Manuel d'utilisation / d'entretien du produit P-660HWP-Dx du fabricant ZyXEL Communications
Aller à la page of 402
www .zyxel.com P-660HWP-Dx 802.1 1g HomePlug A V ADSL2+ Gateway User ’ s Guide V ersion 3.40 7/2007 Edition 1.
.
About This User's Guide P-660HWP-Dx User’s Guide 35 About This User's Guide Intended Audience This manual is intended for people who want to configure the P-66 0HWP-Dx using the web configurator . Y ou should have at least a basic knowledge of TCP/IP networking concepts and topology .
Document Conventions P-660HWP-Dx U ser’s Guide 36 Document Conventions W arnings and Notes These are how warnings and notes are shown in this User ’ s Guide.
Document Conventions P-660HWP-Dx User’s Guide 37 Icons Used in Figures Figures in this User ’ s Guide may use the follo wing generic icons. The P-660HWP-Dx ico n is not an exact representation of your device.
Safety Warnings P-660HWP-Dx U ser’s Guide 38 Safety Warnings 1 For your safety , be sure to read and follow all warning notices and instructions. • Do NOT use this product near water , for example, in a wet basement or near a swimming pool. • Do NOT expose your device to dampness, dust or corrosive liquids.
Safety Warnings P-660HWP-Dx User’s Guide 39.
Safety Warnings P-660HWP-Dx U ser’s Guide 40.
Contents Overview P-660HWP-Dx User’s Guide 35 Contents Overview Introduction .......................................... ........................................................................ .......... 33 Introducing the P-660HWP-Dx ..............
Contents Overview P-660HWP-Dx U ser’s Guide 36.
Table of Contents P-660HWP-Dx User’s Guide 35 Table of Contents About This User's Guide ........................................................................... ............................... 3 Document Conventions..........................
Table of Contents P-660HWP-Dx U ser’s Guide 36 2.4.4 S tatus: WLAN S tatus ................. ............. ............. ................ ............. ............. ............. 52 2.4.5 S tatus: Bandwidth S tatus ............. ............. .....
Table of Contents P-660HWP-Dx User’s Guide 37 5.5 Internet Connection ..... ................ ......... ................. ............. ............ ............. ............. .... ...... 86 5.5.1 Configuring Advanced In ternet Connection Setup ....
Table of Contents P-660HWP-Dx U ser’s Guide 38 7.4.5 Wireless LAN Advanced Setup . ................ .......... ............. ............. ............. .............. 1 22 7.5 OTIST .............. ............. ............. ................ ......
Table of Contents P-660HWP-Dx User’s Guide 39 Part IV : Security ..................... .............................. ........................ ........ 155 Chapter 10 Firewalls........................................................... .............
Table of Contents P-660HWP-Dx U ser’s Guide 40 1 1.8 Predefined Servic es ............. ............. ................ ............. ................ ............. ................ .. ... 183 1 1.9 Anti-P robing ... ................ ............. ..
Table of Contents P-660HWP-Dx User’s Guide 41 14.2 Configuring S tatic Route ......... ............ ................. ............. ............ ............. ................ .... .2 1 9 14.2.1 S tatic Route Edit .... ................ .............
Table of Contents P-660HWP-Dx U ser’s Guide 42 17.6.3 Configuring SNMP ..... .................... ............. ................ ............. ............. ............ ..... 245 17.7 Configuring DNS ..................... ............ .............
Table of Contents P-660HWP-Dx User’s Guide 43 21.2 Configuration Screen ..... ...... ............. ............. ............. ................ ............. ............. ......... .. 291 21.2.1 Backup Configur ation . ............. ............. .
Table of Contents P-660HWP-Dx U ser’s Guide 44.
List of Figures P-660HWP-Dx User’s Guide 35 List of Figures Figure 1 Protected Internet Access Applications ...... ................. ............. ............ ............. ................ .. ..... 36 Figure 2 LAN-to-LAN Application Example ......
List of Figure s P-660HWP-Dx U ser’s Guide 36 Figure 39 Select a Mode ....................... ................ ............. ................ ............. ................ ...... .............. ... 74 Figure 40 Wizard: We lc ome ..... .............
List of Figures P-660HWP-Dx User’s Guide 37 Figure 82 Network > Powerline > Remote Setting ....................... ............. ................ ............. .............. 1 39 Figure 83 Network > Pow erline > S tatus ................
List of Figure s P-660HWP-Dx U ser’s Guide 38 Figure 125 Security > Certificates > Directory Server > Add ........ ............. ................ ............. .............. 216 Figure 126 Example of S tatic Routing T opology . ...... ....
List of Figures P-660HWP-Dx User’s Guide 39 Figure 168 Error Message .. ............. ................ ............. ................ ................ ............. ............. ......... ..... 291 Figure 169 Maintenance > T ools > Configuration .
List of Figure s P-660HWP-Dx U ser’s Guide 40 Figure 21 1 Red Hat 9.0: Checking TCP/ IP Properties ................... ............. ............. ............. ............. . 3 56 Figure 212 Displaying Log Categories Example ...... ............. .
List of Tables P-660HWP-Dx User’s Guide 35 List of Tables T able 1 ADSL St andards ............ ................. ............ ................. ............. ................ ............. ... ................ 36 T able 2 Front Panel LEDs .........
List of Tables P-660HWP-Dx U ser’s Guide 36 T able 39 MAC Address Filt er ....................... ................ ............. ................ ............. ................ . ............. 127 T able 40 WMM QoS Priorities .............. ........
List of Tables P-660HWP-Dx User’s Guide 37 T able 82 Security > C ertificates > Di rectory Server > Add ................ ................ ................. ............ ..... 216 T able 83 S tatic Route ...................... ............. .
List of Tables P-660HWP-Dx U ser’s Guide 38 T able 125 Certificate Path V erification Failure Reas on Codes .... ................ ............. ............. .............. 285 T able 126 ACL Setting Notes ............... ................ ..........
List of Tables P-660HWP-Dx User’s Guide 39 T able 168 Firewall Commands ............. ................ ............. ................ ................ ............. ........... .......... 3 69 T able 169 NetBIO S Filter Default Settings ............
List of Tables P-660HWP-Dx U ser’s Guide 40.
35 P ART I Introduction Introducing the P- 660HWP-Dx (35) Introducing the W eb Configurator (43).
36.
P-660HWP-Dx User’s Guide 35 C HAPTER 1 Introducing the P-660HWP-Dx This chapter introduces the ma in applications and features of the P-660HWP-Dx. It also introduces the ways you can manage the P-660HWP-Dx. 1.1 Overview The P-660HWP-Dx is an IEE E 802.
Chapter 1 Introducing the P-660 HWP-Dx P-660HWP-Dx U ser’s Guide 36 Figure 1 Protected Internet Access Applications Y ou can also use the P-660HWP-Dx to connect two geograp hically dispersed networks over the ADSL line. A typical LAN-to-LAN ap plication example is shown as follows.
Chapter 1 Introducing the P-660HWP-Dx P-660HWP-Dx User’s Guide 37 " The st andard your ISP support s determines the maximum up stream and downstream speeds att ainable. Actual speeds att ained also depend on the dist ance from your ISP , line quality , etc.
Chapter 1 Introducing the P-660 HWP-Dx P-660HWP-Dx U ser’s Guide 38 Figure 3 Front Panel The following table describes the LEDs. 1.5 Hardware Connections Refer to the Quick S tart Guide for in formation on hard ware connections.
Chapter 1 Introducing the P-660HWP-Dx P-660HWP-Dx User’s Guide 39 1.5.1 Connecting a POTS Splitter When you use the Full Rate (G .dmt) ADSL standard, you can use a POTS (Plain Old T elephone Service) splitter to separate th e telephone and ADSL si gnals.
Chapter 1 Introducing the P-660 HWP-Dx P-660HWP-Dx U ser’s Guide 40 Figure 5 Connecting a Microfilter Y ou can also use a Y -Connector with a microfilter in order to connect both yo ur modem and a telephone to the same wall jack wi thout using a POTS splitter .
Chapter 1 Introducing the P-660HWP-Dx P-660HWP-Dx User’s Guide 41 Figure 7 P-660HWP-Dx with ISDN.
Chapter 1 Introducing the P-660 HWP-Dx P-660HWP-Dx U ser’s Guide 42.
P-660HWP-Dx User’s Guide 35 C HAPTER 2 Introducing the Web Configurator This chapter describes how to access and navigate the web configurator . 2.1 W eb Configurator Overview The web configur ator is an HTML-based mana ge ment interface that allows easy P-660HWP- Dx setup and management via Internet browser .
Chapter 2 Introducing the Web Configur ator P-660HWP-Dx U ser’s Guide 36 5 A window displays as shown. Figure 8 Password Screen 2.2.1 User Access 1 For user access enter the default user password user to view the status only . The following window will appear .
Chapter 2 Introducing the Web Configurator P-660HWP-Dx User’s Guide 37 " If you do not change the p assword at least once, the following sc reen appears every time you log in with the admi n password. Figure 10 Change Password at Lo gin 4 Select Go to Wizard setup and click Apply to display the wizard main screen.
Chapter 2 Introducing the Web Configur ator P-660HWP-Dx U ser’s Guide 38 2.3 Resetting the P-660HWP-Dx If you forget your password or cannot access th e web configurator , you will need to use the RESET button at the back of the P-660HWP-Dx to reload the factory-default configuration file.
Chapter 2 Introducing the Web Configurator P-660HWP-Dx User’s Guide 39 " Click the icon (located in the top right corner of most screens) to view embedded help.
Chapter 2 Introducing the Web Configur ator P-660HWP-Dx U ser’s Guide 40 NA T General Use this screen to enable NA T . Port Forwarding Use this screen to configure servers behind the P-6 60HWP- Dx. Secur ity Firewall General Use this screen to ac tivate/deactivate th e firewall and the direction of network traffic to which to apply th e rule.
Chapter 2 Introducing the Web Configurator P-660HWP-Dx User’s Guide 41 2.4.2 St atus Screen The following summarizes how to navigate the web configurator from the St a t u s screen. Some fields or links are not available if yo u entered the user password in the login password screen (see Figure 8 on page 36 ).
Chapter 2 Introducing the Web Configur ator P-660HWP-Dx U ser’s Guide 42 The following table describes the labels shown in the St a t u s screen. T able 4 S tatus Screen LABEL DESCRIPTION Refresh In.
Chapter 2 Introducing the Web Configurator P-660HWP-Dx User’s Guide 43 2.4.3 St atus: Any IP T able Click the Any IP T able hyperlink in the St a t u s screen. The Any IP table shows current read- only information (including the IP address and the MAC address) of all network devices that use the Any IP feature to communicate with the P-660HWP-Dx.
Chapter 2 Introducing the Web Configur ator P-660HWP-Dx U ser’s Guide 44 The following table describes the labels in this screen. 2.4.4 St atus: WLAN S tatus Click the WLAN S tatus hyperlink in the St a t u s screen to view the wireless stations that are currently associated to the P-660HWP-Dx.
Chapter 2 Introducing the Web Configurator P-660HWP-Dx User’s Guide 45 Figure 16 S tatus: Bandwidth S tatus 2.4.6 St atus: Powerline S tatistics Click the Powerline S tatistics hyperlink in the St a t u s screen.
Chapter 2 Introducing the Web Configur ator P-660HWP-Dx U ser’s Guide 46 Figure 18 S tatus: Packet S tatistics The following table describes th e fields in this screen. T able 7 St atus: Packet S tatistics LABEL DESCRIPTION System Monitor System up T ime This is the elapsed time the system has been up.
Chapter 2 Introducing the Web Configurator P-660HWP-Dx User’s Guide 47 2.4.8 Changing Login Password It is highly recommended that you periodical ly change the password for accessing the P- 660HWP-Dx.
Chapter 2 Introducing the Web Configur ator P-660HWP-Dx U ser’s Guide 48.
35 P ART II W izards W izard Setup for Interne t/W ireless Access (59) Bandwidth Management W izard (73).
36.
P-660HWP-Dx User’s Guide 35 C HAPTER 3 Wizard Setup for Internet/ Wireless Access This chapter provides information on the W izard Setup screens for Internet/W ireless acce ss in the web configurat or .
Chapter 3 Wizard Setup for Internet/Wireless Access P-660HWP-Dx U ser’s Guide 36 Figure 20 Select a Mode 2 Click INTERNET/WIRELESS SETUP to configure the system for Internet access. Figure 21 Wizard: Welcome 3 The wizard attempts to detect whic h W AN connection type you are using.
Chapter 3 Wizard Setup for Internet/Wireless Access P-660HWP-Dx User’s Guide 37 Figure 22 Auto Detection: No DSL Connection If the wizard still cannot detect a connection type and the following screen appears (see Figure 23 on page 37 ), click Next and refer to Section 3.
Chapter 3 Wizard Setup for Internet/Wireless Access P-660HWP-Dx U ser’s Guide 38 Figure 24 Auto-Detection: PPPoE 3.2.2 Manual Configuration 1 If the P-660HWP-Dx fails to detect your D SL connection type, enter the Internet access information given to you by your ISP exactly in the wizard screen.
