ZyXEL P-793H v2 User Guide
ZyXEL P-793H v2 Manual
 |
View all ZyXEL P-793H v2 manuals
Add to My Manuals
Save this manual to your list of manuals |
ZyXEL P-793H v2 manual content summary:
- ZyXEL P-793H v2 | User Guide - Page 1
P-793H v2 G.SHDSL.bis Bonded Broadband Gateway Default Login Details IP Address http://192.168.1.1 Admin Password 1234 User Password user Firmware Version 3.70 Editionw1w,w.0zy3x/el2.c0om10 www.zyxel.com Copyright © 2010 ZyXEL Communications Corporation - ZyXEL P-793H v2 | User Guide - Page 2
- ZyXEL P-793H v2 | User Guide - Page 3
About This User's Guide About This User's Guide Intended Audience This manual is intended for people who want to configure the P-793H v2 using the web configurator. Tips for Reading User's Guides On-Screen When reading a ZyXEL User's Guide On-Screen, keep the following in mind: • If you don't - ZyXEL P-793H v2 | User Guide - Page 4
ZyXEL products. • Forum This contains discussions on ZyXEL products. Learn from others who use ZyXEL products and share your experiences as well. Customer Support Should problems received your device. • Brief description of the problem and the steps you took to solve it. 4 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 5
in this book may differ slightly from the product due to differences in operating systems, operating system versions, or if you installed updated firmware/software for your device. Every effort has been made to ensure that the information in this manual is accurate. P-793H v2 User's Guide 5 - ZyXEL P-793H v2 | User Guide - Page 6
example, other things you may need to configure or helpful tips) or recommendations. Syntax Conventions • The P-793H v2 may be referred to as the "device", the "system" or the "product" in this User's Guide. • Product labels, screen names, field labels and field choices are all in bold font. • A key - ZyXEL P-793H v2 | User Guide - Page 7
Document Conventions Icons Used in Figures Figures in this User's Guide may use the following generic icons. The P-793H v2 icon is not an exact representation of your device. P-793H v2 Computer Notebook computer Server Firewall Telephone Switch Router P-793H v2 User's Guide 7 - ZyXEL P-793H v2 | User Guide - Page 8
cables from this device before servicing or disassembling. • Use ONLY Electronics and Electrical Equipment. It means that used electrical and electronic products should not be mixed with general waste. Used electrical and electronic equipment should be treated separately. 8 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 9
...161 Certificates ...193 Static Route ...203 802.1Q/1P ...207 Quality of Service (QoS) ...217 Dynamic DNS Setup ...235 Remote Management ...239 Universal Plug-and Firewall Setup ...355 Filter Configuration ...357 System Password ...373 System Information & Diagnosis 375 P-793H v2 User's Guide 9 - ZyXEL P-793H v2 | User Guide - Page 10
Contents Overview Firmware and Configuration File Maintenance 387 Menus 24.8 to 24.11 ...403 Schedule Setup ...411 Troubleshooting ...415 10 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 11
Table of Contents...11 List of Figures ...23 List of Tables...31 Part I: User's Guide 35 Chapter 1 Getting To Know Your P-793H v2 37 1.1 Overview ...37 1.1.1 High-speed Internet Access with G.SHDSL 37 1.1.2 High-speed Point-to-point Connections 38 1.1.3 High-speed Point-to-2points Connections - ZyXEL P-793H v2 | User Guide - Page 12
Manual Configuration Service Mode 82 6.2.2 Advanced Internet Access Setup 83 6.3 The More Connections Screen 86 6.3.1 More Connections Edit 87 6.3.2 Configuring More Connections Advanced Setup 90 6.4 The WAN Backup Setup Screen 92 6.5 WAN Technical Reference 93 12 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 13
Configuring the LAN IP Alias Screen 110 7.6 LAN Technical Reference 111 7.6.1 LANs, WANs and the ZyXEL Device 111 7.6.2 DHCP Setup ...112 7.6.3 DNS Server Addresses 112 7.6.4 LAN TCP/IP ...113 7.6.5 The Address Mapping Rule Edit Screen 125 8.5 The ALG Screen ...127 P-793H v2 User's Guide 13 - ZyXEL P-793H v2 | User Guide - Page 14
Firewall Rule Screen 140 9.3.1 Configuring Firewall Rules 142 9.3.2 Customized Services 144 9.3.3 Configuring a Customized Service 145 9.4 The Firewall Threshold Screen 145 9.4.1 Threshold Values ... VPN Screens 161 11.1.2 What You Need to Know About IPSec VPN 162 14 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 15
Edit Screen ...166 11.4 Configuring Advanced IKE Settings 171 11.5 Manual Key Setup ...173 11.5.1 Security Parameter Index (SPI 174 11.6 Configuring Manual Key 174 11.7 Viewing SA Monitor ...177 11.8 Configuring 13.2.1 Static Route Edit 205 Chapter 14 802.1Q/1P...207 P-793H v2 User's Guide 15 - ZyXEL P-793H v2 | User Guide - Page 16
1P Group Setting 214 14.3 The 802.1Q/1P Port Setting Screen 215 Chapter 15 Quality of Service (QoS)...217 15.1 Overview ...217 15.2 QoS Overview ...217 15.2.1 What You Can Do Screen ...243 17.5 The SNMP Screen ...244 17.5.1 Supported MIBs ...246 17.5.2 SNMP Traps ...246 16 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 17
in the Tool Screens 283 21.1.2 What You Need To Know About Tools 284 21.1.3 Before You Begin 285 21.1.4 Tool Examples ...285 21.2 The Firmware Screen ...291 21.3 The Configuration Screen 293 21.4 The Restart Screen ...295 P-793H v2 User's Guide 17 - ZyXEL P-793H v2 | User Guide - Page 18
Configuring Dynamic DNS 308 Chapter 25 WAN Setup...311 25.1 WAN Setup ...311 25.1.1 2wire-2line Service Mode 313 25.2 Configuring Traffic Redirect 315 Chapter 26 LAN Setup...317 26.1 Accessing the LAN Menus Node Filter ...330 28.6 Remote Node ATM Layer Options 332 18 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 19
Examples 346 30.4.1 Internet Access Only 347 30.4.2 Example 2: Internet Access with a Default Server 348 30.4.3 Example 3: Multiple Public IP Addresses With Inside Servers 348 30 Filters 370 32.6.2 Applying Remote Node Filters 371 Chapter 33 System Password ...373 P-793H v2 User's Guide 19 - ZyXEL P-793H v2 | User Guide - Page 20
Diagnostic ...384 Chapter 35 Firmware and Configuration File Maintenance 387 35.5 Uploading Firmware and Configuration Files 396 35.5.1 Firmware File Upload 398 35.5.4 FTP Session Example of Firmware File Upload 398 35.5.5 TFTP File Firmware File Via Console Port 400 35.5.9 Example Xmodem Firmware - ZyXEL P-793H v2 | User Guide - Page 21
Control Support ...404 Instructions 427 Appendix C Setting up Your Computer's IP Address 429 Appendix D Pop-up Windows, JavaScripts and Java Permissions 453 Appendix E IP Addresses and Subnetting 463 Appendix F Services ...473 Appendix G Legal Information 477 Index...481 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 22
Table of Contents 22 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 23
793H v2 38 Figure 2 Point-to-point Connections with Your P-793H v2 38 Figure 3 Point-to-2points Connections with Your P-793H v2 39 Figure 4 LEDs ...40 Figure 5 Login Screen ...44 Figure 6 Change Password Service Type of B 72 Figure 26 WAN > Internet Connection > Service 793H v2 User's Guide 23 - ZyXEL P-793H v2 | User Guide - Page 24
130 Figure 54 Default Firewall Action ...133 Services: Config 145 Figure 60 Three-Way Handshake ...146 Figure 61 Security > Firewall > Threshold 147 Figure 62 Ideal Firewall Setup ...151 Figure 63 "Triangle Route" Problem > VPN > Setup > Manual Key 174 Figure 75 Security 793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 25
Maintenance > Logs > Log Settings 271 Figure 120 E-mail Log Example ...274 Figure 121 Restore Using FTP Session Example 286 Figure 122 FTP Session Example of Firmware File Upload 287 Figure 123 FTP Session Example ...289 Figure 124 Maintenance > Tools > Firmware 291 P-793H v2 User's Guide 25 - ZyXEL P-793H v2 | User Guide - Page 26
List of Figures Figure 125 Firmware Upload In Progress 292 Figure 126 Dynamic DNS 309 Figure 141 Menu 2: WAN Setup ...311 Figure 142 Menu 2: 2wire-2line Service Mode 313 Figure 143 Menu 2.1: Traffic Redirect Setup 315 Figure 144 Menu 3: LAN Setup NAT Example 1 ...347 26 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 27
LAN Traffic ...371 Figure 193 Filtering Remote Node Traffic 371 Figure 194 Menu 23: System Password 373 Figure 195 Menu 24: System Maintenance 375 Figure 196 Menu 24.1: System Maintenance - Status Screen 393 Figure 210 Menu 24.6: Restore Configuration 394 P-793H v2 User's Guide 27 - ZyXEL P-793H v2 | User Guide - Page 28
Restoration Confirmation Screen 396 Figure 216 Menu 24.7.1: System Maintenance - Upload System Firmware 397 Figure 217 Menu 24.7.2: System Maintenance - Upload System Configuration File 397 (TCP/IPv4) Properties 443 Figure 253 Macintosh OS 8/9: Apple Menu 444 28 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 29
Content Security 461 Figure 276 Network Number and Host ID 464 Figure 277 Subnetting Example: Before Subnetting 467 Figure 278 Subnetting Example: After Subnetting 467 P-793H v2 User's Guide 29 - ZyXEL P-793H v2 | User Guide - Page 30
List of Figures 30 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 31
Rules: Edit 142 Table 35 Security > Firewall > Rules: Edit: Edit Customized Services 144 Table 36 Security > Firewall > Rules: Edit: Edit Customized Services: Config 145 Table 37 Security > Firewall > Threshold 147 Table 38 Security > Content Filtering > Keyword 158 P-793H v2 User's Guide 31 - ZyXEL P-793H v2 | User Guide - Page 32
166 Table 43 Security > VPN > Setup > Edit > Advanced Setup 171 Table 44 Security > VPN > Setup > Manual Key 175 Table 45 Security > VPN > Monitor ...178 Table 46 Security > VPN > Global Setting 179 Table 47 View Log 270 Table 81 Maintenance > Logs > Log Settings 272 32 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 33
based TFTP Clients 290 Table 102 Maintenance > Tools > Firmware 291 Table 103 Restore Configuration ...293 Table 104 Maintenance 111 Menu 2: WAN Setup ...312 Table 112 Menu 2: 2wire-2line Service Mode 314 Table 113 Menu 2.1: Traffic Redirect Setup 315 Table 114 Menu P-793H v2 User's Guide 33 - ZyXEL P-793H v2 | User Guide - Page 34
.1.1.1: Generic Filter Rule 366 Table 132 Menu 23: System Password 373 Table 133 Menu 24.1: System Maintenance - Status 376 Setup 413 Table 145 Device ...421 Table 146 Firmware ...422 Table 147 Firmware Features ...425 Table 148 Subnet Masks ...464 Table Services ...474 34 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 35
PART I User's Guide 35 - ZyXEL P-793H v2 | User Guide - Page 36
36 - ZyXEL P-793H v2 | User Guide - Page 37
G.SHDSL Internet access. The G.SHDSL (Single-pair High-speed Digital Subscriber Line) is a symmetrical, bi-directional DSL service that uses your telephone line to provide data rates up to 2.3 Mbits/ sec. (The "G." in "G.SHDSL" is defined by the G.991.2 ITU (International P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 38
Quick Start Guide for detailed instructions about hardware connections.) Next, set up the P-793H v2 as a router or as a bridge, depending on the desired configuration. 1.1.2 High-speed Point-to-point Connections You can use another P-793H v2 or any SHDSL device with the P-793H v2 to create a cost - ZyXEL P-793H v2 | User Guide - Page 39
following methods to manage the P-793H v2. • Web Configurator. This is recommended for everyday management of the P793H v2 using a (supported) web browser. See Chapter 2 on page 43. • Command Line Interface. Line commands are mostly used for troubleshooting by service engineers. See Appendix H on - ZyXEL P-793H v2 | User Guide - Page 40
Restoring an earlier working configuration may be useful if the device becomes unstable or even crashes. If you forget your password, you will have to reset the P-793H v2 to its factory default settings. If you backed up an earlier configuration file, you would not have to totally re-configure the - ZyXEL P-793H v2 | User Guide - Page 41
The P-793H v2 tried to get an IP address, but an error occurred. The Internet connection is down. 1.5 The RESET Button If you forget your password or cannot access the web configurator, you will need to use the RESET button at the back of the device to reload the factory-default configuration file - ZyXEL P-793H v2 | User Guide - Page 42
Chapter 1 Getting To Know Your P-793H v2 42 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 43
allows easy P793H v2 setup and Service Pack) 2. • JavaScripts (enabled by default). • Java permissions (enabled by default). See the chapter on troubleshooting if you need to make sure these functions are allowed in Internet Explorer. 2.2 Accessing the Web Configurator 1 Make sure your P-793H v2 - ZyXEL P-793H v2 | User Guide - Page 44
your password. It is strongly recommended you change the default password. Enter a new password, retype it to confirm and click Apply; alternatively click Ignore to proceed to the main menu if you do not want to change the password now. Figure 6 Change Password at Login 44 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 45
setup and click Apply to display the Status screen. Figure 7 Select a Mode Note: For security reasons, the P-793H v2 automatically logs you out if you do not use the web configurator for five minutes (default). If this happens, log in again. 2.3 Web Configurator Main Screen Figure 8 Main Screen - ZyXEL P-793H v2 | User Guide - Page 46
Navigation Panel Use the menu items on the navigation panel to open screens to configure P-793H v2 features. The following tables describe each menu item. Table 3 Navigation Panel Summary LINK TAB configure your traffic redirect properties and WAN backup settings. 46 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 47
