P-660H-T1v3s ADSL2+ 4-port Gateway Default Login Details IP Address http://192.168.1.1 Password 1234 Firmware Version 3.12 www.zyxel.com Edition 2, 6/2010 www.zyxel.
About This User's Guide About This User's Guide Intended Audience This manual is intended for people who want to configure the P-660H-T1v3s using the web configurator. You should have at least a basic knowledge of TCP/IP networking concepts and topology. Related Documentation • Quick Start Guide The Quick Start Guide is designed to help you get up and running right away. It contains information on setting up your network and configuring for Internet access.
About This User's Guide Customer Support In the event of problems that cannot be solved by using this manual, you should contact your vendor. If you cannot contact your vendor, then contact a ZyXEL office for the region in which you bought the device. See http://www.zyxel.com/ web/contact_us.php for contact information. Please have the following information ready when you contact an office. • Product model and serial number. • Warranty Information. • Date that you received your device.
Document Conventions Document Conventions Warnings and Notes These are how warnings and notes are shown in this User’s Guide. Warnings tell you about things that could harm you or your device. Note: Notes tell you other important information (for example, other things you may need to configure or helpful tips) or recommendations. Syntax Conventions • The P-660H-Txv3s may be referred to as the “P-660H-T1v3s”, the “device”, the “system” or the “product” in this User’s Guide.
Document Conventions Icons Used in Figures Figures in this User’s Guide may use the following generic icons. The P-660HT1v3s icon is not an exact representation of your device.
Safety Warnings Safety Warnings • Do NOT use this product near water, for example, in a wet basement or near a swimming pool. • Do NOT expose your device to dampness, dust or corrosive liquids. • Do NOT store things on the device. • Do NOT install, use, or service this device during a thunderstorm. There is a remote risk of electric shock from lightning. • Connect ONLY suitable accessories to the device. • Do NOT open the device or unit.
Safety Warnings 8 P-660H-T1v3s User’s Guide
Contents Overview Contents Overview User’s Guide ........................................................................................................................... 19 Introduction ................................................................................................................................ 21 The Web Configurator ............................................................................................................... 27 Status Screens .......................................
Contents Overview 10 P-660H-T1v3s User’s Guide
Table of Contents Table of Contents About This User's Guide .......................................................................................................... 3 Document Conventions............................................................................................................ 5 Safety Warnings........................................................................................................................ 7 Contents Overview .......................................................
Table of Contents Chapter 4 Tutorials ................................................................................................................................... 37 4.1 Overview .............................................................................................................................. 37 4.2 Configuring the MAC Address Filter .................................................................................... 37 4.3 Setting Up NAT Port Forwarding .................................
Table of Contents 6.4.2 Multiplexing ................................................................................................................ 83 6.4.3 VPI and VCI ............................................................................................................... 84 6.4.4 IP Address Assignment .............................................................................................. 84 6.4.5 Keep Alive/Nailed-Up Connection (PPP) .......................................................
Table of Contents 8.6.2 What NAT Does ........................................................................................................116 8.6.3 How NAT Works ........................................................................................................117 8.6.4 NAT Application .........................................................................................................118 8.6.5 NAT Mapping Types ..................................................................................
Table of Contents 13.2 The QoS Screen ............................................................................................................. 143 13.2.1 The QoS Settings Summary Screen ...................................................................... 145 13.3 QoS Technical Reference ................................................................................................ 146 13.3.1 IEEE 802.1p ................................................................................................
Table of Contents Chapter 18 Logs ....................................................................................................................................... 177 18.1 Overview .......................................................................................................................... 177 18.1.1 What You Can Do in the Log Screens .................................................................... 177 18.1.2 What You Need To Know ....................................................
Table of Contents Appendix C IP Addresses and Subnetting ........................................................................... 245 Appendix D Services ............................................................................................................ 255 Appendix E Legal Information .............................................................................................. 259 Index............................................................................................................
Table of Contents 18 P-660H-T1v3s User’s Guide
P ART I User’s Guide 19
CHAPTER 1 Introduction 1.1 Overview The P-660H-T1v3s is an ADSL2+ router. By integrating DSL and NAT, you are provided with ease of installation and high-speed, shared Internet access. The P660HW-Tx v3 is also a complete security solution with a robust firewall and content filtering. Please refer to the following description of the product name format. • “H” denotes an integrated 4-port hub (switch).
Chapter 1 Introduction 1.2.1 Good Habits for Device Management Do the following things regularly to make the P-660H-T1v3s more secure and to manage the P-660H-T1v3s more effectively. • Change the password. Use a password that’s not easy to guess and that consists of different types of characters, such as numbers and letters. • Write down the password and put it in a safe place. • Back up the configuration (and make sure you know how to restore it).
Chapter 1 Introduction Use content filtering to block access to specific web sites, with URL’s containing keywords that you specify. You can define time periods and days during which content filtering is enabled and include or exclude particular computers on your network from content filtering. For example, you could block access to certain web sites for the kids. Use QoS to efficiently manage traffic on your network by giving priority to certain types of traffic and/or to particular computers.
Chapter 1 Introduction The following table describes the labels in this picture. Table 1 LED Descriptions LED COLOR STATUS DESCRIPTION POWER Green On The P-660H-T1v3s is receiving power and ready for use. Red On The P-660H-T1v3s detected an error while selftesting, or there is a device malfunction. Off The P-660H-T1v3s is not receiving power. On The P-660H-T1v3s has an Ethernet connection with a device on the Local Area Network (LAN).
Chapter 1 Introduction 1.5.1 Using the Reset Button 1 Make sure the POWER LED is on (not blinking). 2 To set the device back to the factory default settings, press the RESET button for ten seconds or until the POWER LED begins to blink and then release it. When the POWER LED begins to blink, the defaults have been restored and the device restarts.
Chapter 1 Introduction 26 P-660H-T1v3s User’s Guide
CHAPTER 2 The Web Configurator 2.1 Overview The Web Configurator is an HTML-based management interface that allows easy device setup and management using a web browser. The minimum requirements to use the Web Configurator: • A modern web browser, such as Internet Explorer 7 or Firefox 3.5. • Web browser pop-up windows from your device. Web pop-up blocking is enabled by default in Windows XP SP (Service Pack) 2. • JavaScript (enabled by default). • Java permissions (enabled by default).
Chapter 2 The Web Configurator 660H-T1v3s, type the admin password (1234 by default) in the password screen and click Login. Click Cancel to revert to the default user password in the password field. If you have changed the password, enter your password and click Login. Figure 3 Password Screen 5 The following screen displays if you have not yet changed your password. It is strongly recommended you change the default password.
Chapter 2 The Web Configurator 6 Select Go to Wizard setup and click Apply to display the wizard main screen. Otherwise, select Go to Advanced setup and click Apply to display the Status screen. Figure 5 Wizard or Advanced Mode Screen Note: For security reasons, the P-660H-T1v3s automatically logs you out if you do not use the Web Configurator for five minutes. If this happens, log in again. 2.
Chapter 2 The Web Configurator The main screen is divided into these parts: • A - title bar • B - navigation panel • C - main window • D - status bar 2.2.1 Title Bar The title bar provides some icons in the upper right corner. The icons provide the following functions. Table 2 Web Configurator Icons in the Title Bar ICON DESCRIPTION Wizard Click this icon to go to the configuration wizards. See Chapter 5 on page 57 for more information. Logout Click this icon to log out of the web configurator. 2.2.
Chapter 2 The Web Configurator Table 3 Navigation Panel Summary LINK LAN NAT TAB FUNCTION IP Use this screen to configure LAN TCP/IP settings, enable Any IP and other advanced properties. DHCP Setup Use this screen to configure LAN DHCP settings. Client List Use this screen to view current DHCP client information and to always assign specific IP addresses to individual MAC addresses (and host names). IP Alias Use this screen to partition your LAN interface into subnets.
Chapter 2 The Web Configurator Table 3 Navigation Panel Summary LINK TAB UPnP FUNCTION Use this screen to turn UPnP on or off. Maintenance System General Use this screen to configure your device’s name, domain name, management inactivity timeout and password. Time and Date Use this screen to change your P-660H-T1v3s’s time and date. Logs Use this screen to select which logs and/or immediate alerts your device is to record.
CHAPTER 3 Status Screens 3.1 Overview Use the Status screens to look at the current status of the device, system resources, and interfaces (LAN and WAN). The Status screen also provides detailed information from Any IP and DHCP and statistics from bandwidth management, and traffic. 3.2 The Status Screen Use this screen to view the status of the P-660H-T1v3s. Click Status to open this screen.
Chapter 3 Status Screens Each field is described in the following table. Table 4 Status Screen LABEL DESCRIPTION Refresh Interval Select how often you want the P-660H-T1v3s to update this screen. Apply Click this to update this screen immediately. Device Information Host Name This field displays the P-660H-T1v3s system name. It is used for identification. You can change this in the Maintenance > System > General screen’s System Name field. Model Number This is the model name of your device.
Chapter 3 Status Screens Table 4 Status Screen LABEL DESCRIPTION Security Firewall This displays whether or not the P-660H-T1v3s’s firewall is activated. Click this to go to the screen where you can change it. System Status System Uptime This field displays how long the P-660H-T1v3s has been running since it last started up. The P-660H-T1v3s starts up when you plug it in, when you restart it (Maintenance > Tools > Restart), or when you reset it.
Chapter 3 Status Screens 36 P-660H-T1v3s User’s Guide
CHAPTER 4 Tutorials 4.1 Overview This chapter shows you how to use the P-660H-T1v3s’s various features. • Configuring the MAC Address Filter • Setting Up NAT Port Forwarding • Access the P-660H-T1v3s Using DDNS • Configuring Static Route for Routing to Another Network • Multiple Public and Private IP Address Mappings • Multiple WAN Connections Example • Multiple PVCs with QoS 4.
Chapter 4 Tutorials 1 Click Security > Filter > IP/MAC Filter to open the following screen. 2 For Rule Type, select MAC. 3 Enter the MAC Address of the computer (B) that you want to block. 4 Click the SAVE button. 4.3 Setting Up NAT Port Forwarding This tutorial shows you how to configure the port settings on a P-660H-T1v3s to allow an Xbox to communicate with the online Xbox live service.
Chapter 4 Tutorials UDP: 53, 88, 3074 You can set up the port settings in two waysL: either set the Xbox 360’s IP address as the default server; or configure the port settings for Xbox 360. 4.3.1 Default Server It is much easier to set the Xbox 360’s IP address as the default server if it is not already assigned to another server. There is no need to enter any port number. Note: Setting a device as the default server exposes the device to potential attacks.
Chapter 4 Tutorials 3 Click Network > NAT > Port Forwarding. Enter the Xbox 360’s IP address in the Default Server field. Click Apply. 4.3.2 Port Forwarding If the default server is already assigned to another server, configure the ports for Xbox 360. 1 40 Click Network > NAT to open the General screen. Select Active Network Address Translation and SUA Only. Click Apply.
Chapter 4 Tutorials 2 Click Network > NAT > Port Forwarding. Select User define from the Service Name field. 3 Configure the screen as follows to open TCP/UDP port 53 for Xbox 360. Click Apply.
Chapter 4 Tutorials 4 Repeat steps 2 and 3 to open the rest of the ports for Xbox 360. The port forwarding settings you configured are listed in the Port Forwarding screen. 4.3.3 Special Note In this tutorial, all port 80 traffic is forwarded to Xbox 360, but port 80 is also the default listening port for remote management via WWW. If you also want to manage the P-660H-T1v3s from the Internet, you need to assign an unused port for WWW remote access.
Chapter 4 Tutorials 4.4 Access the P-660H-T1v3s Using DDNS If you connect your P-660H-T1v3s to the Internet and it uses a dynamic WAN IP address, it is inconvenient for you to manage the device from the Internet. The P660H-T1v3s’s WAN IP address changes dynamically. Dynamic DNS (DDNS) allows you to access the P-660H-T1v3s using a domain name. To use this feature, you have to apply for DDNS service at www.dyndns.org. Note: If you have a private WAN IP address, then you cannot use DDNS. 4.4.
