRIPTION Wireless Select Allow Listed from the drop down list box to enable MAC address filtering. Access Control Mode MAC Address Enter the MAC addresses of the wireless station that are allowed or denied access to the P-330W in these address fields.
ZyXEL P-330W User’s Guide 65 Chapter 5 Wireless
ZyXEL P-330W User’s Guide CHAPTER 6 Advanced Options This chapter covers the options available under the ADVANCED section of the menu. Figure 37 The Advanced Menu Options 6.1 Access Control This screen allows you to block access to specified Internet services based on port number used. This can be used restrict Internet access to only certain applications or to block applications you feel may be harmful. To change your P-330W’s Access Controls, click ADVANCED, then the Access Control link.
ZyXEL P-330W User’s Guide Figure 38 Advanced: Access Control The following table describes the labels in this screen. Table 26 Advanced: Access Control LABEL DESCRIPTION Enable Access Control Check this box to enable Access Controls. Select Services to Block The P-330W comes preconfigured with settings for many common services. You can choose one to activate from the pull down menu. Port Range Enter in a range of ports to block. Protocol Choose to block either TCP, UDP, or Both.
ZyXEL P-330W User’s Guide First of all, you need to have registered a dynamic DNS account with either www.dyndns.org or www.tzo.com. This is for people with a dynamic IP from their ISP or DHCP server that would still like to have a domain name. The Dynamic DNS service provider will give you a password or key. Note: If you have a private WAN IP address, then you cannot use Dynamic DNS. 6.3 Configuring Dynamic DNS To change your P-330W’s DDNS, click ADVANCED then the Dynamic DNS link.
ZyXEL P-330W User’s Guide Table 27 Advanced: Dynamic DNS LABEL DESCRIPTION Save Click Save to save your changes back to the P-330W. Reset Click Reset to begin configuring this screen afresh. 6.4 DMZ If the DMZ Host Function is enabled, it means that you set up DMZ host at a particular computer to be exposed to the Internet so that some applications/software, especially Internet / online game can have two-way connections. A device acting as DMZ is not protected by the P330W’s firewall.
ZyXEL P-330W User’s Guide You may enter a single port number or a range of port numbers to be forwarded, and the local IP address of the desired server. The port number identifies a service; for example, web service is on port 80 and FTP on port 21. In some cases, such as for unknown services or where one server can support more than one service (for example both FTP and web service), it might be better to specify a range of port numbers.
ZyXEL P-330W User’s Guide Figure 41 Multiple Servers Behind NAT Example 6.5.1 Configuring Virtual Servers To configure Virtual Server, click ADVANCED then the VIRTUAL SERVERS link. The screen appears as shown. Figure 42 Advanced: Virtual Servers The following table describes the labels in this screen.
ZyXEL P-330W User’s Guide Table 30 Advanced: Virtual Servers LABEL DESCRIPTION Local IP Address Enter the inside IP address of the server here. Protocol You can select to forward TCP, UDP, or both type of traffic. Name Enter a name to identify this port-forwarding rule. Port Range Enter a port number here. To forward only one port, enter it again in the End Port field. To specify a range of ports, enter the last port to be forwarded in the End Port field.
ZyXEL P-330W User’s Guide Figure 43 Advanced: ALG The following table describes the labels in this screen. Table 31 Advanced: ALG LABEL DESCRIPTION Enable Put a check in this box next to the ALG rule you want to activate. Save Click Save to save your changes back to the P-330W. Reset Click Reset to begin configuring this screen afresh. 6.7 WAN Port To change your P-330W’s WAN ISP settings, click ADVANCED, then the WAN link. The screen differs by the encapsulation. 6.7.
ZyXEL P-330W User’s Guide Figure 44 Advanced: WAN Static IP Encapsulation The following table describes the labels in this screen. Table 32 Advanced: WAN Static IP Encapsulation LABEL DESCRIPTION WAN Access Type You must choose the Static IP option when the WAN port is used as a regular Ethernet with a fixed IP address. IP Address Enter your WAN IP address in this field. My WAN IP Subnet Type your network's IP subnet Mask. Mask DNS 1 - 3 Enter in your ISP’s DNS server IP address here.