Use this screen to activate/deactivate the firewall and the default action to take on network traffic going in specific directions. P793H v2 to perform content filtering. Use this screen to exclude a range of users on the LAN from content filtering on your P-793H v2 793H v2. P-793H v2 User's Guide 47 - ZyXEL P-793H v2 | User Guide - Page 48
inactivity timeout and password. Time Setting Use this screen to change your P-793H v2's time and date. Logs View Log Use this screen to display your P-793H v2's logs. Log Settings Use this screen to select which logs and/or immediate alerts your P-793H v2 is to record. You can also - ZyXEL P-793H v2 | User Guide - Page 49
TAB FUNCTION Tools Firmware Use this screen to upload firmware to your P-793H v2. Configuration Use this screen to backup and restore your P-793H v2's configuration (settings) or reset the factory default settings. Restart This screen allows you to reboot the P-793H v2 without turning the - ZyXEL P-793H v2 | User Guide - Page 50
Chapter 2 Introducing the Web Configurator 50 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 51
also provides detailed information of client list, Any IP, VPN and packet statistics. 3.2 The Status Screen Use this screen to view the status of the P-793H v2. Click Status to open this screen. Figure 9 Status Screen P-793H v2 User's Guide 51 - ZyXEL P-793H v2 | User Guide - Page 52
the screen where you can change it. DSL Firmware Version This is the current version of the device's DSL modem code. WAN Information DSL Mode This is the DSL standard that your P-793H v2 is using. IP Address This is the current IP address of the P-793H v2 in the WAN. Click this to go to - ZyXEL P-793H v2 | User Guide - Page 53
793H v2 has been running since it last started up. The P-793H v2 793H v2's memory the P-793H v2 is 793H v2 has. Status This field indicates whether or not the P-793H v2 793H v2 is using the interface and Down when the P-793H v2 VPN tunnels the P-793H v2 has negotiated. See 793H v2. See Section 3.5 on page - ZyXEL P-793H v2 | User Guide - Page 54
computer that is using the P793H v2 but is in a different subnet than the P-793H v2. MAC Address This field displays the MAC address of the computer that is using the P793H v2 but is in a different subnet than the P-793H v2. Refresh Click this to update this screen. 54 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 55
. WAN Port Statistics Link Status This is the status of your WAN link. WAN IP Address This is the IP address of the P-793H v2's WAN port. Upstream Speed This is the upstream speed of your P-793H v2. Downstream Speed This is the downstream speed of your P-793H v2. P-793H v2 User's Guide 55 - ZyXEL P-793H v2 | User Guide - Page 56
apply the new poll interval you entered in the Poll Interval field above. Stop Click this to halt the refreshing of the system statistics. 56 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 57
you by your ISP. Note: See the advanced menu chapters for background information on these fields. 4.2 Internet Access Wizard Setup 1 After you enter the password to access the web configurator, select Go to Wizard setup and click Apply. Otherwise, click the wizard icon ( ) in the top right corner of - ZyXEL P-793H v2 | User Guide - Page 58
the system for Internet access. Figure 13 Wizard Welcome 3 Your P-793H v2 attempts to detect your DSL connection and your connection type. 3a The to the wizard welcome screen. If you still cannot connect, click Manually configure your Internet connection. Follow the directions in the wizard and - ZyXEL P-793H v2 | User Guide - Page 59
information (username, password and/or service name) exactly as ZyXEL device detects a connection but not the connection type. Click Next and refer to Section 4.2.1 on page 60 on how to manually configure the P-793H v2 for Internet access. Figure 16 Auto Detection: Failed P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 60
Manual Configuration 1 If the P-793H v2 fails to detect your DSL connection type but the physical line is connected, enter your Internet access information in the wizard screen exactly as your service provider gave it to you. Leave the defaults 1483, ENET ENCAP or PPPoE. 60 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 61
encapsulation type you use. All screens shown are with routing mode. Configure the fields and click Next to continue. Figure 18 Internet Connection with PPPoE P-793H v2 User's Guide 61 - ZyXEL P-793H v2 | User Guide - Page 62
. Service Name Type the name of your PPPoE service here. Back Click this to return to the previous screen without saving. Apply Click this to save your changes. Exit Click this to close the wizard screen without saving. Figure 19 Internet Connection with RFC 1483 62 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 63
. Click this to continue to the next wizard screen. Click this to close the wizard screen without saving. Figure 20 Internet Connection with ENET ENCAP P-793H v2 User's Guide 63 - ZyXEL P-793H v2 | User Guide - Page 64
screen without saving. Click this to save your changes. Click this to close the wizard screen without saving. Figure 21 Internet Connection with PPPoA 64 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 65
User Name Enter the login name that your ISP gives you. Password Enter the password associated with the user name above. Back Click this to www.zyxel.com. Internet access is just the beginning. Refer to the rest of this guide for more detailed information on the complete range of P-793H v2 - ZyXEL P-793H v2 | User Guide - Page 66
Chapter 4 Internet Setup Wizard 66 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 67
, see page 70 Note: The tutorials featured in this chapter require a basic understanding of connecting to and using the Web Configurator on your P-793H v2. For details, see the included Quick Start Guide. For field descriptions of individual screens, see the related technical reference in this User - ZyXEL P-793H v2 | User Guide - Page 68
. Select 2 wire in the Service Mode field. In the Service Type field, select Server. Select 5696 as the Transfer Max Rate and 3200 as the Transfer Min Rate. Leave the rest of the fields set to their default settings. Click Apply. Figure 23 WAN > Internet Access Setup 68 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 69
the DSL line you want the P-793H v2 to use as a default for outgoing traffic. 4 Scroll down to the Service Type section. In the Service Mode field, select 2 wire, the the P-793H v2s do not establish the connection, verify that the settings (except the Service Type) match. P-793H v2 User's Guide 69 - ZyXEL P-793H v2 | User Guide - Page 70
1280 Kpbs C To set up the point-to-2 point connection between A, B and C you need to: 1 Set up the Server. 2 Set up the Clients. 3 Connect the P-793H v2s. 5.3.1 Set up the Server 1 Log in to the server P-793H v2 of Company A. 2 Click Network > WAN > Internet Access Setup. 70 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 71
. Select 1 in the Line field as the DSL line you want the P-793H v2 to use as a default for outgoing traffic. 4 Then configure the Service Type section. Select 2 wire-2 line in the Service Mode field. In the Service Type field, select Server. For Line1 configuration, select 5696 as the Transfer Max - ZyXEL P-793H v2 | User Guide - Page 72
in the server. 4 Scroll down to the Service Type section. In the Service Mode field, select 2 wire. In the Service Type field, select Client. The rest of > Service Type of C 5.3.3 Connect the P-793H v2s Connect the DSL ports on the P-793H v2s together, and wait while the P-793H v2s automatically - ZyXEL P-793H v2 | User Guide - Page 73
PART II Technical Reference 73 - ZyXEL P-793H v2 | User Guide - Page 74
74 - ZyXEL P-793H v2 | User Guide - Page 75
Internet Access Setup screen (Section 6.2 on page 78) to configure the WAN settings on the P-793H v2 for Internet access. • Use the More Connections screen (Section 6.3 on page 86) to set helps forward traffic to its destination when the default WAN connection is down. P-793H v2 User's Guide 75 - ZyXEL P-793H v2 | User Guide - Page 76
and password (and service name) for user authentication. WAN IP Address The WAN IP address is an IP address for the P-793H v2, which begins. PTM Packet Transfer Mode (PTM) is packet-oriented and supported by the VDSL2 standard. In PTM, packets are encapsulated directly 76 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 77
WAN. 6.1.3 Before You Begin You need to know your Internet access settings such as encapsulation and WAN IP address. Get this information from your ISP. P-793H v2 User's Guide 77 - ZyXEL P-793H v2 | User Guide - Page 78
Chapter 6 WAN Setup 6.2 The Internet Access Setup Screen Use this screen to change your P-793H v2's WAN settings. Click Network > WAN > Internet Access Setup. The screen differs by the WAN type and encapsulation you select. Figure 28 Network > WAN >Internet Access Setup 78 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 79
793H v2 uses the SHDSL technology for data transmission over the DSL port. Mode Encapsulation ATM (Asynchronous Transfer Mode): The P-793H v2 uses the ADSL technology for data transmission over the DSL port. Select Routing (default Name Password Service Name Multiplexing 793H v2 User's Guide 79 - ZyXEL P-793H v2 | User Guide - Page 80
contains bits to define class of service. Enter 802.1Q VLAN ID you want the P-793H v2 to use as a default for outgoing traffic ( (and the P-793H v2's WAN IP address have their DNS server addresses manually configured. If you do 793H v2 will try to bring up the connection automatically if it is - ZyXEL P-793H v2 | User Guide - Page 81
. This field is not configurable if you select 2wire-2line mode because the ZyXEL Device is automatically set to Server. Enable Rate Adaption This field is enabled if Service Type is Server. Indicate whether or not the P-793H v2 can adjust the speed of its connection to that of the other device - ZyXEL P-793H v2 | User Guide - Page 82
Service Mode LABEL DESCRIPTION Service Type Service Mode Select 2wire-2line mode for the DSL connection. This means that the P-793H v2 is going to be a server connected to two client P-793H v2s. Service Service Type is Server. Set the maximum rate at which the P-793H v2 the P-793H v2 uses in - ZyXEL P-793H v2 | User Guide - Page 83
Service Mode (continued) LABEL DESCRIPTION Cancel Click Cancel to begin configuring this screen afresh. Advanced Setup Click this button to display the Advanced WAN Setup screen and edit more details of your WAN setup. 6.2.2 Advanced Internet Access Setup Use this screen to edit your P-793H v2 - ZyXEL P-793H v2 | User Guide - Page 84
The P-793H v2 supports IGMP-v1, IGMP-v2 and PCR. Note that system default is 0 cells/sec. 793H v2's built-in PPPoE client, you can enable PPPoE pass through to allow up to ten hosts on the LAN to use PPPoE client software on their computers to connect to the ISP via the P793H v2 793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 85
details. Click this to return to the previous screen without saving. Click this to save your changes. Click this to restore your previously saved settings. P-793H v2 User's Guide 85 - ZyXEL P-793H v2 | User Guide - Page 86
Chapter 6 WAN Setup 6.3 The More Connections Screen The P-793H v2 allows you to configure more than one Internet access connection. To configure additional Internet access connections Click this to save your changes. Click this to restore your previously saved settings. 86 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 87
. Mode Select Routing from the drop-down list box if your ISP allows multiple computers to share an Internet account. If you select Bridge, the P-793H v2 will forward any packet that it does not route to this remote node; otherwise, the packets are discarded - ZyXEL P-793H v2 | User Guide - Page 88
select PPPoA, RFC 1483, ENET ENCAP or PPPoE. User Name Password Service Name Multiplexing If you set up a point-to-point connection, assigned to you. Select the DSL line you want the P-793H v2 to use as a default for outgoing traffic (remote node 1). This option is available if 793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 89
Specify an idle time-out in the Max Idle Timeout field when you select Connect on Demand. The default setting is 0, which means the Internet session will not timeout. NAT SUA only is available only when Advanced Setup screen and edit more details of your WAN setup. P-793H v2 User's Guide 89 - ZyXEL P-793H v2 | User Guide - Page 90
Protocol) is a network-layer protocol used to establish membership in a multicast group. The P-793H v2 supports IGMP-v1, IGMP-v2 and IGMP-v3. Select None to disable it. ATM QoS ATM QoS Type Select CBR ) for bursty traffic and bandwidth sharing with other applications. 90 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 91
term) that can be transmitted. Type the SCR, which must be less than the PCR. Note that system default is 0 cells/sec. Maximum Burst Size Maximum Burst Size (MBS) refers to the maximum number of cells your changes. Click this to restore your previously saved settings. P-793H v2 User's Guide 91 - ZyXEL P-793H v2 | User Guide - Page 92
your P-793H v2's WAN 793H v2 uses to check the DSL connection. Check WAN IP Address1-3 Select DSL Link to have the P-793H v2 to test your P-793H v2's WAN accessibility. Type backup connection, the P-793H v2 periodically pings the addresses (2 recommended) that your P-793H v2 may ping the IP addresses - ZyXEL P-793H v2 | User Guide - Page 93
to a backup gateway when the P793H v2 cannot connect to the Internet. Active Traffic Redirect Select this check box to have the P-793H v2 use traffic redirect if the normal use the encapsulation method required by your ISP. The P-793H v2 supports the following methods. P-793H v2 User's Guide 93 - ZyXEL P-793H v2 | User Guide - Page 94
