ZyXEL P-663H-51 User Guide

ZyXEL P-663H-51 Manual

Get ZyXEL P-663H-51 PDF manuals and user guides View all ZyXEL P-663H-51 manuals
Add to My Manuals
Save this manual to your list of manuals

ZyXEL P-663H-51 manual content summary:

  • ZyXEL P-663H-51 | User Guide - Page 1
    P-663HN-51 802.11n ADSL2+ Bonded 4-port Gateway Default Login Details IP Address http://192.168.1.1 User Name admin Password 1234 Firmwawrwew.Vzyexresl.icoonm 1.01 Edition 1, 8/2009 www.zyxel.com Copyright © 2009 ZyXEL Communications Corporation
  • ZyXEL P-663H-51 | User Guide - Page 2
  • ZyXEL P-663H-51 | User Guide - Page 3
    your comments, questions or suggestions to: [email protected] Thank you! The Technical Writing Team, ZyXEL Communications Corp., 6 Innovation Road II, Science-Based Industrial Park, Hsinchu, 30099, Taiwan. Need More Help? More help is available at www.zyxel.com. P-663HN-51 User's Guide 3
  • ZyXEL P-663H-51 | User Guide - Page 4
    ZyXEL products. • Forum This contains discussions on ZyXEL products. Learn from others who use ZyXEL products and share your experiences as well. Customer Support Should problems received your device. • Brief description of the problem and the steps you took to solve it. 4 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 5
    , other things you may need to configure or helpful tips) or recommendations. Syntax Conventions • The P-663HN-51 may be referred to as the "ZyXEL Device", the "device" or the "system" in this User's Guide. • Product labels, screen names, field labels and field choices are all in bold font. • A key
  • ZyXEL P-663H-51 | User Guide - Page 6
    Conventions Icons Used in Figures Figures in this User's Guide may use the following generic icons. The ZyXEL Device icon is not an exact representation of your device. ZyXEL Device Computer Notebook computer Server DSLAM Firewall Telephone Switch Router 6 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 7
    Equipment. It means that used electrical and electronic products should not be mixed with general waste. Used electrical and electronic equipment should be treated separately. P-663HN-51 User's Guide 7
  • ZyXEL P-663H-51 | User Guide - Page 8
    Safety Warnings 8 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 9
    175 Settings ...177 Logs ...181 SNMP ...185 TR-069 Client ...189 Time ...191 Access Control ...193 Update Software ...199 Save/Reboot and Logout ...201 Troubleshooting and Specifications 203 Troubleshooting ...205 Product Specifications ...209 Appendices and Index ...215 P-663HN-51 User's Guide 9
  • ZyXEL P-663H-51 | User Guide - Page 10
    Contents Overview 10 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 11
    28 2.2.2 Administrator Access 29 2.3 Resetting the ZyXEL Device 29 2.3.1 Using the Reset Button 29 2.4 Navigating the Web Configurator 30 Chapter 3 Initial Configuration ...35 3.1 WAN Configuration ...35 3.2 QoS Configuration ...36 3.3 Changing the Login Password 36 P-663HN-51 User's Guide 11
  • ZyXEL P-663H-51 | User Guide - Page 12
    Connection Type and Encapsulation Mode 60 5.8 NAT ...61 5.9 Nailed-Up Connection (PPP 61 5.10 PPPoA WAN Connection Setup 62 5.11 PPPoE WAN Connection Setup 65 5.12 MER WAN Connection Setup 68 5.13 IPoA WAN Connection Setup 69 5.14 Bridge WAN Connection Setup 70 12 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 13
    8.2 Adding Outgoing IP Filtering Rules 94 8.3 Incoming IP Filtering ...95 8.4 Adding Incoming IP Filtering Rules 96 Chapter 9 Parental Control (Blocking Schedule 99 9.1 Adding Parental Control (Blocking Schedule) Entries 100 Chapter 10 Quality of Service (QoS)...103 P-663HN-51 User's Guide 13
  • ZyXEL P-663H-51 | User Guide - Page 14
    .1.1 DYNDNS Wildcard 123 14.2 Dynamic DNS ...124 14.3 Configuring Dynamic DNS 125 Chapter 15 DSL Setup...127 15.1 DSL Setup ...127 Chapter 16 Interface Group ...129 16.1 Interface Groups Overview 129 16.2 Interface Groups Setup 129 16.3 Adding an Interface Group 131 14 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 15
    Screen 153 18.7 Wireless Bridge Screen 154 18.8 The Advanced Setup Screen 155 18.9 Wireless Setup 164 18.10.5 Vista as a WPS External Registrar 170 Part III: Diagnostics and Management 173 Chapter 19 Diagnostics ...175 19.1 Diagnostics ...175 Chapter 20 Settings...177 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 16
    Screen 193 25.3 IP Addresses ...194 25.4 Adding IP Addresses ...195 25.5 Passwords ...195 25.6 Authentication ...197 Chapter 26 Update Software ...199 26.1 Uploading Firmware ...199 Chapter 27 Save/Reboot and Logout ...201 27.1 Save/Reboot ...201 27.2 Logout ...201 16 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 17
    Address 217 Appendix B Pop-up Windows, JavaScripts and Java Permissions 243 Appendix C IP Addresses and Subnetting 253 Appendix D Wireless LANs 265 Appendix E Common Services 281 Appendix F Open Software Announcements 285 Appendix G Legal Information 291 Index...295 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 18
    Table of Contents 18 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 19
    PART I Introduction Introducing the ZyXEL Device (21) Introducing the Web Configurator (27) 19
  • ZyXEL P-663H-51 | User Guide - Page 20
    20
  • ZyXEL P-663H-51 | User Guide - Page 21
    's specific model. Refer to the label on the bottom of your ZyXEL Device. The ZyXEL Device provides protection from attacks by Internet hackers. By default, the firewall blocks all incoming traffic from the WAN. See Chapter 29 on page 209 for a full list of features. P-663HN-51 User's Guide 21
  • ZyXEL P-663H-51 | User Guide - Page 22
    the ZyXEL Device to connect ZyXEL Device can attain a maximum downstream rate of about 44 Mbps.1 Note: The standard your ISP supports ZyXEL Device Use any of the following methods to manage the ZyXEL Device. 22 1. This is the theoretical maximum rate under ideal conditions. P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 23
    forget your password, you will have to reset the ZyXEL Device to its factory default settings. Connect the side labeled "Phone" to your telephone. 2 Connect the side labeled "Modem" or "DSL" to your ZyXEL Device. 3 Connect the side labeled "Line" to the telephone wall jack. P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 24
    Chapter 1 Introducing the ZyXEL Device 1.4.2 Telephone Microfilters Telephone voice transmissions take place in the lower frequency range, 0 - 4KHz, and contact either your local telephone company or the provider of the microfilter. Figure 3 Connecting a Microfilter 24 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 25
    Introducing the ZyXEL Device 1.5 System Startup and LEDs After you are done making the hardware connections, press the power button to the ON position. Look at the LEDs (lights) on the front panel. The following figure shows the ZyXEL Device's LEDs. Figure 4 Front Panel P-663HN-51 User's Guide 25
  • ZyXEL P-663H-51 | User Guide - Page 26
    completed (if used) and the DSL connection is up. The ZyXEL Device attempted to make an IP connection but failed. Possible causes are no response from a DHCP server, no PPPoE response, PPPoE authentication failed. The ZyXEL Device does not have an IP connection. 26 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 27
    connected (see Section 1.4 on page 23). 2 Assign your computer a static IP address (choose one from 192.168.1.2 to 192.168.1.254). See Appendix A on page 217 for how to change your computer's IP address. 3 Launch your web browser. 4 Type "192.168.1.1" as the URL. P-663HN-51 User's Guide 27
  • ZyXEL P-663H-51 | User Guide - Page 28
    2.2.1 User Access The user account can only access the ZyXEL Device from the LAN. For user access, enter the user account's user name (user) and password (1234 is the default) and click OK to view the status only. The following screen appears. Figure 6 User Status Screen 28 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 29
    Using the Reset Button 1 Make sure the POWER LED is on (not blinking). 2 Press the RESET button for ten seconds or until the POWER LED begins to blink and then release it. When the POWER LED begins to blink, the defaults have been restored and the ZyXEL Device restarts. P-663HN-51 User's Guide 29
  • ZyXEL P-663H-51 | User Guide - Page 30
    about the ZyXEL Device's LAN connections. WAN This screen displays statistics about the ZyXEL Device's WAN connections. ATM This screen shows low-level ATM protocol statistics. ADSL This screen displays statistics about the ZyXEL Device's ADSL connection. 30 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 31
    (for mapping domain names to IP addresses). Dynamic DNS A dynamic DNS service lets the ZyXEL Device use a Web name like *.yourhost.dyndns.org while using a dynamic IP address. This lets others access the ZyXEL Device from the Internet without knowing it's IP address. P-663HN-51 User's Guide 31
  • ZyXEL P-663H-51 | User Guide - Page 32
    connection to your Internet Service Provider. Management Settings Backup Use this screen to save the ZyXEL Device's configuration to a computer. Update Use this screen to save a previously saved configuration file from a computer to the ZyXEL Device. Restore Default Use this screen to reset
  • ZyXEL P-663H-51 | User Guide - Page 33
    upload firmware to your ZyXEL Device. Save/Reboot Use this screen to save all of your ZyXEL Device's settings and reboot the ZyXEL Device without turning the power off. Logout Exit the web configurator. Note: Click Management > Logout to exit the web configurator. P-663HN-51 User's Guide 33
  • ZyXEL P-663H-51 | User Guide - Page 34
    Chapter 2 Introducing the Web Configurator 34 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 35
    type (such as a user name and password). Click Advanced Setup > WAN > Add (or Edit). Use the following screen (and the ones that come after it) to configure your Internet connection. See Chapter 5 on page 53 for more information. Figure 8 Advanced Setup > WAN > Add P-663HN-51 User's Guide 35
  • ZyXEL P-663H-51 | User Guide - Page 36
    change the password for accessing the ZyXEL Device. Click Management > Access Control > Passwords to display the screen shown next. Use this screen to change the password. See Section 25.5 on page 195 for details. Figure 9 Management > Access Control > Passwords 36 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 37
    its connections. 4.1 Device Information Summary The Device Info > Summary screen displays when you log in. To get to it from another screen, just click Device Info > Summary. This screen displays general information about the ZyXEL Device. Figure 10 Device Info > Summary P-663HN-51 User's Guide 37
  • ZyXEL P-663H-51 | User Guide - Page 38
    primary server does not respond when the ZyXEL Device tries to Server resolve a domain name, the ZyXEL Device tries the server displayed in this field. Local Mac Address This is the MAC (Media Access Control) address the ZyXEL Device uses for it's LAN connections. 38 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 39
    ). QoS This is whether or not packet level QoS is enabled for the WAN connection. State This is whether or the WAN connection is enabled. Status This is the WAN connection's current ADSL line state. IPv4 Address This is the WAN connection's IP (version 4) address. P-663HN-51 User's Guide 39
  • ZyXEL P-663H-51 | User Guide - Page 40