ZyXEL P-330W User’s Guide 6.7.2 DHCP IP Encapsulation The screen shown next is for DHCP IP encapsulation. Figure 45 Advanced: WAN DHCP IP Encapsulation The following table describes the labels in this screen. Table 33 Advanced: WAN DHCP IP Encapsulation LABEL DESCRIPTION WAN Access Type You must choose the DHCP Client option when the WAN port is used as a regular Ethernet using DHCP to be assigned an IP address.
ZyXEL P-330W User’s Guide Table 33 Advanced: WAN DHCP IP Encapsulation LABEL DESCRIPTION Save Click Save to save your changes back to the P-330W. Reset Click Reset to begin configuring this screen afresh. 6.7.3 PPPoE Encapsulation The P-330W supports PPPoE (Point-to-Point Protocol over Ethernet). PPPoE is an IETF Draft standard (RFC 2516) specifying how a personal computer (PC) interacts with a broadband modem (DSL, cable, wireless, etc.) connection.
ZyXEL P-330W User’s Guide Figure 46 Advanced: WAN PPPoE Encapsulation The following table describes the labels in this screen. Table 34 PPPoE Encapsulation 77 LABEL DESCRIPTION WAN Access Type You must choose the PPPoE option when the WAN port is used with PPPoE. User Name Type the User Name given to you by your ISP. Password Type the password associated with the User Name above. Connection Type Select Continuous if you do not want the connection to time out.
ZyXEL P-330W User’s Guide Table 34 PPPoE Encapsulation LABEL DESCRIPTION Clone MAC Address Your ISP may require a particular MAC address in order for you to connect to the Internet. This MAC address is the PC’s MAC address that your ISP had originally connected your Internet connection to. Type in this Clone MAC address in this section to replace the WAN MAC address with the MAC address of that PC.
ZyXEL P-330W User’s Guide Figure 47 Advanced: WAN PPTP Encapsulation The following table describes the labels in this screen. Table 35 Advanced: WAN PPTP Encapsulation 79 LABEL DESCRIPTION WAN Access Type You must choose the PPTP option when the WAN port is used with PPTP. IP Address Type the (static) IP address assigned to you by your ISP. IP Subnet Mask Type the subnet mask assigned to you by your ISP. Server IP Address Type the IP address of the PPTP server.
ZyXEL P-330W User’s Guide Table 35 Advanced: WAN PPTP Encapsulation LABEL DESCRIPTION Clone MAC Address Your ISP may require a particular MAC address in order for you to connect to the Internet. This MAC address is the PC’s MAC address that your ISP had originally connected your Internet connection to. Type in this Clone MAC address in this section to replace the WAN MAC address with the MAC address of that PC.
ZyXEL P-330W User’s Guide Figure 48 Advanced: WAN L2TP Encapsulation The following table describes the labels in this screen. Table 36 Advanced: WAN L2PTP Encapsulation 81 LABEL DESCRIPTION WAN Access Type You must choose the L2TP option when the WAN port is used with L2TP.
ZyXEL P-330W User’s Guide Table 36 Advanced: WAN L2PTP Encapsulation LABEL DESCRIPTION Password Type the password associated with the User Name above. Idle Time The amount of time before the PPPoE session times out and drops connection. MTU Size Enter in the maximum MTU (packet size) here. Attain DNS Automatically Select this if your ISP assigns you a DNS server at the same time it assigns you an IP Address.
ZyXEL P-330W User’s Guide Figure 49 Advanced: Ping The following table describes the labels in this screen. Table 37 Advanced: Ping LABEL DESCRIPTION IP Address / Host Name Enter in a host name or IP address that you would like to ping. Run Performs the Ping command. Reset Click Reset to begin configuring this screen afresh. Response The results of your ping request will show up here. 6.
ZyXEL P-330W User’s Guide Figure 50 Advanced: DoS The following table describes the labels in this screen. Table 38 Advanced: DoS LABEL DESCRIPTION Enable DoS Protection Put a check in this box to enable DoS protection. Select All Puts a check next to all DoS protection services. Clear All Resets all check boxes to blank. Apply Changes Applies DoS protections. 6.10 Diagnostics This screen allows you to perform a DNS lookup on any host name you enter.