The P-793H v2 supports PPPoE (Point services for individuals. Operationally, PPPoE saves significant effort for both you and the ISP or carrier, as it requires no specific configuration of the broadband modem at the customer site. By implementing PPPoE directly on the P-793H v2 793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 95
not applicable (N/A). If you have a static IP, then you only need to fill in the IP Address field and not the Gateway IP Address field. P-793H v2 User's Guide 95 - ZyXEL P-793H v2 | User Guide - Page 96
greater than "15" means the link is down. The smaller the number, the lower the "cost". The metric sets the priority for the P-793H v2's routes to the Internet. If any two of the default routes have the same metric, the P-793H v2 uses the following predefined priorities: 96 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 97
default route. If the normal route fails to connect to the Internet, the P-793H v2 default routing behavior and takes priority over all of the routes mentioned above. 6.7 Traffic Redirect Traffic redirect forwards traffic to a backup gateway when the P-793H v2 networks with the P-793H v2 itself as the - ZyXEL P-793H v2 | User Guide - Page 98
this time, more cells (up to the MBS) can be sent at the PCR again. If the PCR, SCR or MBS is set to the default of "0", the system will assign a maximum value that correlates to your upstream line rate. 98 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 99
do not require closely controlled delay and delay variation. It is commonly used for "bursty" traffic typical on LANs. PCR and MBS define the burst P-793H v2 User's Guide 99 - ZyXEL P-793H v2 | User Guide - Page 100
transfers. However, UBR doesn't guarantee any bandwidth and only delivers traffic when the network has spare bandwidth. An example application is background file transfer. 100 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 101
7.2 on page 103) to set the LAN IP address and subnet mask of your ZyXEL device. You can also edit your P-793H v2's RIP, multicast, any IP and Windows Networking settings from this screen. • Use the (Section 7.5 on page 109) to change your P-793H v2's IP alias settings. P-793H v2 User's Guide 101 - ZyXEL P-793H v2 | User Guide - Page 102
network into multiple sub-networks. DHCP A DHCP (Dynamic Host Configuration Protocol) server can assign your P-793H v2 an IP address, subnet mask, DNS and other routing information when it's turned on. RIP RIP IP address of a networking device before you can access it. 102 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 103
IP subnet mask into the IP Subnet Mask field. Unless instructed otherwise it is best to leave this alone, the configurator will automatically compute a subnet mask based upon the IP address you entered. 3 Click Apply to save your settings. Figure 38 Network > LAN > IP P-793H v2 User's Guide 103 - ZyXEL P-793H v2 | User Guide - Page 104
P-793H v2 in dotted decimal notation, for example, 192.168.1.1 (factory default default). Your P-793H v2 automatically computes the subnet mask based on the IP Address you enter, so do not change this field unless you are instructed Use this screen to edit your P-793H v2's RIP, multicast, Any IP and - ZyXEL P-793H v2 | User Guide - Page 105
. The P-793H v2 supports IGMP-v1, IGMP-v2 and IGMP-v3 v2 NetBIOS (Network Basic Input/Output System) are TCP or UDP packets that enable a computer to connect to and communicate with a LAN. For some dial-up services default policy set to block WAN to LAN traffic, you also need to enable the default - ZyXEL P-793H v2 | User Guide - Page 106
changes. Click this to restore your previously saved settings. 7.3 The DHCP Setup Screen Use this screen to configure the DNS server information that the P-793H v2 sends to the DHCP client devices on the LAN. Click Network > DHCP Setup to open this screen. Figure 40 Network > LAN > DHCP Setup 106 - ZyXEL P-793H v2 | User Guide - Page 107
793H v2 can assign IP addresses, an IP default gateway and DNS servers to Windows 95, Windows NT and other systems that support here. DNS Server DNS Servers The P-793H v2 passes a DNS (Domain Name System) computers must have their DNS server addresses manually configured. If you do not configure a - ZyXEL P-793H v2 | User Guide - Page 108
:00:02. Use this screen to change your P-793H v2's static DHCP settings. Click Network > LAN > displays whether the client is connected to the P-793H v2. Host Name This field displays the computer host box(es) in each entry to have the P793H v2 always assign the selected entry(ies)'s IP address - ZyXEL P-793H v2 | User Guide - Page 109
networks over the same Ethernet interface. The P-793H v2 supports three logical LAN interfaces via its single physical Ethernet interface with the P-793H v2 itself as the gateway for each LAN network 192.168.1.24 B: 192.168.2.1 - 192.168.2.24 C: 192.168.3.1 - 192.168.3.24 P-793H v2 User's Guide 109 - ZyXEL P-793H v2 | User Guide - Page 110
to change your P-793H v2's IP alias P-793H v2. IP Address Enter the IP address of your P-793H v2 in IP address. Your P-793H v2 will automatically calculate the mask computed by the P-793H v2. RIP (Routing Information Both or Out Only, the P-793H v2 will broadcast its routing table periodically. - ZyXEL P-793H v2 | User Guide - Page 111
P-793H v2 sends (it recognizes both formats when receiving). RIP-1 is universally supported but routers on your network must use multicasting, also. By default, RIP direction is set to Both and the Version and the ZyXEL Device The actual physical connection determines whether the P-793H v2 ports are - ZyXEL P-793H v2 | User Guide - Page 112
793H v2 provides the TCP/IP configuration for the clients. If you turn DHCP service off, you must have another DHCP server on your LAN, or else the computer must be manually configured. IP Pool Setup The P-793H v2 IPCP negotiation. The P-793H v2 supports the IPCP DNS server 793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 113
the network number portion of an IP address. Your P793H v2 will compute the subnet mask automatically based on the IP address that you entered. You don't need to change the subnet mask computed by the P-793H v2 unless you are instructed to do otherwise. Private IP Addresses Every machine on - ZyXEL P-793H v2 | User Guide - Page 114
and the broadcasting method of the RIP packets that the P-793H v2 sends (it recognizes both formats when receiving). RIP-1 is universally supported; but RIP-2 carries more information. RIP-1 is probably to a group of hosts on the network - not everybody and not just 1. 114 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 115
in IGMP. The address 224.0.0.2 is assigned to the multicast routers group. The P-793H v2 supports IGMP version 1 (IGMP-v1), IGMP version 2 (IGMP-v2) and IGMP version 3 (IGMP-v3). At start up, the P-793H v2 queries all directly connected networks to gather group membership. After that, the - ZyXEL P-793H v2 | User Guide - Page 116
Chapter 7 LAN Setup 116 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 117
service requests to the server(s) on your local network. • Use the Address Mapping screen (Section 8.4 on page 123) to change your P793H v2's address mapping settings. • Use the ALG screen (Section 8.5 on page 127) to enable and disable the SIP (VoIP) ALG in the P-793H v2 P-793H v2 User's Guide 117 - ZyXEL P-793H v2 | User Guide - Page 118
that supports two types of mapping, Many-to-One and Server. The P-793H v2 also supports 793H v2. • Choose Full Feature if you have multiple public WAN IP addresses for your P793H v2. Finding Out More See Section 8.6 on page 127 for advanced technical information on NAT. 118 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 119
addition to setting up SUA/NAT, to allow traffic from the WAN to be forwarded through the P-793H v2. Figure 45 Network > NAT > General The following table describes the labels in this screen. Table 24 your changes. Click this to restore your previously saved settings. P-793H v2 User's Guide 119 - ZyXEL P-793H v2 | User Guide - Page 120
Address In addition to the servers for specified services, NAT supports a default server IP address. A default server receives packets from ports that are not specified in this screen. Note: If you do not assign a Default Server IP address, the P-793H v2 discards all packets received for ports that - ZyXEL P-793H v2 | User Guide - Page 121
SMTP server (A in the example), port 80 to another (B in the example) and assign a default server IP address of 192.168.1.35 to a third (C in the example). You assign the for port numbers commonly used for particular services. Figure 47 Network > NAT > Port Forwarding P-793H v2 User's Guide 121 - ZyXEL P-793H v2 | User Guide - Page 122
specified services, NAT supports a default server. A default server receives packets from ports that are not specified in this screen. If you do not assign a Default Server IP address, the P-793H v2 discards shown next. Figure 48 Network > NAT > Port Forwarding: Edit 122 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 123
NAT > Port Forwarding: Edit LABEL DESCRIPTION Active Click this check box to enable the rule. Service Name Enter a name to identify this port-forwarding rule. Start Port Enter a port number in up by 1 rule, so old rules 5, 6 and 7 become new rules 4, 5 and 6. P-793H v2 User's Guide 123 - ZyXEL P-793H v2 | User Guide - Page 124
Chapter 8 Network Address Translation (NAT) To change your P-793H v2's address mapping settings, click Network > NAT > Address Mapping to open the following screen. Figure 49 Network > NAT (IGA). This field is N/A for One-to-one, Many-to-One and Server mapping types. 124 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 125
(i.e., PAT, port address translation), ZyXEL's Single User Account feature that previous ZyXEL routers supported only. M-M Ov (Overload): : This type allows you to specify inside servers of different services behind the NAT to be accessible to the outside world. Click P-793H v2 User's Guide 125 - ZyXEL P-793H v2 | User Guide - Page 126
PAT, port address translation), ZyXEL's Single User Account feature that previous ZyXEL routers supported only. Many-to-Many Overload: Server: This type allows you to specify inside servers of different services behind the NAT to be accessible to the outside world. Local 793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 127
this to change the private ports or IP in SIP messages so that the VoIP client behind the P-793H v2 can be found in RTP traffic. Apply Click this to save your changes. Reset Click this to restore example, the local address refers to the IP address of a host when the P-793H v2 User's Guide 127 - ZyXEL P-793H v2 | User Guide - Page 128
toMany Overload mapping - see Table 31 on page 131), NAT offers the additional benefit of firewall protection. With no servers defined, your P-793H v2 filters out all incoming inquiries, thus preventing intruders from probing your network. For more information on IP address translation, refer to RFC - ZyXEL P-793H v2 | User Guide - Page 129
Many Overload NAT mapping) in each packet and then forwards it to the Internet. The P-793H v2 keeps track of the original addresses and port numbers so incoming reply packets can have their original Address (ILA) 192.168.1.11 192.168.1.10 Inside Global Address (IGA) P-793H v2 User's Guide 129 - ZyXEL P-793H v2 | User Guide - Page 130
that previous ZyXEL routers supported (the SUA Only option in today's routers). • Many to Many Overload: In Many-to-Many Overload mode, the P-793H v2 maps the multiple local IP addresses to shared global IP addresses. • Many-to-Many No Overload: In Many-to-Many No Overload mode, the P793H v2 maps - ZyXEL P-793H v2 | User Guide - Page 131
ILA3ÅÆ IGA1 ILA4ÅÆ IGA2 Many-to-Many No Overload ... ILA1ÅÆ IGA1 ILA2ÅÆ IGA2 ILA3ÅÆ IGA3 Server ... Server 1 IPÅÆ IGA1 Server 2 IPÅÆ IGA1 Server 3 IPÅÆ IGA1 P-793H v2 User's Guide 131 - ZyXEL P-793H v2 | User Guide - Page 132
Chapter 8 Network Address Translation (NAT) 132 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 133
793H v2 and network from attacks by hackers on the Internet and control access to it. By default figure illustrates the default firewall action. User blocked (3 and 4). Figure 54 Default Firewall Action LAN 1 A triangle route on the P-793H v2, and set the default action that the firewall - ZyXEL P-793H v2 | User Guide - Page 134
default threshold values, or you can change them to values more suitable to your security requirements. Finding Out More • See Section 9.1.3 on page 135 for an example of setting up a firewall. • See Section 9.5 on page 149 for advanced technical information on firewall. 134 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 135
Services link to open the Customized Service screen. 6 Click an index number to display the Customized Services Config screen and configure the screen as follows and click Apply. Edit Custom Port Example 7 Select Any in the Destination Address List box and then click Delete. P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 136
Configure the destination address screen as follows and click Add. Firewall Example: Edit Rule: Destination Address 9 Use the Add >> and Remove buttons between Available Services and Selected Services list boxes to configure it as follows. Click Apply when you are done. 136 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 137
show up with an "*" before their names in the Services list box and the Rules list box. Firewall Example: Edit Rule: Select Customized Services On completing the configuration procedure for this Internet firewall rule, the Rules screen should look like the following. P-793H v2 User's Guide 137 - ZyXEL P-793H v2 | User Guide - Page 138