Chapter 4 Tutorials 4.4.2 Configuring the P-660H-T1v3s for Remote Management By default, your P-660H-T1v3s firewall is enabled to secure your network from external access. In this section, you activate DDNS with the settings from the previous section, and then modify the Remote Management settings to allow a connection to be initiated from a single external IP address. 1 44 Configure the following settings in the Advanced > Dynamic DNS screen. 1a Select Active Dynamic DNS.
Chapter 4 Tutorials 4 The WWW screen opens. Configure the following settings: Server Port: The default web (HTTP) port that allows traffic to and from the WAN is 80. If you open this port to allow for external communication requests, then that would make quite a hole in the device’s security. So enter ‘81’ instead. Server Access: Set this to WAN, to limit management requests to WAN only. This prevents attempts from the LAN-side of the P-660H-T1v3s.
Chapter 4 Tutorials 4.5 Configuring Static Route for Routing to Another Network In order to extend your Intranet and control traffic flowing directions, you may connect a router to the P-660H-T1v3s’s LAN. The router may be used to separate two department networks. This tutorial shows how to configure a static routing rule for two network routings. In the following figure, router R is connected to the P-660H-T1v3s’s LAN. R connects to two networks, N1 (192.168.1.x/24) and N2 (192.168.10.x/24).
Chapter 4 Tutorials You need to specify a static routing rule on the P-660H-T1v3s to specify R as the router in charge of forwarding traffic to N2. In this case, the P-660H-T1v3s routes traffic from A to R and then R routes the traffic to B. This tutorial uses the following example IP settings: Table 5 IP Settings in this Tutorial DEVICE / COMPUTER IP ADDRESS The P-660H-T1v3s’s WAN 172.16.1.1 The P-660H-T1v3s’s LAN 192.168.1.1 A 192.168.1.34 R’s N1 192.168.1.253 R’s N2 192.168.10.2 B 192.168.
Chapter 4 Tutorials 3 Configure the Static Route Setup screen using the following settings: 3a Enter a destination IP address of 192.168.10.0 and a subnet mask 255.255.255.0 for N2. 3b Enter 192.168.1.253 (R’s N1 address) in the Gateway IP Address field. 3a Click Apply. Now B should be able to receive traffic from A. 4.6 Multiple Public and Private IP Address Mappings If your ISP gives you more than one static IP address for your Internet access, you can map each IP address for a specific service.
Chapter 4 Tutorials This tutorial uses the following example settings: Table 6 IP Settings in this Tutorial DEVICE / COMPUTER IP ADDRESS The P-660H-T1v3s’s WAN 172.16.1.253 (IP-1) 172.16.1.254 (IP-2) The P-660H-T1v3s’s LAN 192.168.1.1 A 192.168.1.2 B 192.168.1.3 C a.b.c.d To do this, you can use either of the following settings: • Full Feature NAT with many-to-many no overload mapping • Full Feature NAT with one-to-one mapping 4.6.
Chapter 4 Tutorials 2 Select Active Network Address Translation(NAT) and Full Feature in the General screen. Click Apply. 3 Click the Address Mapping tab, and then click the Edit icon on a new rule. 4 Configure the rule using the following settings: • Type: Many-to-Many No Overload • Local IP addresses: 192.168.1.2 ~ 192.168.1.3 • Global IP addresses: 172.16.1.253 ~ 172.16.1.254 5 50 Click Apply.
Chapter 4 Tutorials 4.6.2 Full Feature NAT + One-to-One Mapping Use this setting if your applications must use fixed public IP addresses and the applications can be initiated either from the Intranet computers (A and B) or the Internet computer (C). For example, gaming application. To configure this setting: 1 Click Network > NAT. 2 Select Active Network Address Translation(NAT) and Full Feature in the General screen. Click Apply. 3 Click the Address Mapping tab, click the Edit icon on a new rule.
Chapter 4 Tutorials 4 Configure two rules for the one-to-one mappings: • Rule 1 (This maps the public IP address 172.16.1.253 to the private IP address 192.168.1.2) Type: One-to-One Local Start IP: 192.168.1.2 Global Start IP: 172.16.1.253 • Rule 2 (This maps the public IP address 172.16.1.254 to the private IP address 192.168.1.3) Type: One-to-One Local Start IP: 192.168.1.3 Global Start IP: 172.16.1.254 Click Apply on each of the screens. 4.
Chapter 4 Tutorials • The connection with VPI/VCI, 0/35, is dedicated for general data transmission. Figure 8 Example for Multiple WAN Connections 4.8 Multiple PVCs with QoS This tutorial is only applicable for an ISP engineer. An ISP may configure multiple PVCs for seperating different subscriber application traffic. This helps to record traffic statistics or calculate service charges.
Chapter 4 Tutorials 4.8.1 Configuring Multiple PVCs and ATM-QoS This section shows you how to configure two PVCs and specify a proper ATM-QoS type for each PVC. 1 Click Network > WAN > Internet Access Setup, configure the settings you (ISP) want to provide to the subscriber for general data transmission.
Chapter 4 Tutorials 2 Click the Advanced Setup button to display the following options. Select UBR in the ATM QoS Type field. Click Apply. 3 Click the More Connections tab and then click the Edit icon next for an entry. 4 Then configure the screen using the following example settings: • Select Active.
Chapter 4 Tutorials Click Apply. 5 Click the Advanced Setup button and then select CBR in the ATM QoS Type field. Click Apply.
CHAPTER 5 Setup Wizard 5.1 Overview Use the wizard setup screens to configure your system for Internet access with the information given to you by your ISP. Note: See the advanced menu chapters for detailed information on these fields. 5.2 Internet Access Wizard Setup 1 After you enter the password to access the web configurator, select Go to Wizard setup and click Apply. Otherwise, click the wizard icon in the top right corner of the Web Configurator to open to the wizard.
Chapter 5 Setup Wizard 2 Click INTERNET SETUP to configure the system for Internet access. Figure 10 Wizard Welcome 3 Your ZyXEL device attempts to detect your DSL connection and your connection type. 3a The following screen appears if a connection is not detected. Check your hardware connections and click Restart the INTERNET SETUP Wizard to return to the wizard welcome screen. If you still cannot connect, click Manually configure your Internet connection.
Chapter 5 Setup Wizard 3b The following screen displays if a PPPoE or PPPoA connection is detected. Enter your Internet account information (username, password and/or service name) exactly as provided by your ISP. Then click Next. Figure 12 Auto-Detection: PPPoE 3c The following screen appears if the ZyXEL device detects a connection but not the connection type. Click Next and refer to Section 5.2.1 on page 60 on how to manually configure the P-660H-T1v3s for Internet access.
Chapter 5 Setup Wizard 5.2.1 Manual Configuration 1 If the P-660H-T1v3s fails to detect your DSL connection type but the physical line is connected, enter your Internet access information in the wizard screen exactly as your service provider gave it to you. Leave the defaults in any fields for which you were not given information. Figure 14 Internet Access Wizard Setup: ISP Parameters The following table describes the fields in this screen.
Chapter 5 Setup Wizard Table 7 Internet Access Wizard Setup: ISP Parameters 2 LABEL DESCRIPTION Multiplexing Select the multiplexing method used by your ISP from the Multiplex drop-down list box either VC-based or LLC-based. Virtual Circuit ID VPI (Virtual Path Identifier) and VCI (Virtual Channel Identifier) define a virtual circuit. Refer to the appendix for more information. VPI Enter the VPI assigned to you. This field may already be configured. VCI Enter the VCI assigned to you.
Chapter 5 Setup Wizard The following table describes the fields in this screen. Table 8 LABEL DESCRIPTION User Name Enter the user name exactly as your ISP assigned. If assigned a name in the form user@domain where domain identifies a service name, then enter both components exactly as given. Password Enter the password associated with the user name above. Service Name Type the name of your PPPoE service here. Back Click this to return to the previous screen without saving.
Chapter 5 Setup Wizard The following table describes the fields in this screen. Table 9 Internet Connection with RFC 1483 LABEL DESCRIPTION IP Address This field is available if you select Routing in the Mode field. Type your ISP assigned IP address in this field. Back Click this to return to the previous screen without saving. Next Click this to continue to the next wizard screen. Exit Click this to close the wizard screen without saving.
Chapter 5 Setup Wizard The following table describes the fields in this screen. Table 10 Internet Connection with ENET ENCAP LABEL DESCRIPTION Obtain an IP A static IP address is a fixed IP that your ISP gives you. A dynamic IP Address address is not fixed; the ISP assigns you a different one each time you Automatically connect to the Internet. Select Obtain an IP Address Automatically if you have a dynamic IP address. Static IP Address Select Static IP Address if your ISP gave you an IP address to use.
Chapter 5 Setup Wizard The following table describes the fields in this screen. Table 11 Internet Connection with PPPoA LABEL DESCRIPTION User Name Enter the login name that your ISP gives you. Password Enter the password associated with the user name above. Back Click this to return to the previous screen without saving. Apply Click this to save your changes. Exit Click this to close the wizard screen without saving.
Chapter 5 Setup Wizard 66 P-660H-T1v3s User’s Guide
P ART II Technical Reference 67
CHAPTER 6 WAN Setup 6.1 Overview This chapter describes how to configure WAN settings from the WAN screens. Use these screens to configure your P-660H-T1v3s for Internet access. A WAN (Wide Area Network) connection is an outside connection to another network or the Internet. It connects your private networks (such as a LAN (Local Area Network) and other networks, so that a computer in one location can communicate with computers in other locations. Figure 21 LAN and WANw LAN WAN 6.1.
Chapter 6 WAN Setup Encapsulation Method Encapsulation is used to include data from an upper layer protocol into a lower layer protocol. To set up a WAN connection to the Internet, you need to use the same encapsulation method used by your ISP (Internet Service Provider). If your ISP offers a dial-up Internet connection using PPPoE (PPP over Ethernet) or PPPoA, they should also provide a username and password (and service name) for user authentication.
Chapter 6 WAN Setup 6.2 The Internet Access Setup Screen Use this screen to change your P-660H-T1v3s’s WAN settings. Click Network > WAN > Internet Access Setup. The screen differs by the WAN type and encapsulation you select.
Chapter 6 WAN Setup The following table describes the labels in this screen. Table 12 Network > WAN > Internet Access Setup LABEL DESCRIPTION Line ADSL Mode Select the modulation supported by your ISP. Use Auto Sync-Up if you are not sure which mode to choose from. The P-660H-T1v3s dynamically diagnoses the mode supported by the ISP and selects the best compatible one for your connection. Other options are: ADSL2+, ADSL2, G.DMT, T1.413 and G.lite.
Chapter 6 WAN Setup Table 12 Network > WAN > Internet Access Setup (continued) LABEL DESCRIPTION Encapsulation Select the method of encapsulation used by your ISP from the dropdown list box. Choices vary depending on the mode you select in the Mode field. PPPoA - Point-to-Point Protocol over ATM (PPPoA) encapsulates PPP frames inside ATM Adaptation Layer 5 frames.
Chapter 6 WAN Setup Table 12 Network > WAN > Internet Access Setup (continued) LABEL DESCRIPTION IP Address This option is available if you select Routing in the Mode field. A static IP address is a fixed IP that your ISP gives you. A dynamic IP address is not fixed; the ISP assigns you a different one each time you connect to the Internet.
Chapter 6 WAN Setup 6.2.1 Advanced Internet Access Setup Use this screen to edit your P-660H-T1v3s's advanced WAN settings. Click the Advanced Setup button in the Internet Access Setup screen. The screen appears as shown. Figure 23 Network > WAN > Internet Access Setup: Advanced Setup The following table describes the labels in this screen.
Chapter 6 WAN Setup Table 13 Network > WAN > Internet Access Setup: Advanced Setup (continued) LABEL DESCRIPTION Multicast Multicast packets are sent to a group of computers on the LAN and are an alternative to unicast packets (packets sent to one computer) and broadcast packets (packets sent to every computer). Internet Group Multicast Protocol (IGMP) is a network-layer protocol used to establish membership in a multicast group. The P-660H-T1v3s supports IGMP-v1, IGMP-v2 and IGMP-v3.
