Network Router - Wireless Network Router User Manual

ManualsBrandsZyXEL Communications ManualsDesktopP-334U

P-334U/P-335U

802.11a/g Wireless Router

User’s Guide

Version 3.60

Edition 2

11/2006

Summary of content (335 pages)

PAGE 1
P-334U/P-335U 802.11a/g Wireless Router User’s Guide Version 3.
PAGE 2
PAGE 3
P-334U/P-335U User’s Guide Copyright Copyright © 2006 by ZyXEL Communications Corporation. The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation.
PAGE 4
P-334U/P-335U User’s Guide Certifications Federal Communications Commission (FCC) Interference Statement This device complies with Part 15 of FCC rules. Operation is subject to the following two conditions: • This device may not cause harmful interference. • This device must accept any interference received, including interference that may cause undesired operations. This equipment has been tested and found to comply with the limits for a Class B digital device pursuant to Part 15 of the FCC Rules.
PAGE 5
P-334U/P-335U User’s Guide 者均不得擅自變更頻率、加大功率或變更原設計之特性及功能。第十四條低功率射頻電機之使用不得影響飛航安全及干擾合法通信；經發現有干擾現象時，應立即停用，並改善至無干擾時方得繼續使用。前項合法通信，指依電信規定作業之無線電信。低功率射頻電機須忍受合法通信或工業、科學及醫療用電波輻射性電機設備之干擾。在 5250MHz~5350MHz 頻帶內操作之無線資訊傳輸設備，限於室內使用。 Notices Changes or modifications not expressly approved by the party responsible for compliance could void the user's authority to operate the equipment. This device has been designed for the WLAN 2.
PAGE 6
P-334U/P-335U User’s Guide Safety Warnings For your safety, be sure to read and follow all warning notices and instructions. • Do NOT use this product near water, for example, in a wet basement or near a swimming pool. • Do NOT expose your device to dampness, dust or corrosive liquids. • Do NOT store things on the device. • Do NOT install, use, or service this device during a thunderstorm. There is a remote risk of electric shock from lightning. • Connect ONLY suitable accessories to the device.
PAGE 7
P-334U/P-335U User’s Guide ZyXEL Limited Warranty ZyXEL warrants to the original end user (purchaser) that this product is free from any defects in materials or workmanship for a period of up to two years from the date of purchase.
PAGE 8
P-334U/P-335U User’s Guide Customer Support Please have the following information ready when you contact customer support. • • • • Product model and serial number. Warranty Information. Date that you received your device. Brief description of the problem and the steps you took to solve it. METHOD SUPPORT E-MAIL TELEPHONEA WEB SITE FAX FTP SITE REGULAR MAIL LOCATION CORPORATE HEADQUARTERS (WORLDWIDE) CZECH REPUBLIC DENMARK FINLAND SALES E-MAIL support@zyxel.com.tw +886-3-578-3942 sales@zyxel.
PAGE 9
P-334U/P-335U User’s Guide TELEPHONEA WEB SITE SALES E-MAIL FAX FTP SITE info@pl.zyxel.com +48 (22) 333 8250 www.pl.zyxel.com ZyXEL Communications ul. Okrzei 1A 03-715 Warszawa Poland www.zyxel.ru ZyXEL Russia Ostrovityanova 37a Str. Moscow, 117279 Russia www.zyxel.es ZyXEL Communications Arte, 21 5ª planta 28033 Madrid Spain www.zyxel.se ZyXEL Communications A/S Sjöporten 4, 41764 Göteborg Sweden www.ua.zyxel.com ZyXEL Ukraine 13, Pimonenko Str.
PAGE 10
P-334U/P-335U User’s Guide 10 Customer Support
PAGE 11
P-334U/P-335U User’s Guide Table of Contents Copyright .................................................................................................................. 3 Certifications ............................................................................................................ 4 Safety Warnings ....................................................................................................... 6 ZyXEL Limited Warranty.....................................................................
PAGE 12
P-334U/P-335U User’s Guide Chapter 3 Connection Wizard................................................................................................. 49 3.1 Wizard Setup ......................................................................................................49 3.2 Connection Wizard: STEP 1: System Information .............................................50 3.2.1 System Name ...........................................................................................50 3.2.2 Domain Name ......
PAGE 13
P-334U/P-335U User’s Guide 4.5 MAC Filter ..........................................................................................................81 4.6 Wireless LAN Advanced Screen ........................................................................83 Chapter 5 Wireless Tutorial..................................................................................................... 85 5.1 Example Parameters ..........................................................................................85 5.
PAGE 14
P-334U/P-335U User’s Guide Chapter 9 Network Address Translation (NAT) ................................................................... 115 9.1 NAT Overview ...............................................................................................115 9.2 Using NAT ........................................................................................................115 9.2.1 Port Forwarding: Services and Port Numbers ........................................115 9.2.
PAGE 15
P-334U/P-335U User’s Guide Chapter 13 IPSec VPN ............................................................................................................. 139 13.1 IPSec VPN Overview ...................................................................................139 13.1.1 IKE SA (IKE Phase 1) Overview ...........................................................140 13.1.1.1 IP Addresses of the ZyXEL Device and Remote IPSec Router ..140 13.1.2 IKE SA Setup ............................................
PAGE 16
P-334U/P-335U User’s Guide 15.2 Application-based Bandwidth Management ...................................................173 15.3 Subnet-based Bandwidth Management .........................................................174 15.4 Application and Subnet-based Bandwidth Management ...............................174 15.5 Bandwidth Management Priorities ................................................................175 15.6 Predefined Bandwidth Management Services .............................................
PAGE 17
P-334U/P-335U User’s Guide Chapter 18 Print Server........................................................................................................... 199 18.1 Print Server Overview ...................................................................................199 18.2 ZyXEL Device Print Server ............................................................................199 18.3 Print Server Screen ........................................................................................
PAGE 18
P-334U/P-335U User’s Guide 24.5 Problems with Restricted Web Pages and Keyword Blocking .......................233 24.5.1 Pop-up Windows, JavaScripts and Java Permissions ..........................235 24.5.1.1 Internet Explorer Pop-up Blockers ..............................................235 24.5.1.2 JavaScripts ..................................................................................238 24.5.1.3 Java Permissions ........................................................................240 24.5.
PAGE 19
P-334U/P-335U User’s Guide List of Figures Figure 1 Secure Internet Access via Cable or DSL Modem ................................................ 32 Figure 2 WLAN Application Example .................................................................................. 32 Figure 3 Print Server Application ........................................................................................ 33 Figure 4 VPN Application .........................................................................................
PAGE 20
P-334U/P-335U User’s Guide Figure 37 Wireless: WPA-PSK/WPA2-PSK ......................................................................... 74 Figure 38 Wireless: WPA/WPA2 ......................................................................................... 76 Figure 39 OTIST ................................................................................................................. 78 Figure 40 Example Wireless Client OTIST Screen .............................................................
PAGE 21
P-334U/P-335U User’s Guide Figure 80 Content Filter: Filter ............................................................................................ 134 Figure 81 Content Filter: Schedule ..................................................................................... 135 Figure 82 VPN: Example ..................................................................................................... 139 Figure 83 VPN: IKE SA and IPSec SA ..................................................................
PAGE 22
P-334U/P-335U User’s Guide Figure 123 Add Printer Help ................................................................................................ 207 Figure 124 Add Printer Wizard: Welcome ........................................................................... 207 Figure 125 Add Printer Wizard: Local or Network Printer ................................................... 208 Figure 126 Add Printer Wizard: Select the Printer Port ......................................................
PAGE 23
P-334U/P-335U User’s Guide Figure 166 Windows 95/98/Me: TCP/IP Properties: IP Address ......................................... 257 Figure 167 Windows 95/98/Me: TCP/IP Properties: DNS Configuration ............................ 258 Figure 168 Windows XP: Start Menu .................................................................................. 259 Figure 169 Windows XP: Control Panel ..............................................................................
PAGE 24
P-334U/P-335U User’s Guide 24
PAGE 25
P-334U/P-335U User’s Guide List of Tables Table 1 Front Panel LEDs .................................................................................................. 35 Table 2 Status Screen Icon Key ......................................................................................... 39 Table 3 Web Configurator Status Screen ........................................................................... 40 Table 4 Screens Summary ...........................................................................
PAGE 26
P-334U/P-335U User’s Guide Table 37 Advanced LAN ..................................................................................................... 108 Table 38 DHCP Server General ......................................................................................... 111 Table 39 DHCP Server Advanced ...................................................................................... 113 Table 40 Client List ............................................................................................
PAGE 27
P-334U/P-335U User’s Guide Table 80 Maintenance Firmware Upload ............................................................................ 223 Table 81 Maintenance Restore Configuration .................................................................... 225 Table 82 Config Mode: Advanced Screens ........................................................................ 229 Table 83 Troubleshooting Starting Up Your ZyXEL Device ................................................
PAGE 28
P-334U/P-335U User’s Guide Table 123 Content Filtering Logs ....................................................................................... 297 Table 124 Attack Logs ........................................................................................................ 298 Table 125 IPSec Logs ........................................................................................................ 299 Table 126 IKE Logs ................................................................................
PAGE 29
P-334U/P-335U User’s Guide Preface Congratulations on your purchase of the P-334U or P-335U 802.11a/g Wireless Router. This manual is designed to guide you through the configuration of your P-334U or P-335U for its various applications. About This User's Guide This User’s Guide is designed to guide you through the configuration of your ZyXEL Device using the web configurator. Note: Use the web configurator or command interpreter interface to configure your ZyXEL Device.
PAGE 30
P-334U/P-335U User’s Guide • The P-334U or P-335U series may be referred to as the “ZyXEL Device” in this User’s Guide.
PAGE 31
P-334U/P-335U User’s Guide CHAPTER 1 Getting to Know Your ZyXEL Device This chapter introduces the main features and applications of the ZyXEL Device. 1.1 ZyXEL Device Overview The P-334U or P-335U is the ideal secure wireless firewall router for all data passing between the Internet and LAN’s. You can configure firewall and/or content filtering for secure Internet access. You can also use media bandwidth management to efficiently manage traffic on your network.
PAGE 32
P-334U/P-335U User’s Guide The ZyXEL Device guarantees not only high speed Internet access, but secure internal network protection and traffic management as well. Figure 1 Secure Internet Access via Cable or DSL Modem You can also configure firewall and content filtering on the ZyXEL Device for secure Internet access. When the firewall is on, all incoming traffic from the Internet to your network is blocked unless it is initiated from your network.
PAGE 33
P-334U/P-335U User’s Guide 1.2.3 Print Server and Router Combined Application (P-335U Only) The P-335U’s built-in print server allows your network’s computers to share a printer. Simply connect a USB printer to the USB port on the ZyXEL Device. The following figure shows how you can setup your printer to operate on a LAN using the P-335U as a router and print server. Figure 3 Print Server Application 1.2.
PAGE 34
P-334U/P-335U User’s Guide 1.4 Good Habits for Managing Your ZyXEL Device Here are some things you should do regularly. • Change the password. Use a password that’s not easy to guess and that consists of different types of characters, such as numbers and letters. • Write down the password and put it in a safe place. • Back up the configuration (and make sure you know how to restore it). Restoring an earlier working configuration may be useful if the device becomes unstable or even crashes.
PAGE 35
P-334U/P-335U User’s Guide The following table describes the LEDs. Table 1 Front Panel LEDs LED COLOR STATUS DESCRIPTION PWR Green On The ZyXEL Device is receiving power and functioning properly. Blinking The ZyXEL Device is performing testing. Red On Power to the ZyXEL Device is too low. None Off The ZyXEL Device is not receiving power. Green On The ZyXEL Device has a successful 10Mb Ethernet connection. Blinking The ZyXEL Device is sending/receiving data.
PAGE 36
P-334U/P-335U User’s Guide 36 Chapter 1 Getting to Know Your ZyXEL Device
PAGE 37
P-334U/P-335U User’s Guide CHAPTER 2 Introducing the Web Configurator This chapter describes how to access the ZyXEL Device web configurator and provides an overview of its screens. 2.1 Web Configurator Overview The web configurator is an HTML-based management interface that allows easy ZyXEL Device setup and management via Internet browser. Use Internet Explorer 6.0 and later or Netscape Navigator 7.0 and later versions. The recommended screen resolution is 1024 by 768 pixels.
PAGE 38
P-334U/P-335U User’s Guide Figure 7 Change Password Screen Note: The management session automatically times out when the time period set in the Administrator Inactivity Timer field expires (default five minutes). Simply log back into the ZyXEL Device if this happens to you. 2.3 Resetting the ZyXEL Device If you forget your password or cannot access the web configurator, you will need to use the RESET button at the back of the ZyXEL Device to reload the factory-default configuration file.
PAGE 39
P-334U/P-335U User’s Guide Figure 8 Web Configurator Status Screen The following table describes the icons shown in the Status screen. Table 2 Status Screen Icon Key ICON DESCRIPTION Select a language from the drop-down list box to have the web configurator display in that language. Click this icon to open a web help page relevant to the screen you are currently configuring. Click this icon to open the setup wizard. The ZyXEL Device has a connection wizard and a bandwidth management wizard.
PAGE 40
P-334U/P-335U User’s Guide Table 2 Status Screen Icon Key ICON DESCRIPTION Select a number of seconds or None from the drop-down list box to refresh all screen statistics automatically at the end of every time interval or to not refresh the screen statistics. Click this button to refresh the status screen statistics. The following table describes the labels shown in the Status screen.
PAGE 41
P-334U/P-335U User’s Guide Table 3 Web Configurator Status Screen LABEL DESCRIPTION - CPU Usage This number shows how many kilobytes of the heap memory the ZyXEL Device is using. Heap memory refers to the memory that is not used by ZyNOS (ZyXEL Network Operating System) and is thus available for running processes like NAT and the firewall. The bar displays what percent of the ZyXEL Device's heap memory is in use. The bar turns from green to red when the maximum is being approached.
PAGE 42
P-334U/P-335U User’s Guide The following table describes the sub-menus. Table 4 Screens Summary LINK TAB Status FUNCTION This screen shows the ZyXEL Device’s general device, system and interface status information. Use this screen to access the wizard, and summary statistics tables. Network Wireless LAN WAN LAN DHCP Server NAT DDNS General Use this screen to configure wireless LAN. OTIST This screen allows you to assign wireless clients the ZyXEL Device’s wireless security settings.
PAGE 43
P-334U/P-335U User’s Guide Table 4 Screens Summary LINK TAB FUNCTION General Use this screen to enable bandwidth management. Advanced Use this screen to set the upstrem bandwidth and edit a bandwidth management rule. Monitor Use this screen to view the ZyXEL Device’s bandwidth usage and allotments. WWW Use this screen to configure through which interface(s) and from which IP address(es) users can use HTTP to manage the ZyXEL Device.
PAGE 44
P-334U/P-335U User’s Guide Figure 9 Summary: BW MGMT Monitor 2.4.3 Summary: DHCP Table DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individual clients to obtain TCP/IP configuration at start-up from a server. You can configure the ZyXEL Device as a DHCP server or disable it. When configured as a server, the ZyXEL Device provides the TCP/IP configuration for the clients.
PAGE 45
P-334U/P-335U User’s Guide Table 5 Summary: DHCP Table (continued) LABEL DESCRIPTION MAC Address This field shows the MAC address of the computer with the name in the Host Name field. Every Ethernet device has a unique MAC (Media Access Control) address. The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters, for example, 00:A0:C5:00:00:02. Refresh Click Refresh to renew the screen. 2.4.4 Summary: Packet Statistics Click the Packet Statistics (Details...
PAGE 46
P-334U/P-335U User’s Guide Figure 12 Summary: Packet Statistics LABEL DESCRIPTION Rx B/s This displays the reception speed in bytes per second on this port. Up Time This is the total amount of time the line has been up. System Up Time This is the total time the ZyXEL Device has been on. Poll Interval(s) Enter the time interval for refreshing statistics in this field. Set Interval Click this button to apply the new poll interval you entered in the Poll Interval(s) field.
PAGE 47
P-334U/P-335U User’s Guide Figure 14 Summary: Wireless Association List The following table describes the labels in this screen. Table 7 Summary: Wireless Association List LABEL DESCRIPTION # This is the index number of an associated wireless station. MAC Address This field displays the MAC address of an associated wireless station. Association Time This field displays the time a wireless station first associated with the ZyXEL Device. Refresh Click Refresh to redisplay the current screen.
PAGE 48
P-334U/P-335U User’s Guide 48 Chapter 2 Introducing the Web Configurator
PAGE 49
P-334U/P-335U User’s Guide CHAPTER 3 Connection Wizard This chapter provides information on the Wizard setup screens in the web configurator. 3.1 Wizard Setup The web configurator’s Wizard setup helps you configure your device to access the Internet. Refer to your ISP (Internet Service Provider) checklist in the Quick Start Guide to know what to enter in each field. Leave a field blank if you don’t have that information.