Firewall General Screen Use this screen to configure the firewall settings. Click Security > Firewall to display the following screen. Figure 55 Security > Firewall > General 138 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 139
to activate the firewall. The P-793H v2 performs access control and protects against Denial of Service (DoS) attacks when the on the LAN interface of the P-793H v2 or the P-793H v2 itself. Use the drop-down list boxes to select the default action that the firewall is to P-793H v2 User's Guide 139 - ZyXEL P-793H v2 | User Guide - Page 140
LABEL DESCRIPTION Firewall Rules Storage Space in Use This read-only bar shows how much of the P-793H v2's memory for recording firewall rules it is currently using. When you are using 80% or less of the storage source or destination address is equivalent to Any. 140 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 141
Please note that a blank source or destination address is equivalent to Any. Service This drop-down list box displays the services to which this firewall rule applies. See Appendix F on page 473 save your changes. Click this to restore your previously saved settings. P-793H v2 User's Guide 141 - ZyXEL P-793H v2 | User Guide - Page 142
the labels in this screen. Table 34 Security > Firewall > Rules: Edit LABEL DESCRIPTION Edit Rule Active Select this option to enable this firewall rule. 142 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 143
to the Log Settings page and select the Access Control logs category to have the P-793H v2 record these logs. Alert Send Alert Message to Administrator When Matched Select the check box to have the P-793H v2 generate an alert when the rule is matched. Back Click this to return to the previous - ZyXEL P-793H v2 | User Guide - Page 144
name of your customized service. Protocol This shows the IP protocol (TCP, UDP or TCP/UDP) that defines your customized service. Port This is the port number or range that defines your customized service. Back Click this to return to the Firewall Edit Rule screen. 144 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 145
service. Back Click this to return to the previous screen without saving. Apply Click this to save your changes. Cancel Click this to restore your previously saved settings. Delete Click this to delete the current rule. 9.4 The Firewall Threshold Screen For DoS attacks, the P-793H v2 - ZyXEL P-793H v2 | User Guide - Page 146
default threshold values should work for most small offices. Tune these parameters when you believe the P-793H v2 has been receiving DoS attacks that are not recorded in the logs or the logs show that the P-793H v2 that are slow or handle many tasks and are often busy). 146 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 147
P-793H v2 may classify them as DoS attacks. 9.4.2 Configuring Firewall Thresholds The P-793H v2 also Threshold LABEL DESCRIPTION Denial of Service Thresholds The P-793H v2 measures both the total number of -open sessions. The P-793H v2 continues to delete half-open sessions as necessary, until - ZyXEL P-793H v2 | User Guide - Page 148
. TCP Maximum Incomplete For example, if you set the maximum incomplete high to 100, the P793H v2 starts deleting half-open sessions when the number of existing half-open sessions rises above 100. your changes. Click this to restore your previously saved settings. 148 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 149
which computers or services on the WAN. By default, the P-793H v2's stateful packet inspection services on the LAN. Note: You also need to configure NAT port forwarding (or full featured NAT address mapping rules) to allow computers on the WAN to access devices on the LAN. P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 150
override the P-793H v2's default rules. 9.5.2 Guidelines For Enhancing Security With Your Firewall 6 Change the default password via web configurator. 7 Think about access control before you connect to the network in any way. 8 Limit who can access your router. 9 Don't enable any local service (such - ZyXEL P-793H v2 | User Guide - Page 151
introduce security risks to the P-793H v2 and your protected network. Use example, if IRC is blocked, are there users that require this service? 2 Is it possible to modify the rule to be more specific Route When the firewall is on, your P-793H v2 acts as a secure gateway between your LAN and - ZyXEL P-793H v2 | User Guide - Page 152
"Triangle Route" Problem LAN WAN 1 ISP 1 3 2 ISP 2 A 9.5.4.2 Solving the "Triangle Route" Problem If you have the P-793H v2 allow triangle route P-793H v2 supports up to three logical LAN interfaces with the P-793H v2 being the gateway for each logical network. 152 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 153
in different subnets, all returning network traffic must pass through the P-793H v2 to your LAN. The following steps describe such a scenario. 1 2 The P-793H v2 reroutes the packet to Gateway A, which is in Subnet 2. 3 The reply from the WAN goes to the P-793H v2. 4 The P-793H v2 then sends it - ZyXEL P-793H v2 | User Guide - Page 154
Chapter 9 Firewalls 154 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 155
a network. On the Internet the URL is the web address that you type in the address bar of your Internet browser, for example "http://www.zyxel.com". 10.1.3 Before You Begin To use the Trusted screen, you need the IP addresses of devices on your network. See the LAN section (Section - ZyXEL P-793H v2 | User Guide - Page 156
all weekdays. 3 Under Start Time and End Time, type the times for blocking to begin and end (16:00 ~ 17:00 in this example). 156 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 157
and End IP Address fields, type 192.168.1.3. 3 Click Apply. Security > Content Filter > Trusted: Example That finishes setting up keyword blocking on the home computer. P-793H v2 User's Guide 157 - ZyXEL P-793H v2 | User Guide - Page 158
This box contains the list of all the keywords that you have contain these keywords configured the P-793H v2 to block. in the URL: Delete Highlight a keyword in the box and click this to remove message telling you that the content filter is blocking this request. 158 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 159
saved settings. 10.3 The Schedule Screen Use this screen to set the days and times for the P-793H v2 to perform content filtering. Click Security > Content Filter > Schedule. The screen appears as shown. you want the content filtering to stop in hour-minute format. P-793H v2 User's Guide 159 - ZyXEL P-793H v2 | User Guide - Page 160
Use this screen to exclude a range of users on the LAN from content filtering on your P-793H v2. Click Security > Content Filter > Trusted. The screen appears as shown. Figure 67 Security > Content changes. Cancel Click this to restore your previously saved settings. 160 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 161
the current active VPN connections. • Use the VPN Global Setting screen (Section 11.8 on page 179) to allow NetBIOS packets passing through the VPN connection. P-793H v2 User's Guide 161 - ZyXEL P-793H v2 | User Guide - Page 162
a contract indicating what security parameters the P793H v2 and the remote IPSec router will use. The first phase establishes an Internet Key Exchange (IKE) SA between the P-793H v2 and remote IPSec router. The second name (if it has one) in the Secure Gateway Address field. P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 163
configured as 0.0.0.0 only when using IKE key management and not Manual key management. Finding Out More See Section 11.9 on page 179 configure remote management (Remote MGMT) to allow access for that service. 11.2 VPN Setup Screen The following figure helps explain the 793H v2 User's Guide 163 - ZyXEL P-793H v2 | User Guide - Page 164
policy. Local Address This is the IP address(es) of computer(s) on your local network behind your P-793H v2. The same (static) IP address is displayed twice when the Local Address Type field in the VPN Type field in the VPN Setup - Edit screen is configured to Subnet. 164 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 165
mode (Tunnel is the default selection). This field displays the security protocols used for an SA. Both AH and ESP increase P-793H v2 processing requirements and communications and apply them to the P-793H v2. Click this return your settings to their last saved values. P-793H v2 User's Guide 165 - ZyXEL P-793H v2 | User Guide - Page 166
is applied before a packet leaves the firewall. Keep Alive Select either Yes or No from the drop-down list box. Select Yes to have the P-793H v2 automatically reinitiate the SA after the SA lifetime times out, even if there is no traffic. The remote IPSec router must also have keep alive - ZyXEL P-793H v2 | User Guide - Page 167
may use any character, including spaces, but the P-793H v2 drops trailing spaces. Select IKE or Manual from the drop-down list box. IKE provides more protection so it is generally recommended. Manual is a useful option for troubleshooting if you have problems using IKE key management. Select Main or - ZyXEL P-793H v2 | User Guide - Page 168
793H v2 by its IP address. Select DNS to identify this P-793H v2 by a domain name. Select E-mail to identify this P-793H v2 in the local Content field. The P-793H v2 automatically uses the IP address in the or e-mail address by which to identify this P-793H v2 in the local Content field. Use up to - ZyXEL P-793H v2 | User Guide - Page 169
Peer ID Type Content The P-793H v2 uses the current P-793H v2 WAN IP address (static or to 0.0.0.0 or leave it blank, the P-793H v2 will use the address in the Secure Address When you want the P-793H v2 to distinguish between VPN connection requests well as some of the services offered by AH. If - ZyXEL P-793H v2 | User Guide - Page 170
for minimal security and SHA-1 for maximum security. Click Back to return to the previous screen. Click Apply to save your changes back to the P-793H v2. Click Cancel to begin configuring this screen afresh. Click Advanced Setup to configure more detailed settings of your IKE key management. 170 - ZyXEL P-793H v2 | User Guide - Page 171
UDP, and so on. 0 is the default and signifies any protocol. Enable Replay Detection As a VPN setup is processing intensive, the system is vulnerable to Denial of Service (DoS) attacks The IPSec receiver can detect Start Port is left at 0, End will also remain at 0. P-793H v2 User's Guide 171 - ZyXEL P-793H v2 | User Guide - Page 172
time the VPN tunnel renegotiates, all users accessing remote resources are temporarily disconnected. You must choose a key group for phase 1 IKE setup. DH1 (default) refers to Diffie-Hellman Group 1 a 768 bit random number. DH2 refers to Diffie-Hellman Group 2 a 1024 bit (1Kb) random number. Use the - ZyXEL P-793H v2 | User Guide - Page 173
PFS) is disabled (NONE) by default in phase 2 IPSec SA setup 793H v2 and return to the VPN-IKE screen. Click Cancel to return to the VPN-IKE screen without saving your changes. 11.5 Manual Key Setup Manual key management is useful if you have problems with IKE key management. P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 174
and incoming SPIs. 11.6 Configuring Manual Key You only configure VPN manual key when you select Manual in the IPSec Key Mode field on the VPN Setup-Edit screen. This is the VPN Setup - Manual Key screen as shown next. Figure 74 Security > VPN > Setup > Manual Key 174 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 175
VPN policy. You may use any character, including spaces, but the P-793H v2 drops trailing spaces. IPSec Key Mode Select IKE or Manual from the drop-down list box. Manual is a useful option for troubleshooting if you have problems using IKE key management. SPI Type a number (base 10) from 1 to - ZyXEL P-793H v2 | User Guide - Page 176
Table 44 Security > VPN > Setup > Manual Key (continued) LABEL DESCRIPTION Remote Remote IP The ESP protocol (RFC 2406) provides encryption as well as some of the services offered by AH. If you select ESP here, you must select options from not enter an encryption key. 176 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 177
Chapter 11 VPN Table 44 Security > VPN > Setup > Manual Key (continued) LABEL DESCRIPTION Encapsulation Key (only with ESP) With DES, type a unique key 8 characters long. inbound traffic is "idle" and does not timeout until the SA lifetime period expires. See Section P-793H v2 User's Guide 177 - ZyXEL P-793H v2 | User Guide - Page 178
Chapter 11 VPN 11.9.7 on page 185on keep alive to have the P-793H v2 renegotiate an IPSec SA when the SA lifetime expires, even if there is no traffic. Figure 75 to stop that security association. Refresh Click Refresh to display the current active VPN connection(s). 178 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 179
Chapter 11 VPN 11.8 Configuring VPN Global Setting To change your P-793H v2's global settings, click VPN > VPN Global Setting. The screen the VPN connection. Apply Click Apply to save your changes back to the P-793H v2. Cancel Click Cancel to begin configuring this screen afresh. 11.9 IPSec VPN - ZyXEL P-793H v2 | User Guide - Page 180
the packet formats and the default standards for packet structure ( allows you to determine whether to use IKE (ISAKMP) or manual key configuration in order to set up a VPN. 11 you are running IPSec on a host computer behind the P-793H v2. NAT is incompatible with the AH protocol in both Transport - ZyXEL P-793H v2 | User Guide - Page 181
