ZyXEL P-2602HWL-D3A User Guide
ZyXEL P-2602HWL-D3A Manual
 |
View all ZyXEL P-2602HWL-D3A manuals
Add to My Manuals
Save this manual to your list of manuals |
ZyXEL P-2602HWL-D3A manual content summary:
- ZyXEL P-2602HWL-D3A | User Guide - Page 1
P-2602HW(L) Series 802.11g Wireless ADSL2+ VoIP IAD P-2602H Series ADSL2+ VoIP IAD User's Guide Version 3.40 7/2006 Edition 1 - ZyXEL P-2602HWL-D3A | User Guide - Page 2
- ZyXEL P-2602HWL-D3A | User Guide - Page 3
P-2602H(W)(L)-DxA Series User's Guide Copyright Copyright © 2006 by ZyXEL Communications Corporation. The contents of manual, or otherwise, without the prior written permission of ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation. All rights reserved. Disclaimer ZyXEL - ZyXEL P-2602HWL-D3A | User Guide - Page 4
User's Guide Certifications Federal not installed and used in accordance with the instructions, may cause harmful interference to radio communications Canada. Viewing Certifications 1 Go to www.zyxel.com 2 Select your product from the drop-down list box on the ZyXEL home page to go to that product's - ZyXEL P-2602HWL-D3A | User Guide - Page 5
notices and instructions. • To reduce the risk of fire, use only No. 26 AWG (American Wire Gauge) or larger telecommunication line cord. • Do NOT open the device or unit. Opening or removing covers can expose you to dangerous high voltage points or other risks. ONLY qualified service personnel can - ZyXEL P-2602HWL-D3A | User Guide - Page 6
Series User's Guide ZyXEL Limited Warranty ZyXEL warrants to the kind to the purchaser. To obtain the services of this warranty, contact ZyXEL's Service Center for your Return Material Authorization number (RMA of firmware upgrades and information at www.zyxel.com for global products, or at www.us - ZyXEL P-2602HWL-D3A | User Guide - Page 7
+49-2405-6909-0 +49-2405-6909-99 [email protected] [email protected] +36-1-3361649 +36-1-3259100 http://zyxel.kz/support +7-3272-590-698 [email protected] +7-3272-590-689 NORTH AMERICA [email protected] [email protected] 1-800-255-4101 +1-714-632-0882 +1-714-632-0858 WEB SITE FTP SITE REGULAR MAIL - ZyXEL P-2602HWL-D3A | User Guide - Page 8
User's Guide METHOD SUPPORT E-MAIL LOCATION NORWAY SALES E-MAIL [email protected] [email protected] TELEPHONE FAX +47-22-80-61-80 +47-22-80-61-81 WEB SITE FTP SITE www.zyxel.no POLAND [email protected] +48 (22) 333 8250 +48 (22) 333 8251 www.pl.zyxel.com RUSSIA http://zyxel.ru/support +7-095 - ZyXEL P-2602HWL-D3A | User Guide - Page 9
the P-2602H(W)(L)-Dx Series 37 1.2 Features ...38 1.3 Wireless Features ("W" models only 42 1.4 Applications for the ZyXEL Device 44 1.4.1 Internet Access 44 1.4.1.1 Internet Single User Account 44 1.4.2 Making Calls via Internet Telephony Service Provider 44 1.4.3 Make Peer-to-peer Calls 45 - ZyXEL P-2602HWL-D3A | User Guide - Page 10
3.2 Internet Access Wizard Setup 57 3.2.1 Manual Configuration 59 3.3 Wireless Connection Wizard Setup 65 3.3.1 Manually Assign a WPA key 67 3.3.2 Manually Assign a WEP key 68 Chapter 4 VoIP Wizard And Example 71 4.1 Introduction ...71 4.2 VoIP Wizard Setup 71 Chapter 5 Bandwidth Management - ZyXEL P-2602HWL-D3A | User Guide - Page 11
DxA Series User's Guide 7.1.4 IP Address Assignment LAN Setup...107 8.1 LAN Overview 107 8.1.1 LANs, WANs and the ZyXEL Device 107 8.1.2 DHCP Setup 108 8.1.2.1 IP Pool Setup 108 8.1.3 DNS IP Alias ...117 Chapter 9 Wireless LAN ...121 9.1 Wireless Network Overview 121 Table of Contents 11 - ZyXEL P-2602HWL-D3A | User Guide - Page 12
Guide 9.2 Wireless Security Overview 122 9.2.1 SSID ...122 9.2.2 MAC Address Filter 122 9.2.3 User Authentication 123 9.2.4 Encryption 123 9.2.5 One-Touch Intelligent Security Technology (OTIST 124 9.3 Wireless Performance Overview 124 9.3.1 Quality of Service Port Forwarding: Services and Port - ZyXEL P-2602HWL-D3A | User Guide - Page 13
P-2602H(W)(L)-DxA Series User's Guide 11.2.1 SIP Identities 151 11.2.1.1 SIP Number 151 11.2.1.2 SIP Service Domain 152 11.2.2 SIP Call Progression 152 11.2.3 SIP Servers 152 11.2.3.1 SIP User Agent 153 11.2.3.2 SIP Proxy Server 153 11.2.3.3 SIP Redirect Server - ZyXEL P-2602HWL-D3A | User Guide - Page 14
User's Guide 11.15.3 USA Type Supplementary Services 170 11 12.4 Checking the Device's IP Address 179 12.5 Auto Firmware Upgrade 180 Chapter 13 Firewalls...181 13.1 Firewall Overview 181 Introduction to ZyXEL's Firewall 182 13.3.1 Denial of Service Attacks 183 13.4 Denial of Service 183 13 - ZyXEL P-2602HWL-D3A | User Guide - Page 15
P-2602H(W)(L)-DxA Series User's Guide 13.7 Packet Filtering Vs Firewall 191 13.7.1 Packet Filtering Ramifications 194 14.3.3 Key Fields For Configuring Rules 195 14.3.3.1 Action 195 14.3.3.2 Service 195 14.3.3.3 Source Address 195 14.3.3.4 Destination Address 195 14.4 Connection Direction 195 - ZyXEL P-2602HWL-D3A | User Guide - Page 16
P-2602H(W)(L)-DxA Series User's Guide 16.1.1 IPSec ...215 16.1.2 Security Association 215 16.1.3 Other 236 17.13 Configuring Advanced IKE Settings 236 17.14 Manual Key Setup 239 17.14.1 Security Parameter Index (SPI 239 17.15 Configuring Manual Key 239 17.16 Viewing SA Monitor 242 17.17 - ZyXEL P-2602HWL-D3A | User Guide - Page 17
P-2602H(W)(L)-DxA Series User's Guide 17.18 Telecommuter VPN/IPSec Examples 244 17.18.1 Telecommuters Sharing One VPN Rule Example 244 17.18.2 Telecommuters Using Unique VPN Rules Example 245 - ZyXEL P-2602HWL-D3A | User Guide - Page 18
Guide 21.1.3 System Timeout 268 21.2 WWW ...268 21.3 Telnet ...269 21.4 Configuring Telnet 269 21.5 Configuring FTP 270 21.6 SNMP ...271 21.6.1 Supported NAT Traversal 277 22.1.3 Cautions with UPnP 278 22.2 UPnP and ZyXEL 278 22.2.1 Configuring UPnP 278 22.3 Installing UPnP in Windows Example - ZyXEL P-2602HWL-D3A | User Guide - Page 19
Guide 25.4 Firmware Firmware File Upload 312 25.9.3 TFTP File Upload 312 25.9.4 TFTP Upload Command Example 313 Chapter 26 Diagnostic ...315 26.1 General Diagnostic 315 26.2 DSL Line Diagnostic 315 Chapter 27 Troubleshooting 319 27.1 Problems Starting Up the ZyXEL Device 319 27.2 Problems - ZyXEL P-2602HWL-D3A | User Guide - Page 20
Guide P-2602HWL Series Power Adaptor Specifications 336 Appendix B Splitters and Microfilters 339 Connecting a POTS Splitter 339 Telephone Microfilters 339 ZyXEL Class B Networks 359 Appendix E Wireless LANs ...361 Wireless LAN Topologies 361 Ad-hoc Wireless LAN Configuration 361 BSS...361 ESS - ZyXEL P-2602HWL-D3A | User Guide - Page 21
Guide RADIUS...366 Types of RADIUS Messages 366 Types of Authentication 367 EAP-MD5 (Message-Digest Algorithm 5 367 EAP-TLS (Transport Layer Security 368 EAP-TTLS (Tunneled Transport Layer Service 377 The "Triangle Route" Problem 377 The "Triangle Route What You Want the ZyXEL Device to Log 390 - ZyXEL P-2602HWL-D3A | User Guide - Page 22
P-2602H(W)(L)-DxA Series User's Guide Internal SPTGEN Overview 395 The Configuration Text File Format 395 Internal SPTGEN File Modification - Important Points to Remember 395 Internal SPTGEN FTP Download Example 396 - ZyXEL P-2602HWL-D3A | User Guide - Page 23
LAN Setup Wizard 1 65 Figure 25 Wireless LAN ...66 Figure 26 Manually Assign a WPA key 67 Figure 27 Manually Assign a WEP key 68 Figure 28 Wireless LAN Setup 3 69 Figure 29 Internet Access and WLAN Wizard Setup Complete 70 Figure 30 VoIP Phone Calls 71 Figure 31 Select a Mode ...72 Figure - ZyXEL P-2602HWL-D3A | User Guide - Page 24
60 LAN IP Alias ...118 Figure 61 Example of a Wireless Network 121 Figure 62 Wireless LAN: General 126 Figure 63 Wireless: No Security 127 Figure 64 Wireless: Static WEP Encryption 128 Figure 65 Wireless: WPA(2)-PSK 129 Figure 66 Wireless: WPA(2 130 Figure 67 Advanced ...132 Figure 68 Network - ZyXEL P-2602HWL-D3A | User Guide - Page 25
85 SIP Proxy Server 153 Figure 86 SIP Redirect Server 154 Figure 87 SIP > SIP Settings 155 Figure 88 VoIP > SIP Settings > Advanced 159 Figure 89 DiffServ: Differentiated Service Field 162 Figure 90 SIP > QoS ...163 Figure 91 Phone > Analog Phone 165 Figure 92 Phone > Analog Phone > Advanced - ZyXEL P-2602HWL-D3A | User Guide - Page 26
P-2602H(W)(L)-DxA Series User's Guide Figure 125 Two Phases to Set Up the IPSec SA 234 Figure 126 Advanced VPN Policies 237 Figure 127 VPN: Manual Key 240 Figure 128 VPN: Optional Networking Components Wizard 281 Figure 154 Networking Services 282 Figure 155 Network Connections 283 Figure 156 - ZyXEL P-2602HWL-D3A | User Guide - Page 27
DxA Series User's Guide Figure 168 E-mail Log Example 300 Figure 169 Firmware Upgrade 303 Figure 170 Firmware Upload In Progress Connecting a POTS Splitter 339 Figure 198 Connecting a Microfilter 340 Figure 199 ZyXEL Device with ISDN 340 Figure 200 WIndows 95/98/Me: Network: Configuration - ZyXEL P-2602HWL-D3A | User Guide - Page 28
Figure 213 Peer-to-Peer Communication in an Ad-hoc Network 361 Figure 214 Basic Service Set 362 Figure 215 Infrastructure WLAN 363 Figure 216 RTS/CTS ...364 Figure 217 Ideal Setup ...377 Figure 218 "Triangle Route" Problem 378 Figure 219 IP Alias ...378 Figure 220 Gateways on the WAN Side 379 - ZyXEL P-2602HWL-D3A | User Guide - Page 29
63 Table 12 Wireless LAN Setup Wizard 1 66 Table 13 Wireless LAN Setup Wizard 2 66 Table 14 Manually Assign a WPA key 68 Table 15 Manually Assign a WEP key 69 Table 16 Sample SIP Account Information 73 Table 17 VoIP Wizard Configuration 73 Table 18 Media Bandwidth Management Setup: Services - ZyXEL P-2602HWL-D3A | User Guide - Page 30
Guide Table 39 Wireless: WPA(2)-PSK 129 Table 40 Wireless: WPA(2 130 Table 41 Wireless LAN: Advanced 132 Table 42 Network > Wireless LAN > OTIST 133 Table 43 MAC Address Filter 136 Table 44 Wireless VoIP > Phone > Region 172 Table 63 Services 202 Table 74 Firewall: Configure Customized Services - ZyXEL P-2602HWL-D3A | User Guide - Page 31
User's Guide Table Policies 230 Table 88 Advanced VPN Policies 237 Table 89 VPN: Manual Key 240 Table 90 VPN: SA Monitor 243 Table 91 VPN: SMTP Error Messages 299 Table 118 Filename Conventions 302 Table 119 Firmware Upgrade 303 Table 120 Restore Configuration 305 Table 121 General Commands - ZyXEL P-2602HWL-D3A | User Guide - Page 32
User's Guide Table 125 Troubleshooting Starting Up Your Device 319 Table 126 Troubleshooting the LAN 319 Table 127 Troubleshooting the WAN 320 Table 128 Troubleshooting Accessing Your Device 321 Table 129 Troubleshooting Telephone 329 Table 130 Device Specifications 333 Table 131 Firmware - ZyXEL P-2602HWL-D3A | User Guide - Page 33
P-2602H(W)(L)-DxA Series User's Guide Table 168 RTP Logs ...389 Table 169 FSM Logs: Caller Side 389 Table 170 FSM Logs: Callee Side 389 Table 171 PSTN Logs ...389 Table - ZyXEL P-2602HWL-D3A | User Guide - Page 34
P-2602H(W)(L)-DxA Series User's Guide 34 List of Tables - ZyXEL P-2602HWL-D3A | User Guide - Page 35
your purchase of the P-2602H(W)(L)-DxA 802.11g Wireless ADSL 2+ VoIP IAD (the "ZyXEL Device"). Your ZyXEL Device is easy to install and configure. About This User's Guide This manual is designed to guide you through the configuration of your ZyXEL Device for its various applications. Note: Use the - ZyXEL P-2602HWL-D3A | User Guide - Page 36
", and "i.e.," means "that is" or "in other words". • The P-2602H(W)(L)-DxA may be referred to as the ZyXEL Device in this user's guide. Graphics Icons Key ZyXEL Device Computer Notebook computer Server Switch Telephone DSLAM Router Trunking gateway Firewall Wireless signal 36 Preface - ZyXEL P-2602HWL-D3A | User Guide - Page 37
of writing, this guide covers the following models. Table 1 Models Covered P-2602HWL-D1A P-2602HW-D1A P-2602H-D1A P-2602HWL-D3A P- VoIP phone service and PSTN phone service at the same time. All PSTN line features documented in this user's guide refer to the "L" models only. Note: When the ZyXEL - ZyXEL P-2602HWL-D3A | User Guide - Page 38
a device that works over ISDN (Integrated Services Digital Network). Models with "1" or "7" as the next to the last character (like the P-2602HWL-D1A or the P-2602HWL-D7A) denote a device that works over T-ISDN (UR-2). Note: Only use firmware for your ZyXEL Device's specific model. Refer to the - ZyXEL P-2602HWL-D3A | User Guide - Page 39
input or troubleshooting. Any IP The Any IP feature allows a computer to access the Internet and the ZyXEL Device ZyXEL Device are not in the same subnet. Auto Provisioning Your VoIP service provider can automatically update your device's configuration via an autoprovisioning server. Auto Firmware - ZyXEL P-2602HWL-D3A | User Guide - Page 40
Series User's Guide Network Address Translation telephone line. Your device has a REN of three, so it can support three devices per telephone port. Dynamic Jitter Buffer The built-in adaptive you can answer an incoming phone call on a VoIP account, even while someone else is using the ZyXEL Device - ZyXEL P-2602HWL-D3A | User Guide - Page 41
Series User's Guide Echo Cancellation You device supports G.168, an ITU-T standard for eliminating the echo caused by the sound of your voice reverberating in the telephone receiver while you talk. QoS (Quality of Service) Quality of Service (QoS) mechanisms help to provide better service on a per - ZyXEL P-2602HWL-D3A | User Guide - Page 42
DxA Series User's Guide Multiple PVC (Permanent Virtual Circuits) Support Your device supports up to 8 Permanent Virtual Circuits (PVC's). IP Alias IP alias allows you to partition a physical network into logical networks over the same Ethernet interface. Your device supports three logical LAN - ZyXEL P-2602HWL-D3A | User Guide - Page 43
GHz devices such as microwave ovens, wireless phones, Bluetooth enabled devices, and other wireless LANs. IEEE 802.11g+ Wireless LAN Your device supports IEEE 802.11g+ to allow any ZyXEL WLAN devices that also support IEEE 802.1g+ to associate with the ZyXEL Device at higher transmission speeds than - ZyXEL P-2602HWL-D3A | User Guide - Page 44
P-2602H(W)(L)-DxA Series User's Guide 1.4 Applications for the ZyXEL Device Here are some example uses for which the ZyXEL Device is well suited. 1.4.1 Internet Access Your device is the ideal high-speed Internet access solution. It supports the TCP/IP protocol, which the Internet uses exclusively. - ZyXEL P-2602HWL-D3A | User Guide - Page 45
Guide Figure 2 Internet Telephony Service VoIP call. You use your analog phone (A in the figure) and the call into VoIP. and sends the call through the Internet to the peer VoIP device (C). Figure WAN. The firewall supports TCP/UDP inspection and DoS (Denial of Services) detection and prevention, - ZyXEL P-2602HWL-D3A | User Guide - Page 46
User's Guide Figure 4 Firewall Application 1.4.5 LAN to LAN Application You can use your device to connect two geographically dispersed networks over the ADSL line. A typical LAN-to-LAN application is shown as follows. Figure 5 LAN-to-LAN Application 46 Chapter 1 Getting To Know the ZyXEL Device - ZyXEL P-2602HWL-D3A | User Guide - Page 47
LEDs Figure 6 LEDs P-2602H(W)(L)-DxA Series User's Guide The following table describes your device's LEDs. Table through the wireless LAN. Your device is sending/receiving data through the wireless LAN. The wireless LAN is not ready or has failed. Chapter 1 Getting To Know the ZyXEL Device 47 - ZyXEL P-2602HWL-D3A | User Guide - Page 48
P-2602H(W)(L)-DxA Series User's Guide Table 4 LEDs (continued) LED DSL COLOR Green INTERNET None Green STATUS On Blinking Off On . The phone port does not have a SIP account registered. Refer to the Quick Start Guide for information on hardware connections. 48 Chapter 1 Getting To Know the - ZyXEL P-2602HWL-D3A | User Guide - Page 49
device. Web pop-up blocking is enabled by default in Windows XP SP (Service Pack) 2. • JavaScripts (enabled by default). • Java permissions (enabled by the Web Configurator 1 Make sure your ZyXEL Device hardware is properly connected (refer to the Quick Start Guide). 2 Launch your web browser. 3 - ZyXEL P-2602HWL-D3A | User Guide - Page 50
P-2602H(W)(L)-DxA Series User's Guide Figure 7 Password Screen 5 The following screen displays if you have not yet changed your password. It is highly recommended you change the default password. Enter a - ZyXEL P-2602HWL-D3A | User Guide - Page 51
Guide Note: For security reasons, the ZyXEL Device automatically logs you out if you do not use the web configurator for five minutes. If this happens, log in again. Figure 9 Wizard or Advanced Screen 2.1.2 The RESET Button You can use the RESET button at the back of the device to turn the wireless - ZyXEL P-2602HWL-D3A | User Guide - Page 52
P-2602H(W)(L)-DxA Series User's Guide 2.2 Web Configurator Main Screen Figure 10 Main Screen A B C D As illustrated above, the main screen is divided into these parts: • A - title bar • B - navigation panel • C - main window • D - - ZyXEL P-2602HWL-D3A | User Guide - Page 53
Device to give exclusive access to specific wireless clients or exclude specific wireless clients from accessing the ZyXEL Device. QoS WMM QoS allows you to prioritize wireless traffic according to the delivery requirements of individual services. Local User Database Use this screen to set up - ZyXEL P-2602HWL-D3A | User Guide - Page 54