PAGE 50
P-334U/P-335U User’s Guide Figure 16 Select a Language 4 Read the on-screen information and click Next. Figure 17 Welcome to the Connection Wizard 3.2 Connection Wizard: STEP 1: System Information System Information contains administrative and system-related information. 3.2.1 System Name System Name is for identification purposes. However, because some ISPs check this name you should enter your computer's "Computer Name". • In Windows 95/98 click Start, Settings, Control Panel, Network.
PAGE 51
P-334U/P-335U User’s Guide 3.2.2 Domain Name The Domain Name entry is what is propagated to the DHCP clients on the LAN. If you leave this blank, the domain name obtained by DHCP from the ISP is used. While you must enter the host name (System Name) on each individual computer, the domain name can be assigned from the ZyXEL Device via DHCP. Click Next to configure the ZyXEL Device for Internet access. Figure 18 Wizard Step 1: System Information The following table describes the labels in this screen.
PAGE 52
P-334U/P-335U User’s Guide Figure 19 Wizard Step 2: Wireless LAN The following table describes the labels in this screen. Table 9 Wizard Step 2: Wireless LAN LABEL DESCRIPTION Name(SSID) Enter a descriptive name (up to 32 printable 7-bit ASCII characters) for the wireless LAN. If you change this field on the ZyXEL Device, make sure all wireless stations use the same SSID in order to access the network. Security Select a Security level from the drop-down list box.
PAGE 53
P-334U/P-335U User’s Guide 3.3.1 Basic(WEP) Security Choose Basic(WEP) to setup WEP Encryption parameters. Figure 20 Wizard Step 2: Basic(WEP) Security The following table describes the labels in this screen. Table 10 Wizard Step 2: Basic(WEP) Security LABEL DESCRIPTION Passphrase Type a Passphrase (up to 32 printable characters) and click Generate. The ZyXEL Device automatically generates a WEP key. WEP Encryption Select 64-bit WEP, 128-bit WEP or 256-bit WEP to allow data encryption.
PAGE 54
P-334U/P-335U User’s Guide Table 10 Wizard Step 2: Basic(WEP) Security LABEL DESCRIPTION Key 1 to Key 4 The WEP keys are used to encrypt data. Both the ZyXEL Device and the wireless stations must use the same WEP key for data transmission. If you chose 64-bit WEP, then enter any 5 ASCII characters or 10 hexadecimal characters ("0-9", "A-F"). If you chose 128-bit WEP, then enter 13 ASCII characters or 26 hexadecimal characters ("0-9", "A-F").
PAGE 55
P-334U/P-335U User’s Guide 3.3.3 OTIST The following screen allows you to enable ZyXEL Device One-Touch Intelligent Security Technology (OTIST). One-Touch Intelligent Security Technology (OTIST) allows your ZyXEL Device to assign wireless clients the ZyXEL Device’s SSID and static WEP or WPAPSK encryption settings. The wireless client must also support OTIST and have OTIST enabled. See Section 4.4 on page 77 for more information.
PAGE 56
P-334U/P-335U User’s Guide 3.4 Connection Wizard: STEP 3: Internet Configuration The ZyXEL Device offers three Internet connection types. They are Ethernet, PPP over Ethernet or PPTP. The wizard attempts to detect which WAN connection type you are using. If the wizard does not detect a connection type, you must select one from the drop-down list box. Check with your ISP to make sure you use the correct type. This wizard screen varies according to the connection type that you select.
PAGE 57
P-334U/P-335U User’s Guide Figure 24 Wizard Step 3: Ethernet Connection 3.4.2 PPPoE Connection Point-to-Point Protocol over Ethernet (PPPoE) functions as a dial-up connection. PPPoE is an IETF (Internet Engineering Task Force) standard specifying how a host personal computer interacts with a broadband modem (for example DSL, cable, wireless, etc.) to achieve access to high-speed data networks.
PAGE 58
P-334U/P-335U User’s Guide Figure 25 Wizard Step 3: PPPoE Connection The following table describes the labels in this screen. Table 14 Wizard Step 3: PPPoE Connection LABEL DESCRIPTION ISP Parameter for Internet Access Connection Type Select the PPP over Ethernet option for a dial-up connection. Service Name Type the name of your service provider. User Name Type the user name given to you by your ISP. Password Type the password associated with the user name above.
PAGE 59
P-334U/P-335U User’s Guide Figure 26 Wizard Step 3: PPTP Connection The following table describes the fields in this screen Table 15 Wizard Step 3: PPTP Connection LABEL DESCRIPTION ISP Parameters for Internet Access Connection Type Select PPTP from the drop-down list box. To configure a PPTP client, you must configure the User Name and Password fields for a PPP connection and the PPTP parameters for a PPTP connection. User Name Type the user name given to you by your ISP.
PAGE 60
P-334U/P-335U User’s Guide 3.4.4 Your IP Address The following wizard screen allows you to assign a fixed IP address or give the ZyXEL Device an automatically assigned IP address depending on your ISP. Figure 27 Wizard Step 3: Your IP Address The following table describes the labels in this screen Table 16 Wizard Step 3: Your IP Address LABEL DESCRIPTION Get automatically from your ISP Select this option If your ISP did not assign you a fixed IP address. This is the default selection.
PAGE 61
P-334U/P-335U User’s Guide You can obtain your IP address from the IANA, from an ISP or have it assigned by a private network. If you belong to a small organization and your Internet access is through an ISP, the ISP can provide you with the Internet addresses for your local networks. On the other hand, if you are part of a much larger organization, you should consult your network administrator for the appropriate IP addresses.
PAGE 62
P-334U/P-335U User’s Guide 1 The ISP tells you the DNS server addresses, usually in the form of an information sheet, when you sign up. If your ISP gives you DNS server addresses, enter them in the DNS Server fields in the Wizard and/or WAN > Internet Connection screen. 2 If the ISP did not give you DNS server information, leave the DNS Server fields set to 0.0.0.
PAGE 63
P-334U/P-335U User’s Guide Table 18 Wizard Step 3: WAN IP and DNS Server Addresses LABEL DESCRIPTION First DNS Server Second DNS Server Third DNS Server Enter the DNS server's IP address in the fields provided. If you do not configure a system DNS server, you must use IP addresses when configuring DDNS and the time server. Back Click Back to return to the previous screen. Next Click Next to continue. Exit Click Exit to close the wizard screen without saving. 3.4.
PAGE 64
P-334U/P-335U User’s Guide The following table describes the fields in this screen. Table 20 Wizard Step 3: WAN MAC Address LABEL DESCRIPTION Factory Default Select Factory Default to use the factory assigned default MAC address. Clone the computer’s MAC address Select this option and enter the IP address of the computer on the LAN whose MAC you are cloning. It is advisable to clone the MAC address from a computer on your LAN even if your ISP does not presently require MAC address authentication.
PAGE 65
P-334U/P-335U User’s Guide Table 21 Wizard Step 4: Bandwidth Management LABEL DESCRIPTION Next Click Next to continue. Exit Click Exit to close the wizard screen without saving. 3.6 Connection Wizard Complete Click Apply to save your configuration. Figure 31 Connection Wizard Save Follow the on-screen instructions and click Finish to complete the wizard setup.
PAGE 66
P-334U/P-335U User’s Guide 66 Chapter 3 Connection Wizard
PAGE 67
P-334U/P-335U User’s Guide CHAPTER 4 Wireless LAN This chapter discusses how to configure the wireless network settings in your ZyXEL Device. See the appendices for more detailed information about wireless networks. 4.1 Wireless Network Overview The following figure provides an example of a wireless network. Figure 33 Example of a Wireless Network The wireless network is the part in the blue circle. In this wireless network, devices A and B are called wireless clients.
PAGE 68
P-334U/P-335U User’s Guide • Every wireless client in the same wireless network must use security compatible with the AP. Security stops unauthorized devices from using the wireless network. It can also protect the information that is sent in the wireless network. 4.2 Wireless Security Overview The following sections introduce different types of wireless security you can set up in the wireless network. 4.2.1 SSID Normally, the AP acts like a beacon and regularly broadcasts the SSID in the area.
PAGE 69
P-334U/P-335U User’s Guide For wireless networks, there are two typical places to store the user names and passwords for each user. • In the AP: this feature is called a local user database or a local database. • In a RADIUS server: this is a server used in businesses more than in homes. If your AP does not provide a local user database and if you do not have a RADIUS server, you cannot set up user names and passwords for your users.
PAGE 70
P-334U/P-335U User’s Guide Note: It is recommended that wireless networks use WPA-PSK, WPA, or stronger encryption. IEEE 802.1x and WEP encryption are better than none at all, but it is still possible for unauthorized devices to figure out the original information pretty quickly. It is not possible to use WPA-PSK, WPA or stronger encryption with a local user database.
PAGE 71
P-334U/P-335U User’s Guide Figure 34 Wireless General The following table describes the general wireless LAN labels in this screen. Table 23 Wireless General LABEL DESCRIPTION Enable Wireless LAN Click the check box to activate wireless LAN. Name(SSID) (Service Set IDentity) The SSID identifies the Service Set with which a wireless station is associated. Wireless stations associating to the access point (AP) must have the same SSID.
PAGE 72
P-334U/P-335U User’s Guide Note: If you do not enable any wireless security on your ZyXEL Device, your network is accessible to any wireless networking device that is within range. Figure 35 Wireless: No Security The following table describes the labels in this screen. Table 24 Wireless No Security LABEL DESCRIPTION Security Mode Choose No Security from the drop-down list box. Apply Click Apply to save your changes back to the ZyXEL Device.
PAGE 73
P-334U/P-335U User’s Guide Figure 36 Wireless: Static WEP Encryption The following table describes the wireless LAN security labels in this screen. Table 25 Wireless: Static WEP Encryption LABEL DESCRIPTION Passphrase Enter a passphrase (password phrase) of up to 32 printable characters and click Generate. The ZyXEL Device automatically generates four different WEP keys and displays them in the Key fields below. WEP Encryption Select 64-bit WEP, 128-bit WEP or 256-bit WEP to enable data encryption.
PAGE 74
P-334U/P-335U User’s Guide Table 25 Wireless: Static WEP Encryption LABEL DESCRIPTION Key 1 to Key 4 The WEP keys are used to encrypt data. Both the ZyXEL Device and the wireless stations must use the same WEP key for data transmission. If you chose 64-bit WEP, then enter any 5 ASCII characters or 10 hexadecimal characters ("0-9", "A-F"). If you chose 128-bit WEP, then enter 13 ASCII characters or 26 hexadecimal characters ("0-9", "A-F").
PAGE 75
P-334U/P-335U User’s Guide The following table describes the labels in this screen. Table 26 Wireless: WPA-PSK/WPA2-PSK LABEL DESCRIPTION WPA Compatible This check box is available only when you select WPA2-PSK or WPA2 in the Security Mode field. Select the check box to have both WPA2 and WPA wireless clients be able to communicate with the ZyXEL Device even when the ZyXEL Device is using WPA2PSK or WPA2. Pre-Shared Key The encryption mechanisms used for WPA/WPA2 and WPA-PSK/WPA2-PSK are the same.
PAGE 76
P-334U/P-335U User’s Guide Figure 38 Wireless: WPA/WPA2 The following table describes the labels in this screen. Table 27 Wireless: WPA/WPA2 LABEL DESCRIPTION WPA Compatible This check box is available only when you select WPA2-PSK or WPA2 in the Security Mode field. Select the check box to have both WPA2 and WPA wireless clients be able to communicate with the ZyXEL Device even when the ZyXEL Device is using WPA2-PSK or WPA2.
PAGE 77
P-334U/P-335U User’s Guide Table 27 Wireless: WPA/WPA2 LABEL DESCRIPTION Group Key Update Timer The Group Key Update Timer is the rate at which the AP (if using WPA-PSK/ WPA2-PSK key management) or RADIUS server (if using WPA/WPA2 key management) sends a new group key out to all clients. The re-keying process is the WPA/WPA2 equivalent of automatically changing the WEP key for an AP and all stations in a WLAN on a periodic basis.
PAGE 78
P-334U/P-335U User’s Guide 4.4.1 Enabling OTIST You must enable OTIST on both the AP and wireless client before you start transferring settings. Note: The AP and wireless client(s) MUST use the same Setup key. 4.4.1.1 AP You can enable OTIST using the OTIST button or the web configurator. 4.4.1.1.1 OTIST button If you use the OTIST button, the default (01234567) or previous saved (through the web configurator) Setup key is used to encrypt the settings that you want to transfer.
PAGE 79
P-334U/P-335U User’s Guide The following table describes the labels in this screen. Table 28 OTIST LABEL DESCRIPTION Setup Key Type an OTIST Setup Key of exactly eight ASCII characters in length. The default OTIST setup key is "01234567". Note: If you change the OTIST setup key here, you must also make the same change on the wireless client(s). Yes! If you want OTIST to automatically generate a WPA-PSK, you must: • Change your security to No Security in the Wireless LAN > General screen.
PAGE 80
P-334U/P-335U User’s Guide 4.4.2 Starting OTIST Note: You must press the OTIST button or click Start in the AP OTIST web configurator screen and in the wireless client(s) Adapter screen all within three minutes (at the time of writing). You can start OTIST in the wireless clients and AP in any order but they must all be within range and have OTIST enabled. 1 In the AP, a web configurator screen pops up showing you the security settings to transfer.
PAGE 81
P-334U/P-335U User’s Guide Figure 45 Start OTIST? 2 If an OTIST-enabled wireless client loses its wireless connection for more than ten seconds, it will search for an OTIST-enabled AP for up to one minute. (If you manually have the wireless client search for an OTIST-enabled AP, there is no timeout; click Cancel in the OTIST progress screen to stop the search.
PAGE 82
P-334U/P-335U User’s Guide Figure 46 MAC Address Filter The following table describes the labels in this menu. Table 29 MAC Address Filter LABEL DESCRIPTION Active Select Yes from the drop down list box to enable MAC address filtering. Filter Action Define the filter action for the list of MAC addresses in the MAC Address table.
PAGE 83
P-334U/P-335U User’s Guide 4.6 Wireless LAN Advanced Screen Click Network > Wireless LAN > Advanced. The screen appears as shown. Figure 47 Advanced The following table describes the labels in this screen. Table 30 Advanced LABEL DESCRIPTION Wireless Advanced Setup RTS/CTS Threshold Enter a value between 0 and 2432. Fragmentation Threshold It is the maximum data fragment size that can be sent. Enter a value between 256 and 2432. 802.11 Mode Select 802.11b to allow only IEEE 802.
PAGE 84
P-334U/P-335U User’s Guide Table 30 Advanced 84 LABEL DESCRIPTION Apply Click Apply to save your changes back to the ZyXEL Device. Reset Click Reset to reload the previous configuration for this screen.
PAGE 85
P-334U/P-335U User’s Guide CHAPTER 5 Wireless Tutorial This chapter gives you examples of how to set up an access point and wireless client for wireless communication using the following parameters. The wireless clients can access the Internet through an AP wirelessly. 5.1 Example Parameters SSID SSID_Example3 Channel Auto Security WPA-PSK (Pre-Shared Key: ThisismyWPA-PSKpre-sharedkey) 802.11 mode IEEE 802.
PAGE 86
P-334U/P-335U User’s Guide Figure 48 AP: Wireless LAN > General 3 Make sure the Enable Wireless LAN check box is selected. 4 Enter SSID_Example3 as the SSID, select a channel or select Auto Channel Selection to have the AP choose a channel which is not used by another AP and display the channel number in the field below after you click Apply. 5 Set security mode to WPA-PSK and enter ThisismyWPA-PSKpre-sharedkey in the Pre-Shared Key field. Click Apply. 6 Open the Status screen.
PAGE 87
P-334U/P-335U User’s Guide Figure 49 AP: Status 7 Click the WLAN Station Status hyperlink in the AP’s Status screen. You can see if any wireless client has connected to the AP. Figure 50 AP: Status: WLAN Station Status 5.3 Configuring the Wireless Client This section describes how to connect the wireless client to a network.
PAGE 88
P-334U/P-335U User’s Guide 5.3.1 Connecting to a Wireless LAN The following sections show you how to join a wireless network using the ZyXEL utility, as in the following diagram. The wireless client is labeled C and the access point is labeled AP. There are three ways to connect the client to an access point. • Configure nothing and leave the wireless client to automatically scan for and connect to any available network that has no wireless security configured. • Manually connect to a network.
PAGE 89
P-334U/P-335U User’s Guide 3 When you try to connect to an AP with security configured, a window will pop up prompting you to specify the security settings. Enter the pre-shared key and leave the encryption type at the default setting. Use the Next button to move on to the next screen. You can use the Back button at any time to return to the previous screen, or the Exit button to return to the Site Survey screen. Figure 51 ZyXEL Utility: Security Settings 4 The Confirm Save window appears.