    > LAN to open the following screen. This screen displays statistics about the ZyXEL Device's LAN connections. Figure 12 Device Reset Statistics Click this button to have the ZyXEL Device clear the current LAN interface statistics and start collecting them again. 40 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 41
    error packets received on or sent through the WAN connection. Drops This field displays the number of incoming or outgoing packets dropped. Reset Statistics Click this button to have the ZyXEL Device clear the current WAN statistics and start collecting them again. P-663HN-51 User's Guide 41
  • ZyXEL P-663H-51 | User Guide - Page 42
    ) address. In Port Not Enable Errors How many cells the ZyXEL Device received on disabled ports. In PTI Errors How many cells the ZyXEL Device received with an ATM header that had a Payload Type Indicator (PTI). In Idle Cells How many idle cells the ZyXEL Device received. 42 P-663HN-51 User
  • ZyXEL P-663H-51 | User Guide - Page 43
    discarded them). Length Errors How many PDUs the ZyXEL Device discarded because the length in the AAL5 trailer did not match the PDU length. Reset Statisitcs Click this button to have the ZyXEL Device clear the current ATM statistics and start collecting them again. P-663HN-51 User's Guide 43
  • ZyXEL P-663H-51 | User Guide - Page 44
    Statistics > ADSL to open the following screen. This screen displays statistics about the ZyXEL Device's ADSL connection. Figure 15 Device connection more stable. "RS" coding stands for Reed-Solomon error correction. Status This shows the ADSL link's connection status. 44 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 45
    ADSL connection's current power management mode. SNR power could increase with the ZyXEL Device still being able to reset where loss of cell delineation occurred. The total numbers of downstream and upstream ATM cells. The total numbers of downstream and upstream data cells. P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 46
    an ADSL Bit Error Rate Test to measure the quality of the ADSL connection. Figure 16 Device Info > Statistics > ADSL > ADSL BER Test Select for how many seconds to perform the test and click Start. Figure 17 Device Info > Statistics > ADSL > ADSL BER Test: Results 46 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 47
    this network address. Gateway This is the router the ZyXEL Device sends traffic to in order to forward the traffic connected networks. The number must be between "1" and "15"; a number greater than "15" means the link is down. The smaller the number, the lower the "cost". P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 48
    and RFC 2132) allows individual clients to obtain TCP/IP configuration at start-up from a server. You can configure the ZyXEL Device as a DHCP server or disable it. When configured as a server, the ZyXEL Device provides the TCP/IP configuration for the clients. If DHCP 48 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 49
    at the factory. This address follows an industry standard that ensures no other adapter has a similar address. This field displays the IP address assigned to the DHCP client. This field displays for how much longer the host has the lease for the assigned IP address. P-663HN-51 User's Guide 49
  • ZyXEL P-663H-51 | User Guide - Page 50
    Chapter 4 Device Information 50 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 51
    PART II Advanced WAN Setup (53) LAN Setup (75) Network Address Translation (NAT) Screens (83) Security (93) Quality of Service (QoS) (103) Routing (115) RIP (119) DNS Setup (121) Dynamic DNS Setup (123) DSL Setup (127) Interface Group (129) 51
  • ZyXEL P-663H-51 | User Guide - Page 52
    52
  • ZyXEL P-663H-51 | User Guide - Page 53
    CHAPTER 5 WAN Setup 5.1 WAN Overview A WAN (Wide Area Network) is an outside connection to another network is assigned to a specific virtual circuit; for example, VC1 carries IP, etc. VC-based multiplexing may be dominant in environments where dynamic VCs. P-663HN-51 User's Guide 53
  • ZyXEL P-663H-51 | User Guide - Page 54
    Setup maximum average rate at which cells can be sent over the virtual connection. SCR may not be greater than the PCR. Maximum Burst Size PCR again. If the PCR, SCR or MBS is set to the default of "0", the system will assign a maximum value that correlates to your upstream P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 55
    of an non realtime VBR connection would be non-time sensitive Setup > WAN to open the following screen. This screen displays your ZyXEL Device's WAN Internet access settings. You can also edit those settings and add more settings. The screen differs by the encapsulation. P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 56
    button to go to a screen where you can configure settings for a new WAN connection. Remove To remove a WAN connection, select its Remove check box and click the Remove button. Save/Reboot Click this button to apply and save your changes. The ZyXEL Device restarts. 56 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 57
    this enables IEEE 802.1q. Separate VLANs can be used to give different priorities to the traffic from different ports. 802.1Q VLAN ID When you enable VLAN multiplexing, type the VLAN ID that the ZyXEL Device is to add to the traffic sent through this WAN connection. P-663HN-51 User's Guide 57
  • ZyXEL P-663H-51 | User Guide - Page 58
    PPP session based on RFC1483 and sends it through an ATM PVC (Permanent Virtual Circuit) to the Internet Service Provider's (ISP) DSLAM (digital access multiplexer). Please refer to RFC 2364 for more information on PPPoA. Refer to RFC 1661 for more information on PPP. 58 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 59
    ). Please refer to the RFC for more detailed information. 5.5.5 Bridging With bridging the ZyXEL Device has a static IP address for the connection. The ZyXEL Device passes traffic through to another device (a computer or router for example) that handles authenticating with the ISP. 5.6 Encapsulation
  • ZyXEL P-663H-51 | User Guide - Page 60
    of large numbers of ATM VCs is fast and economical. 5.7 WAN Connection Type and Encapsulation Mode This is the second WAN setup add (or edit) screen. Use this screen to configure WAN connection type and encapsulation mode. Figure 24 Advanced Setup > WAN > Add (2) 60 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 61
    turned on and whenever the connection is down. A nailed-up connection can be very expensive for obvious reasons. Do not specify a nailed-up connection unless your telephone company offers flatrate service or you need a constant connection and the cost is of no concern P-663HN-51 User's Guide 61
  • ZyXEL P-663H-51 | User Guide - Page 62
    (3: PPPoA) The following table describes the labels in this screen. Table 15 Advanced Setup > WAN > Add (3: PPPoA) LABEL DESCRIPTION PPP User Name Enter the login name that your ISP gives you. PPP Password Enter the password associated with the user name above. 62 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 63
    that the ZyXEL Device is its default gateway and DNS server. • The ZyXEL Device extends the ISP's IP subnet to the LAN computer. • The ZyXEL Device bridges packets between the DSL and LAN interface, except for packets destined for the ZyXEL Device's LAN IP address. P-663HN-51 User's Guide 63
  • ZyXEL P-663H-51 | User Guide - Page 64
    . The ISP automatically assigns the WAN connection an IP address when it connects. Enable PPP debug Select this to turn on the debug mode for the PPP connection. mode Back Click this to return to the previous screen. Next Click this to go to the following screen. 64 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 65
    PPP User Name Enter the login name that your ISP gives you. PPP Password Enter the password associated with the user name above. PPPoE Service Name Type the PPPoE service name given to you by your ISP. PPPoE uses a service name to identify and reach the PPPoE server. P-663HN-51 User's Guide 65
  • ZyXEL P-663H-51 | User Guide - Page 66
    that the ZyXEL Device is its default gateway and DNS server. • The ZyXEL Device extends the ISP's IP subnet to the LAN computer. • The ZyXEL Device bridges packets between the DSL and LAN interface, except for packets destined for the ZyXEL Device's LAN IP address. 66 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 67
    WAN connection an IP address when it connects. Enable PPP debug Select this to turn on the debug mode for the PPP connection. mode Bridge PPPoE Frames Between WAN and Local Ports (Default Enabled) This feature is available when you do not select PPP IP extension. In addition to the ZyXEL Device
  • ZyXEL P-663H-51 | User Guide - Page 68
    . The ISP automatically assigns the WAN connection an IP address when it connects. Use the following Select this option to use a specific default gateway. Either enter the default gateway gateway's IP address or select the WAN interface to use to connect to it. 68 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 69
    Setup > WAN > Add (3: IPoA) LABEL DESCRIPTION WAN IP Address Enter the IP address from the ISP. Use dotted decimal notation (like 192.168.1.1 for example). WAN Subnet Mask Enter the subnet mask from the ISP. Use dotted decimal notation (like 255.255.0.0 for example). P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 70
    Setup > WAN > Add (3: IPoA) (continued) LABEL DESCRIPTION Use the following default gateway The default is a neighboring router that helps the ZyXEL Device forward traffic to its destination. Select this option and enter the gateway's IP address or select the WAN interface to use to connect
  • ZyXEL P-663H-51 | User Guide - Page 71
    group membership. After that, the ZyXEL Device periodically updates this information. IP multicasting can be enabled/disabled on the ZyXEL Device LAN and/or WAN interfaces in the web configurator (LAN; WAN). Select None to disable IP multicasting on these interfaces. P-663HN-51 User's Guide 71
  • ZyXEL P-663H-51 | User Guide - Page 72
    to establish membership in a Multicast group - it is not used to carry user data. Turn this on to allow multicast traffic and have the ZyXEL Device act as an IGMP proxy. Select this option to use this WAN connection or clear the option to not use this WAN connection. 72 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 73
    you need to make any changes. If the settings are OK, click Save to save the settings. Use the Save/Reboot button in the Advanced Setup > WAN screen to restart the ZyXEL Device and use the WAN connection settings. Figure 31 Advanced Setup > WAN > Add (Summary: MER) P-663HN-51 User's Guide 73
  • ZyXEL P-663H-51 | User Guide - Page 74
    Chapter 5 WAN Setup 74 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 75
    LAN Setup This ZyXEL Device The actual physical connection determines whether the ZyXEL Device ports are LAN or WAN ports. There are two separate IP networks, one inside the LAN network and the other outside the WAN network as shown next. Figure 32 LAN and WAN IP Addresses P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 76
    instance, 192.168.1.1, for your ZyXEL Device, but make sure that no other device on your network is using that IP address. The subnet mask specifies the network number portion of an IP address. Your ZyXEL Device will compute the subnet mask automatically based on the IP 76 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 77
