ZyXEL P-320W User Guide

ZyXEL P-320W Manual

ZyXEL P-320W manual content summary:

  • ZyXEL P-320W | User Guide - Page 1
    P-320W 802.11g Wireless Firewall Router User's Guide Version 1.00 11/2005 Edition 1
  • ZyXEL P-320W | User Guide - Page 2
  • ZyXEL P-320W | User Guide - Page 3
    P-320W User's Guide Copyright Copyright © 2005 by ZyXEL Communications Corporation. The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any
  • ZyXEL P-320W | User Guide - Page 4
    P-320W User's Guide Federal Communications Commission (FCC) Interference Statement This device complies with Part 15 uses, and can radiate radio frequency energy, and if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. If this
  • ZyXEL P-320W | User Guide - Page 5
    P-320W User's Guide Certifications 1 Go to www.zyxel.com 2 Select your product from the drop-down list box on the ZyXEL home page to go to that product's page. 3 Select the certification you wish to view from this page. Federal Communications Commission (FCC) Interference Statement 5
  • ZyXEL P-320W | User Guide - Page 6
    you to dangerous high voltage points or other risks. ONLY qualified service personnel can service the device. Please contact your vendor for further information. • Use ONLY the dedicated power supply for your device. Connect the power cord or power adaptor to the right supply voltage (110V AC in
  • ZyXEL P-320W | User Guide - Page 7
    P-320W User's Guide ZyXEL Limited Warranty ZyXEL warrants to the original end user (purchaser) ZyXEL) and the customer will be billed for parts and labor. All repaired or replaced products will be shipped by ZyXEL to the corresponding return address, Postage Paid. This warranty gives you specific
  • ZyXEL P-320W | User Guide - Page 8
    320W User's Guide Customer Support Please have the following information ready when you contact customer support. • Product model and serial number. • Warranty Information. • Date that you received your device. • Brief description of the problem and the steps you took to solve it. METHOD SUPPORT
  • ZyXEL P-320W | User Guide - Page 9
    P-320W User's Guide METHOD SUPPORT E-MAIL LOCATION POLAND SALES E-MAIL [email protected] TELEPHONEA FAX +48-22-5286603 +48-22-5206701 WEB SITE FTP SITE www.pl.zyxel.com RUSSIA http://zyxel.ru/support +7-095-542-89-29 [email protected] +7-095-542-89-25 www.zyxel.ru SPAIN [email protected]
  • ZyXEL P-320W | User Guide - Page 10
    P-320W User's Guide 10 Customer Support
  • ZyXEL P-320W | User Guide - Page 11
    P-320W User's Guide Table of Contents Copyright ...3 Federal Communications Commission (FCC) Interference Statement 4 Safety Warnings ...6 ZyXEL Limited Warranty 7 Customer Support...8 Table of Contents 11 Preface ...25 Chapter 1 Getting to Know Your Prestige 27 1.1 Prestige Overview 27 1.2
  • ZyXEL P-320W | User Guide - Page 12
    MAC Address 57 3.4.6 Connection Wizard Complete 58 Chapter 4 Wireless LAN ...61 4.1 Introduction ...61 4.2 Wireless Security Overview 61 4.2.1 Encryption 61 4.2.2 Authentication 61 4.2.3 Restricted Access 62 4.2.4 Hide Prestige Identity 62 4.2.5 Using OTIST 62 4.3 Configuring Wireless LAN
  • ZyXEL P-320W | User Guide - Page 13
    List Screen 97 Chapter 8 Network Address Translation (NAT 99 8.1 NAT Overview ...99 8.1.1 NAT Definitions 99 8.1.2 What NAT Does 100 8.1.3 How NAT Works 100 8.1.4 NAT Application 101 8.1.5 Default Server IP Address 101 8.1.6 Port Forwarding: Services and Port Numbers 102 Table of Contents
  • ZyXEL P-320W | User Guide - Page 14
    P-320W User's Guide 8.1.7 Configuring Servers Behind SUA (Example 103 8.2 General NAT Screen 103 8.3 Port Forwarding Screen 104 8.3.1 Rule Setup Screen 105 8.4 Trigger Port Forwarding 106 8.4.1 Trigger Port Forwarding Example 106 8.4.2 Two Points To Remember About Trigger Ports 107 8.5
  • ZyXEL P-320W | User Guide - Page 15
    142 Chapter 15 Tools ...145 15.1 Firmware Upload Screen 145 15.2 Configuration Screen 146 15.2.1 Backup Configuration 147 15.2.2 Restore Configuration 147 15.2.3 Back to Factory Defaults 148 15.3 Restart Screen 148 Chapter 16 Troubleshooting 151 16.1 Problems Starting Up the Prestige 151 16
  • ZyXEL P-320W | User Guide - Page 16
    P-320W User's Guide 16.6.1.1 Internet Explorer Pop-up Blockers 154 16.6.1.2 JavaScripts 157 16.6.1.3 Java Permissions 159 16.6.2 ActiveX Controls in Internet Explorer 161 Appendix A Product Specifications 163 Appendix B IP Subnetting ...165 Appendix C Setting up Your Computer's IP Address 173
  • ZyXEL P-320W | User Guide - Page 17
    P-320W User's Guide List of Figures Figure 1 Secure Internet Access via Cable, DSL or Wireless Modem 31 Figure 2 Internet Access Application Example 32 Figure 3 Front Panel ...32 Figure 4 Login ...36 Figure 5 Language Selection 36 Figure 6 Change Password Screen 36 Figure 7 Select the Mode ...37
  • ZyXEL P-320W | User Guide - Page 18
    58 Port Forwarding 104 Figure 59 NAT: Port Forwarding: Rule Setup 105 Figure 60 Trigger Port Forwarding Process: Example 107 Figure 61 NAT: Trigger Port 108 Figure 62 Firewall: General 110 Figure 63 Firewall: Services 111 Figure 64 Example of Static Routing Topology 115 Figure 65 IP Static
  • ZyXEL P-320W | User Guide - Page 19
    320W User's Guide Log ...141 Figure 90 Log Settings ...143 Figure 91 Maintenance Firmware Upload 145 Figure 92 Upload Warning 146 Figure 93 Network Configuration 174 Figure 111 Windows 95/98/Me: TCP/IP Properties: IP Address 175 Figure 112 Windows 95/98/Me: TCP/IP Properties: DNS Configuration
  • ZyXEL P-320W | User Guide - Page 20
    Hat 9.0: Static IP Address Setting in ifconfig-eth0 187 Figure 130 Red Hat 9.0: DNS Settings in resolv.conf 187 Figure 131 Red Hat 9.0: Restart Ethernet Card 188 Figure 132 Red Hat 9.0: Checking TCP/IP Properties 188 Figure 133 Single-Computer per Router Hardware Configuration 190 Figure 134
  • ZyXEL P-320W | User Guide - Page 21
    P-320W User's Guide List of Tables Table 1 Front Panel LEDs 32 Table 2 Status Screen Icon Key 38 Table 3 Web Configurator Status Screen 38 Table 4 Screens Summary 39 Table 5 Summary: DHCP Table 41 Table 6 Summary: Wireless Association List 42 Table 7 Summary: Packet Statistics 43 Table 8
  • ZyXEL P-320W | User Guide - Page 22
    P-320W User's Guide Table 37 General ...96 Table 38 Static DHCP ...97 Table 39 Client List ...98 Table 40 NAT Definitions ...100 Table 41 Services and Port Numbers 102 Table 42 NAT: General ...103 Table 43 NAT: Port Forwarding 105 Table 44 NAT: Port Forwarding: Rule Setup 106 Table 45 NAT:
  • ZyXEL P-320W | User Guide - Page 23
    P-320W User's Guide Table 80 Subnet 3 ...169 Table 81 Subnet 4 ...170 Table 82 Eight Subnets ...170 Table 83 Class C Subnet Planning 170 Table 84 Class B Subnet Planning 171 Table 85 IEEE802.11g ...199 Table 86 Comparison of EAP Authentication Types 205 Table 87 Wireless Security Relational
  • ZyXEL P-320W | User Guide - Page 24
    P-320W User's Guide 24
  • ZyXEL P-320W | User Guide - Page 25
    designed to guide you through the configuration of your Prestige for its various applications. This manual may refer to the P-320W, 802.11g Wireless Firewall Router as the Prestige. Note: Register your product online to receive e-mail notices of firmware upgrades and information at www.zyxel.com for
  • ZyXEL P-320W | User Guide - Page 26
    P-320W User's Guide • "e.g.," is a shorthand for "for instance", and "i.e.," means "that is" or "in other words". Graphics Icons Key Prestige Computer Notebook computer Server DSLAM Firewall Modem Switch Router 26 Preface
  • ZyXEL P-320W | User Guide - Page 27
    provides NAT, port forwarding, firewall, DHCP server and many other powerful features. The Prestige has an embedded mini-PCI module for 802.11g Wireless LAN connectivity. The embedded web configurator is easy to operate. Note: Only use firmware for your Prestige's specific model. 1.2 Prestige
  • ZyXEL P-320W | User Guide - Page 28
    P-320W User's Guide Reset Button The Prestige reset button is built into the rear panel. Use this button to restore the factory default password to 1234; IP address to 192.168.1.1, subnet mask to 255.255.255.0 and DHCP server enabled with a pool of 32 IP addresses starting at 192.168.1.33. 1.2.2 Non
  • ZyXEL P-320W | User Guide - Page 29
    P-320W User's Guide Dynamic DNS Support With Dynamic DNS (Domain Name System) support, you can have a static hostname alias for a dynamic IP address, allowing the host to be more easily accessible from various locations on the Internet. You must register for this service with a Dynamic DNS service
  • ZyXEL P-320W | User Guide - Page 30
    ). Embedded FTP and TFTP Servers The Prestige's embedded FTP and TFTP Servers enable fast firmware upgrades as well as configuration file backups and restoration. 1.2.3 Wireless Features Wireless LAN The Prestige supports the IEEE 802.11g standard, which is fully compatible with the IEEE 802.11b
  • ZyXEL P-320W | User Guide - Page 31