PAGE 90
P-334U/P-335U User’s Guide Figure 53 ZyXEL Utility: Link Info 6 Open your Internet browser and enter http://www.zyxel.com or the URL of any other web site in the address bar. If you are able to access the web site, your wireless connection is successfully configured. If you cannot access the web site, try changing the encryption type in the Security Settings screen, check the Troubleshooting section of this User's Guide or contact your network administrator. 5.3.
PAGE 91
P-334U/P-335U User’s Guide you want to search again. You can also configure your profile for a wireless network that is not in the list. Figure 55 ZyXEL Utility: Add New Profile 3 Give the profile a descriptive name (of up to 32 printable ASCII characters). Select Infrastructure and either manually enter or select the AP's SSID in the Scan Info table and click Select. 4 Choose the same encryption method as the AP to which you want to connect (In this example, WPA-PSK).
PAGE 92
P-334U/P-335U User’s Guide 6 In the next screen, leave both boxes checked. Figure 58 Profile: Wireless Protocol Settings. 7 Verify the profile settings in the read-only screen. Click Save to save and go to the next screen. Figure 59 Profile: Confirm Save 8 Click Activate Now to use the new profile immediately. Otherwise, click the Activate Later button. If you clicked Activate Later, you can select the profile from the list in the Profile screen and click Connect to activate it.
PAGE 93
P-334U/P-335U User’s Guide 10Open your Internet browser, enter http://www.zyxel.com or the URL of any other web site in the address bar and press ENTER. If you are able to access the web site, your new profile is successfully configured. 11If you cannot access the Internet go back to the Profile screen, select the profile you are using and click Edit. Check the details you entered previously. Also, refer to the Troubleshooting section of this User's Guide or contact your network administrator if necessary.
PAGE 94
P-334U/P-335U User’s Guide 94 Chapter 5 Wireless Tutorial
PAGE 95
P-334U/P-335U User’s Guide CHAPTER 6 WAN This chapter describes how to configure WAN settings. 6.1 WAN Overview See the chapter about the connection wizard for more information on the fields in the WAN screens. 6.2 WAN MAC Address The MAC address screen allows users to configure the WAN port's MAC address by either using the factory default or cloning the MAC address from a computer on your LAN. Choose Factory Default to select the factory assigned default MAC Address.
PAGE 96
P-334U/P-335U User’s Guide Figure 61 Ethernet Encapsulation The following table describes the labels in this screen. Table 31 Ethernet Encapsulation LABEL DESCRIPTION Encapsulation You must choose the Ethernet option when the WAN port is used as a regular Ethernet. Service Type Choose from Standard, Telstra (RoadRunner Telstra authentication method), RRManager (Roadrunner Manager authentication method), RR-Toshiba (Roadrunner Toshiba authentication method) or Telia Login.
PAGE 97
P-334U/P-335U User’s Guide Table 31 Ethernet Encapsulation LABEL DESCRIPTION Get automatically from ISP Select this option If your ISP did not assign you a fixed IP address. This is the default selection. Use Fixed IP Address Select this option If the ISP assigned a fixed IP address. IP Address Enter your WAN IP address in this field if you selected Use Fixed IP Address. IP Subnet Mask Enter the IP Subnet Mask in this field.
PAGE 98
P-334U/P-335U User’s Guide Operationally, PPPoE saves significant effort for both you and the ISP or carrier, as it requires no specific configuration of the broadband modem at the customer site. By implementing PPPoE directly on the ZyXEL Device (rather than individual computers), the computers on the LAN do not need PPPoE software installed, since the ZyXEL Device does that part of the task. Furthermore, with NAT, all of the LANs’ computers will have access.
PAGE 99
P-334U/P-335U User’s Guide The following table describes the labels in this screen. Table 32 PPPoE Encapsulation LABEL DESCRIPTION ISP Parameters for Internet Access Encapsulation The PPP over Ethernet choice is for a dial-up connection using PPPoE. The ZyXEL Device supports PPPoE (Point-to-Point Protocol over Ethernet). PPPoE is an IETF Draft standard (RFC 2516) specifying how a personal computer (PC) interacts with a broadband modem (i.e. xDSL, cable, wireless, etc.) connection.
PAGE 100
P-334U/P-335U User’s Guide Table 32 PPPoE Encapsulation LABEL DESCRIPTION First DNS Server Second DNS Server Third DNS Server Select From ISP if your ISP dynamically assigns DNS server information (and the ZyXEL Device's WAN IP address). The field to the right displays the (read-only) DNS server IP address that the ISP assigns. Select User-Defined if you have the IP address of a DNS server. Enter the DNS server's IP address in the field to the right.
PAGE 101
P-334U/P-335U User’s Guide Figure 63 PPTP Encapsulation Chapter 6 WAN 101
PAGE 102
P-334U/P-335U User’s Guide The following table describes the labels in this screen. Table 33 PPTP Encapsulation LABEL DESCRIPTION ISP Parameters for Internet Access Encapsulation Point-to-Point Tunneling Protocol (PPTP) is a network protocol that enables secure transfer of data from a remote client to a private server, creating a Virtual Private Network (VPN) using TCP/IP-based networks. PPTP supports on-demand, multi-protocol, and virtual private networking over public networks, such as the Internet.
PAGE 103
P-334U/P-335U User’s Guide Table 33 PPTP Encapsulation LABEL DESCRIPTION Private This parameter determines if the ZyXEL Device will include the route to this remote node in its RIP broadcasts. If set to Yes, this route is kept private and not included in RIP broadcast. If No, the route to this remote node will be propagated to other hosts through RIP broadcasts.
PAGE 104
P-334U/P-335U User’s Guide Figure 64 Advanced The following table describes the labels in this screen. Table 34 Advanced LABEL DESCRIPTION Multicast Setup Multicast Select IGMP V-1 or IGMP V-2 or None. IGMP (Internet Group Multicast Protocol) is a network-layer protocol used to establish membership in a Multicast group - it is not used to carry user data. IGMP version 2 (RFC 2236) is an improvement over version 1 (RFC 1112) but IGMP version 1 is still in wide use.
PAGE 105
P-334U/P-335U User’s Guide CHAPTER 7 LAN This chapter describes how to configure LAN settings. 7.1 LAN Overview Local Area Network (LAN) is a shared communication system to which many computers are attached. The LAN screens can help you configure a LAN DHCP server, manage IP addresses, and partition your physical network into logical networks. 7.1.1 IP Pool Setup The ZyXEL Device is pre-configured with a pool of 32 IP addresses starting from 192.168.1.33 to 192.168.1.64.
PAGE 106
P-334U/P-335U User’s Guide 7.2.2 IP Address and Subnet Mask Refer to the IP Address and Subnet Mask section in the Connection Wizard chapter for this information. 7.2.3 Multicast Traditionally, IP packets are transmitted in one of either two ways - Unicast (1 sender - 1 recipient) or Broadcast (1 sender - everybody on the network). Multicast delivers IP packets to a group of hosts on the network - not everybody and not just 1.
PAGE 107
P-334U/P-335U User’s Guide The following table describes the labels in this screen. Table 35 LAN IP LABEL DESCRIPTION LAN TCP/IP IP Address Type the IP address of your ZyXEL Device in dotted decimal notation 192.168.1.1 (factory default). IP Subnet Mask The subnet mask specifies the network number portion of an IP address. Your ZyXEL Device will automatically calculate the subnet mask based on the IP address that you assign.
PAGE 108
P-334U/P-335U User’s Guide The following table describes the labels in this screen. Table 36 LAN IP Alias LABEL DESCRIPTION IP Alias 1,2 Select the check box to configure another LAN network for the ZyXEL Device. IP Address Enter the IP address of your ZyXEL Device in dotted decimal notation. IP Subnet Mask Your ZyXEL Device will automatically calculate the subnet mask based on the IP address that you assign. Unless you are implementing subnetting, use the subnet mask computed by the ZyXEL Device.
PAGE 109
P-334U/P-335U User’s Guide Table 37 Advanced LAN LABEL DESCRIPTION Allow between LAN and WAN Select this check box to forward NetBIOS packets from the LAN to the WAN and from the WAN to the LAN. If your firewall is enabled with the default policy set to block WAN to LAN traffic, you also need to enable the default WAN to LAN firewall rule that forwards NetBIOS traffic. Clear this check box to block all NetBIOS packets going from the LAN to the WAN and from the WAN to the LAN.
PAGE 110
P-334U/P-335U User’s Guide 110 Chapter 7 LAN
PAGE 111
P-334U/P-335U User’s Guide CHAPTER 8 DHCP Server 8.1 DHCP DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individual clients to obtain TCP/IP configuration at start-up from a server. You can configure the ZyXEL Device as a DHCP server or disable it. When configured as a server, the ZyXEL Device provides the TCP/IP configuration for the clients. If DHCP service is disabled, you must have another DHCP server on your LAN, or else the computer must be manually configured. 8.
PAGE 112
P-334U/P-335U User’s Guide Table 38 DHCP Server General LABEL DESCRIPTION Apply Click Apply to save your changes back to the ZyXEL Device. Reset Click Reset to begin configuring this screen afresh. 8.3 DHCP Server Advanced Screen This screen allows you to assign IP addresses on the LAN to specific individual computers based on their MAC addresses. You can also use this screen to configure the DNS server information that the ZyXEL Device sends to the DHCP clients.
PAGE 113
P-334U/P-335U User’s Guide The following table describes the labels in this screen. Table 39 DHCP Server Advanced LABEL DESCRIPTION # This is the index number of the static IP table entry (row). MAC Address Type the MAC address (with colons) of a computer on your LAN. IP Address Type the LAN IP address of a computer on your LAN. DNS Servers Assigned by DHCP Server The ZyXEL Device passes a DNS (Domain Name System) server IP address (in the order you specify here) to the DHCP clients.
PAGE 114
P-334U/P-335U User’s Guide Figure 70 Client List The following table describes the labels in this screen. Table 40 Client List 114 LABEL DESCRIPTION # This is the index number of the host computer. IP Address This field displays the IP address relative to the # field listed above. Host Name This field displays the computer host name. MAC Address The MAC (Media Access Control) or Ethernet address on a LAN (Local Area Network) is unique to your computer (six pairs of hexadecimal notation).
PAGE 115
P-334U/P-335U User’s Guide CHAPTER 9 Network Address Translation (NAT) This chapter discusses how to configure NAT on the ZyXEL Device. 9.1 NAT Overview NAT (Network Address Translation - NAT, RFC 1631) is the translation of the IP address of a host in a packet. For example, the source address of an outgoing packet, used within one network is changed to a different IP address known within another network. 9.
PAGE 116
P-334U/P-335U User’s Guide 9.2.2 Configuring Servers Behind Port Forwarding (Example) Let's say you want to assign ports 21-25 to one FTP, Telnet and SMTP server (A in the example), port 80 to another (B in the example) and assign a default server IP address of 192.168.1.35 to a third (C in the example). You assign the LAN IP addresses and the ISP assigns the WAN IP address. The NAT network appears as a single host on the Internet Figure 71 Multiple Servers Behind NAT Example 9.
PAGE 117
P-334U/P-335U User’s Guide The following table describes the labels in this screen. Table 41 NAT General LABEL DESCRIPTION Network Address Translation Network Address Translation (NAT) allows the translation of an Internet protocol address used within one network (for example a private IP address used in a local network) to a different IP address known within another network (for example a public IP address used on the Internet). Select the check box to enable NAT.
PAGE 118
P-334U/P-335U User’s Guide Figure 73 NAT Application The following table describes the labels in this screen. Table 42 NAT Application LABEL DESCRIPTION Game List Update A game list includes the pre-defined service name(s) and port number(s). You can edit and upload it to the ZyXEL Device to replace the existing entries in the second field next to Service Name. File Path Type in the location of the file you want to upload in this field or click Browse... to find it. Browse... Click Browse...
PAGE 119
P-334U/P-335U User’s Guide Table 42 NAT Application (continued) LABEL DESCRIPTION Service Name Type a name (of up to 31 printable characters) to identify this rule in the first field next to Service Name. Otherwise, select a predefined service in the second field next to Service Name. The predefined service name and port number(s) will display in the Service Name and Port fields. Port Type a port number(s) to be forwarded.
PAGE 120
P-334U/P-335U User’s Guide Figure 74 Game List Example version=1 1;name=Battlefield 1942;port=14567,22000,23000-23009,27900,28900 2;name=Call of Duty;port=28960 3;name=Civilization IV;port=2056 4;name=Diablo I and II;port=6112-6119,4000 5;name=Doom 3;port=27666 6;name=F.E.A.
PAGE 121
P-334U/P-335U User’s Guide 9.5.1 Trigger Port Forwarding Example The following is an example of trigger port forwarding. Figure 75 Trigger Port Forwarding Process: Example 1 Jane requests a file from the Real Audio server (port 7070). 2 Port 7070 is a “trigger” port and causes the ZyXEL Device to record Jane’s computer IP address. The ZyXEL Device associates Jane's computer IP address with the "incoming" port range of 6970-7170.
PAGE 122
P-334U/P-335U User’s Guide Figure 76 NAT Advanced The following table describes the labels in this screen. Table 43 NAT Advanced LABEL DESCRIPTION Max NAT/Firewall Session Per User Type a number ranging from 1 to 2048 to limit the number of NAT/firewall sessions that a host can create. When computers use peer to peer applications, such as file sharing applications, they may use a large number of NAT sessions.
PAGE 123
P-334U/P-335U User’s Guide Table 43 NAT Advanced LABEL DESCRIPTION Incoming Incoming is a port (or a range of ports) that a server on the WAN uses when it sends out a particular service. The ZyXEL Device forwards the traffic with this port (or range of ports) to the client computer on the LAN that requested the service. Start Port Type a port number or the starting port number in a range of port numbers. End Port Type a port number or the ending port number in a range of port numbers.
PAGE 124
P-334U/P-335U User’s Guide 124 Chapter 9 Network Address Translation (NAT)
PAGE 125
P-334U/P-335U User’s Guide CHAPTER 10 Dynamic DNS 10.1 Dynamic DNS Introduction Dynamic DNS allows you to update your current dynamic IP address with one or many dynamic DNS services so that anyone can contact you (in NetMeeting, CU-SeeMe, etc.). You can also access your FTP server or Web site on your own computer using a domain name (for instance myhost.dhs.org, where myhost is a name of your choice) that will never change instead of using an IP address that changes each time you reconnect.
PAGE 126
P-334U/P-335U User’s Guide Figure 77 Dynamic DNS The following table describes the labels in this screen. Table 44 Dynamic DNS LABEL DESCRIPTION Enable Dynamic DNS Select this check box to use dynamic DNS. Service Provider Select the name of your Dynamic DNS service provider. Dynamic DNS Type Select the type of service that you are registered for from your Dynamic DNS service provider. Host Name Enter a host names in the field provided.
PAGE 127
P-334U/P-335U User’s Guide C H A P T E R 11 Firewall This chapter gives some background information on firewalls and explains how to get started with the ZyXEL Device firewall. 11.1 Introduction to Firewall 11.1.1 What is a Firewall? Originally, the term firewall referred to a construction technique designed to prevent the spread of fire from one room to another. The networking term "firewall" is a system or group of systems that enforces an access-control policy between two networks.
PAGE 128
P-334U/P-335U User’s Guide The ZyXEL Device is installed between the LAN and a broadband modem connecting to the Internet. This allows it to act as a secure gateway for all data passing between the Internet and the LAN. The ZyXEL Device has one Ethernet WAN port and four Ethernet LAN ports, which are used to physically separate the network into two areas.The WAN (Wide Area Network) port attaches to the broadband (cable or DSL) modem to the Internet.
PAGE 129
P-334U/P-335U User’s Guide The following table describes the labels in this screen. Table 45 Firewall General LABEL DESCRIPTION Enable Firewall Select this check box to activate the firewall. The ZyXEL Device performs access control and protects against Denial of Service (DoS) attacks when the firewall is activated. Packet Direction This is the direction of travel of packets. Firewall rules are grouped based on the direction of travel of packets to which they apply.
PAGE 130
P-334U/P-335U User’s Guide Figure 79 Services The following table describes the labels in this screen. Table 46 Firewall Services 130 LABEL DESCRIPTION ICMP Internet Control Message Protocol is a message control and error-reporting protocol between a host server and a gateway to the Internet. ICMP uses Internet Protocol (IP) datagrams, but the messages are processed by the TCP/IP software and directly apparent to the application user.
PAGE 131
P-334U/P-335U User’s Guide Table 46 Firewall Services LABEL DESCRIPTION Do not respond to requests for unauthorized services Select this option to prevent hackers from finding the ZyXEL Device by probing for unused ports. If you select this option, the ZyXEL Device will not respond to port request(s) for unused ports, thus leaving the unused ports and the ZyXEL Device unseen.