Chapter 6 WAN Setup 6.3 The More Connections Screen The P-660H-T1v3s allows you to configure more than one Internet access connection. To configure additional Internet access connections click Network > WAN > More Connections. The screen differs by the encapsulation you select. When you use the WAN > Internet Access Setup screen to set up Internet access, you are configuring the first WAN connection. Figure 24 Network > WAN > More Connections The following table describes the labels in this screen.
Chapter 6 WAN Setup 6.3.1 More Connections Edit Use this screen to configure a connection. Click the edit icon in the More Connections screen to display the following screen.
Chapter 6 WAN Setup The following table describes the labels in this screen. Table 15 Network > WAN > More Connections: Edit LABEL DESCRIPTION General Active Select the check box to activate or clear the check box to deactivate this connection. Node Name Enter a unique, descriptive name of up to 13 ASCII characters for this connection. Mode Select Routing from the drop-down list box if your ISP allows multiple computers to share an Internet account.
Chapter 6 WAN Setup Table 15 Network > WAN > More Connections: Edit (continued) LABEL DESCRIPTION IP Address This option is available if you select Routing in the Mode field. A static IP address is a fixed IP that your ISP gives you. A dynamic IP address is not fixed; the ISP assigns you a different one each time you connect to the Internet.
Chapter 6 WAN Setup 6.3.2 Configuring More Connections Advanced Setup Use this screen to edit your P-660H-T1v3s's advanced WAN settings. Click the Advanced Setup button in the More Connections Edit screen. The screen appears as shown. Figure 26 Network > WAN > More Connections: Edit: Advanced Setup The following table describes the labels in this screen.
Chapter 6 WAN Setup Table 16 Network > WAN > More Connections: Edit: Advanced Setup (continued) LABEL DESCRIPTION Maximum Burst Size Maximum Burst Size (MBS) refers to the maximum number of cells that can be sent at the peak rate. Type the MBS, which is less than 65535. MTU MTU The Maximum Transmission Unit (MTU) defines the size of the largest packet allowed on an interface or connection. Enter the MTU in this field. For ENET ENCAP, the MTU value is 1500. For PPPoE, the MTU value is 1492.
Chapter 6 WAN Setup For the service provider, PPPoE offers an access and authentication method that works with existing access control systems (for example RADIUS). One of the benefits of PPPoE is the ability to let you access one of multiple network services, a function known as dynamic service selection. This enables the service provider to easily create and offer new IP services for individuals.
Chapter 6 WAN Setup LLC-based Multiplexing In this case one VC carries multiple protocols with protocol identifying information being contained in each packet header. Despite the extra bandwidth and processing overhead, this method may be advantageous if it is not practical to have a separate VC for each carried protocol, for example, if charging heavily depends on the number of simultaneous VCs. 6.4.
Chapter 6 WAN Setup a nailed-up connection. The first is that idle timeout is disabled. The second is that the P-660H-T1v3s will try to bring up the connection when turned on and whenever the connection is down. A nailed-up connection can be very expensive for obvious reasons. Do not specify a nailed-up connection unless your telephone company offers flatrate service or you need a constant connection and the cost is of no concern. 6.4.
Chapter 6 WAN Setup The following figure illustrates the relationship between PCR, SCR and MBS. Figure 27 Example of Traffic Shaping 6.5.1 ATM Traffic Classes These are the basic ATM traffic classes defined by the ATM Forum Traffic Management 4.0 Specification. Constant Bit Rate (CBR) Constant Bit Rate (CBR) provides fixed bandwidth that is always available even if no data is being sent. CBR traffic is generally time-sensitive (doesn't tolerate delay).
Chapter 6 WAN Setup levels, SCR defines the minimum level. An example of an VBR-nRT connection would be non-time sensitive data file transfers. Unspecified Bit Rate (UBR) The Unspecified Bit Rate (UBR) ATM traffic class is for bursty data transfers. However, UBR doesn't guarantee any bandwidth and only delivers traffic when the network has spare bandwidth. An example application is background file transfer.
Chapter 6 WAN Setup 88 P-660H-T1v3s User’s Guide
CHAPTER 7 LAN Setup 7.1 Overview A Local Area Network (LAN) is a shared communication system to which many networking devices are connected. It is usually located in one immediate area such as a building or floor of a building. Use the LAN screens to help you configure a LAN DHCP server and manage IP addresses. LAN DSL 7.1.1 What You Can Do in the LAN Screens • Use the IP screen (Section 7.2 on page 91) to set the LAN IP address and subnet mask of your ZyXEL device.
Chapter 7 LAN Setup IP Address IP addresses identify individual devices on a network. Every networking device (including computers, servers, routers, printers, etc.) needs an IP address to communicate across the network. These networking devices are also known as hosts. Subnet Mask Subnet masks determine the maximum number of possible hosts on a network. You can also use subnet masks to divide one network into multiple sub-networks.
Chapter 7 LAN Setup Finding Out More See Section 7.6 on page 98 for technical background information on LANs. 7.1.3 Before You Begin Find out the MAC addresses of your network devices if you intend to add them to the DHCP Client List screen. 7.2 The IP Screen Use this screen to set the Local Area Network IP address and subnet mask of your P-660H-T1v3s. Click Network > LAN to open the IP screen. Follow these steps to configure your LAN settings. 1 Enter an IP address into the IP Address field.
Chapter 7 LAN Setup The following table describes the fields in this screen. Table 17 Network > LAN > IP LABEL DESCRIPTION IP Address Enter the LAN IP address you want to assign to your P-660H-T1v3s in dotted decimal notation, for example, 192.168.1.1 (factory default). IP Subnet Mask Type the subnet mask of your network in dotted decimal notation, for example 255.255.255.0 (factory default).
Chapter 7 LAN Setup 7.3 The DHCP Setup Screen Use this screen to configure the DNS server information that the P-660H-T1v3s sends to the DHCP client devices on the LAN. Click Network > DHCP Setup to open this screen. Figure 30 Network > LAN > DHCP Setup The following table describes the labels in this screen.
Chapter 7 LAN Setup Table 19 Network > LAN > DHCP Setup LABEL First DNS Server Second DNS Server DESCRIPTION Select Obtained From ISP if your ISP dynamically assigns DNS server information (and the P-660H-T1v3s's WAN IP address). Select User-Defined if you have the IP address of a DNS server. Enter the DNS server's IP address in the field to the right. If you chose User-Defined, but leave the IP address set to 0.0.0.0, UserDefined changes to None after you click Apply.
Chapter 7 LAN Setup Use this screen to change your P-660H-T1v3s’s static DHCP settings. Click Network > LAN > Client List to open the following screen. Figure 31 Network > LAN > Client List The following table describes the labels in this screen. Table 20 Network > LAN > Client List LABEL DESCRIPTION IP Address Enter the IP address that you want to assign to the computer on your LAN with the MAC address that you will also specify. MAC Address Enter the MAC address of a computer on your LAN.
Chapter 7 LAN Setup 7.5 The IP Alias Screen IP alias allows you to partition a physical network into different logical networks over the same Ethernet interface. The P-660H-T1v3s supports three logical LAN interfaces via its single physical Ethernet interface with the P-660H-T1v3s itself as the gateway for each LAN network. When you use IP alias, you can also configure firewall rules to control access between the LAN's logical networks (subnets).
Chapter 7 LAN Setup The following table describes the labels in this screen. Table 21 Network > LAN > IP Alias LABEL DESCRIPTION IP Alias 1 Select the check box to configure another LAN network for the P-660HT1v3s. IP Address Enter the IP address of your P-660H-T1v3s in dotted decimal notation. IP Subnet Mask Your P-660H-T1v3s will automatically calculate the subnet mask based on the IP address that you assign. Unless you are implementing subnetting, use the subnet mask computed by the P-660H-T1v3s.
Chapter 7 LAN Setup 7.6 LAN Technical Reference This section provides some technical background information about the topics covered in this chapter. 7.6.1 LANs, WANs and the ZyXEL Device The actual physical connection determines whether the P-660H-T1v3s ports are LAN or WAN ports. There are two separate IP networks, one inside the LAN network and the other outside the WAN network as shown next. Figure 34 LAN and WAN IP Addresses LAN WAN 7.6.
Chapter 7 LAN Setup 7.6.3 DNS Server Addresses DNS (Domain Name System) maps a domain name to its corresponding IP address and vice versa. The DNS server is extremely important because without it, you must know the IP address of a computer before you can access it. The DNS server addresses you enter when you set up DHCP are passed to the client machines along with the assigned IP address and subnet mask. There are two ways that an ISP disseminates the DNS server addresses.
Chapter 7 LAN Setup Network Address Translation (NAT) feature of the P-660H-T1v3s. The Internet Assigned Number Authority (IANA) reserved this block of addresses specifically for private use; please do not use any other number unless you are told otherwise. Let's say you select 192.168.1.0 as the network number; which covers 254 individual addresses, from 192.168.1.1 to 192.168.1.254 (zero and 255 are reserved).
Chapter 7 LAN Setup 7.6.5 RIP Setup RIP (Routing Information Protocol) allows a router to exchange routing information with other routers. The RIP Direction field controls the sending and receiving of RIP packets. When set to: • Both - the P-660H-T1v3s will broadcast its routing table periodically and incorporate the RIP information that it receives. • In Only - the P-660H-T1v3s will not send any RIP packets but will accept all RIP packets received.
Chapter 7 LAN Setup The P-660H-T1v3s supports IGMP version 1 (IGMP-v1), IGMP version 2 (IGMPv2) and IGMP version 3 (IGMP-v3). At start up, the P-660H-T1v3s queries all directly connected networks to gather group membership. After that, the P-660HT1v3s periodically updates this information. IP multicasting can be enabled/ disabled on the P-660H-T1v3s LAN and/or WAN interfaces in the web configurator (LAN; WAN). Select None to disable IP multicasting on these interfaces. 7.6.
Chapter 7 LAN Setup The Any IP feature does not apply to a computer using either a dynamic IP address or a static IP address that is in the same subnet as the P-660H-T1v3s’s IP address. Note: You must enable NAT/SUA to use the Any IP feature on the P-660H-T1v3s. How Any IP Works Address Resolution Protocol (ARP) is a protocol for mapping an Internet Protocol address (IP address) to a physical machine address, also known as a Media Access Control or MAC address, on the local area network.
Chapter 7 LAN Setup 104 P-660H-T1v3s User’s Guide
CHAPTER 8 Network Address Translation (NAT) 8.1 Overview This chapter discusses how to configure NAT on the P-660H-T1v3s. NAT (Network Address Translation - NAT, RFC 1631) is the translation of the IP address of a host in a packet, for example, the source address of an outgoing packet, used within one network to a different IP address known within another network. 8.1.1 What You Can Do in the NAT Screens • Use the NAT General Setup screen (Section 8.2 on page 107) to configure the NAT setup settings.
Chapter 8 Network Address Translation (NAT) NAT In the simplest form, NAT changes the source IP address in a packet received from a subscriber (the inside local address) to another (the inside global address) before forwarding the packet to the WAN side. When the response comes back, NAT translates the destination address (the inside global address) back to the inside local address before forwarding it to the original inside host.
Chapter 8 Network Address Translation (NAT) 8.2 The NAT General Setup Screen Use this screen to activate NAT. Click Network > NAT to open the following screen. Note: You must create a firewall rule in addition to setting up SUA/NAT, to allow traffic from the WAN to be forwarded through the P-660H-T1v3s. Figure 36 Network > NAT > General The following table describes the labels in this screen.
Chapter 8 Network Address Translation (NAT) Table 22 Network > NAT > General (continued) LABEL DESCRIPTION Apply Click this to save your changes. Cancel Click this to restore your previously saved settings. 8.3 The Port Forwarding Screen Note: This screen is available only when you select SUA only in the NAT > General screen. Use this screen to forward incoming service requests to the server(s) on your local network.