ZyXEL P-330W User’s Guide To access the Diagnostic service, click ADVANCED then the DIAGNOSTIC link. The screen appears as shown. Figure 51 Advanced: Diagnostic The following table describes the labels in this screen. Table 39 Advanced: Diagnostic 85 LABEL DESCRIPTION Domain Name/ URL Enter the domain name you want to lookup. Start Lookup Click this button to activate the DNS lookup.
ZyXEL P-330W User’s Guide CHAPTER 7 Administrator Options 7.1 Remote Management Remote management allows you to remotely configure your P-330W over your Internet connection. Since this is a potential security risk, this feature is turned off by default. To access the Remote Management configuration screen, click ADMINISTRATOR then the REMOTE MANAGEMENT link. The screen appears as shown. Figure 52 Administrator: Remote Management The following table describes the labels in this screen.
ZyXEL P-330W User’s Guide Figure 53 Administrator: Configuration File 7.2.1 Backup Configuration Backup configuration allows you to back up (save) the P-330W’s current configuration to a file on your computer. Once your P-330W is configured and functioning properly, it is highly recommended that you back up your configuration file before making configuration changes. The backup configuration file will be useful in case you need to return to your previous settings.
ZyXEL P-330W User’s Guide Figure 54 Temporarily Disconnected 7.2.3 Back to Factory Defaults Pressing the Restore Defaults button in this section clears all user-entered configuration information and returns the P-330W to its factory defaults. You can also press the RESET button on the rear panel to reset the factory defaults of your P330W. Refer to the Introducing the Web Configurator chapter for more information on the RESET button. 7.
ZyXEL P-330W User’s Guide Figure 55 Administrator: Logs The following table describes the labels in this screen. Table 42 Administrator: Remote Management LABEL DESCRIPTION Enable Log Activates the logging function. System All Activates all logging functions. Wireless Only Only logs related to the wireless LAN will be recorded. DoS Only Only logs related to the DoS protection will be recorded. Apply Activate the logging feature.
ZyXEL P-330W User’s Guide Figure 56 Administrator: IP Filtering The following table describes the labels in this screen. Table 43 Administrator: IP Filtering LABEL DESCRIPTION Enable IP Filtering Enables IP Filtering. Local IP Address Enter the IP address of the local device whose access you want to restrict. Description Enter in a descriptive description for this rule. Save Click Save to save your changes back to the P-330W. Reset Click Reset to begin configuring this screen afresh. 7.
ZyXEL P-330W User’s Guide Figure 57 Administrator: MAC Filtering The following table describes the labels in this screen. Table 44 Administrator: MAC Filtering LABEL DESCRIPTION Enable MAC Filtering Enables MAC Filtering. MAC Address Enter the MAC address of the local device whose access you want to restrict. Description Enter in a descriptive description for this rule. Save Click Save to save your changes back to the P-330W. Reset Click Reset to begin configuring this screen afresh. 7.
ZyXEL P-330W User’s Guide Figure 58 Administrator: URL Filtering The following table describes the labels in this screen. Table 45 Administrator: URL Filtering LABEL DESCRIPTION Enable URL Filtering Enables URL Filtering. URL Address Enter the URL address of the Internet site you want to restrict. Apply Changes Click Apply Changes to save your changes back to the P-330W. Reset Click Reset to begin configuring this screen afresh. 7.
ZyXEL P-330W User’s Guide Figure 59 Administrator: Time Zone Setting The following table describes the labels in this screen. Table 46 Administrator: Time Zone Setting LABEL DESCRIPTION Current Time This field displays the time of your P-330W. If you are not using an NTP server, you can make changes here and they will be applied when you click Save. Enable NTP client update Put a check in this box to enable the use of an external NTP server. Time Zone Select Choose the Time Zone of your location.