    P-320W User's Guide Antenna The Prestige is equipped with a 2dBi fixed antenna to provide clear radio signal between the wireless stations and the access points. Wireless LAN MAC Address Filtering Your Prestige can check the MAC addresses of wireless stations against a list of allowed or denied MAC
  • ZyXEL P-320W | User Guide - Page 32
    P-320W User's Guide 1.3.2 Wireless LAN Application Add a wireless LAN to your existing network without expensive network cables. Wireless stations can move freely anywhere in the coverage area and use resources on the wired network. Figure 2 Internet Access Application Example 1.3.3 Front Panel
  • ZyXEL P-320W | User Guide - Page 33
    P-320W User's Guide Table 1 Front Panel LEDs (continued) LED LAN 1-4 WAN WLAN OTIST activated and the wireless security settings are given to a wireless client. The LED remains on unless the WLAN settings are changed. OTIST is not activated or WLAN settings are manually configured after OTIST is
  • ZyXEL P-320W | User Guide - Page 34
    P-320W User's Guide 34 Chapter 1 Getting to Know Your Prestige
  • ZyXEL P-320W | User Guide - Page 35
    is enabled by default in Windows XP SP (Service Pack) 2. • JavaScripts (enabled by default). • Java permissions (enabled by default). See the Troubleshooting chapter to see how to make sure these functions are allowed in Internet Explorer. 2.2 Accessing the Prestige Web Configurator 1 Make sure your
  • ZyXEL P-320W | User Guide - Page 36
    320W User's Guide Figure 4 Login 5 Select your language. click Apply. Figure 5 Language Selection 6 You should see a screen asking you to change your password (highly recommended) as shown next. Type a new password (and retype it to confirm) and click Apply or click Ignore. Figure 6 Change Password
  • ZyXEL P-320W | User Guide - Page 37
    log back into the Prestige if this happens to you. 2.3 Resetting the Prestige If you forget your password or cannot access the web configurator, you will need to use the RESET button at the back of the Prestige to reload the factory-default configuration file. This means that you will lose all
  • ZyXEL P-320W | User Guide - Page 38
    P-320W User's Guide Figure 8 Web Configurator Status Screen The following table describes the icons shown in the Status screen. Table 2 Status Screen Icon Key ICON DESCRIPTION Select a language from the drop-down list box to have the the web configurator display in that language. Click this
  • ZyXEL P-320W | User Guide - Page 39
    P-320W User's Guide Table 3 Web Configurator Status Screen LABEL DESCRIPTION WAN Information - WAN Type This shows the encapsulation method (and service type) the Prestige is using. - IP Address This shows the WAN port's IP address. - IP Subnet Mask This shows the WAN port's subnet mask. -
  • ZyXEL P-320W | User Guide - Page 40
    P-320W User's Guide Table 4 Screens Summary LINK TAB FUNCTION Wireless LAN General OTIST MAC Filter WAN LAN DHCP Server Advanced Internet Connection Advanced Traffic Redirect IP General Static DHCP Client List NAT Security Firewall General Port Forwarding Trigger Port General Services
  • ZyXEL P-320W | User Guide - Page 41
    P-320W User's Guide Table 4 Screens Summary LINK Tools TAB Firmware Configuration Restart FUNCTION Use this screen to upload firmware to your Prestige. Use this screen to backup and restore the configuration or reset the factory defaults to your Prestige. This screen allows you to reboot the
  • ZyXEL P-320W | User Guide - Page 42
    P-320W User's Guide 2.4.3 Summary: Association List Click the Association List (Detail) hyperlink in the Status screen. View the wireless stations that associated wireless station. This field displays the MAC address of an associated wireless station. This field displays the time a wireless station
  • ZyXEL P-320W | User Guide - Page 43
    Figure 11 Summary: Packet Statistics P-320W User's Guide The following table describes the labels in this screen. Table 7 Summary: Packet Statistics LABEL Port TxPkts RxPkts System Up Time Poll Interval(s) Set Interval Stop DESCRIPTION This is the WAN, LAN or WLAN port. This is the number of
  • ZyXEL P-320W | User Guide - Page 44
    P-320W User's Guide 44 Chapter 2 Introducing the Web Configurator
  • ZyXEL P-320W | User Guide - Page 45
    P-320W User's Guide CHAPTER 3 Connection Wizard This chapter provides information on the Wizard setup screens in the web configurator. 3.1 Wizard Setup The web configurator's Wizard setup helps you configure your device to access the Internet. Refer to your ISP (Internet Service Provider) checklist
  • ZyXEL P-320W | User Guide - Page 46
    P-320W User's Guide Figure 13 Welcome to the Connection Wizard 3.2 Connection Wizard: STEP 1: System Information System Information contains , the domain name can be assigned from the Prestige via DHCP. Click Next to configure the Prestige for Internet access. 46 Chapter 3 Connection Wizard
  • ZyXEL P-320W | User Guide - Page 47
    Figure 14 Connection Wizard: STEP 1: System Information P-320W User's Guide The following table describes the labels in this screen. wizard screen without saving. 3.3 Connection Wizard: STEP 2: Wireless LAN Set up your wireless LAN using the following screen. Chapter 3 Connection Wizard 47
  • ZyXEL P-320W | User Guide - Page 48
    with a default Pre-Shared Key and only if your wireless clients support WPA-PSK. If you choose this option, skip directly to Section 3.3.3 on page 51. Choose None to have no wireless LAN security configured. If you do not enable any wireless security on your Prestige, your network is accessible to
  • ZyXEL P-320W | User Guide - Page 49
    P-320W User's Guide Note: The wireless stations and Prestige must use the same SSID, channel ID and WEP encryption key (if WEP is enabled), WPA-PSK (if WPA-PSK is enabled) for wireless communication. 3.3.1 Basic(WEP) Security Choose Basic(WEP) to setup WEP Encryption parameters. Figure 16 Basic(WEP)
  • ZyXEL P-320W | User Guide - Page 50
    P-320W User's Guide Table 10 Basic(WEP) Security LABEL DESCRIPTION Key 1 to Key 4 The WEP keys are used to encrypt data. Both the Prestige and the wireless stations must use the same WEP key for data transmission. If you chose 64-bit WEP, then enter any 5 ASCII characters or 10 hexadecimal
  • ZyXEL P-320W | User Guide - Page 51
    P-320W User's Guide The following table describes the labels in this screen. Table 11 Extend(WPA-PSK) Security LABEL Pre-Shared Key Back Next Exit DESCRIPTION Type from 8 to 63 case-sensitive ASCII characters. You can set up the most secure wireless connection by configuring WPA in the wireless
  • ZyXEL P-320W | User Guide - Page 52
    . Click No and then Next to proceed to the following screen. The default OTIST Setup Key is "01234567". This key can be changed in the web configurator. Be sure to use the same OTIST Setup Key on the Prestige and wireless clients. Click Back to display the previous screen. Click Next to proceed
  • ZyXEL P-320W | User Guide - Page 53
    P-320W User's Guide The following table describes the labels in this screen, Table 13 Connection Wizard: STEP 3: WAN Connection Type CONNECTION TYPE Ethernet PPPoE PPTP DESCRIPTION Select the Ethernet option when the WAN port is used as a regular Ethernet. Select the PPP over Ethernet option for
  • ZyXEL P-320W | User Guide - Page 54
    P-320W User's Guide One of the benefits of PPPoE is the ability to let end users access one of multiple network services, a function known as dynamic service selection. This enables the service provider to easily create and offer new IP services for specific users. Operationally, PPPoE saves
  • ZyXEL P-320W | User Guide - Page 55
    P-320W User's Guide 3.4.3 PPTP Connection Type Point-to-Point Tunneling Protocol (PPTP) is a network protocol that enables transfers of data from a remote client to a private server, creating a Virtual Private Network (VPN) using TCP/ IP-based networks. PPTP supports on-demand, multi-protocol, and
  • ZyXEL P-320W | User Guide - Page 56
    P-320W User's Guide Table 15 PPTP Connection Type LABEL DESCRIPTION My IP Subnet Mask Server IP Address Connection ID/ Name Back Next Exit Type the subnet mask assigned to you by your ISP (if given). Type the IP address of the PPTP server. Enter the connection ID or connection name in this
  • ZyXEL P-320W | User Guide - Page 57
    P-320W User's Guide The following table describes the labels in this screen Table 16 Your IP Address LABEL Get automatically from ISP Use fixed IP address provided by your ISP Back Next Exit DESCRIPTION Select this option If your ISP did not assign you a fixed IP address. This is the default
  • ZyXEL P-320W | User Guide - Page 58
    P-320W User's Guide Figure 24 WAN MAC Address The following table describes the fields in this screen. Table 18 WAN MAC Address LABEL Factory Default Spoof this computer's MAC address MAC Address Back Next Exit DESCRIPTION Select Factory Default to use the factory assigned default MAC address.