PAGE 132
P-334U/P-335U User’s Guide 132 Chapter 11 Firewall
PAGE 133
P-334U/P-335U User’s Guide CHAPTER 12 Content Filtering This chapter provides a brief overview of content filtering using the embedded web GUI. 12.1 Introduction to Content Filtering Internet content filtering allows you to create and enforce Internet access policies tailored to their needs. Content filtering is the ability to block certain web features or specific URL keywords. 12.
PAGE 134
P-334U/P-335U User’s Guide Figure 80 Content Filter: Filter The following table describes the labels in this screen. Table 47 Content Filter: Filter 134 LABEL DESCRIPTION Trusted Computer IP Address To enable this feature, type an IP address of any one of the computers in your network that you want to have as a trusted computer. This allows the trusted computer to have full access to all features that are configured to be blocked by content filtering.
PAGE 135
P-334U/P-335U User’s Guide Table 47 Content Filter: Filter LABEL DESCRIPTION Keyword Type a keyword in this field. You may use any character (up to 64 characters). Wildcards are not allowed. You can also enter a numerical IP address. Keyword List This list displays the keywords already added. Add Click Add after you have typed a keyword. Repeat this procedure to add other keywords. Up to 64 keywords are allowed.
PAGE 136
P-334U/P-335U User’s Guide The following table describes the labels in this screen. Table 48 Content Filter: Schedule LABEL DESCRIPTION Day to Block Select check boxes for the days that you want the ZyXEL Device to perform content filtering. Select the Everyday check box to have content filtering turned on all days of the week. Time of Day to Block (24-Hour Format) Time of Day to Block allows the administrator to define during which time periods content filtering is enabled.
PAGE 137
P-334U/P-335U User’s Guide 12.6.3 File Name URL Checking Filename URL checking has the ZyXEL Device check all of the characters in the URL. For example, filename URL checking searches for keywords within the URL www.zyxel.com.tw/news/pressroom.php. Use the ip urlfilter customize actionFlags 8 [disable | enable] command to extend (or not extend) the keyword blocking search to include the URL's complete filename.
PAGE 138
P-334U/P-335U User’s Guide 138 Chapter 12 Content Filtering
PAGE 139
P-334U/P-335U User’s Guide CHAPTER 13 IPSec VPN This chapter explains how to set up and maintain IPSec VPNs in the ZyXEL Device. First, it provides an overview of IPSec VPNs. Then, it introduces each screen for IPSec VPN in the ZyXEL Device. This chapter applies to the P-335U. 13.1 IPSec VPN Overview A virtual private network (VPN) provides secure communications between sites without the expense of leased site-to-site lines.
PAGE 140
P-334U/P-335U User’s Guide Figure 83 VPN: IKE SA and IPSec SA In this example, a computer in network A is exchanging data with a computer in network B. Inside networks A and B, the data is transmitted the same way data is normally transmitted in the networks. Between routers X and Y, the data is protected by tunneling, encryption, authentication, and other security features of the IPSec SA. The IPSec SA is established securely using the IKE SA that routers X and Y established first.
PAGE 141
P-334U/P-335U User’s Guide 13.1.2.1 IKE SA Proposal The IKE SA proposal is used to identify the encryption algorithm, authentication algorithm, and Diffie-Hellman (DH) key group that the ZyXEL Device and remote IPSec router use in the IKE SA. In main mode, this is done in steps 1 and 2, as illustrated below. Figure 84 IKE SA: Main Negotiation Mode, Steps 1 - 2: IKE SA Proposal 1 2 The ZyXEL Device sends a proposal to the remote IPSec router.
PAGE 142
P-334U/P-335U User’s Guide In main mode, the ZyXEL Device and remote IPSec router authenticate each other in steps 5 and 6, as illustrated below. Their identities are encrypted using the encryption algorithm and encryption key the ZyXEL Device and remote IPSec router selected in previous steps.
PAGE 143
P-334U/P-335U User’s Guide Table 50 VPN Example: Mismatching ID Type and Content ZYXEL DEVICE REMOTE IPSEC ROUTER Peer ID type: IP Peer ID type: E-mail Peer ID content: 1.1.1.15 Peer ID content: tom@yourcompany.com 13.1.2.4 Negotiation Mode There are two negotiation modes: main mode and aggressive mode. Main mode provides better security, while aggressive mode is faster. Main mode takes six steps to establish an IKE SA. Steps 1-2: The ZyXEL Device sends its proposals to the remote IPSec router.
PAGE 144
P-334U/P-335U User’s Guide Most routers like router A now have an IPSec pass-through feature. This feature helps router A recognize VPN packets and route them appropriately. If router A has this feature, router X and router Y can establish a VPN tunnel as long as the IPSec protocol is ESP. (See IPSec Protocol on page 144 for more information about active protocols.) If router A does not have an IPSec pass-through or if the IPSec protocol is AH, you can solve this problem by enabling NAT traversal.
PAGE 145
P-334U/P-335U User’s Guide Usually, you should select ESP. AH does not support encryption, and ESP is more suitable with NAT. 13.1.3.3 Encapsulation There are two ways to encapsulate packets. Usually, you should use tunnel mode because it is more secure. Transport mode is only used when the IPSec SA is used for communication between the ZyXEL Device and remote IPSec router (for example, for remote management), not between computers on the local and remote networks.
PAGE 146
P-334U/P-335U User’s Guide If you do not enable PFS, the ZyXEL Device and remote IPSec router use the same root key that was generated when the IKE SA was established to generate encryption keys. The DH key exchange is time-consuming and may be unnecessary for data that does not require such security. 13.1.4 Additional IPSec VPN Topics This section discusses other IPSec VPN topics that apply to either IKE SAs or IPSec SAs or both. Relationships between the topics are also highlighted. 13.1.4.
PAGE 147
P-334U/P-335U User’s Guide 13.2 Remote DNS Server In cases where you want to use domain names to access Intranet servers on a remote network that has a DNS server, you must identify that DNS server.
PAGE 148
P-334U/P-335U User’s Guide The following table describes the fields in this screen. Table 51 Security > VPN > Summary LABEL DESCRIPTION # This is the VPN policy index number. Active This field displays whether the VPN policy is active or not. This icon is turned on when the rule is enabled. Local Addr. This displays the beginning and ending (static) IP addresses or a (static) IP address and a subnet mask of computer(s) on your local network behind your ZyXEL Device. Remote Addr.
PAGE 149
P-334U/P-335U User’s Guide Figure 92 Security > VPN > Rule Setup: IKE (Basic) The following table describes the labels in this screen. Table 52 Security > VPN > Rule Setup: IKE (Basic) LABEL DESCRIPTION Property Active Select this check box to activate this VPN policy. This option determines whether a VPN rule is applied before a packet leaves the firewall.
PAGE 150
P-334U/P-335U User’s Guide Table 52 Security > VPN > Rule Setup: IKE (Basic) (continued) LABEL DESCRIPTION NAT Traversal Select this check box to enable NAT traversal. NAT traversal allows you to set up a VPN connection when there are NAT routers between the two IPSec routers. Note: The remote IPSec router must also have NAT traversal enabled. See Section 13.1.2.5 on page 143 for more information.
PAGE 151
P-334U/P-335U User’s Guide Table 52 Security > VPN > Rule Setup: IKE (Basic) (continued) LABEL DESCRIPTION Remote Address For a single IP address, enter a (static) IP address on the network behind the remote IPSec router. For a specific range of IP addresses, enter the beginning (static) IP address, in a range of computers on the network behind the remote IPSec router. To specify IP addresses on a network by their subnet mask, enter a (static) IP address on the network behind the remote IPSec router.
PAGE 152
P-334U/P-335U User’s Guide Table 52 Security > VPN > Rule Setup: IKE (Basic) (continued) LABEL DESCRIPTION Secure Gateway Address Type the WAN IP address or the domain name (up to 31 characters) of the IPSec router with which you're making the VPN connection. Set this field to 0.0.0.0 if the remote IPSec router has a dynamic WAN IP address (the IPSec Keying Mode field must be set to IKE). In order to have more than one active rule with the Secure Gateway Address field set to 0.0.0.
PAGE 153
P-334U/P-335U User’s Guide Table 52 Security > VPN > Rule Setup: IKE (Basic) (continued) LABEL DESCRIPTION Pre-Shared Key Type your pre-shared key in this field. A pre-shared key identifies a communicating party during a phase 1 IKE negotiation. It is called "pre-shared" because you have to share it with another party before you can communicate with them over a secure connection. Type from 8 to 31 case-sensitive ASCII characters or from 16 to 62 hexadecimal ("0-9", "A-F") characters.
PAGE 154
P-334U/P-335U User’s Guide Figure 93 Security > VPN > Rule Setup: IKE (Advanced) 154 Chapter 13 IPSec VPN
PAGE 155
P-334U/P-335U User’s Guide The following table describes the labels in this screen. Table 53 Security > VPN > Rule Setup: IKE (Advanced) LABEL DESCRIPTION Property Active Select this check box to activate this VPN policy. This option determines whether a VPN rule is applied before a packet leaves the firewall. Keep Alive Select this check box to have the ZyXEL Device automatically reinitiate the SA after the SA lifetime times out, even if there is no traffic.
PAGE 156
P-334U/P-335U User’s Guide Table 53 Security > VPN > Rule Setup: IKE (Advanced) (continued) LABEL DESCRIPTION Local Address For a single IP address, enter a (static) IP address on the LAN behind your ZyXEL Device. For a specific range of IP addresses, enter the beginning (static) IP address, in a range of computers on your LAN behind your ZyXEL Device. To specify IP addresses on a network by their subnet mask, enter a (static) IP address on the LAN behind your ZyXEL Device.
PAGE 157
P-334U/P-335U User’s Guide Table 53 Security > VPN > Rule Setup: IKE (Advanced) (continued) LABEL DESCRIPTION My IP Address Enter the ZyXEL Device's static WAN IP address (if it has one) or leave the field set to 0.0.0.0. The ZyXEL Device uses its current WAN IP address (static or dynamic) in setting up the VPN tunnel if you leave this field as 0.0.0.0.
PAGE 158
P-334U/P-335U User’s Guide Table 53 Security > VPN > Rule Setup: IKE (Advanced) (continued) LABEL DESCRIPTION Peer Content The configuration of the peer content depends on the peer ID type. For IP, type the IP address of the computer with which you will make the VPN connection. If you configure this field to 0.0.0.0 or leave it blank, the ZyXEL Device will use the address in the Secure Gateway Address field (refer to the Secure Gateway Address field description).
PAGE 159
P-334U/P-335U User’s Guide Table 53 Security > VPN > Rule Setup: IKE (Advanced) (continued) LABEL DESCRIPTION IPSec Protocol Select the security protocols used for an SA. Both AH and ESP increase processing requirements and communications latency (delay). If you select ESP here, you must select options from the Encryption Algorithm and Authentication Algorithm fields (described below). Encryption Algorithm Select which key size and encryption algorithm to use in the IKE SA.
PAGE 160
P-334U/P-335U User’s Guide 13.6.1 IPSec SA Proposal Using Manual Keys In IPSec SA using manual keys, you can only specify one encryption algorithm and one authentication algorithm. There is no DH key exchange, so you have to provide the encryption key and the authentication key the ZyXEL Device and remote IPSec router use. Note: The ZyXEL Device and remote IPSec router must use the same encryption key and authentication key. 13.6.
PAGE 161
P-334U/P-335U User’s Guide Figure 94 Security > VPN > Rule Setup: Manual The following table describes the labels in this screen. Table 54 Security > VPN > Rule Setup: Manual LABEL DESCRIPTION Property Active Select this check box to activate this VPN policy. IPSec Keying Mode Select IKE or Manual from the drop-down list box. IKE provides more protection so it is generally recommended. Manual is a useful option for troubleshooting if you have problems using IKE key management.
PAGE 162
P-334U/P-335U User’s Guide Table 54 Security > VPN > Rule Setup: Manual (continued) 162 LABEL DESCRIPTION DNS Server (for IPSec VPN) If there is a private DNS server that services the VPN, type its IP address here. The ZyXEL Device assigns this additional DNS server to the ZyXEL Device's DHCP clients that have IP addresses in this IPSec rule's range of local addresses. A DNS server allows clients on the VPN to find other computers and servers on the VPN by their (private) domain names.
PAGE 163
P-334U/P-335U User’s Guide Table 54 Security > VPN > Rule Setup: Manual (continued) LABEL DESCRIPTION Remote Address End /Mask When the remote IP address is a single address, type it a second time here. When the remote IP address is a range, enter the end (static) IP address, in a range of computers on the network behind the remote IPSec router. When the remote IP address is a subnet address, enter a subnet mask on the network behind the remote IPSec router.
PAGE 164
P-334U/P-335U User’s Guide Table 54 Security > VPN > Rule Setup: Manual (continued) LABEL DESCRIPTION IPSec Protocol Select the security protocols used for an SA. Both AH and ESP increase processing requirements and communications latency (delay). If you select ESP here, you must select options from the Encryption Algorithm and Authentication Algorithm fields (described below). Encryption Algorithm Select which key size and encryption algorithm to use in the IKE SA.
PAGE 165
P-334U/P-335U User’s Guide The following table describes the labels in this screen. Table 55 SECURITY > VPN > SA Monitor LABEL DESCRIPTION # This is the security association index number. Name This field displays the identification name for this VPN policy. Encapsulation This field displays Tunnel or Transport mode. IPSec Algorithm This field displays the security protocols used for an SA. Both AH and ESP increase ZyXEL Device processing requirements and communications latency (delay).
PAGE 166
P-334U/P-335U User’s Guide 13.10.1 Telecommuters Sharing One VPN Rule Example See the following figure and table for an example configuration that allows multiple telecommuters (A, B and C in the figure) to use one VPN rule to simultaneously access a ZyXEL Device at headquarters (HQ in the figure). The telecommuters do not have domain names mapped to the WAN IP addresses of their IPSec routers.
PAGE 167
P-334U/P-335U User’s Guide See the following table and figure for an example where three telecommuters each use a different VPN rule for a VPN connection with a ZyXEL Device located at headquarters. The ZyXEL Device at headquarters (HQ in the figure) identifies each incoming SA by its ID type and content and uses the appropriate VPN rule to establish the VPN connection.
PAGE 168
P-334U/P-335U User’s Guide Table 58 Telecommuters Using Unique VPN Rules Example TELECOMMUTERS HEADQUARTERS Telecommuter C (telecommuterc.dydns.org) Headquarters ZyXEL Device Rule 3: Local ID Type: E-mail Peer ID Type: E-mail Local ID Content: myVPN@myplace.com Peer ID Content: myVPN@myplace.com Local IP Address: 192.168.4.15 Remote Gateway Address: telecommuterc.dydns.org Remote Address 192.168.4.15 13.
PAGE 169
P-334U/P-335U User’s Guide CHAPTER 14 Static Route Screens This chapter shows you how to configure static routes for your ZyXEL Device. 14.1 Static Route Overview Each remote node specifies only the network to which the gateway is directly connected, and the ZyXEL Device has no knowledge of the networks beyond. For instance, the ZyXEL Device knows about network N2 in the following figure through remote node router R1.
PAGE 170
P-334U/P-335U User’s Guide 14.2 IP Static Route Screen Click Management > Static Route to open the IP Static Route screen. The following screen displays. Figure 101 IP Static Route The following table describes the labels in this screen. Table 59 IP Static Route 170 LABEL DESCRIPTION # This is the index number of an individual static route. The first entry is for the default route and not editable. Name This is the name that describes or identifies this route.
PAGE 171
P-334U/P-335U User’s Guide 14.2.1 Static Route Setup Screen To edit a static route, click the edit icon under Modify. The following screen displays. Fill in the required information for each static route. Figure 102 Static Route Setup The following table describes the labels in this screen. Table 60 Static Route Setup LABEL DESCRIPTION Route Name Enter the name of the IP static route. Leave this field blank to delete this static route.
PAGE 172
P-334U/P-335U User’s Guide 172 Chapter 14 Static Route Screens
PAGE 173
P-334U/P-335U User’s Guide CHAPTER 15 Bandwidth Management This chapter contains information about configuring bandwidth management, editing rules and viewing the ZyXEL Device’s bandwidth management logs. 15.1 Bandwidth Management Overview ZyXEL’s Bandwidth Management allows you to specify bandwidth management rules based on an application and/or subnet. You can allocate specific amounts of bandwidth capacity (bandwidth budgets) to different bandwidth rules.
PAGE 174
P-334U/P-335U User’s Guide 15.3 Subnet-based Bandwidth Management You can create bandwidth classes based on subnets. The following figure shows LAN subnets. You could configure one bandwidth class for subnet A and another for subnet B. Figure 103 Subnet-based Bandwidth Management Example 15.4 Application and Subnet-based Bandwidth Management You could also create bandwidth classes based on a combination of a subnet and an application.