    .255. The address 224.0.0.0 is not assigned to any group and is used by IP multicast computers. The address 224.0.0.1 is used for query messages and is assigned to the permanent group of all IP hosts (including gateways). All hosts must join the 224.0.0.1 group in order P-663HN-51 User's Guide 77
  • ZyXEL P-663H-51 | User Guide - Page 78
    . NAT traversal allows the following: • Dynamic port mapping • Learning public IP addresses • Assigning lease times to mappings Windows Messenger is an example of an application that supports NAT traversal and UPnP. See the NAT chapter for more information on NAT. 78 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 79
    Chapter 6 LAN Setup 6.4.3 Cautions with UPnP The automated nature of NAT traversal applications in establishing their own services and opening firewall ports may present network security issues. Network information and configuration may also be obtained and modified by users in some network
  • ZyXEL P-663H-51 | User Guide - Page 80
    following table describes the fields in this screen. Table 21 Advanced Setup > LAN LABEL DESCRIPTION IP Address Enter the LAN IP address of your ZyXEL Device in dotted decimal notation, for example, 192.168.1.1 (factory default). Subnet Mask Type the subnet mask. 80 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 81
    's login screen without entering the ZyXEL Device's IP address (although you must still enter the password to access the web configurator). Enable IGMP Snooping Turn on IGMP snooping to reduce network traffic by having the ZyXEL Device only forward multicast traffic to ports connected to
  • ZyXEL P-663H-51 | User Guide - Page 82
    this screen. Table 22 Static DHCP LABEL DESCRIPTION MAC Address Enter the MAC address to which to assign this entry's IP address. IP Address Enter the IP address to assign to a device with this entry's MAC address. Save/Apply Click this to save your changes. 82 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 83
    to specify a range of port numbers. You can allocate a server IP address that corresponds to a port or a range of ports. Many residential broadband ISP accounts do not allow you to run any server processes (such as a Web or FTP server) from your location. Your ISP may P-663HN-51 User's Guide 83
  • ZyXEL P-663H-51 | User Guide - Page 84
    and the ISP assigns the WAN IP address. The NAT network appears as a single host on the Internet. Figure 35 Multiple Servers Behind NAT Example 7.3 Configuring Virtual Servers Note: The NAT screens are available only when you enable NAT in the WAN configuration. 84 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 85
    entry applies. Internal Port Start, Internal Port End These are the ports the ZyXEL Device uses for the traffic that it forwards based on this virtual server entry. Server IP Address This is the LAN IP address to which the ZyXEL Device forwards the incoming traffic. P-663HN-51 User's Guide 85
  • ZyXEL P-663H-51 | User Guide - Page 86
    Address Enter the LAN IP address to which the ZyXEL Device should forward the traffic. Save/Apply When using a pre-defined service, if you do not want to modify the port numbers, you can click this button to save the changes and have the ZyXEL Device start using them. 86 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 87
    that sent the request. After that computer's connection for that service closes, another computer on the LAN can use the service in the same manner. This way you do not need to configure a new IP address each time you want a different LAN computer to use the application. P-663HN-51 User's Guide 87
  • ZyXEL P-663H-51 | User Guide - Page 88
    ) or two hours with TCP/IP (Transfer Control Protocol/Internet Protocol). Click Advanced Setup > NAT > Port Triggering to open the following screen. Use this screen to change your ZyXEL Device's trigger port settings. Figure 39 Advanced Setup > NAT > Port Triggering 88 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 89
    on the LAN that requested the service. 7.5 Port Triggering Add Click Advanced Setup > NAT > Port Triggering > Add to open the following screen. Use this screen to change your ZyXEL Device's trigger port settings. Figure 40 Advanced Setup > NAT > Port Triggering > Add P-663HN-51 User's Guide 89
  • ZyXEL P-663H-51 | User Guide - Page 90
    packets from ports that are not specified in the applications in the virtual server configuration. Note: If you do not assign a DMZ host IP address, the ZyXEL Device discards all packets received for ports that are not specified here or in the remote management setup. 90 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 91
    IP Address Specify the IP address of the LAN computer to which you want to send packets from ports that are not specified in the applications in the virtual server configuration. Save/Apply Click this button to save the changes and have the ZyXEL Device start using them. P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 92
    Chapter 7 Network Address Translation (NAT) Screens 92 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 93
    / Mask This is the IP address and subnet mask of a computer on the Internet to which this entry applies. Dest. Port This is the destination port for traffic to which this entry applies. Remove To remove a rule, select its Remove check box and click the Remove button. P-663HN-51 User's Guide 93
  • ZyXEL P-663H-51 | User Guide - Page 94
    (from the LAN) to which this entry applies. Destination This is the IP address and subnet mask of a computer on the Internet to IP Address which this entry applies. Destination Subnet Mask Type the subnet mask of a computer on the Internet to which this entry applies. 94 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 95
    is the IP address and subnet mask of a LAN computer to which this entry allows traffic from the Internet. Dest. Port This is the destination port for traffic to which this entry applies. Remove To remove a rule, select its Remove check box and click the Remove button. P-663HN-51 User's Guide 95
  • ZyXEL P-663H-51 | User Guide - Page 96
    the IP address of a computer on the Internet to which this entry applies. Source Type the subnet mask of a computer on the Internet to which this entry Subnet Mask applies. Source Port Type the source port for traffic (from the Internet) to which this entry applies. 96 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 97
    . Subnet Mask Destination Port Type the destination port for traffic to which this entry applies. WAN Interfaces Select the WAN interface(s) to which this rule applies. Save/Apply Click this button to save the changes and have the ZyXEL Device start using them. P-663HN-51 User's Guide 97
  • ZyXEL P-663H-51 | User Guide - Page 98
    Chapter 8 Security 98 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 99
    screen. Table 32 Advanced Setup > Security > Parental Control LABEL DESCRIPTION Username This name identifies to whom the blocking schedule applies. MAC This is the MAC address of the computer to an entry, select its Remove check box and click the Remove button. P-663HN-51 User's Guide 99
  • ZyXEL P-663H-51 | User Guide - Page 100
    address of a computer. Days of the week Select to which days of the week the blocking schedule applies. Start Blocking Time This is the beginning time for the blocking period. Include a two-digit number of hours followed by a colon and a. two-digit number of hours. 100 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 101
    Chapter 9 Parental Control (Blocking Schedule) Table 33 Advanced Setup > Security > Parental Control > Add LABEL DESCRIPTION End Blocking Time This is the ending of hours. Save/Apply Click this button to save the changes and have the ZyXEL Device start using them. P-663HN-51 User's Guide 101
  • ZyXEL P-663H-51 | User Guide - Page 102
    Chapter 9 Parental Control (Blocking Schedule) 102 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 103
    : The ZyXEL Device applies QoS to upstream traffic (going out through the WAN interface). 10.1.1 IEEE 802.1Q Tag The IEEE 802.1Q standard defines an explicit VLAN tag in the MAC header to identify the VLAN membership of a frame across bridges. A VLAN tag includes the P-663HN-51 User's Guide 103
  • ZyXEL P-663H-51 | User Guide - Page 104
    network devices along the route based on the application types and traffic flow. Packets are marked with DiffServ Code Points (DSCPs) indicating the level of service desired. This allows the intermediary DiffServ-compliant network devices 104 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 105
    kinds of traffic can be marked for different kinds of forwarding. Resources can then be allocated according to the DSCP values and the configured policies. 10.2 Configuring QoS General Screen Click Advanced > Quality of Service to open the screen as shown next. P-663HN-51 User's Guide 105
  • ZyXEL P-663H-51 | User Guide - Page 106
    that do not match a QoS Default classification rule. You can select a specific DSCP mark to use or have the DSCP Mark ZyXEL Device automatically select a DSCP mark to use. Save/Apply Click this button to save the changes and have the ZyXEL Device start using them. 106 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 107
    Click this button to go to a screen where you can configure settings for a new QoS queue. Remove To remove an entry select its Remove check box and click the Remove button. Save/Reboot Click this button to apply and save your changes. The ZyXEL Device restarts. P-663HN-51 User's Guide 107
  • ZyXEL P-663H-51 | User Guide - Page 108
    of Service > Queue Configuration > Add LABEL DESCRIPTION Queue Configuration Status Select Enable to turn on this queue. Queue Select the WAN connection's DSL port, Virtual /Apply Click this button to save the changes and have the ZyXEL Device start using them. 108 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 109
    traffic. Protocol This is the type of packets. DSCP This is the DSCP mark. Source Addr./ Mask This is the IP address (and optionally the subnet mask) of the device that sent the traffic. Source Port This is the port number that a device used to send the traffic. P-663HN-51 User's Guide 109
  • ZyXEL P-663H-51 | User Guide - Page 110
    .5.1 Configuring a QoS Class Click Advanced > Quality of Service > QoS Classification and then the Add or Edit button to configure a classifier. There are two sets of classification rules. Set-1 is based on different fields within the TCP/UDP/IP layer plus the physical 110 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 111
    the labels in this screen. Table 39 QoS Class Configuration LABEL DESCRIPTION Traffic Class Name Type a name for the classifier. Rule Order Select the classifier's place in the classifiers list. Rule Status Select whether or not the classifier is to be active. P-663HN-51 User's Guide 111
  • ZyXEL P-663H-51 | User Guide - Page 112
    . Address Destination MAC Specify the MAC address subnet mask of the device that the traffic is Mask going to. 802.1p Priority Specify the IEEE 802.1p mark on the traffic. Save/Apply Click this button to save the changes and have the ZyXEL Device start using them. 112 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 113
    Chapter 10 Quality of Service (QoS) P-663HN-51 User's Guide 113
  • ZyXEL P-663H-51 | User Guide - Page 114
    Chapter 10 Quality of Service (QoS) 114 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 115