  • ZyXEL P-320W | User Guide - Page 59
    25 Connection Wizard Complete P-320W User's Guide Click Finish to complete the wizard setup and save your configuration. Figure 26 Connection Wizard: Congratulation Well done! You have successfully set up your Prestige to operate on your network and access the Internet. Chapter 3 Connection
  • ZyXEL P-320W | User Guide - Page 60
    P-320W User's Guide 60 Chapter 3 Connection Wizard
  • ZyXEL P-320W | User Guide - Page 61
    how to configure Wireless LAN. 4.1 Introduction A wireless LAN can be as simple as two computers with wireless LAN adapters communicating in a peer-to-peer network or as complex as a number of computers with wireless LAN adapters communicating through access points which bridge network traffic
  • ZyXEL P-320W | User Guide - Page 62
    security settings as the access point (AP) or wireless router (we will refer to both as "AP" here) in order to associate with it. Traditionally this meant that you had to configure the settings on the AP and then manually configure the exact same settings on each wireless client. OTIST (One-Touch
  • ZyXEL P-320W | User Guide - Page 63
    User's Guide The following figure shows the relative effectiveness of these wireless security methods available on your Prestige. Table 19 ZyAIR Wireless Security Levels Security Level Least Secure Most Secure Security Type Unique SSID (Default) Unique SSID with Hide SSID Enabled MAC Address
  • ZyXEL P-320W | User Guide - Page 64
    Service Set with which a wireless station is associated. Wireless stations associating to the access point (AP) must have the same SSID. Enter a descriptive name (up to 32 printable 7-bit ASCII characters) for the wireless LAN. Hide SSID Channel Selection Apply Reset Note: If you are configuring
  • ZyXEL P-320W | User Guide - Page 65
    28 Wireless: No Security P-320W User's Guide The following table describes the labels in this screen. Table 21 Wireless No Security LABEL DESCRIPTION Security Mode Apply Reset Choose No Security from the drop-down list box. Click Apply to save your changes back to the Prestige. Click Reset to
  • ZyXEL P-320W | User Guide - Page 66
    P-320W User's Guide Figure 29 Wireless: Static WEP Encryption The following table describes the wireless LAN security labels in this screen. Table 22 Wireless: Static WEP Encryption LABEL DESCRIPTION Passphrase Generate Clear WEP Encryption Authentication Method ASCII Hex Enter a Passphrase (
  • ZyXEL P-320W | User Guide - Page 67
    the wireless clients support WPA and you have an external RADIUS server, use WPA for stronger data encryption. If you don't have an external RADIUS server, you should use WPA-PSK (WPA-Pre-Shared Key) that only requires a single (identical) password entered into each access point, wireless gateway
  • ZyXEL P-320W | User Guide - Page 68
    in this screen. Table 23 Wireless: WPA-PSK LABEL Pre-Shared Key Apply Reset DESCRIPTION The encryption mechanisms used for WPA and WPA-PSK are the same. The only difference between the two is that WPA-PSK uses a simple common password, instead of user-specific credentials. Type a pre-shared key
  • ZyXEL P-320W | User Guide - Page 69
    P-320W User's Guide 4.4.6 WPA with RADIUS Application Example You need the IP address of the RADIUS server, its port number (default is 1812), and the RADIUS shared secret. A WPA application example with an external RADIUS server looks as follows. "A" is the RADIUS server. "DS" is the
  • ZyXEL P-320W | User Guide - Page 70
    P-320W User's Guide Figure 33 Wireless: WPA The following table describes the labels in this screen. Table 24 Wireless: WPA LABEL DESCRIPTION Authentication Server IP Address Enter the IP address of the external authentication server in dotted decimal notation. Port Number Enter the port
  • ZyXEL P-320W | User Guide - Page 71
    P-320W User's Guide • A wireless station computer must be running IEEE 802.1x-compliant software. Not all Windows operating systems support IEEE 802.1x (see the Microsoft web site for details). For other operating systems, see their documentation. If your operating system does not support IEEE 802.
  • ZyXEL P-320W | User Guide - Page 72
    P-320W User's Guide Table 25 Wireless: 802.1x and Dynamic WEP LABEL Shared Secret Apply Reset DESCRIPTION Enter a password (up to 31 alphanumeric characters) as the key to be shared between the external authentication server and the Prestige. The key must be the same
  • ZyXEL P-320W | User Guide - Page 73
    P-320W User's Guide 4.5.1.1.2 Web Configurator Click the Wireless LAN link under Network and then the OTIST tab. The following screen displays. Figure 35 Wireless: OTIST The following table describes the labels in this screen. Table 26 Wireless: OTIST LABEL Setup Key DESCRIPTION Type an OTIST
  • ZyXEL P-320W | User Guide - Page 74
    P-320W User's Guide Table 26 Wireless: OTIST LABEL Yes! DESCRIPTION To have OTIST automatically generate a WPA-PSK key, select this check box. If you manually configured a WEP key or a WPA-PSK key and you also select this check box, then the key you manually configured is used. If you want to
  • ZyXEL P-320W | User Guide - Page 75
    P-320W User's Guide 4.5.2 Starting OTIST Note: You must click Start in the AP OTIST web configurator screen and in the wireless client(s) Adapter screen all within three minutes (at the time of writing). You can start OTIST in the wireless clients and AP in any order but they must all be within
  • ZyXEL P-320W | User Guide - Page 76
    P-320W User's Guide Figure 41 Start OTIST? 2 If an OTIST-enabled wireless client loses its wireless connection for more than ten seconds, it will search for an OTIST-enabled AP for up to one minute. (If you manually have the wireless client search for an OTIST-enabled AP, there is no timeout; click
  • ZyXEL P-320W | User Guide - Page 77
    Figure 42 Wireless: MAC Address Filter P-320W User's Guide The following table describes the labels in this menu. Table 27 MAC Address Filter LABEL DESCRIPTION Active Select Yes from the drop down list box to enable MAC address filtering. Filter Action Define the filter action for the list
  • ZyXEL P-320W | User Guide - Page 78
    preamble. Select Long preamble if you are unsure what preamble mode the wireless adapters support, and to provide more reliable communications in busy wireless networks. Select Short preamble if you are sure the wireless adapters support it, and to provide more efficient communications. 802.11
  • ZyXEL P-320W | User Guide - Page 79
    P-320W User's Guide Table 28 Wireless: Advanced LABEL Apply Reset DESCRIPTION Click Apply to save your changes back to the Prestige. Click Reset to reload the previous configuration for this screen. Chapter 4 Wireless LAN 79
  • ZyXEL P-320W | User Guide - Page 80
    P-320W User's Guide 80 Chapter 4 Wireless LAN
  • ZyXEL P-320W | User Guide - Page 81
    P-320W User's Guide CHAPTER 5 WAN This chapter describes how to configure WAN settings. 5.1 WAN IP Address Assignment Every computer on the Internet must have a unique IP address. If your networks are isolated from the Internet, for instance, only between your two branch offices, you can assign
  • ZyXEL P-320W | User Guide - Page 82
    User's Guide If the ISP did not explicitly give you an IP network number, then most likely you have a single user account and the ISP will assign you a dynamic IP address when the connection is established. The Internet Assigned Number Authority (IANA) reserved this block of addresses specifically
  • ZyXEL P-320W | User Guide - Page 83
    a unique MAC (Media Access Control) address. The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters, for example, 00A0-C5-00-00-02. You can configure the WAN port's MAC address by either using the factory default or cloning the MAC address from a computer on
  • ZyXEL P-320W | User Guide - Page 84
    method) or Telia Login. The following fields do not appear with the Standard service type. WAN IP Address Assignment Get automatically Select this option If your ISP did not assign you a fixed IP address. This is the from ISP default selection. Use fixed IP address Select this option
  • ZyXEL P-320W | User Guide - Page 85
    P-320W User's Guide Table 31 WAN: Ethernet Encapsulation LABEL Spoof WAN MAC Address Clone MAC address Apply Reset DESCRIPTION The MAC address section allows users to configure the WAN port's MAC address by either using the factory default or cloning the MAC address from a computer on your LAN.