Series User's Guide Table 6 port settings. Use this screen to select your location and call service mode. Use this screen to configure call-forwarding. Use this screen numbers that you call often. Use this screen to configure your ZyXEL Device's settings for PSTN calls. Use this screen to activate/ - ZyXEL P-2602HWL-D3A | User Guide - Page 55
through which interface(s) and from which IP address(es) users can send DNS queries to the ZyXEL Device. Use this screen to set whether or not your device will respond to pings and probes for services that you have not made available. Use this screen to turn UPnP on or off. Use - ZyXEL P-2602HWL-D3A | User Guide - Page 56
P-2602H(W)(L)-DxA Series User's Guide 56 Chapter 2 Introducing the Web Configurator - ZyXEL P-2602HWL-D3A | User Guide - Page 57
P-2602H(W)(L)-DxA Series User's Guide CHAPTER 3 Internet and Wireless Setup Wizard This chapter provides information on the Wizard Setup screens for Internet access in the web configurator. 3.1 Introduction Use the wizard setup screens to - ZyXEL P-2602HWL-D3A | User Guide - Page 58
(W)(L)-DxA Series User's Guide Figure 12 Wizard Welcome 3 Your ZyXEL device attempts to detect your DSL connection and your connection type. a The following screen appears if a connection is not detected. Check your hardware connections and click Restart the Internet/Wireless Setup Wizard to return - ZyXEL P-2602HWL-D3A | User Guide - Page 59
14 Auto-Detection: PPPoE P-2602H(W)(L)-DxA Series User's Guide c The following screen appears if the ZyXEL device detects a connection but not the connection type. Click Next and refer to Section 3.2.1 on page 59 on how to manually configure the ZyXEL Device for Internet access. Figure 15 Auto - ZyXEL P-2602HWL-D3A | User Guide - Page 60
P-2602H(W)(L)-DxA Series User's Guide SIP provider gave it to you box. Choices vary depending on what you select in the Mode field. If you select Bridge in the Mode field, select either PPPoA or RFC 1483. If you select Routing in the previous screen. 60 Chapter 3 Internet and Wireless Setup Wizard - ZyXEL P-2602HWL-D3A | User Guide - Page 61
User's Guide Table 7 Next to continue. See Section 3.3 on page 65 for wireless connection wizard setup Figure 17 Internet Connection with PPPoE The your PPPoE service here. Click Back to go back to the previous wizard screen. Click Apply to save your changes back to the ZyXEL Device. Click - ZyXEL P-2602HWL-D3A | User Guide - Page 62
P-2602H(W)(L)-DxA Series User's Guide Figure 18 Internet Connection with RFC 1483 The following table describes the fields in this screen. Table 9 the wizard screen without saving your changes. Figure 19 Internet Connection with ENET ENCAP 62 Chapter 3 Internet and Wireless Setup Wizard - ZyXEL P-2602HWL-D3A | User Guide - Page 63
P-2602H(W)(L)-DxA Series User's Guide The following table describes the the previous wizard screen. Apply Click Apply to save your changes back to the ZyXEL Device. Exit Click Exit to close the wizard screen without saving your changes. above. Chapter 3 Internet and Wireless Setup Wizard 63 - ZyXEL P-2602HWL-D3A | User Guide - Page 64
Guide Table 11 Internet Connection with PPPoA (continued) LABEL Back Apply Exit DESCRIPTION Click Back to go back to the previous wizard screen. Click Apply to save your changes back to the ZyXEL activated or click Restart the Internet/Wireless Setup Wizard to verify your Internet access settings. - ZyXEL P-2602HWL-D3A | User Guide - Page 65
P-2602H(W)(L)-DxA Series User's Guide 3.3 Wireless Connection Wizard Setup After you configure the Internet access information, use the following screens to set up your wireless LAN. 1 Select Yes and click Next to configure wireless settings. Otherwise, select No and skip to Step 6. Figure 23 - ZyXEL P-2602HWL-D3A | User Guide - Page 66
check box to enable OTIST if you want to transfer your ZyXEL Device's SSID and WEP or WPA-PSK security settings to wireless clients that support OTIST and are within transmission range. You must also activate and start OTIST on the wireless client at the same time. The process takes three minutes to - ZyXEL P-2602HWL-D3A | User Guide - Page 67
Choose this option only if your wireless clients support WPA. See Section 3.3.1 on page 67 for more information. Select Manually assign a WEP key to Exit to close the wizard screen without saving. Note: The wireless stations and ZyXEL Device must use the same SSID, channel ID and WEP encryption - ZyXEL P-2602HWL-D3A | User Guide - Page 68
2602H(W)(L)-DxA Series User's Guide The following table describes the labels in this screen. Table 14 Manually Assign a WPA key LABEL Pre-Shared Key Back Next Exit DESCRIPTION Type from 8 to 63 case-sensitive ASCII characters. You can set up the most secure wireless connection by configuring WPA - ZyXEL P-2602HWL-D3A | User Guide - Page 69
P-2602H(W)(L)-DxA Series User's Guide The following table describes the labels in this screen. Table 15 Manually Assign a WEP key LABEL Key Back Next Exit DESCRIPTION The WEP keys are used to encrypt data. Both the ZyXEL Device and the wireless stations must use the same WEP key for data - ZyXEL P-2602HWL-D3A | User Guide - Page 70
rest of this guide for more detailed information on the complete range of ZyXEL Device features. If you cannot access the Internet, open the web configurator again to confirm that the Internet settings you configured in the wizard setup are correct. 70 Chapter 3 Internet and Wireless Setup Wizard - ZyXEL P-2602HWL-D3A | User Guide - Page 71
P-2602H(W)(L)-DxA Series User's Guide CHAPTER 4 VoIP Wizard And Example This chapter shows you how to configure your SIP account(s) and make a VoIP phone call. 4.1 Introduction The ZyXEL Device has Voice over IP (VoIP) communication capabilities that allow you to use a traditional analog telephone - ZyXEL P-2602HWL-D3A | User Guide - Page 72
P-2602H(W)(L)-DxA Series User's Guide Figure 31 Select a Mode 2 Click VOICE OVER INTERNET SETUP to configure your SIP settings. Figure 32 Wizard: Welcome 72 Chapter 4 VoIP Wizard And Example - ZyXEL P-2602HWL-D3A | User Guide - Page 73
P-2602H(W)(L)-DxA Series User's Guide 3 Fill in the VOICE OVER INTERNET SETUP wizard screen with the information provided by your VoIP service provider. Your VoIP service provider supplies you with the following information. When you are finished, click Apply. Table 16 Sample SIP Account - ZyXEL P-2602HWL-D3A | User Guide - Page 74
DxA Series User's Guide Table 17 VoIP Wizard Configuration LABEL DESCRIPTION SIP Service Domain Enter the SIP service domain name in without saving your settings. 4 Your ZyXEL Device will attempt to register your SIP account with your VoIP service provider. When your account is registered your - ZyXEL P-2602HWL-D3A | User Guide - Page 75
Figure 35 VoIP Wizard Fail P-2602H(W)(L)-DxA Series User's Guide 6 This screen displays if your SIP you with their SIP number. You can use your VoIP service provider's dialing plan to call SIP numbers. You can also use your VoIP service provider's dialing plan to call regular phone numbers. You - ZyXEL P-2602HWL-D3A | User Guide - Page 76
P-2602H(W)(L)-DxA Series User's Guide 76 Chapter 4 VoIP Wizard And Example - ZyXEL P-2602HWL-D3A | User Guide - Page 77
management allows you to control the amount of bandwidth going out through the ZyXEL Device's WAN port and prioritize the distribution of the bandwidth according to service bandwidth requirements. This helps keep one service from using all of the available bandwidth and shutting out other users - ZyXEL P-2602HWL-D3A | User Guide - Page 78
User's Guide Table 18 Media Bandwidth Management Setup: Services (continued) SERVICE NetMeeting (H.323) VoIP (SIP) VoIP (H.323) TFTP DESCRIPTION A multimedia communications product from Microsoft that enables groups to teleconference and videoconference over the Internet. NetMeeting supports VoIP - ZyXEL P-2602HWL-D3A | User Guide - Page 79
Figure 37 Select a Mode P-2602H(W)(L)-DxA Series User's Guide 2 Click BANDWIDTH MANAGEMENT SETUP. Figure 38 Wizard: Welcome 3 Activate bandwidth management and select to allocate bandwidth to packets based on the packet size or services. Chapter 5 Bandwidth Management Wizard 79 - ZyXEL P-2602HWL-D3A | User Guide - Page 80
bandwidth management to traffic going out through the ZyXEL Device's WAN, LAN or WLAN port. Select Auto Classifier to automatically allocate bandwidth to packets based on the packet size or Services Setup to allocate bandwidth based on the service requirements. Click Back to display the previous - ZyXEL P-2602HWL-D3A | User Guide - Page 81
to go back to the previous wizard screen. Click Apply to save your changes back to the ZyXEL Device. Click Exit to close the wizard screen without saving your changes. 5 Follow the on-screen instructions and click Finish to complete the wizard setup and save your configuration. Figure 41 Bandwidth - ZyXEL P-2602HWL-D3A | User Guide - Page 82
P-2602H(W)(L)-DxA Series User's Guide 82 Chapter 5 Bandwidth Management Wizard - ZyXEL P-2602HWL-D3A | User Guide - Page 83
P-2602H(W)(L)-DxA Series User's Guide CHAPTER 6 Status Screens Use the Status screens to look at the . The Status screen also provides detailed information from Any IP and DHCP and statistics from VoIP, bandwidth management, and traffic. 6.1 Status Screen Click Status to open this screen. Figure - ZyXEL P-2602HWL-D3A | User Guide - Page 84
is not providing any DHCP services to the LAN. Click this to go to the screen where you can change it. WLAN Information ("W" models only) SSID This is the descriptive name used to identify the ZyXEL Device in the wireless LAN. Click this to go to the screen where you can change it - ZyXEL P-2602HWL-D3A | User Guide - Page 85
and MAC addresses of computers, which are not in the same subnet as the ZyXEL Device. See Section 6.2 on page 86. Click this link to display the MAC address(es) of the wireless stations that are currently associating with the ZyXEL Device. See Section 6.3 on page 87. Chapter 6 Status Screens 85 - ZyXEL P-2602HWL-D3A | User Guide - Page 86
automatically tries to register the SIP account when you turn on the ZyXEL Device or when you activate it. URI This field displays the account number and service domain of the SIP account. You can change these in VoIP > SIP > SIP Settings. 6.2 Any IP Table Click Status > AnyIP Table to access - ZyXEL P-2602HWL-D3A | User Guide - Page 87
screen. 6.3 WLAN Status ("W" models only) Click Status > WLAN Status to access this screen. Use this screen to view the wireless stations that are currently associated to the ZyXEL Device. Figure 44 WLAN Status The following table describes the labels in this screen. Table 23 WLAN Status LABEL - ZyXEL P-2602HWL-D3A | User Guide - Page 88
User's Guide Figure 45 Packet Statistics The following table describes the fields in this screen. Table 24 Packet Statistics LABEL DESCRIPTION System Monitor System up Time This is the elapsed time the system has been up. Current Date/Time This field displays your ZyXEL Device's present - ZyXEL P-2602HWL-D3A | User Guide - Page 89
's Guide Table 24 Packet Statistics (continued) LABEL Up Time LAN Port Statistics Ethernet Status TxPkts RxPkts Collisions Poll Interval(s) Set Interval Stop DESCRIPTION This field displays the elapsed time this port has been up. This field displays either Ethernet (LAN ports) or Wireless (WLAN - ZyXEL P-2602HWL-D3A | User Guide - Page 90
Guide Each field is described in the following table. Table 25 VoIP the account number and service domain of the SIP account. You can change these in VoIP > SIP > SIP dialed a number. This field displays each phone port in the ZyXEL Device. This field indicates whether the phone is on the hook - ZyXEL P-2602HWL-D3A | User Guide - Page 91
P-2602H(W)(L)-DxA Series User's Guide Table 25 VoIP Statistics LABEL Tx B/s Rx B/s Poll Interval(s) Set Interval Stop DESCRIPTION This field displays how quickly the ZyXEL Device has transmitted packets in the current call. The rate is the average number of bytes transmitted per second. This - ZyXEL P-2602HWL-D3A | User Guide - Page 92
P-2602H(W)(L)-DxA Series User's Guide 92 Chapter 6 Status Screens - ZyXEL P-2602HWL-D3A | User Guide - Page 93
ZyXEL Device supports PPPoE (Point-to-Point Protocol over Ethernet). PPPoE is an IETF Draft standard (RFC 2516) specifying how a personal computer (PC) interacts with a broadband modem (DSL, cable, wireless, etc.) connection. The PPPoE option is for a dial-up connection using PPPoE. For the service - ZyXEL P-2602HWL-D3A | User Guide - Page 94
Guide By implementing PPPoE directly on the ZyXEL Device (rather than individual computers), the computers on the LAN do not need PPPoE software installed, since the ZyXEL an ATM PVC (Permanent Virtual Circuit) to the Internet Service Provider's (ISP) DSLAM (digital access multiplexer). Please refer - ZyXEL P-2602HWL-D3A | User Guide - Page 95
DxA Series User's Guide 7.1.4 IP Address fields as supplied by your ISP. However for a dynamic IP, the ZyXEL Device acts as a DHCP client on the WAN port and so the a nailed-up connection unless your telephone company offers flat-rate service or you need a constant connection and the cost is of - ZyXEL P-2602HWL-D3A | User Guide - Page 96
P-2602H(W)(L)-DxA Series User's Guide 7.2 Metric The metric represents the "cost of transmission". A the normal route fails to connect to the Internet, the ZyXEL Device tries the traffic-redirect route next. In the same manner, the ZyXEL Device uses the dial-backup route if the traffic-redirect - ZyXEL P-2602HWL-D3A | User Guide - Page 97
P-2602H(W)(L)-DxA Series User's Guide Maximum Burst Size (MBS) is the maximum number of cells that can be sent at the PCR. After MBS is reached, cell rates fall below - ZyXEL P-2602HWL-D3A | User Guide - Page 98
P-2602H(W)(L)-DxA Series User's Guide The VBR-nRT (non real-time Variable Bit Rate) redirected to web screen(s) for information input or troubleshooting. Zero configuration for Internet access is disabled when • the ZyXEL Device is in bridge mode • you set the ZyXEL Device to use a static (fixed) WAN - ZyXEL P-2602HWL-D3A | User Guide - Page 99
Guide The following table describes the labels in this screen. Table 26 Internet Access Setup LABEL General Mode Encapsulation User Name Password Service vary depending on the mode you select in the Mode field. If you select Bridge in the Mode field, select either PPPoA or RFC 1483. If you select - ZyXEL P-2602HWL-D3A | User Guide - Page 100
User's Guide Table From ISP if your ISP dynamically assigns DNS server information (and the ZyXEL Device's WAN IP address). Select User-Defined if you have the your LAN, or else the computers must have their DNS server addresses manually configured. If you do not configure a DNS server, you must know - ZyXEL P-2602HWL-D3A | User Guide - Page 101
P-2602H(W)(L)-DxA Series User's Guide Table 26 Internet Access Setup (continued) LABEL Group Multicast Protocol) is a network-layer protocol used to establish membership in a multicast group. The ZyXEL Device supports both IGMP version 1 (IGMP-v1) and IGMP-v2. Select None to disable it. Select CBR - ZyXEL P-2602HWL-D3A | User Guide - Page 102
User's Guide Table 27 bridge mode. Select Yes to set the ZyXEL Device to automatically detect the Internet connection settings (such as the VCI/VPI numbers and the encapsulation method) from the ISP and make the necessary configuration changes. Select No to disable this feature. You must manually - ZyXEL P-2602HWL-D3A | User Guide - Page 103
WAN More Connections P-2602H(W)(L)-DxA Series User's Guide The following table describes the labels in this screen afresh. 7.7 Traffic Redirect Traffic redirect forwards traffic to a backup gateway when the ZyXEL Device cannot connect to the Internet. An example is shown in the figure below. - ZyXEL P-2602HWL-D3A | User Guide - Page 104
(W)(L)-DxA Series User's Guide Figure 51 Traffic Redirect Example The following network topology allows you to avoid triangle route security issues when the backup gateway is connected to the LAN. Use IP alias to configure the LAN into two or three logical networks with the ZyXEL Device itself as - ZyXEL P-2602HWL-D3A | User Guide - Page 105
P-2602H(W)(L)-DxA Series User's Guide 7.8 WAN Backup Setup To configure your ZyXEL Device's WAN backup, click Network > WAN > is no response. Fail Tolerance Type the number of times (2 recommended) that your ZyXEL Device may ping the IP addresses configured in the Check WAN IP Address field without - ZyXEL P-2602HWL-D3A | User Guide - Page 106
P-2602H(W)(L)-DxA Series User's Guide Table 29 WAN Backup Setup (continued) LABEL Timeout Traffic Redirect Active Traffic Redirect DESCRIPTION Type the number of seconds (3 recommended) for your ZyXEL Device to wait for a ping response from one of the IP addresses in the Check WAN IP Address - ZyXEL P-2602HWL-D3A | User Guide - Page 107
P-2602H(W)(L)-DxA Series User's Guide CHAPTER 8 LAN Setup This chapter describes how to configure LAN page 113 to configure the LAN screens. 8.1.1 LANs, WANs and the ZyXEL Device The actual physical connection determines whether the ZyXEL Device ports are LAN or WAN ports. There are two separate IP - ZyXEL P-2602HWL-D3A | User Guide - Page 108