and the data and assumes that the data has been maliciously altered. NAT is not normally compatible with ESP in transport mode either, but the P-793H v2's NAT Traversal feature provides a way to handle this. NAT traversal allows P-793H v2 User's Guide 181 - ZyXEL P-793H v2 | User Guide - Page 182
because the NAT router changes the header of the IPSec packet. NAT traversal solves the problem by adding a UDP port 500 header to the IPSec packet. The NAT router forwards the Tunnel NAT N N Y* Y Y* - This is supported in the P-793H v2 if you enable NAT traversal. 182 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 183
encapsulates the entire IP packet to transmit it securely. A Tunnel mode is required for gateway services to provide access to internal systems. Tunnel mode is fundamentally an IP tunnel with authentication and after the outer IP header and before the inside IP header. P-793H v2 User's Guide 183 - ZyXEL P-793H v2 | User Guide - Page 184
. • Choose an encryption algorithm. • Choose an authentication algorithm • Choose whether to enable Perfect Forward Secrecy (PFS) using Diffie-Hellman public-key cryptography. Select None (the default) to disable PFS. • Choose Tunnel mode or Transport mode. 184 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 185
793H v2 automatically renegotiates the IPSec SA if there is traffic when the IPSec SA lifetime period expires. The P793H v2 the P-793H v2 automatically renegotiates 793H v2-compatible keep alive feature enabled in order for this feature to work. If the P-793H v2 793H v2 because the P-793H v2 never 793H v2 - ZyXEL P-793H v2 | User Guide - Page 186
VPN tunnels are created from P-793H v2 A; one to branch office headquarters (HQ) network, the P-793H v2 at branch office 1 uses the Intranet the P-793H v2 identifies incoming SAs by ID passwords to simultaneously connect to the P-793H v2 content configuration, the P-793H v2 does not allow you - ZyXEL P-793H v2 | User Guide - Page 187
name (up to 31 characters) by which to identify this P793H v2. E-mail Type an e-mail address (up to 31 characters) by which to identify this P-793H v2. The domain name or e-mail address that you use in the and content configuration in order to set up a VPN tunnel. P-793H v2 User's Guide 187 - ZyXEL P-793H v2 | User Guide - Page 188
.com The two P-793H v2s in this example cannot complete their negotiation because P793H v2 B's Local ID type is IP, but P-793H v2 A's Peer ID type DH1) and 1024-bit (Group 2 - DH2) Diffie-Hellman groups are supported. Upon completion of the Diffie-Hellman exchange, the two peers have a shared - ZyXEL P-793H v2 | User Guide - Page 189
to distinguish between VPN rules. Telecommuters can each use a separate VPN rule to simultaneously access a P793H v2 at headquarters. They can use different IPSec parameters. The local IP addresses (or ranges of addresses) of the rules configured on the P-793H v2 at P-793H v2 User's Guide 189 - ZyXEL P-793H v2 | User Guide - Page 190
a VPN connection with a P-793H v2 located at headquarters. The P-793H v2 at headquarters (HQ in the to establish the VPN connection. The P-793H v2 at headquarters can also initiate VPN connections .2.12 Local IP Address: 192.168.2.12 Headquarters P-793H v2 Rule 1: Peer ID Type: IP Peer ID Content - ZyXEL P-793H v2 | User Guide - Page 191
) TELECOMMUTERS HEADQUARTERS Telecommuter B (telecommuterb.dydns.org) Headquarters P-793H v2 Rule 2: Local ID Type: DNS Peer ID Type: DNS ID Content: [email protected] Local IP Address: 192.168.4.15 Headquarters P-793H v2 Rule 3: Peer ID Type: E-mail Peer ID Content: [email protected] Secure - ZyXEL P-793H v2 | User Guide - Page 192
Chapter 11 VPN 192 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 193
exchange public keys for use in authentication. Figure 84 Certificates Example In the figure above, the P-793H v2 (Z) checks the identity of the notebook (A) using a certificate before granting it access to the network to import has to be in one of these file formats: P-793H v2 User's Guide 193 - ZyXEL P-793H v2 | User Guide - Page 194
and numerals to convert a binary X.509 certificate into a printable form. Factory Default Certificate The P-793H v2 generates its own unique self-signed certificate when you first turn it on. This ".cer" or ".crt" file name extension. Figure 85 Remote Host Certificates 194 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 195
The Trusted CAs Screen This screen displays a summary list of certificates of the certification authorities that you have set the P-793H v2 to accept as trusted. The P-793H v2 accepts any valid certificate signed by a certification authority on this list as being trustworthy; thus you do not need to - ZyXEL P-793H v2 | User Guide - Page 196
CAs LABEL DESCRIPTION PKI Storage Space in Use This bar displays the percentage of the P-793H v2's PKI storage space that is currently in use. The bar turns from blue to red trust, from your computer to the P-793H v2. Click this to display the current validity status of the certificates. 196 - ZyXEL P-793H v2 | User Guide - Page 197
12.2.1 Trusted CA Import Follow the instructions in this screen to save a trusted certification authority's certificate to the P-793H v2. Click Security > Certificates to open the certificate on the P-793H v2. Cancel Click this to restore your previously saved settings. P-793H v2 User's Guide 197 - ZyXEL P-793H v2 | User Guide - Page 198
certificate, change the certificate's name and set whether or not you want the P793H v2 to check a certification authority's list of revoked certificates before trusting a certificate issued the ITU-T X.509 recommendation that defines the formats for public-key certificates. P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 199
the certificate's key pair (the P-793H v2 uses RSA encryption) and the length the certificate's message digest that the P-793H v2 calculated using the MD5 algorithm. You message digest that the P-793H v2 calculated using the SHA1 algorithm whether or not you want the P-793H v2 to check the CRL that the - ZyXEL P-793H v2 | User Guide - Page 200
key to verify the certificates. Advantages of Certificates Certificates offer the following benefits. • The P-793H v2 only has to store the certificates of the certification authorities that you decide to trust, no you, or by someone else. This process works as follows. 200 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 201
message with Tim's private key). 5 Additionally, Jenny uses her own private key to sign a message and Tim uses Jenny's public key to verify the message. P-793H v2 User's Guide 201 - ZyXEL P-793H v2 | User Guide - Page 202
Chapter 12 Certificates 202 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 203
example, the next figure shows a computer (A) connected to the P-793H v2's LAN interface. The P-793H v2 routes most traffic from A to the Internet through the P-793H v2's default gateway (R1). You create one static route to connect to services offered by your ISP behind router R2. You create another - ZyXEL P-793H v2 | User Guide - Page 204
destination. Click the Edit icon to go to the screen where you can set up a static route on the P-793H v2. Apply Cancel Click the Remove icon to remove a static route from the P-793H v2. A window displays asking you to confirm that you want to delete the route. Click this to save your changes - ZyXEL P-793H v2 | User Guide - Page 205
ISP. Click this to return to the previous screen without saving. Click this to save your changes. Click this to restore your previously saved settings. P-793H v2 User's Guide 205 - ZyXEL P-793H v2 | User Guide - Page 206
Chapter 13 Static Route 206 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 207
have its own rules about where and how to forward traffic. You can assign any ports on the P-793H v2 to a VLAN group and configure the settings for the group. You may also set the priority level for into a MAC-layer frame that contains bits to define class of service. P-793H v2 User's Guide 207 - ZyXEL P-793H v2 | User Guide - Page 208
to an 802.1Q VLAN-aware switch, the P-793H v2 first decides where to forward the frame, and then inserts a VLAN tag reflecting the ingress port's default VID. The default PVID is VLAN 1 for all ports, but this frame; otherwise, it is transmitted as an untagged frame. 208 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 209
configure the 802.1Q/1P settings on the P-793H v2. 802.1Q/1P Example P-793H v2 1 1 2 2 3 4 3 5 ) where the priority is set to high level of service. You would start with the following steps. 1 Click VLAN group. 4 Select PVC1 from the Default Gateway drop-down list box. 5 In the Control - ZyXEL P-793H v2 | User Guide - Page 210
802.1Q PVID column for LAN1, LAN2 and PVC1. 3 Select 7 from the 802.1P Priority drop-down list box for LAN1, LAN2 and PVC1. 210 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 211
this type of traffic, so you want to group these ports and PVC2 into one VLAN (VLAN3). PVC2 priority is set to low level of service. P-793H v2 User's Guide 211 - ZyXEL P-793H v2 | User Guide - Page 212
Chapter 14 802.1Q/1P Follow the same steps as in VLAN2 to configure the settings for VLAN3. The summary screen should then display as follows. Advanced > 802.1Q/1P > Group Setting: Example This completes the 802.1Q/1P setup. 212 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 213
ID number of a VLAN group. All interfaces (ports, SSIDs and ID PVCs) are in the management VLAN by default. If you disable the management VLAN, you will not be able to access the P-793H v2. Summary # This field displays the index number of the VLAN group. Name This field displays the name of - ZyXEL P-793H v2 | User Guide - Page 214
consist of up to 8 letters, numerals, "-", "_" and "@". VLAN ID Assign a VLAN ID for the VLAN group. The valid VID range is between 1 and 4094. 214 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 215
61 Advanced > 802.1Q/1P > Group Setting > Edit (continued) LABEL DESCRIPTION Default Gateway Select the default gateway for the VLAN group. Ports This field displays the types of ports available to the following screen. Figure 96 Advanced > 802.1Q/1P > Port Setting P-793H v2 User's Guide 215 - ZyXEL P-793H v2 | User Guide - Page 216
Assign a VLAN ID for the port. The valid VID range is between 1 and 4094. The P-793H v2 assigns the PVID to untagged frames or prioritytagged frames received on this port. 802.1P Priority Assign a . Cancel Click this to restore your previously saved settings. 216 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 217
793H v2 to use QoS for traffic management. Quality of Service (QoS) refers to both a network's ability to deliver data with minimum delay, and the networking methods used to control bandwidth. QoS allows the P-793H v2 The P-793H v2 assigns each jitter alone is a problem such as Internet radio or streaming - ZyXEL P-793H v2 | User Guide - Page 218
• Use the General screen (Section 15.3 on page 223) to enable QoS on the P793H v2, decide allowable bandwidth using QoS and configure priority mapping settings for traffic that does not match switch, can provide specific treatment or service based on the tag or marker. 218 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 219
Chapter 15 Quality of Service (QoS) Finding Out More See Section 15.6 on page 231 for advanced technical information on QoS. 15.2.3 QoS Class Setup Example . Traffic from the boss's IP address (192.168.1.23 for example) is mapped to queue 5. Traffic that does not match P-793H v2 User's Guide 219 - ZyXEL P-793H v2 | User Guide - Page 220
Chapter 15 Quality of Service (QoS) these two classes are assigned priority queue based on the internal QoS mapping table on the P-793H v2. Figure 97 QoS Example VoIP: Queue 6 Boss: Queue 5 IP=192.168.1.23 DSL 50 Mbps Figure 98 QoS Class Example: VoIP -1 220 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 221
Figure 99 QoS Class Example: VoIP -2 Chapter 15 Quality of Service (QoS) Figure 100 QoS Class Example: Boss -1 P-793H v2 User's Guide 221 - ZyXEL P-793H v2 | User Guide - Page 222
Chapter 15 Quality of Service (QoS) Figure 101 QoS Class Example: Boss -2 222 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 223
Chapter 15 Quality of Service (QoS) 15.3 The QoS General Screen Use this screen to enable or disable QoS and have the P-793H v2 automatically assign priority to traffic according speed. This will cause the P-793H v2 to not use some of the interface's available bandwidth. P-793H v2 User's Guide 223 - ZyXEL P-793H v2 | User Guide - Page 224
Chapter 15 Quality of Service (QoS) Table 63 Advanced > QoS > General LABEL DESCRIPTION Traffic priority will be automatically assigned by These fields are ignored turn. Active Select the check box to enable this classifier. Name This is the name of the classifier. P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 225
Chapter 15 Quality of Service (QoS) Table 64 Advanced > QoS > Class Setup (continued) LABEL DESCRIPTION Interface This shows the interface from which an existing classifier. Click this to save your changes. Click this to restore your previously saved settings. P-793H v2 User's Guide 225 - ZyXEL P-793H v2 | User Guide - Page 226
Chapter 15 Quality of Service (QoS) 15.4.1 The Class Configuration Screen Use this screen to configure a classifier. Click the Add button or the Edit icon in the Modify field to display the following screen. Figure 104 Advanced > QoS > Class Setup: Edit 226 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 227