Chapter 8 Network Address Translation (NAT) Configuring Servers Behind Port Forwarding (Example) Let's say you want to assign ports 21-25 to one FTP, Telnet and SMTP server (A in the example), port 80 to another (B in the example) and assign a default server IP address of 192.168.1.35 to a third (C in the example). You assign the LAN IP addresses and the ISP assigns the WAN IP address. The NAT network appears as a single host on the Internet. Figure 37 Multiple Servers Behind NAT Example A=192.168.1.
Chapter 8 Network Address Translation (NAT) The following table describes the fields in this screen. Table 23 Network > NAT > Port Forwarding LABEL DESCRIPTION Default Server Setup Default Server In addition to the servers for specified services, NAT supports a default server. A default server receives packets from ports that are not specified in this screen.
Chapter 8 Network Address Translation (NAT) 8.3.2 The Port Forwarding Rule Edit Screen Use this screen to edit a port forwarding rule. Click the rule’s edit icon in the Port Forwarding screen to display the screen shown next. Figure 39 Network > NAT > Port Forwarding: Edit The following table describes the fields in this screen. Table 24 Network > NAT > Port Forwarding: Edit LABEL DESCRIPTION Rule Setup Active Click this check box to enable the rule.
Chapter 8 Network Address Translation (NAT) Table 24 Network > NAT > Port Forwarding: Edit (continued) LABEL DESCRIPTION Apply Click this to save your changes. Cancel Click this to restore your previously saved settings. 8.4 The Address Mapping Screen Note: The Address Mapping screen is available only when you select Full Feature in the NAT > General screen. Ordering your rules is important because the P-660H-T1v3s applies the rules in the order that you specify.
Chapter 8 Network Address Translation (NAT) The following table describes the fields in this screen. Table 25 Network > NAT > Address Mapping LABEL DESCRIPTION # This is the rule index number. Local Start IP This is the starting Inside Local IP Address (ILA). Local IP addresses are N/A for Server port mapping. Local End IP This is the end Inside Local IP Address (ILA). If the rule is for all local IP addresses, then this field displays 0.0.0.0 as the Local Start IP address and 255.255.255.
Chapter 8 Network Address Translation (NAT) 8.4.1 The Address Mapping Rule Edit Screen Use this screen to edit an address mapping rule. Click the rule’s edit icon in the Address Mapping screen to display the screen shown next. Figure 41 Network > NAT > Address Mapping: Edit The following table describes the fields in this screen. Table 26 Network > NAT > Address Mapping: Edit LABEL DESCRIPTION Type Choose the port mapping type from one of the following.
Chapter 8 Network Address Translation (NAT) Table 26 Network > NAT > Address Mapping: Edit (continued) LABEL DESCRIPTION Server Mapping Set Only available when Type is set to Server. Edit Details Click this link to go to the Port Forwarding screen to edit a port forwarding set that you have selected in the Server Mapping Set field. Back Click this to return to the previous screen without saving. Apply Click this to save your changes. Cancel Click this to restore your previously saved settings.
Chapter 8 Network Address Translation (NAT) 8.6 NAT Technical Reference This chapter contains more information regarding NAT. 8.6.1 NAT Definitions Inside/outside denotes where a host is located relative to the P-660H-T1v3s, for example, the computers of your subscribers are the inside hosts, while the web servers on the Internet are the outside hosts.
Chapter 8 Network Address Translation (NAT) outside world. If you do not define any servers (for Many-to-One and Many-toMany Overload mapping – see Table 29 on page 119), NAT offers the additional benefit of firewall protection. With no servers defined, your P-660H-T1v3s filters out all incoming inquiries, thus preventing intruders from probing your network. For more information on IP address translation, refer to RFC 1631, The IP Network Address Translator (NAT). 8.6.
Chapter 8 Network Address Translation (NAT) 8.6.4 NAT Application The following figure illustrates a possible NAT application, where three inside LANs (logical LANs using IP alias) behind the P-660H-T1v3s can communicate with three distinct WAN networks. Figure 44 NAT Application With IP Alias 8.6.5 NAT Mapping Types NAT supports five types of IP/port mapping. They are: • One to One: In One-to-One mode, the P-660H-T1v3s maps one local IP address to one global IP address.
Chapter 8 Network Address Translation (NAT) Port numbers do NOT change for One-to-One and Many-to-Many No Overload NAT mapping types. The following table summarizes these types. Table 29 NAT Mapping Types TYPE IP MAPPING One-to-One ILA1 IGA1 Many-to-One (SUA/PAT) ILA1 IGA1 ILA2 IGA1 … Many-to-Many Overload ILA1 IGA1 ILA2 IGA2 ILA3 IGA1 ILA4 IGA2 … Many-to-Many No Overload ILA1 IGA1 ILA2 IGA2 ILA3 IGA3 … Server Server 1 IP IGA1 Server 2 IP IGA1 Server 3 IP IGA1 8.6.
Chapter 8 Network Address Translation (NAT) port 8100 of traffic received on the WAN port (also IP address a.b.c.d) to port 80, but sends it to server B (IP address 192.168.1.34). Note: In this example, anyone wanting to access server A from the Internet must use port 8080. Anyone wanting to access server B from the Internet must use port 8100.
CHAPTER 9 Firewalls 9.1 Overview This chapter shows you how to enable the P-660H-T1v3s firewall. Use the firewall to protect your P-660H-T1v3s and network from attacks by hackers on the Internet and control access to it. By default the firewall: • allows traffic that originates from your LAN computers to go to all other networks. • blocks traffic that originates on other networks from going to the LAN. • blocks SYN and port scanner attacks.
Chapter 9 Firewalls DoS Denials of Service (DoS) attacks are aimed at devices and networks with a connection to the Internet. Their goal is not to steal information, but to disable a device or network so users no longer have access to network resources. The ZyXEL Device is pre-configured to automatically detect and thwart all known DoS attacks. DDoS A DDoS attack is one in which multiple compromised systems attack a single target, thereby causing denial of service for users of the targeted system.
Chapter 9 Firewalls 9.2 The Firewall Screen Use this screen to enable firewall and/or SPI. Click Advanced Setup > Firewall to display the following screen. Figure 46 Advanced Setup > Firewall The following table describes the labels in this screen. Table 30 Advanced > Firewall LABEL DESCRIPTION Firewall Use this field to enable or disable firewall on your P-660H-T1v3s. SPI Use this field to enable or disable SPI on your P-660H-T1v3s. SAVE Click this to save your changes.
Chapter 9 Firewalls 124 P-660H-T1v3s User’s Guide
CHAPTER 10 Filters 10.1 Overview This chapter introduces three types of filters supported by the P-660H-T1v3s. You can configure rules to restrict traffic by IP addresses, MAC addresses, application types and/or URLs. 10.1.1 What You Can Do in the Filter Screens • Use the URL Filter screen (Section 10.2 on page 126) to block access to web sites. • Use the Application Filter screen (Section 10.3 on page 127) to allow or deny traffic from certain types of applications.
Chapter 10 Filters 10.2 The URL Filter Screen Use this screen to block websites by URL. Click Security > Filter and select URL Filter in the Filter Type Selection field.. The screen appears as shown. Figure 47 Security > Filter > URL Filter The following table describes the labels in this screen. Table 31 Security > Filter > URL Filter LABEL DESCRIPTION URL Filter Editing Active Use this field to enable or disable the URL filter. URL Index Select the index number of the filter.
Chapter 10 Filters 10.3 The Application Filter Screen Use this screen to allow or deny traffic for certain types of applications. The application filter provides a convenient way to manage the use of various applications on the network. Click Security > Filter and select Application Filter in the Filter Type Selection field. The screen appears as shown. Figure 48 Security > Filter > Application Filter The following table describes the labels in this screen.
Chapter 10 Filters 10.4 The IP/MAC Filter Screen Use this screen to create and apply IP/MAC filters. Click Security > Filter and select IP/MAC Filter in the Filter Type Selection field. The screen appears as shown. Figure 49 Security> Filter / IP/MAC Filter The following table describes the labels in this screen. Table 33 Security > Filter > IP/MAC Filter LABEL DESCRIPTION IP/MAC Filter Set Editing IP/MAC Filter Set Index Select the index number of the filter set.
Chapter 10 Filters Table 33 Security > Filter > IP/MAC Filter (continued) LABEL DESCRIPTION IP/MAC Filter Rule Index Select the index number of the filter rule. Rule Type Select IP or MAC type to configure the rule. Use the IP Filter to block traffic by IP addresses. Use the MAC Filter to block traffic by MAC address. Active Use this field to enable or disable the rule. Source IP Address Enter the source IP address of the packets you wish to filter. This field is ignored if it is 0.0.0.0.
Chapter 10 Filters Table 33 Security > Filter > IP/MAC Filter (continued) 130 LABEL DESCRIPTION SAVE Click this to save your changes. DELETE Click this to remove the filter rule. CANCEL Click this to restore your previously saved settings.
CHAPTER 11 Static Route 11.1 Overview The P-660H-T1v3s usually uses the default gateway to route outbound traffic from computers on the LAN to the Internet. To have the P-660H-T1v3s send data to devices not reachable through the default gateway, use static routes. For example, the next figure shows a computer (A) connected to the P-660HT1v3s’s LAN interface. The P-660H-T1v3s routes most traffic from A to the Internet through the P-660H-T1v3s’s default gateway (R1).
Chapter 11 Static Route 11.2 The Static Route Screen Use this screen to view the static route rules. Click Advanced > Static Route to open the Static Route screen. Figure 51 Advanced > Static Route The following table describes the labels in this screen. Table 34 Advanced > Static Route LABEL DESCRIPTION Destination This parameter specifies the IP network address of the final destination. Routing is always based on network number.
Chapter 11 Static Route Table 34 Advanced > Static Route LABEL DESCRIPTION Apply Click this to save your changes. Cancel Click this to restore your previously saved settings. 11.2.1 Static Route Edit Use this screen to configure the required information for a static route. Select a static route index number and click Edit. The screen shown next appears. Figure 52 Advanced > Static Route: Edit The following table describes the labels in this screen.
Chapter 11 Static Route 134 P-660H-T1v3s User’s Guide
CHAPTER 12 802.1Q/1P 12.1 Overview This chapter describes how to configure the 802.1Q/1P settings. A Virtual Local Area Network (VLAN) allows a physical network to be partitioned into multiple logical networks. A VLAN group can be treated as an individual device. Each group can have its own rules about where and how to forward traffic. You can assign any ports on the P-660H-T1v3s to a VLAN group and configure the settings for the group.
Chapter 12 802.1Q/1P IEEE 802.1Q Tagged VLAN Tagged VLAN uses an explicit tag (VLAN ID) in the MAC header to identify the VLAN membership of a frame across bridges - they are not confined to the device on which they were created. The VLAN ID associates a frame with a specific VLAN and provides the information that devices need to process the frame across the network. PVC A virtual circuit is a logical point-to-point circuit between customer sites.
Chapter 12 802.1Q/1P 12.2 The Group Setting Screen Use this screen to activate 802.1Q/1P and display the VLAN groups. Click Advanced > 802.1Q/1P to display the following screen. Figure 54 Advanced > 802.1Q/1P > Group Setting The following table describes the labels in this screen. Table 36 Advanced > 802.1Q/1P > Group Setting LABEL DESCRIPTION 802.1Q/1P Active Select this check box to activate the 802.1P/1Q feature. Summary # This field displays the index number of the VLAN group.
Chapter 12 802.1Q/1P Table 36 Advanced > 802.1Q/1P > Group Setting (continued) LABEL DESCRIPTION Port Number These columns display the VLAN’s settings for each port. A tagged port is marked as T, an untagged port is marked as U and ports not participating in a VLAN are marked as “–“. Modify Click the Edit button to configure the the ports in the VLAN group. Click the Remove button to delete the VLAN group. Apply Click this to save your changes.
Chapter 12 802.1Q/1P The following table describes the labels in this screen. Table 37 Advanced > 802.1Q/1P > Group Setting > Edit LABEL DESCRIPTION Active Select this to make this VLAN group active. VLAN ID Assign a VLAN ID for the VLAN group. The valid VID range is between 1 and 4094. Ports This field displays the types of ports available to join the VLAN group. Control Select Fixed for the port to be a permanent member of the VLAN group.