    the Assigned Default default gateway. The ISP automatically assigns the WAN connection Gateway an IP address when it connects. Use Default Gateway IP Address If the ISP gave you a static (fixed) IP address, select this option and enter the connection's IP address. P-663HN-51 User's Guide 115
  • ZyXEL P-663H-51 | User Guide - Page 116
    create one static route to connect to services offered by your ISP behind router R2. You create another static route to communicate with a separate network behind a router (R3) connected to the LAN. Figure 54 Example of Static Routing Topology A R1 LAN WAN R3 R2 116 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 117
    . Gateway This is the IP address of the gateway. The gateway is a router or switch on the same network segment as the device's LAN or WAN port. The gateway helps forward packets to their destinations. Interface If the static route should send traffic through a specific ZyXEL Device interface, it
  • ZyXEL P-663H-51 | User Guide - Page 118
    forward packets to their destinations. Interface If the static route should send traffic through a specific ZyXEL Device interface, select this option and choose the interface. Save/Apply Click this button to save the changes and have the ZyXEL Device start using them. 118 P-663HN-51 User
  • ZyXEL P-663H-51 | User Guide - Page 119
    . Multicasting can reduce the load on non-router machines since they generally do not listen to the RIP multicast address and so will not receive the RIP packets. However, if one router uses multicasting, then all routers on your network must use multicasting, also. P-663HN-51 User's Guide 119
  • ZyXEL P-663H-51 | User Guide - Page 120
    ZyXEL Device uses the RIP information that it receives, but does not broadcast its routing table. Enabled Select or clear this field to turn RIP on or off for the interface. Save/Apply Click this button to save the changes and have the ZyXEL Device start using them. 120 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 121
    works only when the ISP uses the IPCP DNS server extensions. It does not mean you can leave the DNS servers out of the DHCP setup under all circumstances. If your ISP gives you explicit DNS servers, make sure that you enter their IP addresses in the LAN Setup screen. P-663HN-51 User's Guide 121
  • ZyXEL P-663H-51 | User Guide - Page 122
    from a WAN connection. Primary DNS server These fields are available when you clear Enable Automatic Assigned DNS. Secondary DNS server Save Enter the IP addresses of the DNS servers the ZyXEL Device is to use. Click Save to save your changes to the ZyXEL Device. 122 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 123
    useful if you want to be able to use, for example, www.yourhost.dyndns.org and still reach your hostname. If you have a private WAN IP address, then you cannot use Dynamic DNS. See Section 14.2 on page 124 for configuration instruction. P-663HN-51 User's Guide 123
  • ZyXEL P-663H-51 | User Guide - Page 124
    ZyXEL Device by your Dynamic DNS provider. User Name This is the user name for the host name's DDNS account. Service This is the name of your Dynamic DNS service provider. Interface This is the ZyXEL Device's WAN connection check box and click the Remove button. 124 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 125
    Select this check box to use dynamic DNS. Dynamic DNS Username Type your user name for this DDNS host name. Password Type the password assigned for this DDNS host name. Save/Apply Click this button to save the changes and have the ZyXEL Device start using them. P-663HN-51 User's Guide 125
  • ZyXEL P-663H-51 | User Guide - Page 126
    Chapter 14 Dynamic DNS Setup 126 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 127
    CHAPTER 15 DSL Setup This chapter explains how to configure ADSL port settings. 15.1 DSL Setup Click Advanced > DSL to open the following screen where you can configure the ZyXEL Device's DSL settings. Figure 61 Advanced > DSL P-663HN-51 User's Guide 127
  • ZyXEL P-663H-51 | User Guide - Page 128
    the connection's data rate according to line conditions without interrupting service. Select this if you are using only one DSL line. This has the ZyXEL Device disable DSL1 and only use DSL2. Click this button to save the changes and have the ZyXEL Device restart and use them. 128 P-663HN-51 User
  • ZyXEL P-663H-51 | User Guide - Page 129
    Groups let you map ports to PVCs and create bridging groups. 16.2 Interface Groups Setup Click Advanced Setup > Interface Groups to open the following screen. Use this screen to map ports to PVCs and create bridging groups. Figure 62 Advanced Setup > Interface Groups P-663HN-51 User's Guide 129
  • ZyXEL P-663H-51 | User Guide - Page 130
    48 Advanced Setup > Interface Groups LABEL DESCRIPTION Enable virtual ports on Select this option to treat the LAN ports as open a screen where you can add a new entry. Save/Apply Click this button to save the changes and have the ZyXEL Device start using them. 130 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 131
    > Add The following table describes the labels in this screen. Table 49 Advanced Setup > Interface Groups > Add LABEL DESCRIPTION Group Name Configure a name to identify the group. Grouped Interfaces Select interfaces to add to the group. Available Interfaces P-663HN-51 User's Guide 131
  • ZyXEL P-663H-51 | User Guide - Page 132
    LABEL DESCRIPTION Automatically Add Clients With the following DHCP Vendor IDs If you want LAN clients to get public IP addresses, you can list their DHCP vendor IDs here. Save/Apply Click this button to save the changes and have the ZyXEL Device start using them. 132 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 133
    authorities like CyberTrust or VeriSign and government certification authorities. You can use the ZyXEL Device to generate certification requests that contain identifying information and public keys and then send the certification requests to a certification authority. P-663HN-51 User's Guide 133
  • ZyXEL P-663H-51 | User Guide - Page 134
    of the certification authorities that you have set the ZyXEL Device to accept as trusted. The ZyXEL Device accepts any valid certificate signed by a certification authorities. Click Advanced Setup > Certificate to open the following screen. Figure 65 Trusted CAs 134 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 135
    CA certificate's details. Import Certificate Click Remove to delete the imported CA certificate from the ZyXEL Device. Click this to open a screen where you can save the certificate of a certification authority that you trust, from your computer to the ZyXEL Device. P-663HN-51 User's Guide 135
  • ZyXEL P-663H-51 | User Guide - Page 136
    about the certification authority's certificate. Click Advanced Setup > Certificate to open the Trusted CAs screen. Then click a certificate's View button to open the details screen. Figure 66 Trusted CA plain text. Back Click this to return to the previous screen. 136 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 137
    in notepad and copy its information and paste it into this field. Apply Click this to save the certificate on the ZyXEL Device. 17.3 Certificates Technical Reference This section provides technical background information about the topics covered in this chapter. P-663HN-51 User's Guide 137
  • ZyXEL P-663H-51 | User Guide - Page 138
    and very secure since you can freely distribute public keys and you never need to transmit private keys. Self-signed Certificates You can have the ZyXEL Device act as a certification authority and sign its own certificates. 138 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 139
    (one public key and one private key). 2 Tim keeps the private key and makes the public key openly available. This means that anyone who receives a message seeming to come from Tim can read it and verify to verify that you have the remote host's correct certificate. P-663HN-51 User's Guide 139
  • ZyXEL P-663H-51 | User Guide - Page 140
    69 Certificate Details 4 Verify (over the phone for example) that the remote host has the same information in the Thumbprint Algorithm and Thumbprint fields. 140 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 141
    Advanced Setup screen lets you change the wireless mode and make other advanced wireless configuration changes (Section 18.8 on page 155). • Use the WPS Station screen (Section 18.9 on page 159) to view information about the wireless stations connected to the ZyXEL Device. P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 142
    the SSID - "Service Set IDentifier". The "service set" is the network, so the "service set identifier" is the network's name. This helps you identify your wireless network when wireless networks' coverage areas overlap and you have a variety of networks to choose from. 142 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 143
    presenting the right credentials (often a username and password, or a "key" phrase) passwords and so on is to use obscure information that you personally will easily remember, and to enter it in a way that appears random and does not include real words. For example, if your P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 144
    or microwaves. Problems with absorption Setup)? If so, you can set up a well-secured network very easily. Even if some of your devices support WPS and some do not, you can use WPS to set up your network and then add the non-WPS devices manually open the Basic screen. 144 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 145
    also known as layer-2 isolation. Disable WMM WMM (Wifi MultiMedia) automatically prioritizes services according to the Advertise ToS value in the IP header of packets. Turn off WMM advertising if your wireless clients are not able to associate with an AP using WMM. P-663HN-51 User's Guide 145
  • ZyXEL P-663H-51 | User Guide - Page 146
    ToS value in the IP header of packets. Turn off WMM if your wireless clients are not able to associate with an AP using WMM. Max Clients Specify the greatest number of wireless clients allowed to simultaneously connect to this wireless network on the ZyXEL Device. 146 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 147
    when wireless LAN is enabled. Save/Apply Click this button to save the changes and have the ZyXEL Device start using them. 18.5 Wireless Security Click Wireless > Security to open the Wireless Security screen. Use this screen to configure wireless security settings. P-663HN-51 User's Guide 147
  • ZyXEL P-663H-51 | User Guide - Page 148
    . Table 54 Wireless > Security LABEL DESCRIPTION WPS Setup Use WiFi Protected Setup (WPS) to quickly set up a wireless network without having to manually configure settings. Set up each WPS connection between two devices at a time. Enable WPS Turn WPS on or off. 148 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 149
    PIN are reserved for future use and have no effect at the time of writing. Note: After you click Config AP you must enter the ZyXEL Device's PIN in the external registrar within two minutes. P-663HN-51 User's Guide 149
  • ZyXEL P-663H-51 | User Guide - Page 150
    available when you set the WPS AP Mode to Configured. Click Start AddER to ZyXEL Device's PIN in the external registrar within two minutes. Then click Finish AddER. Manual Setup AP Use these fields to manually configure security settings for wireless clients that do not support 663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 151