PAGE 175
P-334U/P-335U User’s Guide 15.5 Bandwidth Management Priorities The following table describes the priorities that you can apply to traffic that the ZyXEL Device forwards out through an interface. Table 62 Bandwidth Management Priorities PRIORITY LEVELS: TRAFFIC WITH A HIGHER PRIORITY GETS THROUGH FASTER WHILE TRAFFIC WITH A LOWER PRIORITY IS DROPPED IF THE NETWORK IS CONGESTED. High Typically used for voice traffic or video that is especially sensitive to jitter (jitter is the variations in delay).
PAGE 176
P-334U/P-335U User’s Guide Table 63 Media Bandwidth Management Setup: Services (continued) SERVICE DESCRIPTION MSN Webcam MSN messenger allows you to chat online and send instant messages. If you use MSN messenger and also have a webcam, you can send your image/photo in realtime along with messages WWW The World Wide Web (WWW) is an Internet system to distribute graphical, hyperlinked information, based on Hyper Text Transfer Protocol (HTTP) - a client/server protocol for the World Wide Web.
PAGE 177
P-334U/P-335U User’s Guide Table 64 Commonly Used Services SERVICE DESCRIPTION IPSEC_TUNNEL(ESP:0) The IPSEC ESP (Encapsulation Security Protocol) tunneling protocol uses this service. IRC(TCP/UDP:6667) This is another popular Internet chat program. MSN Messenger(TCP:1863) Microsoft Networks’ messenger service uses this protocol. MULTICAST(IGMP:0) Internet Group Multicast Protocol is used when sending packets to a specific group of hosts. NEW-ICQ(TCP:5190) An Internet chat program.
PAGE 178
P-334U/P-335U User’s Guide Table 64 Commonly Used Services SERVICE DESCRIPTION TELNET(TCP:23) Telnet is the login and terminal emulation protocol common on the Internet and in UNIX environments. It operates over TCP/IP networks. Its primary function is to allow users to log into remote host systems. TFTP(UDP:69) Trivial File Transfer Protocol is an Internet file transfer protocol similar to FTP, but uses the UDP (User Datagram Protocol) rather than TCP (Transmission Control Protocol).
PAGE 179
P-334U/P-335U User’s Guide 15.8 Bandwidth Management General Configuration Click Management > Bandwidth MGMT to open the bandwidth management General screen. Figure 104 Bandwidth Management: General The following table describes the labels in this screen. Table 66 Bandwidth Management: General LABEL DESCRIPTION Enable Bandwidth Management Select this check box to have the ZyXEL Device apply bandwidth management.
PAGE 180
P-334U/P-335U User’s Guide 15.9 Bandwidth Management Advanced Configuration Click Management > Bandwidth MGMT > Advanced to open the bandwidth management Advanced screen.
PAGE 181
P-334U/P-335U User’s Guide The following table describes the labels in this screen. Table 67 Bandwidth Management: Advanced LABEL DESCRIPTION Upstream Bandwidth (kbps) Enter the amount of bandwidth in kbps (2 to 100,000) that you want to allocate for traffic. 20 kbps to 20,000 kbps is recommended. The recommendation is to set this speed to be equal to or less than the speed of the broadband device connected to the WAN port.
PAGE 182
P-334U/P-335U User’s Guide 15.9.1 Rule Configuration with the Pre-defined Service To edit a bandwidth management rule for the pre-defined service in the ZyXEL Device, click the Edit icon in the Application List table of the Advanced screen. The following screen displays. Figure 106 Bandwidth Management Rule Configuration: Pre-defined Service The following table describes the labels in this screen.
PAGE 183
P-334U/P-335U User’s Guide 15.9.2 Rule Configuration with the User-defined Service In addition to the pre-defined services, if you want to edit a bandwidth management rule for other applications and/or subnets, click the Edit icon in the User-defined Service table of the Advanced screen. The following screen displays. Figure 107 Bandwidth Management Rule Configuration: User-defined Service The following table describes the labels in this screen.
PAGE 184
P-334U/P-335U User’s Guide 15.10 Bandwidth Management Monitor Click Management > Bandwidth MGMT > Monitor to open the bandwidth management Monitor screen. View the bandwidth usage of the WAN configured bandwidth rules. This is also shown as bandwidth usage over the bandwidth budget for each rule. The gray section of the bar represents the percentage of unused bandwidth and the blue color represents the percentage of bandwidth in use.
PAGE 185
P-334U/P-335U User’s Guide CHAPTER 16 Remote Management Screens This chapter provides information on the Remote Management screens. 16.1 Remote Management Overview Remote management allows you to determine which services/protocols can access which ZyXEL Device interface (if any) from which computers. Note: When you configure remote management to allow management from the WAN, you still need to configure a firewall rule to allow access. See the firewall chapters for details on configuring firewall rules.
PAGE 186
P-334U/P-335U User’s Guide 3 There is already another remote management session with an equal or higher priority running. You may only have one remote management session running at one time. 4 There is a firewall rule that blocks it. 16.1.2 Remote Management and NAT When NAT is enabled: • Use the ZyXEL Device’s WAN IP address when configuring from the WAN. • Use the ZyXEL Device’s LAN IP address when configuring from the LAN. 16.1.
PAGE 187
P-334U/P-335U User’s Guide Table 70 WWW Remote Management LABEL DESCRIPTION Secured Client IP Address A secured client is a “trusted” computer that is allowed to communicate with the ZyXEL Device using this service. Select All to allow any computer to access the ZyXEL Device using this service. Choose Selected to just allow the computer with the IP address that you specify to access the ZyXEL Device using this service. Apply Click Apply to save your customized settings and exit this screen.
PAGE 188
P-334U/P-335U User’s Guide Table 71 Telnet Remote Management LABEL DESCRIPTION Secured Client IP A secured client is a “trusted” computer that is allowed to communicate with the Address ZyXEL Device using this service. Select All to allow any computer to access the ZyXEL Device using this service. Choose Selected to just allow the computer with the IP address that you specify to access the ZyXEL Device using this service. Apply Click Apply to save your customized settings and exit this screen.
PAGE 189
P-334U/P-335U User’s Guide Table 72 FTP Remote Management LABEL DESCRIPTION Apply Click Apply to save your customized settings and exit this screen. Reset Click Reset to begin configuring this screen afresh. 16.6 DNS Screen Use DNS (Domain Name System) to map a domain name to its corresponding IP address and vice versa. Refer to the chapter on Wizard Setup for background information. To change your ZyXEL Device’s DNS settings, click Management > Remote MGMT > DNS. The screen appears as shown.
PAGE 190
P-334U/P-335U User’s Guide 190 Chapter 16 Remote Management Screens
PAGE 191
P-334U/P-335U User’s Guide CHAPTER 17 UPN P This chapter introduces the Universal Plug and Play feature. 17.1 Universal Plug and Play Overview Universal Plug and Play (UPnP) is a distributed, open networking standard that uses TCP/IP for simple peer-to-peer network connectivity between devices. A UPnP device can dynamically join a network, obtain an IP address, convey its capabilities and learn about other devices on the network.
PAGE 192
P-334U/P-335U User’s Guide All UPnP-enabled devices may communicate freely with each other without additional configuration. Disable UPnP if this is not your intention. 17.2 UPnP and ZyXEL ZyXEL has achieved UPnP certification from the Universal Plug and Play Forum Creates UPnP™ Implementers Corp. (UIC). ZyXEL's UPnP implementation supports IGD 1.0 (Internet Gateway Device). At the time of writing ZyXEL's UPnP implementation supports Windows Messenger 4.6 and 4.7 while Windows Messenger 5.
PAGE 193
P-334U/P-335U User’s Guide The following table describes the labels in this screen. Table 74 Configuring UPnP LABEL DESCRIPTION Enable the Universal Select this checkbox to activate UPnP. Be aware that anyone could use a Plug and Play (UPnP) UPnP application to open the web configurator's login screen without entering feature the ZyXEL Device's IP address (although you must still enter the password to access the web configurator).
PAGE 194
P-334U/P-335U User’s Guide 1 Click Start and Control Panel. Doubleclick Add/Remove Programs. 2 Click on the Windows Setup tab and select Communication in the Components selection box. Click Details. 3 In the Communications window, select the Universal Plug and Play check box in the Components selection box. 4 Click OK to go back to the Add/Remove Programs Properties window and click Next. 5 Restart the computer when prompted. 17.4.
PAGE 195
P-334U/P-335U User’s Guide 4 Select Networking Service in the Components selection box and click Details. 5 In the Networking Services window, select the Universal Plug and Play check box. 6 Click OK to go back to the Windows Optional Networking Component Wizard window and click Next. 17.5 Using UPnP in Windows XP Example This section shows you how to use the UPnP feature in Windows XP. You must already have UPnP installed in Windows XP and UPnP activated on the ZyXEL device.
PAGE 196
P-334U/P-335U User’s Guide 3 In the Internet Connection Properties window, click Settings to see the port mappings that were automatically created. 4 You may edit or delete the port mappings or click Add to manually add port mappings. Note: When the UPnP-enabled device is disconnected from your computer, all port mappings will be deleted automatically. 5 Select the Show icon in notification area when connected check box and click OK.
PAGE 197
P-334U/P-335U User’s Guide 1 Click Start and then Control Panel. 2 Double-click Network Connections. 3 Select My Network Places under Other Places. 4 An icon with the description for each UPnP-enabled device displays under Local Network. 5 Right-click the icon for your ZyXEL device and select Invoke. The web configurator login screen displays. 6 Right-click the icon for your ZyXEL device and select Properties. A properties window displays with basic information about the ZyXEL device. 17.5.
PAGE 198
P-334U/P-335U User’s Guide 1 Click Start and then Control Panel. 2 Double-click Network Connections. 3 Select My Network Places under Other Places. 4 An icon with the description for each UPnP-enabled device displays under Local Network. 5 Right-click the icon for your ZyXEL device and select Invoke. The web configurator login screen displays. 6 Right-click the icon for your ZyXEL device and select Properties. A properties window displays with basic information about the ZyXEL device.
PAGE 199
P-334U/P-335U User’s Guide CHAPTER 18 Print Server This chapter discusses how to configure the print server on the ZyXEL Device. 18.1 Print Server Overview A print server is a device or software that provides users on a network with shared access to one or more printers. The print server acts as a buffer, holding the information to be printed out in memory until the printer becomes free.
PAGE 200
P-334U/P-335U User’s Guide 18.3 Print Server Screen Click the Print Server link under Management to display the Print Server screen. Figure 114 Configuring Print Server The following table describes the labels in this screen. Table 75 Configuring Print Server 200 LABEL DESCRIPTION Print Device Name Type a Print Device Name (of up to 31 printable characters) for recognition of the associated printer on the print server network.
PAGE 201
P-334U/P-335U User’s Guide CHAPTER 19 Print Server Driver Setup This chapter shows you how to set up a print server driver for a Windows or Macintosh computer. 19.1 Installation Requirements To install the print server driver you will need the following requirements • Microsoft Windows 95, Windows 98 SE (Second Edition), Windows Me, Windows NT 4.0, Windows 2000, Windows XP or Macintosh OS X • A computer with an Ethernet port • An Ethernet cable and a USB cable 19.2 Windows 95/98 SE/Me/2000/XP/NT 4.
PAGE 202
P-334U/P-335U User’s Guide 3 You can either • use the Setup Wizard for Windows NT/2000/XP to install the print monitor and open the setup wizard automatically or • use the Setup Wizard for Windows 98/ME/NT/2000/XP to install the print monitor in a specified file location and open the setup wizard (by running the PSWizard.exe file in the folder you selected) manually. Figure 116 CD Autorun Screen: Printer Server Driver Setup 19.2.
PAGE 203
P-334U/P-335U User’s Guide 1 The Welcome screen displays. Click Next to continue. Figure 117 Network Print Server Setup Wizard: Welcome 2 The Select A Print Server screen displays. The wizard automatically detects whether or not a print server is connected to your computer. Make sure that your ZyXEL Device is correctly connected and a compatible USB printer is connected to the ZyXEL Device. Highlight the print server and click Next to continue.
PAGE 204
P-334U/P-335U User’s Guide 3 The Change Settings screen displays. If you want to change your print server’s IP address, select Yes, I want to change settings, leave the Password field blank and click Next. The print server’s IP address is the ZyXEL Device’s IP address. Since the wizard detects your print server’s IP address automatically, it’s recommended that you select No, I don’t want to change settings and click Next to use the current print server settings and continue with the wizard.
PAGE 205
P-334U/P-335U User’s Guide 4 Select the USB printer that is connected to the ZyXEL Device if you have added it on your computer already and click Next. If your printer is not listed, click Add New Printer and see Section 19.2.2 on page 207 for how to add a printer on your computer. After you have added a printer, the Select A Printer screen displays again. Select the printer you have added and click Next to continue.
PAGE 206
P-334U/P-335U User’s Guide 5 A Summary screen displays. Check your settings and click Next to continue. Figure 121 Network Print Server Setup Wizard: Summary 6 Click Finish to save and close your Network Print Server Setup Wizard. Your print server driver setup is complete.
PAGE 207
P-334U/P-335U User’s Guide 19.2.2 Adding a New Printer 1 Click Add New Printer in the Network Print Server Setup Wizard: Select A Printer screen (see Figure 120 on page 205). A help dialog box pops up to guide you through the adding printer process. Figure 123 Add Printer Help 2 The Add Printer Wizard screen then also displays. Click Next.
PAGE 208
P-334U/P-335U User’s Guide 3 Select Local printer and click Next. Figure 125 Add Printer Wizard: Local or Network Printer 4 Select an LPT (Line Printing Terminal) port (a parallel port) as the computer interface for the USB printer.
PAGE 209
P-334U/P-335U User’s Guide 5 Select the make of the printer that you want to connect to the print server in the Manufacturers list of printers. 6 Select the printer model from the list of Printers. 7 If your printer is not displayed in the list of Printers, you can insert the printer driver installation CD/disk or download the driver file to your computer, click Have Disk… and install the new printer driver. 8 Click Next to continue.
PAGE 210
P-334U/P-335U User’s Guide 10 Type a name to identify the printer and then click Next to continue. Figure 129 Add Printer Wizard: Name Your Printer 11 The ZyXEL Device is a print server itself and you do not need to have your computer act as a print server by sharing the printer with other users in the same network; just select Do not share this printer and click Next to proceed to the following screen.
PAGE 211
P-334U/P-335U User’s Guide 12 Select Yes and then click the Next button if you want to print a test page. A pop-up screen displays to ask if the test page printed correctly. Otherwise select No and then click Next to continue. Figure 131 Add Printer Wizard: Print Test Page 13 The following screen shows your current printer settings. Select Finish to complete adding a new printer. Figure 132 Add Printer Wizard Complete 19.
PAGE 212
P-334U/P-335U User’s Guide 2 On your desktop, double-click the Macintosh HD icon to open the Macintosh HD window. Figure 133 Macintosh HD 3 Double-click the Applications folder. Figure 134 Macintosh HD folder 4 Double-click the Utilities folder. Figure 135 Applications Folder 5 Double-click the Print Center icon.
PAGE 213
P-334U/P-335U User’s Guide 6 Click the Add icon at the top of the screen. Figure 137 Printer List Folder 7 Set up your printer in the Printer List configuration screen. Select IP Printing from the drop-down list box. 8 In the Printer’s Address field, type the IP address of your ZyXEL Device. 9 Deselect the Use default queue on server check box. 10 Type LP1 (a parallel port) in the Queue Name field. 11 Select your Printer Model from the drop-down list box.
PAGE 214
P-334U/P-335U User’s Guide 12 Click Add to select a printer model, save and close the Printer List configuration screen. Figure 139 Printer Model 13 The Name LP1 on 192.168.1.1 displays in the Printer List field. The default printer Name displays in bold type. Figure 140 Print Server 14 Your Macintosh print server driver setup is complete. You can now use the ZyXEL Device’s print server to print from a Macintosh computer.
PAGE 215
P-334U/P-335U User’s Guide CHAPTER 20 System This chapter provides information on the System screens. 20.1 System Overview See the chapter about wizard setup for more information on the next few screens. 20.2 System General Screen Click Maintenance > System. The following screen displays.
PAGE 216
P-334U/P-335U User’s Guide The following table describes the labels in this screen. Table 76 System General LABEL DESCRIPTION System Name System Name is a unique name to identify the ZyXEL Device in an Ethernet network. It is recommended you enter your computer’s “Computer name” in this field (see the chapter about wizard setup for how to find your computer’s name). This name can be up to 30 alphanumeric characters long. Spaces are not allowed, but dashes “-” and underscores "_" are accepted.