Chapter 12 802.1Q/1P 12.3 The 802.1Q/1P Port Setting Screen Use this screen to configure the PVID and assign traffic priority for each port. Click Advanced > 802.1Q/1P > Port Setting to display the following screen. Figure 56 Advanced > 802.1Q/1P > Port Setting The following table describes the labels in this screen. Table 38 Advanced > 802.1Q/1P > Port Setting 140 LABEL DESCRIPTION Ports This field displays the types of ports available to join the VLAN group. 802.
CHAPTER 13 Quality of Service (QoS) 13.1 Overview Use the QoS screen to set up your P-660H-T1v3s to use QoS for traffic management. Quality of Service (QoS) refers to both a network’s ability to deliver data with minimum delay, and the networking methods used to control bandwidth. QoS allows the P-660H-T1v3s to group and prioritize application traffic and fine-tune network performance. Without QoS, all traffic data are equally likely to be dropped when the network is congested.
Chapter 13 Quality of Service (QoS) these two classes are assigned priority queue based on the internal QoS mapping table on the P-660H-T1v3s. Figure 57 QoS Example VoIP: Queue 6 DSL 50 Mbps Boss: Queue 5 IP=192.168.1.23 13.1.1 What You Can Do in the QoS Screens • Use the QoS screen (Section 13.2 on page 143) to configure QoS settings on the P-660H-T1v3s. • Use the QoS Settings Summary screen (Section 13.2.1 on page 145) to check the summary of QoS rules and actions you configured for the P-660H-T1v3s.
Chapter 13 Quality of Service (QoS) device, such as a backbone switch, can provide specific treatment or service based on the tag or marker. Finding Out More See Section 13.3 on page 146 for advanced technical information on QoS. 13.2 The QoS Screen Use this screen to enable or disable QoS and have the P-660H-T1v3s assign priority levels to traffic according to the port range, IEEE 802.1p priority level and/ or IP precedence. Click Advanced Setup > QoS to open the screen as shown next.
Chapter 13 Quality of Service (QoS) The following table describes the labels in this screen. Table 39 Advanced > QoS LABEL DESCRIPTION Quality of Service QoS Use this field to turn on QoS to improve your network performance. You can give priority to traffic that the P-660H-T1v3s forwards out through the WAN interface. Give high priority to voice and video to make them run more smoothly.
Chapter 13 Quality of Service (QoS) Table 39 Advanced > QoS LABEL DESCRIPTION 802.1p Select a priority level (0 to 7) from the drop-down list box. Action IPP/DS Field Select IPP/TOS to specify an IP precedence range and type of services. Select DSCP to specify a DiffServ Code Point (DSCP) range. IP Precedence Remarking Enter a range from 0 to 7 to re-assign IP precedence to matched traffic. Zero is the lowest priority and seven is the highest.
Chapter 13 Quality of Service (QoS) The following table describes the labels in this screen. Table 40 Advanced Setup > QoS > QoS Settings Summary LABEL DESCRIPTION Rules # This is the rule’s index number. Active This shows whether the rule is enabled or disabled. Physical Ports This is the physical port associated with the rule. Destination MAC and IP/Mask Port Ranges This is the port range for destination MAC address and IP address.
Chapter 13 Quality of Service (QoS) Table 41 IEEE 802.1p Priority Level and Traffic Type PRIORITY LEVEL TRAFFIC TYPE Level 5 Typically used for video that consumes high bandwidth and is sensitive to jitter. Level 4 Typically used for controlled load, latency-sensitive traffic such as SNA (Systems Network Architecture) transactions. Level 3 Typically used for “excellent effort” or better than best effort and would include important business traffic that can tolerate some delay.
Chapter 13 Quality of Service (QoS) Table 42 Internal Layer2 and Layer3 QoS Mapping LAYER 2 LAYER 3 PRIORITY QUEUE IEEE 802.
CHAPTER 14 Dynamic DNS Setup 14.1 Overview Dynamic DNS allows you to update your current dynamic IP address with one or many dynamic DNS services so that anyone can contact you (in NetMeeting, CUSeeMe, etc.). You can also access your FTP server or Web site on your own computer using a domain name (for instance myhost.dhs.org, where myhost is a name of your choice) that will never change instead of using an IP address that changes each time you reconnect.
Chapter 14 Dynamic DNS Setup 14.2 The Dynamic DNS Screen Use this screen to change your P-660H-T1v3s’s DDNS. Click Advanced > Dynamic DNS. The screen appears as shown. Figure 60 Advanced > Dynamic DNS The following table describes the fields in this screen. Table 43 Advanced > Dynamic DNS LABEL DESCRIPTION Dynamic DNS Setup Active Dynamic DNS Select this check box to use dynamic DNS. Service Provider This is the name of your Dynamic DNS service provider.
CHAPTER 15 Remote Management 15.1 Overview Remote management allows you to determine which services/protocols can access which P-660H-T1v3s interface (if any) from which computers. The following figure shows remote management of the P-660H-T1v3s coming in from the WAN. Figure 61 Remote Management From the WAN LAN WAN HTTP Telnet Note: When you configure remote management to allow management from the WAN, you still need to configure a firewall rule to allow access.
Chapter 15 Remote Management To disable remote management of a service, select Disable in the corresponding Access Status field. You may only have one remote management session running at a time. The P660H-T1v3s automatically disconnects a remote management session of lower priority when another remote management session of higher priority starts. The priorities for the different types of remote management sessions are as follows. 1 Telnet 2 HTTP 15.1.
Chapter 15 Remote Management • There is already another remote management session with an equal or higher priority running. You may only have one remote management session running at one time. • There is a firewall rule that blocks it. Remote Management and NAT When NAT is enabled: • Use the P-660H-T1v3s’s WAN IP address when configuring from the WAN. • Use the P-660H-T1v3s’s LAN IP address when configuring from the LAN.
Chapter 15 Remote Management The following table describes the labels in this screen. Table 44 Advanced > Remote Management > WWW LABEL DESCRIPTION Server Port You may change the server port number for a service, if needed. However, you must use the same port number in order to use that service for remote management. Server Access Select the interface(s) through which a computer may access the P660H-T1v3s using this service.
Chapter 15 Remote Management The following table describes the labels in this screen. Table 45 Advanced > Remote Management > Telnet LABEL DESCRIPTION Server Port You may change the server port number for a service if needed, however you must use the same port number in order to use that service for remote management. Server Access Select the interface(s) through which a computer may access the P660H-T1v3s using this service.
Chapter 15 Remote Management The following table describes the labels in this screen. Table 46 Advanced > Remote Management > FTP LABEL DESCRIPTION Port You may change the server port number for a service, if needed. However, you must use the same port number in order to use that service for remote management. Access Status Select the interface(s) through which a computer may access the P660H-T1v3s using this service.
Chapter 15 Remote Management The following table describes the labels in this screen. Table 47 Advanced > Remote MGMT > SNMP LABEL DESCRIPTION Server Port You may change the server port number for a service if needed, however you must use the same port number in order to use that service for remote management. Server Access Select the interface(s) through which a computer may access the P660H-T1v3s using this service.
Chapter 15 Remote Management The following table describes the labels in this screen. Table 48 Advanced > Remote Management > DNS LABEL DESCRIPTION Server Port The DNS service port number is 53 and cannot be changed here. Server Access Select the interface(s) through which a computer may send DNS queries to the P-660H-T1v3s. Secured Client IP Address A secured client is a “trusted” computer that is allowed to send DNS queries to the P-660H-T1v3s.
Chapter 15 Remote Management The following table describes the labels in this screen. Table 49 Advanced > Remote Management > ICMP LABEL DESCRIPTION ICMP Internet Control Message Protocol is a message control and errorreporting protocol between a host server and a gateway to the Internet. ICMP uses Internet Protocol (IP) datagrams, but the messages are processed by the TCP/IP software and directly apparent to the application user.
Chapter 15 Remote Management 160 P-660H-T1v3s User’s Guide
CHAPTER 16 Universal Plug-and-Play (UPnP) 16.1 Overview Universal Plug and Play (UPnP) is a distributed, open networking standard that uses TCP/IP for simple peer-to-peer network connectivity between devices. A UPnP device can dynamically join a network, obtain an IP address, convey its capabilities and learn about other devices on the network. In turn, a device can leave a network smoothly and automatically when it is no longer in use. 16.1.
Chapter 16 Universal Plug-and-Play (UPnP) • Assigning lease times to mappings Windows Messenger is an example of an application that supports NAT traversal and UPnP. See the NAT chapter for more information on NAT. Cautions with UPnP The automated nature of NAT traversal applications in establishing their own services and opening firewall ports may present network security issues. Network information and configuration may also be obtained and modified by users in some network environments.
Chapter 16 Universal Plug-and-Play (UPnP) 16.2 The UPnP Screen Use the following screen to configure the UPnP settings on your P-660H-T1v3s. Click Advanced > UPnP to display the screen shown next. See Section 16.1 on page 161 for more information. Figure 68 Advanced > UPnP > General The following table describes the fields in this screen. Table 50 Advanced > UPnP > General LABEL DESCRIPTION Active the Universal Plug and Play (UPnP) Feature Select this check box to activate UPnP.
Chapter 16 Universal Plug-and-Play (UPnP) 16.2.1 Installing UPnP in Windows This section shows you how to configure or install UPnP in Windows. 16.2.1.1 Windows 7 Windows 7 already has UPnP installed. To enable it: 164 1 Click Start > Control Panel and select Network and Internet. 2 Click Network and Sharing Center. 3 In the Network and Sharing window, set Network Discovery to On.
Chapter 16 Universal Plug-and-Play (UPnP) 16.2.1.2 Windows XP To install the UPnP in Windows XP: 1 Click Start and Control Panel. 2 Double-click Network Connections. 3 In the Network Connections window, click Advanced in the main menu and select Optional Networking Components …. Network Connections 4 The Windows Optional Networking Components Wizard window displays. Select Networking Service in the Components selection box and click Details.
Chapter 16 Universal Plug-and-Play (UPnP) 5 In the Networking Services window, select the Universal Plug and Play check box. Networking Services 6 Click OK to go back to the Windows Optional Networking Component Wizard window and click Next. 16.2.2 Using UPnP in Windows XP This section shows you how to use the UPnP feature in Windows XP. You must already have UPnP installed in Windows XP and UPnP activated on the P-660HT1v3s. Make sure the computer is connected to a LAN port of the P-660H-T1v3s.
Chapter 16 Universal Plug-and-Play (UPnP) 16.2.2.1 Auto-discover Your UPnP-enabled Network Device 1 2 Click Start and Control Panel. Double-click Network Connections. An icon displays under Internet Gateway. Right-click the icon and select Properties. Network Connections 3 In the Internet Connection Properties window, click Settings to see the port mappings there were automatically created.
Chapter 16 Universal Plug-and-Play (UPnP) 4 You may edit or delete the port mappings or click Add to manually add port mappings. Internet Connection Properties: Advanced Settings Internet Connection Properties: Advanced Settings: Add 5 When the UPnP-enabled device is disconnected from your computer, all port mappings will be deleted automatically. 6 Select Show icon in notification area when connected option and click OK. An icon displays in the system tray.
Chapter 16 Universal Plug-and-Play (UPnP) 7 Double-click on the icon to display your current Internet connection status. Internet Connection Status 16.2.2.2 Web Configurator Easy Access With UPnP, you can access the web-based configurator on the P-660H-T1v3s without finding out the IP address of the P-660H-T1v3s first. This comes helpful if you do not know the IP address of the P-660H-T1v3s. Follow the steps below to access the web configurator. 1 Click Start and then Control Panel.
Chapter 16 Universal Plug-and-Play (UPnP) 5 Right-click on the icon for your P-660H-T1v3s and select Invoke. The web configurator login screen displays. Network Connections: My Network Places 6 Right-click on the icon for your P-660H-T1v3s and select Properties. A properties window displays with basic information about the P-660H-T1v3s.