    Update Timer is also supported in WPA(2)-PSK mode. 0 disables the re-keying. The RADIUS fields are required with 802.1X and WPA/WPA2 network authentication. Enter the IP address of the external authentication server in dotted decimal notation. Enter the port key. P-663HN-51 User's Guide 151
  • ZyXEL P-663H-51 | User Guide - Page 152
    , for example, 00:A0:C5:00:00:02. You need to know the MAC addresses of the devices to configure this screen. Use this screen to change your ZyXEL Device's MAC filter settings.Click Wireless > MAC Filter. The following screen displays. Figure 72 Wireless > MAC Filter 152 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 153
    allowed or denied access to the ZyXEL Device. Enter the MAC addresses in a valid MAC address format, that is, six hexadecimal character pairs, for example, 12:34:56:78:9a:bc. Save/Apply Click this button to save the changes and have the ZyXEL Device start using them. P-663HN-51 User's Guide 153
  • ZyXEL P-663H-51 | User Guide - Page 154
    to open the following screen. Set your ZyXEL Device to Access Point mode for AP and bridge functionality or Bridge mode for bridge functionality only. You can also list the MAC addresses of the peer APs with which to establish wireless links. Figure 75 Wireless > Bridge 154 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 155
    previous configuration for this screen. Click this button to save the changes and have the ZyXEL Device start using them. 18.8 The Advanced Setup Screen To configure advanced wireless settings, click Network > Wireless LAN > Advanced Setup. The screen appears as shown. P-663HN-51 User's Guide 155
  • ZyXEL P-663H-51 | User Guide - Page 156
    or use Auto to have the ZyXEL Device automatically determine a channel to use. If you are having problems with wireless interference, changing the channel may help. Try to use a channel that is as many channels away from any channels used by neighboring APs as possible. 156 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 157
    wireless client automatically select a rate. Select a data rate at which the ZyXEL Device transmits wireless multicast traffic. If you select a high rate, multicast traffic may occupy all the bandwidth and cause network congestion. Select a minimum transmission rate. P-663HN-51 User's Guide 157
  • ZyXEL P-663H-51 | User Guide - Page 158
    . When using WMM, you can enable this to have the ZyXEL Device not re-send data if an error occurs. This can increase throughput speed but may also increase errors, especially in an environment with a lot of Radio Frequency (RF) noise. Otherwise leave it disabled. 158 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 159
    wireless network on the ZyXEL Device to which the wireless client is connected. Interface This is the name of the wireless LAN interface on the ZyXEL Device to which the wireless client is connected. Refresh Click this button to update the information in the screen. P-663HN-51 User's Guide 159
  • ZyXEL P-663H-51 | User Guide - Page 160
    the Internet. Your ZyXEL Device is the Service Set IDentity. • If two wireless networks overlap, they should use a different channel. Like radio stations or television channels, each wireless network uses a specific channel, or frequency, to send and receive information. 160 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 161
    , the ZyXEL Device acts like a beacon and regularly broadcasts the SSID in the area. You can hide the SSID instead, in which case the ZyXEL Device does not broadcast the SSID. In addition, you should change the default SSID to something that is difficult to guess. P-663HN-51 User's Guide 161
  • ZyXEL P-663H-51 | User Guide - Page 162
    in the wireless network has to support IEEE 802.1x to do this. For wireless networks, you can store the user names and passwords for each user in a RADIUS server. This is not have MAC addresses. 3. Hexadecimal characters are 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, A, B, C, D, E, and F. P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 163
    network login) and select the WPA compatible option in the ZyXEL Device. Many types of encryption use a key to protect the information in the wireless network. The longer the key, the stronger the encryption. Every device in the wireless network must have the same key. P-663HN-51 User's Guide 163
  • ZyXEL P-663H-51 | User Guide - Page 164
    Setup Your ZyXEL Device supports WiFi Protected Setup connection to the enrollee. If you need to make sure that WPS worked, check the list of associated wireless clients in the AP's configuration utility. If you see the wireless client in the list, WPS was successful. 164 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 165
    connected to the wireless client, try to connect to the Internet. If you can connect, WPS was successful. If you cannot connect, check the list of associated wireless clients in the AP's configuration utility. If you see the wireless client in the list, WPS was successful. P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 166
    10.4.3 How WPS Works When two WPS-enabled devices connect, each device must assume a specific role. One supported by the devices. If the registrar is already part of a network, it sends the existing information. If not, it generates the SSID and WPA(2)-PSK randomly. 166 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 167
    it supports both connections, but a configured access point can no longer act as enrollee. It will be the registrar in all subsequent WPS connections in which it is involved. If you want a configured AP to act as an enrollee, you must reset it to its factory defaults. P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 168
    82 WPS: Example Network Step 2 EXISTING CONNECTION REGISTRAR CLIENT 1 ENROLLEE SECURITY INFO AP1 CLIENT 2 In step 3, you add another access point (AP2) to your network. AP2 is out of range of AP1, so you cannot use AP1 for the WPS handshake with the new access 168 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 169
    configuration interface of the registrar device to discover the key the network is using (if the device supports this feature). Then, you can enter the key into the non-WPS device and join the network as normal (the non-WPS device must also support WPA-PSK or WPA2-PSK). P-663HN-51 User's Guide 169
  • ZyXEL P-663H-51 | User Guide - Page 170
    ZyXEL Device's Wireless Settings 1 Go to the ZyXEL Device's Wireless > Security screen and copy the ZyXEL Device's identification PIN. 2 In Windows Vista, go to your network connections and double-click the ZyXEL AP icon to open the Windows Connect Now (WCN) screens. 170 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 171
    The computer also authenticates them when they connect to the wireless network. 1 In the connect to the wireless network. 4 After the WPS process finishes (the enrollee is able to access the ZyXEL Device) you can repeat these steps to add more wireless clients one at a time. P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 172
    Chapter 18 Wireless LAN 172 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 173
    PART III Diagnostics and Management Diagnostics (175) Settings (177) Logs (181) SNMP (185) Time (191) Access Control (193) Update Software (199) Save/Reboot and Logout (201) 173
  • ZyXEL P-663H-51 | User Guide - Page 174
    174
  • ZyXEL P-663H-51 | User Guide - Page 175
    connection. If you are using single line mode, DSL2 must be connected and working to pass the ADSL synchronization test. If you are not using single line mode, the ADSL synchronization test can be passed if either DSL line is connected and working. Figure 85 Diagnostics P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 176
    Chapter 19 Diagnostics 176 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 177
    to open the following screen. Use this screen to back up (save) the ZyXEL Device's current configuration to a file on your computer. Once your ZyXEL Device is Settings > Backup Click Backup Settings to save the ZyXEL Device's current configuration to your computer. P-663HN-51 User's Guide 177
  • ZyXEL P-663H-51 | User Guide - Page 178
    icon on your desktop. Figure 88 Temporarily Disconnected You may need to change the IP address of your computer to be in the same subnet as that of the ZyXEL Device's IP address (192.168.1.1). See the appendix for details on how to set up your computer's IP address. 178 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 179
    to reset the factory defaults of your ZyXEL Device. You may need to change the IP address of your computer to be in the same subnet as that of the default ZyXEL Device IP address (192.168.1.1). See the appendix for details on how to set up your computer's IP address. P-663HN-51 User's Guide 179
  • ZyXEL P-663H-51 | User Guide - Page 180
    Chapter 20 Settings 180 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 181
    to an administrator (as e-mail) or to a syslog server. 21.2 System Log Click Management > System Log to open the following screen. Click View System Log screen to see the logs, or Configure System Log to configure the logging settings. Figure 90 Management > System Log P-663HN-51 User's Guide 181
  • ZyXEL P-663H-51 | User Guide - Page 182
    Logs 21.3 Viewing the System Log Click Management > System Log > View System Log to view the ZyXEL Device's system logs. Figure 91 Management > System Log > View System Log The following table describes the renew the log screen. Close Click this to close the window. 182 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 183
    server that will log the selected categories of logs. Server UDP Port Enter the UDP port number the ZyXEL Device is to use when sending syslog events to the syslog server. Save/Apply Click this button to save the changes and have the ZyXEL Device start using them. P-663HN-51 User's Guide 183
  • ZyXEL P-663H-51 | User Guide - Page 184
    Chapter 21 Logs 184 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 185
    main components: agents and a manager. An agent is a management software module that resides in a managed device (the ZyXEL Device). An agent translates the local management information from the managed device into a form compatible with SNMP. The manager is the console P-663HN-51 User's Guide 185
  • ZyXEL P-663H-51 | User Guide - Page 186
    performance. The ZyXEL Device supports the following MIBs: • ADSL mib • AT mib • ATM mib • ICMP mib • IP mib • SNMP mib • SYSOR mib • TCP mib • UDP mib The ZyXEL Device uses these MIBs to provide read-only information. You cannot use SNMP to configure the ZyXEL Device. 186 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 187
    to send your SNMP traps to. Save/Apply Port The ZyXEL Device sends a coldStart trap when the power is turned on. Click this button to save the changes and have the ZyXEL Device start using them. Enter the port number upon which the station listens for SNMP traps. P-663HN-51 User's Guide 187
  • ZyXEL P-663H-51 | User Guide - Page 188
    Chapter 22 SNMP 188 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 189
    specify the ACS IP address or domain name and username and password. Use this screen to configure your ZyXEL Device's settings for CPE WAN Management Protocol (CWMP). Click Management > TR-069 Client. The following screen appears. Figure 95 Management > TR-069 Client P-663HN-51 User's Guide 189