Chapter 3 Wizard Setup for Internet/Wireless Access P-660HWP-Dx User’s Guide 39 The following table describes the fields in this screen. 2 The next wizard screen varies depending on what mode and encapsulation type you use. All screens shown are with routing mo de.
Chapter 3 Wizard Setup for Internet/Wireless Access P-660HWP-Dx U ser’s Guide 40 The following table describes the fields in this screen. Figure 27 Internet Connection with RFC 1483 The following table describes the fields in this screen.
Chapter 3 Wizard Setup for Internet/Wireless Access P-660HWP-Dx User’s Guide 41 Figure 28 Internet Connection with ENET ENCAP The following table describes the fields in this screen. Ta b l e 1 1 Internet Connection with ENET ENCAP LABEL DESCRIPTION Obtain an IP Address Automati cally A static IP address is a fixed IP that your ISP gives you.
Chapter 3 Wizard Setup for Internet/Wireless Access P-660HWP-Dx U ser’s Guide 42 Figure 29 Internet Connection with PPPoA The following table describes the fields in this screen. • If the user name and/or password you ente red for PPPoE or PPPoA connection are not correct, the screen disp lays as shown next.
Chapter 3 Wizard Setup for Internet/Wireless Access P-660HWP-Dx User’s Guide 43 Figure 31 Connection T est Failed-2. 3.3 Wireless Connection Wizard Setup After you configure the Internet access informatio n, use the following scr eens to set up your wireless LAN.
Chapter 3 Wizard Setup for Internet/Wireless Access P-660HWP-Dx U ser’s Guide 44 Figure 33 Wireless LAN Setup Wizard 1 The following table describes the labels in this screen.
Chapter 3 Wizard Setup for Internet/Wireless Access P-660HWP-Dx User’s Guide 45 Figure 34 Wireless LAN Setup Wizard 2 The following table describes the labels in this screen.
Chapter 3 Wizard Setup for Internet/Wireless Access P-660HWP-Dx U ser’s Guide 46 " The wireless st ations and P-660HWP-Dx must use the same SSID, c hannel ID and WEP encryption key (if WEP is enabled), WP A-PSK (if WP A-PSK is enabled) for wireless communication.
Chapter 3 Wizard Setup for Internet/Wireless Access P-660HWP-Dx User’s Guide 47 Figure 36 Manually assign a WEP key The following table describes the labels in this screen. 5 Click Apply to save your wireless LAN settings. Figure 37 Wireless LAN Setup 3 6 Use the read-only summary table to check whet her what you have confi gured is correct.
Chapter 3 Wizard Setup for Internet/Wireless Access P-660HWP-Dx U ser’s Guide 48 Figure 38 Internet Access and Wireless Wizard Setup Complete 7 Launch your web browser and navigate to www .zyxel.com. Internet access is just the beginning. Refer to the rest of this guide for more detailed inform ation on the complete range of P-660HWP-Dx features.
P-660HWP-Dx User’s Guide 49 C HAPTER 4 Bandwidth Management Wizard This chapter shows you how to configure basic bandwidth management using the wizard screens.
Chapter 4 Bandwid th Management Wizard P-660HWP-Dx U ser’s Guide 50 4.3 Bandwid th Management Wizard Setup 1 After you enter the admin password to access the web configura tor , se lect Go to Wizard setup and click Apply . Otherwise, click the wizard icon ( ) in the top right corner of the web configurat or to display the wizard main screen.
Chapter 4 Bandwidth Manage ment Wizard P-660HWP-Dx User’s Guide 51 2 Click BANDWIDTH MANAGEMENT SETUP to configure the system for Internet access. Figure 40 Wizard: Welcome 3 Activate bandwidth mana gement and select to alloc ate bandwidth to packets ba sed on the service requirements.
Chapter 4 Bandwid th Management Wizard P-660HWP-Dx U ser’s Guide 52 Figure 42 Bandwidt h Management Wizard: Configuration The following table describes the labels in this screen. 5 Follow the on-screen in structions and click Finish to complete the wizard setup and save your configuratio n.
Chapter 4 Bandwidth Manage ment Wizard P-660HWP-Dx User’s Guide 53 Figure 43 Bandwid th Management Wizard: Complete.
Chapter 4 Bandwid th Management Wizard P-660HWP-Dx U ser’s Guide 54.
35 P ART III Network WA N S e t u p ( 8 1 ) LAN Setup (99) W ireless LAN (1 1 1) Powerline (135) Network Address T ranslation (NA T) (143).
36.
P-660HWP-Dx User’s Guide 35 C HAPTER 5 WAN Setup This chapter describes how to configure W AN settings. 5.1 W AN Overview A W AN (Wide Area Network) is an outside conn ection to another network or the Internet. 5.1.1 Encap sulation Be sure to use the encapsulation method required by your ISP .
Chapter 5 WAN Setup P-660HWP-Dx U ser’s Guide 36 5.1.1.3 PPPoA PPPoA stands for Point to Point Protocol over A TM Adaptation Layer 5 (AAL5). A PPPoA connection functions like a dial -up Internet connection.
Chapter 5 WAN Setup P-660HWP-Dx User’s Guide 37 5.1.3.2 Scenario 2: One VC, One Protocol (IP) Selecting RFC-1483 encapsulation with VC-based multiplexing requires the least amount of overhead (0 octets).
Chapter 5 WAN Setup P-660HWP-Dx U ser’s Guide 38 Do not specify a nailed-up connection unless your telephone company offers flat-rate service or you need a constant connection and the cost is of no concern 5.
Chapter 5 WAN Setup P-660HWP-Dx User’s Guide 39 Sustained Cell Rate (SCR) is the mean cell rate of each bursty traf fic source. It specifies the maximum average rate at which c ells can be sent over the virtual connection. SCR may not be greater than the PCR.
Chapter 5 WAN Setup P-660HWP-Dx U ser’s Guide 40 The VBR-nR T (non real-time V ariable Bit Rate) ty pe is used with bursty connections that do not require closely controlled delay and delay variation. It is commonly used for "bursty" traffic typical on LANs.
Chapter 5 WAN Setup P-660HWP-Dx User’s Guide 41 Figure 45 Internet Conne ction (PPPoE) The following table describes the labels in this screen. T able 20 Internet Connection LABEL DESCRIPTION General Name Enter the name of your Internet Servic e Provider , e.
Chapter 5 WAN Setup P-660HWP-Dx U ser’s Guide 42 5.5.1 Configuring Advanced Internet Connection Setup T o edit your P-660 HWP-Dx's advanced W AN se ttings, click the Ad vanced Setu p button in the Internet Connection screen. The screen appears as shown.
Chapter 5 WAN Setup P-660HWP-Dx User’s Guide 43 Figure 46 Advanced Intern et Connection Setup The following table describes the labels in this screen. T able 21 Advanced Internet Connection Setup LABEL DESCRIPTION RIP & Multicast Setup RIP Direction Select the RIP direction from None , Both , In Only and Ou t Only .
Chapter 5 WAN Setup P-660HWP-Dx U ser’s Guide 44 5.6 Configuring More Connections This section describes the protocol-independent parameters for a remote network. They are required for placing calls to a remote gate way and the network behind it across a W AN connection.
Chapter 5 WAN Setup P-660HWP-Dx User’s Guide 45 The following table describes the labels in this screen. 5.6.1 More Connections Edit Click the edit icon ( ) in the Mor e Connections screen to configure a connection. T able 22 More Connections LABEL DESCRIPTION # This is the index number of a connection.
Chapter 5 WAN Setup P-660HWP-Dx U ser’s Guide 46 Figure 48 More Connections Edit The following table describes the labels in this screen. T able 23 More Connections Edit LABEL DESCRIPTION Active Select the check box to activate or clear the check box to deactivate this connection.
Chapter 5 WAN Setup P-660HWP-Dx User’s Guide 47 Multiplexing Select the method of multiplexing used by your ISP fro m the drop-down list. Choices ar e VC or LL C . By prior agreement, a protocol is assigned a specifi c virtual circuit, for exampl e, VC1 will carry IP .
Chapter 5 WAN Setup P-660HWP-Dx U ser’s Guide 48 5.6.2 Configuring More Co nnections Advanced Setup T o edit your P-660 HWP-Dx's advanced W AN se ttings, click the Ad vanced Setu p button in the Mor e Connections Edit screen. The scree n appears as shown.
Chapter 5 WAN Setup P-660HWP-Dx User’s Guide 49 5.7 T raffic Redirect T raffic redirect forwards traffic to a ba ckup gateway when the P-660HWP-Dx cann ot connect to the Internet.
Chapter 5 WAN Setup P-660HWP-Dx U ser’s Guide 50 Figure 52 W AN Backup Setup The following table describes the labels in this screen. T able 25 WAN Backup Setup LABEL DESCRIPTION W AN Backup Setup Backup T ype Select the method that the P-660H WP-Dx use s to check the DSL connection.
Chapter 5 WAN Setup P-660HWP-Dx User’s Guide 51 T imeout T ype the number of se conds (3 reco mmended) for your P-660HWP-Dx to wait for a ping response from one of the IP addresses in the Check W AN IP Address field before timing out the request.
Chapter 5 WAN Setup P-660HWP-Dx U ser’s Guide 52.
P-660HWP-Dx User’s Guide 35 C HAPTER 6 LAN Setup This chapter describes how to configure LAN settings. 6.1 LAN Overview A Local Area Network (LAN) is a shared comm unication system to which many computers are attached. A LAN is a computer network lim ited to the immediate area, usually the same building or floor of a building.
Chapter 6 LAN Setup P-660HWP-Dx U ser’s Guide 36 6.1.2 DHCP Setup DHCP (Dynamic Host Configuration Protocol , RFC 2131 and RFC 2132) allows individual clients to obtain TCP/IP configuration at start-up from a se rver . Y ou can configure the P- 660HWP-Dx as a DHCP server or disable it.
Chapter 6 LAN Setup P-660HWP-Dx User’s Guide 37 • The ISP tells you the DNS server addresses, us ually in the form of an information sheet, when you sign up. If your ISP gives you DNS server addresses, enter them in the DNS Server fields in the DHCP Setup screen.
Chapter 6 LAN Setup P-660HWP-Dx U ser’s Guide 38 Y ou can obtain your IP address from the IANA, from an ISP or it can be assigned from a private network. If you belong to a small or ga nization and your Internet access is through an ISP , the ISP can provide you with the Internet addresses for y our local networks.
Chapter 6 LAN Setup P-660HWP-Dx User’s Guide 39 224.0.0.0 is not assigned to any group and is used by IP multicast computers. The address 224.0.0.1 is used for query messages and is assi gned to the permanent group of all IP hosts (including gateways).
Chapter 6 LAN Setup P-660HWP-Dx U ser’s Guide 40 " Y ou must enable NA T/SUA to use the Any IP feature on the P-660HWP-Dx. 6.2.4.1 How Any IP W orks Address Resolution Protocol (ARP) is a prot .
Chapter 6 LAN Setup P-660HWP-Dx User’s Guide 41 The following table describes th e fields in this screen. 6.3.1 Configuring Advanced LAN Setup T o edit your P-660HWP-Dx's a dvanced LAN settings, click the Advanced Setup button in the LAN IP screen.
Chapter 6 LAN Setup P-660HWP-Dx U ser’s Guide 42 6.4 DHCP Setup Use this screen to configure th e DNS server information that the P-660HWP-Dx sends to the DHCP client devices on the LAN. Figure 57 DHCP Setup The following table describes the labels in this screen.
Chapter 6 LAN Setup P-660HWP-Dx User’s Guide 43 6.5 LAN Client List This table allows you to assign IP addresses on the LAN to specific individual computers based on their MAC Addresses. Every Ethernet device has a unique MAC (Med ia Access Control) addre ss.
Chapter 6 LAN Setup P-660HWP-Dx U ser’s Guide 44 Figure 58 LAN Client List The following table describes the labels in this screen. 6.6 LAN IP Alias IP alias allows you to partition a physical network into dif fer ent logical networks over the same Ethernet interface.
Chapter 6 LAN Setup P-660HWP-Dx User’s Guide 45 When you use IP alias, you can also configur e firewall rules to control access between the LAN's logical networ ks (subnets ). " Make sure that the subnet s of the logical networks do not ov erlap.
Chapter 6 LAN Setup P-660HWP-Dx U ser’s Guide 46 The following table describes the labels in this screen. T able 30 LAN IP Alias LABEL DESCRIPTION IP Alias 1, 2 Select the check box to confi gure another LAN network for the P-660 HWP-Dx. IP Address Enter the IP address of your P-660HWP-Dx in dotted decimal notation.
P-660HWP-Dx User’s Guide 35 C HAPTER 7 Wireless LAN This chapter discusses how to configure the wireless network settings in your P-660HWP-Dx. See the appendices for more detailed information ab out wireless networks. 7.1 Wireless Network Overview The following figure provides an exampl e of a wireless network.