  • ZyXEL P-320W | User Guide - Page 86
    LAN do not need PPPoE software installed, since the router does that part of the task. Further, with NAT, all of the LAN's computers will have access. Service Name Type the PPPoE service name provided to you. PPPoE uses a service name to identify and reach the PPPoE server. User Name Type the
  • ZyXEL P-320W | User Guide - Page 87
    P-320W User's Guide Table 32 WAN: PPPoE Encapsulation LABEL DESCRIPTION Idle Timeout This value specifies the time in seconds that elapses before the router automatically disconnects from the PPPoE server. WAN IP Address Assignment Get automatically Select this option If your ISP did not
  • ZyXEL P-320W | User Guide - Page 88
    P-320W User's Guide Figure 46 PPTP Encapsulation The following table describes the labels in this screen. Table 33 PPTP Encapsulation LABEL DESCRIPTION ISP Parameters for Internet Access Encapsulation Point-to-Point Tunneling Protocol (PPTP) is a network protocol that enables secure transfer
  • ZyXEL P-320W | User Guide - Page 89
    one) in this field. Remote IP Subnet Enter the Rmote IP subnet Mask in this field. Mask WAN MAC Address Spoof WAN MAC Address The MAC address section allows users to configure the WAN port's MAC address by either using the factory default or cloning the MAC address from a computer on your LAN
  • ZyXEL P-320W | User Guide - Page 90
    DNS server(s). If you do not configure a DNS server, you must know the IP address of a computer in order to access it. Click Apply to save your changes back to the Prestige. Click Reset to begin configuring this screen afresh. 5.8 Traffic Redirect Traffic redirect forwards WAN traffic to a backup
  • ZyXEL P-320W | User Guide - Page 91
    . The Prestige automatically forwards traffic to this IP address if the Prestige's Internet connection terminates. Check WAN IP Address Configuration of this field is optional. If you do not enter an IP address here, the Prestige will use the default gateway IP address. Configure this field to
  • ZyXEL P-320W | User Guide - Page 92
    P-320W User's Guide 92 Chapter 5 WAN
  • ZyXEL P-320W | User Guide - Page 93
    P-320W User's Guide CHAPTER 6 LAN This chapter describes how to configure LAN settings. 6.1 LAN Overview Local Area Network (LAN) is a shared communication system to which many computers are attached. The LAN screens can help you configure a LAN DHCP server, manage IP addresses, and partition your
  • ZyXEL P-320W | User Guide - Page 94
    P-320W User's Guide 6.2.2 IP Address and Subnet Mask Refer to the section about IP address and subnet mask in the Wizard Setup chapter for this information. 6.3 IP Screen Click the LAN link under Network to open the IP screen. Figure 50 LAN IP The following table describes the labels in this screen
  • ZyXEL P-320W | User Guide - Page 95
    as a DHCP server or disable it. When configured as a server, the Prestige provides the TCP/IP configuration for the clients. If DHCP service is disabled, you must have another DHCP server on your LAN, or else the computer must be manually configured. 7.2 DHCP Screen Click the DHCP Server link
  • ZyXEL P-320W | User Guide - Page 96
    to the Prestige. Reset Click Reset to begin configuring this screen afresh. 7.3 Static DHCP Screen This table allows you to assign IP addresses on the LAN to specific individual computers based on their MAC addresses. Every Ethernet device has a unique MAC (Media Access Control) address. The MAC
  • ZyXEL P-320W | User Guide - Page 97
    Figure 52 Static DHCP P-320W User's Guide The following table describes the labels in this screen. Table 38 Static DHCP LABEL # MAC Address IP Address Apply Reset DESCRIPTION This is the index number of the Static IP table entry (row). Type the MAC address (with colons) of a computer on your
  • ZyXEL P-320W | User Guide - Page 98
    P-320W User's Guide Figure 53 Client List The following table describes the labels in this screen. Table 39 Client List LABEL # IP Address Host Name MAC Address Reserve Apply Refresh DESCRIPTION This is the index number of the host computer. This field displays the IP address relative to the #
  • ZyXEL P-320W | User Guide - Page 99
    P-320W User's Guide CHAPTER 8 Network Address Translation (NAT) This chapter discusses how to configure NAT on the Prestige. 8.1 NAT Overview NAT (Network Address Translation - NAT, RFC 1631) is the translation of the IP address of a host in a packet. For example, the source address of an outgoing
  • ZyXEL P-320W | User Guide - Page 100
    unique ones required for communication with hosts on other networks. It replaces the original IP source address (and TCP or UDP source port numbers for Many-to-One and Many-to-Many Overload NAT mapping) in each packet and then forwards it to the Internet. The Prestige keeps track of the original
  • ZyXEL P-320W | User Guide - Page 101
    at the end of this chapter. Figure 55 NAT Application With IP Alias 8.1.5 Default Server IP Address In addition to the servers for specified services, NAT supports a default server IP address. A default server receives packets from ports that are not specified in this screen Chapter 8 Network
  • ZyXEL P-320W | User Guide - Page 102
    P-320W User's Guide Note: If you do not assign a Default Server IP Address, the Prestige discards all packets received for ports that are not specified in this screen or remote management. 8.1.6 Port Forwarding: Services and Port Numbers A SUA server set is a list of inside (behind NAT on the LAN
  • ZyXEL P-320W | User Guide - Page 103
    P-320W User's Guide 8.1.7 Configuring Servers Behind SUA (Example) Let's say you want to assign ports 21-25 to one FTP, Telnet and SMTP server (A in the example), port 80 to another (B in the example) and assign a default server IP address of 192.168.1.35 to a third (C in the example). You assign
  • ZyXEL P-320W | User Guide - Page 104
    320W User's Guide 8.3 Port Forwarding port numbers commonly used for particular services. Note: If you do not assign a Default Server IP Address, the Prestige discards all packets received for ports that are not specified in this screen or remote management. To change your Prestige's port forwarding
  • ZyXEL P-320W | User Guide - Page 105
    P-320W User's Guide The following table describes the labels in this screen. Table 43 NAT: Port Forwarding LABEL DESCRIPTION Default Server In addition to the servers for specified services, NAT supports a default server. A default server receives packets from ports that are not specified in
  • ZyXEL P-320W | User Guide - Page 106
    that port forwarding only forwards a service to a single LAN IP address. In order to use the same service on a different LAN computer, you have to manually replace the LAN computer's IP address in the forwarding port with another LAN computer's IP address, Trigger port forwarding solves this problem
  • ZyXEL P-320W | User Guide - Page 107
    Figure 60 Trigger Port Forwarding Process: Example P-320W User's Guide 1 Jane requests a file from the Real Audio server (port 7070). 2 Port 7070 is a "trigger" port and causes the Prestige to record Jane's computer IP address. The Prestige associates Jane's computer IP address with the "incoming"
  • ZyXEL P-320W | User Guide - Page 108
    P-320W User's Guide Figure 61 NAT: Trigger Port The following table describes the labels in this screen. Table 45 NAT: Trigger Port LABEL # Name Incoming Start Port End Port Trigger Start Port End Port Apply Reset DESCRIPTION This is the rule index number (read-only). Type a unique name (up to
  • ZyXEL P-320W | User Guide - Page 109
    P-320W User's Guide CHAPTER 9 Firewall This chapter gives some background access by screening data packets against defined access rules. They make access control decisions based on IP address and protocol. They also "inspect" the session data to assure the integrity of the connection and to adapt
  • ZyXEL P-320W | User Guide - Page 110
    to use a specific service. 9.1.4 Guidelines For Enhancing Security With Your Firewall 1 Change the default password via web configurator. 2 Think about access control before you connect to the network in any way, including attaching a modem to the port. 3 Limit who can access your router. 4 Don
  • ZyXEL P-320W | User Guide - Page 111
    P-320W User's Guide The following table describes the labels in this screen. Table 46 Firewall: General LABEL Enable Firewall Apply Reset DESCRIPTION Select this check box to activate the firewall. The Prestige performs access control and protects against Denial of Service (DoS) attacks when the
  • ZyXEL P-320W | User Guide - Page 112
    P-320W User's Guide The following table describes the labels in this screen. Table 47 Firewall: Services LABEL DESCRIPTION Enable Services Select this check box to enable this feature. Blocking Available Services This is a list of pre-defined services (ports) you may prohibit your LAN
  • ZyXEL P-320W | User Guide - Page 113
    P-320W User's Guide 9.3.1 Services The commonly used services and port numbers are shown in the following table. Please refer to RFC 1700 for further information about port numbers. Next to the name of the service, two fields appear in brackets. The first field indicates the IP protocol type (TCP,
  • ZyXEL P-320W | User Guide - Page 114
    320W User's Guide Table 48 Commonly Used Services SERVICE POP3 server through a temporary connection (TCP/IP or other). Point-to-Point Tunneling Protocol enables secure transfer of data server. Login Host Protocol used for (Terminal Access Controller Access Control System). Telnet is the login and