service off, you must have another DHCP server on your LAN, or else the computer must be manually configured. 8.1.2.1 IP Pool Setup The ZyXEL chances are the DNS servers are conveyed through IPCP negotiation. The ZyXEL Device supports the IPCP DNS server extensions through the DNS proxy feature. If - ZyXEL P-2602HWL-D3A | User Guide - Page 109
User's Guide 8.1.4 DNS LAN TCP/IP The ZyXEL Device has built-in DHCP server capability that assigns IP addresses and DNS servers to systems that support DHCP client capability. assigns you a block of registered IP addresses, follow their instructions in selecting the IP addresses and the subnet mask. - ZyXEL P-2602HWL-D3A | User Guide - Page 110
received. The Version field controls the format and the broadcasting method of the RIP packets that the ZyXEL Device sends (it recognizes both formats when receiving). RIP-1 is universally supported; but RIP-2 carries more information. RIP-1 is probably adequate for most networks, unless you have an - ZyXEL P-2602HWL-D3A | User Guide - Page 111
DxA Series User's Guide 8.2.3 Multicast Traditionally, The ZyXEL Device supports both IGMP version 1 (IGMP-v1) and IGMP version 2 (IGMPv2). At start up, the ZyXEL Device ZyXEL Device). In cases where your computer is required to use a static IP address in another network, you may need to manually - ZyXEL P-2602HWL-D3A | User Guide - Page 112
Guide Figure 54 Any IP Example The Any IP feature does not apply to a computer using either a dynamic IP address or a static IP address that is in the same subnet as the ZyXEL . IP routing table is defined on IP Ethernet devices (the ZyXEL Device) to decide which hop to use, to help forward data - ZyXEL P-2602HWL-D3A | User Guide - Page 113
Guide After all the routing information is updated, the computer can access the ZyXEL Device and the Internet as if it is in the same subnet as the ZyXEL Mask Apply Cancel Advanced Setup DESCRIPTION Enter the IP address of your ZyXEL Device in dotted decimal notation, for example, 192.168.1.1 ( - ZyXEL P-2602HWL-D3A | User Guide - Page 114
Guide in a multicast group. The ZyXEL Device supports both IGMP version 1 (IGMP- ZyXEL Device or access the Internet through the ZyXEL Device. NetBIOS (Network Basic Input/Output System) are TCP or UDP packets that enable a computer to connect to and communicate with a LAN. For some dial-up services - ZyXEL P-2602HWL-D3A | User Guide - Page 115
User's Guide 8.4 DHCP Setup Click Network > DHCP Setup to open this screen. Use this screen to configure the DNS server information that the ZyXEL Device NT and other systems that support the DHCP client. If set to None, the DHCP server will be disabled. If set to Relay, the ZyXEL Device acts as a - ZyXEL P-2602HWL-D3A | User Guide - Page 116
Guide Table 32 DHCP Setup LABEL DESCRIPTION First DNS Server Second DNS Server Third DNS Server Select Obtained From ISP if your ISP dynamically assigns DNS server information (and the ZyXEL the computers must have their DNS server addresses manually configured. If you do not configure a DNS - ZyXEL P-2602HWL-D3A | User Guide - Page 117
P-2602H(W)(L)-DxA Series User's Guide The following table describes the labels in this screen. logical networks over the same Ethernet interface. The ZyXEL Device supports three logical LAN interfaces via its single physical Ethernet interface with the ZyXEL Device itself as the gateway for each LAN - ZyXEL P-2602HWL-D3A | User Guide - Page 118
P-2602H(W)(L)-DxA Series User's Guide Figure 59 Physical Network & Partitioned Logical Networks Click Network > LAN > IP Alias to open the following screen. Use this screen to change your ZyXEL Device's IP alias settings. Figure 60 LAN IP Alias The following table describes the labels in this - ZyXEL P-2602HWL-D3A | User Guide - Page 119
P-2602H(W)(L)-DxA Series User's Guide Table 34 LAN IP Alias LABEL RIP Direction RIP Version Apply the broadcasting method of the RIP packets that the ZyXEL Device sends (it recognizes both formats when receiving). RIP-1 is universally supported but RIP-2 carries more information. RIP-1 is probably - ZyXEL P-2602HWL-D3A | User Guide - Page 120
P-2602H(W)(L)-DxA Series User's Guide 120 Chapter 8 LAN Setup - ZyXEL P-2602HWL-D3A | User Guide - Page 121
the Internet. Your ZyXEL Device is the AP. Every wireless network must follow these basic guidelines. • Every device in the same wireless network must use the same SSID. The SSID is the name of the wireless network. It stands for Service Set IDentity. • If two wireless networks overlap, they should - ZyXEL P-2602HWL-D3A | User Guide - Page 122
characters2; for example, 00A0C5000002 or 00:A0:C5:00:00:02. To get the MAC address for each device in the wireless network, see the device's User's Guide or other documentation. You can use the MAC address filter to tell the ZyXEL Device which devices are allowed or not allowed to use the - ZyXEL P-2602HWL-D3A | User Guide - Page 123
, Static WEP, WPA-PSK, or WPA2-PSK. Usually, you should set up the strongest encryption that every device in the wireless network supports. For example, suppose you have a wireless network with the ZyXEL Device and you do not have a RADIUS server. Therefore, there is no authentication. Suppose the - ZyXEL P-2602HWL-D3A | User Guide - Page 124
to support OTIST, and they have to be in range of the ZyXEL Device when you activate it. See section 9.6 on page 133 for more details. 9.3 Wireless Performance Overview The following sections introduce different ways to improve the performance of the wireless network. 9.3.1 Quality of Service (QoS - ZyXEL P-2602HWL-D3A | User Guide - Page 125
P-2602H(W)(L)-DxA Series User's Guide 9.4 Additional Wireless Terms The following table describes wireless network terms and acronyms used in the ZyXEL Device. TERM Intra-BSS Traffic RTS/CTS Threshold Preamble Authentication Max. Frame Burst Fragmentation Threshold Roaming DESCRIPTION This - ZyXEL P-2602HWL-D3A | User Guide - Page 126
Series User's Guide Figure 62 Wireless LAN: General The following table describes the general wireless LAN labels in this screen. Table 36 Wireless LAN: General LABEL DESCRIPTION Active Wireless Click the check box to activate wireless LAN. LAN Network Name(SSID) (Service Set IDentity) The - ZyXEL P-2602HWL-D3A | User Guide - Page 127
DxA Series User's Guide Note: If you do not enable any wireless security on your ZyXEL Device, your network is accessible to any wireless networking device that is within range. Figure 63 Wireless: No Security The following table describes the labels in this screen. Table 37 Wireless No Security - ZyXEL P-2602HWL-D3A | User Guide - Page 128
Guide Figure 64 Wireless: Static WEP Encryption The following table describes the wireless LAN security labels in this screen. Table 38 Wireless encrypt data. Both the ZyXEL Device and the wireless stations must use the same WEP key for data transmission. If you want to manually set the WEP key, - ZyXEL P-2602HWL-D3A | User Guide - Page 129
labels in this screen. Table 39 Wireless: WPA(2)-PSK LABEL DESCRIPTION Security Mode Choose WPA-PSK or WPA2-PSK from the drop-down list box. WPA Compatible This field is only available for WPA2-PSK. Select this if you want the ZyXEL Device to support WPA-PSK and WPA2-PSK simultaneously. Pre - ZyXEL P-2602HWL-D3A | User Guide - Page 130
WPA2 from the drop-down list box. This field is only available for WPA2. Select this if you want the ZyXEL Device to support WPA and WPA2 simultaneously. Specify how often wireless stations have to resend usernames and passwords in order to stay connected. Enter a time interval between 10 and 9999 - ZyXEL P-2602HWL-D3A | User Guide - Page 131
Guide Table 40 Wireless: WPA(2) LABEL DESCRIPTION Idle Timeout The ZyXEL Device automatically disconnects a wireless station from the wired network after a period of inactivity. The wireless is also supported in WPA-PSK mode. The ZyXEL Device default your network administrator instructs you to do - ZyXEL P-2602HWL-D3A | User Guide - Page 132
Guide Figure 67 Advanced The following table describes the labels in this screen. Table 41 Wireless LAN: Advanced LABEL DESCRIPTION Wireless ZyXEL WLAN devices that 802.11g+ mode support this feature to associate with the ZyXEL Device at higher transmission speeds. This permits the ZyXEL - ZyXEL P-2602HWL-D3A | User Guide - Page 133
P-2602H(W)(L)-DxA Series User's Guide 9.6 OTIST Screen Use this screen to set up and start OTIST on the ZyXEL Device in your wireless network.To open this screen, click Network > Wireless LAN > OTIST. Figure 68 Network > Wireless LAN > OTIST The following table describes the labels in this screen. - ZyXEL P-2602HWL-D3A | User Guide - Page 134
this screen to set up WPA-PSK encryption manually for non-OTIST devices in the wireless network. Review the settings, and click OK. The ZyXEL Device begins transferring OTIST settings. The following screens appear in the ZyXEL Device and in the wireless devices. Figure 71 OTIST: In Progress on the - ZyXEL P-2602HWL-D3A | User Guide - Page 135
or two seconds to transfer the settings again. 4 If you change the SSID or the keys on the ZyXEL Devices after using OTIST, you need to run OTIST again or enter them manually in the wireless device(s). 5 If you configure OTIST to generate a WPA-PSK key, this key changes each time you run - ZyXEL P-2602HWL-D3A | User Guide - Page 136
P-2602H(W)(L)-DxA Series User's Guide 9.7 MAC Filter To change your ZyXEL Device's MAC filter settings, click Network > Wireless LAN > MAC Filter. The screen appears as shown. Figure 74 MAC Address Filter The following table describes the labels in this menu. Table 43 MAC - ZyXEL P-2602HWL-D3A | User Guide - Page 137
to save your changes back to the ZyXEL Device. Cancel Click Cancel to reload the previous configuration for this screen. 9.8 QoS Screen The QoS screen by default allows you to automatically give a service a priority level. Click Network > Wireless LAN > QoS. The following screen displays. Figure - ZyXEL P-2602HWL-D3A | User Guide - Page 138
P-2602H(W)(L)-DxA Series User's Guide Table 44 Wireless LAN: QoS LABEL WMM QoS Policy # Name Service Dest Port Priority Modify Apply DESCRIPTION Select Default to have the ZyXEL Device automatically give a service a priority level according to the ToS value in the IP header of packets it sends. - ZyXEL P-2602HWL-D3A | User Guide - Page 139
This displays the port the selected service uses. Type a port number in the field provided if you want to use a different port to the default port. Priority Select a priority from the drop-down list box. Apply Click Apply to save your changes back to the ZyXEL Device. Cancel Click Cancel to - ZyXEL P-2602HWL-D3A | User Guide - Page 140
P-2602H(W)(L)-DxA Series User's Guide 140 Chapter 9 Wireless LAN - ZyXEL P-2602HWL-D3A | User Guide - Page 141
P-2602H(W)(L)-DxA Series User's Guide CHAPTER 10 Network Address Translation (NAT) Screens This chapter discusses how to configure NAT on the ZyXEL Device. 10.1 NAT Overview NAT (Network Address Translation - NAT, RFC 1631) is the translation of the IP address of a host in a packet, for example, - ZyXEL P-2602HWL-D3A | User Guide - Page 142
P-2602H(W)(L)-DxA Series User's Guide 10.1.2 What NAT Does In the simplest form, NAT changes the source to-Many Overload NAT mapping) in each packet and then forwards it to the Internet. The ZyXEL Device keeps track of the original addresses and port numbers so incoming reply packets can have their - ZyXEL P-2602HWL-D3A | User Guide - Page 143
's Guide 10.1.4 NAT Application The following figure illustrates a possible NAT application, where three inside LANs (logical LANs using IP Alias) behind the ZyXEL Device can communicate with three distinct WAN networks. Figure 78 NAT Application With IP Alias 10.1.5 NAT Mapping Types NAT supports - ZyXEL P-2602HWL-D3A | User Guide - Page 144
P-2602H(W)(L)-DxA Series User's Guide Port numbers do NOT change for One-to-One and Account) is a ZyNOS implementation of a subset of NAT that supports two types of mapping, Many-to-One and Server. The ZyXEL Device also supports Full Feature NAT to map multiple global IP addresses to multiple - ZyXEL P-2602HWL-D3A | User Guide - Page 145
79 NAT General P-2602H(W)(L)-DxA Series User's Guide The following table describes the labels in this exhausting all of the available NAT sessions. Click Apply to save your changes back to the ZyXEL Device. Click Cancel to reload the previous configuration for this screen. 10.4 Port Forwarding A - ZyXEL P-2602HWL-D3A | User Guide - Page 146
Default Server IP Address In addition to the servers for specified services, NAT supports a default server IP address. A default server receives packets ZyXEL Device discards all packets received for ports that are not specified here or in the remote management setup. 10.4.2 Port Forwarding: Services - ZyXEL P-2602HWL-D3A | User Guide - Page 147
DxA Series User's Guide 10.5 Configuring Port Forwarding Note: If you do not assign a Default Server IP address, the ZyXEL Device discards all Server Setup Default Server In addition to the servers for specified services, NAT supports a default server. A default server receives packets from ports - ZyXEL P-2602HWL-D3A | User Guide - Page 148
Guide Table take this action. Click Apply to save your changes back to the ZyXEL Device. Click Cancel to return to the previous configuration. 10.5.1 Port in this screen. Table 50 Port Forwarding Rule Setup LABEL Active Service Name Start Port End Port Server IP Address Back DESCRIPTION Click - ZyXEL P-2602HWL-D3A | User Guide - Page 149
Guide Table 50 Port Forwarding Rule Setup (continued) LABEL Apply Cancel DESCRIPTION Click Apply to save your changes back to the ZyXEL or an outbound proxy if your ZyXEL Device is behind a SIP ALG. Use this screen to enable and disable the SIP (VoIP) ALG in the ZyXEL Device. To access this screen - ZyXEL P-2602HWL-D3A | User Guide - Page 150
P-2602H(W)(L)-DxA Series User's Guide 150 Chapter 10 Network Address Translation (NAT) Screens - ZyXEL P-2602HWL-D3A | User Guide - Page 151
traditional circuitswitched telephone network. You can also use servers to run telephone service applications like PBX services and voice mail. Internet Telephony Service Provider (ITSP) companies provide VoIP service. Circuit-switched telephone networks require 64 kilobits per second (Kbps) in each - ZyXEL P-2602HWL-D3A | User Guide - Page 152
P-2602H(W)(L)-DxA Series User's Guide 11.2.1.2 SIP Service Domain The SIP service domain of the VoIP service provider is the domain name in a SIP URI. For example, if the SIP address is [email protected], then "VoIP-provider.com" is the SIP service domain. 11.2.2 SIP Call Progression - ZyXEL P-2602HWL-D3A | User Guide - Page 153
P-2602H(W)(L)-DxA Series User's Guide 11.2.3.1 SIP User Agent A SIP user agent can make and receive VoIP telephone calls. This means that SIP can be used for peer-to-peer communications even though it is a client-server protocol. In the following figure, - ZyXEL P-2602HWL-D3A | User Guide - Page 154
P-2602H(W)(L)-DxA Series User's Guide 11.2.3.3 SIP Redirect Server A SIP redirect server accepts SIP requests, translates the destination address to an IP each SIP account. You can also enable and disable each SIP account. To access this screen, click VoIP > SIP > SIP Settings. 154 Chapter 11 Voice - ZyXEL P-2602HWL-D3A | User Guide - Page 155
> SIP Settings P-2602H(W)(L)-DxA Series User's Guide Each field is described in the following table. use up to 127 printable ASCII characters. SIP Local Port Enter the ZyXEL Device's listening port number, if your VoIP service provider gave you one. Otherwise, keep the default value. SIP Server - ZyXEL P-2602HWL-D3A | User Guide - Page 156
Guide Table 53 SIP > SIP Settings LABEL SIP Service Domain Send Caller ID Authentication User Name Password Apply Cancel Advanced Setup DESCRIPTION Enter the SIP service . 11.3.1 RTP When you make a VoIP call using SIP, the RTP (Real voice signals. The ZyXEL Device supports the following codecs. - ZyXEL P-2602HWL-D3A | User Guide - Page 157
Series User's Guide 11.6 PSTN waiting (beeping) dial tone when you have a voice message(s). Your VoIP service provider must have a messaging system that sends message waiting status SIP packets key. 1. The ZyXEL Device does not support pulse dialing at the time of writing. Chapter 11 Voice 157 - ZyXEL P-2602HWL-D3A | User Guide - Page 158
P-2602H(W)(L)-DxA Series User's Guide 4 You can continue to add, listen to, or delete tones, tones, or you can hang up the receiver when you are done. 11.9 Advanced SIP Setup Screen Click VoIP > SIP > SIP Settings to open the SIP Settings screen. Select a SIP account and click Advanced Setup to - ZyXEL P-2602HWL-D3A | User Guide - Page 159
Figure 88 VoIP > SIP Settings > Advanced P-2602H(W)(L)-DxA Series User's Guide Chapter 11 Voice 159 - ZyXEL P-2602HWL-D3A | User Guide - Page 160