ZyXEL P-330W User’s Guide Figure 60 Administrator: Upgrade Firmware The following table describes the labels in this screen. Table 47 Administrator: Upgrade Firmware LABEL DESCRIPTION Select File Type in the location of the file you want to upload in this field or click Browse ... to find it. Browse... Click Browse... to find the .bin file you want to upload. Remember that you must decompress compressed (.zip) files before you can upload them.
ZyXEL P-330W User’s Guide Figure 62 Network Temporarily Disconnected After two minutes, log in again and check your new firmware version in the System Status screen. If the upload was not successful, a warning screen will appear. Click Return to go back to the F/W Upload screen.
ZyXEL P-330W User’s Guide Appendix A PPPoE PPPoE in Action An ADSL modem bridges a PPP session over Ethernet (PPP over Ethernet, RFC 2516) from your computer to an ATM PVC (Permanent Virtual Circuit) which connects to a DSL Access Concentrator where the PPP session terminates (see the next figure). One PVC can support any number of PPP sessions from your LAN. PPPoE provides access control and billing functionality in a manner similar to dial-up services using PPP.
ZyXEL P-330W User’s Guide Figure 63 Single-Computer per Router Hardware Configuration How PPPoE Works The PPPoE driver makes the Ethernet appear as a serial link to the computer and the computer runs PPP over it, while the modem bridges the Ethernet frames to the Access Concentrator (AC). Between the AC and an ISP, the AC is acting as a L2TP (Layer 2 Tunneling Protocol) LAC (L2TP Access Concentrator) and tunnels the PPP frames to the ISP. The L2TP tunnel is capable of carrying multiple PPP sessions.
ZyXEL P-330W User’s Guide Appendix B PPTP What is PPTP? PPTP (Point-to-Point Tunneling Protocol) is a Microsoft proprietary protocol (RFC 2637 for PPTP is informational only) to tunnel PPP frames. How can we transport PPP frames from a computer to a broadband modem over Ethernet? A solution is to build PPTP into the ANT (ADSL Network Termination) where PPTP is used only over the short haul between the computer and the modem over Ethernet.
ZyXEL P-330W User’s Guide PPTP Protocol Overview PPTP is very similar to L2TP, since L2TP is based on both PPTP and L2F (Cisco’s Layer 2 Forwarding). Conceptually, there are three parties in PPTP, namely the PNS (PPTP Network Server), the PAC (PPTP Access Concentrator) and the PPTP user. The PNS is the box that hosts both the PPP and the PPTP stacks and forms one end of the PPTP tunnel. The PAC is the box that dials/answers the phone calls and relays the PPP frames to the PNS.
ZyXEL P-330W User’s Guide Figure 67 Example Message Exchange between Computer and an ANT PPP Data Connection The PPP frames are tunneled between the PNS and PAC over GRE (General Routing Encapsulation, RFC 1701, 1702). The individual calls within a tunnel are distinguished using the Call ID field in the GRE header.
ZyXEL P-330W User’s Guide 101 Appendix B PPTP
ZyXEL P-330W User’s Guide Appendix C Setting up Your Computer’s IP Address All computers must have a 10M or 100M Ethernet adapter card and TCP/IP installed. Windows 95/98/Me/NT/2000/XP, Macintosh OS 7 and later operating systems and all versions of UNIX/LINUX include the software components you need to install and use TCP/IP on your computer. Windows 3.1 requires the purchase of a third-party TCP/IP application package.
ZyXEL P-330W User’s Guide Figure 68 WIndows 95/98/Me: Network: Configuration Installing Components The Network window Configuration tab displays a list of installed components. You need a network adapter, the TCP/IP protocol and Client for Microsoft Networks. If you need the adapter: 1 In the Network window, click Add. 2 Select Adapter and then click Add. 3 Select the manufacturer and model of your network adapter and then click OK. If you need TCP/IP: 1 In the Network window, click Add.
ZyXEL P-330W User’s Guide 3 Select Microsoft from the list of manufacturers. 4 Select Client for Microsoft Networks from the list of network clients and then click OK. 5 Restart your computer so the changes you made take effect. Configuring 1 In the Network window Configuration tab, select your network adapter's TCP/IP entry and click Properties 2 Click the IP Address tab. • • If your IP address is dynamic, select Obtain an IP address automatically.