Chapter 7 Wireless LAN P-660HWP-Dx U ser’s Guide 36 • Every wireless client in the same wireless network must use security c ompatible with the AP . Security stops unauthorized devices from using the wireless network. It ca n also protect the information that is sent in the wireless network.
Chapter 7 Wireless LAN P-660HWP-Dx User’s Guide 37 ( ) WP A2-PSK (TKIP or AES):______________ ( ) WP A2 (TKIP or AES) • Preamble type (if available): auto, short or long T o set up your w ireless .
Chapter 7 Wireless LAN P-660HWP-Dx U ser’s Guide 38 This type of security does not protect the information that is sent in the wireless network. Furthermore, there are ways for unauthorized devi ces to get the MAC address of an authorized wireless client.
Chapter 7 Wireless LAN P-660HWP-Dx User’s Guide 39 " It is recommended that wireless networks us e WP A-PSK, WP A, or stronger encryption. IEEE 802.1x and WEP encryption are better than none at all, but it is still possible for unauthorized devices to figure out the original information pretty quickly .
Chapter 7 Wireless LAN P-660HWP-Dx U ser’s Guide 40 Figure 62 Wireless LAN: General The following table describes the general wi reless LAN labels in this screen. See the rest of this chapter for informa tion on the other labels in this screen. 7.4.
Chapter 7 Wireless LAN P-660HWP-Dx User’s Guide 41 " If you do not enable any wireless security on your P-660HWP-Dx, your network is accessible to any wireless n etworking device that is within range. Figure 63 Wireless: No Security The following table describes the labels in this screen.
Chapter 7 Wireless LAN P-660HWP-Dx U ser’s Guide 42 Figure 64 Wireless: S tatic WEP Encryption The following table describes the wireless LAN security labels in this screen. 7.4.3 WP A-PSK/WP A2-PSK In order to configure and enable WP A(2)-PSK authentication; click Network > Wir eless LAN to display the Ge neral screen.
Chapter 7 Wireless LAN P-660HWP-Dx User’s Guide 43 Figure 65 Wireless: WP A-PSK/WP A2-PSK The following table describes the wireless LAN security labels in this screen. T able 35 Wireless: WP A-PSK/WP A2-PSK LABEL DESCRIPTION Security Mode Choose WP A-PSK or WP A2-PSK from the drop-down list box.
Chapter 7 Wireless LAN P-660HWP-Dx U ser’s Guide 44 7.4.4 WP A/WP A2 In order to configure and enable WP A/WP A2; click the Wir eless LAN link under Network to display the General screen.
Chapter 7 Wireless LAN P-660HWP-Dx User’s Guide 45 The following table describes the wireless LAN security labels in this screen. T able 36 Wireless: WPA/WPA2 LABEL DESCRIPTION WP A Co mpatible This check box is available only when you select WP A2-PSK or WP A2 in the Security Mode field.
Chapter 7 Wireless LAN P-660HWP-Dx U ser’s Guide 46 7.4.5 Wireless LAN Advanced Setup T o configure advanced wi reless settings, click the Advanced Setup button in the General screen. The screen appears as shown. Figure 67 Advanced The following table describes the labels in this screen.
Chapter 7 Wireless LAN P-660HWP-Dx User’s Guide 47 7.5 OTIST In a wireless network, the wireless clients mu st have the same SSID and security settings as the access point (AP) or wireless router (we wi ll refer to both as “AP” here) in order to associate with it.
Chapter 7 Wireless LAN P-660HWP-Dx U ser’s Guide 48 " If you hold in the RESET button too long, the device will reset to the factory default s! 7.5.1.1.2 W eb Configurator Click the Network > Wireless LAN > OTIST . The following screen displays.
Chapter 7 Wireless LAN P-660HWP-Dx User’s Guide 49 Figure 69 Example Wireless Client OTIST Screen 7.5.2 St arting OTIST " Y ou must click St art in the AP OTIST web config urator screen and in the wireless client(s) Adapter screen all within three minutes (at the time of writing).
Chapter 7 Wireless LAN P-660HWP-Dx U ser’s Guide 50 Figure 72 OTIST in progress (Client) In the wireless client, you see th is screen if i t can’t find an OTIST -enabled AP (with the same Setup key ). Click OK to go back to the ZyXEL utility mai n screen.
Chapter 7 Wireless LAN P-660HWP-Dx User’s Guide 51 7.6 MAC Filter The MAC filter screen allows you to configure the P-660HWP-Dx to give exclusive access to up to 32 devices ( Allow ) or exclude up to 32 devic es from accessing the P-660HWP-Dx ( Deny ).
Chapter 7 Wireless LAN P-660HWP-Dx U ser’s Guide 52 7.7 WMM QoS WMM (W i-Fi MultiMedia) QoS (Quality of Service) allows you to prioritize wireless traf fic according to the delivery requirements of individual services. WMM is a part of the IEEE 802.
Chapter 7 Wireless LAN P-660HWP-Dx User’s Guide 53 7.7.3 Services The commonly used services and port numbers ar e shown in the following table . Please refer to RFC 1700 for further information about port numbers. Next to the name of the service, two fields appear in brackets.
Chapter 7 Wireless LAN P-660HWP-Dx U ser’s Guide 54 T able 41 Commonly Used Services SERVICE DESCRIPTION AIM/New-ICQ(TCP:5190) AOL ’s Internet Messenger service, used as a listening port by ICQ. AUTH(TCP:1 13) Auth entication protocol used by some servers.
Chapter 7 Wireless LAN P-660HWP-Dx User’s Guide 55 7.8 QoS Screen The QoS screen by default allows you to au tomatically give a service a priority level according to the T oS value in the IP header of the packets it sends. 7.8.1 T oS (T ype of Service) and WMM QoS T oS defines the DS (Differentiated Service) fiel d in the IP packet header .
Chapter 7 Wireless LAN P-660HWP-Dx U ser’s Guide 56 Click Network > Wi reless LAN > QoS . The following screen displays. Figure 76 Wireless LAN: QoS The following table describes the fields in this screen. T able 42 Wireless Lan: QoS LABEL DESCRIPTION QoS Enable WMM QoS Select the check box to enable WMM QoS on the P-660HWP-Dx.
Chapter 7 Wireless LAN P-660HWP-Dx User’s Guide 57 7.8.2 Application Pr iority Configuration T o edit a WMM QoS application entr y , click the edit icon ( ) under Modify . The following screen displays. Figure 77 Application Priority Configuration The following table describes the fields in this screen.
Chapter 7 Wireless LAN P-660HWP-Dx U ser’s Guide 58 Apply Click Apply to save your ch anges back to the P-660H WP-Dx. Cancel Click Cance l to return to the previous sc reen without savin g your changes.
P-660HWP-Dx User’s Guide 35 C HAPTER 8 Powerline This chapter introduces the ma in applications and manageme nt of the powerline feature. 8.1 Overview The P-660HWP-Dx is a HomePl ug A V adaptor integrated DSL product.
Chapter 8 Power line P-660HWP-Dx U ser’s Guide 36 In this User ’ s Guide the electrical wiring network may be referred to as the “powerline network”.
Chapter 8 Powerline P-660HWP-Dx User’s Guide 37 In both cases the powerline adapters reside on the same electrica l circuit. In scenario A all the powerline adapters can communicate w ith each other . In scenario B only the adapters with the same NMK can receive and unscramble communication between each other .
Chapter 8 Power line P-660HWP-Dx U ser’s Guide 38 8.3 Configuring Local Settings Use the Local Setting screen to enter the network password for the network you wish to configure. Y ou can also change the Device Acc ess Key for your P-660HWP-Dx from this screen.
Chapter 8 Powerline P-660HWP-Dx User’s Guide 39 8.4 Configuring Remote Settings Use this screen to a ccess the other powerline ad apters on your network. Y ou can configure these adapters and add or re move them from you r network. Click Network > Po werline > Remote S ettings to access and set up the adapters on your powerline network.
Chapter 8 Power line P-660HWP-Dx U ser’s Guide 40 8.5 Powerline Network S tatus Use this screen to check the status of your powerline network and for expert troubleshooting. Click on Network > Powerline > St a t u s to access advanced information on the status of your powerline network.
Chapter 8 Powerline P-660HWP-Dx User’s Guide 41 TEI TEI refers to T e rminal Equipm ent Identifier . In th is case the number identifie s the CCo on the powerline network. NID NID refers to Network Identifier . This number identifies a network with a common password.
Chapter 8 Power line P-660HWP-Dx U ser’s Guide 42.
P-660HWP-Dx User’s Guide 35 C HAPTER 9 Network Address Translation (NAT) This chapter discusses how to configure NA T on the P-660HWP-Dx. 9.1 NA T Overview NA T (Netw ork Address T rans lation - NA .
Chapter 9 Network Add ress Translat ion (NAT) P-660HWP-Dx U ser’s Guide 36 9.1.2 What NA T Do es In the simplest form, NA T changes the sour ce IP address in a packet received from a subscriber (the inside local address) to anothe r (the inside global address) before forwarding the packet to the W AN side.
Chapter 9 Network Address Tran slation (NAT) P-660HWP-Dx User’s Guide 37 Figure 85 NA T Application With IP Alias 9.1.5 NA T Mapping T ypes NA T suppo rts five types of IP/port mapping. They are: • One to One : In One-to-One mode, the P-660HWP-D x maps one local IP address to one global IP address.
Chapter 9 Network Add ress Translat ion (NAT) P-660HWP-Dx U ser’s Guide 38 The following table summarizes these types. 9.2 SUA (Single User Account) V ersus NA T SUA (Single User Account) is a ZyNOS implemen tation of a subset of NA T that supports two types of mapping, Many-to-One and Server .
Chapter 9 Network Address Tran slation (NAT) P-660HWP-Dx User’s Guide 39 9.4 NA T General Setup Y ou must create a firewall rule in addition to setting up SUA/NA T , to allow traffic from the W AN to be forwarded through the P-660HWP-Dx. Click Network > NA T to open the following screen.
Chapter 9 Network Add ress Translat ion (NAT) P-660HWP-Dx U ser’s Guide 40 9.5 Port Forwarding A port forwarding set is a list of inside (behind NA T on the LAN) servers, for example, web or FTP , that you can make visible to the outsid e world even though NA T makes your whole inside network appear as a single computer to the outside world.
Chapter 9 Network Address Tran slation (NAT) P-660HWP-Dx User’s Guide 41 9.5.3 Configuring Servers Behi nd Port Forwarding (Example) Let's say you want to assign po rts 21-2 5 to one FTP , T elnet and SMTP server ( A in the example), port 80 to another ( B in the example) and assign a default server IP address of 192.
Chapter 9 Network Add ress Translat ion (NAT) P-660HWP-Dx U ser’s Guide 42 Figure 88 NA T Port Forwarding The following table describes th e fields in this screen. 9.6.1 Port Forwarding Rule Edit T o edit a port forwarding rule, clic k the rule’ s edit icon ( ) in the Port Forwarding screen to display the screen shown next.
Chapter 9 Network Address Tran slation (NAT) P-660HWP-Dx User’s Guide 43 Figure 89 Port Forwarding Rule Setup The following table describes th e fields in this screen. 9.7 Address Mapping " The Address Mapping screen is available only when you select Full Feature in the NA T > General screen.
Chapter 9 Network Add ress Translat ion (NAT) P-660HWP-Dx U ser’s Guide 44 rules. For example, if you have already configur ed rules 1 to 6 in your current set and now you configure rule number 9. In the set summary scr een, the new rule will be rule 7, not 9.
Chapter 9 Network Address Tran slation (NAT) P-660HWP-Dx User’s Guide 45 9.7.1 Address Mapping Rule Edit T o edit an address mapping rule, click the rule’ s edit icon in the Address Mapping screen to display the screen shown next. Figure 91 Edit Address Mapping Rule The following table describes th e fields in this screen.
Chapter 9 Network Add ress Translat ion (NAT) P-660HWP-Dx U ser’s Guide 46 Apply Click Apply to save your change s to the P-6 60HWP-Dx. Cancel Click Cancel to b egin configuring this screen afresh.
35 P ART IV Security Firewalls (157) Firewall Configuration (169) Content Filtering (191) Certificates (195).
36.
P-660HWP-Dx User’s Guide 35 C HAPTER 10 Firewalls This chapter gives some backgr ound information on firewalls and introduces the P-660HWP- Dx firewall. 10.1 Firewall Overview Originally , the term firewall referred to a construction techni que designed to prevent the spread of fire from one room to another .
Chapter 10 Firewalls P-660HWP-Dx U ser’s Guide 36 10.2.2 Application-level Firewalls Application-level firewalls restrict access by serv ing as proxies for e xternal servers. Since they use programs written for specific Internet servic es, such as HTTP, FTP and tel net, they can evaluate network packets for valid ap plication-sp ecific data.
Chapter 10 Firewalls P-660HWP-Dx User’s Guide 37 10.3.1 Denial of Service Att acks Figure 92 Firewall Application 10.4 Denial of Service Denials of Service (DoS) attacks are aimed at devices and networks w ith a connection to the Internet.