CHAPTER 17 System Settings 17.1 Overview This chapter shows you how to configure system related settings, such as system time, password, name, the domain name and the inactivity timeout interval. 17.1.1 What You Can Do in the System Settings Screens • Use the General screen (Section 17.2 on page 172) to configure system settings. • Use the Time Setting screen (Section 17.3 on page 173) to set the system time. 17.1.
Chapter 17 System Settings 17.2 The General Screen Use this screen to configure system settings such as the system and domain name, inactivity timeout interval and system password. The System Name is for identification purposes. However, because some ISPs check this name you should enter your computer's "Computer Name". To find your computer in Windows XP, right-click over My Computer and select Properties. Next, click the Computer Name tab.
Chapter 17 System Settings Table 51 Maintenance > System > General LABEL DESCRIPTION Apply Click this to save your changes. Cancel Click this to restore your previously saved settings. 17.3 The Time and Date Screen Use this screen to configure the P-660H-T1v3s’s time based on your local time zone. To change your P-660H-T1v3s’s time and date, click Maintenance > System > Time and Date. The screen appears as shown.
Chapter 17 System Settings The following table describes the fields in this screen. Table 52 Maintenance > System > Time and Date LABEL DESCRIPTION Current Time Current Time This field displays the time of your P-660H-T1v3s. Each time you reload this page, the P-660H-T1v3s synchronizes the time with the time server. Current Date This field displays the date of your P-660H-T1v3s. Each time you reload this page, the P-660H-T1v3s synchronizes the date with the time server.
Chapter 17 System Settings Table 52 Maintenance > System > Time and Date (continued) LABEL DESCRIPTION Daylight Savings Daylight saving is a period from late spring to early fall when many countries set their clocks ahead of normal local time by one hour to give more daytime light in the evening. Select this option if you use Daylight Saving Time. Start Date Configure the day and time when Daylight Saving Time starts if you selected Enable Daylight Saving. The o'clock field uses the 24 hour format.
Chapter 17 System Settings 176 P-660H-T1v3s User’s Guide
CHAPTER 18 Logs 18.1 Overview This chapter contains information about configuring general log settings and viewing the P-660H-T1v3s’s logs. The web configurator allows you to choose which categories of events and/or alerts to have the P-660H-T1v3s log and then display the logs or have the P-660HT1v3s send them to an administrator (as e-mail) or to a syslog server. 18.1.1 What You Can Do in the Log Screens Use the System Log screen (Section 18.
Chapter 18 Logs 18.2 The System Log Screen Use the System Log screen to see the logs for the categories that you select. Click Maintenance > Logs to open this screen. Figure 71 Maintenance > Logs > View Log The following table describes the fields in this screen. Table 53 Maintenance > Logs > View Log 178 LABEL DESCRIPTION Log Type Select the type of log to display in the system log window.
CHAPTER 19 Tools 19.1 Overview This chapter explains how to upload new firmware, manage configuration files and restart your P-660H-T1v3s. Use the instructions in this chapter to change the device’s configuration file or upgrade its firmware. After you configure your device, you can backup the configuration file to a computer. That way if you later misconfigure the device, you can upload the backed up configuration file to return to your previous settings.
Chapter 19 Tools 19.1.2 What You Need To Know About Tools Filename Conventions The configuration file (often called the romfile or rom-0) contains the factory default settings in the menus such as password, DHCP Setup, TCP/IP Setup, etc. It arrives from ZyXEL with a “rom” filename extension. Once you have customized the P-660H-T1v3s's settings, they can be saved back to your computer under a filename of your choosing.
Chapter 19 Tools FTP Restrictions FTP will not work when: 1 The firewall is active (turn the firewall off or create a firewall rule to allow access from the WAN). 2 You have disabled the FTP service in the Remote Management screen. 3 The IP you entered in the Secured Client IP field does not match the client IP. If it does not match, the device will disallow the FTP session. 19.1.
Chapter 19 Tools Restore Using FTP Session Example Figure 72 Restore Using FTP Session Example ftp> put config.rom rom-0 200 Port command okay 150 Opening data connection for STOR rom-0 226 File received OK 221 Goodbye for writing flash ftp: 16384 bytes sent in 0.06Seconds 273.07Kbytes/sec. ftp>quit Refer to Section 19.1.2 on page 180 to read about configurations that disallow TFTP and FTP over WAN.
Chapter 19 Tools FTP Session Example of Firmware File Upload Figure 73 FTP Session Example of Firmware File Upload 331 Enter PASS command Password: 230 Logged in ftp> bin 200 Type I OK ftp> put firmware.bin ras 200 Port command okay 150 Opening data connection for STOR ras 226 File received OK ftp: 1103936 bytes sent in 1.10Seconds 297.89Kbytes/sec. ftp> quit More commands (found in GUI-based FTP clients) are listed in this chapter. Refer to Section 19.1.
Chapter 19 Tools UNIX, use “get” to transfer from the device to the computer, “put” the other way around, and “binary” to set binary transfer mode. TFTP Upload Command Example The following is an example TFTP command: tftp [-i] host put firmware.bin ras Where “i” specifies binary image transfer mode (use this mode when transferring binary files), “host” is the device’s IP address, “put” transfers the file source on the computer (firmware.
Chapter 19 Tools FTP Command Configuration Backup Example This figure gives an example of using FTP commands from the DOS command prompt to save your device’s configuration onto your computer. Figure 74 FTP Session Example 331 Enter PASS command Password: 230 Logged in ftp> bin 200 Type I OK ftp> get rom-0 zyxel.rom 200 Port command okay 150 Opening data connection for STOR ras 226 File received OK ftp: 16384 bytes sent in 1.10Seconds 297.89Kbytes/sec.
Chapter 19 Tools 1 Use telnet from your computer to connect to the P-660H-T1v3s and log in. Because TFTP does not have any security checks, the P-660H-T1v3s records the IP address of the telnet client and accepts TFTP requests only from this address. 2 Enter command “sys stdio 0” to disable the management idle timeout, so the TFTP transfer will not be interrupted. Enter command “sys stdio 5” to restore the five-minute management idle timeout (default) when the file transfer is complete.
Chapter 19 Tools Table 56 General Commands for GUI-based TFTP Clients (continued) COMMAN D DESCRIPTION Binary Transfer the file in binary mode. Abort Stop transfer of the file. Refer to Section 19.1.2 on page 180 to read about configurations that disallow TFTP and FTP over WAN. 19.2 The Firmware Screen Click Maintenance > Tools to open the Firmware screen. Follow the instructions in this screen to upload firmware to your P-660H-T1v3s.
Chapter 19 Tools Table 57 Maintenance > Tools > Firmware (continued) LABEL DESCRIPTION Browse... Click this to find the .bin file you want to upload. Remember that you must decompress compressed (.zip) files before you can upload them. Upload Click this to begin the upload process. This process may take up to two minutes. After you see the Firmware Upload in Progress screen, wait two minutes before logging into the P-660H-T1v3s again.
Chapter 19 Tools If the upload was not successful, the following screen will appear. Click Return to go back to the Firmware screen. Figure 78 Error Message 19.3 The Configuration Screen See Section 19.1.4 on page 181 for transferring configuration files using FTP/TFTP commands. Click Maintenance > Tools > Configuration. Information related to factory defaults, backup configuration, and restoring configuration appears in this screen, as shown next.
Chapter 19 Tools Backup Configuration Backup Configuration allows you to back up (save) the P-660H-T1v3s’s current configuration to a file on your computer. Once your P-660H-T1v3s is configured and functioning properly, it is highly recommended that you back up your configuration file before making configuration changes. The backup configuration file will be useful in case you need to return to your previous settings. Click Backup to save the P-660H-T1v3s’s current configuration to your computer.
Chapter 19 Tools The P-660H-T1v3s automatically restarts in this time causing a temporary network disconnect. In some operating systems, you may see the following icon on your desktop. Figure 81 Network Temporarily Disconnected If you uploaded the default configuration file you may need to change the IP address of your computer to be in the same subnet as that of the default device IP address (192.168.1.1). See Appendix A on page 211 for details on how to set up your computer’s IP address.
Chapter 19 Tools Reset to Factory Defaults Click the Reset button to clear all user-entered configuration information and return the P-660H-T1v3s to its factory defaults. The following warning screen appears. Figure 83 Reset Warning Message Figure 84 Reset In Process Message You can also press the RESET button on the rear panel to reset the factory defaults of your P-660H-T1v3s. Refer to Section 1.5 on page 24 for more information on the RESET button. 19.
CHAPTER 20 Diagnostic 20.1 Overview These read-only screens display information to help you identify problems with the P-660H-T1v3s. 20.1.1 What You Can Do in the Diagnostic Screens • Use the General Diagnostic screen (Section 20.2 on page 193) to ping an IP address. • Use the DSL Line Diagnostic screen (Section 20.3 on page 194) to view the DSL line statistics and reset the ADSL line. 20.2 The General Diagnostic Screen Use this screen to ping an IP address.
Chapter 20 Diagnostic The following table describes the fields in this screen. Table 59 Maintenance > Diagnostic > General LABEL DESCRIPTION TCP/IP Address Type the IP address of a computer that you want to ping in order to test a connection. Ping Click this to ping the IP address that you entered. 20.3 The DSL Line Diagnostic Screen Use this screen to view the DSL line statistics and reset the ADSL line. Click Maintenance > Diagnostic > DSL Line to open the screen shown next.
Chapter 20 Diagnostic The following table describes the fields in this screen. Table 60 Maintenance > Diagnostic > DSL Line LABEL DESCRIPTION ATM Status Click this to view your DSL connection’s Asynchronous Transfer Mode (ATM) statistics. ATM is a networking technology that provides highspeed data transfer. ATM uses fixed-size packets of information called cells. With ATM, a high QoS (Quality of Service) can be guaranteed. The (Segmentation and Reassembly) SAR driver translates packets into ATM cells.
Chapter 20 Diagnostic Table 60 Maintenance > Diagnostic > DSL Line (continued) LABEL DESCRIPTION DSL Line Status Click this to view statistics about the DSL connections. noise margin downstream is the signal to noise ratio for the downstream part of the connection (coming into the P-660H-T1v3s from the ISP). It is measured in decibels. The higher the number the more signal and less noise there is.
CHAPTER 21 Troubleshooting This chapter offers some suggestions to solve problems you might encounter. The potential problems are divided into the following categories. • Power, Hardware Connections, and LEDs • P-660H-T1v3s Access and Login • • Internet Access 21.1 Power, Hardware Connections, and LEDs The P-660H-T1v3s does not turn on. None of the LEDs turn on. 1 Make sure the P-660H-T1v3s is turned on. 2 Make sure you are using the power adaptor or cord included with the P-660HT1v3s.
Chapter 21 Troubleshooting 2 Check the hardware connections. 3 Inspect your cables for damage. Contact the vendor to replace any damaged cables. 4 Turn the P-660H-T1v3s off and on. 5 If the problem continues, contact the vendor. 21.2 P-660H-T1v3s Access and Login I forgot the IP address for the P-660H-T1v3s. 1 The default IP address is 192.168.1.1.
Chapter 21 Troubleshooting • If you changed the IP address (Section 7.2 on page 91), use the new IP address. • If you changed the IP address and have forgotten it, see the troubleshooting suggestions for I forgot the IP address for the P-660H-T1v3s. 2 Check the hardware connections, and make sure the LEDs are behaving as expected. See the Quick Start Guide. 3 Make sure your Internet browser does not block pop-up windows and has JavaScripts and Java enabled. See Appendix B on page 235.
Chapter 21 Troubleshooting 4 If this does not work, you have to reset the device to its factory defaults. See Section 21.1 on page 197. I cannot Telnet to the P-660H-T1v3s. See the troubleshooting suggestions for I cannot see or access the Login screen in the web configurator. Ignore the suggestions about your browser. I cannot use FTP to upload / download the configuration file. / I cannot use FTP to upload new firmware.