PAGE 217
P-334U/P-335U User’s Guide Figure 142 Time Setting The following table describes the labels in this screen. Table 77 Time Setting LABEL DESCRIPTION Current Time and Date Current Time This field displays the time of your ZyXEL Device. Each time you reload this page, the ZyXEL Device synchronizes the time with the time server. Current Date This field displays the date of your ZyXEL Device. Each time you reload this page, the ZyXEL Device synchronizes the date with the time server.
PAGE 218
P-334U/P-335U User’s Guide Table 77 Time Setting LABEL DESCRIPTION New Date (yyyy/mm/dd) This field displays the last updated date from the time server or the last date configured manually. When you set Time and Date Setup to Manual, enter the new date in this field and then click Apply. Get from Time Server Select this radio button to have the ZyXEL Device get the time and date from the time server you specified below.
PAGE 219
P-334U/P-335U User’s Guide CHAPTER 21 Logs This chapter contains information about configuring general log settings and viewing the ZyXEL Device’s logs. Refer to the appendices for example log message explanations. 21.1 View Log The web configurator allows you to look at all of the ZyXEL Device’s logs in one location. Click Maintenance > Logs to open the View Log screen. Use the View Log screen to see the logs for the categories that you selected in the Log Settings screen (see Section 21.2 on page 220).
PAGE 220
P-334U/P-335U User’s Guide The following table describes the labels in this screen. Table 78 View Logs LABEL DESCRIPTION Display The categories that you select in the Log Settings page (see Section 21.2 on page 220) display in the drop-down list box. Select a category of logs to view; select All Logs to view logs from all of the log categories that you selected in the Log Settings page. Time This field displays the time the log was recorded.
PAGE 221
P-334U/P-335U User’s Guide Figure 144 Log Settings The following table describes the labels in this screen. Table 79 Log Settings LABEL DESCRIPTION E-mail Log Settings Mail Server Enter the server name or the IP address of the mail server for the e-mail addresses specified below. If this field is left blank, logs and alert messages will not be sent via E-mail. Mail Subject Type a title that you want to be in the subject line of the log e-mail message that the ZyXEL Device sends.
PAGE 222
P-334U/P-335U User’s Guide Table 79 Log Settings LABEL DESCRIPTION Send Log To The ZyXEL Device sends logs to the e-mail address specified in this field. If this field is left blank, the ZyXEL Device does not send logs via e-mail. Send Alerts To Alerts are real-time notifications that are sent as soon as an event, such as a DoS attack, system error, or forbidden web access attempt occurs. Enter the Email address where the alert messages will be sent.
PAGE 223
P-334U/P-335U User’s Guide CHAPTER 22 Tools This chapter shows you how to upload a new firmware, upload or save backup configuration files and restart the ZyXEL Device. 22.1 Firmware Upload Screen Find firmware at www.zyxel.com in a file that (usually) uses the system model name with a "*.bin" extension, e.g., "ZyXEL Device.bin". The upload process uses HTTP (Hypertext Transfer Protocol) and may take up to two minutes. After a successful upload, the system will reboot.
PAGE 224
P-334U/P-335U User’s Guide After you see the Firmware Upload In Process screen, wait two minutes before logging into the ZyXEL Device again. Figure 146 Upload Warning The ZyXEL Device automatically restarts in this time causing a temporary network disconnect. In some operating systems, you may see the following icon on your desktop. Figure 147 Network Temporarily Disconnected After two minutes, log in again and check your new firmware version in the Status screen.
PAGE 225
P-334U/P-335U User’s Guide Click Maintenance > Tools > Configuration. Information related to factory defaults, backup configuration, and restoring configuration appears as shown next. Figure 149 Configuration 22.2.1 Backup Configuration Backup configuration allows you to back up (save) the ZyXEL Device’s current configuration to a file on your computer.
PAGE 226
P-334U/P-335U User’s Guide Figure 150 Configuration Restore Successful The ZyXEL Device automatically restarts in this time causing a temporary network disconnect. In some operating systems, you may see the following icon on your desktop. Figure 151 Temporarily Disconnected If you uploaded the default configuration file you may need to change the IP address of your computer to be in the same subnet as that of the default ZyXEL Device IP address (192.168.1.1).
PAGE 227
P-334U/P-335U User’s Guide 22.3 Restart Screen System restart allows you to reboot the ZyXEL Device without turning the power off. Click Maintenance > Tools > Restart. Click Restart to have the ZyXEL Device reboot. This does not affect the ZyXEL Device's configuration.
PAGE 228
P-334U/P-335U User’s Guide 228 Chapter 22 Tools
PAGE 229
P-334U/P-335U User’s Guide CHAPTER 23 Configuration Mode Click Maintenance > Config Mode to open the following screen. This screen allows you to hide or display the advanced screens of some feaures or the advanced features, such as MAC filter or static route. Basic is selected by default and you cannot see the advanced screens or features. If you want to view and configure all screens including the advanced ones, select Advanced and click Apply.
PAGE 230
P-334U/P-335U User’s Guide Table 82 Config Mode: Advanced Screens CATEGORY LINK TAB Management Static Route IP Static Route Bandwidth MGMT Advanced Monitor Remote MGMT Telnet FTP DNS Maintenance 230 Logs Log Settings Chapter 23 Configuration Mode
PAGE 231
P-334U/P-335U User’s Guide CHAPTER 24 Troubleshooting This chapter covers potential problems and the corresponding remedies. 24.1 Problems Starting Up the ZyXEL Device Table 83 Troubleshooting Starting Up Your ZyXEL Device PROBLEM CORRECTIVE ACTION None of the LEDs turn on when I turn on the ZyXEL Device. Make sure that the ZyXEL Device’s power adaptor is connected to the ZyXEL Device and plugged in to an appropriate power source.
PAGE 232
P-334U/P-335U User’s Guide 24.3 Problems with the WAN Table 85 Troubleshooting the WAN PROBLEM CORRECTIVE ACTION The WAN LED is off. Check the connections between the ZyXEL Device WAN port and the cable/DSL modem or ethernet jack. Check whether your cable/DSL device requires a crossover or straight-through cable. I cannot get a WAN IP address from the ISP. 232 Click WAN to verify your settings. The username and password apply to PPPoE and PPPoA encapsulation only.
PAGE 233
P-334U/P-335U User’s Guide 24.4 Problems Accessing the ZyXEL Device Table 86 Troubleshooting Accessing the ZyXEL Device PROBLEM CORRECTIVE ACTION I cannot The username is “admin”. The default password is “1234”. The Password and access the Username fields are case-sensitive. Make sure that you enter the correct password ZyXEL Device. and username using the proper casing. If you have changed the password and have now forgotten it, you will need to upload the default configuration file.
PAGE 234
P-334U/P-335U User’s Guide Table 87 Troubleshooting Restricted Web Pages and Keyword Blocking PROBLEM CORRECTIVE ACTION Parental Control is configured correctly, but I can still access restricted web pages. Restart the device to clear the cache. The content filter server may be unavailable. The View Logs screen can display content filtering log messages. See the Log Descriptions appendix for a list of possible log messages.
PAGE 235
P-334U/P-335U User’s Guide Problems with the Print Server Table 90 Troubleshooting the Print Server PROBLEM CORRECTIVE ACTION Cannot print anything using the USB printer connected to the P335U. Verify that the printer uses USB 1.1 or 1.0 by checking your printer's specifications. Make sure the USB printer is powered on and can work properly. Make sure you install the print server driver on your computer. See Chapter 19 on page 201 for how to set up the print server driver on your computer.
PAGE 236
P-334U/P-335U User’s Guide You can also check if pop-up blocking is disabled in the Pop-up Blocker section in the Privacy tab. 1 In Internet Explorer, select Tools, Internet Options, Privacy. 2 Clear the Block pop-ups check box in the Pop-up Blocker section of the screen. This disables any web pop-up blockers you may have enabled. Figure 156 Internet Options 3 Click Apply to save this setting. 24.5.1.1.
PAGE 237
P-334U/P-335U User’s Guide Figure 157 Internet Options 3 Type the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”. For example, http://192.168.1.1. 4 Click Add to move the IP address to the list of Allowed sites. Note: If you change the IP address of your device, make sure that the new address matches the address you type in the Pop-up Blocker Settings screen.
PAGE 238
P-334U/P-335U User’s Guide Figure 158 Pop-up Blocker Settings 5 Click Close to return to the Privacy screen. 6 Click Apply to save this setting. 24.5.1.2 JavaScripts If pages of the web configurator do not display properly in Internet Explorer, check that JavaScripts are allowed. 1 In Internet Explorer, click Tools, Internet Options and then the Security tab.
PAGE 239
P-334U/P-335U User’s Guide Figure 159 Internet Options 2 Click the Custom Level... button. 3 Scroll down to Scripting. 4 Under Active scripting make sure that Enable is selected (the default). 5 Under Scripting of Java applets make sure that Enable is selected (the default). 6 Click OK to close the window.
PAGE 240
P-334U/P-335U User’s Guide Figure 160 Security Settings - Java Scripting 24.5.1.3 Java Permissions 1 From Internet Explorer, click Tools, Internet Options and then the Security tab. 2 Click the Custom Level... button. 3 Scroll down to Microsoft VM. 4 Under Java permissions make sure that a safety level is selected. 5 Click OK to close the window.
PAGE 241
P-334U/P-335U User’s Guide Figure 161 Security Settings - Java 24.5.1.3.1 JAVA (Sun) 1 From Internet Explorer, click Tools, Internet Options and then the Advanced tab. 2 Make sure that Use Java 2 for under Java (Sun) is selected. 3 Click OK to close the window.
PAGE 242
P-334U/P-335U User’s Guide Figure 162 Java (Sun) 24.5.2 ActiveX Controls in Internet Explorer If ActiveX is disabled, you will not be able to download ActiveX controls or to use Trend Micro Security Serivces. Make sure that ActiveX controls are allowed in Internet Explorer. Screen shots for Internet Explorer 6 are shown. Steps may vary depending on your version of Internet Explorer. 1 In Internet Explorer, click Tools, Internet Options and then the Security tab.
PAGE 243
P-334U/P-335U User’s Guide Figure 163 Internet Options Security 3 Scroll down to ActiveX controls and plug-ins. 4 Under Download signed ActiveX controls select the Prompt radio button. 5 Under Run ActiveX controls and plug-ins make sure the Enable radio button is selected. 6 Then click the OK button.
PAGE 244
P-334U/P-335U User’s Guide Figure 164 Security Setting ActiveX Controls 244 Chapter 24 Troubleshooting
PAGE 245
P-334U/P-335U User’s Guide APPENDIX A Product Specifications The following table is a summary of other features available. Table 91 Hardware Specifications Dimensions (W x D x H) 190 x 150 x 33 mm Device Weight 413 g Power Specification 12 V AC 1 A Ethernet Ports Auto-negotiating: 10 Mbps or 100 Mbps in either half-duplex or full-duplex mode. Auto-crossover: Use either crossover or straight-through Ethernet cables. USB Port (P-335U only) USB version 1.1.
PAGE 246
P-334U/P-335U User’s Guide Table 92 Firmware Specifications FEATURE DESCRIPTION Firmware Upgrade Download new firmware (when available) from the ZyXEL web site and use the web configurator, an FTP or a TFTP tool to put it on the ZyXEL Device. Note: Only upload firmware for your specific model! 246 Configuration Backup & Restoration Make a copy of the ZyXEL Device’s configuration. You can put it back on the ZyXEL Device later if you decide to revert back to an earlier configuration.
PAGE 247
P-334U/P-335U User’s Guide Table 92 Firmware Specifications FEATURE DESCRIPTION IPSec VPN (P-335U only) Establish a Virtual Private Network (VPN) to connect with business partners and branch offices using data encryption and the Internet to provide secure communications without the expense of leased site-tosite lines. The ZyXEL Device VPN is based on the IPSec standard and is fully interoperable with other IPSec-based VPN products.
PAGE 248
P-334U/P-335U User’s Guide 248 Appendix A Product Specifications
PAGE 249
P-334U/P-335U User’s Guide APPENDIX B Print Server Specifications This appendix provides details on the print server interface and system requirements. Table 93 Print Server Interface PRINT SERVER INTERFACE USB USB 1.1 (full speed) - compliant port, 1.5Mbps (low speed) and 12Mbps (full speed) data transmission rates. This port automatically detects the make and model of the USB printer connected to this port.
PAGE 250
P-334U/P-335U User’s Guide ZyXEL Device Print Server Compatible USB Printers The following is a list of USB printer models compatible with the ZyXEL Device print server.
PAGE 251
P-334U/P-335U User’s Guide Table 95 Compatible USB Printers BRAND MODEL TYPE CANON MP-130 MFP EPSON Aculaser C1900 Color Laser EPSON EPL-6100 Laser Disable bi-directional support on printer. EPSON Stylus C20 Inkjet Disable bi-directional support on printer. EPSON Stylus C20SX Inkjet Disable bi-directional support on printer. EPSON Stylus C40 Inkjet Disable bi-directional support on printer.
PAGE 252
P-334U/P-335U User’s Guide Table 95 Compatible USB Printers 252 BRAND MODEL TYPE REMARK HP DeskJet 5550 Inkjet HP DeskJet 810C Inkjet HP DeskJet 845C Inkjet HP DeskJet 920C Inkjet HP Deskjet 1180c Inkjet HP DeskJet 930C Inkjet HP LaserJet 1200 Laser Disable bi-directional support on printer. HP LaserJet 1220 Laser Disable bi-directional support on printer. HP LaserJet 1300 Laser HP LaserJet 2200 Laser Disable bi-directional support on printer.
PAGE 253
P-334U/P-335U User’s Guide Table 95 Compatible USB Printers BRAND MODEL TYPE KYOCERA FS-1920 Laser KONICA MINOLTA PagePro 1350W Laser LEXMARK C750 Color Laser LEXMARK E210 Laser LEXMARK E322 Laser LEXMARK T420 Laser LEXMARK T620 Laser LEXMARK W812 Laser LEXMARK Z42 Inkjet LEXMARK Z43 Inkjet LEXMARK Z45 Inkjet LEXMARK Z55 Inkjet LEXMARK Z705 Inkjet LEXMARK E230 Laser LEXMARK X6170 MFP LEXMARK Z515 Inkjet OKI B4350 Laser SAMSUNG ML-1710 Laser SAMSUNG M
PAGE 254
P-334U/P-335U User’s Guide 254 Appendix B Print Server Specifications
PAGE 255
P-334U/P-335U User’s Guide APPENDIX C Setting up Your Computer’s IP Address All computers must have a 10M or 100M Ethernet adapter card and TCP/IP installed. Windows 95/98/Me/NT/2000/XP, Macintosh OS 7 and later operating systems and all versions of UNIX/LINUX include the software components you need to install and use TCP/ IP on your computer. Windows 3.1 requires the purchase of a third-party TCP/IP application package.
PAGE 256
P-334U/P-335U User’s Guide Figure 165 WIndows 95/98/Me: Network: Configuration Installing Components The Network window Configuration tab displays a list of installed components. You need a network adapter, the TCP/IP protocol and Client for Microsoft Networks. If you need the adapter: 1 In the Network window, click Add. 2 Select Adapter and then click Add. 3 Select the manufacturer and model of your network adapter and then click OK. If you need TCP/IP: 1 In the Network window, click Add.
PAGE 257
P-334U/P-335U User’s Guide 3 Select Microsoft from the list of manufacturers. 4 Select Client for Microsoft Networks from the list of network clients and then click OK. 5 Restart your computer so the changes you made take effect. Configuring 1 In the Network window Configuration tab, select your network adapter's TCP/IP entry and click Properties 2 Click the IP Address tab. • • If your IP address is dynamic, select Obtain an IP address automatically.
PAGE 258
P-334U/P-335U User’s Guide Figure 167 Windows 95/98/Me: TCP/IP Properties: DNS Configuration 4 Click the Gateway tab. • • If you do not know your gateway’s IP address, remove previously installed gateways. If you have a gateway IP address, type it in the New gateway field and click Add. 5 Click OK to save and close the TCP/IP Properties window. 6 Click OK to close the Network window. Insert the Windows CD if prompted. 7 Turn on your ZyXEL Device and restart your computer when prompted.
PAGE 259
P-334U/P-335U User’s Guide Figure 168 Windows XP: Start Menu 2 In the Control Panel, double-click Network Connections (Network and Dial-up Connections in Windows 2000/NT). Figure 169 Windows XP: Control Panel 3 Right-click Local Area Connection and then click Properties.
PAGE 260
P-334U/P-335U User’s Guide Figure 170 Windows XP: Control Panel: Network Connections: Properties 4 Select Internet Protocol (TCP/IP) (under the General tab in Win XP) and then click Properties. Figure 171 Windows XP: Local Area Connection Properties 5 The Internet Protocol TCP/IP Properties window opens (the General tab in Windows XP). • 260 If you have a dynamic IP address click Obtain an IP address automatically.