ZyXEL P-330W User’s Guide Figure 70 Windows 95/98/Me: TCP/IP Properties: DNS Configuration 4 Click the Gateway tab. • • If you do not know your gateway’s IP address, remove previously installed gateways. If you have a gateway IP address, type it in the New gateway field and click Add. 5 Click OK to save and close the TCP/IP Properties window. 6 Click OK to close the Network window. Insert the Windows CD if prompted. 7 Turn on your P-330W and restart your computer when prompted.
ZyXEL P-330W User’s Guide Figure 71 Windows XP: Start Menu 2 For Windows XP, click Network Connections. For Windows 2000/NT, click Network and Dial-up Connections. Figure 72 Windows XP: Control Panel 3 Right-click Local Area Connection and then click Properties.
ZyXEL P-330W User’s Guide Figure 73 Windows XP: Control Panel: Network Connections: Properties 4 Select Internet Protocol (TCP/IP) (under the General tab in Win XP) and click Properties. Figure 74 Windows XP: Local Area Connection Properties 5 The Internet Protocol TCP/IP Properties window opens (the General tab in Windows XP). • 107 If you have a dynamic IP address click Obtain an IP address automatically.
ZyXEL P-330W User’s Guide • If you have a static IP address click Use the following IP Address and fill in the IP address, Subnet mask, and Default gateway fields. Click Advanced. Figure 75 Windows XP: Advanced TCP/IP Settings 6 If you do not know your gateway's IP address, remove any previously installed gateways in the IP Settings tab and click OK. Do one or more of the following if you want to configure additional IP addresses: • • • • • • • • In the IP Settings tab, in IP addresses, click Add.
ZyXEL P-330W User’s Guide 7 In the Internet Protocol TCP/IP Properties window (the General tab in Windows XP): • • Click Obtain DNS server address automatically if you do not know your DNS server IP address(es). If you know your DNS server IP address(es), click Use the following DNS server addresses, and type them in the Preferred DNS server and Alternate DNS server fields. If you have previously configured DNS servers, click Advanced and then the DNS tab to order them.
ZyXEL P-330W User’s Guide Macintosh OS 8/9 1 Click the Apple menu, Control Panel and double-click TCP/IP to open the TCP/IP Control Panel. Figure 77 Macintosh OS 8/9: Apple Menu 2 Select Ethernet built-in from the Connect via list.
ZyXEL P-330W User’s Guide Figure 78 Macintosh OS 8/9: TCP/IP 3 For dynamically assigned settings, select Using DHCP Server from the Configure: list. 4 For statically assigned settings, do the following: • • • • From the Configure box, select Manually. Type your IP address in the IP Address box. Type your subnet mask in the Subnet mask box. Type the IP address of your P-330W in the Router address box. 5 Close the TCP/IP Control Panel. 6 Click Save if prompted, to save changes to your configuration.
ZyXEL P-330W User’s Guide • • Select Built-in Ethernet from the Show list. Click the TCP/IP tab. 3 For dynamically assigned settings, select Using DHCP from the Configure list. Figure 80 Macintosh OS X: Network 4 For statically assigned settings, do the following: • • • • From the Configure box, select Manually. Type your IP address in the IP Address box. Type your subnet mask in the Subnet mask box. Type the IP address of your P-330W in the Router address box. 5 Click Apply Now and close the window.
ZyXEL P-330W User’s Guide 113 Appendix C Setting up Your Computer’s IP Address
ZyXEL P-330W User’s Guide Appendix D Wireless LAN and IEEE 802.11 A wireless LAN (WLAN) provides a flexible data communications system that you can use to access various services (navigating the Internet, email, printer services, etc.) without the use of a cabled connection. In effect a wireless LAN environment provides you the freedom to stay connected to the network while roaming around in the coverage area.
ZyXEL P-330W User’s Guide Ad-hoc Wireless LAN Configuration The simplest WLAN configuration is an independent (Ad-hoc) WLAN that connects a set of computers with wireless nodes or stations (STA), which is called a Basic Service Set (BSS). In the most basic form, a wireless LAN connects a set of computers with wireless adapters.