  • ZyXEL P-320W | User Guide - Page 115
    P-320W User's Guide CHAPTER 10 Static Route Screens This chapter shows you how to configure static routes for your Prestige. 10.1 Static Route Overview Each remote node specifies only the network to which the gateway is directly connected, and the
  • ZyXEL P-320W | User Guide - Page 116
    your Prestige that will forward the packet to the destination. On the LAN, the gateway must be a router on the same segment as your Prestige; over the WAN, the gateway must be the IP address of one of the remote nodes. Click the edit icon to open the static route setup screen. Modify a static route
  • ZyXEL P-320W | User Guide - Page 117
    Figure 66 Static Route Setup P-320W User's Guide The following table describes the labels in this screen. Table 50 Static Route Setup LABEL Active Destination IP Address IP Subnet Mask Gateway IP Address Metric Apply Reset DESCRIPTION This field allows you to activate/deactivate this static
  • ZyXEL P-320W | User Guide - Page 118
    P-320W User's Guide 118 Chapter 10 Static Route Screens
  • ZyXEL P-320W | User Guide - Page 119
    P-320W User's Guide CHAPTER 11 Remote Management Screens This chapter provides information on the Remote Management screens. 11.1 Remote Management Overview Remote management allows you to determine which services/protocols can access which Prestige interface (if any) from which computers. Note:
  • ZyXEL P-320W | User Guide - Page 120
    computer to access the Prestige using this service. Choose Selected to just allow the computer with the IP address that you specify to access the Prestige using this service. Apply Click Apply to save your changes back to the Prestige. Reset Click Reset to begin configuring this screen afresh
  • ZyXEL P-320W | User Guide - Page 121
    P-320W User's Guide 11.3 SNMP Simple Network Management Protocol (SNMP) is a protocol used for exchanging management information between network devices. SNMP is a member of the TCP/IP protocol suite. Your Prestige supports SNMP agent functionality, which allows a manager station to manage and
  • ZyXEL P-320W | User Guide - Page 122
    P-320W User's Guide ZYXEL- MIB) 6a For intentional reboot : 6b For fatal error : DESCRIPTION A trap is sent after booting (power on). A trap is sent after booting (software reboot). A trap is sent to the manager when receiving any SNMP get or set requirements with the wrong community (password
  • ZyXEL P-320W | User Guide - Page 123
    . Choose Selected to just allow the computer with the IP address that you specify to access the Prestige using this service. Apply Click Apply to save your changes back to the Prestige. Reset Click Reset to begin configuring this screen afresh. 11.5 Security Screen To change your Prestige
  • ZyXEL P-320W | User Guide - Page 124
    TCP/IP software and directly apparent to the application user. Do not respond to The Prestige will not respond to any incoming WAN Ping requests when the check ping from WAN box is selected. Apply Click Apply to save your changes back to the Prestige. Reset Click Reset to begin configuring this
  • ZyXEL P-320W | User Guide - Page 125
    devices and enable exchange of simple product and service descriptions. NAT traversal allows the following: 1 Dynamic port mapping 2 Learning public IP addresses 3 Assigning lease times to mappings Windows Messenger is an example of an application that supports NAT traversal and UPnP. See the SUA
  • ZyXEL P-320W | User Guide - Page 126
    screen without entering the Play (UPnP) Prestige's IP address (although you must still enter the password to access the feature web configurator). Apply Click Apply to save your changes back to the Prestige. Reset Click Reset to begin configuring this screen afresh. 126 Chapter 12 UPnP
  • ZyXEL P-320W | User Guide - Page 127
    P-320W User's Guide 12.4 Installing UPnP in Windows Example This section shows how to install UPnP in Windows Me and Windows XP. 12.4.1 Installing UPnP in Windows Me Follow the steps below to install UPnP in Windows Me. 1 Click Start and Control Panel. Double-click Add/Remove Programs. 2 Click on
  • ZyXEL P-320W | User Guide - Page 128
    320W User's Guide Figure 73 Add/Remove Programs: Windows Setup: Communication: Components 4 Click OK to go back to the Add/Remove Programs Properties window and click Next. 5 Restart the computer when prompted. 12.4.2 Installing UPnP in Windows XP Follow the steps below to install Service in the
  • ZyXEL P-320W | User Guide - Page 129
    Figure 75 Windows Optional Networking Components Wizard P-320W User's Guide 5 In the Networking Services window, select the Universal Plug and Play check box. Figure 76 Networking Services Click OK to go back to the Windows Optional Networking Component Wizard window and click Next. 12.5 Using
  • ZyXEL P-320W | User Guide - Page 130
    P-320W User's Guide Make sure the computer is connected to a LAN port of the ZyXEL device. Turn on your computer and the ZyXEL device. 12.5.1 Auto-discover Your UPnP-enabled Network Device 1 Click Start and Control Panel. Double-click Network Connections. An icon displays under Internet Gateway. 2
  • ZyXEL P-320W | User Guide - Page 131
    Figure 78 Internet Connection Properties P-320W User's Guide 4 You may edit or delete the port mappings or click Add to manually add port mappings. Figure 79 Internet Connection Properties: Advanced Settings Chapter 12 UPnP 131
  • ZyXEL P-320W | User Guide - Page 132
    P-320W User's Guide Figure 80 Internet Connection Properties: Advanced Settings: Add 5 When the UPnP-enabled device is disconnected from your computer, all port mappings will be deleted automatically. 6 Select Show icon in notification area when connected option and click OK. An icon displays in the
  • ZyXEL P-320W | User Guide - Page 133
    P-320W User's Guide 12.5.2 Web Configurator Easy Access With UPnP, you can access the web-based configurator on the ZyXEL device without finding out the IP address of the ZyXEL device first. This is helpful if you do not know the IP address of the ZyXEL device. Follow the steps below to access the
  • ZyXEL P-320W | User Guide - Page 134
    P-320W User's Guide Figure 84 Network Connections: My Network Places 6 Right-click on the icon for your Prestige and select Properties. A properties window displays with basic information about the Prestige. Figure 85 Network Connections: My Network Places: Properties: Example 134 Chapter 12 UPnP
  • ZyXEL P-320W | User Guide - Page 135
    P-320W User's Guide CHAPTER 13 System This chapter provides information on the System screens. 13.1 System Overview See the Wizard Setup chapter for more information on the next few screens. 13.2 General Screen Click the System link under Maintenance and the General tab. The following screen
  • ZyXEL P-320W | User Guide - Page 136
    you type. Type the new password again in this field. Click Apply to save your changes back to the Prestige. Click Reset to begin configuring this screen afresh. 13.3 Dynamic DNS Dynamic DNS allows you to update your current dynamic IP address with one or many dynamic DNS services so that anyone can
  • ZyXEL P-320W | User Guide - Page 137
    P-320W User's Guide 13.4 Dynamic DNS Screen To change your Prestige's DDNS, click the service provider. Host Name Enter a host namesin the feld provided. You can specify up to two host names in the field separated by a comma (","). User Name Enter your user name. Password Enter the password
  • ZyXEL P-320W | User Guide - Page 138
    P-320W User's Guide Figure 88 Time Setting The following table describes the labels New Time (hh:mm:ss) This field displays the last updated time from the time server or the last time configured manually. When you set Time and Date Setup to Manual, enter the new time in this field and then click
  • ZyXEL P-320W | User Guide - Page 139
    P-320W User's Guide Table 58 Time Setting LABEL Get from Time Server Time Server Time Zone Setup Time Zone Daylight Savings Start Date End Date Apply Reset DESCRIPTION Select this radio button to have the Prestige get the time and date from the time server you specified below. Select the URL of
  • ZyXEL P-320W | User Guide - Page 140
    P-320W User's Guide 140 Chapter 13 System
  • ZyXEL P-320W | User Guide - Page 141
    P-320W User's Guide CHAPTER 14 Logs This chapter contains information about configuring general log settings and viewing the Prestige's logs. Refer to the appendices for example log message explanations. 14.1 View Log The web configurator allows you to look at all of the Prestige's logs in one
  • ZyXEL P-320W | User Guide - Page 142
    P-320W User's Guide The following table describes the labels in this screen. Table 59 View Log LABEL WAN Type Display Time Email Log Now Refresh Clear Logs Time Message DESCRIPTION This shows the encapsulation method (and service type) the Prestige is using and the firmware version. This
  • ZyXEL P-320W | User Guide - Page 143
    Figure 90 Log Settings P-320W User's Guide The following table describes the labels in this screen. Table 60 Log Settings LABEL DESCRIPTION E-mail Log Settings Mail Server Enter the server name or the IP address of the mail server for the e-mail addresses specified below. If this field is
  • ZyXEL P-320W | User Guide - Page 144
    P-320W User's Guide Table 60 Log Settings (continued) LABEL User Name Password Syslog Logging Active Syslog Server IP Address Log Facility Active Log and Alert Log Send Immediate Alert Apply Reset DESCRIPTION Enter the user name (up to 31 characters) (usually the user name of a mail account).