's Guide Each field is described in the following table. Table 55 VoIP > SIP Settings > Advanced LABEL DESCRIPTION SIP Account This field displays the SIP account you see in this screen. SIP Server Settings URL Type Select whether or not to include the SIP service domain name when the ZyXEL - ZyXEL P-2602HWL-D3A | User Guide - Page 161
support this feature. Expiration Time Keep the default value, unless your VoIP service provider tells you to change it. Enter the number of seconds the SIP server should provide the message waiting service each time the ZyXEL Device subscribes to the service. Before this time passes, the ZyXEL - ZyXEL P-2602HWL-D3A | User Guide - Page 162
bits in the ToS octet so that nonDiffServ compliant, ToS-enabled network device will not conflict with the DSCP mapping. Figure 89 DiffServ: Differentiated Service Field DSCP (6-bit) Unused (2-bit) 1. The ZyXEL Device does not support DiffServ at the time of writing. 162 Chapter 11 Voice - ZyXEL P-2602HWL-D3A | User Guide - Page 163
User's Guide The VoIP > SIP > QoS. Figure 90 SIP > QoS Each field is described in the following table. Table 56 SIP > QoS LABEL DESCRIPTION SIP TOS Priority Setting RTP TOS Priority Setting Voice VLAN ID Enter the priority for SIP voice transmissions. The ZyXEL Device creates Type of Service - ZyXEL P-2602HWL-D3A | User Guide - Page 164
User's Guide Table 56 SIP > QoS LABEL Apply Cancel DESCRIPTION Click this to save your changes and to apply them to the ZyXEL Device. Click services). 11.12.1 Voice Activity Detection/Silence Suppression Voice Activity Detection (VAD) detects whether or not speech is present. This lets the ZyXEL - ZyXEL P-2602HWL-D3A | User Guide - Page 165
's Guide 11.13 Analog Phone Screen Use this screen to control which SIP accounts and PSTN line each phone uses. To access this screen, click VoIP to distinguish between them when you receive phone calls. Note: When the ZyXEL Device does not have power, regardless of the settings you configure, only - ZyXEL P-2602HWL-D3A | User Guide - Page 166
Guide Table 57 Phone > Analog Phone LABEL Apply Cancel Advanced Setup DESCRIPTION Click this to save your changes and to apply them to the ZyXEL Device for each phone port. To access this screen, click Advanced Setup in VoIP > Phone > Analog Phone. Figure 92 Phone > Analog Phone > Advanced - ZyXEL P-2602HWL-D3A | User Guide - Page 167
Guide Table 58 Phone > Analog Phone > Advanced LABEL Dialing Interval Select Dialing Interval Select VAD Support Back Apply Cancel DESCRIPTION Enter the number of seconds the ZyXEL and deactivate immediate dialing. To access this screen, click VoIP > Phone > Common. Figure 93 Phone > Common Each - ZyXEL P-2602HWL-D3A | User Guide - Page 168
P-2602H(W)(L)-DxA Series User's Guide 11.15 Supplementary Phone Services Overview Supplementary services such as call hold, call waiting, call transfer, ... are generally available from your VoIP service provider. The ZyXEL Device supports the following services: • Call Hold • Call Waiting • - ZyXEL P-2602HWL-D3A | User Guide - Page 169
P-2602H(W)(L)-DxA Series User's Guide Table 60 European Flash Key Commands COMMAND Flash Flash Flash SUB-COMMAND DESCRIPTION 2 3 *98# 1. Switch back and forth between two calls. 2. Put a current call on - ZyXEL P-2602HWL-D3A | User Guide - Page 170
P-2602H(W)(L)-DxA Series User's Guide 2 When you hear the dial tone, dial "*98#" "2". 11.15.3 USA Type Supplementary Services This section describes how to use supplementary phone services with the USA Type Call Service Mode. Commands for supplementary services are listed in the table below. - ZyXEL P-2602HWL-D3A | User Guide - Page 171
P-2602H(W)(L)-DxA Series User's Guide 11.15.3.2 USA Call Waiting This allows you to place a call on hold while you Use this screen to maintain settings that often depend on which region of the world the ZyXEL Device is in. To access this screen, click VoIP > Phone > Region. Chapter 11 Voice 171 - ZyXEL P-2602HWL-D3A | User Guide - Page 172
the place in which the ZyXEL Device is located. Call Service Mode Select the mode for supplementary phone services (call hold, call waiting, call transfer and three-way conference calls) that your VoIP service provider supports. Europe Type - use supplementary phone services in European mode USA - ZyXEL P-2602HWL-D3A | User Guide - Page 173
Guide To access this screen, click VoIP > Phone Book > Speed Dial. Figure 95 Phone Book > field is described in the following table. Table 63 Phone Book > Speed Dial LABEL Speed Dial phone number. Enter the SIP number you want the ZyXEL Device to call when you dial the speeddial number. - ZyXEL P-2602HWL-D3A | User Guide - Page 174
Guide Table 63 Phone Book > Speed Dial LABEL DESCRIPTION Speed Dial Phone Use this section to look at all the speed-dial entries and to erase them. Book Speed Dial This field displays the speed-dial number you should dial to use this entry. Number This field displays the SIP number the ZyXEL - ZyXEL P-2602HWL-D3A | User Guide - Page 175
P-2602H(W)(L)-DxA Series User's Guide Figure 96 Phone Book > Incoming Call Policy You can create two you want to see in this screen. If you change this field, the screen automatically refreshes. The ZyXEL Device checks these rules, in the order in which they appear, after it checks the rules in the - ZyXEL P-2602HWL-D3A | User Guide - Page 176
Guide Table 64 Phone Book > Incoming Call Policy LABEL Advanced Setup # Activate Incoming Call Number Forward to Number Condition Apply Cancel DESCRIPTION The ZyXEL The ZyXEL Device checks ZyXEL Device immediately forwards ZyXEL ZyXEL Device rejects calls from the Incoming Call Number. Accept - The ZyXEL ZyXEL - ZyXEL P-2602HWL-D3A | User Guide - Page 177
PSTN Line > General P-2602H(W)(L)-DxA Series User's Guide Each field is described in the following table. Table registered. These numbers tell the ZyXEL Device that you want to make a regular phone call. Relay to PSTN Line Enter phone numbers (for regular calls, not VoIP calls) that you want - ZyXEL P-2602HWL-D3A | User Guide - Page 178
P-2602H(W)(L)-DxA Series User's Guide 178 Chapter 11 Voice - ZyXEL P-2602HWL-D3A | User Guide - Page 179
(W)(L)-DxA Series User's Guide CHAPTER 12 Phone Usage This chapter describes how to use a phone connected to your ZyXEL Device for basic tasks . Dial the speed dial entry on your telephone's keypad. Use your VoIP service provider's dialing plan to call regular telephone numbers. 12.2 Using Speed Dial - ZyXEL P-2602HWL-D3A | User Guide - Page 180
User's Guide 12.5 Auto Firmware Upgrade During auto-provisioning, the ZyXEL Device checks to see if there is a newer firmware version. If newer firmware is available, the ZyXEL Device plays a recording when you pick up your phone's handset. Press "*99#" to upgrade the ZyXEL Device's firmware. Press - ZyXEL P-2602HWL-D3A | User Guide - Page 181
Guide CHAPTER 13 Firewalls This chapter gives some background information on firewalls and introduces the ZyXEL problem. A firewall is one of the mechanisms used to establish a network security perimeter in support 14.6.2 on page 202 to configure a custom service. Refer to Section 14.8.3 on page 209 - ZyXEL P-2602HWL-D3A | User Guide - Page 182
the granular application level access control or caching that some proxies support. See Section 13.5 on page 187 for more information on ZyXEL's Firewall The ZyXEL Device firewall is a stateful inspection firewall and is designed to protect against Denial of Service attacks when activated. The ZyXEL - ZyXEL P-2602HWL-D3A | User Guide - Page 183
Application 13.4 Denial of Service Denials of Service (DoS) attacks are aimed at devices and networks with a connection to the Internet. Their goal is not to steal information, but to disable a device or network so users no longer have access to network resources. The ZyXEL Device is pre-configured - ZyXEL P-2602HWL-D3A | User Guide - Page 184
P-2602H(W)(L)-DxA Series User's Guide Table 66 Common IP Ports 21 FTP 53 23 Telnet 80 25 SMTP 110 DNS HTTP POP3 13.4.2 Types of DoS Attacks There are four - ZyXEL P-2602HWL-D3A | User Guide - Page 185
P-2602H(W)(L)-DxA Series User's Guide Under normal circumstances, the application that initiates a session sends a SYN (synchronize) packet to the receiving server. The receiver sends back an ACK (acknowledgment) packet and - ZyXEL P-2602HWL-D3A | User Guide - Page 186
P-2602H(W)(L)-DxA Series User's Guide Figure 101 Smurf Attack 13.4.2.1 ICMP Vulnerability ICMP is an error-reporting protocol that works in concert with IP. The following ICMP types trigger an - ZyXEL P-2602HWL-D3A | User Guide - Page 187
Series User's Guide 13.4.2.3 Traceroute and should be allowed through the router or firewall. The ZyXEL Device blocks all IP Spoofing attempts. 13.5 Stateful Inspection to be trusted. For example, if you access some outside service, the proxy server remembers things about your original request, - ZyXEL P-2602HWL-D3A | User Guide - Page 188
P-2602H(W)(L)-DxA Series User's Guide The previous figure shows the ZyXEL Device's default firewall rules in connection's temporary inbound access list entries are deleted. 13.5.2 Stateful Inspection on Your ZyXEL Device Additional rules may be defined to extend or override the default rules. For - ZyXEL P-2602HWL-D3A | User Guide - Page 189
P-2602H(W)(L)-DxA Series User's Guide • Allow certain types of traffic from the Internet to specific hosts connection information such as IP addresses, TCP ports, sequence numbers, etc. When the ZyXEL Device receives any subsequent packet (from the Internet or from the LAN), its connection - ZyXEL P-2602HWL-D3A | User Guide - Page 190
Guide A similar situation exists for ICMP, except that the ZyXEL . Any protocol that operates in this way must be supported on a case-by-case basis. You can use the • Don't enable any local service (such as SNMP or NTP) that you don't use. Any enabled service could present a potential security - ZyXEL P-2602HWL-D3A | User Guide - Page 191
Series User's Guide • Encourage your Packet Filtering Vs Firewall Below are some comparisons between the ZyXEL Device's filtering and firewall functions. 13.7.1 Packet Filtering: need a chain of rules to filter a service. • Packet filtering only checks the header portion of an IP packet. - ZyXEL P-2602HWL-D3A | User Guide - Page 192
P-2602H(W)(L)-DxA Series User's Guide 13.7.1.1 When To Use Filtering • To block/allow LAN packets the network session rather than control individual packets in a session. • The firewall provides e-mail service to notify you of routine reports and when alerts occur. 13.7.2.1 When To Use The Firewall - ZyXEL P-2602HWL-D3A | User Guide - Page 193
P-2602H(W)(L)-DxA Series User's Guide CHAPTER 14 Firewall Configuration This chapter shows you how to enable and configure the ZyXEL Device firewall. 14.1 Access Methods The web configurator is, by far, the most comprehensive firewall configuration tool your ZyXEL Device has to offer. For this - ZyXEL P-2602HWL-D3A | User Guide - Page 194
User's Guide Note: administrator. Your customized rules take precedence and override the ZyXEL Device's default rules. 14.3 Rule Logic Overview Note: traffic? 2 What direction of traffic does the rule apply to? 3 What IP services will be affected? 4 What computers on the LAN are to be affected (if - ZyXEL P-2602HWL-D3A | User Guide - Page 195
DxA Series User's Guide 4 Does a to the sender. 14.3.3.2 Service Select the service from the Service scrolling list box. If the service is not listed, it is to LAN/ Router means policies for LAN-to-ZyXEL Device (the policies for managing the ZyXEL Device through the LAN interface) and policies for - ZyXEL P-2602HWL-D3A | User Guide - Page 196
User's Guide 14.4.1 LAN to WAN Rules The default rule for LAN to WAN traffic is that all users on the LAN are allowed nonrestricted access to the WAN. When you configure a LAN to WAN rule, you in essence want to limit some or all users from accessing certain services on the - ZyXEL P-2602HWL-D3A | User Guide - Page 197
Guide The following table describes the labels in this screen. Table 70 Firewall: General LABEL Active Firewall Bypass Triangle Route DESCRIPTION Select this check box to activate the firewall. The ZyXEL Device performs access control and protects against Denial of Service with this problem. This - ZyXEL P-2602HWL-D3A | User Guide - Page 198
Guide Figure 104 Firewall Rules The following table describes the labels in this screen. Table 71 Firewall Rules LABEL DESCRIPTION Firewall Rules This read-only bar shows how much of the ZyXEL is equivalent to Any. Service This drop-down list box displays the services to which this firewall - ZyXEL P-2602HWL-D3A | User Guide - Page 199
P-2602H(W)(L)-DxA Series User's Guide Table 71 Firewall Rules (continued) LABEL Log Modify they are applied in order of their numbering. Click Apply to save your changes back to the ZyXEL Device. Click Cancel to begin configuring this screen afresh. 14.6.1 Configuring Firewall Rules Refer to - ZyXEL P-2602HWL-D3A | User Guide - Page 200
P-2602H(W)(L)-DxA Series User's Guide Figure 105 Firewall: Edit Rule 200 Chapter 14 Firewall Configuration - ZyXEL P-2602HWL-D3A | User Guide - Page 201
Guide Services Available/ Selected Please see Appendix F on page 371 for more information on services available. Services Highlight a service from the Available Services have the ZyXEL Device record these logs. Alert Send Alert Message Select the check box to have the ZyXEL Device generate an - ZyXEL P-2602HWL-D3A | User Guide - Page 202
P-2602H(W)(L)-DxA Series User's Guide 14.6.2 Customized Services Configure customized services and port numbers not predefined by the ZyXEL Device. For a comprehensive list of port numbers and services, visit the IANA (Internet Assigned Number Authority) website. See Appendix F on page 371 for some - ZyXEL P-2602HWL-D3A | User Guide - Page 203
P-2602H(W)(L)-DxA Series User's Guide Figure 107 Firewall: Configure Customized Services The following table describes the labels in this screen. Table 74 Firewall: Configure Customized Services LABEL DESCRIPTION Service Name Type a unique name for your custom port. Service Type Choose the IP - ZyXEL P-2602HWL-D3A | User Guide - Page 204
P-2602H(W)(L)-DxA Series User's Guide Figure 108 Firewall Example: Rules 3 In the Rules screen Edit Rule screen, click the Edit Customized Services link to open the Customized Service screen. 6 Click an index number to display the Customized Services Config screen and configure the screen as follows - ZyXEL P-2602HWL-D3A | User Guide - Page 205
P-2602H(W)(L)-DxA Series User's Guide Figure 110 Firewall Example: Edit Rule: Destination Address 9 Use the Add >> and Remove buttons between Available Services and Selected Services list boxes to configure it as follows. Click Apply when you are done. Note: Custom services show up with an "*" - ZyXEL P-2602HWL-D3A | User Guide - Page 206
P-2602H(W)(L)-DxA Series User's Guide Figure 111 Firewall Example: Edit Rule: Select Customized Services On completing the configuration procedure for this Internet firewall rule, the Rules screen should look like the following. Rule 1 allows a "MyService" connection from the WAN - ZyXEL P-2602HWL-D3A | User Guide - Page 207
P-2602H(W)(L)-DxA Series User's Guide Figure 112 Firewall Example: Rules: MyService 14.8 DoS Thresholds For DoS attacks, the ZyXEL Device uses thresholds to determine when to drop sessions that do not become fully established. These thresholds apply globally to all sessions. You can use - ZyXEL P-2602HWL-D3A | User Guide - Page 208
of Service attack is occurring. For TCP, "halfopen" means that the session has not reached the established state-the TCP three-way handshake has not yet been completed (see Figure 99 on page 184). For UDP, "half-open" means that the firewall has detected no return traffic. The ZyXEL Device measures - ZyXEL P-2602HWL-D3A | User Guide - Page 209
P-2602H(W)(L)-DxA Series User's Guide 14.8.3 Configuring Firewall Thresholds The ZyXEL Device also sends alerts whenever TCP the labels in this screen. Table 75 Firewall: Threshold LABEL Denial of Service Thresholds One Minute Low One Minute High DESCRIPTION DEFAULT VALUES This is the rate - ZyXEL P-2602HWL-D3A | User Guide - Page 210
P-2602H(W)(L)-DxA Series User's Guide Table 75 Firewall: Threshold (continued) LABEL DESCRIPTION DEFAULT VALUES Maximum Incomplete Low This is the number of existing half-open sessions that causes the firewall to stop deleting half-open sessions. The ZyXEL Device continues to delete half-open - ZyXEL P-2602HWL-D3A | User Guide - Page 211
P-2602H(W)(L)-DxA Series User's Guide CHAPTER 15 Content Filtering This chapter covers how to sites containing certain keywords in the URL. For example, if you enable the keyword "bad", the ZyXEL Device blocks all sites containing this keyword including the URL http://www.website.com/bad.html, even - ZyXEL P-2602HWL-D3A | User Guide - Page 212
P-2602H(W)(L)-DxA Series User's Guide The following table describes the labels in this screen. box contains the list of all the keywords that you have configured the these keywords in the URL: ZyXEL Device to block. Delete Highlight a keyword in the box and click Delete to remove it. Clear All - ZyXEL P-2602HWL-D3A | User Guide - Page 213