Chapter 10 Firewalls P-660HWP-Dx U ser’s Guide 38 10.4.2 T ypes of DoS Att acks There are four types of DoS attacks: 1 Those that exploit bugs in a TCP/IP implementation. 2 Those that exploit weaknesses in the TCP/IP specification. 3 Brute-force attacks that flood a network with useless data.
Chapter 10 Firewalls P-660HWP-Dx User’s Guide 39 Figure 94 SYN Flood •I n a LAND Attack , hackers flood SYN packets into the network with a spoofed source IP address of the targeted system .
Chapter 10 Firewalls P-660HWP-Dx U ser’s Guide 40 10.4.2.1 ICMP V ulnerability ICMP is an error -reporting protocol that works in concert with IP . The following ICMP types trigger an alert: 10.4.2.2 Illegal Commands (NetBIOS and SMTP) The only legal NetBIOS commands are the following - all others are illegal.
Chapter 10 Firewalls P-660HWP-Dx User’s Guide 41 are allowed in. The P-660HWP-Dx uses stateful packet inspection to protect the private LAN from hackers and vandals on the Internet.
Chapter 10 Firewalls P-660HWP-Dx U ser’s Guide 42 6 Later , an inbound packet reac hes the interface . This packet is part of the connection previously established with the outbound packet. The inbound packet is ev aluated against the inbound access list, and is permitted because of the temporary access list entry previously crea ted.
Chapter 10 Firewalls P-660HWP-Dx User’s Guide 43 If an initiation packet originates on the LAN, this means that someone is trying to make a connection from the LAN to the In ternet. Assuming that this is an acceptable part of the security policy (as is the case w ith the default policy), the connection will be allowed.
Chapter 10 Firewalls P-660HWP-Dx U ser’s Guide 44 10.6 Guidelines for Enhancing Security with Y our Firewall • Change the default password via CLI (Co mmand Line Interpreter) or web configurator. • Limit who can telnet into your router . • Don't enable any local service (such as SN MP or NTP) that you don't use.
Chapter 10 Firewalls P-660HWP-Dx User’s Guide 45 • Always shred confidential inform ation, particularly about your computer , before throwing it away . Some hackers dig through the trash of c ompanies or indivi duals for information that might help them in an attack.
Chapter 10 Firewalls P-660HWP-Dx U ser’s Guide 46 • T o selectively b lock/allow inbound or outb ound traffic between inside host/networks and outside host/networks. Remember that filters can not distinguish traf fic originating from an inside host or an ou tside host by IP address.
P-660HWP-Dx User’s Guide 47 C HAPTER 11 Firewall Configuration This chapter shows you how to enable and configur e the P-660HWP-Dx firewall. 1 1 .1 Access Methods The web configurator is, by far , the most comp rehensive firewall configuration tool your P- 660HWP-Dx has to offer .
Chapter 11 Firewa ll Configuration P-660HWP-Dx U ser’s Guide 48 " If you configure firewall rules without a good understanding of how they work, you might inadvertently introduce security risk s to the firewall and to the protected network. Make sure you test your rules a fter you configure them.
Chapter 11 Firewall Configu ration P-660HWP-Dx User’s Guide 49 3 Is it possible to modify the rule to be more specific? For ex ample, if IRC is blocked for all users, will a rule that blocks just ce.
Chapter 11 Firewa ll Configuration P-660HWP-Dx U ser’s Guide 50 1 1.4.1 LAN to W AN Rules The default rule for LAN to W AN traf fic is that all users on the LAN are allowed non- restricted access to the W AN. When you config ure a LAN to W AN rule, you in essence want to limit some or all users from accessing cer tain services on the W A N.
Chapter 11 Firewall Configu ration P-660HWP-Dx User’s Guide 51 The following table describes the labels in this screen. 1 1 .6 Firewall Rules Summary " The ordering of your rules is very import ant as rules are applied in turn. Refer to Section 10.
Chapter 11 Firewa ll Configuration P-660HWP-Dx U ser’s Guide 52 Figure 98 Firewall Rules The following table describes the labels in this screen. T able 60 Firewall Rules LABEL DESCRIPTION Firewall Rules S torage S pace in Use This read-only bar shows how much of the P-660HWP-Dx's memory for recording firewall rules it is currently using.
Chapter 11 Firewall Configu ration P-660HWP-Dx User’s Guide 53 1 1.6.1 Configuring Firewall Rules Refer to Section 10.1 on page 35 for more information. In the Rules screen, select an index number and cl ick Add or click a rule’ s Edit icon to display this screen and refer to the following table for information on the labels.
Chapter 11 Firewa ll Configuration P-660HWP-Dx U ser’s Guide 54 Figure 99 Firewall: Edit Rule.
Chapter 11 Firewall Configu ration P-660HWP-Dx User’s Guide 55 The following table describes the labels in this screen. T able 61 Firewall: Edit Rule LABEL DESCRIPTION Activ e Select this option to enable th is firewall rule.
Chapter 11 Firewa ll Configuration P-660HWP-Dx U ser’s Guide 56 1 1.6.2 Customized Services Configure customized services and port numbers not predefined by th e P-660HWP-Dx. Fo r a comprehensive list of port numbers and services, visit the IANA (Internet Assigned Number Authority) website.
Chapter 11 Firewall Configu ration P-660HWP-Dx User’s Guide 57 Refer to Section 10.1 on page 35 for more information. Figure 101 Firewall: Configure Customized Services The following table describes the labels in this screen.
Chapter 11 Firewa ll Configuration P-660HWP-Dx U ser’s Guide 58 Figure 102 Firewall Example: Rules 3 In the Rules screen, select the index number after that you want to add the rule. For example, if you select “6”, your new rule b ecomes number 7 and the previous rule 7 (if there is one) becomes rule 8.
Chapter 11 Firewall Configu ration P-660HWP-Dx User’s Guide 59 Figure 104 Firewall Example: Edit Ru le: Destination Address 9 Use the Add >> and Remove buttons between A vailable Services and Selected Services list boxes to configure it as follows.
Chapter 11 Firewa ll Configuration P-660HWP-Dx U ser’s Guide 60 Figure 105 Firewall Example: Edit Rule : Select Customized Services On completing the configuration procedure for this Internet firewall rule, the Rules screen should look like the following.
Chapter 11 Firewall Configu ration P-660HWP-Dx User’s Guide 61 Figure 106 Firewall Example: Rules: MyService 1 1.8 Predefined Services The A vailable Services list box in the Edit Rule screen (see Section 1 1.6.1 on page 53 ) displays all predefined services that the P-660HWP-Dx already su pports.
Chapter 11 Firewa ll Configuration P-660HWP-Dx U ser’s Guide 62 HTTP(TCP:80) Hyper T ext Transfer Protoco l - a c lient/server protocol for the world wide web. HTTPS HTTPS is a secured http session often used in e-commerce. ICQ(UDP:4000) This is a popu lar Intern et chat program.
Chapter 11 Firewall Configu ration P-660HWP-Dx User’s Guide 63 1 1 .9 Anti-Probing If an outside user attempts to probe an unsu pported port on your P-66 0HWP-Dx, an ICMP response packet is automatica lly returned. This allows the outside user to know the P- 660HWP-Dx exists.
Chapter 11 Firewa ll Configuration P-660HWP-Dx U ser’s Guide 64 The following table describes the labels in this screen. 1 1 .10 DoS Thresholds For DoS attacks, the P-660HWP-Dx uses thresholds to determine when to drop sessions that do not become fully established.
Chapter 11 Firewall Configu ration P-660HWP-Dx User’s Guide 65 1 1.10.2 Half-Open Sessions An unusually high number of half-open sessions (either an absolute number or measured as the arrival rate) could indicate that a Denial of Service a ttack is occurring.
Chapter 11 Firewa ll Configuration P-660HWP-Dx U ser’s Guide 66 Figure 108 Firewall: Threshold The following table describes the labels in this screen.
Chapter 11 Firewall Configu ration P-660HWP-Dx User’s Guide 67 Maximum Incomplete High This is the number of e xisting half-op en sessions that causes the firewall to st art deleting half-open sessi ons.
Chapter 11 Firewa ll Configuration P-660HWP-Dx U ser’s Guide 68.
P-660HWP-Dx User’s Guide 69 C HAPTER 12 Content Filtering This chapter covers how to configure content filtering. 12.1 Content Filtering Overview Internet content filtering allows you to create and enforce Internet access policies tailored to your needs.
Chapter 12 Content Filtering P-660HWP-Dx U ser’s Guide 70 The following table describes the labels in this screen. 12.3 Configuring the Schedule T o set the days and times for the P-660H WP-Dx to perform content filtering, click Secu rity > Content Filter > Schedule .
Chapter 12 Con tent Filter ing P-660HWP-Dx User’s Guide 71 The following table describes the labels in this screen. 12.4 Configuring T rusted Computers T o exclude a range of users on the LAN from content filtering on your P -660HWP-Dx, click Security > Content Filter > Tr u s t e d .
Chapter 12 Content Filtering P-660HWP-Dx U ser’s Guide 72.
P-660HWP-Dx User’s Guide 35 C HAPTER 13 Certificates This chapter gives background in formation about public-key certificates and explains how to use them. 13.1 Certificates Overview The P-660HWP-Dx can use certificates (also called digital IDs) to authe nticate users.
Chapter 13 Certificates P-660HWP-Dx U ser’s Guide 36 Certification authorities maintain directory ser vers with databases of valid and revoked certificates. A directory of certificates that have been revoked before the scheduled exp iration is called a CRL (Certificate Revocation List).
Chapter 13 Certificates P-660HWP-Dx User’s Guide 37 Figure 1 13 Certificate Det ails 4 Use a secure method to verify that the certificate owner ha s the same information in the Thumbprint Algorithm and Thumbprint fields. The secure method may very based on your situation.
Chapter 13 Certificates P-660HWP-Dx U ser’s Guide 38 13.5 My Certificates Cli ck Security > Certificates > My Certificates to open the My Certificates screen. This is the P-660HWP-Dx’ s summary list of certificates and certification requests.
Chapter 13 Certificates P-660HWP-Dx User’s Guide 39 13.6 My Certificates > Det ails Click Security > Certificates > My Certificates to open the My Certifica tes screen (se e Figure 1 15 on page 38 ). Click the edit icon to open the My Certificate Details screen.
Chapter 13 Certificates P-660HWP-Dx U ser’s Guide 40 T able 71 Security > Certificates > My Certificates > Edit The following table describes the labels in this screen. T able 72 Security > Certificates > My Certificates > Details LABEL DESCRIPTION Certificate Name This field displa ys the identifying name of this certificate.
Chapter 13 Certificates P-660HWP-Dx User’s Guide 41 T ype This field displays general informa ti on about the certificat e. CA-signed means that a Certification Authority signed the certificate . Self-signed means that the certificate’s owner signed the certificate (not a certification authority).
Chapter 13 Certificates P-660HWP-Dx U ser’s Guide 42 13.7 My Certificates > Create Click Security > Certificates > My Certificates > Create to open the My Certificate Cr eate screen.
Chapter 13 Certificates P-660HWP-Dx User’s Guide 43 The following table describes the labels in this screen. T able 73 Security > Certificates > My Certificates > Create LABEL DESCRIPTION Certificate Name T ype up to 31 ASC II characters (not including spaces) to identify this certificate.
Chapter 13 Certificates P-660HWP-Dx U ser’s Guide 44 After you click Apply in the My Certificate Create screen, you see a screen that tells you the P-660HWP-Dx is generating the self-signe d certificate or certification request.
Chapter 13 Certificates P-660HWP-Dx User’s Guide 45 • Y ou can only import a certificate that matc hes a corresponding certification request that was generated by the P-660HWP-Dx (the certification request contains the private ke y). The certificate you import replaces the co rresponding request in the My Certificates screen.
Chapter 13 Certificates P-660HWP-Dx U ser’s Guide 46 13.9 T rusted CAs Click Security > Certificates > T rusted CAs to open the T rusted CAs screen. This screen displays a summary list of certificates of the ce rtification authorities that you have set the P- 660HWP-Dx to accept as trusted.
Chapter 13 Certificates P-660HWP-Dx User’s Guide 47 13.10 T rusted CA Det ails Click Security > Certificates > T rusted CAs to open the T rusted CAs screen.
Chapter 13 Certificates P-660HWP-Dx U ser’s Guide 48 The following table describes the labels in this screen. T able 76 Security > Certificates > T rusted CAs > Details LABEL DESCRIPTION Certificate Name This field displays the id entifying na me of this certificate .
Chapter 13 Certificates P-660HWP-Dx User’s Guide 49 13.1 1 T rusted CA > Import Click Security > Certificates > T rusted CAs to open the T rusted CAs screen and the n click Import to open the T rusted CA Import screen.
Chapter 13 Certificates P-660HWP-Dx U ser’s Guide 50 Figure 120 Security > Certif icates > Trusted CAs > Impor t The following table describes the labels in this screen. 13.12 T rusted Remote Host s Click Security > Certificates > T rusted Remote Hosts to open the T rusted Remote Hosts screen.