Chapter 21 Troubleshooting 2 Turn the P-660H-T1v3s off and on. 3 If the problem continues, contact your ISP. The Internet connection is slow or intermittent. 1 There might be a lot of traffic on the network. Look at the LEDs, and check Section 1.4 on page 23. If the P-660H-T1v3s is sending or receiving a lot of information, try closing some programs that use the Internet, especially peer-to-peer applications. 2 Turn the P-660H-T1v3s off and on.
Chapter 21 Troubleshooting 202 P-660H-T1v3s User’s Guide
CHAPTER 22 Product Specifications 22.1 Hardware Specifications The following table summarizes the P-660H-T1v3s’s hardware features. Table 61 Hardware Specifications Dimensions 180W x 127D x 37H Weight 280 g Power Output 9VDC@0.
Chapter 22 Product Specifications 22.2 Firmware Specifications The following table summarizes the P-660H-T1v3s’s firmware features. Table 62 Firmware Specifications Default IP Address 192.168.1.1 Default Subnet Mask 255.255.255.0 (24 bits) Default Admin Password 1234 Static DHCP Addresses 10 Static Routes 16 Device Management Use the web configurator to easily configure the rich range of features on the P-660H-T1v3s.
Chapter 22 Product Specifications Table 62 Firmware Specifications (continued) Firewall Your device has a stateful inspection firewall with DoS (Denial of Service) protection. By default, when the firewall is activated, all incoming traffic from the WAN to the LAN is blocked unless it is initiated from the LAN. The firewall supports TCP/UDP inspection, DoS detection and prevention, real time alerts, reports and logs.
Chapter 22 Product Specifications Table 62 Firmware Specifications (continued) ADSL Standards ANSI T1.413, Issue 2; G.dmt (G.992.1) ADSL2 G.dmt.bis (G.992.3) ADSL2 G.lite.bis (G.992.4) ADSL2+ (G.992.
Chapter 22 Product Specifications Table 62 Firmware Specifications (continued) Other Protocol Support PPP (Point-to-Point Protocol) link layer protocol IP routing DNS Proxy Transparent bridging for unsupported network layer protocols RIP I/RIP II ICMP Dynamic DNS (www.dyndns.org) DHCP client/server/relay ATM QoS IP Multicasting IGMP v1, v2 IGMP Proxy 802.
Chapter 22 Product Specifications Table 63 Standards Supported (continued) STANDARD DESCRIPTION RFC 1483 Multiprotocol Encapsulation over ATM Adaptation Layer 5 RFC 1631 IP Network Address Translator (NAT) RFC 1661 The Point-to-Point Protocol (PPP) RFC 1723 RIP-2 (Routing Information Protocol) RFC 2236 Internet Group Management Protocol, Version 2.
P ART III Appendices and Index Note: The appendices provide general information. Some details may not apply to your P-660H-T1v3s.
APPENDIX A Setting up Your Computer’s IP Address All computers must have a 10M or 100M Ethernet adapter card and TCP/IP installed. Windows 95/98/Me/NT/2000/XP/Vista, Macintosh OS 7 and later operating systems and all versions of UNIX/LINUX include the software components you need to install and use TCP/IP on your computer. Windows 3.1 requires the purchase of a third-party TCP/IP application package.
Appendix A Setting up Your Computer’s IP Address Windows 95/98/Me Click Start, Settings, Control Panel and double-click the Network icon to open the Network window. Figure 88 WIndows 95/98/Me: Network: Configuration Installing Components The Network window Configuration tab displays a list of installed components. You need a network adapter, the TCP/IP protocol and Client for Microsoft Networks. If you need the adapter: 1 In the Network window, click Add. 2 Select Adapter and then click Add.
Appendix A Setting up Your Computer’s IP Address 3 Select Microsoft from the list of manufacturers. 4 Select TCP/IP from the list of network protocols and then click OK. If you need Client for Microsoft Networks: 1 Click Add. 2 Select Client and then click Add. 3 Select Microsoft from the list of manufacturers. 4 Select Client for Microsoft Networks from the list of network clients and then click OK. 5 Restart your computer so the changes you made take effect.
Appendix A Setting up Your Computer’s IP Address 3 Click the DNS Configuration tab. • If you do not know your DNS information, select Disable DNS. • If you know your DNS information, select Enable DNS and type the information in the fields below (you may not need to fill them all in). Figure 90 Windows 95/98/Me: TCP/IP Properties: DNS Configuration 4 Click the Gateway tab. • If you do not know your gateway’s IP address, remove previously installed gateways.
Appendix A Setting up Your Computer’s IP Address Windows 2000/NT/XP The following example figures use the default Windows XP GUI theme. 1 Click start (Start in Windows 2000/NT), Settings, Control Panel. Figure 91 Windows XP: Start Menu 2 In the Control Panel, double-click Network Connections (Network and Dialup Connections in Windows 2000/NT).
Appendix A Setting up Your Computer’s IP Address 3 Right-click Local Area Connection and then click Properties. Figure 93 Windows XP: Control Panel: Network Connections: Properties 4 Select Internet Protocol (TCP/IP) (under the General tab in Win XP) and then click Properties. Figure 94 Windows XP: Local Area Connection Properties 5 216 The Internet Protocol TCP/IP Properties window opens (the General tab in Windows XP).
Appendix A Setting up Your Computer’s IP Address • If you have a dynamic IP address click Obtain an IP address automatically. • If you have a static IP address click Use the following IP Address and fill in the IP address, Subnet mask, and Default gateway fields. • Click Advanced. Figure 95 Windows XP: Internet Protocol (TCP/IP) Properties 6 If you do not know your gateway's IP address, remove any previously installed gateways in the IP Settings tab and click OK.
Appendix A Setting up Your Computer’s IP Address • Click OK when finished. Figure 96 Windows XP: Advanced TCP/IP Properties 7 In the Internet Protocol TCP/IP Properties window (the General tab in Windows XP): • Click Obtain DNS server address automatically if you do not know your DNS server IP address(es). • If you know your DNS server IP address(es), click Use the following DNS server addresses, and type them in the Preferred DNS server and Alternate DNS server fields.
Appendix A Setting up Your Computer’s IP Address If you have previously configured DNS servers, click Advanced and then the DNS tab to order them. Figure 97 Windows XP: Internet Protocol (TCP/IP) Properties 8 Click OK to close the Internet Protocol (TCP/IP) Properties window. 9 Click Close (OK in Windows 2000/NT) to close the Local Area Connection Properties window. 10 Close the Network Connections window (Network and Dial-up Connections in Windows 2000/NT).
Appendix A Setting up Your Computer’s IP Address 1 Click the Start icon, Control Panel. Figure 98 Windows Vista: Start Menu 2 In the Control Panel, double-click Network and Internet. Figure 99 Windows Vista: Control Panel 3 Click Network and Sharing Center.
Appendix A Setting up Your Computer’s IP Address 4 Click Manage network connections. Figure 101 Windows Vista: Network and Sharing Center 5 Right-click Local Area Connection and then click Properties. Note: During this procedure, click Continue whenever Windows displays a screen saying that it needs your permission to continue.
Appendix A Setting up Your Computer’s IP Address 6 Select Internet Protocol Version 4 (TCP/IPv4) and click Properties. Figure 103 Windows Vista: Local Area Connection Properties 7 The Internet Protocol Version 4 (TCP/IPv4) Properties window opens (the General tab). • If you have a dynamic IP address click Obtain an IP address automatically. • If you have a static IP address click Use the following IP address and fill in the IP address, Subnet mask, and Default gateway fields.
Appendix A Setting up Your Computer’s IP Address • Click Advanced. Figure 104 Windows Vista: Internet Protocol Version 4 (TCP/IPv4) Properties 8 If you do not know your gateway's IP address, remove any previously installed gateways in the IP Settings tab and click OK. Do one or more of the following if you want to configure additional IP addresses: • In the IP Settings tab, in IP addresses, click Add.
Appendix A Setting up Your Computer’s IP Address • Click OK when finished. Figure 105 Windows Vista: Advanced TCP/IP Properties 9 In the Internet Protocol Version 4 (TCP/IPv4) Properties window, (the General tab): • Click Obtain DNS server address automatically if you do not know your DNS server IP address(es). • If you know your DNS server IP address(es), click Use the following DNS server addresses, and type them in the Preferred DNS server and Alternate DNS server fields.
Appendix A Setting up Your Computer’s IP Address If you have previously configured DNS servers, click Advanced and then the DNS tab to order them. Figure 106 Windows Vista: Internet Protocol Version 4 (TCP/IPv4) Properties 10 Click OK to close the Internet Protocol Version 4 (TCP/IPv4) Properties window. 11 Click Close to close the Local Area Connection Properties window. 12 Close the Network Connections window. 13 Turn on your P-660H-T1v3s and restart your computer (if prompted).
Appendix A Setting up Your Computer’s IP Address Macintosh OS 8/9 1 Click the Apple menu, Control Panel and double-click TCP/IP to open the TCP/ IP Control Panel.
Appendix A Setting up Your Computer’s IP Address 2 Select Ethernet built-in from the Connect via list. Figure 108 Macintosh OS 8/9: TCP/IP 3 For dynamically assigned settings, select Using DHCP Server from the Configure: list. 4 For statically assigned settings, do the following: • From the Configure box, select Manually. • Type your IP address in the IP Address box. • Type your subnet mask in the Subnet mask box. • Type the IP address of your P-660H-T1v3s in the Router address box.
Appendix A Setting up Your Computer’s IP Address Macintosh OS X 1 Click the Apple menu, and click System Preferences to open the System Preferences window. Figure 109 Macintosh OS X: Apple Menu 2 Click Network in the icon bar. • Select Automatic from the Location list. • Select Built-in Ethernet from the Show list. • Click the TCP/IP tab. 3 For dynamically assigned settings, select Using DHCP from the Configure list.
Appendix A Setting up Your Computer’s IP Address • From the Configure box, select Manually. • Type your IP address in the IP Address box. • Type your subnet mask in the Subnet mask box. • Type the IP address of your P-660H-T1v3s in the Router address box. 5 Click Apply Now and close the window. 6 Turn on your P-660H-T1v3s and restart your computer (if prompted). Verifying Settings Check your TCP/IP properties in the Network window.
Appendix A Setting up Your Computer’s IP Address 2 Double-click on the profile of the network card you wish to configure. The Ethernet Device General screen displays as shown. Figure 112 Red Hat 9.0: KDE: Ethernet Device: General • If you have a dynamic IP address, click Automatically obtain IP address settings with and select dhcp from the drop down list. • If you have a static IP address, click Statically set IP Addresses and fill in the Address, Subnet mask, and Default Gateway Address fields.
Appendix A Setting up Your Computer’s IP Address 6 Click the Activate button to apply the changes. The following screen displays. Click Yes to save the changes in all screens. Figure 114 Red Hat 9.0: KDE: Network Configuration: Activate 7 After the network card restart process is complete, make sure the Status is Active in the Network Configuration screen. Using Configuration Files Follow the steps below to edit the network configuration files and set your computer IP address.
Appendix A Setting up Your Computer’s IP Address • If you have a static IP address, enter static in the BOOTPROTO= field. Type IPADDR= followed by the IP address (in dotted decimal notation) and type NETMASK= followed by the subnet mask. The following example shows an example where the static IP address is 192.168.1.10 and the subnet mask is 255.255.255.0. Figure 116 Red Hat 9.0: Static IP Address Setting in ifconfig-eth0 DEVICE=eth0 ONBOOT=yes BOOTPROTO=static IPADDR=192.168.1.10 NETMASK=255.255.255.
Appendix A Setting up Your Computer’s IP Address Verifying Settings Enter ifconfig in a terminal screen to check your TCP/IP properties. Figure 119 Red Hat 9.0: Checking TCP/IP Properties [root@localhost]# ifconfig eth0 Link encap:Ethernet HWaddr 00:50:BA:72:5B:44 inet addr:172.23.19.129 Bcast:172.23.19.255 Mask:255.255.255.