on page 473 for a list of commonly-used services. The following table describes the labels in this screen a priority level (between 0 and 7) or select Auto to have the P793H v2 map the matched traffic to a queue according to the internal QoS mapping table field provided. P-793H v2 User's Guide 227 - ZyXEL P-793H v2 | User Guide - Page 228
15 Quality of Service (QoS) Table any source port number. See Appendix F on page 473 for some common services and port numbers. Select the check box and enter the source MAC address of on page 473 for some common services and port numbers. Select the check box and enter the destination MAC address - ZyXEL P-793H v2 | User Guide - Page 229
this option and select the protocol (TCP or UDP) or select User defined and enter the protocol (service type) number. 0 means any protocol number. Select this option and enter the minimum and maximum packet changes. Click this to restore your previously saved settings. P-793H v2 User's Guide 229 - ZyXEL P-793H v2 | User Guide - Page 230
Chapter 15 Quality of Service (QoS) 15.5 The QoS Monitor Screen Use this screen to view the P-793H v2's QoS packet statistics. Click Advanced > QoS > Monitor. The screen appears as shown. Figure 105 in the Poll Interval(s) field. Click this to stop refreshing statistics. 230 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 231
Chapter 15 Quality of Service (QoS) 15.6 QoS Technical Reference This section provides some -3 network. IP precedence uses three bits of the eightbit ToS (Type of Service) field in the IP header. There are eight classes of services (ranging from zero to seven) in IP precedence. Zero is the lowest - ZyXEL P-793H v2 | User Guide - Page 232
2-bit unused field and a 6-bit DSCP field which can define up to 64 service levels. The following figure illustrates the DS field. DSCP is backward compatible with the -3 QoS mapping on the P-793H v2. On the P-793H v2, traffic assigned to higher priority queues gets 232 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 233
Chapter 15 Quality of Service (QoS) through faster while traffic in lower index queues is dropped if the network 011100 011010 6 6 011000 4 100110 100100 100010 100000 5 101110 7 7 101000 6 110000 7 111000 IP PACKET LENGTH (BYTE) >1100 250~1100 - ZyXEL P-793H v2 | User Guide - Page 234
Chapter 15 Quality of Service (QoS) 234 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 235
ISP or DHCP server that would still like to have a domain name. The Dynamic DNS service provider will give you a password or key. 16.1.1 What You Need To Know About DDNS DYNDNS Wildcard Enabling the wildcard have a private WAN IP address, then you cannot use Dynamic DNS. P-793H v2 User's Guide 235 - ZyXEL P-793H v2 | User Guide - Page 236
that you are registered for from your Dynamic Type DNS service provider. Host Name Type the domain name assigned to your P-793H v2 by your Dynamic DNS provider. User Name Password Enable Wildcard Option You can specify up to two host names in the field separated by a comma (","). Type your - ZyXEL P-793H v2 | User Guide - Page 237
Type option field. Check with your Dynamic DNS service provider to have traffic redirected to a URL ( are one or more NAT routers between the P-793H v2 and the DDNS server. This feature has the DDNS if there is an HTTP proxy server between the P-793H v2 and the DDNS server. Type the IP address of - ZyXEL P-793H v2 | User Guide - Page 238
Chapter 16 Dynamic DNS Setup 238 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 239
which services/protocols can access which P-793H v2 interface (if any) from which computers. The following figure shows remote management of the P-793H v2 a firewall rule to allow access. You may manage your P-793H v2 from a remote location via: • Internet (WAN only) • LAN only • ALL (WAN - ZyXEL P-793H v2 | User Guide - Page 240
interface(s) and from which IP address(es) users can send DNS queries to the P-793H v2. • Use the ICMP screen (Section 17.7 on page 249) to set whether or not your P793H v2 will respond to pings and probes for services that you have not made available. 17.1.2 What You Need to Know About Remote - ZyXEL P-793H v2 | User Guide - Page 241
793H v2's WAN IP address when configuring from the WAN. • Use the P-793H v2's LAN IP address when configuring from the LAN. System Timeout There is a default specify how to connect to the P-793H v2 from a web browser, such as Internet the WWW service in this screen, then the P-793H v2 blocks all - ZyXEL P-793H v2 | User Guide - Page 242
a computer may access the P793H v2 using this service. Secured Client A secured client is a "trusted" computer that is allowed to communicate IP with the P-793H v2 using this service. Select All to allow any computer to access the P-793H v2 using this service. Apply Cancel Choose Selected to - ZyXEL P-793H v2 | User Guide - Page 243
P-793H v2 using this service. Click this to save your changes. Click this to restore your previously saved settings. 17.4 The FTP Screen You can use FTP (File Transfer Protocol) to upload and download the P-793H v2's firmware and configuration files. Please see the User's Guide chapter on firmware - ZyXEL P-793H v2 | User Guide - Page 244
a computer may access the P793H v2 using this service. Secured Client A secured client is a "trusted" computer that is allowed to communicate IP with the P-793H v2 using this service. Select All to allow any computer to access the P-793H v2 using this service. Apply Cancel Choose Selected to - ZyXEL P-793H v2 | User Guide - Page 245
manager. An agent is a management software module that resides in a managed device (the P-793H v2). An agent translates the local management information from the managed device into a form compatible with Trap - Used by the agent to inform the manager of some events. P-793H v2 User's Guide 245 - ZyXEL P-793H v2 | User Guide - Page 246
Supported MIBs The P-793H v2 supports MIB II, which is defined in RFC-1213 and RFC-1215. The focus of the MIBs is to let administrators collect statistical data and monitor status and performance. 17.5.2 SNMP Traps The P-793H v2 (password). 6 whyReboot (defined in ZYXEL- 793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 247
the IP address that you specify to access the P-793H v2 using this service. SNMP Configuration Get Community Enter the Get Community, which is the password for the incoming Get and GetNext requests from the management station. The default is public and allows all requests. Set Community Enter - ZyXEL P-793H v2 | User Guide - Page 248
Table 75 Advanced > Remote Management > DNS LABEL DESCRIPTION Port The DNS service port number is 53 and cannot be changed here. Access Status Select the interface(s) through which a computer may send DNS queries to the P-793H v2. Secured Client A secured client is a "trusted" computer that is - ZyXEL P-793H v2 | User Guide - Page 249
services Select this option to prevent hackers from finding the P-793H v2 by probing for unused ports. If you select this option, the P-793H v2 will not respond to port request(s) for unused ports, thus leaving the unused ports and the P-793H v2 unseen. If this option is not selected, the P793H v2 - ZyXEL P-793H v2 | User Guide - Page 250
Chapter 17 Remote Management Table 76 Advanced > Remote Management > ICMP LABEL DESCRIPTION Apply Click this to save your changes. Cancel Click this to restore your previously saved settings. 250 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 251
on page 253) to enable UPnP on the P-793H v2 and allow UPnP-enabled applications to automatically configure the P-793H v2. 18.1.2 What You Need to Know About UPnP UPnP devices and enable exchange of simple product and service descriptions. NAT traversal allows the following: • Dynamic port - ZyXEL P-793H v2 | User Guide - Page 252
. UPnP and ZyXEL ZyXEL has achieved UPnP certification from the Universal Plug and Play Forum UPnP™ Implementers Corp. (UIC). ZyXEL's UPnP implementation supports Internet Gateway Device (IGD) 1.0. See the following sections for examples of installing and using UPnP. 252 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 253
. Be aware that anyone could use a UPnP application to open the web configurator's login screen without entering the P-793H v2's IP address (although you must still enter the password to access the web configurator). Allow users to make configuration changes through UPnP Select this check box to - ZyXEL P-793H v2 | User Guide - Page 254
Chapter 18 Universal Plug-and-Play (UPnP) 1 Click Start and Control Panel. Double-click Add/Remove Programs. 2 Click on the Windows Setup tab and select Communication in the Components selection box. Click Details. Add/Remove Programs: Windows Setup: Communication 254 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 255
. Installing UPnP in Windows XP Follow the steps below to install the UPnP in Windows XP. 1 Click Start and Control Panel. 2 Double-click Network Connections. P-793H v2 User's Guide 255 - ZyXEL P-793H v2 | User Guide - Page 256
main menu and select Optional Networking Components .... Network Connections 4 The Windows Optional Networking Components Wizard window displays. Select Networking Service in the Components selection box and click Details. Windows Optional Networking Components Wizard 256 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 257
v2. Make sure the computer is connected to a LAN port of the P-793H v2. Turn on your computer and the P-793H v2. Auto-discover Your UPnP-enabled Network Device 1 Click Start and Control Panel. Double-click Network Connections. An icon displays under Internet Gateway. P-793H v2 User's Guide 257 - ZyXEL P-793H v2 | User Guide - Page 258
Chapter 18 Universal Plug-and-Play (UPnP) 2 Right-click the icon and select Properties. Network Connections 3 In the Internet Connection Properties window, click Settings to see the port mappings there were automatically created. Internet Connection Properties 258 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 259
Chapter 18 Universal Plug-and-Play (UPnP) 4 You may edit or delete the port mappings or click Add to manually add port mappings. Internet Connection Properties: Advanced Settings Internet Connection Properties: Advanced Settings: Add 5 When the UPnP-enabled device is disconnected from your - ZyXEL P-793H v2 | User Guide - Page 260
Easy Access With UPnP, you can access the web-based configurator on the P-793H v2 without finding out the IP address of the P-793H v2 first. This comes helpful if you do not know the IP address of the P-793H v2. Follow the steps below to access the web configurator. 1 Click Start and then - ZyXEL P-793H v2 | User Guide - Page 261
Chapter 18 Universal Plug-and-Play (UPnP) 3 Select My Network Places under Other Places. Network Connections 4 An icon with the description for each UPnP-enabled device displays under Local Network. P-793H v2 User's Guide 261 - ZyXEL P-793H v2 | User Guide - Page 262
login screen displays. Network Connections: My Network Places 6 Right-click on the icon for your P-793H v2 and select Properties. A properties window displays with basic information about the P-793H v2. Network Connections: My Network Places: Properties: Example 262 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 263
.1 Overview This chapter shows you how to configure system related settings, such as system time, password, name, the domain name and the inactivity timeout interval. 19.1.1 What You Can Do in and other devices which share resources such as Internet access, printers etc. P-793H v2 User's Guide 263 - ZyXEL P-793H v2 | User Guide - Page 264
such as the system and domain name, inactivity timeout interval and system password. The System Name is for identification purposes. However, because some ISPs name field and enter it as the P-793H v2 System Name. Click Maintenance > System to open the General screen. Figure 116 Maintenance > - ZyXEL P-793H v2 | User Guide - Page 265
each character you type. After you change the password, use the new password to access the P793H v2. Retype to Type the new password again for confirmation. confirm Apply Click this to save your changes. Cancel Click this to restore your previously saved settings. P-793H v2 User's Guide 265 - ZyXEL P-793H v2 | User Guide - Page 266
Manual Select this radio button to enter the time and date manually. If you configure a new time and date, Time Zone and Daylight Saving at the same time, the new time and date you entered has priority and the Time Zone and Daylight Saving settings do not affect it. 266 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 267
date configured manually. When you set Time and Date Setup to Manual, enter service protocol that your time server sends when you turn on the P-793H v2. Not all time servers support number of seconds since 1970/1/1 at 0:0:0. The default, NTP (RFC 1305), is similar to Time 793H v2 User's Guide 267 - ZyXEL P-793H v2 | User Guide - Page 268
zone is one hour ahead of GMT or UTC (GMT+1). Click this to save your changes. Click this to restore your previously saved settings. 268 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 269
of events and/or alerts to have the P-793H v2 log and then display the logs or have the P-793H v2 send them to an administrator (as e-mail) or message about an event that occurred on your P-793H v2. For example, when someone logs in to the P-793H v2, you can set a schedule for how often logs should - ZyXEL P-793H v2 | User Guide - Page 270
all the logs. # This field is a sequential value and is not associated with a specific entry. Time This field displays the time the log was recorded. Message This field states the reason for the log. Source This field lists the source IP address and the port number of the incoming packet - ZyXEL P-793H v2 | User Guide - Page 271