Chapter 13 Certificates P-660HWP-Dx User’s Guide 51 The following table describes the labels in this screen. 13.13 T rusted Remote Host s > Import Click Security > Certificates > T rusted Remote Hosts to open the T rusted Remote Hosts screen and then click Import to open the T rusted Remote Host Import screen.
Chapter 13 Certificates P-660HWP-Dx U ser’s Guide 52 " The trusted remote host cert ificate must be a self-signed certificate; and you must remove any sp aces from it s filename before you can import it. Figure 122 Security > Certificates > Tr usted Remote Hosts > Import The following table describes the labels in this screen.
Chapter 13 Certificates P-660HWP-Dx User’s Guide 53 Figure 123 Security > Certificates > Trusted Remote Hosts > Details The following table describes the labels in this screen.
Chapter 13 Certificates P-660HWP-Dx U ser’s Guide 54 Subject This field displays info rmation th at i dentifies the owner of the certificate, such as Common Name (CN), Organizationa l Unit (OU), Organization (O) and Country (C).
Chapter 13 Certificates P-660HWP-Dx User’s Guide 55 13.15 Directory Servers Click Security > Certificates > Directory Servers to open the Directory Servers screen. This screen display s a summary list of directory servers (tha t contain lists of valid and revoked certificates) that have been saved into the P-660HWP-Dx.
Chapter 13 Certificates P-660HWP-Dx U ser’s Guide 56 Figure 125 Security > Certificates > Directory Serv er > Add The following table describes the labels in this screen.
35 P ART V Advanced S tatic Route (219) Bandwidth Management (2 23) Dynamic DNS Setup (235) Remote Management Configurat ion (239) Universal Plug-and-P lay (UPnP) (251).
36.
P-660HWP-Dx User’s Guide 35 C HAPTER 14 Static Route This chapter shows you how to c onfigure static routes for your P-660H WP-Dx. 14.1 S t atic Route Each remote node specifies only the network to which the gateway is di rectly connected, and the P-660HWP-Dx has no kn owledge of the ne tworks beyond.
Chapter 14 Static Rou te P-660HWP-Dx U ser’s Guide 36 Figure 127 S tatic Route The following table describes the labels in this screen. 14.2.1 S tatic Route Edit Select a static route index numb er and click Edit ( ). The screen shown next appears. Use this screen to configure the requir ed information for a static route.
Chapter 14 Static Route P-660HWP-Dx User’s Guide 37 Figure 128 S tatic Route Edit The following table describes the labels in this screen. T able 84 Static Ro ute Edit LABEL DESCRIPTION Activ e This field allows you to activa te/deactivate this static route.
Chapter 14 Static Rou te P-660HWP-Dx U ser’s Guide 38.
P-660HWP-Dx User’s Guide 35 C HAPTER 15 Bandwidth Management This chapter contains information about configuri ng bandwidth management, editing rules and viewing the P-660HWP-Dx ’ s bandwidth management logs.
Chapter 15 Bandwid th Manageme nt P-660HWP-Dx U ser’s Guide 36 Figure 129 Subnet-based Ba ndwidt h Management Example 15.4 Application and Subnet-based Bandwid th Management Y ou could also create bandwidth classes based on a combination of a subnet and an application.
Chapter 15 Bandwidth Management P-660HWP-Dx User’s Guide 37 15.5.2 Fairness-based Scheduler The P-660HWP-Dx divides bandwidth equall y among bandwidth cl asses when using the fairness-based scheduler; thus preventing one ba ndwidth class from using all of the interface’ s bandwidth.
Chapter 15 Bandwid th Manageme nt P-660HWP-Dx U ser’s Guide 38 15.6.2 Maximize Ba ndwid th Usage Exam ple Here is an example of a P-660HWP-Dx that has maximize bandwidth usage enabled on an interface. The following table shows each ba nd width class’ s bandwidth budget.
Chapter 15 Bandwidth Management P-660HWP-Dx User’s Guide 39 15.6.2.2 Fairness-based Allot ment of Unused and Unbudgeted Bandwid th The following table shows the amount of bandwidth that each class gets. Suppose that all of the classes except for th e administration class need more bandwidth.
Chapter 15 Bandwid th Manageme nt P-660HWP-Dx U ser’s Guide 40 If you use V oIP and NetMeeting at the same time, the device allocates up to 500 Kbps of bandwidth to each of them befo re it allocates any bandwidth to FTP . As a result, FTP can only use bandwidth when V oIP and NetMeeting do not use all of their allocated bandwidth .
Chapter 15 Bandwidth Management P-660HWP-Dx User’s Guide 41 15.9 Bandwid th Management Rule Setup Y ou must use the Bandwidth Management Summary scr een to enable bandwi dth management on an interface before yo u can configure rules for that interface.
Chapter 15 Bandwid th Manageme nt P-660HWP-Dx U ser’s Guide 42 15.10 DiffServ DiffServ is a class of service (CoS) mode l that ma rks packets so that they receive specific per- hop treatment at DiffServ-compliant network de vices along the route based on the application types and traf fic flow .
Chapter 15 Bandwidth Management P-660HWP-Dx User’s Guide 43 PHB consists of two types of services: EF (Expedited Forwarding) and AF (Assured Forwarding). EF has higher p riority . EF guaran tees ser v ices with minimal loss and delay . AF has four sub-classes, each with three levels of importance (drop precedence).
Chapter 15 Bandwid th Manageme nt P-660HWP-Dx U ser’s Guide 44 The following table describes the labels in this screen. T able 94 Bandwidth Management Rule Configura t ion LABEL DESCRIPTION Rule Configuration Activ e Select this check box to have the P-660 HWP-Dx apply this ba ndwidth management rule.
Chapter 15 Bandwidth Management P-660HWP-Dx User’s Guide 45 Destination Subnet Netmask Enter the destination subnet mask. Thi s field is N/A if you do not specify a Destination Addre ss . Refer to the appendices fo r more information on IP subnetting.
Chapter 15 Bandwid th Manageme nt P-660HWP-Dx U ser’s Guide 46 15.1 1 Bandwid th Monitor T o view the P-660HWP-Dx’ s bandwidth usage and allotme nts, click Advanced > Bandwidth MGMT > Mon itor . The screen appears as shown. Selec t an interface from the drop-down list box to view the bandwidth usage of its bandwidth rules .
P-660HWP-Dx User’s Guide 35 C HAPTER 16 Dynamic DNS Setup This chapter discusses how to configure your P-660HWP-Dx to use D ynamic DNS. 16.1 Dynamic DNS Overview Dynamic DNS allows you to update your curre nt dynamic IP address with one or many dynamic DNS services so that anyone can c ont act you (in NetMeeting, CU-SeeMe, etc.
Chapter 16 Dy namic DNS Se tup P-660HWP-Dx U ser’s Guide 36 Figure 135 Dynamic DNS The following table describes th e fields in this screen. T able 97 Dynamic DNS LABEL DESCRIPTION Dynamic DNS Setup Active Dynamic DNS Select this check box to use dy namic DNS.
Chapter 16 Dynamic DNS Setup P-660HWP-Dx User’s Guide 37 Dynamic DNS server auto detect IP Address Select this option only whe n there are one or more NA T routers between the P- 660HWP-Dx and the DDNS server. Th is feature has the DDNS server automatically detect and use t he IP address of the NA T rout er that has a public IP address.
Chapter 16 Dy namic DNS Se tup P-660HWP-Dx U ser’s Guide 38.
P-660HWP-Dx User’s Guide 35 C HAPTER 17 Remote Management Configuration This chapter provides information on config uring remote management. 17.1 Remote Management Overview Remote management allows you to determ ine which services/protocols can access which P- 660HWP-Dx interface (if any) from which computers.
Chapter 17 Remote Management Configuration P-660HWP-Dx U ser’s Guide 36 17.1.1 Remote Management Limit ations Remote management over LAN or W AN will not work when: • Y ou have disabled that service in one of the remote management screens. • The IP address in the Secured Client IP field does not match th e client IP address.
Chapter 17 Remote Ma nagement Configuration P-660HWP-Dx User’s Guide 37 The following table describes the labels in this screen. 17.3 T elnet Y ou can configure your P-660HWP-Dx for remote T elnet access as shown next. The administrator uses T elnet from a computer on a remote netw ork to access the P-660HWP-Dx.
Chapter 17 Remote Management Configuration P-660HWP-Dx U ser’s Guide 38 17.4 Configuring T elnet Click Advanced > Remote MGMT > Te l n e t tab to display the screen as shown. Figure 138 Remote Mana gement: T elnet The following table describes the labels in this screen.
Chapter 17 Remote Ma nagement Configuration P-660HWP-Dx User’s Guide 39 Figure 139 Remote Mana gement: FTP The following table describes the labels in this screen. 17.6 SNMP Simple Network Management Protocol (SNM P) i s a protocol used for ex changing management information b e tween network devices.
Chapter 17 Remote Management Configuration P-660HWP-Dx U ser’s Guide 40 Figure 140 SNMP Managemen t Model An SNMP managed network consis ts of two main types of comp onent: agen ts and a manager . An agent is a managemen t software module that resid es in a managed device (the P-660HWP- Dx).
Chapter 17 Remote Ma nagement Configuration P-660HWP-Dx User’s Guide 41 17.6.2 SNMP T raps The P-660HWP-Dx will send traps to the SNMP manager when any one of the following events occurs: 17.6.3 Configuring SNMP T o change your P-660HWP-Dx’ s SNMP settings, click Advance d > Remote MGMT > SNMP .
Chapter 17 Remote Management Configuration P-660HWP-Dx U ser’s Guide 42 The following table describes the labels in this screen. 17.7 Configuring DNS Use DNS (Domain Name System) to map a domain name to its corresponding IP address and vice versa. Refer to the chapter on LAN for background information.
Chapter 17 Remote Ma nagement Configuration P-660HWP-Dx User’s Guide 43 Figure 142 Remote Mana gement: DNS The following table describes the labels in this screen. 17.8 Configuring ICMP T o change your P-660HWP-Dx’ s security settings, click Ad vanced > Remote MGMT > ICMP .
Chapter 17 Remote Management Configuration P-660HWP-Dx U ser’s Guide 44 Figure 143 Remote Mana gement: ICMP The following table describes the labels in this screen.
Chapter 17 Remote Ma nagement Configuration P-660HWP-Dx User’s Guide 45 Follow the procedure below to co nfigure your P-660HWP-Dx to be managed by CNM Access. See the Command Interpreter appendix for information on the command structure and how to access the CLI (Command Line Interface) on the P-660HWP-Dx.
Chapter 17 Remote Management Configuration P-660HWP-Dx U ser’s Guide 46.
P-660HWP-Dx User’s Guide 47 C HAPTER 18 Universal Plug-and-Play (UPnP) This chapter introduces the UPnP feature in the web configura tor . 18.1 Introducing Universal Plug and Play Universal Plug and Play (UPnP) is a distributed, open networking standard that uses TCP/IP for simple peer-to-peer network connectiv ity between devices.
Chapter 18 Universal Plug-and-Play (UPnP) P-660HWP-Dx U ser’s Guide 48 When a UPnP device joins a network, it announ ces its presence with a multicast mess age. For security reasons, the P-660HWP-Dx allows multicas t messages only on the LAN. All UPnP-enabled devices may communicate freely with eac h other without additional configuration.
Chapter 18 Universal Plug-and-Play (UPnP) P-660HWP-Dx User’s Guide 49 18.3 Inst alling UPnP in Windows Example This section shows ho w to install UPnP in W indows Me and W indows XP . 18.3.1 Inst alling UPnP in Windows Me Follow the steps below to inst all the UPnP in W indows Me.
Chapter 18 Universal Plug-and-Play (UPnP) P-660HWP-Dx U ser’s Guide 50 Figure 147 Add/Remove Programs: Wind ows Setup: Communication: Component s 4 Click OK to go back to the Add/Re move Programs Pr oper ties window and click Next . 5 Restart the computer when prompted.
Chapter 18 Universal Plug-and-Play (UPnP) P-660HWP-Dx User’s Guide 51 Figure 149 Windows Optiona l Networking Component s Wizard 5 In the Networking Services window , select the Universal Plug and Play check box. Figure 150 Networking Services 6 Click OK to go back to the W indows Optional Networking Component W izard window and click Next .
Chapter 18 Universal Plug-and-Play (UPnP) P-660HWP-Dx U ser’s Guide 52 Make sure the computer is co nnected to a LAN port of the P-660HWP-Dx. T urn on your computer and the P-660HWP-Dx. 18.4.1 Auto-discover Y our UPnP-enabled Network Device 1 Click start and Control Panel .
Chapter 18 Universal Plug-and-Play (UPnP) P-660HWP-Dx User’s Guide 53 Figure 152 Internet Connection Properties 4 Y ou may edit or delete the port map pings or click Add to manually add port mappings.
Chapter 18 Universal Plug-and-Play (UPnP) P-660HWP-Dx U ser’s Guide 54 Figure 154 Internet Connection Proper ties: Adva nced Settings: Add " When the UPnP-enabled device is disconne cted from your computer , all port mappings will be deleted automatically .