  • ZyXEL P-663H-51 | User Guide - Page 190
    the connection is interrupted. Connection Request Password Enter the password for the ACS for reauthentication in case the connection is interrupted. Save/Apply Click this to save the changes. GetRPCMethod Click this to get a list of commands accepted by the ACS. 190 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 191
    server that the ZyXEL Device should use to update time and date settings. Second NTP time Enter the IP address or URL of the time server that the ZyXEL Device server should use to update time and date settings if it cannot get a response from the first time server. P-663HN-51 User's Guide 191
  • ZyXEL P-663H-51 | User Guide - Page 192
    sets the time difference between your time zone and Greenwich Mean Time (GMT). Save/Apply Click this button to save the changes and have the ZyXEL Device start using them. 192 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 193
    . 25.1 Access Control Screen Use the access control screens to enable or disable service access to the ZyXEL Device. 25.2 Service Access Control Screen To open this screen, click Management > Access Control > Services. Figure 97 Management > Access Control > Services P-663HN-51 User's Guide 193
  • ZyXEL P-663H-51 | User Guide - Page 194
    Control > IP Addresses LABEL DESCRIPTION Access Control Mode Enable this to have the ZyXEL Device check the source IP address of incoming local management sessions. IP Address This is the IP address of a trusted computer from which you can manage the ZyXEL Device. 194 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 195
    manage the ZyXEL Device. Save/Apply Click this button to save the changes and have the ZyXEL Device start using them. 25.5 Passwords Click Management > Access Control > Passwords to open the following screen. Use this screen to configure the ZyXEL Device's passwords. P-663HN-51 User's Guide 195
  • ZyXEL P-663H-51 | User Guide - Page 196
    you type. After you change the password, use the new password to access the ZyXEL Device. Confirm Password Type the new password again to make sure it is entered properly. Save/Apply Click this button to save the changes and have the ZyXEL Device start using them. 196 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 197
    summary page. Clear this to allow users to access the ZyXEL Device's system information summary page without entering the ZyXEL Device's user account's user name and password. Save/Apply Click this button to save the changes and have the ZyXEL Device start using them. P-663HN-51 User's Guide 197
  • ZyXEL P-663H-51 | User Guide - Page 198
    Chapter 25 Access Control 198 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 199
    for your device's specific model. Refer to the label on the bottom of your device. Click Management > Update Software to open the following screen. Follow the instructions in this screen to upload firmware to your ZyXEL Device. Figure 102 Management > Update Software P-663HN-51 User's Guide 199
  • ZyXEL P-663H-51 | User Guide - Page 200
    the labels in this screen. Table 74 Management > Update Software LABEL DESCRIPTION Software File name Type in the location Temporarily Disconnected After the ZyXEL Device finishes restarting, log in again and check your new firmware version in the Status screen. 200 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 201
    Management > Save/Reboot to open the following screen. Click Save/ Reboot to save all of your ZyXEL Device's settings and reboot the without turning the power off. Figure 104 Management > Save/Reboot 27.2 Logout Click Management > Logout to exit the web configurator. P-663HN-51 User's Guide 201
  • ZyXEL P-663H-51 | User Guide - Page 202
    Chapter 27 Save/Reboot and Logout 202 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 203
    PART IV Troubleshooting and Specifications Troubleshooting (205) Product Specifications (209) 203
  • ZyXEL P-663H-51 | User Guide - Page 204
    204
  • ZyXEL P-663H-51 | User Guide - Page 205
    power source. Make sure the power source is turned on. 4 Turn the ZyXEL Device off and on. 5 If the problem continues, contact the vendor. One of the LEDs does not behave as expected. 1 Make sure you understand the normal behavior of the LED. See Section 1.5 on page 25. P-663HN-51 User's Guide 205
  • ZyXEL P-663H-51 | User Guide - Page 206
    1234. 2 If this does not work, you have to reset the device to its factory defaults. See Section 2.3 on page 29. I cannot see or access the Login screen in the web configurator. 1 Make sure you are using the correct IP address. • The default IP address is 192.168.1.1. 206 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 207
    the default IP address. See Section 2.3 on page 29. 6 If the problem continues, contact the network administrator or vendor, or try one of the advanced suggestions. I can see the Login screen, but I cannot log in to the ZyXEL Device. 1 Make sure you have entered the user name and password correctly
  • ZyXEL P-663H-51 | User Guide - Page 208
    , try closing some programs that use the Internet, especially peer-to-peer applications. 2 Reboot the ZyXEL Device. 3 Turn the ZyXEL Device off and on. 4 If the problem continues, contact the network administrator or vendor, or try one of the advanced suggestions. 208 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 209
    Humidity 10%~95% (non-condensing) Table 76 Firmware Specifications FEATURE DESCRIPTION Default IP Address 192.168.1.1 Default Subnet Mask 255.255.255.0 (24 bits) Admin User Name admin User User Name user Support User Name support Default Password 1234 P-663HN-51 User's Guide 209
  • ZyXEL P-663H-51 | User Guide - Page 210
    II support (RFC 1213) IP Multicasting IGMP v1 and v2 IGMP Proxy Management UPnP Use the embedded web configurator to easily configure the rich range of features on the ZyXEL Device. SNMP manageable Syslog Built-in diagnostic tools for ADSL circuitry and LAN ports 210 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 211
    , an IP default gateway and DNS servers to computers on your network. With Dynamic DNS (Domain Name System) support, you can use a fixed URL, www.zyxel.com for example, with a dynamic IP address. You must register for this service with a Dynamic DNS service provider. P-663HN-51 User's Guide 211
  • ZyXEL P-663H-51 | User Guide - Page 212
    connection. Universal Plug and Play (UPnP) A UPnP-enabled device can dynamically join a network, obtain an IP address and convey its capabilities to other devices on the network. Firewall You can configure firewall on the ZyXEL , Version 2 RFC 867 Daytime Protocol P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 213
    Supported RFC 1631 (NAT) IP Network Address Translator RFC 1661 (PPP ZyXEL Device's RJ-14 DSL connector handles both the DSL 1 and DSL 2 connections. • Pins 3 and 4 are for DSL 1. • Pins 2 and 5 are for DSL 2. Figure 105 DSL Connector Pin Assignments DSL 2 DSL 1 1 2 34 5 6 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 214
    /60 HZ, 0.5 A OUTPUT POWER 12 VDC, 1.5 A POWER CONSUMPTION 18 W MAX. SAFETY STANDARDS UL, CUL (UL 60950-1 FIRST EDITION CSA C22.2 NO. 60950-1-03 1ST.) 214 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 215
    PART V Appendices and Index Setting Up Your Computer's IP Address (217) IP Addresses and Subnetting (253) Pop-up Windows (201) Common Services (281) Legal Information (291) Customer Support (25) Index (295) 215
  • ZyXEL P-663H-51 | User Guide - Page 216
    216
  • ZyXEL P-663H-51 | User Guide - Page 217
    .5 on page 229 • Linux: Ubuntu 8 (GNOME) on page 232 • Linux: openSUSE 10.3 (KDE) on page 237 Windows XP/NT/2000 The following example uses the default Windows XP display theme but can also apply to Windows 2000 and Windows NT. P-663HN-51 User's Guide 217
  • ZyXEL P-663H-51 | User Guide - Page 218
    Appendix A Setting Up Your Computer's IP Address 1 Click Start > Control Panel. Figure 106 Windows XP: Start Menu 2 In the Control Panel, click the Network Connections icon. Figure 107 Windows XP: Control Panel 218 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 219
    Address 3 Right-click Local Area Connection and then select Properties. Figure 108 Windows XP: Control Panel > Network Connections > Properties 4 On the General tab, select Internet Protocol (TCP/IP) and then click Properties. Figure 109 Windows XP: Local Area Connection Properties P-663HN-51 User
  • ZyXEL P-663H-51 | User Guide - Page 220
    Alternate DNS server, if that information was provided. 7 Click OK to close the Internet Protocol (TCP/IP) Properties window. 8 Click OK to close the Local Area Connection Properties window. Verifying Settings 1 Click Start > All Programs > Accessories > Command Prompt. 220 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 221
    IP address and connection information. Windows Vista This section shows screens from Windows Vista Professional. 1 Click Start > Control Panel. Figure 111 Windows Vista: Start Menu 2 In the Control Panel, click the Network and Internet icon. Figure 112 Windows Vista: Control Panel P-663HN-51 User
  • ZyXEL P-663H-51 | User Guide - Page 222
    and Sharing Center 5 Right-click Local Area Connection and then select Properties. Figure 115 Windows Vista: Network and Sharing Center Note: During this procedure, click Continue whenever Windows displays a screen saying that it needs your permission to continue. 222 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 223
    Appendix A Setting Up Your Computer's IP Address 6 Select Internet Protocol Version 4 (TCP/IPv4) and then select Properties. Figure 116 Windows Vista: Local Area Connection Properties P-663HN-51 User's Guide 223
  • ZyXEL P-663H-51 | User Guide - Page 224
    , if that information was provided.Click Advanced. 9 Click OK to close the Internet Protocol (TCP/IP) Properties window. 10 Click OK to close the Local Area Connection Properties window. Verifying Settings 1 Click Start > All Programs > Accessories > Command Prompt. 224 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 225
    Status and then click the Support tab to view your IP address and connection information. Mac OS X: 10.3 and 10.4 The screens in this section are from Mac OS X 10.4 but can also apply to 10.3. 1 Click Apple > System Preferences. Figure 118 Mac OS X 10.4: Apple Menu P-663HN-51 User's Guide 225
  • ZyXEL P-663H-51 | User Guide - Page 226
    Preferences window, click the Network icon. Figure 119 Mac OS X 10.4: System Preferences 3 When the Network preferences pane opens, select Built-in Ethernet from the network connection type list, and then click Configure. Figure 120 Mac OS X 10.4: Network Preferences 226 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 227
    TCP/IP tab. Figure 121 Mac OS X 10.4: Network Preferences > TCP/IP Tab. 5 For statically assigned settings, do the following: • From the Configure IPv4 list, select Manually. • In the IP Address field, type your IP address. • In the Subnet Mask field, type your subnet mask. P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 228
    Ethernet 6 Click Apply Now and close the window. Verifying Settings Check your TCP/IP properties by clicking Applications > Utilities > Network Utilities, and then selecting the appropriate Network Interface from the Info tab. Figure 123 Mac OS X 10.4: Network Utility 228 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 229