P-2602H(W)(L)-DxA Series User's Guide The following table describes the labels in this screen. Table Configuring Trusted Computers To exclude a range of users on the LAN from content filtering on your ZyXEL Device, click Security > Content Filter > Trusted. The screen appears as shown. Figure 116 - ZyXEL P-2602HWL-D3A | User Guide - Page 214
P-2602H(W)(L)-DxA Series User's Guide 214 Chapter 15 Content Filtering - ZyXEL P-2602HWL-D3A | User Guide - Page 215
P-2602H(W)(L)-DxA Series User's Guide CHAPTER 16 Introduction to IPSec This chapter introduces the VPN is a combination of tunneling, encryption, authentication, access control and auditing technologies/services used to transport traffic over the Internet or any insecure network that uses the TCP - ZyXEL P-2602HWL-D3A | User Guide - Page 216
P-2602H(W)(L)-DxA Series User's Guide Figure 117 Encryption and Decryption 16.1.3.2 Data Confidentiality The IPSec verify the source of IPSec packets. This service depends on the data integrity service. 16.1.4 VPN Applications The ZyXEL Device supports the following VPN applications. • Linking Two - ZyXEL P-2602HWL-D3A | User Guide - Page 217
118 IPSec Architecture P-2602H(W)(L)-DxA Series User's Guide 16.2.1 IPSec Algorithms The ESP (Encapsulating Security Payload Key Management Key management allows you to determine whether to use IKE (ISAKMP) or manual key configuration in order to set up a VPN. 16.3 Encapsulation The two modes of - ZyXEL P-2602HWL-D3A | User Guide - Page 218
2602H(W)(L)-DxA Series User's Guide Figure 119 Transport and packet to transmit it securely. A Tunnel mode is required for gateway services to provide access to internal systems. Tunnel mode is fundamentally an IP tunnel a host computer behind the ZyXEL Device. 218 Chapter 16 Introduction to IPSec - ZyXEL P-2602HWL-D3A | User Guide - Page 219
P-2602H(W)(L)-DxA Series User's Guide NAT is incompatible with the AH protocol in both Transport and Tunnel mode. An IPSec VPN using the AH protocol digitally signs the outbound packet, - ZyXEL P-2602HWL-D3A | User Guide - Page 220
P-2602H(W)(L)-DxA Series User's Guide 220 Chapter 16 Introduction to IPSec - ZyXEL P-2602HWL-D3A | User Guide - Page 221
P-2602H(W)(L)-DxA Series User's Guide CHAPTER 17 VPN Screens This chapter introduces the VPN Encapsulating Security Payload) Protocol The ESP protocol (RFC 2406) provides encryption as well as the services offered by AH. ESP authenticating properties are limited compared to the AH due to the non - ZyXEL P-2602HWL-D3A | User Guide - Page 222
P-2602H(W)(L)-DxA Series User's Guide Table 80 AH and ESP ESP AH ENCRYPTION AUTHENTICATION DES (default) Data security. 17.3 My IP Address My IP Address is the WAN IP address of the ZyXEL Device. The ZyXEL Device has to rebuild the VPN tunnel if the My IP Address changes after setup. The - ZyXEL P-2602HWL-D3A | User Guide - Page 223
User's Guide 17.4 secure gateway has a dynamic WAN IP address and is using DDNS. The ZyXEL Device has to rebuild the VPN tunnel each time the remote secure gateway configured as 0.0.0.0 only when using IKE key management and not Manual key management. 17.5 VPN Setup Screen The following figure helps - ZyXEL P-2602HWL-D3A | User Guide - Page 224
P-2602H(W)(L)-DxA Series User's Guide Figure 121 VPN Setup The following table describes computer(s) on your local network behind your ZyXEL Device. The same (static) IP address is displayed twice when the Local Address Type field in the VPN-IKE (or VPN-Manual Key) screen is configured to Single. - ZyXEL P-2602HWL-D3A | User Guide - Page 225
's Guide Table when the Remote Address Type field in the VPN-IKE (or VPN-Manual Key) screen is configured to Single. The beginning and ending (static) When you initiate an IPSec tunnel with keep alive enabled, the ZyXEL Device automatically renegotiates the tunnel when the IPSec SA lifetime period - ZyXEL P-2602HWL-D3A | User Guide - Page 226
User's Guide 17.7 is not normally compatible with ESP in transport mode either, but the ZyXEL Device's NAT Traversal feature provides a way to handle this. NAT router changes the header of the IPSec packet. NAT traversal solves the problem by adding a UDP port 500 header to the IPSec packet. The - ZyXEL P-2602HWL-D3A | User Guide - Page 227
P-2602H(W)(L)-DxA Series User's Guide Y* - This is supported in the ZyXEL Device if you enable NAT traversal. order to access computers that use private domain names on the headquarters (HQ) network, the ZyXEL Device at branch office 1 uses the Intranet DNS server in headquarters. The DNS server - ZyXEL P-2602HWL-D3A | User Guide - Page 228
P-2602H(W)(L)-DxA Series User's Guide Regardless of the ID type and content configuration, the ZyXEL Device does not allow you with which you will make the VPN connection or leave the field blank to have the ZyXEL Device automatically use the address in the Secure Gateway field. Type a domain name ( - ZyXEL P-2602HWL-D3A | User Guide - Page 229
P-2602H(W)(L)-DxA Series User's Guide 17.9.1 ID Type and Content Examples Two IPSec routers must have matching ID type and content configuration in order to set up a VPN tunnel. The two ZyXEL Devices in this example can complete negotiation and establish a VPN tunnel. Table 85 Matching ID Type - ZyXEL P-2602HWL-D3A | User Guide - Page 230
P-2602H(W)(L)-DxA Series User's Guide Figure 124 Edit VPN Policies The following table describes the Keep Alive Select either Yes or No from the drop-down list box. Select Yes to have the ZyXEL Device automatically reinitiate the SA after the SA lifetime times out, even if there is no traffic. The - ZyXEL P-2602HWL-D3A | User Guide - Page 231
, including spaces, but the ZyXEL Device drops trailing spaces. IPSec Key Mode Select IKE or Manual from the drop-down list box. IKE provides more protection so it is generally recommended. Manual is a useful option for troubleshooting if you have problems using IKE key management. Negotiation - ZyXEL P-2602HWL-D3A | User Guide - Page 232
P-2602H(W)(L)-DxA Series User's Guide Table 87 Edit VPN Policies LABEL DESCRIPTION Remote in the Local ID Type field, type a domain name or e-mail address by which to identify this ZyXEL Device in the local Content field. Use up to 31 ASCII characters including spaces, although trailing spaces - ZyXEL P-2602HWL-D3A | User Guide - Page 233
User's Guide Table connection. If you configure this field to 0.0.0.0 or leave it blank, the ZyXEL Device will use the address in the Secure Gateway Address field (refer to protocol (RFC 2406) provides encryption as well as some of the services offered by AH. If you select ESP here, you must select - ZyXEL P-2602HWL-D3A | User Guide - Page 234
P-2602H(W)(L)-DxA Series User's Guide Table 87 Edit VPN Policies LABEL DESCRIPTION Encryption Select Back to return to the previous screen. Apply Click Apply to save your changes back to the ZyXEL Device. Cancel Click Cancel to begin configuring this screen afresh. 17.12 IKE Phases There are - ZyXEL P-2602HWL-D3A | User Guide - Page 235
P-2602H(W)(L)-DxA Series User's Guide • Choose an encryption algorithm. • Choose an authentication algorithm. • Choose a Diffie- IPSec SA if there is traffic when the IPSec SA lifetime period expires. The ZyXEL Device also automatically renegotiates the IPSec SA if both IPSec routers have keep alive - ZyXEL P-2602HWL-D3A | User Guide - Page 236
Series User's Guide 17.12 DH1) and 1024-bit (Group 2 - DH2) Diffie-Hellman groups are supported. Upon completion of the Diffie-Hellman exchange, the two peers have a shared , so PFS is disabled (None) by default in the ZyXEL Device. Disabling PFS means new authentication and encryption keys are - ZyXEL P-2602HWL-D3A | User Guide - Page 237
126 Advanced VPN Policies P-2602H(W)(L)-DxA Series User's Guide The following table describes the fields in this screen. As a VPN setup is processing intensive, the system is vulnerable to Denial of Detection Service (DoS) attacks The IPSec receiver can detect and reject old or duplicate packets to - ZyXEL P-2602HWL-D3A | User Guide - Page 238
P-2602H(W)(L)-DxA Series User's Guide Table 88 Advanced VPN Policies LABEL DESCRIPTION Negotiation Mode Select Main or Aggressive from the drop-down list box. Multiple SAs connecting through a secure gateway - ZyXEL P-2602HWL-D3A | User Guide - Page 239
P-2602H(W)(L)-DxA Series User's Guide Table 88 Advanced VPN Policies LABEL DESCRIPTION ZyXEL Device and return to the VPN-IKE screen. Cancel Click Cancel to return to the VPN-IKE screen without saving your changes. 17.14 Manual Key Setup Manual key management is useful if you have problems - ZyXEL P-2602HWL-D3A | User Guide - Page 240
User's Guide Figure 127 VPN: Manual Key The following table describes the fields in this screen. Table 89 VPN: Manual Key LABEL the ZyXEL Device drops trailing spaces. Select IKE or Manual from the drop-down list box. Manual is a useful option for troubleshooting if you have problems using - ZyXEL P-2602HWL-D3A | User Guide - Page 241
P-2602H(W)(L)-DxA Series User's Guide Table 89 VPN: Manual Key (continued) LABEL DESCRIPTION DNS Server (for IPSec VPN) If there is a private DNS server that services the VPN, type its IP address here. The ZyXEL Device assigns this additional DNS server to the ZyXEL Device 's DHCP clients that - ZyXEL P-2602HWL-D3A | User Guide - Page 242
Guide Table 89 VPN: Manual Key (continued) LABEL DESCRIPTION My IP Address Enter the WAN IP address of your ZyXEL Device. The VPN tunnel has to be rebuilt if this IP address changes. The following applies if this field is configured as 0.0.0.0: The ZyXEL as some of the services offered by AH. If - ZyXEL P-2602HWL-D3A | User Guide - Page 243
User's Guide When there is outbound traffic but no inbound traffic, the SA times out automatically after two minutes. A tunnel with no outbound or inbound traffic is "idle" and does not timeout until the SA lifetime period expires. SeeSection 17.6 on page 225on keep alive to have the ZyXEL Device - ZyXEL P-2602HWL-D3A | User Guide - Page 244
P-2602H(W)(L)-DxA Series User's Guide 17.17 Configuring Global Setting To change your ZyXEL Device's global settings, click VPN and B and C in the figure) to use one VPN rule to simultaneously access a ZyXEL Device at headquarters (HQ in the figure). The telecommuters do not have domain names mapped - ZyXEL P-2602HWL-D3A | User Guide - Page 245
P-2602H(W)(L)-DxA Series User's Guide Figure 130 Telecommuters Sharing One VPN Rule Example Table between VPN rules. Telecommuters can each use a separate VPN rule to simultaneously access a ZyXEL Device at headquarters. They can use different IPSec parameters. The local IP addresses (or ranges - ZyXEL P-2602HWL-D3A | User Guide - Page 246
P-2602H(W)(L)-DxA Series User's Guide Figure 131 Telecommuters Using Unique VPN Rules Example Table 93 ID Type: E-mail Local ID Content: [email protected] Local IP Address: 192.168.4.15 Headquarters ZyXEL Device Rule 3: Peer ID Type: E-mail Peer ID Content: [email protected] Secure Gateway Address - ZyXEL P-2602HWL-D3A | User Guide - Page 247
P-2602H(W)(L)-DxA Series User's Guide 17.19 VPN and Remote Management If a VPN tunnel uses Telnet, FTP, WWW, then you should configure remote management (Remote Management) to allow access for that service. Chapter 17 VPN Screens 247 - ZyXEL P-2602HWL-D3A | User Guide - Page 248
P-2602H(W)(L)-DxA Series User's Guide 248 Chapter 17 VPN Screens - ZyXEL P-2602HWL-D3A | User Guide - Page 249
P-2602H(W)(L)-DxA Series User's Guide CHAPTER 18 Static Route This chapter shows you how to configure static routes for your ZyXEL Device. 18.1 Static Route Each remote node specifies only the network to which the gateway is directly connected, and the ZyXEL Device has no knowledge of the networks - ZyXEL P-2602HWL-D3A | User Guide - Page 250
P-2602H(W)(L)-DxA Series User's Guide Figure 133 Static Route The following table describes the labels to confirm that you want to delete the route. Click this to apply your changes to the ZyXEL Device. Click this to return to the previously saved configuration. 18.2.1 Static Route Edit Select a - ZyXEL P-2602HWL-D3A | User Guide - Page 251
Figure 134 Static Route Edit P-2602H(W)(L)-DxA Series User's Guide The following table describes the labels in this screen. Table 95 screen without saving. Click Apply to save your changes back to the ZyXEL Device. Click Cancel to begin configuring this screen afresh. Chapter 18 Static Route 251 - ZyXEL P-2602HWL-D3A | User Guide - Page 252
P-2602H(W)(L)-DxA Series User's Guide 252 Chapter 18 Static Route - ZyXEL P-2602HWL-D3A | User Guide - Page 253
Guide CHAPTER 19 Bandwidth Management This chapter contains information about configuring bandwidth management, editing rules and viewing the ZyXEL Device's bandwidth management logs. 19.1 Bandwidth Management Overview ZyXEL classes based on individual applications (like VoIP, Web, FTP, Email and - ZyXEL P-2602HWL-D3A | User Guide - Page 254
User's Guide The following Table 96 Application and Subnet-based Bandwidth Management Example TRAFFIC TYPE VoIP Web FTP E-mail Video FROM SUBNET A 64 Kbps 64 divides up an interface's bandwidth among the bandwidth classes. The ZyXEL Device has two types of scheduler: fairness-based and priority- - ZyXEL P-2602HWL-D3A | User Guide - Page 255
P-2602H(W)(L)-DxA Series User's Guide 19.5.2 Fairness-based Scheduler The ZyXEL Device divides bandwidth equally among The maximize bandwidth usage option (see Figure 136 on page 258) allows the ZyXEL Device to divide up any available bandwidth on the interface (including unallocated bandwidth - ZyXEL P-2602HWL-D3A | User Guide - Page 256
2602H(W)(L)-DxA Series User's Guide 19.6.2 Maximize Bandwidth Usage Example Here is an example of a ZyXEL Device that has maximize (6). If they each require 1536 kbps or more of extra bandwidth, the ZyXEL Device divides the total 3072 kbps total of unbudgeted and unused bandwidth equally between - ZyXEL P-2602HWL-D3A | User Guide - Page 257
P-2602H(W)(L)-DxA Series User's Guide • Research requires more bandwidth but only gets budgeted bandwidth. The administration class only uses 1024 kbps of its budgeted 2048 kbps. • The ZyXEL Device divides the total 3072 kbps total of unbudgeted and unused bandwidth equally among the other classes. - ZyXEL P-2602HWL-D3A | User Guide - Page 258
P-2602H(W)(L)-DxA Series User's Guide Enable bandwidth management on an interface and set the source. Traffic redirect or IP alias may cause LAN-to-LAN traffic to pass through the ZyXEL Device and be managed by bandwidth management. Select an interface's check box to enable bandwidth management - ZyXEL P-2602HWL-D3A | User Guide - Page 259
forwards to the LAN. Select WAN to apply bandwidth management to traffic that the ZyXEL Device forwards to the WAN. Select WLAN to apply bandwidth management to traffic that the ZyXEL Device forwards to the WLAN. Select a service for your rule or you can select User define to go to the screen where - ZyXEL P-2602HWL-D3A | User Guide - Page 260
P-2602H(W)(L)-DxA Series User's Guide Table 102 Bandwidth Management: Rule Setup (continued) LABEL Bandwidth ( changes back to the ZyXEL Device. Click Cancel to begin configuring this screen afresh. 19.8.1 Rule Configuration Click the Edit icon or User define in the Service field to configure a - ZyXEL P-2602HWL-D3A | User Guide - Page 261
P-2602H(W)(L)-DxA Series User's Guide See Appendix F on page 371 for a list of commonly-used services. The following table describes Protocol) is a signaling protocol used in Internet telephony, instant messaging and other VoIP (Voice over IP) applications. Select SIP from the drop-down list box to - ZyXEL P-2602HWL-D3A | User Guide - Page 262
P-2602H(W)(L)-DxA Series User's Guide Table 103 Bandwidth Management Rule Configuration (continued) LABEL and enter the protocol (service type) number. 0 means any protocol number. Click Back to go to the previous screen. Click Apply to save your changes back to the ZyXEL Device. Click Cancel to - ZyXEL P-2602HWL-D3A | User Guide - Page 263
P-2602H(W)(L)-DxA Series User's Guide CHAPTER 20 Dynamic DNS Setup This chapter discusses how to configure your ZyXEL Device to use Dynamic DNS. 20.1 Dynamic DNS Overview Dynamic DNS allows you to update your current dynamic IP address with one or many dynamic DNS services so that anyone can contact - ZyXEL P-2602HWL-D3A | User Guide - Page 264
Provider This is the name of your Dynamic DNS service provider. Dynamic DNS Type Select the type of service that you are registered for from your Dynamic DNS service provider. Host Name Type the domain name assigned to your ZyXEL Device by your Dynamic DNS provider. You can specify up to two - ZyXEL P-2602HWL-D3A | User Guide - Page 265
P-2602H(W)(L)-DxA Series User's Guide Table 104 Dynamic DNS (continued) LABEL DESCRIPTION Dynamic DNS server auto detect IP Address Select this option only when there are one or more NAT routers between the ZyXEL Device and the DDNS server. This feature has the DDNS server automatically detect - ZyXEL P-2602HWL-D3A | User Guide - Page 266
P-2602H(W)(L)-DxA Series User's Guide 266 Chapter 20 Dynamic DNS Setup - ZyXEL P-2602HWL-D3A | User Guide - Page 267