Chapter 18 Universal Plug-and-Play (UPnP) P-660HWP-Dx User’s Guide 55 Figure 156 Internet Connection S tatus 18.4.2 We b Configurator Easy Access W ith UPnP , you can access the web-based configurat or on the P-660HWP-Dx without finding out the IP address of the P-660HWP-Dx first.
Chapter 18 Universal Plug-and-Play (UPnP) P-660HWP-Dx U ser’s Guide 56 Figure 157 Network Connections 4 An icon with the description for e ach UPnP-enabled device disp lays under Local Network . 5 Right-click on the icon for your P-660HWP-Dx and sel ect Invoke .
Chapter 18 Universal Plug-and-Play (UPnP) P-660HWP-Dx User’s Guide 57 Figure 158 Network Connections: My Network Places 6 Right-click on the icon for your P-660H WP-Dx and select Properties . A properties window displays with basic in formation about the P-660HWP-Dx.
Chapter 18 Universal Plug-and-Play (UPnP) P-660HWP-Dx U ser’s Guide 58.
35 P ART VI Maintenance and T roubleshooting System (265) Logs (271) T ools (289) Diagnostic (295) T roubleshooting (297).
36.
P-660HWP-Dx User’s Guide 35 C HAPTER 19 System Use this screen to configure the P- 660HWP-Dx’ s time and date settings. 19.1 General Setup 19.1.1 General Setup and System Name General Setup contains administrative and system-related information. System Name is for identification purposes.
Chapter 19 System P-660HWP-Dx U ser’s Guide 36 Figure 160 System General Setu p The following table describes the labels in this screen. T able 107 System G eneral Setu p LABEL DESCRIPTION General Setup System Name Choose a descriptive name for identificatio n pu rposes.
Chapter 19 System P-660HWP-Dx User’s Guide 37 19.2 T ime Setting T o change yo ur P-660HWP-Dx’ s time and date, clic k Maintenance > System > T ime Setting . The screen appears as shown. Use this screen to configure the P-660HWP-Dx’ s time based on your local time zone.
Chapter 19 System P-660HWP-Dx U ser’s Guide 38 The following table describes th e fields in this screen. T able 108 System Time Setting LABEL DESCRIPTION Current T ime and Date Current T ime This field displays the time of your P-660HWP-Dx. Each time you reload this page, the P- 660HWP-Dx synchronizes the time with the time server .
Chapter 19 System P-660HWP-Dx User’s Guide 39 St a r t D a t e Con figure the day and time when Dayli ght Saving Time st arts if you selected Enable Daylight Saving . The o' clock field uses the 24 ho ur format. Here are a couple of examples: Daylight Saving T ime start s in most parts of the United St ate s on the first Sund ay of April.
Chapter 19 System P-660HWP-Dx U ser’s Guide 40.
P-660HWP-Dx User’s Guide 35 C HAPTER 20 Logs This chapter contains informa tion about configuring general log settings and viewing the P- 660HWP-Dx’ s logs.
Chapter 20 Logs P-660HWP-Dx U ser’s Guide 36 Figure 162 Vi ew Log The following table describes th e fields in this screen. 20.3 Configuring Log Settings Use the Log Settings screen to configure to .
Chapter 20 Lo gs P-660HWP-Dx User’s Guide 37 Figure 163 Log Settings The following table describes the fields in this screen. T able 1 10 Log Settin gs LABEL DESCRIPTION E-mail Log Settings Mail Server Enter the server name or the IP address of the mail server for the e-mail addresses specified below .
Chapter 20 Logs P-660HWP-Dx U ser’s Guide 38 20.3.1 Example E-mail Log An "End of Log" message displays for each ma il in which a complete log has been sent. The following is an example of a log sent by e-mail. • Y ou may edit the subject title.
Chapter 20 Lo gs P-660HWP-Dx User’s Guide 39 Figure 164 E-mail Log Example 20.4 Log Descriptions This section provides descriptio ns of example log messages. Subject: Firewall Alert From xxxxx Date: Fri, 07 Apr 2000 10:05:42 From: user@zyxel.com To: user@zyxel.
Chapter 20 Logs P-660HWP-Dx U ser’s Guide 40 Starting Connectivity Monitor S tarting Connectivity Monitor . Time initialized by Daytime Server The router got the time and da te from the Daytime serve r . Time initialized by Time server The router got the time and date from the time server .
Chapter 20 Lo gs P-660HWP-Dx User’s Guide 41 Triangle route packet forwarded: [TCP | UDP | IGMP | ESP | GRE | OSPF] The firewall allowe d a triangle route sessi on to pass through. Packet without a NAT table entry blocked: [TCP | UDP | IGMP | ESP | GRE | OSPF] The router blocked a packet that didn't h ave a corresponding NA T table entry .
Chapter 20 Logs P-660HWP-Dx U ser’s Guide 42 T able 1 16 ICMP Logs LOG MESSAGE DESCRIPTION Firewall default policy: ICMP <Packet Direction>, <type:%d>, <code:%d> ICMP access matched the default pol icy and was blocked or forwarded according to the user's setting.
Chapter 20 Lo gs P-660HWP-Dx User’s Guide 43 T able 1 19 UPnP Logs LOG MESSAGE DESCRIPTION UPnP pass through Firewall UPnP packets can p ass throu gh the firewall . T able 120 Content Filtering Logs LOG MESSAGE DESCRIPTION %s: Keyword blocking The conte nt of a requested web page matched a user defined keyword.
Chapter 20 Logs P-660HWP-Dx U ser’s Guide 44 T able 121 Attack Logs LOG MESSAGE DESCRIPTION attack [TCP | UDP | IGMP | ESP | GRE | OSPF] The firewall detected a TCP/ UDP/IGMP/ESP/GR E/OSPF attack. attack ICMP (type:%d, code:%d) The firewall detected an ICMP attack.
Chapter 20 Lo gs P-660HWP-Dx User’s Guide 45 Rule <%d> idle time out, disconnect The router droppe d a connection that had outbound tra ffic and no inbound traffic for a certain time perio d. Y ou can use the "ipsec timer chk_conn" CI command to set the ti me period.
Chapter 20 Logs P-660HWP-Dx U ser’s Guide 46 Recv <packet> IKE uses ISAKMP to transmit dat a. Each ISAKMP packet contains many different types of payloads. All of them show in the LOG . Refer to RFC2408 – ISAKMP for a list of all ISAKMP payload types.
Chapter 20 Lo gs P-660HWP-Dx User’s Guide 47 Rule [%d] Phase 1 authentication method mismatch The listed rule’s IKE phase 1 authentication metho d did not match between the router and the peer. Rule [%d] Phase 1 key group mismatch The listed rule’s IKE phase 1 key group did not match between the router a nd the peer.
Chapter 20 Logs P-660HWP-Dx U ser’s Guide 48 T able 124 PKI Logs LOG MESSAGE DESCRIPTION Enrollment successful The SCEP online certificate enrollment was successful. The Destination field records the certific ation autho rity server IP address and port.
Chapter 20 Lo gs P-660HWP-Dx User’s Guide 49 T able 125 Certificate Path Verification Failure Reason Codes CODE DESCRIPTION 1 Algorithm mismatch between the cert ificate and the search constraints. 2 Key usage mismatch between the cert ificate and the search co nstraints.
Chapter 20 Logs P-660HWP-Dx U ser’s Guide 50 T able 127 ICMP Notes TYPE CODE DESCRIPTION 0 Echo Reply 0 Echo reply message 3 Destination Unreachable 0 Net unreachable 1 Host unreachable 2 Protocol u.
Chapter 20 Lo gs P-660HWP-Dx User’s Guide 51 The following table shows RFC-2408 ISAKMP payload types that the log displays. Please refer to the RFC for detailed information on each type.
Chapter 20 Logs P-660HWP-Dx U ser’s Guide 52.
P-660HWP-Dx User’s Guide 35 C HAPTER 21 Tools This chapter describes how to up load new firmware, man a ge configuration and restart your P- 660HWP-Dx. 21.1 Firmware Upgrade Find firmware at www .zyxel.com in a file that (usually) uses the system model name with a .
Chapter 21 Tools P-660HWP-Dx U ser’s Guide 36 1 Do NOT turn off the P-660HWP-Dx while firmware upload is in p rogress! After you see the Firmware Upload in Pr ogress screen, wait two minutes before logging into the P-660HWP-Dx again.
Chapter 21 Tools P-660HWP-Dx User’s Guide 37 Figure 168 Error Message 21.2 Configuration Screen Use this screen to manage your the co nfiguration settings o n your de vice. 21.2.1 Backup Configuration Click Maintenance > T ools > Configuration .
Chapter 21 Tools P-660HWP-Dx U ser’s Guide 38 21.2.2 Restore Configuration Restore configuration allows you to upload a new or previously saved configuration file from your computer to your P-660HWP-Dx.
Chapter 21 Tools P-660HWP-Dx User’s Guide 39 Figure 171 T e mporarily Disconnected If you uploaded the default co nfiguration file you may ne ed to change the IP address of your computer to be in the sam e subnet as that of the default P-660HWP-Dx IP address (192.
Chapter 21 Tools P-660HWP-Dx U ser’s Guide 40.
P-660HWP-Dx User’s Guide 41 C HAPTER 22 Diagnostic These read-only screens display information to help you identify problems with the P- 660HWP-Dx. 22.1 General Diagnostic Click Maintenance > Diagnostic to open the screen shown next. Figure 174 Diagnostic: General The following table describes th e fields in this screen.
Chapter 22 Diagnostic P-660HWP-Dx U ser’s Guide 42 22.2 DSL Line Diagnostic Click Maintenance > Diagnostic > DSL Line to open the screen shown next .
P-660HWP-Dx User’s Guide 35 C HAPTER 23 Troubleshooting This chapter offers some sugg estions to solve problems you might encounter . The potential problems are divided into the following categories. • Power , Hardware Connections, and LEDs • P-660HWP-Dx Access and Login • Internet Access • Powerline Issues 23.
Chapter 23 Trou bleshooting P-660HWP-Dx U ser’s Guide 36 23.2 P-660HWP-Dx Access and Login V I forgot the IP address for the P-660HWP-Dx . 1 The default IP address is 192.
Chapter 23 Trou bleshooting P-660HWP-Dx User’s Guide 37 5 Reset the device to its factory defaults, and try to access the P-660HWP-Dx with the default IP address. See Section 2.3 on page 46 . 6 If the problem continues, contact the network administrator or vendor , or try one of the advanced suggestio ns.
Chapter 23 Trou bleshooting P-660HWP-Dx U ser’s Guide 38 1 Check the hardware connections , and make su re the LEDs are be having as expected. See the Quick S tart Guide and Section 1.4 on page 37 . 2 If your ISP gave you Internet connection information, make sure you entered it correctly in the Network > WA N > Internet Connection screen.
Chapter 23 Trou bleshooting P-660HWP-Dx User’s Guide 39 Advanced Suggestions • Check the settings for ba ndwidth management. If it is disab led, you might consider activating it. If it is enab led, you might consider changing the allocations. 23.4 Powerline Issues V I cannot st art my powerline device.
Chapter 23 Trou bleshooting P-660HWP-Dx U ser’s Guide 40 4 A void wiring that is old, low quality or with a long wiring path, as this may affect the quality of your powerline signal.
35 P ART VII Appendices and Index Product Specifications and W all Mounting (305) W ireless LANs (31 1) Internal SP TGEN (325) Setting up Y our Computer ’ s IP Address (341) IP Subnetting (357) Comm.
36.
P-660HWP-Dx User’s Guide 35 A PPENDIX A Product S pecifications and W all Mounting Product S pecifications The following tables summarize the P-660HWP -Dx’ s hardware and firmware features.
Appendix A Product Specifications and Wa ll Mounting P-660HWP-Dx U ser’s Guide 36 Firmware Upgrade Downlo ad new firmware (when available) from the ZyXEL web site and use the web config urator , an FTP or a TFTP tool to put it on the P- 660HWP-Dx.
Appendix A Product Specifications and Wall Mounting P-660HWP-Dx User’s Guide 37 T able 137 Wireless Firmware Specifications Content Filter The P-660HWP-Dx blocks or allows access to web site s that you specify and blocks access to web sites with URLs tha t contain keywords that you specify .
Appendix A Product Specifications and Wa ll Mounting P-660HWP-Dx U ser’s Guide 38 The following list, which is not exhaustive, illustrates the standard s su pported in the P- 660HWP-Dx. Output Power Management Th is allows you to alter the level of power used by the P-660HW P-Dx.
Appendix A Product Specifications and Wall Mounting P-660HWP-Dx User’s Guide 39 W all-mounting Instructions Complete the following step s to hang your P-660HWP-Dx on a wall. " See the Hardware S pecifications table for the s ize of screws to use and how far ap art to place them.
Appendix A Product Specifications and Wa ll Mounting P-660HWP-Dx U ser’s Guide 40 Figure 176 W all-mounting Example The following are dimension s of an M4 tap screw and maso nry plug used for wall mounting.
P-660HWP-Dx User’s Guide 35 A PPENDIX B W ireless LANs Wireless LAN T opologies This section discusses ad-hoc and in frastructure w ireless LAN topologies. Ad-hoc Wireless LAN Configuration The simplest WLAN configuration is an inde pendent (Ad-hoc) WLAN that connects a se t of computers with wireless adapters (A, B, C).