Appendix A Setting up Your Computer’s IP Address 234 P-660H-T1v3s User’s Guide
APPENDIX B Pop-up Windows, JavaScripts and Java Permissions In order to use the web configurator you need to allow: • Web browser pop-up windows from your device. • JavaScripts (enabled by default). • Java permissions (enabled by default). Note: Internet Explorer 6 screens are used here. Screens for other Internet Explorer versions may vary. Internet Explorer Pop-up Blockers You may have to disable pop-up blocking to log into your device.
Appendix B Pop-up Windows, JavaScripts and Java Permissions 1 In Internet Explorer, select Tools, Internet Options, Privacy. 2 Clear the Block pop-ups check box in the Pop-up Blocker section of the screen. This disables any web pop-up blockers you may have enabled. Figure 121 Internet Options: Privacy 3 Click Apply to save this setting. Enable Pop-up Blockers with Exceptions Alternatively, if you only want to allow pop-up windows from your device, see the following steps.
Appendix B Pop-up Windows, JavaScripts and Java Permissions 2 Select Settings…to open the Pop-up Blocker Settings screen. Figure 122 Internet Options: Privacy 3 Type the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”. For example, http://192.168.167.1.
Appendix B Pop-up Windows, JavaScripts and Java Permissions 4 Click Add to move the IP address to the list of Allowed sites. Figure 123 Pop-up Blocker Settings 5 Click Close to return to the Privacy screen. 6 Click Apply to save this setting. JavaScripts If pages of the web configurator do not display properly in Internet Explorer, check that JavaScripts are allowed.
Appendix B Pop-up Windows, JavaScripts and Java Permissions 1 In Internet Explorer, click Tools, Internet Options and then the Security tab. Figure 124 Internet Options: Security 2 Click the Custom Level... button. 3 Scroll down to Scripting. 4 Under Active scripting make sure that Enable is selected (the default). 5 Under Scripting of Java applets make sure that Enable is selected (the default).
Appendix B Pop-up Windows, JavaScripts and Java Permissions 6 Click OK to close the window. Figure 125 Security Settings - Java Scripting Java Permissions 240 1 From Internet Explorer, click Tools, Internet Options and then the Security tab. 2 Click the Custom Level... button. 3 Scroll down to Microsoft VM. 4 Under Java permissions make sure that a safety level is selected.
Appendix B Pop-up Windows, JavaScripts and Java Permissions 5 Click OK to close the window. Figure 126 Security Settings - Java JAVA (Sun) 1 From Internet Explorer, click Tools, Internet Options and then the Advanced tab. 2 Make sure that Use Java 2 for
Appendix B Pop-up Windows, JavaScripts and Java Permissions 3 Click OK to close the window. Figure 127 Java (Sun) Mozilla Firefox Mozilla Firefox 2.0 screens are used here. Screens for other versions may vary. You can enable Java, Javascripts and pop-ups in one screen. Click Tools, then click Options in the screen that appears.
Appendix B Pop-up Windows, JavaScripts and Java Permissions Click Content.to show the screen below. Select the check boxes as shown in the following screen.
Appendix B Pop-up Windows, JavaScripts and Java Permissions 244 P-660H-T1v3s User’s Guide
APPENDIX C IP Addresses and Subnetting This appendix introduces IP addresses and subnet masks. IP addresses identify individual devices on a network. Every networking device (including computers, servers, routers, printers, etc.) needs an IP address to communicate across the network. These networking devices are also known as hosts. Subnet masks determine the maximum number of possible hosts on a network. You can also use subnet masks to divide one network into multiple sub-networks.
Appendix C IP Addresses and Subnetting The following figure shows an example IP address in which the first three octets (192.168.1) are the network number, and the fourth octet (16) is the host ID. Figure 130 Network Number and Host ID How much of the IP address is the network number and how much is the host ID varies according to the subnet mask.
Appendix C IP Addresses and Subnetting By convention, subnet masks always consist of a continuous sequence of ones beginning from the leftmost bit of the mask, followed by a continuous sequence of zeros, for a total number of 32 bits. Subnet masks can be referred to by the size of the network number part (the bits with a “1” value). For example, an “8-bit mask” means that the first 8 bits of the mask are ones and the remaining 24 bits are zeroes.
Appendix C IP Addresses and Subnetting Notation Since the mask is always a continuous number of ones beginning from the left, followed by a continuous number of zeros for the remainder of the 32 bit mask, you can simply specify the number of ones instead of writing the value of each octet. This is usually specified by writing a “/” followed by the number of bits in the mask after the address. For example, 192.1.1.0 /25 is equivalent to saying 192.1.1.0 with subnet mask 255.255.255.128.
Appendix C IP Addresses and Subnetting The following figure shows the company network before subnetting. Figure 131 Subnetting Example: Before Subnetting You can “borrow” one of the host ID bits to divide the network 192.168.1.0 into two separate sub-networks. The subnet mask is now 25 bits (255.255.255.128 or /25). The “borrowed” host ID bit can have a value of either 0 or 1, allowing two subnets; 192.168.1.0 /25 and 192.168.1.128 /25. The following figure shows the company network after subnetting.
Appendix C IP Addresses and Subnetting In a 25-bit subnet the host ID has 7 bits, so each sub-network has a maximum of 27 – 2 or 126 possible hosts (a host ID of all zeroes is the subnet’s address itself, all ones is the subnet’s broadcast address). 192.168.1.0 with mask 255.255.255.128 is subnet A itself, and 192.168.1.127 with mask 255.255.255.128 is its broadcast address. Therefore, the lowest IP address that can be assigned to an actual host for subnet A is 192.168.1.1 and the highest is 192.168.1.126.
Appendix C IP Addresses and Subnetting Table 70 Subnet 3 IP/SUBNET MASK NETWORK NUMBER LAST OCTET BIT VALUE IP Address 192.168.1. 128 IP Address (Binary) 11000000.10101000.00000001. 10000000 Subnet Mask (Binary) 11111111.11111111.11111111. 11000000 Subnet Address: 192.168.1.128 Lowest Host ID: 192.168.1.129 Broadcast Address: 192.168.1.191 Highest Host ID: 192.168.1.190 Table 71 Subnet 4 IP/SUBNET MASK NETWORK NUMBER LAST OCTET BIT VALUE IP Address 192.168.1.
Appendix C IP Addresses and Subnetting Subnet Planning The following table is a summary for subnet planning on a network with a 24-bit network number. Table 73 24-bit Network Number Subnet Planning NO. “BORROWED” HOST BITS SUBNET MASK NO. SUBNETS NO. HOSTS PER SUBNET 1 255.255.255.128 (/25) 2 126 2 255.255.255.192 (/26) 4 62 3 255.255.255.224 (/27) 8 30 4 255.255.255.240 (/28) 16 14 5 255.255.255.248 (/29) 32 6 6 255.255.255.252 (/30) 64 2 7 255.255.255.
Appendix C IP Addresses and Subnetting addresses, follow their instructions in selecting the IP addresses and the subnet mask. If the ISP did not explicitly give you an IP network number, then most likely you have a single user account and the ISP will assign you a dynamic IP address when the connection is established. If this is the case, it is recommended that you select a network number from 192.168.0.0 to 192.168.255.0.
Appendix C IP Addresses and Subnetting 254 P-660H-T1v3s User’s Guide
APPENDIX D Services The following table lists some commonly-used services and their associated protocols and port numbers. • Name: This is a short, descriptive name for the service. You can use this one or create a different one, if you like. • Protocol: This is the type of IP protocol used by the service. If this is TCP/ UDP, then the service uses the same port number with TCP and UDP. If this is USER-DEFINED, the Port(s) is the IP protocol number, not the port number.
Appendix D Services Table 75 Examples of Services 256 NAME PROTOCOL PORT(S) DESCRIPTION AH (IPSEC_TUNNEL) User-Defined 51 The IPSEC AH (Authentication Header) tunneling protocol uses this service. AIM TCP 5190 AOL’s Internet Messenger service. AUTH TCP 113 Authentication protocol used by some servers. BGP TCP 179 Border Gateway Protocol. BOOTP_CLIENT UDP 68 DHCP Client. BOOTP_SERVER UDP 67 DHCP Server.
Appendix D Services Table 75 Examples of Services (continued) NAME PROTOCOL PORT(S) DESCRIPTION MSN Messenger TCP 1863 Microsoft Networks’ messenger service uses this protocol. NetBIOS TCP/UDP 137 TCP/UDP 138 The Network Basic Input/Output System is used for communication between computers in a LAN. TCP/UDP 139 TCP/UDP 445 NEW-ICQ TCP 5190 An Internet chat program. NEWS TCP 144 A protocol for news groups.
Appendix D Services Table 75 Examples of Services (continued) 258 NAME PROTOCOL PORT(S) DESCRIPTION SFTP TCP 115 The Simple File Transfer Protocol is an old way of transferring files between computers. SMTP TCP 25 Simple Mail Transfer Protocol is the message-exchange standard for the Internet. SMTP enables you to move messages from one e-mail server to another. SMTPS TCP 465 This is a more secure version of SMTP that runs over SSL. SNMP TCP/UDP 161 Simple Network Management Program.
APPENDIX E Legal Information Copyright Copyright © 2009 by ZyXEL Communications Corporation. The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation.
Appendix E Legal Information • This device must accept any interference received, including interference that may cause undesired operations. This device has been tested and found to comply with the limits for a Class B digital device pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation.
Appendix E Legal Information materials, ZyXEL will, at its discretion, repair or replace the defective products or components without charge for either parts or labor, and to whatever extent it shall deem necessary to restore the product or components to proper operating condition. Any replacement will consist of a new or re-manufactured functionally equivalent product of equal or higher value, and will be solely at the discretion of ZyXEL.
Appendix E Legal Information 262 P-660H-T1v3s User’s Guide
Index Index MBS 76, 82 PCR 76, 81 QoS 76, 81, 86 SCR 76, 81 status 195 Numerics 802.1p 145, 146 802.1Q/1P 135 activation 137 group settings 138 port settings 140 priority 135 PVC 136 PVID 140 tagging frames 136, 139 B backup configuration 184, 185, 190 broadcast 70 A activation 802.
Index DDoS 122 DoS 122 LAND attack 122 Ping of Death 122 status 35 SYN attack 121 D DDoS 122 default server, NAT 108, 110 Denials of Service, see DoS DHCP 90, 93, 98, 171 diagnostic 193 DiffServ Code Point, see DSCP disclaimer 259 DNS 90, 93, 99, 157 Domain Name System, see DNS DoS 122 DSCP 144 DSL connections, status 196 dynamic DNS 149 activation 150 wildcard 149 activation 150 firmware 180, 187 upgrading 182 version 34 forwarding ports 106, 108 activation 111 configuration 109 example 109 rules 111 FTP
Index L N LAN 89 Any IP 102 example 102 client list 94 DHCP 90, 93, 98 DNS 90, 93, 99 IGMP 90, 101 IP address 90, 91, 99 IP alias 96 configuration 96 MAC address 95 multicast 90, 92, 101 RIP 90, 92, 97, 101 status 34 subnet mask 90, 91, 99 nailed-up connection 74, 80, 84 LAND attack 122 limitations FTP 181 Local Area Network, see LAN login 27 passwords 27, 28 logs 177 alerts 177 NAT 80, 105, 106, 116, 253 activation 107 address mapping 112 rules 114 types 113, 114, 118 applications 118 IP alias 118 de
Index PPPoE 73, 79, 82 private IP address 100 S product registration 261 safety warnings 7 PVC 136 SCR 76, 81, 85 PVID 140 Security Parameter Index, see SPI Q QoS 141 802.
Index reset 24 restoring configuration 181 status 30, 33 firewalls 35 LAN 34 WAN 34 time 173 T tagging frames 136, 139 Virtual Channel Identifier, see VCI Virtual Local Area Network, see VLAN Virtual Path Identifier, see VPI VLAN 135 802.
Index 268 P-660H-T1v3s User’s Guide
Index P-660H-T1v3s User’s Guide 269
Index 270 P-660H-T1v3s User’s Guide
Index P-660H-T1v3s User’s Guide 271
Index 272 P-660H-T1v3s User’s Guide