    Up Your Computer's IP Address Mac OS X: 10.5 The screens in this section are from Mac OS X 10.5. 1 Click Apple > System Preferences. Figure 124 Mac OS X 10.5: Apple Menu 2 In System Preferences, click the Network icon. Figure 125 Mac OS X 10.5: Systems Preferences P-663HN-51 User's Guide 229
  • ZyXEL P-663H-51 | User Guide - Page 230
    Up Your Computer's IP Address 3 When the Network preferences pane opens, select Ethernet from the list of available connection types. Figure 126 Mac select Manually. • In the IP Address field, enter your IP address. • In the Subnet Mask field, enter your subnet mask. 230 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 231
    Appendix A Setting Up Your Computer's IP Address • In the Router field, enter the IP address of your ZyXEL Device. Figure 127 Mac OS X 10.5: Network Preferences > Ethernet 6 Click Apply and close the window. P-663HN-51 User's Guide 231
  • ZyXEL P-663H-51 | User Guide - Page 232
    on your specific distribution, release version, and individual configuration. The following screens use the default Ubuntu 8 installation. Note: Make sure you are logged in as the root administrator. Follow the steps below to configure your computer IP address in GNOME: 232 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 233
    window opens, click Unlock to open the Authenticate window. (By default, the Unlock button is greyed out until clicked.) You cannot make changes to your configuration unless you first enter your admin password. Figure 130 Ubuntu 8: Network Settings > Connections P-663HN-51 User's Guide 233
  • ZyXEL P-663H-51 | User Guide - Page 234
    name and password then click the Authenticate button. Figure 131 Ubuntu 8: Administrator Account Authentication 4 In the Network Settings window, select the connection that you want to configure, then click Properties. Figure 132 Ubuntu 8: Network Settings > Connections 234 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 235
    IP address. • In the Configuration list, select Static IP address if you have a static IP address. Fill in the IP address, Subnet mask, and Gateway address fields. 6 Click OK to save the changes and close the Properties dialog box and return to the Network Settings screen. P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 236
    Appendix A Setting Up Your Computer's IP Address 7 If you know your DNS server IP address(es), click the DNS tab in Check your TCP/IP properties by clicking System > Administration > Network Tools, and then selecting the appropriate Network device from the Devices 236 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 237
    specific distribution, release version, and individual configuration. The following screens use the default openSUSE 10.3 installation. Note: Make sure you are logged in as the root administrator. Follow the steps below to configure your computer IP address in the KDE: P-663HN-51 User's Guide 237
  • ZyXEL P-663H-51 | User Guide - Page 238
    Your Computer's IP Address 1 Click K Menu > Computer > Administrator Settings (YaST). Figure 136 openSUSE 10.3: K Menu > Computer Menu 2 When the Run as Root - KDE su dialog opens, enter the admin password and click OK. Figure 137 openSUSE 10.3: K Menu > Computer Menu 238 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 239
    the Network Card icon. Figure 138 openSUSE 10.3: YaST Control Center 4 When the Network Settings window opens, click the Overview tab, select the appropriate connection Name from the list, and then click the Configure button. Figure 139 openSUSE 10.3: Network Settings P-663HN-51 User's Guide 239
  • ZyXEL P-663H-51 | User Guide - Page 240
    6 Select Dynamic Address (DHCP) if you have a dynamic IP address. Select Statically assigned IP Address if you have a static IP address. Fill in the IP address, Subnet mask, and Hostname fields. 7 Click Next to save the changes and close the Network Card Setup window. 240 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 241
    's IP Address 8 If you know your DNS server IP address(es), click the Hostname/DNS tab in Network Settings and then enter the DNS server information in the fields provided. Figure 141 openSUSE 10.3: Network Settings 9 Click Finish to save your settings and close the window. P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 242
    , select Show Connection Information. Figure 142 openSUSE 10.3: KNetwork Manager When the Connection Status - KNetwork Manager window opens, click the Statistics tab to see if your connection is working properly. Figure 143 openSUSE: Connection Status - KNetwork Manager 242 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 243
    your device's IP address. Disable Pop-up Blockers 1 In Internet Explorer, select Tools, Pop-up Blocker and then select Turn Off Pop-up Blocker. Figure 144 Pop-up Blocker You can also check if pop-up blocking is disabled in the Pop-up Blocker section in the Privacy tab. P-663HN-51 User's Guide 243
  • ZyXEL P-663H-51 | User Guide - Page 244
    to allow pop-up windows from your device, see the following steps. 1 In Internet Explorer, select Tools, Internet Options and then the Privacy tab. 244 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 245
    Java Permissions 2 Select Settings...to open the Pop-up Blocker Settings screen. Figure 146 Internet Options: Privacy 3 Type the IP address of your device (the web page that you do not want to have blocked) with the prefix "http://". For example, http://192.168.167.1. P-663HN-51 User's Guide 245
  • ZyXEL P-663H-51 | User Guide - Page 246
    Appendix B Pop-up Windows, JavaScripts and Java Permissions 4 Click Add to move the IP address to the list of Allowed sites. Figure 147 Pop-up Blocker Settings 5 Click Close configurator do not display properly in Internet Explorer, check that JavaScripts are allowed. 246 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 247
    tab. Figure 148 Internet Options: Security 2 Click the Custom Level... button. 3 Scroll down to Scripting. 4 Under Active scripting make sure that Enable is selected (the default). 5 Under Scripting of Java applets make sure that Enable is selected (the default). P-663HN-51 User's Guide 247
  • ZyXEL P-663H-51 | User Guide - Page 248
    then the Security tab. 2 Click the Custom Level... button. 3 Scroll down to Microsoft VM. 4 Under Java permissions make sure that a safety level is selected. 248 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 249
    (Sun) 1 From Internet Explorer, click Tools, Internet Options and then the Advanced tab. 2 Make sure that Use Java 2 for under Java (Sun) is selected. P-663HN-51 User's Guide 249
  • ZyXEL P-663H-51 | User Guide - Page 250
    Java, Javascripts and pop-ups in one screen. Click Tools, then click Options in the screen that appears. Figure 152 Mozilla Firefox: Tools > Options 250 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 251
    Appendix B Pop-up Windows, JavaScripts and Java Permissions Click Content.to show the screen below. Select the check boxes as shown in the following screen. Figure 153 Mozilla Firefox Content Security P-663HN-51 User's Guide 251
  • ZyXEL P-663H-51 | User Guide - Page 252
    Appendix B Pop-up Windows, JavaScripts and Java Permissions 252 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 253
    IP addresses and subnet masks. IP addresses identify individual devices on a network. Every networking device (including computers, servers, routers, printers, etc.) needs an IP address to a possible range of 00000000 to 11111111 in binary, or 0 to 255 in decimal. P-663HN-51 User's Guide 253
  • ZyXEL P-663H-51 | User Guide - Page 254
    and Host ID Example 1ST OCTET: 2ND OCTET: 3RD OCTET: 4TH OCTET IP Address (Binary) Subnet Mask (Binary) Network Number Host ID (192) (168) (1) (2) 11000000 10101000 00000001 00000010 11111111 11111111 11111111 00000000 11000000 10101000 00000001 00000010 254 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 255
    and the remaining 24 bits are zeroes. Subnet masks are expressed in dotted decimal notation just like IP addresses. The following examples show the binary and decimal notation for 8-bit, 16-bit, 24-bit 216 - 2 28 - 2 23 - 2 MAXIMUM NUMBER OF HOSTS 16777214 65534 254 6 P-663HN-51 User's Guide 255
  • ZyXEL P-663H-51 | User Guide - Page 256
    Appendix C IP Addresses and Subnetting Notation Since the mask is always a address is 192.168.1.0. The first three octets of the address (192.168.1) are the network number, and the remaining octet is the host ID, allowing a maximum of 28 - 2 or 254 possible hosts. 256 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 257
    Appendix C IP Addresses and Subnetting The following figure shows the company network before subnetting. Figure 155 Subnetting Example: Before Subnetting You can host ID bit can have a value of either 0 or 1, allowing two subnets; 192.168.1.0 /25 and 192.168.1.128 /25. P-663HN-51 User's Guide 257
  • ZyXEL P-663H-51 | User Guide - Page 258
    a 24-bit address into two subnets. Similarly, to divide a 24-bit address into four subnets, you need to "borrow" two host ID bits to give four possible combinations (00, 01, 10 and 11). The subnet mask is 26 bits (11111111.11111111.11111111.11000000) or 255.255.255.192. 258 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 259
    10000000 11000000 Highest Host ID: 192.168.1.190 Table 86 Subnet 4 IP/SUBNET MASK IP Address IP Address (Binary) Subnet Mask (Binary) NETWORK NUMBER LAST OCTET BIT VALUE 192.168.1. 192 11000000.10101000.00000001 11000000 . 11111111.11111111.11111111 11000000 . P-663HN-51 User's Guide 259
  • ZyXEL P-663H-51 | User Guide - Page 260
    following table shows IP address last octet values for each subnet. Table 87 Eight Subnets SUBNET SUBNET ADDRESS 1 0 2 32 3 64 4 96 5 128 6 160 7 192 8 224 FIRST ADDRESS LAST ADDRESS 1 30 33 255.252 (/30) 64 2 7 255.255.255.254 (/31) 128 1 260 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 261
    easy to remember (for instance, 192.168.1.1) but make sure that no other device on your network is using that IP address. The subnet mask specifies the network number portion of an IP address. Your ZyXEL Device will compute the subnet mask automatically based on the IP P-663HN-51 User's Guide 261
  • ZyXEL P-663H-51 | User Guide - Page 262
    . In the following example computer A has a static (or fixed) IP address that is the same as the IP address that a DHCP server assigns to computer B which is a DHCP client. Neither can access the Internet. This problem can be solved by assigning a different static IP 262 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 263
    . Figure 158 Conflicting Computer IP Addresses Example Conflicting Computer and Router IP Addresses Example More than one device can not use the same IP address. In the following example, the computer and the router's LAN port both use 192.168.1.1 as the IP address. P-663HN-51 User's Guide 263
  • ZyXEL P-663H-51 | User Guide - Page 264
    Appendix C IP Addresses and Subnetting The computer cannot access the Internet. This problem can be solved by assigning a different IP address to the computer or the router's LAN port. Figure 159 Conflicting Computer and Router IP Addresses Example 264 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 265
    simplest WLAN configuration is an independent (Ad-hoc) WLAN that connects a set of computers with wireless adapters (A, B, C). Any commonly referred to as an ad-hoc network or Independent Basic Service Set (IBSS). The following diagram shows an example of notebook computers 663HN-51 User's Guide 265