P-2602H(W)(L)-DxA Series User's Guide CHAPTER 21 Remote Management Configuration This chapter provides information on configuring remote management. 21.1 Remote Management Overview Remote management allows you to determine which services/protocols can access which ZyXEL Device interface (if any) - ZyXEL P-2602HWL-D3A | User Guide - Page 268
P-2602H(W)(L)-DxA Series User's Guide • The IP address in the Secured Client IP field does not match the client IP address. If it does not match, the ZyXEL Device will disconnect the session immediately. • There is already another remote management session with an equal or higher priority running. - ZyXEL P-2602HWL-D3A | User Guide - Page 269
. Secured Client IP A secured client is a "trusted" computer that is allowed to communicate with the ZyXEL Device using this service. Select All to allow any computer to access the ZyXEL Device using this service. Choose Selected to just allow the computer with the IP address that you specify to - ZyXEL P-2602HWL-D3A | User Guide - Page 270
Device using this service. Apply Click Apply to save your customized settings and exit this screen. Cancel Click Cancel to begin configuring this screen afresh. 21.5 Configuring FTP You can upload and download the ZyXEL Device's firmware and configuration files using FTP, please see Section - ZyXEL P-2602HWL-D3A | User Guide - Page 271
with the ZyXEL Device using this service. Select All to allow any computer to access the ZyXEL Device using this service. Choose ZyXEL Device supports SNMP agent functionality, which allows a manager station to manage and monitor the ZyXEL Device through the network. The ZyXEL Device supports - ZyXEL P-2602HWL-D3A | User Guide - Page 272
Guide Figure 145 SNMP Management Model An SNMP managed network consists of two main types of component: agents and a manager. An agent is a management software module that resides in a managed device (the ZyXEL of some events. 21.6.1 Supported MIBs The ZyXEL Device supports MIB II that is defined - ZyXEL P-2602HWL-D3A | User Guide - Page 273
P-2602H(W)(L)-DxA Series User's Guide 21.6.2 SNMP Traps The ZyXEL Device will send traps to the SNMP (defined in RFC-1215) 4 authenticationFailure (defined in RFC-1215) 6 whyReboot (defined in ZYXEL- MIB) 6a For intentional reboot: 6b For fatal error: DESCRIPTION A trap is sent after - ZyXEL P-2602HWL-D3A | User Guide - Page 274
. Secured Client IP A secured client is a "trusted" computer that is allowed to communicate with the ZyXEL Device using this service. Select All to allow any computer to access the ZyXEL Device using this service. Choose Selected to just allow the computer with the IP address that you specify to - ZyXEL P-2602HWL-D3A | User Guide - Page 275
. Table 110 Remote Management: DNS LABEL DESCRIPTION Port The DNS service port number is 53 and cannot be changed here. Access Status Select the interface(s) through which a computer may send DNS queries to the ZyXEL Device. Secured Client IP A secured client is a "trusted" computer that - ZyXEL P-2602HWL-D3A | User Guide - Page 276
P-2602H(W)(L)-DxA Series User's Guide If an outside user attempts to probe an unsupported port on your ZyXEL Device, an ICMP response packet is automatically returned. This allows the outside user to know the ZyXEL Device exists. Your ZyXEL Device supports anti-probing, which prevents the ICMP - ZyXEL P-2602HWL-D3A | User Guide - Page 277
Guide in use. See Section 22.2.1 on page 278 for configuration instructions. 22.1.1 How do I know if I'm using UPnP? UPnP exchange of simple product and service descriptions. NAT traversal allows the Messenger is an example of an application that supports NAT traversal and UPnP. See the NAT chapter - ZyXEL P-2602HWL-D3A | User Guide - Page 278
User's Guide 22.1.3 Cautions with UPnP The automated nature of NAT traversal applications in establishing their own services and opening and ZyXEL ZyXEL has achieved UPnP certification from the Universal Plug and Play Forum UPnP™ Implementers Corp. (UIC). ZyXEL's UPnP implementation supports Internet - ZyXEL P-2602HWL-D3A | User Guide - Page 279
P-2602H(W)(L)-DxA Series User's Guide The following table describes the fields in this screen ZyXEL Device, for example by using NAT traversal, UPnP applications automatically reserve a NAT forwarding port in order to communicate with another UPnP enabled device; this eliminates the need to manually - ZyXEL P-2602HWL-D3A | User Guide - Page 280
P-2602H(W)(L)-DxA Series User's Guide Figure 150 Add/Remove Programs: Windows Setup: Communication 3 In the Communications window, select the Universal Plug and Play check box in the Components selection box. - ZyXEL P-2602HWL-D3A | User Guide - Page 281
P-2602H(W)(L)-DxA Series User's Guide Installing UPnP in Windows XP Follow the steps below to install the UPnP in Connections 4 The Windows Optional Networking Components Wizard window displays. Select Networking Service in the Components selection box and click Details. Figure 153 Windows Optional - ZyXEL P-2602HWL-D3A | User Guide - Page 282
P-2602H(W)(L)-DxA Series User's Guide Figure 154 Networking Services 6 Click OK to go back to the Windows XP and UPnP activated on the ZyXEL Device. Make sure the computer is connected to a LAN port of the ZyXEL Device. Turn on your computer and the ZyXEL Device. Auto-discover Your UPnP-enabled - ZyXEL P-2602HWL-D3A | User Guide - Page 283
Figure 155 Network Connections P-2602H(W)(L)-DxA Series User's Guide 3 In the Internet Connection Properties window, click Settings to see the port mappings there were automatically created. Figure 156 Internet Connection Properties Chapter 22 Universal Plug-and-Play (UPnP) 283 - ZyXEL P-2602HWL-D3A | User Guide - Page 284
P-2602H(W)(L)-DxA Series User's Guide 4 You may edit or delete the port mappings or click Add to manually add port mappings. Figure 157 Internet Connection Properties: Advanced Settings Figure 158 Internet Connection Properties: Advanced Settings: Add 5 When the UPnP-enabled device is disconnected - ZyXEL P-2602HWL-D3A | User Guide - Page 285
Tray Icon P-2602H(W)(L)-DxA Series User's Guide 7 Double-click on the icon to display your current Internet connection status. Figure 160 Internet Connection Status Web Configurator Easy Access With UPnP, you can access the web-based configurator on the ZyXEL Device without finding out the IP - ZyXEL P-2602HWL-D3A | User Guide - Page 286
P-2602H(W)(L)-DxA Series User's Guide Figure 161 Network Connections 4 An icon with the description for each UPnP-enabled device displays under Local Network. 5 Right-click on the icon for your ZyXEL Device and select Invoke. The web configurator login screen displays. 286 Chapter 22 Universal - ZyXEL P-2602HWL-D3A | User Guide - Page 287
P-2602H(W)(L)-DxA Series User's Guide Figure 162 Network Connections: My Network Places 6 Right-click on the icon for your ZyXEL Device and select Properties. A properties window displays with basic information about the ZyXEL Device. Figure 163 Network Connections: My Network Places: Properties: - ZyXEL P-2602HWL-D3A | User Guide - Page 288
P-2602H(W)(L)-DxA Series User's Guide 288 Chapter 22 Universal Plug-and-Play (UPnP) - ZyXEL P-2602HWL-D3A | User Guide - Page 289
P-2602H(W)(L)-DxA Series User's Guide CHAPTER 23 System Use this screen to configure the ZyXEL Device's time and date settings. 23.1 tab. Note the entry in the Full computer name field and enter it as the ZyXEL Device System Name. 23.1.1 General Setup The Domain Name entry is what is propagated to - ZyXEL P-2602HWL-D3A | User Guide - Page 290
P-2602H(W)(L)-DxA Series User's Guide Figure 164 System General Setup The following table describes the labels you type. After you change the password, use the new password to access the ZyXEL Device. Type the new password again for confirmation. Click Apply to save your changes back to the - ZyXEL P-2602HWL-D3A | User Guide - Page 291
Guide 23.2 Time Setting To change your ZyXEL Device's time and date, click Maintenance > System > Time Setting. The screen appears as shown. Use this screen to configure the ZyXEL Setup Manual This field displays the time of your ZyXEL Device. Each time you reload this page, the ZyXEL Device - ZyXEL P-2602HWL-D3A | User Guide - Page 292
Series User's Guide Table 114 time server or the last time configured manually. When you set Time and Date Setup to Manual, enter the new time in this field Select the time service protocol that your time server sends when you turn on the ZyXEL Device. Not all time servers support all protocols, so - ZyXEL P-2602HWL-D3A | User Guide - Page 293
P-2602H(W)(L)-DxA Series User's Guide Table 114 System Time Setting (continued) LABEL End Date Apply Cancel DESCRIPTION Configure ahead of GMT or UTC (GMT+1). Click Apply to save your changes back to the ZyXEL Device. Click Cancel to begin configuring this screen afresh. Chapter 23 System 293 - ZyXEL P-2602HWL-D3A | User Guide - Page 294
P-2602H(W)(L)-DxA Series User's Guide 294 Chapter 23 System - ZyXEL P-2602HWL-D3A | User Guide - Page 295
P-2602H(W)(L)-DxA Series User's Guide CHAPTER 24 Logs This chapter contains information about configuring general log settings and viewing the ZyXEL Device's logs. Refer to the appendix for example log message explanations. 24.1 Logs Overview The web configurator allows you to choose which - ZyXEL P-2602HWL-D3A | User Guide - Page 296
P-2602H(W)(L)-DxA Series User's Guide Figure 166 View Log The following table describes the fields in screen to configure to where the ZyXEL Device is to send logs; the schedule for when the ZyXEL Device is to send the logs and which logs and/or immediate alerts the ZyXEL Device is to record. See - ZyXEL P-2602HWL-D3A | User Guide - Page 297
P-2602H(W)(L)-DxA Series User's Guide Alerts are e-mailed as soon as they happen. Logs may be e-mailed as soon as the log is full. Selecting many alert and/or log - ZyXEL P-2602HWL-D3A | User Guide - Page 298
Guide Table 116 Log Settings LABEL DESCRIPTION Mail Subject Type a title that you want to be in the subject line of the log e-mail message that the ZyXEL Device sends. Not all ZyXEL Device models have this field. Send Log to The ZyXEL to the syslog server manual for more information. Active - ZyXEL P-2602HWL-D3A | User Guide - Page 299
P-2602H(W)(L)-DxA Series User's Guide 24.4 SMTP Error Messages If there are difficulties in sending e-mail the following error message appears. "SMTP action request failed. ret= ??". The "??"are described in the following table. Table 117 SMTP Error Messages -1 means ZyXEL Device out of socket -2 - ZyXEL P-2602HWL-D3A | User Guide - Page 300
P-2602H(W)(L)-DxA Series User's Guide Figure 168 E-mail Log Example Subject: Firewall Alert From Date: Fri, 07 Apr 2000 10:05:42 From: [email protected] To: [email protected] 1|Apr 7 00 |From:192.168.1.1 To:192.168.1.255 |default policy |forward | 09:54:03 |UDP src port:00520 dest port:00520 - ZyXEL P-2602HWL-D3A | User Guide - Page 301
Series User's Guide CHAPTER 25 Tools This chapter explains how to upload new firmware, manage configuration files and restart your ZyXEL Device. Note: Do not interrupt the file transfer process as this may PERMANENTLY DAMAGE YOUR ZyXEL Device. 25.1 Introduction Use the instructions in this chapter - ZyXEL P-2602HWL-D3A | User Guide - Page 302
not match, the device will disconnect the Telnet session immediately. 25.4 Firmware Upgrade Screen Click Maintenance > Tools to open the Firmware screen. Follow the instructions in this screen to upload firmware to your ZyXEL Device. The upload process uses HTTP (Hypertext Transfer Protocol) and may - ZyXEL P-2602HWL-D3A | User Guide - Page 303
. This process may take up to two minutes. Note: Do NOT turn off the ZyXEL Device while firmware upload is in progress! After you see the Firmware Upload in Progress screen, wait two minutes before logging into the ZyXEL Device again. Figure 170 Firmware Upload In Progress Chapter 25 Tools 303 - ZyXEL P-2602HWL-D3A | User Guide - Page 304
User's Guide The ZyXEL Device automatically restarts in this time causing a temporary network disconnect. In some operating systems, you may see the following icon on your desktop. Figure 171 Network Temporarily Disconnected After two minutes, log in again and check your new firmware version in - ZyXEL P-2602HWL-D3A | User Guide - Page 305
Figure 173 Configuration P-2602H(W)(L)-DxA Series User's Guide 25.5.1 Backup Configuration Backup Configuration allows you to back up (save) the ZyXEL Device's current configuration to a file on your computer. Once your ZyXEL Device is configured and functioning properly, it is highly recommended - ZyXEL P-2602HWL-D3A | User Guide - Page 306
P-2602H(W)(L)-DxA Series User's Guide After you see a "restore configuration successful" screen, you must then wait one minute before logging into the ZyXEL Device again. Figure 174 Configuration Upload Successful The ZyXEL Device automatically restarts in this time causing a temporary network - ZyXEL P-2602HWL-D3A | User Guide - Page 307
P-2602H(W)(L)-DxA Series User's Guide 25.5.3 Reset to Factory Defaults Click the Reset button to clear all user-entered configuration information and return the ZyXEL Device to its factory defaults. The following warning screen appears. Figure 177 Reset Warning Message Figure 178 Reset In Process - ZyXEL P-2602HWL-D3A | User Guide - Page 308
P-2602H(W)(L)-DxA Series User's Guide 25.7 Using FTP or TFTP to Back Up Configuration This Example 331 Enter PASS command Password: 230 Logged in ftp> bin 200 Type I OK ftp> get rom-0 zyxel.rom 200 Port command okay 150 Opening data connection for STOR ras 226 File received OK ftp: 16384 bytes sent - ZyXEL P-2602HWL-D3A | User Guide - Page 309
User's Guide 25.7.3 anonymous access. Anonymous logins will work only if your ISP or service administrator has enabled this option. Normal. The server requires a unique Backup Configuration Using TFTP The ZyXEL Device supports the up/downloading of the firmware and the configuration file using TFTP - ZyXEL P-2602HWL-D3A | User Guide - Page 310
Guide 25.7.5 TFTP Command Configuration Backup Example The following is an example TFTP command: tftp [-i] host get rom-0 config.rom where "i" specifies binary image transfer mode (use this mode when transferring binary files), "host" is the ZyXEL the ZyXEL Device. The filename for the firmware is - ZyXEL P-2602HWL-D3A | User Guide - Page 311
P-2602H(W)(L)-DxA Series User's Guide Note: WARNING! Do not interrupt the file transfer process process as this may PERMANENTLY DAMAGE YOUR device. FTP is the preferred method for uploading the firmware and configuration. To use this feature, your computer must have an FTP client. The following - ZyXEL P-2602HWL-D3A | User Guide - Page 312
Guide 0 config.rom" transfers the configuration file on the device to your computer and renames it "config.rom." See earlier in this chapter for more information on filename conventions. 7 Enter "quit" to exit the ftp prompt. 25.9.2 FTP Session Example of Firmware supports the uploading of firmware - ZyXEL P-2602HWL-D3A | User Guide - Page 313
P-2602H(W)(L)-DxA Series User's Guide Note that the telnet connection must be active . 25.9.4 TFTP Upload Command Example The following is an example TFTP command: tftp [-i] host put firmware.bin ras Where "i" specifies binary image transfer mode (use this mode when transferring binary files), "host - ZyXEL P-2602HWL-D3A | User Guide - Page 314
P-2602H(W)(L)-DxA Series User's Guide 314 Chapter 25 Tools - ZyXEL P-2602HWL-D3A | User Guide - Page 315
P-2602H(W)(L)-DxA Series User's Guide CHAPTER 26 Diagnostic These read-only screens display information to help you identify problems with the ZyXEL Device. 26.1 General Diagnostic Click Maintenance > Diagnostic to open the screen shown next. Figure 183 Diagnostic: General The following table - ZyXEL P-2602HWL-D3A | User Guide - Page 316
's Guide Figure cells. With ATM, a high QoS (Quality of Service) can be guaranteed. The (Segmentation and Reassembly) SAR ZyXEL Device sends an OAM F5 packet to the DSLAM/ATM switch and then returns it (loops it back) to the ZyXEL Device. The ATM loopback test is useful for troubleshooting problems - ZyXEL P-2602HWL-D3A | User Guide - Page 317
, whether a given sub-carrier loop has sufficient margins to support certain ADSL transmission rates, and possibly to determine whether particular information and statistics about your ZyXEL Device's ATM statistics, DSL connection statistics, DHCP settings, firmware version, WAN and gateway - ZyXEL P-2602HWL-D3A | User Guide - Page 318
P-2602H(W)(L)-DxA Series User's Guide 318 Chapter 26 Diagnostic - ZyXEL P-2602HWL-D3A | User Guide - Page 319
P-2602H(W)(L)-DxA Series User's Guide CHAPTER 27 Troubleshooting This chapter covers potential problems and the corresponding remedies. 27.1 Problems Starting Up the ZyXEL Device Table 125 Troubleshooting Starting Up Your Device PROBLEM CORRECTIVE ACTION None of the lights turn on when I turn on - ZyXEL P-2602HWL-D3A | User Guide - Page 320