Appendix B Wireless LANs P-660HWP-Dx U ser’s Guide 36 Figure 179 Basic Service Set ESS An Extended Service Set (ESS) consists of a series of overlappi ng BSSs, each containing an access point, with each access point connected together by a wired network.
Appendix B Wir eless LANs P-660HWP-Dx User’s Guide 37 Figure 180 Infrastructure WLAN Channel A channel is the radio frequency(ies) used by IEEE 802.1 1a/b/g wireless devices.
Appendix B Wireless LANs P-660HWP-Dx U ser’s Guide 38 Figure 181 RTS/ CT S When station A sends data to the AP , it might not know that the station B is already using the channel.
Appendix B Wir eless LANs P-660HWP-Dx User’s Guide 39 If the Fragmentation Threshold value is smaller than the RT S / C T S value (see previously) you set then the R TS (Request T o Send)/CTS (Clear to Send) handshake will never occur as data frames will be fragmen ted before they reach R TS/CTS size.
Appendix B Wireless LANs P-660HWP-Dx U ser’s Guide 40 W ireless security methods available on the P-66 0HWP-Dx are data encryption, wirele ss client authentication, restricting access by devi ce MAC address and hiding the P-660HWP-Dx identity .
Appendix B Wir eless LANs P-660HWP-Dx User’s Guide 41 Determines the network services available to authenticated users once they are connected to the network.
Appendix B Wireless LANs P-660HWP-Dx U ser’s Guide 42 For EAP-TLS authentication type, you must firs t hav e a wired connection to the network and obtain the certificate(s) from a certificate authorit y (CA).
Appendix B Wir eless LANs P-660HWP-Dx User’s Guide 43 Dynamic WEP Key Exchange The AP maps a unique ke y that is generated w ith the RADIUS server . This key expires when the wireless connection times out, disconnects or reauthentic ation times out.
Appendix B Wireless LANs P-660HWP-Dx U ser’s Guide 44 Encryption Both WP A and WP A2 improve data encryption by using T emporal Key Integrity Protocol (TKIP), Message Integrity Check (MIC) and IE EE 802.
Appendix B Wir eless LANs P-660HWP-Dx User’s Guide 45 Wireless Client WP A Supp licant s A wireless client supplicant is the software that runs on an operating system instructing the wireless client how to use WP A.
Appendix B Wireless LANs P-660HWP-Dx U ser’s Guide 46 4 The AP and wireless clients use the TKIP or AES encryption process to encrypt data exchanged between them.
Appendix B Wir eless LANs P-660HWP-Dx User’s Guide 47 Positioning the antennas properly increases the range and coverage area of a wireless LAN. Antenna Characteristics Frequency An antenna in the frequency of 2.4GHz (IEEE 802.11 b) or 5GHz(IEEE 802.
Appendix B Wireless LANs P-660HWP-Dx U ser’s Guide 48 For omni-directional antennas mounted on a table, desk, and so on, point the antenna up. For omni-directional antennas mounted on a wall or ceiling, point the antenn a down. For a single AP application, place omni-directional antennas as close to the center of the coverage area as possible.
P-660HWP-Dx User’s Guide 35 A PPENDIX C Internal SPTGEN This appendix introduces Internal SP TGEN. A ll menus shown in this appendix are example menus meant to show SP TGEN usage.
Appendix C Internal SPTG EN P-660HWP-Dx U ser’s Guide 36 " DO NOT alter or delete a ny field except parameters in the Input column. This appendix introduces Internal SP TGEN. A ll menus shown in this appendix are example menus meant to show SP TGEN usage.
Appendix C I nternal SPTG EN P-660HWP-Dx User’s Guide 37 Figure 187 Internal SPTGEN FTP Download Example " Y ou can rename your “ rom-t ” file when you save it to your computer but it must be named “ rom-t ” when you upload it to your P-660HWP-Dx.
Appendix C Internal SPTG EN P-660HWP-Dx U ser’s Guide 38 Example Internal SPTGEN Menus This section provides example Internal SP TGEN menus. T able 143 Abbreviations Used in the Example Intern al SP.
Appendix C I nternal SPTG EN P-660HWP-Dx User’s Guide 39 / Menu 3.2 TCP/IP and DHCP Ethernet Setup FIN FN PVA INPUT 30200001 = DHCP <0(None) | 1(Server) | 2(Relay)> = 0 30200002 = Client IP Pool Starting Address = 192.168.1.33 30200003 = Size of C lient IP Pool = 32 30200004 = Primary D NS Server = 0.
Appendix C Internal SPTG EN P-660HWP-Dx U ser’s Guide 40 30201008 = IP Alias #1 Incoming protocol filters Set 3 = 256 30201009 = IP Alias #1 Incoming protocol filters Set 4 = 256 30201010 = IP Alias.
Appendix C I nternal SPTG EN P-660HWP-Dx User’s Guide 41 40000001 = ISP <0(No) | 1(Yes)> = 1 40000002 = Active <0(No) | 1(Yes)> = 1 40000003 = ISP's Name = ChangeMe 40000004 = Encap.
Appendix C Internal SPTG EN P-660HWP-Dx U ser’s Guide 42 40000031= RIP Direction <0(None) | 1(Both) | 2(In Only) | 3(Out Only)> = 0 40000032= RIP Version <0(Rip-1) | 1(Rip-2B) |2(Rip-2M)> = 0 40000033= Nailed-up Connection <0(No) |1(Yes)> = 0 T able 146 Menu 4 Internet Access Setup (continued) T able 147 Menu 12 / Menu 12.
Appendix C I nternal SPTG EN P-660HWP-Dx User’s Guide 43 150000004 = SUA Server #2 Por t Start = 0 150000005 = SUA Server #2 Por t End = 0 150000006 = SUA Server #2 Loc al IP address = 0.
Appendix C Internal SPTG EN P-660HWP-Dx U ser’s Guide 44 150000038 = SUA Server #9 Pro tocol <0(All)|6(T CP)|17(U DP)> = 0 150000039 = SUA Server #9 Por t Start = 0 150000040 = SUA Server #9 Por t End = 0 150000041 = SUA Server #9 Loc al IP address = 0.
Appendix C I nternal SPTG EN P-660HWP-Dx User’s Guide 45 210101009 = IP Filter Set 1,Rule 1 Src Subnet Mask = 0 210101010 = IP Filter Set 1,Rule 1 Src Port = 0 210101011 = IP Filter Set 1,Rule 1 Src.
Appendix C Internal SPTG EN P-660HWP-Dx U ser’s Guide 46 FIN FN PVA INPUT 210201001 = IP Filter Set 2, Rule 1 Type <0(none)|2(TCP/ IP)> = 2 210201002 = IP Filter Set 2, Rule 1 Active <0(No)|1(Yes)> = 1 210201003 = IP Filter Set 2, Rule 1 Protocol = 6 210201004 = IP Filter Set 2, Rule 1 Dest IP address = 0.
Appendix C I nternal SPTG EN P-660HWP-Dx User’s Guide 47 210202009 = IP Filter Set 2, Rule 2 Src Subnet Mask = 0 210202010 = IP Filter Set 2,Rule 2 Src Port = 0 210202011 = IP Filter Set 2, Rule 2 S.
Appendix C Internal SPTG EN P-660HWP-Dx U ser’s Guide 48 230400002 = ReAuthentication Timer (in second) = 555 230400003 = Idle Timeout (in second) = 999 230400004 = Authentication Databases <0(Lo.
Appendix C I nternal SPTG EN P-660HWP-Dx User’s Guide 49 Command Examples The following are example Internal SP TGEN screens associated with the P-660HWP-Dx’ s command interpreter commands. T able 153 Command Examples FIN FN PV A INPUT /ci command (for annex a): wan adsl openc md FIN FN PVA INPUT 990000001 = ADSL OPMD <0(glite)|1(t1.
Appendix C Internal SPTG EN P-660HWP-Dx U ser’s Guide 50.
P-660HWP-Dx User’s Guide 35 A PPENDIX D Setting up Y our Computer ’ s IP Address All computers must have a 10M or 100M Et hernet adapter card and TCP/IP installed.
Appendix D Setting up Your Computer’s IP Address P-660HWP-Dx U ser’s Guide 36 Figure 189 WIndows 95/98 /Me: Networ k: Configura tion Inst alling Components The Network window Configuration tab displays a list of installed components. Y ou need a network adapter , the TCP/IP protocol and Client for Microso ft Networks.
Appendix D Setting up Your Computer’s IP Address P-660HWP-Dx User’s Guide 37 Configuring 1 In the Network window Configuration tab, select your network adapter's TCP/IP entry and click Properties 2 Click the IP Address tab. • If your IP address is dynamic, select Obtain an IP address automatically .
Appendix D Setting up Your Computer’s IP Address P-660HWP-Dx U ser’s Guide 38 Figure 191 Windows 95/98/Me : TCP/IP Pr operties: DNS Configuration 4 Click the Gateway tab. • If you do not know you r gateway’ s IP addr ess, remove previously installed gateways.
Appendix D Setting up Your Computer’s IP Address P-660HWP-Dx User’s Guide 39 Figure 192 Windows XP: S t art Menu 2 In the Control Panel , double-click Network Connections ( Network and Dial-up Connections in W indow s 2000/NT). Figure 193 Windows XP: Control Panel 3 Right-click Local Area Connection and then click Pr operties .
Appendix D Setting up Your Computer’s IP Address P-660HWP-Dx U ser’s Guide 40 Figure 194 Windows XP: Control Panel: Network Connections: Pro perties 4 Select Internet Protocol (TCP/IP) (under the Genera l tab in W in XP) and then click Properties .
Appendix D Setting up Your Computer’s IP Address P-660HWP-Dx User’s Guide 41 Figure 196 Windows XP: Internet Protocol (TCP/IP) Propert ies 6 If you do not know your gateway's IP ad dress, remove any previously installed gateways in the IP Settings tab and click OK .
Appendix D Setting up Your Computer’s IP Address P-660HWP-Dx U ser’s Guide 42 Figure 197 Windows XP: Advanced TCP/IP Properties 7 In the Internet Protocol TCP/IP Pr operties window (the General tab in W indows XP): • Click Obtain DNS server address automatically if yo u do not know your DNS server IP address(es).
Appendix D Setting up Your Computer’s IP Address P-660HWP-Dx User’s Guide 43 Figure 198 Windows XP: Internet Protocol (TCP/IP) Propert ies 8 Click OK to close the Internet Protocol (TCP/IP) Properties window . 9 Click Close ( OK in W indows 2000/NT) to close the Local Area Connection Properties window .
Appendix D Setting up Your Computer’s IP Address P-660HWP-Dx U ser’s Guide 44 Figure 199 Macintosh OS 8/9: Apple Menu 2 Select Ethernet built-in from the Connect via list. Figure 200 Macintosh O S 8/9: TC P/IP 3 For dynamically assigned settings, select Using DHCP Server from the Configure: list.
Appendix D Setting up Your Computer’s IP Address P-660HWP-Dx User’s Guide 45 • T ype your IP address in the IP Address box. • T ype your subnet mask in the Subnet mask box. • T ype the IP address of your P-660HWP-Dx in the Router address box.
Appendix D Setting up Your Computer’s IP Address P-660HWP-Dx U ser’s Guide 46 Figure 202 Macintosh O S X: Netw ork 4 For statically assigned settings, do the following: •F r o m t h e Configure box, select Manually . • T ype your IP address in the IP Address box.
Appendix D Setting up Your Computer’s IP Address P-660HWP-Dx User’s Guide 47 " Make sure you are logged in as the root administrator . Using the K Desktop Environment (KDE) Follow the steps below to configure your computer IP address using the KDE.
Appendix D Setting up Your Computer’s IP Address P-660HWP-Dx U ser’s Guide 48 • If you have a dynamic IP address click Automatically obtain IP address settings with and select dhcp from the drop down list.
Appendix D Setting up Your Computer’s IP Address P-660HWP-Dx User’s Guide 49 Figure 207 Red Hat 9.0: Dynamic IP Address Setting in ifconfig-eth0 • If you have a static IP address, enter static in t he BOOTPROTO= field. T ype IPADDR = followed by the IP address (in do tted decimal notation) and type NETMASK = followed by the subnet mask.
Appendix D Setting up Your Computer’s IP Address P-660HWP-Dx U ser’s Guide 50 V erifying Settings Enter ifconfig in a terminal screen to ch eck your TCP/IP properties. Figure 21 1 Red Hat 9.0: Checking TCP/IP Properties [root@localhost]# ifconfig eth0 Link encap:Ethernet HWadd r 00:50:BA:72:5B:44 inet addr:172.
P-660HWP-Dx User’s Guide 35 A PPENDIX E IP Subnetting This appendix introduces addresses, IP address class es and subnet masks. Introduction to IP Addresses An IP address is made up of four octets, written in dotted decimal notation (for example, 192.