ZyXEL P-330W User’s Guide Figure 82 ESS Provides Campus-Wide Coverage Appendix D Wireless LAN and IEEE 802.
ZyXEL P-330W User’s Guide 117 Appendix D Wireless LAN and IEEE 802.
ZyXEL P-330W User’s Guide Appendix E Wireless LAN With IEEE 802.1x As wireless networks become popular for both portable computing and corporate networks, security is now a priority. Security Flaws with IEEE 802.11 Wireless networks based on the original IEEE 802.11 have a poor reputation for safety. The IEEE 802.11b wireless access standard, first published in 1999, was based on the MAC address. As the MAC address is sent across the wireless link in clear text, it is easy to spoof and fake.
ZyXEL P-330W User’s Guide RADIUS Server Authentication Sequence The following figure depicts a typical wireless network with a remote RADIUS server for user authentication using EAPOL (EAP Over LAN). Figure 83 Sequences for EAP MD5–Challenge Authentication 119 Appendix E Wireless LAN With IEEE 802.
ZyXEL P-330W User’s Guide Appendix F Types of EAP Authentication This appendix discusses the five popular EAP authentication types: EAP-MD5, EAP-TLS, EAP-TTLS, PEAP and LEAP. The type of authentication you use depends on the RADIUS server or the AP. Consult your network administrator for more information. EAP-MD5 (Message-Digest Algorithm 5) MD5 authentication is the simplest one-way authentication method. The authentication server sends a challenge to the wireless station.
ZyXEL P-330W User’s Guide PEAP (Protected EAP) Like EAP-TTLS, server-side certificate authentication is used to establish a secure connection, then use simple username and password methods through the secured connection to authenticate the clients, thus hiding client identity. However, PEAP only supports EAP methods, such as EAP-MD5, EAP-MSCHAPv2 and EAP-GTC (EAP-Generic Token Card), for client authentication. EAP-GTC is implemented only by Cisco.
ZyXEL P-330W User’s Guide Appendix G Antenna Selection and Positioning Recommendation An antenna couples RF signals onto air. A transmitter within a wireless device sends an RF signal to the antenna, which propagates the signal through the air. The antenna also operates in reverse by capturing RF signals from the air. Choosing the right antennas and positioning them properly increases the range and coverage area of a wireless LAN. Antenna Characteristics Frequency An antenna in the frequency of 2.
ZyXEL P-330W User’s Guide • Omni-directional antennas send the RF signal out in all directions on a horizontal plane. The coverage area is torus-shaped (like a donut) which makes these antennas ideal for a room environment. With a wide coverage area, it is possible to make circular overlapping coverage areas with multiple access points. • Directional antennas concentrate the RF signal in a beam, like a flashlight.
ZyXEL P-330W User’s Guide Index A E Antenna Directional 123 Omni-directional 123 Antenna gain 122 Authentication 49 EAP Authentication 60, 120 ECHO 70 Encryption 56 ESS 45, 115 Extended Service Set 45, 115 Extended Service Set IDentification 48 B F Backup 87 Basic Service Set 115 BSS 44, 115 C CA 120 Certificate Authority 120 Configuration 40 Factory LAN Defaults 40 FHSS 114 Finger 70 Firewall 19 Frequency-Hopping Spread Spectrum 114 FTP 40, 67, 69, 70 G General Setup 38 D Data Encryption 53 Defau
ZyXEL P-330W User’s Guide L L2TP Encapsulation 80 LAN TCP/IP 40 M MAC Address Filtering 63 MAC Filter 63 N NAT 70 Network Management 70 NNTP 70 P Password 41 Point-to-Point Tunneling Protocol 70, 78 POP3 70 Port Forwarding 69 Port Numbers 70 PPPoE 96 PPTP 70 Preamble Mode 50 SMTP 70 SNMP 70 SUA 70 Subnet Mask 40, 41 Syntax Conventions 16 U User Authentication 56 User Name 68 V Virtual Servers 69 VPN 78, 80 W WEP 53 WEP Encryption 54, 55, 58 Wireless LAN 114 Wireless Security 51 WLAN 114 WPA 56 WPA w