  • ZyXEL P-320W | User Guide - Page 145
    P-320W User's Guide CHAPTER 15 Tools This chapter shows you how to upload a new firmware, upload or save backup configuration files and restart the Prestige. 15.1 Firmware Upload Screen Find firmware at www.zyxel.com in a file that (usually) uses the system model name with a .bin extension, for
  • ZyXEL P-320W | User Guide - Page 146
    P-320W User's Guide Note: Do not turn off the Prestige while firmware upload is in progress! After you see the Firmware Upload In Process screen, wait two minutes before logging into the Prestige again. Figure 92 Upload Warning The Prestige automatically restarts in this time causing a
  • ZyXEL P-320W | User Guide - Page 147
    P-320W User's Guide Click the Tools link under Maintenance, and the Configuration tab. Information related to factory defaults, backup configuration, and restoring configuration appears as shown next. Figure 95 Configuration 15.2.1 Backup Configuration Backup configuration allows you to back up (
  • ZyXEL P-320W | User Guide - Page 148
    following icon on your desktop. Figure 97 Temporarily Disconnected If you uploaded the default configuration file you may need to change the IP address of your computer to be in the same subnet as that of the default Prestige IP address (192.168.1.1). See the appendix for details on how to set up
  • ZyXEL P-320W | User Guide - Page 149
    Figure 99 System Restart P-320W User's Guide Chapter 15 Tools 149
  • ZyXEL P-320W | User Guide - Page 150
    P-320W User's Guide 150 Chapter 15 Tools
  • ZyXEL P-320W | User Guide - Page 151
    P-320W User's Guide CHAPTER 16 Troubleshooting This chapter covers potential problems and the corresponding remedies. 16.1 Problems Starting Up the Prestige Table 63 Troubleshooting Starting Up Your Prestige PROBLEM CORRECTIVE ACTION None of the LEDs turn on when I turn on the Prestige. Make
  • ZyXEL P-320W | User Guide - Page 152
    P-320W User's Guide 16.3 Problems with the WAN Table 65 Troubleshooting the WAN PROBLEM The WAN LED is off. I cannot get a WAN IP address from the ISP. I cannot access the Internet. The Internet connection disconnects. CORRECTIVE ACTION Check the connections between the Prestige WAN port and the
  • ZyXEL P-320W | User Guide - Page 153
    the Prestige's LAN IP address when configuring from the LAN. 16.6 Problems Accessing the Prestige Table 68 Troubleshooting Accessing the Prestige PROBLEM I cannot access the Prestige. I cannot access the web configurator. CORRECTIVE ACTION The username is "admin". The default password is "1234
  • ZyXEL P-320W | User Guide - Page 154
    pop-up blocking to log into your device. Either disable pop-up blocking (enabled by default in Windows XP SP (Service Pack) 2) or allow pop-up blocking and create an exception for your device's IP address. 16.6.1.1.1 Disable pop-up Blockers 1 In Internet Explorer, select Tools, Pop-up Blocker and
  • ZyXEL P-320W | User Guide - Page 155
    Figure 101 Internet Options P-320W User's Guide 3 Click Apply to save this setting. 16.6.1.1.2 Enable pop-up Blockers with Exceptions Alternatively, if you Internet Options and then the Privacy tab. 2 Select Settings...to open the Pop-up Blocker Settings screen. Chapter 16 Troubleshooting 155
  • ZyXEL P-320W | User Guide - Page 156
    P-320W User's Guide Figure 102 Internet Options 3 Type the IP address of your device (the web page that you do not want to have blocked) with the prefix "http://". For example, http://192.168.1.1. 4 Click Add to move the IP address to the list of Allowed sites. Note: If you change the IP address of
  • ZyXEL P-320W | User Guide - Page 157
    Figure 103 Pop-up Blocker Settings P-320W User's Guide 5 Click Close to return to the Privacy screen. 6 Click Apply to save this setting. 16.6.1.2 JavaScripts If pages of the web configurator do not display properly in Internet Explorer, check that JavaScripts are allowed. 1 In Internet Explorer,
  • ZyXEL P-320W | User Guide - Page 158
    P-320W User's Guide Figure 104 Internet Options 2 Click the Custom Level... button. 3 Scroll down to Scripting. 4 Under Active scripting make sure that Enable is selected (the default). 5 Under Scripting of Java applets make sure that Enable is selected (the default). 6 Click OK to close the window.