PAGE 261
P-334U/P-335U User’s Guide • • If you have a static IP address click Use the following IP Address and fill in the IP address, Subnet mask, and Default gateway fields. Click Advanced. Figure 172 Windows XP: Internet Protocol (TCP/IP) Properties 6 If you do not know your gateway's IP address, remove any previously installed gateways in the IP Settings tab and click OK.
PAGE 262
P-334U/P-335U User’s Guide Figure 173 Windows XP: Advanced TCP/IP Properties 7 In the Internet Protocol TCP/IP Properties window (the General tab in Windows XP): • • Click Obtain DNS server address automatically if you do not know your DNS server IP address(es). If you know your DNS server IP address(es), click Use the following DNS server addresses, and type them in the Preferred DNS server and Alternate DNS server fields.
PAGE 263
P-334U/P-335U User’s Guide Figure 174 Windows XP: Internet Protocol (TCP/IP) Properties 8 Click OK to close the Internet Protocol (TCP/IP) Properties window. 9 Click Close (OK in Windows 2000/NT) to close the Local Area Connection Properties window. 10 Close the Network Connections window (Network and Dial-up Connections in Windows 2000/NT). 11Turn on your ZyXEL Device and restart your computer (if prompted). Verifying Settings 1 Click Start, All Programs, Accessories and then Command Prompt.
PAGE 264
P-334U/P-335U User’s Guide Figure 175 Macintosh OS 8/9: Apple Menu 2 Select Ethernet built-in from the Connect via list. Figure 176 Macintosh OS 8/9: TCP/IP 3 For dynamically assigned settings, select Using DHCP Server from the Configure: list.
PAGE 265
P-334U/P-335U User’s Guide 4 For statically assigned settings, do the following: • • • • From the Configure box, select Manually. Type your IP address in the IP Address box. Type your subnet mask in the Subnet mask box. Type the IP address of your ZyXEL Device in the Router address box. 5 Close the TCP/IP Control Panel. 6 Click Save if prompted, to save changes to your configuration. 7 Turn on your ZyXEL Device and restart your computer (if prompted).
PAGE 266
P-334U/P-335U User’s Guide Figure 178 Macintosh OS X: Network 4 For statically assigned settings, do the following: • • • • From the Configure box, select Manually. Type your IP address in the IP Address box. Type your subnet mask in the Subnet mask box. Type the IP address of your ZyXEL Device in the Router address box. 5 Click Apply Now and close the window. 6 Turn on your ZyXEL Device and restart your computer (if prompted). Verifying Settings Check your TCP/IP properties in the Network window.
PAGE 267
P-334U/P-335U User’s Guide Note: Make sure you are logged in as the root administrator. Using the K Desktop Environment (KDE) Follow the steps below to configure your computer IP address using the KDE. 1 Click the Red Hat button (located on the bottom left corner), select System Setting and click Network. Figure 179 Red Hat 9.0: KDE: Network Configuration: Devices 2 Double-click on the profile of the network card you wish to configure. The Ethernet Device General screen displays as shown.
PAGE 268
P-334U/P-335U User’s Guide • • If you have a dynamic IP address click Automatically obtain IP address settings with and select dhcp from the drop down list. If you have a static IP address click Statically set IP Addresses and fill in the Address, Subnet mask, and Default Gateway Address fields. 3 Click OK to save the changes and close the Ethernet Device General screen. 4 If you know your DNS server IP address(es), click the DNS tab in the Network Configuration screen.
PAGE 269
P-334U/P-335U User’s Guide 1 Assuming that you have only one network card on the computer, locate the ifconfigeth0 configuration file (where eth0 is the name of the Ethernet card). Open the configuration file with any plain text editor. • If you have a dynamic IP address, enter dhcp in the BOOTPROTO= field. The following figure shows an example. Figure 183 Red Hat 9.
PAGE 270
P-334U/P-335U User’s Guide Figure 186 Red Hat 9.0: Restart Ethernet Card [root@localhost init.d]# network restart Shutting down interface eth0: Shutting down loopback interface: Setting network parameters: Bringing up loopback interface: Bringing up interface eth0: [OK] [OK] [OK] [OK] [OK] Verifying Settings Enter ifconfig in a terminal screen to check your TCP/IP properties. Figure 187 Red Hat 9.
PAGE 271
P-334U/P-335U User’s Guide APPENDIX D IP Subnetting IP Addressing Routers “route” based on the network number. The router that delivers the data packet to the correct destination host uses the host ID. IP Classes An IP address is made up of four octets (eight bits), written in dotted decimal notation, for example, 192.168.1.1. IP addresses are categorized into different classes. The class of an address depends on the value of its first octet. • Class “A” addresses have a 0 in the left most bit.
PAGE 272
P-334U/P-335U User’s Guide Since the first octet of a class “A” IP address must contain a “0”, the first octet of a class “A” address can have a value of 0 to 127. Similarly the first octet of a class “B” must begin with “10”, therefore the first octet of a class “B” address has a valid range of 128 to 191. The first octet of a class “C” address begins with “110”, and therefore has a range of 192 to 223.
PAGE 273
P-334U/P-335U User’s Guide Since the mask is always a continuous number of ones beginning from the left, followed by a continuous number of zeros for the remainder of the 32 bit mask, you can simply specify the number of ones instead of writing the value of each octet. This is usually specified by writing a “/” followed by the number of bits in the mask after the address. For example, 192.1.1.0 /25 is equivalent to saying 192.1.1.0 with mask 255.255.255.128.
PAGE 274
P-334U/P-335U User’s Guide Note: In the following charts, shaded/bolded last octet bit values indicate host ID bits “borrowed” to form network ID bits. The number of “borrowed” host ID bits determines the number of subnets you can have. The remaining number of host ID bits (after “borrowing”) determines the number of hosts you can have on each subnet. Table 101 Subnet 1 IP/SUBNET MASK NETWORK NUMBER LAST OCTET BIT VALUE IP Address 192.168.1. 0 IP Address (Binary) 11000000.10101000.00000001.
PAGE 275
P-334U/P-335U User’s Guide Example: Four Subnets The above example illustrated using a 25-bit subnet mask to divide a class “C” address space into two subnets. Similarly to divide a class “C” address into four subnets, you need to “borrow” two host ID bits to give four possible combinations of 00, 01, 10 and 11. The subnet mask is 26 bits (11111111.11111111.11111111.11000000) or 255.255.255.192.
PAGE 276
P-334U/P-335U User’s Guide Table 106 Subnet 4 IP/SUBNET MASK NETWORK NUMBER LAST OCTET BIT VALUE IP Address 192.168.1. 192 IP Address (Binary) 11000000.10101000.00000001. 11000000 Subnet Mask (Binary) 11111111.11111111.11111111. 11000000 Subnet Address: 192.168.1.192 Lowest Host ID: 192.168.1.193 Broadcast Address: 192.168.1.255 Highest Host ID: 192.168.1.254 Example Eight Subnets Similarly use a 27-bit mask to create 8 subnets (001, 010, 011, 100, 101, 110).
PAGE 277
P-334U/P-335U User’s Guide Subnetting With Class A and Class B Networks. For class “A” and class “B” addresses the subnet mask also determines which bits are part of the network number and which are part of the host ID. A class “B” address has two host ID octets available for subnetting and a class “A” address has three host ID octets (see Table 96 on page 271) available for subnetting. The following table is a summary for class “B” subnet planning. Table 109 Class B Subnet Planning NO.
PAGE 278
P-334U/P-335U User’s Guide 278 Appendix D IP Subnetting
PAGE 279
P-334U/P-335U User’s Guide APPENDIX E Wireless LANs Wireless LAN Topologies This section discusses ad-hoc and infrastructure wireless LAN topologies. Ad-hoc Wireless LAN Configuration The simplest WLAN configuration is an independent (Ad-hoc) WLAN that connects a set of computers with wireless adapters (A, B, C).
PAGE 280
P-334U/P-335U User’s Guide Figure 189 Basic Service Set ESS An Extended Service Set (ESS) consists of a series of overlapping BSSs, each containing an access point, with each access point connected together by a wired network. This wired connection between APs is called a Distribution System (DS). This type of wireless LAN topology is called an Infrastructure WLAN.
PAGE 281
P-334U/P-335U User’s Guide Figure 190 Infrastructure WLAN Channel A channel is the radio frequency(ies) used by IEEE 802.11a/b/g wireless devices. Channels available depend on your geographical area. You may have a choice of channels (for your region) so you should use a different channel than an adjacent AP (access point) to reduce interference. Interference occurs when radio signals from different access points overlap causing interference and degrading performance.
PAGE 282
P-334U/P-335U User’s Guide Figure 191 RTS/CTS When station A sends data to the AP, it might not know that the station B is already using the channel. If these two stations send data at the same time, collisions may occur when both sets of data arrive at the AP at the same time, resulting in a loss of messages for both stations. RTS/CTS is designed to prevent collisions due to hidden nodes.
PAGE 283
P-334U/P-335U User’s Guide A large Fragmentation Threshold is recommended for networks not prone to interference while you should set a smaller threshold for busy networks or networks that are prone to interference. If the Fragmentation Threshold value is smaller than the RTS/CTS value (see previously) you set then the RTS (Request To Send)/CTS (Clear to Send) handshake will never occur as data frames will be fragmented before they reach RTS/CTS size.
PAGE 284
P-334U/P-335U User’s Guide Wireless Security Overview Wireless security is vital to your network to protect wireless communication between wireless clients, access points and the wired network. Wireless security methods available on the Prestige are data encryption, wireless client authentication, restricting access by device MAC address and hiding the Prestige identity. The following figure shows the relative effectiveness of these wireless security methods available on your Prestige.
PAGE 285
P-334U/P-335U User’s Guide • Authentication Determines the identity of the users. • Authorization Determines the network services available to authenticated users once they are connected to the network. • Accounting Keeps track of the client’s network activity. RADIUS is a simple package exchange in which your AP acts as a message relay between the wireless client and the network RADIUS server.
PAGE 286
P-334U/P-335U User’s Guide Types of Authentication This section discusses some popular authentication types: EAP-MD5, EAP-TLS, EAPTTLS, PEAP and LEAP. The type of authentication you use depends on the RADIUS server or the AP. Consult your network administrator for more information. EAP-MD5 (Message-Digest Algorithm 5) MD5 authentication is the simplest one-way authentication method. The authentication server sends a challenge to the wireless client.
PAGE 287
P-334U/P-335U User’s Guide LEAP LEAP (Lightweight Extensible Authentication Protocol) is a Cisco implementation of IEEE 802.1x. Dynamic WEP Key Exchange The AP maps a unique key that is generated with the RADIUS server. This key expires when the wireless connection times out, disconnects or reauthentication times out. A new WEP key is generated each time reauthentication is performed. If this feature is enabled, it is not necessary to configure a default encryption key in the Wireless screen.
PAGE 288
P-334U/P-335U User’s Guide If both an AP and the wireless clients support WPA2 and you have an external RADIUS server, use WPA2 for stronger data encryption. If you don't have an external RADIUS server, you should use WPA2-PSK (WPA2-Pre-Shared Key) that only requires a single (identical) password entered into each access point, wireless gateway and wireless client. As long as the passwords match, a wireless client will be granted access to a WLAN.
PAGE 289
P-334U/P-335U User’s Guide User Authentication WPA and WPA2 apply IEEE 802.1x and Extensible Authentication Protocol (EAP) to authenticate wireless clients using an external RADIUS database. WPA2 reduces the number of key exchange messages from six to four (CCMP 4-way handshake) and shortens the time required to connect to a network. Other WPA2 authentication features that are different from WPA include key caching and pre-authentication.
PAGE 290
P-334U/P-335U User’s Guide Figure 192 WPA(2) with RADIUS Application Example WPA(2)-PSK Application Example A WPA(2)-PSK application looks as follows. 1 First enter identical passwords into the AP and all wireless clients. The Pre-Shared Key (PSK) must consist of between 8 and 63 ASCII characters or 64 hexadecimal characters (including spaces and symbols). 2 The AP checks each wireless client's password and (only) allows it to join the network if the password matches.
PAGE 291
P-334U/P-335U User’s Guide Security Parameters Summary Refer to this table to see what other security parameters you should configure for each Authentication Method/ key management protocol type. MAC address filters are not dependent on how you configure these security features. Table 113 Wireless Security Relational Matrix AUTHENTICATION ENCRYPTION ENTER METHOD/ KEY METHOD MANUAL KEY MANAGEMENT PROTOCOL IEEE 802.
PAGE 292
P-334U/P-335U User’s Guide 292 Appendix E Wireless LANs
PAGE 293
P-334U/P-335U User’s Guide APPENDIX F Log Descriptions This appendix provides descriptions of example log messages. Table 114 System Maintenance Logs LOG MESSAGE DESCRIPTION Time calibration is successful The router has adjusted its time based on information from the time server. Time calibration failed The router failed to get information from the time server. WAN interface gets IP:%s A WAN interface got a new IP address from the DHCP, PPPoE, PPTP or dial-up server.
PAGE 294
P-334U/P-335U User’s Guide Table 114 System Maintenance Logs (continued) LOG MESSAGE DESCRIPTION Successful HTTPS login Someone has logged on to the router's web configurator interface using HTTPS protocol. HTTPS login failed Someone has failed to log on to the router's web configurator interface using HTTPS protocol. Table 115 System Error Logs LOG MESSAGE DESCRIPTION %s exceeds the max.
PAGE 295
P-334U/P-335U User’s Guide Table 117 TCP Reset Logs LOG MESSAGE DESCRIPTION Under SYN flood attack, sent TCP RST The router sent a TCP reset packet when a host was under a SYN flood attack (the TCP incomplete count is per destination host.) Exceed TCP MAX incomplete, sent TCP RST The router sent a TCP reset packet when the number of TCP incomplete connections exceeded the user configured threshold. (the TCP incomplete count is per destination host.
PAGE 296
P-334U/P-335U User’s Guide Table 119 ICMP Logs LOG MESSAGE DESCRIPTION Firewall default policy: ICMP , , ICMP access matched the default policy and was blocked or forwarded according to the user's setting. For type and code details, see Table 131 on page 305.
PAGE 297
P-334U/P-335U User’s Guide Table 121 PPP Logs (continued) LOG MESSAGE DESCRIPTION ppp:LCP Closing The PPP connection’s Link Control Protocol stage is closing. ppp:IPCP Closing The PPP connection’s Internet Protocol Control Protocol stage is closing. Table 122 UPnP Logs LOG MESSAGE DESCRIPTION UPnP pass through Firewall UPnP packets can pass through the firewall.
PAGE 298
P-334U/P-335U User’s Guide Table 123 Content Filtering Logs (continued) LOG MESSAGE DESCRIPTION Connecting to content filter server fail The connection to the external content filtering server failed. License key is invalid The external content filtering license key is invalid. Table 124 Attack Logs 298 LOG MESSAGE DESCRIPTION attack [TCP | UDP | IGMP | ESP | GRE | OSPF] The firewall detected a TCP/UDP/IGMP/ESP/GRE/OSPF attack. attack ICMP (type:%d, code:%d) The firewall detected an ICMP attack.
PAGE 299
P-334U/P-335U User’s Guide Table 125 IPSec Logs LOG MESSAGE DESCRIPTION Discard REPLAY packet The router received and discarded a packet with an incorrect sequence number. Inbound packet authentication failed The router received a packet that has been altered. A third party may have altered or tampered with the packet. Receive IPSec packet, but no corresponding tunnel exists The router dropped an inbound packet for which SPI could not find a corresponding phase 2 SA.
PAGE 300
P-334U/P-335U User’s Guide Table 126 IKE Logs (continued) 300 LOG MESSAGE DESCRIPTION Cannot resolve Secure Gateway Addr for rule <%d> The router couldn’t resolve the IP address from the domain name that was used for the secure gateway address. Peer ID: - The displayed ID information did not match between the two ends of the connection. vs. My Remote The displayed ID information did not match between the two ends of the connection.
PAGE 301
P-334U/P-335U User’s Guide Table 126 IKE Logs (continued) LOG MESSAGE DESCRIPTION XAUTH fail! Username: The router was not able to use extended authentication to authenticate the listed username. Rule[%d] Phase 1 negotiation mode mismatch The listed rule’s IKE phase 1 negotiation mode did not match between the router and the peer. Rule [%d] Phase 1 encryption algorithm mismatch The listed rule’s IKE phase 1 encryption algorithm did not match between the router and the peer.