Appendix E IP Subnetting P-660HWP-Dx U ser’s Guide 36 IP Address Classes and Network ID The value of the first octet of an IP ad dress determines the class of an address. • Class A address es have a 0 in the leftmost bit. • Class B address es have a 1 in the leftmost bit and a 0 in the next leftmost bit.
Appendix E IP Subne tting P-660HWP-Dx User’s Guide 37 By convention, subnet masks always consist of a continuous sequence of ones beginning from the leftmost bit of the mask, fo llowed by a continuous sequence of zeros, for a total number of 32 bits.
Appendix E IP Subnetting P-660HWP-Dx U ser’s Guide 38 " In the following chart s, shaded/bolded last oc tet bit values indicate host ID bit s “borrowed” to make network ID bit s. The number of “borrowed” host ID bit s determines the number of subnets you can hav e.
Appendix E IP Subne tting P-660HWP-Dx User’s Guide 39 Example: Four Subnet s The above exampl e illustrated using a 25-bit subne t mask to divide a clas s “C” address space into two subnets.
Appendix E IP Subnetting P-660HWP-Dx U ser’s Guide 40 Example Eight Subnet s Similarly use a 27-bit mask to create eight subnets (000, 001, 010, 01 1, 100, 101, 1 10 and 111 ) . The following table shows class C IP ad dress last octet values for each subnet.
Appendix E IP Subne tting P-660HWP-Dx User’s Guide 41 4 255.255.240.0 (/20) 16 4094 5 255.255.248.0 (/21) 32 2046 6 255.255.252.0 (/22) 64 1022 7 255.255.254.0 (/23) 128 510 8 255.255.255.0 (/24) 256 254 9 255.255.255.128 (/2 5) 512 126 10 255.255.255.
Appendix E IP Subnetting P-660HWP-Dx U ser’s Guide 42.
P-660HWP-Dx User’s Guide 35 A PPENDIX F Command Interpreter The following describes how to u se the command interpreter . Y o u can telnet to access the CLI (Command Line Interface) on th e P-660HWP-Dx. See the includ ed disk or zyxel.com for more detailed informatio n on these commands.
Appendix F C ommand Interpreter P-660HWP-Dx U ser’s Guide 36 Log Commands This section provides some general examples of how to use the log commands. The items that display with your device may vary but the basic function should be the same. Go to the command in terpreter interface.
Appendix F Command Interpreter P-660HWP-Dx User’s Guide 37 • Use the sys logs display [log category] comm and to show the logs in an individual P- 660HWP-Dx log categ ory . • Use the sys logs clear command to erase all of the P-660HWP-Dx’ s logs.
Appendix F C ommand Interpreter P-660HWP-Dx U ser’s Guide 38.
P-660HWP-Dx User’s Guide 35 A PPENDIX G Firewall Commands The following describes the firewall commands. T able 168 Firewall Commands FUNCTION COMMAND DESCRIPTION Firewall SetUp config edit firewall active <yes | no> This command turns the firewall on or off.
Appendix G Firewall Commands P-660HWP-Dx U ser’s Guide 36 Edit E-mail config edit firewall e-ma il mail-server <ip address of mail server> This command set s the IP address to which the e-mail messages are sent.
Appendix G Firewall Commands P-660HWP-Dx User’s Guide 37 config edit firewall attack minute-high <0-255> This command sets the threshold rate of new half-open sessions per min ute where the P- 660HWP-Dx starts deleting old half-opened sessions until it gets them down to the minute-low threshold .
Appendix G Firewall Commands P-660HWP-Dx U ser’s Guide 38 Config edit firewall set <set #> tcp-idle-timeout <seconds> This command sets how long P-660HWP-Dx lets an inactive TCP connection remai n open before considering it closed.
Appendix G Firewall Commands P-660HWP-Dx User’s Guide 39 config edit firewall set <set #> rule <rule #> destaddr- single <ip address> This command sets the rule to have the P- 660HWP-Dx check for traf fic with this individual destination add ress.
Appendix G Firewall Commands P-660HWP-Dx U ser’s Guide 40 config delete firewall set <set #> rule<rule #> This command removes th e specified rule in a firewall co nfiguration se t.
P-660HWP-Dx User’s Guide 35 A PPENDIX H Pop-up Windows, JavaScript s and Java Permissions In order to use the web configurator you need to allow: • W eb browser pop-up windows from your device. • JavaScripts (enabled by default). • Java permissions (enabled by default).
Appendix H Pop-up Windows, JavaScripts and Java Perm issions P-660HWP-Dx U ser’s Guide 36 2 Clear the Block pop-ups check box in the Pop-up Block e r section of the screen. This disables any web po p-up blockers you may have ena bled. Figure 215 Internet Options: Privacy 3 Click Apply to save this setting.
Appendix H Pop-up Windows, JavaScripts and Java Per m issions P-660HWP-Dx User’s Guide 37 Figure 216 Internet Options: Privacy 3 T ype the IP address of your device (the web page that you do not want to have blocke d) with the prefix “http://”. For example, http://192.
Appendix H Pop-up Windows, JavaScripts and Java Perm issions P-660HWP-Dx U ser’s Guide 38 5 Click Close to return to the Privacy screen. 6 Click Apply to save this setting. JavaScript s If pages of the web configura tor do not display properly in Internet Explorer, check that JavaScripts are allowed.
Appendix H Pop-up Windows, JavaScripts and Java Per m issions P-660HWP-Dx User’s Guide 39 Figure 219 Security Settings - Java Scripting Java Permissions 1 From Internet Explorer , click To o l s , Internet Options and then the Security tab. 2 Click the Custom Level.
Appendix H Pop-up Windows, JavaScripts and Java Perm issions P-660HWP-Dx U ser’s Guide 40 JA V A (Sun) 1 From Internet Explorer , click To o l s , Internet Options and then the Advanced tab. 2 Make sure that Use Java 2 for <applet> under Java (Sun) is sele cted.
P-660HWP-Dx User’s Guide 35 A PPENDIX I NetBIOS Filter Commands The following describes the Ne tBIOS packet filter commands. Introduction NetBIOS (Network Basic Input/Output System ) are TCP or UDP broadcast packets that enable a computer to connect to and communicate with a LAN.
Appendix I NetBIOS Filter Commands P-660HWP-Dx U ser’s Guide 36 The filter types and their defa ult settings are as follows. NetBIOS Filter Configuration Syntax:sys filter netbios config <ty pe&g.
P-660HWP-Dx User’s Guide 35 A PPENDIX J T riangle Route The Ideal Setup When the firewall is on, your P-660 HWP-Dx act s as a se cure gateway between your LAN and the Internet. In an ideal network topology , a ll incoming and outgoing network traf fic passes through the P-660HWP-Dx to pro tect your LAN agains t attacks.
Appendix J Triangle Route P-660HWP-Dx U ser’s Guide 36 Figure 223 “T riangle Route” Prob lem The “T riangle Route” Solutions This section presents you two solutions to the “triangle route” problem. IP Aliasing IP alias allows you to partition your network into logical sections over the same Ethernet interface.
P-660HWP-Dx User’s Guide 35 A PPENDIX K Legal Information Copyright Copyright © 2007 by ZyXEL Communications Corporation. The contents of this publication may not be reprod uced in any part or as a.
Appendix K Legal In formation P-660HWP-Dx U ser’s Guide 36 If this device does cause harmful inte rference to radio/television reception, which can be determined by turning th e device off and on, the user is enc ouraged to try to correct the interference by one or more of the following measures: 1 Reorient or relocate the receiving antenna.
Appendix K Legal Information P-660HWP-Dx User’s Guide 37 ZyXEL Limited W arranty ZyXEL warrants to the original en d user (purchaser) that this product is free from any defects in materials or workmansh ip for a period of up to tw o years from the date of purchase .
Appendix K Legal In formation P-660HWP-Dx U ser’s Guide 38.
P-660HWP-Dx User’s Guide 35 A PPENDIX L Customer Support Please have the following information r eady when you contact customer support. Required Information • Product model and serial number . • W arranty Information. • Date that you received your de vice.
Appendix L Custo mer Support P-660HWP-Dx U ser’s Guide 36 • Re g u l a r Ma i l: ZyXEL Communications, C zech s.r .o., Modranská 621, 143 01 Praha 4 - Modrany , Ceská Republika Denmark • Support E-mail: support@zyxel.dk • Sales E-mail: sales@zyxel.
Appendix L Customer Support P-660HWP-Dx User’s Guide 37 India • Support E-mail: support@zyxel.in • Sales E-mail: sales@zyxel.in • T elephone: +91-1 1-30888144 to +91-1 1-30888153 • Fax: +91-1 1-30888149, +91 -11-2 6810715 • W eb: http://www .
Appendix L Custo mer Support P-660HWP-Dx U ser’s Guide 38 • Re g u l ar M a i l: ZyXEL Communications Inc., 1 130 N. Miller St., Anaheim, CA 92806- 2001, U.S.A. Norway • Support E-mail: support@zyxel.no • Sales E-mail: sales@zyxel.no • T elephone: +47-22-80-61-80 • Fax: +47-22-80-61-81 • W eb: www .
Appendix L Customer Support P-660HWP-Dx User’s Guide 39 Sweden • Support E-mail: support@zyxel.se • Sales E-mail: sales@zyxel.se • T elephone: +46-31-744-7700 • Fax: +46-31-744-7701 • W eb: www .zyxel.se • Re g u l ar M ai l : ZyXEL Communications A/S, Sjöporten 4, 41764 Götebor g, Sweden Thailand • Support E-mail: support@zyxel.
Appendix L Custo mer Support P-660HWP-Dx U ser’s Guide 40.
Index P-660HWP-Dx User’s Guide 35 Index A AAL5 82 access point see AP address assignment 100 Address Resolution Protocol see ARP ADSL standards 36 ADSL line reinitialize 296 ADSL standards 36 Advanced Encryption St andard See AES.
Index P-660HWP-Dx U ser’s Guide 36 upload 293 configuration text file 325 connection failure 307 contact information 389 content filtering 191 categories 191 schedule 192 trusted comp uters 193 URL .
Index P-660HWP-Dx User’s Guide 37 alerts 172 anti-probing 185 commands 369 creating/editing rules 175 custom ports 178 enabling 172 firewall vs filters 167 guidelines for enhancing securi ty 166 int.
Index P-660HWP-Dx U ser’s Guide 38 action 127 MAC address filtering 12 7 MAC filter 127 maintenance 291 Management Information Base see MIB management server 307 managing the device good habits 37 using FTP . See FTP . using T e lnet. See command interface.
Index P-660HWP-Dx User’s Guide 39 Q quick start guide 43 R RADIUS 316 message types 317 messages 317 shared secret key 317 RADIUS server 11 4 reboot 293 registration product 387 related documentatio.
Index P-660HWP-Dx U ser’s Guide 40 system errors 271 system name 265 , 266 System Parameter T able Generator see SPTGEN system restart 293 system timeout 240 T TCP maximum incomplete 187 TCP securit.
Index P-660HWP-Dx User’s Guide 41 wireless networks channel 111 encryption 11 4 MAC address filter 11 3 security 11 2 SSID 111 wireless security 11 2 , 315 wizard icon 59 WLAN interference 313 secur.
Index P-660HWP-Dx U ser’s Guide 42.
Un point important après l'achat de l'appareil (ou même avant l'achat) est de lire le manuel d'utilisation. Nous devons le faire pour quelques raisons simples:
Si vous n'avez pas encore acheté ZyXEL Communications P-660HWP-Dx c'est un bon moment pour vous familiariser avec les données de base sur le produit. Consulter d'abord les pages initiales du manuel d'utilisation, que vous trouverez ci-dessus. Vous devriez y trouver les données techniques les plus importants du ZyXEL Communications P-660HWP-Dx - de cette manière, vous pouvez vérifier si l'équipement répond à vos besoins. Explorant les pages suivantes du manuel d'utilisation ZyXEL Communications P-660HWP-Dx, vous apprendrez toutes les caractéristiques du produit et des informations sur son fonctionnement. Les informations sur le ZyXEL Communications P-660HWP-Dx va certainement vous aider à prendre une décision concernant l'achat.
Dans une situation où vous avez déjà le ZyXEL Communications P-660HWP-Dx, mais vous avez pas encore lu le manuel d'utilisation, vous devez le faire pour les raisons décrites ci-dessus,. Vous saurez alors si vous avez correctement utilisé les fonctions disponibles, et si vous avez commis des erreurs qui peuvent réduire la durée de vie du ZyXEL Communications P-660HWP-Dx.
Cependant, l'un des rôles les plus importants pour l'utilisateur joués par les manuels d'utilisateur est d'aider à résoudre les problèmes concernant le ZyXEL Communications P-660HWP-Dx. Presque toujours, vous y trouverez Troubleshooting, soit les pannes et les défaillances les plus fréquentes de l'apparei ZyXEL Communications P-660HWP-Dx ainsi que les instructions sur la façon de les résoudre. Même si vous ne parvenez pas à résoudre le problème, le manuel d‘utilisation va vous montrer le chemin d'une nouvelle procédure – le contact avec le centre de service à la clientèle ou le service le plus proche.