  • ZyXEL P-320W | User Guide - Page 159
    Figure 105 Security Settings - Java Scripting P-320W User's Guide 16.6.1.3 Java Permissions 1 From Internet Explorer, click Tools, Internet Options and then the Security tab. 2 Click make sure that a safety level is selected. 5 Click OK to close the window. Chapter 16 Troubleshooting 159
  • ZyXEL P-320W | User Guide - Page 160
    P-320W User's Guide Figure 106 Security Settings - Java 16.6.1.3.1 JAVA (Sun) 1 From Internet Explorer, click Tools, Internet Options and then the Advanced tab. 2 Java 2 for under Java (Sun) is selected. 3 Click OK to close the window. Figure 107 Java (Sun) 160 Chapter 16 Troubleshooting
  • ZyXEL P-320W | User Guide - Page 161
    P-320W User's Guide 16.6.2 ActiveX Controls in Internet Explorer If ActiveX is disabled, you will not be able to download ActiveX controls or to use . 5 Under Run ActiveX controls and plug-ins make sure the Enable radio button is selected. 6 Then click the OK button. Chapter 16 Troubleshooting 161
  • ZyXEL P-320W | User Guide - Page 162
    P-320W User's Guide Figure 109 Security Setting ActiveX Controls 162 Chapter 16 Troubleshooting
  • ZyXEL P-320W | User Guide - Page 163
    P-320W User's Guide APPENDIX A Product Specifications See also the Introduction chapter for a general overview of the key features. Specification Tables Table 69 Device Default IP Address Default Subnet Mask Default Password DHCP Pool Dimensions Weight Power Specification Built-in Switch
  • ZyXEL P-320W | User Guide - Page 164
    P-320W User's Guide Table 70 Firmware (continued) Wireless Port Forwarding 4096 NAT sessions Multimedia application PPTP under NAT/SUA IPSec passthrough SIP ALG passthrough Cone NAT (Port-restricted NAT) 8 IP Traffic Redirect Dynamic DNS SMTP Authentication 164 Appendix A Product Specifications
  • ZyXEL P-320W | User Guide - Page 165
    P-320W User's Guide APPENDIX B IP Subnetting IP Addressing Routers "route" based on the network number. The router that delivers the data packet to the correct destination host uses the host ID. IP Classes An IP address is made up of four octets (eight bits), written in dotted decimal notation,
  • ZyXEL P-320W | User Guide - Page 166
    P-320W User's Guide Since the first octet of a class "A" IP address must contain a "0", the first octet of a class "A" address can have a value of 0 to 127. Similarly the first octet of a class "B" must begin with "10", therefore the first octet of a class "B" address has a valid range of 128 to
  • ZyXEL P-320W | User Guide - Page 167
    P-320W User's Guide Since the mask is always a continuous number of ones beginning from . Divide the network 192.168.1.0 into two separate subnets by converting one of the host ID bits of the IP address to a network number bit. The "borrowed" host ID bit can be either "0" or "1" thus giving two
  • ZyXEL P-320W | User Guide - Page 168
    P-320W User's Guide Note: In the following charts, shaded/bolded last octet bit values VALUE 0 00000000 128 10000000 Table 77 Subnet 2 IP Address IP Address (Binary) Subnet Mask Subnet Mask (Binary) Subnet Address: 192.168.1.128 Broadcast Address: 192.168.1.255 NETWORK NUMBER 192.168.1. 11000000
  • ZyXEL P-320W | User Guide - Page 169
    320W User's Guide Example: Four Subnets The above example illustrated using a 25-bit subnet mask to divide a class "C" address space into two subnets. Similarly to divide a class "C" address NUMBER IP Address IP Address (Binary) Subnet Mask (Binary) Subnet Address: 192.168.1.64 Broadcast Address:
  • ZyXEL P-320W | User Guide - Page 170
    P-320W User's Guide Table 81 Subnet 4 IP Address IP Address (Binary) Subnet Mask (Binary) Subnet Address: 192.168.1.192 Broadcast Address: 192.168.1.255 NETWORK NUMBER 192.168.1. 11000000.10101000.00000001. 11111111.11111111.11111111. Lowest Host ID: 192.168.1.193 Highest Host ID: 192.168.1.254
  • ZyXEL P-320W | User Guide - Page 171
    320W User's Guide Subnetting With Class A and Class B Networks. For class "A" and class "B" addresses the subnet mask also determines which bits are part of the network number and which are part of the host ID. A class "B" address 2046 1022 510 254 126 62 30 14 6 2 1 Appendix B IP Subnetting 171
  • ZyXEL P-320W | User Guide - Page 172
    P-320W User's Guide 172 Appendix B IP Subnetting
  • ZyXEL P-320W | User Guide - Page 173
    P-320W User's Guide APPENDIX C Setting up Your Computer's IP Address All computers must have a 10M or 100M Ethernet adapter card and TCP/IP installed. Windows 95/98/Me/NT/2000/XP, Macintosh OS 7 and later operating systems and all versions of UNIX/LINUX include the software components you need to
  • ZyXEL P-320W | User Guide - Page 174
    P-320W User's Guide Figure 110 WIndows 95/98/Me: Network: Configuration Installing Components The Network window Configuration tab displays a list of installed components. You need a network adapter, the TCP/IP protocol and Client for Microsoft Networks. If you need the adapter: 1 In the Network
  • ZyXEL P-320W | User Guide - Page 175
    Configuration tab, select your network adapter's TCP/IP entry and click Properties 2 Click the IP Address tab. • If your IP address is dynamic, select Obtain an IP address automatically. • If you have a static IP address, select Specify an IP address and type your information into the IP Address
  • ZyXEL P-320W | User Guide - Page 176
    P-320W User's Guide Figure 112 Windows 95/98/Me: TCP/IP Properties: DNS Configuration 4 Click the Gateway tab. • If you do not know your gateway's IP address, remove previously installed gateways. • If you have a gateway IP address, type it in the New gateway field and click Add. 5 Click OK to save
  • ZyXEL P-320W | User Guide - Page 177
    Start Menu P-320W User's Guide 2 In the Control Panel, double-click Network Connections (Network and Dial-up Connections in Windows 2000/NT). Figure 114 Windows XP: Control Panel 3 Right-click Local Area Connection and then click Properties. Appendix C Setting up Your Computer's IP Address 177
  • ZyXEL P-320W | User Guide - Page 178
    P-320W User's Guide Figure 115 Windows XP: Control Panel: Network Connections: Properties 4 Select Internet Protocol (TCP/IP) (under the General tab in Win XP) and then click Properties. Figure 116 Windows XP: Local Area Connection Properties 5 The Internet Protocol TCP/IP Properties window opens (
  • ZyXEL P-320W | User Guide - Page 179
    Add. • Repeat the above two steps for each IP address you want to add. • Configure additional default gateways in the IP Settings tab by clicking Add in Default gateways. • In TCP/IP Gateway Address, type the IP address of the default gateway in Gateway. To manually configure a default metric (the
  • ZyXEL P-320W | User Guide - Page 180
    P-320W User's Guide Figure 118 Windows XP: Advanced TCP/IP Properties 7 In the Internet Protocol TCP/IP Properties window (the General tab in Windows XP): • Click Obtain DNS server address automatically if you do not know your DNS server IP address(es). • If you know your DNS server IP address(es),
  • ZyXEL P-320W | User Guide - Page 181
    Protocol (TCP/IP) Properties P-320W User's Guide 8 Click OK to close the Internet Protocol (TCP/IP) Properties window. Support tab. Macintosh OS 8/9 1 Click the Apple menu, Control Panel and double-click TCP/IP to open the TCP/IP Control Panel. Appendix C Setting up Your Computer's IP Address
  • ZyXEL P-320W | User Guide - Page 182
    P-320W User's Guide Figure 120 Macintosh OS 8/9: Apple Menu 2 Select Ethernet built-in from the Connect via list. Figure 121 Macintosh OS 8/9: TCP/IP 3 For dynamically assigned settings, select Using DHCP Server from the Configure: list. 182 Appendix C Setting up Your Computer's IP Address
  • ZyXEL P-320W | User Guide - Page 183
    P-320W User's Guide 4 For statically assigned settings, do the following: • From the Configure box, select Manually. • Type your IP address in the IP Address box. • Type your subnet mask in the Subnet mask box. • Type the IP address of your Prestige in the Router address box. 5 Close the TCP/IP
  • ZyXEL P-320W | User Guide - Page 184
    P-320W User's Guide Figure 123 Macintosh OS X: Network 4 For statically assigned settings, do the following: • From the Configure box, select Manually. • Type your IP address in the IP Address box. • Type your subnet mask in the Subnet mask box. • Type the IP address of your Prestige in the Router
  • ZyXEL P-320W | User Guide - Page 185
    P-320W User's Guide Note: Make sure you are logged in as the root administrator. Using the K Desktop Environment (KDE) Follow the steps below to configure your computer IP address using the KDE. 1 Click the Red Hat button (located on the bottom left corner), select System Setting and click Network.
  • ZyXEL P-320W | User Guide - Page 186
    P-320W User's Guide • If you have a dynamic IP address, click Automatically obtain IP address settings with and select dhcp from the drop down list. • If you have a static IP address, click Statically set IP Addresses and fill in the Address, Subnet mask, and Default Gateway Address fields. 3 Click
  • ZyXEL P-320W | User Guide - Page 187
    P-320W User's Guide 1 Assuming that you have only one network card on the computer, locate the ifconfigeth0 configuration file (where eth0 is the name of the Ethernet card). Open the configuration file with any plain text editor. • If you have a dynamic IP address, enter dhcp in the BOOTPROTO= field
  • ZyXEL P-320W | User Guide - Page 188
    P-320W User's Guide Enter ifconfig in a terminal screen to check your TCP/IP properties. Figure 132 Red Hat 9.0: Checking TCP/IP Properties [root@localhost]# ifconfig eth0 Link encap:Ethernet HWaddr Kb) Interrupt:10 Base address:0x1000 [root@localhost]# 188 Appendix C Setting up Your
  • ZyXEL P-320W | User Guide - Page 189
    P-320W User's Guide APPENDIX D PPPoE PPPoE in Action An ADSL modem bridges a PPP session over Ethernet (PPP over Ethernet, RFC 2516) from your computer to an ATM PVC (Permanent Virtual Circuit) which connects to a DSL Access Concentrator where the PPP session terminates (see Figure 133 on page 190).