  • ZyXEL P-663H-51 | User Guide - Page 266
    connection between APs is called a Distribution System (DS). This type of wireless LAN topology is called an Infrastructure WLAN. The Access Points not only provide communication with the wired network but also mediate wireless network traffic in the immediate neighborhood. 266 P-663HN-51 User
  • ZyXEL P-663H-51 | User Guide - Page 267
    are not within range of each other. The following figure illustrates a hidden node. Both stations (STA) are within range of the access point (AP) or P-663HN-51 User's Guide 267
  • ZyXEL P-663H-51 | User Guide - Page 268
    reach RTS/CTS size. Note: Enabling the RTS Threshold causes redundant network overhead that could negatively affect the throughput performance instead of providing a remedy. 268 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 269
    preamble when all wireless devices on the network support it, otherwise the ZyXEL Device uses long preamble. Note: The wireless devices MUST use the same preamble mode in order to communicate. IEEE 802.11g Wireless at 11 Mbps or lower depending on range. IEEE 802.11g has P-663HN-51 User's Guide 269
  • ZyXEL P-663H-51 | User Guide - Page 270
    MAC Address Filtering WEP Encryption IEEE802.1x EAP with RADIUS Server Authentication Wi-Fi Protected Access (WPA) WPA2 Most Secure Note: You must enable the same wireless security settings on the ZyXEL Device and on all wireless clients that you want to associate with it. 270 P-663HN-51 User
  • ZyXEL P-663H-51 | User Guide - Page 271
    are exchanged between the access point and the RADIUS server for user authentication: • Access-Request Sent by an access point requesting authentication. • Access-Reject Sent by a RADIUS server rejecting access. • Access-Accept Sent by a RADIUS server allowing access. P-663HN-51 User's Guide 271
  • ZyXEL P-663H-51 | User Guide - Page 272
    an intermediary AP(s) that supports IEEE 802.1x. . For EAP-TLS authentication type, you must first have a wired connection to the network and obtain password by encrypting the password with the challenge and sends back the information. Password is not sent in plain text. 272 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 273
    , PEAP only supports EAP methods, such as EAP-MD5, EAP-MSCHAPv2 and EAP-GTC (EAP-Generic Token Card), for client authentication. EAP-GTC is implemented only by Cisco. LEAP LEAP (Lightweight Extensible Authentication Protocol) is a Cisco implementation of IEEE 802.1x. P-663HN-51 User's Guide 273
  • ZyXEL P-663H-51 | User Guide - Page 274
    connection a default encryption key user authentication. If both an AP and the wireless clients support password entered into each access point, wireless gateway and wireless client. As long as the passwords match, a wireless client will be granted access to a WLAN. 274 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 275
    not support WPA mode password approach makes WPA(2)-PSK susceptible to brute-force password-guessing attacks but it's still an improvement over WEP as it employs a consistent, single, alphanumeric password to derive a PMK which is used to generate unique temporal encryption P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 276
    IP address of the RADIUS server, its port number (default is user's identification against its database and grants or denies network access accordingly. 3 A 256-bit Pairwise Master Key (PMK) is derived from the authentication process by the RADIUS server and the client. 276 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 277
    AP checks each wireless client's password and allows it to join the network only if the password matches. 3 The AP and wireless clients generate a common PMK (Pairwise Master Key). The key itself is not sent over the network, but is derived from the PSK and the SSID. P-663HN-51 User's Guide 277
  • ZyXEL P-663H-51 | User Guide - Page 278
    address filters are not dependent on how you configure these security features. Table 93 Wireless Security Relational Matrix AUTHENTICATION METHOD/ KEY MANAGEMENT PROTOCOL ENCRYPTIO N METHOD ENTER MANUAL KEY IEEE 802.1X Open Enable WPA2-PSK TKIP/AES Yes Disable 278 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 279
    . dBi represents the true gain that the antenna provides. Types of Antennas for WLAN There are two types of antennas used for wireless LAN applications. P-663HN-51 User's Guide 279
  • ZyXEL P-663H-51 | User Guide - Page 280
    close to the center of the coverage area as possible. For directional antennas, point the antenna in the direction of the desired coverage area. 280 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 281
    . BOOTP_SERVER UDP 67 DHCP Server. CU-SEEME TCP UDP 7648 24032 A popular videoconferencing solution from White Pines Software. DNS TCP/UDP 53 Domain Name Server, a service that matches web names (for example www.zyxel.com) to IP numbers. P-663HN-51 User's Guide 281
  • ZyXEL P-663H-51 | User Guide - Page 282
    Services (continued) NAME PROTOCOL PORT(S) DESCRIPTION ESP User-Defined 50 (IPSEC_TUNNEL) The IPSEC ESP (Encapsulation Security Protocol) tunneling protocol uses this service. get e-mail from a POP3 server through a temporary connection (TCP/IP or other). 282 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 283
    Controller Access Control System). TELNET TCP 23 Telnet is the login and terminal emulation protocol common on the Internet and in UNIX environments. It operates over TCP/IP networks. Its primary function is to allow users to log into remote host systems. P-663HN-51 User's Guide 283
  • ZyXEL P-663H-51 | User Guide - Page 284
    PORT(S) DESCRIPTION TFTP UDP 69 Trivial File Transfer Protocol is an Internet file transfer protocol similar to FTP, but uses the UDP (User Datagram Protocol) rather than TCP (Transmission Control Protocol). VDOLIVE TCP 7000 Another videoconferencing solution. 284 P-663HN-51 User
  • ZyXEL P-663H-51 | User Guide - Page 285
    APPENDIX F Open Software Announcements End-User License Agreement for "P-663HN-51" Note: WARNING: ZyXEL Communications Corp. IS times with ZyXEL. Any other use of the Software by any other entity is strictly forbidden and is a violation of this License Agreement. P-663HN-51 User's Guide 285
  • ZyXEL P-663H-51 | User Guide - Page 286
    software, ZyXEL has no express or implied obligation to provide any technical or other support for such software. Please contact the appropriate software vendor or manufacturer directly for technical support and customer service related to its software and products. 286 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 287
    ZyXEL's AGGREGATE LIABILITY WITH RESPECT TO ITS OBLIGATIONS UNDER THIS AGREEMENT OR OTHERWISE WITH RESPECT TO THE SOFTWARE AND DOCUMENTATION OR OTHERWISE SHALL BE EQUAL TO THE PURCHASE PRICE, BUT SHALL IN NO EVENT EXCEED THE PRODUCT'S PRICE. BECAUSE SOME STATES/COUNTRIES DO P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 288
    Appendix F Open Software Announcements NOT ALLOW THE EXCLUSION License Agreement. Upon notification of termination, you agree to destroy or return to ZyXEL all copies of the Software and Documentation and to certify in writing that all known of laws provisions thereof. The P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 289
    Appendix F Open Software Announcements exclusive forum 663HN-51 incorporate source code covered under the GPL License, LGPL License, BSD License, and BSD like License. To obtain the source code covered under those Licenses, please check ftp:// opensource.zyxel.com to get it. P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 290
    Appendix F Open Software Announcements 290 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 291
    use of the ZyXEL Device is subject to the terms and conditions of any related service providers. Trademarks ZyNOS (ZyXEL Network Operating System) is a registered trademark of ZyXEL Communications, Inc. of FCC rules. Operation is subject to the following two conditions: P-663HN-51 User's Guide 291
  • ZyXEL P-663H-51 | User Guide - Page 292
    if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, the receiver. 3 Connect the equipment into an outlet on a circuit different from that to which the receiver is connected. 4 Consult . 注意 ! P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 293
    manufactured functionally equivalent product of equal or higher value, and will be solely at the discretion of ZyXEL. This warranty shall not apply if the product has been modified, misused, tampered with, damaged by in lieu of all other warranties, express or implied, P-663HN-51 User's Guide 293
  • ZyXEL P-663H-51 | User Guide - Page 294
    kind to the purchaser. To obtain the services of this warranty, contact ZyXEL's Service Center for your Return Material Authorization number (RMA firmware upgrades and information at www.zyxel.com for global products, or at www.us.zyxel.com for North American products. 294 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 295
    A access control 193 adding IP addresses 195 IP addresses 194 passwords 195 services 193 ADSL setup 127 ADSL standards 210 ADSL settings 177 Basic Service Set, See BSS 265 Beacon Interval 158 blocking schedule 99 bridging groups 129 broadcast 70 P-663HN-51 User's Guide Index Index BSS
  • ZyXEL P-663H-51 | User Guide - Page 296
    hub 21, 209 humidity 209 I IANA 77, 262 IBSS 265 IEEE 802.11g 269 IGMP 71, 77, 78 version 71 importing trusted CA 135 incoming IP filtering 95 Independent Basic Service Set See IBSS 265 initialization vector (IV) 275 interfaces static DHCP 82 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 297
    -mode 210 multiplexing 53, 59 LLC-based 53, 60 P-663HN-51 User's Guide VC-based 53, 60 Multiprotocol Encapsulation 59 Index N nailed-up connection 61 NAT 76, 83, 84, 90, 211, 261 DMZ host 90 port triggering 87 virtual servers 83 NAT traversal 78 navigating the web configurator 30 Network Address
  • ZyXEL P-663H-51 | User Guide - Page 298
    GetNext 186 manager 185 MIBs 186 supported versions 185 Trap 186 splitters 23 static DHCP 82 static route 115, 116 subnet 253 subnet mask 76, 254 subnetting 256 switch 209 syntax conventions 5 T temperature 209 Temporal Key Integrity Protocol (TKIP) 275 time zone 192 298 P-663HN-51 User's Guide
  • ZyXEL P-663H-51 | User Guide - Page 299
    54 trigger port forwarding 87 trusted CA 134, 136 importing 135 U unicast 70 upgrading firmware 199 uploading firmware 199 UPnP 78 application 78 security issues 79 user names 209 V VC 53 permanent virtual circuit see PVC VCC 42 VCI 53 viewing system logs 182 Virtual Channel Connection (VCC) 42
  • ZyXEL P-663H-51 | User Guide - Page 300
    Index 300 P-663HN-51 User's Guide
  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
  • 242
  • 243
  • 244
  • 245
  • 246
  • 247
  • 248
  • 249
  • 250
  • 251
  • 252
  • 253
  • 254
  • 255
  • 256
  • 257
  • 258
  • 259
  • 260
  • 261
  • 262
  • 263
  • 264
  • 265
  • 266
  • 267
  • 268
  • 269
  • 270
  • 271
  • 272
  • 273
  • 274
  • 275
  • 276
  • 277
  • 278
  • 279
  • 280
  • 281
  • 282
  • 283
  • 284
  • 285
  • 286
  • 287
  • 288
  • 289
  • 290
  • 291
  • 292
  • 293
  • 294
  • 295
  • 296
  • 297
  • 298
  • 299
  • 300
www.zyxel.com
www.zyxel.com
P-663HN-51
802.11n ADSL2+ Bonded 4-port Gateway
Copyright © 2009
ZyXEL Communications Corporation
Firmware Version 1.01
Edition 1, 8/2009
Default Login Details
IP Address
User Name
admin
Password
1234