the mail server, the syslog server, when to send logs and what logs to send. To change your P-793H v2's log settings, click Maintenance > Logs > Log Settings. The screen appears as shown. Alerts are e-mailed e-mails being sent. Figure 119 Maintenance > Logs > Log Settings P-793H v2 User's Guide 271 - ZyXEL P-793H v2 | User Guide - Page 272
drop down list box. The log facility allows you to log the messages to different files in the syslog server. Refer to the syslog server manual for more information. Active Log and Alert Log Select the categories of logs that you want to record. 272 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 273
request failed. ret= ??". The "??"are described in the following table. Table 82 SMTP Error Messages -1 means P-793H v2 out of socket -2 means tcp SYN fail -3 means smtp server OK fail -4 means HELO fail -5 means of a log sent by e-mail. • You may edit the subject title. P-793H v2 User's Guide 273 - ZyXEL P-793H v2 | User Guide - Page 274
Firewall Alert From Date: Fri, 07 Apr 2000 10:05:42 From: [email protected] To: [email protected] 1|Apr 7 00 |From:192.168.1.1 To:192.168.1.255 |default policy |forward | 09:54:03 |UDP src port:00520 dest port:00520 | - ZyXEL P-793H v2 | User Guide - Page 275
to allocate memory for the NetBIOS error filter settings. WAN connection is down. A WAN connection is down. You cannot access the network through this interface. P-793H v2 User's Guide 275 - ZyXEL P-793H v2 | User Guide - Page 276
Logs Table 85 Access Control Logs LOG MESSAGE Firewall default policy: [ TCP | UDP | IGMP | ESP access matched the default policy and was blocked or forwarded according to the default policy's setting. when a dynamic firewall session timed out.Default timeout values:ICMP idle timeout (s): 60UDP idle - ZyXEL P-793H v2 | User Guide - Page 277
280. Table 88 ICMP Logs LOG MESSAGE Firewall default policy: ICMP , , < packet: ICMP DESCRIPTION ICMP access matched the default policy and was blocked or forwarded according to NAT table entry. The firewall does not support this kind of ICMP packets or the ICMP packets are - ZyXEL P-793H v2 | User Guide - Page 278
92 Content Filtering Logs LOG MESSAGE DESCRIPTION %s: block keyword The content of a requested web page matched a user defined keyword. %s The system forwarded web content. 278 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 279
by the RADIUS Server. A user was not authenticated by the RADIUS Server. Please check the RADIUS Server. The router logged out a user whose session expired. P-793H v2 User's Guide 279 - ZyXEL P-793H v2 | User Guide - Page 280
unreachable 1 Host unreachable 2 Protocol unreachable 3 Port unreachable 4 A packet that needed fragmentation was dropped because it was set to Don't Fragment (DF) 5 Source route failed 280 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 281
for the Type of Service and Host 8 Echo 0 Echo message 11 Time Exceeded 0 Time to live exceeded in transit 1 Fragment reassembly time exceeded 12 Parameter Problem 0 Pointer indicates the port. The "cat" is the same as the category in the router's logs. P-793H v2 User's Guide 281 - ZyXEL P-793H v2 | User Guide - Page 282
Transform KE Key Exchange ID Identification CER Certificate CER_REQ Certificate Request HASH Hash SIG Signature NONCE Nonce NOTFY Notification DEL Delete VID Vendor ID 282 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 283
firmware to your device. • Use the Configuration screen (Section 21.3 on page 293) to backup and restore device configurations. You can also reset your device settings back to the factory default. • Use the Restart screen (Section 21.4 on page 295) to restart your ZyXEL device. P-793H v2 User - ZyXEL P-793H v2 | User Guide - Page 284
rom-0 file replaces the entire ROM file system, including your P-793H v2 configurations, system-related data (including the default password), the error log and the trace log. *.rom Firmware Ras This is the generic name for the ZyNOS firmware on the P-793H v2. *.bin 284 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 285
off or create a firewall rule to allow access from the WAN). 2 You have disabled the FTP service in the Remote Management screen. 3 The IP you entered in the Secured Client IP field does not match Configuration process is complete, the device automatically restarts. P-793H v2 User's Guide 285 - ZyXEL P-793H v2 | User Guide - Page 286
device. FTP is the preferred method for uploading the firmware and configuration. To use this feature, your computer must device. 3 Press [ENTER] when prompted for a username. 4 Enter your password as requested (the default is "1234"). 5 Enter "bin" to set transfer mode to binary. 793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 287
Firmware File Upload 331 Enter PASS command Password: 230 Logged in ftp> bin 200 Type I OK ftp> put firmware supports the uploading of firmware files To transfer the firmware and the configuration checks, the device records the IP address of idle timeout (default) when name for the firmware is "ras". - ZyXEL P-793H v2 | User Guide - Page 288
The following is an example TFTP command: tftp [-i] host put firmware.bin ras Where "i" specifies binary image transfer mode (use this space and the IP address of your P-793H v2. 3 Press [ENTER] when prompted for a username. 4 Enter your password as requested (the default is "1234"). 5 Enter "bin" - ZyXEL P-793H v2 | User Guide - Page 289
ID and Password to login. Transfer files in either ASCII (plain text format) or in binary mode. Specify the default remote directory (path). Specify the default local directory (path). Backup Configuration Using TFTP The P-793H v2 supports the up/downloading of the firmware and the configuration - ZyXEL P-793H v2 | User Guide - Page 290
the IP address of the P-793H v2. 192.168.1.1 is the P-793H v2's default IP address when shipped. Send/ Fetch Use "Send" to upload the file to the P-793H v2 and "Fetch" to back up the file on your computer. Local File Enter the path and name of the firmware file (*.bin extension) or configuration - ZyXEL P-793H v2 | User Guide - Page 291
to read about configurations that disallow TFTP and FTP over WAN. 21.2 The Firmware Screen Click Maintenance > Tools to open the Firmware screen. Follow the instructions in this screen to upload firmware to your P-793H v2. The upload process uses HTTP (Hypertext Transfer Protocol) and may take up - ZyXEL P-793H v2 | User Guide - Page 292
126 Network Temporarily Disconnected After two minutes, log in again and check your new firmware version in the Status screen. If the upload was not successful, the following screen will appear. Click Return to go back to the Firmware screen. Figure 127 Error Message 292 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 293
FTP/TFTP commands. Click Maintenance > Tools > Configuration. Information related to factory defaults, backup configuration, and restoring configuration appears in this screen, as shown next. before you can upload them. Upload Click this to begin the upload process. P-793H v2 User's Guide 293 - ZyXEL P-793H v2 | User Guide - Page 294
793H v2 automatically restarts in this time causing a temporary network disconnect. In some operating systems, you may see the following icon on your desktop. Figure 130 Network Temporarily Disconnected If you uploaded the default . Figure 131 Configuration Upload Error 294 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 295
Reset Warning Message Figure 133 Reset In Process Message You can also press the RESET button on the rear panel to reset the factory defaults of your P-793H v2. Refer to Section 1.5 on page 41 for more information on the RESET button. 21.4 The Restart Screen System restart allows you to reboot the - ZyXEL P-793H v2 | User Guide - Page 296
Chapter 21 Tools 296 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 297
22 Diagnostic 22.1 Overview These read-only screens display information to help you identify problems with the P-793H v2. 22.1.1 What You Can Do in the Diagnostic Screens • Use the General screen open the screen shown next. Figure 135 Maintenance > Diagnostic > General P-793H v2 User's Guide 297 - ZyXEL P-793H v2 | User Guide - Page 298
line statistics and reset the ADSL line. Click Maintenance > Diagnostic > DSL Line to open the screen shown next. Figure 136 Maintenance > Diagnostic > DSL Line 298 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 299
ATM, a high QoS (Quality of Service) can be guaranteed. The (Segmentation P793H v2 sends an OAM F5 packet to the DSLAM/ATM switch and then returns it (loops it back) to the P-793H v2. The ATM loopback test is useful for troubleshooting problems with the DSLAM and ATM network. P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 300
ADSL modem F/W... Capture All Logs Reset ADSL Line Successfully!" Click this to display information and statistics about your P-793H v2's ATM statistics, DSL connection statistics, DHCP settings, firmware version, WAN and gateway IP address, VPI/VCI and LAN IP address. 300 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 301
the password. Figure 137 Login Screen Password : xxxx 3 Enter the password. The default password is 1234. As you type the password, the screen displays an asterisk "*" for each character you type. 4 After you enter the password, the SMT main menu appears, as shown next. P-793H v2 User's Guide 301 - ZyXEL P-793H v2 | User Guide - Page 302
the password. Figure 138 SMT Main Menu Copyright (c) 1994 - 2009 ZyXEL Communications Corp. P-793H v2 Main default value is ten minutes. If there is no activity for longer than this, your P-793H v2 will automatically log you out. You will then have to telnet into the P-793H v2 793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 303
. 23 System Password Use this menu to change your password. 24 System Maintenance Use this menu for comprehensive system maintenance, from looking at the system status to uploading firmware. You can Rules Mapping Rule 15.2 NAT Server Sets 15.2.x NAT Server Setup P-793H v2 User's Guide 303 - ZyXEL P-793H v2 | User Guide - Page 304
Rule 21.2 Firewall Setup 22 SNMP Configuration 23 System Password 24 System Maintenance 24.1 System Maintenance Status 24.2 System Maintenance - 24.7.1 System Upload Firmware Maintenance - Upload System Firmware 24.7.2 System Maintenance - Upload Set Setup 304 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 305
BAR] to change No to Yes then press [ENTER]. Fields beginning with "Edit" lead to hidden menus and have a default setting of No. Press [SPACE BAR] once to change No to Yes, then press [ENTER] to go to the " main menu prompt and press [ENTER] to exit the SMT interface. P-793H v2 User's Guide 305 - ZyXEL P-793H v2 | User Guide - Page 306
Chapter 23 Introducing the SMT 306 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 307
. Figure 139 Menu 1: General Setup Menu 1 - General Setup System Name= P-793H v2 Location= Contact Person's Name= Domain Name= First DNS Server= 0.0.0.0 Secondary DNS descriptive name for the place where the P-793H v2 is located. You can enter up to 31 characters, or you can leave this field - ZyXEL P-793H v2 | User Guide - Page 308
questions about the P-793H Person's Name v2. You can enter default). Select Yes to configure Menu 1.1: Configure Dynamic DNS discussed next. Select Yes to enable IP-based routing in the P-793H v2 in the P793H v2 for protocols that are not supported by IP- P-793H v2 to router mode in menu 1 or - ZyXEL P-793H v2 | User Guide - Page 309
Wildcard Option Enable Off Line Option Select CustomDNS if you have the Custom DNS service. Enter up to three host names in these fields. Enter your user name. Enter the password assigned to you. Your P-793H v2 supports DYNDNS Wildcard. Press [SPACE BAR] and then [ENTER] to select Yes or No. This - ZyXEL P-793H v2 | User Guide - Page 310
Server Auto Detect IP Address Only select this option when there are one or more NAT routers between the P-793H v2 and the DDNS server. Press [SPACE BAR] to select Yes and then press [ENTER] to have the to save your configuration, or press [ESC] at any time to cancel. 310 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 311
2 to open menu 2. Figure 141 Menu 2: WAN Setup Menu 2 - WAN Setup Service Mode= 2wire Service Type= Server Rate Adaption= Disable Transfer Max Rate(Kbps)= 5696 Transfer Min Rate(Kbps)= = N/A Transfer Max Rate(Kbps)= N/A Transfer Min Rate(Kbps)= N/A Standard Mode= N/A P-793H v2 User's Guide 311 - ZyXEL P-793H v2 | User Guide - Page 312
Service Mode Press [SPACE BAR] to indicate whether the P-793H v2 service mode. DSL Mode Press [SPACE BAR] to select the transfer mode you want to use. PTM (Packet Transfer Mode): The P-793H v2 uses the SHDSL Service Type is Server. Press [SPACE BAR] to let the P-793H v2 your P-793H v2's WAN 793H v2 - ZyXEL P-793H v2 | User Guide - Page 313
as shown below. Figure 142 Menu 2: 2wire-2line Service Mode Menu 2 - WAN Setup Service Mode= 2wire-2line Service Type= N/A Rate Adaption= Disable Rate Adaption= Enable Transfer Tolerance = 0 Recovery Interval(sec) = 0 ICMP Timeout(sec) = 0 Traffic Redirect = No P-793H v2 User's Guide 313 - ZyXEL P-793H v2 | User Guide - Page 314
connection. Service Type The P-793H v2 automatically to let the P-793H v2 adjust the speed 793H v2 sends and receives information. If you enable Rate Adaption, the P-793H v2 793H v2 sends and receives information. If you enable Rate Adaption, the P-793H v2 your P-793H v2's WAN 793H v2 793H v2 793H v2 - ZyXEL P-793H v2 | User Guide - Page 315
busy or congested. Traffic Redirect This feature is disabled in 2wire-2line service mode. When you have completed this menu, press [ENTER] at the notation. The P-793H v2 automatically forwards traffic to this IP address if the P793H v2's Internet connection terminates P-793H v2 User's Guide 315 - ZyXEL P-793H v2 | User Guide - Page 316