  • ZyXEL P-320W | User Guide - Page 190
    P-320W User's Guide Figure 133 Single-Computer per Router Hardware Configuration How PPPoE Works The PPPoE driver makes the Ethernet appear as a serial link to the computer and the computer runs PPP over it, while the modem bridges the Ethernet frames to the Access Concentrator (AC). Between the AC
  • ZyXEL P-320W | User Guide - Page 191
    users on the network to access a different remote server using the ZyWALL's Internet connection. In SUA/NAT mode, the ZyWALL is able to pass the PPTP packets to the internal PPTP server (i.e. NT server) behind the NAT. You need to configure port forwarding for port 1723 to have the ZyWALL forward
  • ZyXEL P-320W | User Guide - Page 192
    P-320W User's Guide PPTP Protocol Overview PPTP is very similar to L2TP, since L2TP is based on both PPTP and L2F (Cisco's Layer 2 Forwarding). Conceptually, there are three parties in PPTP, namely the PNS (PPTP Network Server), the PAC (PPTP Access Concentrator) and the PPTP user. The PNS is the
  • ZyXEL P-320W | User Guide - Page 193
    P-320W User's Guide Figure 137 Example Message Exchange between Computer and an ANT PPP Data Connection The PPP frames are tunneled between the PNS and PAC over GRE (
  • ZyXEL P-320W | User Guide - Page 194
    P-320W User's Guide 194 Appendix E PPTP
  • ZyXEL P-320W | User Guide - Page 195
    Communication in an Ad-hoc Network BSS A Basic Service Set (BSS) exists when all communications between wireless stations or between a wireless station and a wired network client go through one access point (AP). Intra-BSS traffic is traffic between wireless stations in the BSS. When Intra-BSS is
  • ZyXEL P-320W | User Guide - Page 196
    P-320W User's Guide Figure 139 Basic Service Set ESS An Extended Service Set (ESS) consists of a series of overlapping BSSs, each containing an access point, with each access point connected together by a wired network. This wired connection between APs is called a Distribution System (DS). This
  • ZyXEL P-320W | User Guide - Page 197
    WLAN P-320W User's Guide Channel A channel is the radio frequency(ies) used by IEEE 802.11a/b/g wireless devices. Channels available depend on your geographical area. You may have a choice of channels (for your region) so you should use a different channel than an adjacent AP (access point) to
  • ZyXEL P-320W | User Guide - Page 198
    P-320W User's Guide Figure 141 RTS/CTS When station A sends data to the AP, it might not know that the Threshold is the maximum data fragment size (between 256 and 2432 bytes) that can be sent in the wireless network before the AP will fragment the packet into smaller data frames. 198 Appendix
  • ZyXEL P-320W | User Guide - Page 199
    P-320W User's Guide A large Fragmentation wireless stations MUST use the same preamble mode in order to communicate. IEEE 802.11g Wireless LAN IEEE 802.11g is fully compatible with the IEEE 802.11b standard. This means an IEEE 802.11b adapter can interface directly with an IEEE 802.11g access point
  • ZyXEL P-320W | User Guide - Page 200
    User Service, RFC 2138, 2139) for centralized user profile and accounting management on a network RADIUS server. • Support for EAP (Extensible Authentication Protocol, RFC 2486) that allows additional authentication methods to be deployed with no changes to the access point or the wireless stations
  • ZyXEL P-320W | User Guide - Page 201
    that runs on top of the IEEE802.1x transport mechanism in order to support multiple types of user authentication. By using EAP to interact with an EAP-compatible RADIUS server, the access point helps a wireless station and a RADIUS server perform authentication. The type of authentication you use
  • ZyXEL P-320W | User Guide - Page 202
    P-320W User's Guide 3 The wireless station replies with identity information, including username and password. 4 The RADIUS server checks the user information against its user profile database and determines whether or not to authenticate the wireless station. Types of Authentication This section
  • ZyXEL P-320W | User Guide - Page 203
    P-320W User's Guide PEAP (Protected EAP) Like EAP-TTLS, server-side certificate authentication is used to establish a secure connection, then use simple username and password methods through the secured connection to authenticate the clients, thus hiding client identity. However, PEAP only supports
  • ZyXEL P-320W | User Guide - Page 204
    P-320W User's Guide Figure 143 WEP Authentication Steps Open system authentication involves an unencrypted two-message procedure. A wireless station sends an open system authentication request to the AP, which will then automatically accept and connect the wireless station to the network. In effect
  • ZyXEL P-320W | User Guide - Page 205
    's Guide Note: EAP-MD5 cannot be used with Dynamic WEP Key Exchange For added security, certificate-based authentications (EAP-TLS, EAP-TTLS and PEAP) use dynamic keys for data encryption. They are often deployed in corporate environments, but for public deployment, a simple user name and password
  • ZyXEL P-320W | User Guide - Page 206
    an IEEE 802.11 mode compliant wireless adapter. An access point (AP) acts as a bridge between the wireless and wired networks. An AP creates its own wireless coverage area. A wireless station can associate with a particular access point only if it is within the access point's coverage area. 206
  • ZyXEL P-320W | User Guide - Page 207
    P-320W User's Guide In a network environment with multiple access points, wireless stations are able to switch from one access point to another as they move between the coverage areas. This is roaming. As the wireless station moves from place to place, it is responsible for choosing the most
  • ZyXEL P-320W | User Guide - Page 208
    P-320W User's Guide Requirements for Roaming The following requirements must be met in order for wireless stations to roam between the coverage areas. 1 All the access points must be on the same subnet and configured with the same ESSID. 2 If IEEE 802.1x user authentication is enabled and to be done
  • ZyXEL P-320W | User Guide - Page 209
    P-320W User's Guide APPENDIX G Antenna Selection and Positioning Recommendation An antenna couples RF signals onto air. A transmitter within a wireless device sends in dBi, which is how much the antenna increases the signal power compared to using an isotropic antenna. An isotropic antenna is a
  • ZyXEL P-320W | User Guide - Page 210
    P-320W User's Guide Types of Antennas For WLAN There are two types of antennas used for wireless LAN applications. • Omni-directional area, it is possible to make circular overlapping coverage areas with multiple access points. • Directional antennas concentrate the RF signal in a beam, like a
  • ZyXEL P-320W | User Guide - Page 211
    210 Omni-directional 210 Antenna gain 209 AP (access point) 197 Authentication 203 Authority 4 AWG 6 B Backup 147 Basement 6 Basic wireless security 49 BSS 195 C CA 202 Cables, Connecting 6 Certificate Authority 202 P-320W User's Guide Index Certifications 5 Changes or Modifications 4 Channel 197
  • ZyXEL P-320W | User Guide - Page 212
    Independent Basic Service Set 195 Indirect Damages 7 initialization vector (IV) 205 Inside 100 Inside Global Address 99 Inside Local Address 99 Install UPnP Windows XP 128 Insurance 7 Interference 4 Interference Correction Measures 4 Interference Statement 4 Internet Access Setup 152 IP Address 41
  • ZyXEL P-320W | User Guide - Page 213
    100 P-320W User's Guide P Packet statistics 42 Pairwise Master Key (PMK) 205 Parts 7 Patent 3 Permission 3 Photocopying 3 Pipes 6 Point-to-Point Tunneling Protocol 87, 102 Pool 6 POP3 102 Port Numbers 102 Postage Prepaid. 7 Power Adaptor 6 Power Cord 6 Power Outlet 6 Power Supply 6 Power Supply
  • ZyXEL P-320W | User Guide - Page 214
    7 TCP/IP 94 Telecommunication Line Cord. 6 Telephone 8 Television Interference 4 Television Reception 4 Temporal Key Integrity Protocol (TKIP) 205 TFTP Restrictions 119 Thunderstorm 6 Time Zone 137 Trademark 3 Trademark Owners 3 Trademarks 3 Traffic Redirect 90 Translation 3 Trigger Port Forwarding
  • ZyXEL P-320W | User Guide - Page 215
    67 Wi-Fi Protected Access (WPA) 30 Wireless association list summary 42 Wireless Client WPA Supplicants 69 Wireless LAN MAC Address Filtering 31 Wireless LAN Wizard 47 Wireless security 61 WLAN Interference 197 Security parameters 206 P-320W User's Guide Workmanship 7 Worldwide Contact Information
  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215

P-320W
802.11g Wireless Firewall Router
User’s Guide
Version 1.00
11/2005
Edition 1