Guide 27.3 Problems with the WAN Table 127 Troubleshooting the WAN PROBLEM CORRECTIVE ACTION The DSL light is off. Check the telephone wire and connections between the ZyXEL you have entered the correct Service Type, User Name and Password pass through, make sure that bridge mode is turned on. - ZyXEL P-2602HWL-D3A | User Guide - Page 321
P-2602H(W)(L)-DxA Series User's Guide 27.4 Problems Accessing the ZyXEL Device Table 128 Troubleshooting Accessing Your Device PROBLEM CORRECTIVE ACTION I cannot The username is "admin". The default password is "1234". The Password and access the Username fields are case-sensitive. Make sure - ZyXEL P-2602HWL-D3A | User Guide - Page 322
P-2602H(W)(L)-DxA Series User's Guide • Java permissions (enabled by default). Note into your device. Either disable pop-up blocking (enabled by default in Windows XP SP (Service Pack) 2) or allow pop-up blocking and create an exception for your device's IP address . 322 Chapter 27 Troubleshooting - ZyXEL P-2602HWL-D3A | User Guide - Page 323
Figure 186 Internet Options P-2602H(W)(L)-DxA Series User's Guide 3 Click Apply to save this setting. 27.4.1.1.2 Enable pop-up Blockers with Exceptions Alternatively, if and then the Privacy tab. 2 Select Settings...to open the Pop-up Blocker Settings screen. Chapter 27 Troubleshooting 323 - ZyXEL P-2602HWL-D3A | User Guide - Page 324
DxA Series User's Guide Figure 187 Internet Options 3 Type the IP address of your device (the web page that you do not want to have blocked) with the prefix "http://". For example, http://192.168.1.1. 4 Click Add to move the IP address to the list of Allowed sites. 324 Chapter 27 Troubleshooting - ZyXEL P-2602HWL-D3A | User Guide - Page 325
Figure 188 Pop-up Blocker Settings P-2602H(W)(L)-DxA Series User's Guide 5 Click Close to return to the Privacy screen. 6 Click Apply to save this setting. 27.4.1.2 are allowed. 1 In Internet Explorer, click Tools, Internet Options and then the Security tab. Chapter 27 Troubleshooting 325 - ZyXEL P-2602HWL-D3A | User Guide - Page 326
P-2602H(W)(L)-DxA Series User's Guide Figure 189 Internet Options 2 Click the Custom Level... button. 3 Scroll down to Scripting. 4 Under Active scripting make sure that of Java applets make sure that Enable is selected (the default). 6 Click OK to close the window. 326 Chapter 27 Troubleshooting - ZyXEL P-2602HWL-D3A | User Guide - Page 327
P-2602H(W)(L)-DxA Series User's Guide Figure 190 Security Settings - Java Scripting 27.4.1.3 Java Permissions 1 From Internet Explorer, click Tools, Internet Options and Under Java permissions make sure that a safety level is selected. 5 Click OK to close the window. Chapter 27 Troubleshooting 327 - ZyXEL P-2602HWL-D3A | User Guide - Page 328
DxA Series User's Guide Figure 191 Security Settings - Java 27.4.1.3.1 JAVA (Sun) 1 From Internet Explorer, click Tools, Internet Options and then the Advanced tab. 2 make sure that Use Java 2 for under Java (Sun) is selected. 3 Click OK to close the window. 328 Chapter 27 Troubleshooting - ZyXEL P-2602HWL-D3A | User Guide - Page 329
(W)(L)-DxA Series User's Guide 27.5 Telephone Problems Table 129 Troubleshooting Telephone PROBLEM CORRECTIVE ACTION The telephone port won't work or the telephone lacks a dial tone. Check the telephone connections and telephone wire. Make sure you have the VoIP SIP Settings screen properly - ZyXEL P-2602HWL-D3A | User Guide - Page 330
Series User's Guide 27.6 Problems With Multiple SIP Accounts You can set up two SIP accounts on your ZyXEL Device and your ZyXEL Device is equipped with two phone ports. By default your ZyXEL Device uses SIP 154. Figure 194 Outgoing Calls: Individual Configuration 330 Chapter 27 Troubleshooting - ZyXEL P-2602HWL-D3A | User Guide - Page 331
P-2602H(W)(L)-DxA Series User's Guide 27.6.2 Incoming Calls The following example shows the default behavior of your ZyXEL Device for incoming calls when two SIP accounts are configured and you are .3 on page 154. Figure 196 Incoming Calls: Individual Configuration Chapter 27 Troubleshooting 331 - ZyXEL P-2602HWL-D3A | User Guide - Page 332
P-2602H(W)(L)-DxA Series User's Guide 332 Chapter 27 Troubleshooting - ZyXEL P-2602HWL-D3A | User Guide - Page 333
P-2602H(W)(L)-DxA Series User's Guide APPENDIX A Product Specifications See also Chapter 1 on page 37 for a general overview of the key features. Specification Tables Table 130 Device Specifications Default IP Address - ZyXEL P-2602HWL-D3A | User Guide - Page 334
P-2602H(W)(L)-DxA Series User's Guide Table 131 Firmware Specifications ADSL Standards Other Protocol Support Management Support ITU G.992.1 G.dmt (Annex B, bridging for unsupported network layer protocols DHCP Server/Client/Relay RIP I/RIP II ICMP ATM QoS SNMP v1 and v2c with MIB II support - ZyXEL P-2602HWL-D3A | User Guide - Page 335
's Guide Table 131 Firmware Specifications (continued) Wireless ("W" (WEP) Data Encryption 64/128/256 bit. WLAN bridge to LAN Up to 32 MAC Address filters IEEE 802 ZyXEL's One-Touch Intelligent Security Technology) Antenna: 2dBi, non-detachable Stateful Packet Inspection Prevent Denial of Service - ZyXEL P-2602HWL-D3A | User Guide - Page 336
P-2602H(W)(L)-DxA Series User's Guide Table 131 Firmware Specifications (continued) Voice Features Other Features SIP version 2 number registration and multiple signaling handling capability.(per POTS port) Caller ID support Flexible Dial Plan (RFC3525 section 7.1.14) Multiple SIP Accounts / Phone - ZyXEL P-2602HWL-D3A | User Guide - Page 337
P-2602H(W)(L)-DxA Series User's Guide Table 132 P-2602HWL Series Power Adaptor Specifications (continued) Input Power Output Power Power Consumption Safety Standards UNITED KINGDOM PLUG STANDARDS AC Power Adapter Model Input - ZyXEL P-2602HWL-D3A | User Guide - Page 338
P-2602H(W)(L)-DxA Series User's Guide 338 Appendix A Product Specifications - ZyXEL P-2602HWL-D3A | User Guide - Page 339
Guide APPENDIX B Splitters and Microfilters This appendix tells you how to install a POTS splitter or a telephone microfilter. Connecting a POTS Splitter When you use the Full Rate (G.dmt) ADSL standard, you can use a POTS (Plain Old Telephone Service or "DSL" to your ZyXEL Device. 3 Connect the side - ZyXEL P-2602HWL-D3A | User Guide - Page 340
figure. Figure 198 Connecting a Microfilter ZyXEL Device With ISDN This section relates to people who use their ZyXEL Device with ADSL over ISDN (digital telephone service) only. The following is an example installation for the ZyXEL Device with ISDN. Figure 199 ZyXEL Device with ISDN 340 Appendix - ZyXEL P-2602HWL-D3A | User Guide - Page 341
Series User's Guide APPENDIX C settings in order to "communicate" with your network. If you manually assign IP information instead of using dynamic assignment, make sure have IP addresses that place them in the same subnet as the ZyXEL Device's LAN port. Windows 95/98/Me Click Start, Settings, - ZyXEL P-2602HWL-D3A | User Guide - Page 342
P-2602H(W)(L)-DxA Series User's Guide Figure 200 WIndows 95/98/Me: Network: Configuration Installing Components The Network window Configuration tab displays a list of installed components. You need a network adapter, the - ZyXEL P-2602HWL-D3A | User Guide - Page 343
P-2602H(W)(L)-DxA Series User's Guide 3 Select Microsoft from the list of manufacturers. 4 Select Client for Microsoft Networks from the list of network clients and then click OK. 5 Restart your computer - ZyXEL P-2602HWL-D3A | User Guide - Page 344
P-2602H(W)(L)-DxA Series User's Guide Figure 202 Windows 95/98/Me: TCP/IP Properties: DNS . 6 Click OK to close the Network window. Insert the Windows CD if prompted. 7 Turn on your ZyXEL Device and restart your computer when prompted. Verifying Settings 1 Click Start and then Run. 2 In the Run - ZyXEL P-2602HWL-D3A | User Guide - Page 345
Figure 203 Windows XP: Start Menu P-2602H(W)(L)-DxA Series User's Guide 2 For Windows XP, click Network Connections. For Windows 2000/NT, click Network and Dial-up Connections. Figure 204 Windows XP: Control Panel 3 Right-click Local - ZyXEL P-2602HWL-D3A | User Guide - Page 346
P-2602H(W)(L)-DxA Series User's Guide Figure 205 Windows XP: Control Panel: Network Connections: Properties 4 Select Internet Protocol (TCP/IP) (under the General tab in Win XP) and click Properties. Figure - ZyXEL P-2602HWL-D3A | User Guide - Page 347
P-2602H(W)(L)-DxA Series User's Guide • If you have a static IP address click Use the gateways. • In TCP/IP Gateway Address, type the IP address of the default gateway in Gateway. To manually configure a default metric (the number of transmission hops), clear the Automatic metric check box and type a - ZyXEL P-2602HWL-D3A | User Guide - Page 348
(W)(L)-DxA Series User's Guide 7 In the Internet Click OK to close the Local Area Connection Properties window. 10Turn on your ZyXEL Device and restart your computer (if prompted). Verifying Settings 1 Click Start, and then click the Support tab. 348 Appendix C Setting up Your Computer's IP Address - ZyXEL P-2602HWL-D3A | User Guide - Page 349
P-2602H(W)(L)-DxA Series User's Guide Macintosh OS 8/9 1 Click the Apple menu, Control Panel and double-click TCP/IP to open the TCP/IP Control Panel. Figure 209 Macintosh OS 8/9: Apple Menu 2 Select Ethernet built-in from the Connect via list. Appendix C Setting up Your Computer's IP Address 349 - ZyXEL P-2602HWL-D3A | User Guide - Page 350
For statically assigned settings, do the following: • From the Configure box, select Manually. • Type your IP address in the IP Address box. • Type your subnet mask in the Subnet mask box. • Type the IP address of your ZyXEL Device in the Router address box. 5 Close the TCP/IP Control Panel. 6 Click - ZyXEL P-2602HWL-D3A | User Guide - Page 351
Series User's Guide 2 Click Network assigned settings, do the following: • From the Configure box, select Manually. • Type your IP address in the IP Address box. • Type address of your ZyXEL Device in the Router address box. 5 Click Apply Now and close the window. 6 Turn on your ZyXEL Device and - ZyXEL P-2602HWL-D3A | User Guide - Page 352
P-2602H(W)(L)-DxA Series User's Guide 352 Appendix C Setting up Your Computer's IP Address - ZyXEL P-2602HWL-D3A | User Guide - Page 353
P-2602H(W)(L)-DxA Series User's Guide APPENDIX D IP Addresses and Subnetting This appendix introduces IP addresses, IP address classes and subnet masks. You use subnet masks to subdivide a network into smaller - ZyXEL P-2602HWL-D3A | User Guide - Page 354
P-2602H(W)(L)-DxA Series User's Guide The following table shows the network number and host ID arrangement for classes A, B and C. Table 133 Classes of IP Addresses IP ADDRESS Class A Class B Class C - ZyXEL P-2602HWL-D3A | User Guide - Page 355
P-2602H(W)(L)-DxA Series User's Guide Subnet Masks A subnet mask is used to determine which bits are part of the network number, and which bits are part of the host ID ( - ZyXEL P-2602HWL-D3A | User Guide - Page 356
P-2602H(W)(L)-DxA Series User's Guide Table 136 Alternative Subnet Mask Notation (continued) SUBNET MASK 255.255.255.240 255.255.255.248 255.255.255.252 SUBNET MASK "1" BITS /28 / - ZyXEL P-2602HWL-D3A | User Guide - Page 357
P-2602H(W)(L)-DxA Series User's Guide Table 138 Subnet 1 (continued) IP/SUBNET MASK Subnet Address: 192.168.1.0 Broadcast Address: 192.168.1.127 NETWORK NUMBER Lowest Host ID: 192.168.1.1 Highest Host - ZyXEL P-2602HWL-D3A | User Guide - Page 358
P-2602H(W)(L)-DxA Series User's Guide Table 140 Subnet 1 (continued) IP/SUBNET MASK NETWORK NUMBER Subnet Address: 192.168.1.0 Broadcast Address: 192.168.1.63 Lowest Host ID: 192.168.1.1 Highest Host ID: 192.168.1.62 LAST OCTET BIT VALUE Table 141 Subnet 2 IP/SUBNET MASK NETWORK NUMBER IP - ZyXEL P-2602HWL-D3A | User Guide - Page 359
User's Guide The following table shows class C IP address last octet values for each subnet. Table 144 Eight Subnets SUBNET 1 2 3 4 5 6 7 8 SUBNET ADDRESS FIRST ADDRESS 0 1 32 33 64 65 96 97 128 129 160 161 192 193 224 225 LAST ADDRESS BROADCAST ADDRESS 30 31 62 63 94 95 - ZyXEL P-2602HWL-D3A | User Guide - Page 360
P-2602H(W)(L)-DxA Series User's Guide The following table is a summary for class "B" subnet planning. Table 146 Class B Subnet Planning NO. "BORROWED" HOST BITS SUBNET MASK 1 255.255.128.0 (/17) 2 255. - ZyXEL P-2602HWL-D3A | User Guide - Page 361
Guide APPENDIX E Wireless LANs Wireless LAN Topologies This section discusses ad-hoc and infrastructure wireless LAN topologies. Ad-hoc Wireless Independent Basic Service Set (IBSS). The following diagram shows an example of notebook computers using wireless adapters to form an Ad-hoc wireless LAN. - ZyXEL P-2602HWL-D3A | User Guide - Page 362
Guide Figure 214 Basic Service Set ESS An Extended Service Set (ESS) consists of a series of overlapping BSSs, each containing an access point, with each access point connected together by a wired network. This wired connection between APs is called a Distribution System (DS). This type of wireless - ZyXEL P-2602HWL-D3A | User Guide - Page 363
Figure 215 Infrastructure WLAN P-2602H(W)(L)-DxA Series User's Guide Channel A channel is the radio frequency(ies) used by IEEE 802.11a/b/g wireless devices. Channels available depend on your geographical area. You may have a choice of channels (for your region) so you should use a different - ZyXEL P-2602HWL-D3A | User Guide - Page 364
P-2602H(W)(L)-DxA Series User's Guide Figure 216 RTS/CTS When station A sends data to the AP, it might not know that is the maximum data fragment size (between 256 and 2432 bytes) that can be sent in the wireless network before the AP will fragment the packet into smaller data frames. 364 Appendix - ZyXEL P-2602HWL-D3A | User Guide - Page 365
P-2602H(W)(L)-DxA Series User's Guide A large Fragmentation Threshold is recommended for of what preamble mode your wireless stations support as all IEEE 802.11b compliant wireless adapters must support long preamble. However, not all wireless adapters support short preamble. Use long preamble - ZyXEL P-2602HWL-D3A | User Guide - Page 366
User Service, RFC 2138, 2139) for centralized user profile and accounting management on a network RADIUS server. • Support for EAP (Extensible Authentication Protocol, RFC 2486) that allows additional authentication methods to be deployed with no changes to the access point or the wireless stations - ZyXEL P-2602HWL-D3A | User Guide - Page 367
DxA Series User's Guide • Access-Challenge Sent The authentication server sends a challenge to the wireless station. The wireless station 'proves' that it knows the password mutual authentication. Finally, MD5 authentication method does not support data encryption with dynamic session key. You must - ZyXEL P-2602HWL-D3A | User Guide - Page 368
Guide EAP-TLS (Transport Layer Security) With EAP-TLS, digital certifications are needed by both the server and the wireless EAP-TTLS (Tunneled Transport Layer Service) EAP-TTLS is an extension of protected. For client authentication, EAP-TTLS supports EAP methods and legacy authentication methods - ZyXEL P-2602HWL-D3A | User Guide - Page 369
P-2602H(W)(L)-DxA Series User's Guide For added security, certificate-based authentications (EAP-TLS, EAP WPA applies IEEE 802.1x and Extensible Authentication Protocol (EAP) to authenticate wireless stations using an external RADIUS database. Encryption WPA improves data encryption by using - ZyXEL P-2602HWL-D3A | User Guide - Page 370
P-2602H(W)(L)-DxA Series User's Guide The Message Integrity Check (MIC) is designed to prevent you configure these security features. Table 149 Wireless Security Relational Matrix AUTHENTICATION METHOD/ KEY MANAGEMENT PROTOCOL ENCRYPTION METHOD ENTER MANUAL KEY Open Open Shared WPA WPA WPA-PSK - ZyXEL P-2602HWL-D3A | User Guide - Page 371
Guide APPENDIX F Services The following table lists some commonly-used services and their associated protocols and port numbers. • Name: This is a short, descriptive name for the service Pines Software. Domain Name Server, a service that matches web names (e.g. www.zyxel.com) to IP numbers. The - ZyXEL P-2602HWL-D3A | User Guide - Page 372
P-2602H(W)(L)-DxA Series User's Guide Table 150 Examples of Services (continued) NAME HTTP HTTPS ICMP ICQ runs over SSL. This is another popular Internet chat program. Microsoft Networks' messenger service uses this protocol. The Network Basic Input/Output System is used for communication between - ZyXEL P-2602HWL-D3A | User Guide - Page 373
P-2602H(W)(L)-DxA Series User's Guide Table 150 Examples of Services (continued) NAME RCMD REAL_AUDIO REXEC RLOGIN mainframes, midrange systems, UNIX systems and network servers. The Simple Service Discovery Protocol supports Universal Plug-and-Play (UPnP). Secure Shell Remote Login Program. - ZyXEL P-2602HWL-D3A | User Guide - Page 374
P-2602H(W)(L)-DxA Series User's Guide Table 150 Examples of Services (continued) NAME TFTP VDOLIVE PROTOCOL UDP TCP UDP PORT(S) DESCRIPTION 69 7000 userdefined Trivial Control Protocol). A videoconferencing solution. The UDP port number is specified in the application. 374 Appendix F Services - ZyXEL P-2602HWL-D3A | User Guide - Page 375