PAGE 302
P-334U/P-335U User’s Guide Table 126 IKE Logs (continued) LOG MESSAGE DESCRIPTION Rule [%d] phase 2 mismatch The listed rule’s IKE phase 2 did not match between the router and the peer. Rule [%d] Phase 2 key length mismatch The listed rule’s IKE phase 2 key lengths (with the AES encryption algorithm) did not match between the router and the peer. Table 127 PKI Logs 302 LOG MESSAGE DESCRIPTION Enrollment successful The SCEP online certificate enrollment was successful.
PAGE 303
P-334U/P-335U User’s Guide Table 127 PKI Logs (continued) LOG MESSAGE DESCRIPTION Rcvd data too large! Max size allowed: The router received directory data that was too large (the size is listed) from the LDAP server whose address and port are recorded in the Source field. The maximum size of directory data that the router allows is also recorded. Cert trusted: The router has verified the path of the certificate with the listed subject name.
PAGE 304
P-334U/P-335U User’s Guide Table 128 Certificate Path Verification Failure Reason Codes (continued) CODE DESCRIPTION 26 Database method failed. 27 Path was not verified. 28 Maximum path length reached. Table 129 802.1X Logs LOG MESSAGE DESCRIPTION Local User Database accepts user. A user was authenticated by the local user database. Local User Database reports user credential error. A user was not authenticated by the local user database because of an incorrect user password.
PAGE 305
P-334U/P-335U User’s Guide Table 130 ACL Setting Notes PACKET DIRECTION DIRECTION DESCRIPTION (L to W) LAN to WAN ACL set for packets traveling from the LAN to the WAN. (W to L) WAN to LAN ACL set for packets traveling from the WAN to the LAN. (D to L) DMZ to LAN ACL set for packets traveling from the DMZ to the LAN. (D to W) DMZ to WAN ACL set for packets traveling from the DMZ to the WAN. (W to D) WAN to DMZ ACL set for packets traveling from the WAN to the DMZ.
PAGE 306
P-334U/P-335U User’s Guide Table 131 ICMP Notes (continued) TYPE CODE DESCRIPTION Time Exceeded 11 0 Time to live exceeded in transit 1 Fragment reassembly time exceeded Parameter Problem 12 0 Pointer indicates the error Timestamp 13 0 Timestamp request message Timestamp Reply 14 0 Timestamp reply message Information Request 15 0 Information request message Information Reply 16 0 Information reply message Table 132 Syslog Logs LOG MESSAGE DESCRIPTION Mon dd hr:mm:ss
PAGE 307
P-334U/P-335U User’s Guide Table 133 RFC-2408 ISAKMP Payload Types (continued) LOG DISPLAY PAYLOAD TYPE SIG Signature NONCE Nonce NOTFY Notification DEL Delete VID Vendor ID Log Commands Go to the command interpreter interface. Configuring What You Want the ZyXEL Device to Log 1 Use the sys logs load command to load the log setting buffer that allows you to configure which logs the ZyXEL Device is to record. 2 Use sys logs category to view a list of the log categories.
PAGE 308
P-334U/P-335U User’s Guide Use 0 to not record logs for that category, 1 to record only logs for that category, 2 to record only alerts for that category, and 3 to record both logs and alerts for that category. Not every parameter is available with every category. 5 Step 5.Use the sys logs save command to store the settings in the ZyXEL Device (you must do this in order to record logs). Displaying Logs • Use the sys logs display command to show all of the logs in the ZyXEL Device’s log.
PAGE 309
P-334U/P-335U User’s Guide APPENDIX G Services The following table lists some commonly-used services and their associated protocols and port numbers. • Name: This is a short, descriptive name for the service. You can use this one or create a different one, if you like. • Protocol: This is the type of IP protocol used by the service. If this is TCP/UDP, then the service uses the same port number with TCP and UDP. If this is User-Defined, the Port(s) is the IP protocol number, not the port number.
PAGE 310
P-334U/P-335U User’s Guide Table 134 Examples of Services (continued) NAME PROTOCOL PORT(S) HTTP TCP 80 Hyper Text Transfer Protocol - a client/ server protocol for the world wide web. HTTPS TCP 443 HTTPS is a secured http session often used in e-commerce. User-Defined 1 Internet Control Message Protocol is often used for diagnostic purposes. UDP 4000 User-Defined 2 Internet Group Multicast Protocol is used when sending packets to a specific group of hosts.
PAGE 311
P-334U/P-335U User’s Guide Table 134 Examples of Services (continued) NAME PROTOCOL PORT(S) RCMD TCP 512 Remote Command Service. REAL_AUDIO TCP 7070 A streaming audio service that enables real time sound over the web. REXEC TCP 514 Remote Execution Daemon. RLOGIN TCP 513 Remote Login. TCP/UDP 1026 This is an ISP that provides services mainly for cable modems. TCP 107 Remote Telnet.
PAGE 312
P-334U/P-335U User’s Guide Table 134 Examples of Services (continued) 312 NAME PROTOCOL PORT(S) TFTP UDP 69 VDOLIVE TCP UDP 7000 userdefined DESCRIPTION Trivial File Transfer Protocol is an Internet file transfer protocol similar to FTP, but uses the UDP (User Datagram Protocol) rather than TCP (Transmission Control Protocol). A videoconferencing solution. The UDP port number is specified in the application.
PAGE 313
P-334U/P-335U User’s Guide APPENDIX H Internal SPTGEN This appendix introduces Internal SPTGEN. All menus shown in this appendix are example menus meant to show SPTGEN usage. Actual menus for your product may differ. Internal SPTGEN Overview Internal SPTGEN (System Parameter Table Generator) is a configuration text file useful for efficient configuration of multiple Prestiges.
PAGE 314
P-334U/P-335U User’s Guide Internal SPTGEN File Modification - Important Points to Remember Each parameter you enter must be preceded by one “=”sign and one space. Some parameters are dependent on others. For example, if you disable the Configured field in menu 1 (see Figure 196 on page 313), then you disable every field in this menu. If you enter a parameter that is invalid in the Input column, the Prestige will not save the configuration and the command line will display the Field Identification Number.
PAGE 315
P-334U/P-335U User’s Guide Figure 199 Internal SPTGEN FTP Download Example c:\ftp 192.168.1.1 220 PPP FTP version 1.0 ready at Sat Jan 1 03:22:12 2000 User (192.168.1.1:(none)): 331 Enter PASS command Password: 230 Logged in ftp>bin 200 Type I OK ftp> get rom-t ftp>bye c:\edit rom-t (edit the rom-t text file by a text editor and save it) Note: You can rename your “rom-t” file when you save it to your computer but it must be named “rom-t” when you upload it to your Prestige.
PAGE 316
P-334U/P-335U User’s Guide Example Internal SPTGEN Menus This section provides example Internal SPTGEN menus. Table 135 Abbreviations Used in the Example Internal SPTGEN Screens Table ABBREVIATION MEANING FIN Field Identification Number FN Field Name PVA Parameter Values Allowed INPUT An example of what you may enter * Applies to the Prestige.
PAGE 317
P-334U/P-335U User’s Guide Table 137 Menu 3 30100012 = Output protocol filters Set 4 = 256 30100013 = Output device filters Set 1 = 256 30100014 = Output device filters Set 2 = 256 30100015 = Output device filters Set 3 = 256 30100016 = Output device filters Set 4 = 256 / Menu 3.2 TCP/IP and DHCP Ethernet Setup FIN FN PVA INPUT 30200001 = DHCP <0(None) | 1(Server) | 2(Relay)> = 0 30200002 = Client IP Pool Starting Address = 192.168.1.
PAGE 318
P-334U/P-335U User’s Guide Table 137 Menu 3 30201005 = Version <0(Rip-1) | 1(Rip-2B) |2(Rip-2M)> = 0 30201006 = IP Alias #1 Incoming protocol filters Set 1 = 256 30201007 = IP Alias #1 Incoming protocol filters Set 2 = 256 30201008 = IP Alias #1 Incoming protocol filters Set 3 = 256 30201009 = IP Alias #1 Incoming protocol filters Set 4 = 256 30201010 = IP Alias #1 Outgoing protocol filters Set 1 = 256 30201011 = IP Alias #1 Outgoing protocol filters Set 2 = 256 30201012 = IP Alias #1
PAGE 319
P-334U/P-335U User’s Guide Table 137 Menu 3 FIN FN 30500001 = ESSID 30500002 = Hide ESSID <0(No) | 1(Yes)> 30500003 = Channel ID <1|2|3|4|5|6|7 = 1 |8|9|10|11|12| 13> 30500004 = RTS Threshold <0 ~ 2432> = 2432 30500005 = FRAG.
PAGE 320
P-334U/P-335U User’s Guide Table 138 Menu 4 Internet Access Setup / Menu 4 Internet Access Setup 320 FIN FN PVA INPUT 40000000 = Configured <0(No) | 1(Yes)> = 1 40000001 = ISP <0(No) | 1(Yes)> = 1 40000002 = Active <0(No) | 1(Yes)> = 1 40000003 = ISP's Name 40000004 = Encapsulation <2(PPPOE) | 3(RFC 1483)| 4(PPPoA )| 5(ENET ENCAP)> = 2 40000005 = Multiplexing <1(LLC-based) | 2(VC-based) = 1 40000006 = VPI # = 0 40000007 = VCI # = 35 40000008 = Service Name = any
PAGE 321
P-334U/P-335U User’s Guide Table 138 Menu 4 Internet Access Setup (continued) 40000027 = ATM QoS Type <0(CBR) | (1 (UBR)> = 1 40000028 = Peak Cell Rate (PCR) = 0 40000029 = Sustain Cell Rate (SCR) = 0 40000030 = Maximum Burst Size(MBS) = 0 40000031= RIP Direction <0(None) | 1(Both) | 2(In Only) | 3(Out Only)> = 0 40000032= RIP Version <0(Rip-1) | 1(Rip-2B) |2(Rip-2M)> = 0 40000033= Nailed-up Connection <0(No) |1(Yes)> = 0 Table 139 Menu 12 / Menu 12.1.
PAGE 322
P-334U/P-335U User’s Guide Table 140 Menu 15 SUA Server Setup / Menu 15 SUA Server Setup FIN FN 150000001 = SUA Server IP address for default port 150000002 = SUA Server #2 Active <0(No) | 1(Yes)> = 0 150000003 = SUA Server #2 Protocol <0(All)|6(TCP)|17(U DP)> = 0 150000004 = SUA Server #2 Port Start = 0 150000005 = SUA Server #2 Port End = 0 150000006 = SUA Server #2 Local IP address = 0.0.0.
PAGE 323
P-334U/P-335U User’s Guide Table 140 Menu 15 SUA Server Setup (continued) 150000031 = SUA Server #7 Local IP address = 0.0.0.0 150000032 = SUA Server #8 Active <0(No) | 1(Yes)> = 0 150000033 = SUA Server #8 Protocol <0(All)|6(TCP)|17(U DP)> = 0 150000034 = SUA Server #8 Port Start = 0 150000035 = SUA Server #8 Port End = 0 150000036 = SUA Server #8 Local IP address = 0.0.0.
PAGE 324
P-334U/P-335U User’s Guide Table 141 Menu 21.1 Filter Set #1 (continued) 210101002 = IP Filter Set 1,Rule 1 Active <0(No)|1(Yes)> 210101003 = IP Filter Set 1,Rule 1 Protocol = 6 210101004 = IP Filter Set 1,Rule 1 Dest IP address = 0.0.0.0 210101005 = IP Filter Set 1,Rule 1 Dest Subnet Mask = 0 210101006 = IP Filter Set 1,Rule 1 Dest Port = 137 210101007 = IP Filter Set 1,Rule 1 Dest Port Comp 210101008 = IP Filter Set 1,Rule 1 Src IP address = 0.0.0.
PAGE 325
P-334U/P-335U User’s Guide Table 141 Menu 21.1 Filter Set #1 (continued) 210102013 = IP Filter Set 1,Rule 2 Act Match <1(check next)|2(forward)| 3(drop)> = 3 210102014 = IP Filter Set 1,Rule 2 Act Not Match <1(check next)|2(forward)| 3(drop)> = 1 Table 142 Menu 21.1 Filer Set #2, / Menu 21.1 filter set #2, FIN FN PVA INPUT 210200001 = Filter Set 2, Nam = NetBIOS_WAN INPUT / Menu 21.1.2.
PAGE 326
P-334U/P-335U User’s Guide Table 142 Menu 21.1 Filer Set #2, (continued) 210202001 = IP Filter Set 2, Rule 2 Type <0(none)|2(TCP/IP)> = 2 210202002 = IP Filter Set 2, Rule 2 Active <0(No)|1(Yes)> 210202003 = IP Filter Set 2, Rule 2 Protocol = 6 210202004 = IP Filter Set 2, Rule 2 Dest IP address = 0.0.0.
PAGE 327
P-334U/P-335U User’s Guide Table 143 Menu 23 System Menus (continued) 230200005 = Authentication Server Shared Secret = 111111111111 111 111111111111 1111 230200006 = Accounting Server Configured <0(No) | 1(Yes)> = 1 230200007 = Accounting Server Active <0(No) | 1(Yes)> = 1 230200008 = Accounting Server IP Address = 192.168.1.44 230200009 = Accounting Server Port = 1823 230200010 = Accounting Server Shared Secret = 1234 */ Menu 23.4 System security: IEEE802.
PAGE 328
P-334U/P-335U User’s Guide Table 144 Menu 24.11 Remote Management Control (continued) 241100002 = TELNET Server Access <0(all)|1(none)|2(L = 0 an)|3(Wan)> 241100003 = TELNET Server Secured IP address = 0.0.0.0 241100004 = FTP Server Port = 21 241100005 = FTP Server Access 241100006 = FTP Server Secured IP address = 0.0.0.
PAGE 329
P-334U/P-335U User’s Guide APPENDIX I Triangle Route The Ideal Setup When the firewall is on, your Prestige acts as a secure gateway between your LAN and the Internet. In an ideal network topology, all incoming and outgoing network traffic passes through the Prestige to protect your LAN against attacks. Figure 201 Ideal Setup The “Triangle Route” Problem A traffic route is a path for sending or receiving data packets between two Ethernet devices.
PAGE 330
P-334U/P-335U User’s Guide Figure 202 “Triangle Route” Problem The “Triangle Route” Solutions This section presents you two solutions to the “triangle route” problem. IP Aliasing IP alias allows you to partition your network into logical sections over the same Ethernet interface. Your Prestige supports up to three logical LAN interfaces with the Prestige being the gateway for each logical network.
PAGE 331
P-334U/P-335U User’s Guide Index A access point 67 access point. See also AP. active protocol 144 AH 144 and encapsulation 145 ESP 144 ActiveX 134 Advanced Encryption Standard 288 AH 144 and transport mode 145 Alternative Subnet Mask Notation 273 AP 67 AP (access point) 281 AP. See also access point. Applications 31, 33 broadband connection 31 PR switch 33 Print Server 33 USB port 33 authentication algorithms 141, 146 and active protocol 141 Authentication Header. See AH.
PAGE 332
P-334U/P-335U User’s Guide transport mode 145 tunnel mode 145 VPN 145 Encryption 288 encryption 69 and local (user) database 70 key 70 WPA compatible 70 encryption algorithms 141, 146 and active protocol 141 ESP 144 and transport mode 145 ESS 280 Ethernet Encapsulation 115 Extended Service Set 280 Extended Service Set IDentification 71 Extended wireless security 54 F Factory LAN Defaults 105 FCC 4 Federal Communications Commission 4 Firewall 127, 128 Firmware File Maintenance 223, 224 Fragmentation Thresh
PAGE 333
P-334U/P-335U User’s Guide IPSec SA. See also VPN. IPSec. See also VPN. O OTIST 77 OTIST Wizard 55 J Java 134 K Keep alive 146 L LAN Setup 95, 105 LAN TCP/IP 105 Liability 3 License 3 Link type 41 local (user) database 69 and encryption 70 P Packet statistics 45 Pairwise Master Key (PMK) 288, 290 Patent 3 Perfect Forward Secrecy. see PFS.
PAGE 334
P-334U/P-335U User’s Guide S U SA life time 146 Safety Warnings 6 security associations. See VPN. Security Parameters 291 Service Set 71 Service Set IDentity. See SSID.
PAGE 335
P-334U/P-335U User’s Guide channel 67 encryption 69 MAC address filter 68 security 68 SSID 67 Wireless security 284 wireless security 68 WLAN Interference 281 Security parameters 291 WPA 287 WPA compatible 70 WPA2 287 WPA2-Pre-Shared Key 288 WPA2-PSK 288 WPA-PSK 288 Written Permission 3 Z ZyNOS 3 ZyXEL Communications Corporation 3 ZyXEL Limited Warranty Note 7 ZyXEL Network Operating System 3 335
Who We Are
About Us
Company
Careers
Terms & Privacy
Resources
List of Manufacturers
Support
For the Press
Media assets
FAQ
Get in touch
Blog
Email
DMCA
ManualShelf © 2013-2024