P-2602H(W)(L)-DxA Series User's Guide APPENDIX G Firewall Commands Sys Firewall Commands The following describes the firewall commands. See the Command Interpreter appendix for information on the command structure. Each of - ZyXEL P-2602HWL-D3A | User Guide - Page 376
P-2602H(W)(L)-DxA Series User's Guide 376 Appendix G Firewall Commands - ZyXEL P-2602HWL-D3A | User Guide - Page 377
the Internet. In an ideal network topology, all incoming and outgoing network traffic passes through the ZyXEL Device to protect your LAN against attacks. Figure 217 Ideal Setup The "Triangle Route" Problem A traffic route is a path for sending or receiving data packets between two Ethernet devices - ZyXEL P-2602HWL-D3A | User Guide - Page 378
User's Guide Figure 218 "Triangle Route" Problem The "Triangle Route" Solutions This section presents you two solutions to the "triangle route" problem. IP Aliasing IP alias allows you to partition your network into logical sections over the same Ethernet interface. Your ZyXEL Device supports up to - ZyXEL P-2602HWL-D3A | User Guide - Page 379
P-2602H(W)(L)-DxA Series User's Guide Gateways on the WAN Side A second solution to the "triangle route" problem is to put all of your network gateways on the WAN side as the following figure shows. This ensures that all incoming network traffic passes through your ZyXEL Device to your LAN. - ZyXEL P-2602HWL-D3A | User Guide - Page 380
P-2602H(W)(L)-DxA Series User's Guide 380 Appendix H Triangle Route - ZyXEL P-2602HWL-D3A | User Guide - Page 381
P-2602H(W)(L)-DxA Series User's Guide APPENDIX I Log Descriptions This appendix provides descriptions of example log messages. Table 152 System Maintenance Logs LOG MESSAGE DESCRIPTION Time calibration is successful The router - ZyXEL P-2602HWL-D3A | User Guide - Page 382
P-2602H(W)(L)-DxA Series User's Guide Table 152 System Maintenance Logs (continued) LOG MESSAGE Successful HTTPS login HTTPS login failed DESCRIPTION Someone has logged on to the router's web configurator interface - ZyXEL P-2602HWL-D3A | User Guide - Page 383
P-2602H(W)(L)-DxA Series User's Guide Table 155 TCP Reset Logs LOG MESSAGE Under SYN flood attack, sent TCP RST Exceed TCP MAX incomplete, sent TCP RST Peer TCP state out - ZyXEL P-2602HWL-D3A | User Guide - Page 384
P-2602H(W)(L)-DxA Series User's Guide Table 157 ICMP Logs (continued) LOG MESSAGE DESCRIPTION Triangle The router blocked a packet that didn't have a corresponding NAT table entry. The firewall does not support this kind of ICMP packets or the ICMP packets are out of order. The router sent an - ZyXEL P-2602HWL-D3A | User Guide - Page 385
P-2602H(W)(L)-DxA Series User's Guide Table 160 UPnP Logs LOG MESSAGE UPnP pass through Firewall DESCRIPTION UPnP packets can pass through the firewall. Table 161 Content Filtering Logs LOG MESSAGE %s: - ZyXEL P-2602HWL-D3A | User Guide - Page 386
P-2602H(W)(L)-DxA Series User's Guide Table 162 Attack Logs (continued) LOG MESSAGE DESCRIPTION ip spoofing - no Please check the RADIUS Server. Local User Database does not support authentication method. The local user database only supports the EAP-MD5 method. A user tried to use another - ZyXEL P-2602HWL-D3A | User Guide - Page 387
Series User's Guide Table 163 802 (W to L) (L to L/ZyXEL Device) (W to W/ZyXEL Device) LAN to WAN WAN to LAN LAN to LAN/ ZyXEL Device WAN to WAN/ ZyXEL Device DESCRIPTION ACL set for packets Type of Service and Network Redirect datagrams for the Type of Service and Host Echo Echo message Appendix - ZyXEL P-2602HWL-D3A | User Guide - Page 388
P-2602H(W)(L)-DxA Series User's Guide Table 165 ICMP Notes (continued) TYPE 11 12 13 14 15 16 CODE 0 1 0 0 0 0 0 DESCRIPTION Time Exceeded Time to live exceeded in transit Fragment reassembly time exceeded Parameter Problem Pointer indicates the error Timestamp Timestamp request message - ZyXEL P-2602HWL-D3A | User Guide - Page 389
Guide Table 168 RTP Logs LOG MESSAGE Error, RTP init fail Error, Call fail: RTP connect fail Error, RTP connection cannot close DESCRIPTION The initialization of an RTP session failed. A VoIP ZyXEL Device. Call Number VoIP Call End Phone[Phone A VoIP phone call that came into the ZyXEL Device - ZyXEL P-2602HWL-D3A | User Guide - Page 390
P-2602H(W)(L)-DxA Series User's Guide The following table shows RFC-2408 ISAKMP payload types Log Categories Example Copyright (c) 1994 - 2004 ZyXEL Communications Corp. ras> ? Valid commands are: sys exit ether wan wlan ip bridge lan radius 8021x dsp voiceradius ras> 8021x 3 - ZyXEL P-2602HWL-D3A | User Guide - Page 391
P-2602H(W)(L)-DxA Series User's Guide Figure 222 Displaying Log Parameters Example ras> sys logs category access is available with every category. 5 Use the sys logs save command to store the settings in the ZyXEL Device (you must do this in order to record logs). Displaying Logs • Use the sys logs - ZyXEL P-2602HWL-D3A | User Guide - Page 392
P-2602H(W)(L)-DxA Series User's Guide Log Command Example This example shows how to set the ZyXEL Device to record the access logs and alerts and then view the results. Figure 223 Log Command Example ras> sys logs load ras> sys logs - ZyXEL P-2602HWL-D3A | User Guide - Page 393
P-2602H(W)(L)-DxA Series User's Guide APPENDIX J Command Interpreter The following describes how to use the command interpreter. Telnet to the ZyXEL Device and enter the password to use the commands. See the included disk or zyxel.com for more detailed information on these commands. Note: Use of - ZyXEL P-2602HWL-D3A | User Guide - Page 394
P-2602H(W)(L)-DxA Series User's Guide 394 Appendix J Command Interpreter - ZyXEL P-2602HWL-D3A | User Guide - Page 395
Guide APPENDIX K Internal SPTGEN Internal SPTGEN Overview Internal SPTGEN (System Parameter Table Generator) is a configuration text file useful for efficient configuration of multiple ZyXEL 's Name 10000004 = Route IP 10000005 = Route IPX 10000006 = Bridge - ZyXEL P-2602HWL-D3A | User Guide - Page 396
(W)(L)-DxA Series User's Guide Some parameters are dependent on others. For example, if you disable the Configured field in menu 1 (see Figure 224 on page 395), then you disable every field in this menu. If you enter a parameter that is invalid in the Input column, the ZyXEL Device will not save - ZyXEL P-2602HWL-D3A | User Guide - Page 397
P-2602H(W)(L)-DxA Series User's Guide Figure 227 Internal SPTGEN FTP Download Example c:\ftp 192 when you save it to your computer but it must be named "rom-t" when you upload it to your ZyXEL Device. Internal SPTGEN FTP Upload Example 1 Launch your FTP application. 2 Enter "bin". The command "bin" - ZyXEL P-2602HWL-D3A | User Guide - Page 398
2602H(W)(L)-DxA Series User's Guide This section covers ZyXEL Device Internal SPTGEN screens. = Configured 10000001 = System Name 10000002 = Location 10000003 = Contact Person's Name 10000004 = Route IP 10000006 = Bridge PVA - ZyXEL P-2602HWL-D3A | User Guide - Page 399
P-2602H(W)(L)-DxA Series User's Guide Table 175 Menu 3 30100014 = Output device filters Set 2 30100015 = Output device filters Set 3 30100016 = Output device filters Set 4 / Menu 3.2 TCP/IP and DHCP Ethernet Setup - ZyXEL P-2602HWL-D3A | User Guide - Page 400
P-2602H(W)(L)-DxA Series User's Guide Table 175 Menu 3 30201006 = 30201007 = 30201008 = 30201009 = 30201010 Outgoing protocol filters Set 3 30201026 = IP Alias #2 Outgoing protocol filters Set 4 */ Menu 3.5 Wireless LAN Setup FIN FN 30500001 = ESSID = 256 = 256 = 256 = 256 = 256 = - ZyXEL P-2602HWL-D3A | User Guide - Page 401
Table 176 Menu 4 Internet Access Setup / Menu 4 Internet Access Setup FIN FN Appendix K Internal SPTGEN P-2602H(W)(L)-DxA Series User's Guide = 2432 = 2432 - ZyXEL P-2602HWL-D3A | User Guide - Page 402
2602H(W)(L)-DxA Series User's Guide Table 176 Menu 4 = 40000030 = Multiplexing VPI # VCI # Service Name My Login My Password Single User Account set 3 ISP outgoing protocol filter set 4 ISP PPPoE idle timeout Route IP Bridge ATM QoS Type Peak Cell Rate (PCR) Sustain Cell Rate (SCR) Maximum - ZyXEL P-2602HWL-D3A | User Guide - Page 403
4 Internet Access Setup (continued) 40000031= RIP Direction 40000032= RIP Version 40000033= Nailed-up Connection P-2602H(W)(L)-DxA Series User's Guide Table 177 Menu 12 - ZyXEL P-2602HWL-D3A | User Guide - Page 404
P-2602H(W)(L)-DxA Series User's Guide Table 177 Menu 12 (continued) 120103005 = IP Static Route set #3, Gateway 120103006 = IP Static Route set #3, Metric 120103007 = IP Static Route set #3, Private / Menu 12.1.4 - ZyXEL P-2602HWL-D3A | User Guide - Page 405
P-2602H(W)(L)-DxA Series User's Guide Table 177 Menu 12 (continued) 120107003 = IP Static Route set #7, Destination IP address 120107004 = IP Static Route set #7, Destination IP subnetmask 120107005 = IP Static Route - ZyXEL P-2602HWL-D3A | User Guide - Page 406
P-2602H(W)(L)-DxA Series User's Guide Table 177 Menu 12 (continued) 120111001 = IP Static Route set #11, Name 120111002 = IP Static Route set #11, Active 120111003 = IP Static - ZyXEL P-2602HWL-D3A | User Guide - Page 407
P-2602H(W)(L)-DxA Series User's Guide Table 177 Menu 12 (continued) */ Menu 12.1.15 IP Static Route Setup FIN FN PVA 120115001 = IP Static Route set #15, Name 120115002 = IP - ZyXEL P-2602HWL-D3A | User Guide - Page 408
P-2602H(W)(L)-DxA Series User's Guide Table 178 Menu 15 SUA Server Setup (continued) 150000011 = 150000012 = 150000013 = SUA Server #3 Local IP address SUA Server #4 Active SUA Server #4 Protocol 150000014 = 150000015 = 150000016 = - ZyXEL P-2602HWL-D3A | User Guide - Page 409
P-2602H(W)(L)-DxA Series User's Guide Table 178 Menu 15 SUA Server Setup (continued) 150000045 = 150000046 = 150000047 = 150000048 = SUA Server #10 Port End SUA Server #10 Local IP address SUA Server # - ZyXEL P-2602HWL-D3A | User Guide - Page 410
P-2602H(W)(L)-DxA Series User's Guide Table 179 Menu 21.1 Filter Set #1 (continued) 210101013 = IP Filter Set 1,Rule 1 Act Match 210101014 = IP Filter Set 1,Rule 1 Act Not - ZyXEL P-2602HWL-D3A | User Guide - Page 411
P-2602H(W)(L)-DxA Series User's Guide Table 179 Menu 21.1 Filter Set #1 (continued) 210103009 = IP Filter Set 1,Rule 3 Src Subnet Mask = 0 210103010 = IP Filter Set 1,Rule 3 Src Port = 0 210103011 = IP Filter - ZyXEL P-2602HWL-D3A | User Guide - Page 412
P-2602H(W)(L)-DxA Series User's Guide Table 179 Menu 21.1 Filter Set #1 (continued) 210105006 = IP Filter Set 1,Rule 5 Dest Port = 138 210105007 = IP Filter Set 1,Rule 5 Dest Port Comp - ZyXEL P-2602HWL-D3A | User Guide - Page 413
P-2602H(W)(L)-DxA Series User's Guide Table 180 Menu 21.1 Filer Set #2, / Menu 21.1 filter set #2, FIN FN PVA INPUT 210200001 = Filter Set 2, Nam = NetBIOS_WAN / Menu 21.1.2.1 Filter set #2, rule #1 - ZyXEL P-2602HWL-D3A | User Guide - Page 414
P-2602H(W)(L)-DxA Series User's Guide Table 180 Menu 21.1 Filer Set #2, (continued) 210202007 = IP Filter Set 2, Rule 2 Dest Port Comp 210202008 = IP Filter - ZyXEL P-2602HWL-D3A | User Guide - Page 415
P-2602H(W)(L)-DxA Series User's Guide Table 180 Menu 21.1 Filer Set #2, (continued) 210203014 = IP Filter Set 2,Rule 3 Act Not Match / Menu 21.1.2.4 Filter set #2, rule #4 FIN - ZyXEL P-2602HWL-D3A | User Guide - Page 416
P-2602H(W)(L)-DxA Series User's Guide Table 180 Menu 21.1 Filer Set #2, (continued) 210205007 = IP Filter Set 2, Rule 5 Dest Port Comp 210205008 = IP Filter - ZyXEL P-2602HWL-D3A | User Guide - Page 417
P-2602H(W)(L)-DxA Series User's Guide Table 180 Menu 21.1 Filer Set #2, (continued) 210206014 = IP Filter Set 2,Rule 6 */ Menu 23.4 System security: IEEE802.1x FIN FN PVA 230400001 = Wireless Port Control - ZyXEL P-2602HWL-D3A | User Guide - Page 418
P-2602H(W)(L)-DxA Series User's Guide Table 181 Menu 23 System Menus (continued) 230400003 = 230400004 = 230400005 = 230400006 = 230400007 = 230400008 = 230400009 = 230400010 = Idle Timeout (in second) = 999 Authentication Databases - ZyXEL P-2602HWL-D3A | User Guide - Page 419
P-2602H(W)(L)-DxA Series User's Guide Command Examples The following are example Internal SPTGEN screens associated with the ZyXEL Device's command interpreter commands. Table 183 Command Examples FIN FN /ci command (for annex a): wan adsl opencmd FIN FN 990000001 = ADSL OPMD /ci command - ZyXEL P-2602HWL-D3A | User Guide - Page 420
P-2602H(W)(L)-DxA Series User's Guide 420 Appendix K Internal SPTGEN - ZyXEL P-2602HWL-D3A | User Guide - Page 421
Alert 209 Attack Types 186 Authentication Header 221 Auto Firmware Upgrade 39, 180 Automatic Log Out 51 Auto- Guide Index Bandwidth Manager Monitor 262 Bandwidth Manager Summary 257 Basic wireless Device's IP Address 179 Class of Service 162 Class of Service (CoS) 162 Client-server Protocol - ZyXEL P-2602HWL-D3A | User Guide - Page 422
Series User's Guide CoS 162 CTS (Clear to Send) 364 Custom Ports Creating/Editing 202 Customized Services 202 Customized services 202 Dual- ESS 362 Europe Type Call Service Mode 168 Extended Service Set 362 Extended Service Set IDentification 126 Extended wireless security 67 External Antenna 43 - ZyXEL P-2602HWL-D3A | User Guide - Page 423
181 When To Use 192 Firmware 301 firmware 301 upload 302 upload Humidity 333 Index P-2602H(W)(L)-DxA Series User's Guide I IANA 110 IANA (Internet Assigned Number 11g Modulation 42 IEEE 802.11g Wireless LAN 42, 43 IEEE 802. IKE Phases 234 Independent Basic Service Set 361 Initialization Vector (IV - ZyXEL P-2602HWL-D3A | User Guide - Page 424
Guide IPSec 215 IPSec Algorithms 217, 221 IPSec and NAT 218 IPSec Architecture 216 IPSec Passthrough 335 IPSec Standard 39 IPSec VPN Capability 39 ISDN (Integrated Services Metric 96 Modem 36 Multicast 111 Multimedia 151 Multiple PVC Support 42 Multiple SIP Accounts 40 Multiple Voice Channels 40 - ZyXEL P-2602HWL-D3A | User Guide - Page 425
Switched Telephone Network 37 Pulse Code Modulation 156 Pulse Dialing 157 PVCs 334 Q QoS 41, 162 Quality of Service 41, 162 Quality of Service (QOS) 41 Quick Dialing 336 Quick Start Guide 35, 49 R RADIUS 335, 366 Shared Secret Key 367 RADIUS Message Types 366 RADIUS Messages 366 Reach-Extended - ZyXEL P-2602HWL-D3A | User Guide - Page 426
SRA 334 Stateful Inspection 39, 181, 182, 187 on Your ZyXEL Device 188 Process 188 Stateful Packet Inspection 335 Static Route 249 Storage 109, 201 subnet mask 355 subnetting 355 Supplementary Phone Services 168 Supplementary Services 168 Supporting Disk 35 Sustain Cell Rate (SCR) 102 Sustained Cell - ZyXEL P-2602HWL-D3A | User Guide - Page 427
Firmware 311 UPnP 277 Forum 278 security issues 278 Upper Layer Protocols 189, 190 USA Type Call Service Wireless LAN MAC Address Filtering 43 WLAN Interference 363 Security Parameters 370 WWW 139 Z Zero Configuration Internet Access 39 Zero configuration Internet access 98 ZyNOS 3, 302 ZyNOS (ZyXEL
-
1 -
2 -
3 -
4 -
5 -
6 -
7 -
8
-
9
-
10
-
11
-
12
-
13
-
14
-
15
-
16
-
17
-
18
-
19
-
20
-
21
-
22
-
23
-
24
-
25
-
26
-
27
-
28
-
29
-
30
-
31
-
32
-
33
-
34
-
35
-
36
-
37
-
38
-
39
-
40
-
41
-
42
-
43
-
44
-
45
-
46
-
47
-
48
-
49
-
50
-
51
-
52
-
53
-
54
-
55
-
56
-
57
-
58
-
59
-
60
-
61
-
62
-
63
-
64
-
65
-
66
-
67
-
68
-
69
-
70
-
71
-
72
-
73
-
74
-
75
-
76
-
77
-
78
-
79
-
80
-
81
-
82
-
83
-
84
-
85
-
86
-
87
-
88
-
89
-
90
-
91
-
92
-
93
-
94
-
95
-
96
-
97
-
98
-
99
-
100
-
101
-
102
-
103
-
104
-
105
-
106
-
107
-
108
-
109
-
110
-
111
-
112
-
113
-
114
-
115
-
116
-
117
-
118
-
119
-
120
-
121
-
122
-
123
-
124
-
125
-
126
-
127
-
128
-
129
-
130
-
131
-
132
-
133
-
134
-
135
-
136
-
137
-
138
-
139
-
140
-
141
-
142
-
143
-
144
-
145
-
146
-
147
-
148
-
149
-
150
-
151
-
152
-
153
-
154
-
155
-
156
-
157
-
158
-
159
-
160
-
161
-
162
-
163
-
164
-
165
-
166
-
167
-
168
-
169
-
170
-
171
-
172
-
173
-
174
-
175
-
176
-
177
-
178
-
179
-
180
-
181
-
182
-
183
-
184
-
185
-
186
-
187
-
188
-
189
-
190
-
191
-
192
-
193
-
194
-
195
-
196
-
197
-
198
-
199
-
200
-
201
-
202
-
203
-
204
-
205
-
206
-
207
-
208
-
209
-
210
-
211
-
212
-
213
-
214
-
215
-
216
-
217
-
218
-
219
-
220
-
221
-
222
-
223
-
224
-
225
-
226
-
227
-
228
-
229
-
230
-
231
-
232
-
233
-
234
-
235
-
236
-
237
-
238
-
239
-
240
-
241
-
242
-
243
-
244
-
245
-
246
-
247
-
248
-
249
-
250
-
251
-
252
-
253
-
254
-
255
-
256
-
257
-
258
-
259
-
260
-
261
-
262
-
263
-
264
-
265
-
266
-
267
-
268
-
269
-
270
-
271
-
272
-
273
-
274
-
275
-
276
-
277
-
278
-
279
-
280
-
281
-
282
-
283
-
284
-
285
-
286
-
287
-
288
-
289
-
290
-
291
-
292
-
293
-
294
-
295
-
296
-
297
-
298
-
299
-
300
-
301
-
302
-
303
-
304
-
305
-
306
-
307
-
308
-
309
-
310
-
311
-
312
-
313
-
314
-
315
-
316
-
317
-
318
-
319
-
320
-
321
-
322
-
323
-
324
-
325
-
326
-
327
-
328
-
329
-
330
-
331
-
332
-
333
-
334
-
335
-
336
-
337
-
338
-
339
-
340
-
341
-
342
-
343
-
344
-
345
-
346
-
347
-
348
-
349
-
350
-
351
-
352
-
353
-
354
-
355
-
356
-
357
-
358
-
359
-
360
-
361
-
362
-
363
-
364
-
365
-
366
-
367
-
368
-
369
-
370
-
371
-
372
-
373
-
374
-
375
-
376
-
377
-
378
-
379
-
380
-
381
-
382
-
383
-
384
-
385
-
386
-
387
-
388
-
389
-
390
-
391
-
392
-
393
-
394
-
395
-
396
-
397
-
398
-
399
-
400
-
401
-
402
-
403
-
404
-
405
-
406
-
407
-
408
-
409
-
410
-
411
-
412
-
413
-
414
-
415
-
416
-
417
-
418
-
419
-
420
-
421
-
422
-
423
-
424
-
425
-
426
-
427
 |
 |
P-2602HW(L) Series
802.11g Wireless ADSL2+ VoIP IAD
P-2602H Series
ADSL2+ VoIP IAD
User’s Guide
Version 3.40
7/2006
Edition 1