Chapter 25 WAN Setup 316 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 317
145 Menu 3.1: LAN Port Filter Setup Menu 3.1 - LAN Port Filter Setup Input Filter Sets: protocol filters= device filters= Output Filter Sets: protocol filters= device filters= P-793H v2 User's Guide 317 - ZyXEL P-793H v2 | User Guide - Page 318
instructions in the next table to configure these fields. Table 114 Menu 3.2: TCP/IP and DHCP Ethernet Setup FIELD DESCRIPTION DHCP Setup DHCP This field enables/disables the DHCP server. If set to Server, your P-793H v2 the size, or count of the IP address pool. 318 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 319
[SPACE BAR] and then [ENTER] to enable IP Multicasting or select None (default) to disable it. Edit IP Alias The P-793H v2 supports three logical LAN interfaces via its single physical Ethernet interface with the P-793H v2 itself as the gateway for each LAN network. Press [SPACE BAR] to select - ZyXEL P-793H v2 | User Guide - Page 320
= N/A Outgoing protocol filters= N/A Use the instructions in the following table to configure IP alias 793H v2. When you have completed this menu, press [ENTER] at the prompt [Press ENTER to Confirm...] to save your configuration, or press [ESC] at any time to cancel. 320 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 321
from your ISP along with the instructions in this chapter to set up your P-793H v2 to access the Internet. Contact your Rate (SCR)= 0 Maximum Burst Size (MBS)= 0 My Login= N/A My Password= N/A ENET ENCAP Gateway= 0.0.0.0 IP Address Assignment= Static IP Address= 0.0.0.0 P-793H v2 User's Guide 321 - ZyXEL P-793H v2 | User Guide - Page 322
your password again for confirmation. ENET ENCAP (ENET ENCAP only) Enter the gateway IP address provided by your ISP. Gateway Idle Timeout (PPPoE and PPPoA only) Specify an idle time-out. The default setting IP address assignment is selected in the previous field). 322 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 323
if you have a single public IP address. SUA (Single User Account) is a subset of NAT that supports two types of mapping: Many-to-One and Server. Choose Full Feature if you have multiple public IP addresses save your configuration, or press [ESC] at any time to cancel. P-793H v2 User's Guide 323 - ZyXEL P-793H v2 | User Guide - Page 324
Chapter 27 Internet Access Setup 324 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 325
, SUA) 2. ________ 3. ________ 4. ________ 5. ________ 6. ________ 7. ________ 8. ChangeMe (BACKUP_ISP, SUA) Enter Node # to Edit: Type the node number you want to configure and press [ENTER]. P-793H v2 User's Guide 325 - ZyXEL P-793H v2 | User Guide - Page 326
password provided by your ISP. Retype to Confirm Enter the password again. Authen This field appears if you select PPPoE in the Encapsulation field. Select what type of authentication your ISP uses. Select CHAP/PAP if you want the P-793H v2 to support both choices. 326 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 327
you want the ZyXEL Device to use for IP-based routing in the P-793H v2 too. See Menu 1: protocols that are not supported by IP-based routing bridging in the P-793H v2 too. See Menu outgoing call time of the P-793H v2 within a certain period of time you want the P-793H v2 to automatically connect to - ZyXEL P-793H v2 | User Guide - Page 328
Rem IP Addr Enter the IP address of the remote (peer) computer to which the P793H v2 connects. Rem Subnet Mask Enter the subnet mask of the remote (peer) computer to which the P-793H v2 connects. My WAN Addr Enter the fixed (static) IP address provided by your ISP. 328 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 329
to other hosts through RIP broadcasts. Usually, you should keep the default value. Use this field to control how much routing information the P-793H v2 sends and receives through this connection. None - The P-793H v2 does not send or receive routing information through this connection. Both - ZyXEL P-793H v2 | User Guide - Page 330
to every computer). None - The P-793H v2 does not support multicasting. IGMP-v1 - The P-793H v2 supports IGMP version 1. IGMP-v2 - The P-793H v2 supports IGMP version 2. Multicasting can improve overall on defining the filters, please refer to Chapter 32 on 330 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 331
one, separate each one with a comma ( , ). device filters Enter up to four filter sets. If you enter more than one, separate each one with a comma ( , ). P-793H v2 User's Guide 331 - ZyXEL P-793H v2 | User Guide - Page 332
(long-term) that can be transmitted. Type the SCR, which must be less than the PCR. Note that system default is 0 cells/sec. Maximum Burst Size (MBS) Maximum Burst Size (MBS) refers to the maximum number of cells to menu 11.1, or press [ESC] at any time to cancel. 332 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 333
this menu. Table 121 Menu 11.8: Advance Setup Options FIELD DESCRIPTION PPPoE passthrough In addition to the ZyXEL Device's built-in PPPoE client, you can enable PPPoE Passthrough to allow up to ten hosts on return to menu 11.1, or press [ESC] at any time to cancel. P-793H v2 User's Guide 333 - ZyXEL P-793H v2 | User Guide - Page 334
Chapter 28 Remote Node Setup 334 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 335
Route Setup 1. ________ 2. ________ 3. ________ 4. ________ 5. ________ 6. ________ 7. ________ 8. ________ 9. ________ 10. ________ 11. ________ 12. ________ 13. ________ 14. ________ 15. ________ 16. ________ P-793H v2 User's Guide 335 - ZyXEL P-793H v2 | User Guide - Page 336
this route's priority among the P793H v2's routes (see Section 6.6 on page 96). The smaller the number, the higher priority the route has. Private This parameter determines if the P-793H v2 will include the route to to save your configuration, or press [ESC] to cancel. 336 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 337
Enter the IP address of the gateway. The gateway is an immediate neighbor of your P-793H v2 that will forward the packet to the destination. On the LAN, the gateway must be a router on Press ENTER to Confirm..." to save your configuration, or press [ESC] to cancel. P-793H v2 User's Guide 337 - ZyXEL P-793H v2 | User Guide - Page 338
Chapter 29 Static Route Setup 338 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 339
342 for a detailed description of the NAT set for SUA. The P-793H v2 also supports Full Feature NAT to map multiple global IP addresses to multiple private LAN IP your P-793H v2. Note: Choose Full Feature if you have multiple public WAN IP addresses for your P793H v2. P-793H v2 User's Guide 339 - ZyXEL P-793H v2 | User Guide - Page 340
(PCR)= 0 Sustain Cell Rate (SCR)= 0 Maximum Burst Size (MBS)= 0 My Login= N/A My Password= N/A ENET ENCAP Gateway= 0.0.0.0 IP Address Assignment= Static IP Address= 0.0.0.0 Network Address Translation= SUA Only menu. 2 Enter 1 to open Menu 11.1 - Remote Node Profile. 340 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 341
Section 30.2.1 on page 342). Choose SUA Only if you have just one public WAN IP address for your P793H v2. 30.2 NAT Setup Use the address mapping sets menus and submenus to create the mapping table used to assign , the SMT will use the pre-configured Set 255 (read only). P-793H v2 User's Guide 341 - ZyXEL P-793H v2 | User Guide - Page 342
Mapping Sets Enter 1 to bring up Menu 15.1.1 - Address Mapping Sets. Figure 162 Menu 15.1: Address Mapping Sets Menu 15.1 - Address Mapping Sets 1. ACL Default Set 2. 3. 4. 5. 6. 7. 8. 255. SUA (read only) Select the address mapping set you want to modify. The fields in address 255 are used for SUA - ZyXEL P-793H v2 | User Guide - Page 343
the screen. Figure 163 Menu 15.1.1: Address Mapping Rules Menu 15.1.1 - Address Mapping Rules Set Name= ACL Default Set Idx Local Start IP Local End IP Global Start IP Global End IP Type 1. 2. 3. 4. ..." to save your configuration, or press [ESC] to cancel. P-793H v2 User's Guide 343 - ZyXEL P-793H v2 | User Guide - Page 344
rules in the order that you specify. When a rule matches the current packet, the P-793H v2 takes the corresponding action and the remaining rules are ignored. If there are any empty are enabled depending on the Type. Start Enter the starting local IP address (ILA). 344 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 345
Confirm..." to save your configuration, or press [ESC] to cancel. 30.3 Configuring a Server behind NAT Note: If you do not assign a Default Server IP address, the P-793H v2 discards all packets received for ports that are not specified here or in the remote management setup. Follow these steps to - ZyXEL P-793H v2 | User Guide - Page 346
Default Server. The following table describes the labels in this menu. Table 127 Menu 15.2: NAT Server Setup FIELD DESCRIPTION Rule This field is a sequential value, and it is not associated with a specific rule. The sequence is important, however. The P-793H v2 . 346 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 347
(PCR)= 0 Sustain Cell Rate (SCR)= 0 Maximum Burst Size (MBS)= 0 My Login= N/A My Password= N/A ENET ENCAP Gateway= 0.0.0.0 IP Address Assignment= Static IP Address= 0.0.0.0 Network Address Translation= SUA Only 11.3 is specifically pre-configured to handle this case. P-793H v2 User's Guide 347 - ZyXEL P-793H v2 | User Guide - Page 348
above (use the convenient pre-configured SUA Only set) and also go to menu 15.2.1 to specify the Default Server behind the NAT as shown in the next figure. Figure 170 Menu 15.2: Specifying an Inside Server Menu , two bi-directional and two unidirectional as follows. 348 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 349
Start IP as 10.132.50.1 (our first IGA). (See Figure 173 on page 351). 6 Repeat the previous step for rules 2 to 4 as outlined above. P-793H v2 User's Guide 349 - ZyXEL P-793H v2 | User Guide - Page 350
= N/A NAT= SUA Only Address Mapping Set= N/A Metric= 2 Private= No RIP Direction= None Version= RIP-1 Multicast= None IP Policies= Bridge Options: Ethernet Addr Timeout(min)= N/A 350 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 351
IGA3 to map to our web server and mail server on the LAN. 1 Enter 15 from the main menu. 2 Enter 2 to go to menu 15.2. P-793H v2 User's Guide 351 - ZyXEL P-793H v2 | User Guide - Page 352
793H v2 with multiple WAN ports) configure the menu as shown in Figure 175 on page 352. Figure 175 Example 3: Menu 15.2 Menu 15.2 - NAT Server Setup Rule Start Port No. End Port No. IP Address 1. Default Default Some applications do not support NAT Mapping using TCP or 793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 353
IP Global Start IP Global End IP Type 1. 192.168.1.10 192.168.1.12 10.132.50.1 10.132.50.3 M-M N+ 2. 3. 4. 5. 6. 7. 8. 9. 10. Action= None Select Rule= N/A P-793H v2 User's Guide 353 - ZyXEL P-793H v2 | User Guide - Page 354
Chapter 30 354 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 355
this menu to activate or deactivate the firewall. 31.1 Using P-793H v2 SMT Menus From the main menu enter 21 to go to Menu be active to protect against Denial of Service (DoS) attacks. Use the web configurator to configure firewall rules. Use the web configurator or SMT P-793H v2 User's Guide 355 - ZyXEL P-793H v2 | User Guide - Page 356
- Firewall Setup The firewall protects against Denial of Service (DoS) attacks when it is active. The default Policy sets 1. allow all sessions originating from the LAN : Yes LAN-to-WAN Set Name: ACL Default Set WAN-to-LAN Set Name: ACL Default Set Please configure the Firewall function through Web - ZyXEL P-793H v2 | User Guide - Page 357
how to create and apply filters. 32.1 Introduction to Filters Your P-793H v2 uses filters to decide whether to allow passage of a data packet Figure 180 Outgoing Packet Filtering Process For incoming packets, your P-793H v2 applies data filters only. Packets are processed depending upon whether a - ZyXEL P-793H v2 | User Guide - Page 358
for NetBIOS, into a single set and give it a descriptive name. The P-793H v2 allows you to configure up to twelve filter sets with six rules in each set a maximum of 24 rules active for a single port. Sets of factory default filter rules have been configured in menu 21 to prevent NetBIOS traffic from - ZyXEL P-793H v2 | User Guide - Page 359
block multiple types of packets. With each filter set having up to six rules, you can have a maximum of 24 rules active for a single port. P-793H v2 User's Guide 359 - ZyXEL P-793H v2 | User Guide - Page 360
Chapter 32 Filter Configuration 32.2 Configuring a Filter Set The P-793H v2 includes filtering for NetBIOS over TCP/IP packets by default. To configure another filter set, follow the procedure below. 1 Press ENTER to confirm] to open Menu 21.1.1 Filter Rules Summary. 360 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 361
Not Matched. "F" means to forward the packet immediately and skip checking the remaining rules. "D" means to drop the packet. "N" means to check the next rule. P-793H v2 User's Guide 361 - ZyXEL P-793H v2 | User Guide - Page 362
device filter sets. If you include a protocol filter set in a device filter field or vice versa, the P-793H v2 will warn you and will not allow you to save. 32.2.2 Configuring a TCP/IP Filter Rule This section shows upper layer protocol, for example, UDP and TCP headers. 362 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 363
apply to the destination port in the packet against the value given in Destination: Port #. Source Options are None, Equal, Not Equal, Less and Greater. P-793H v2 User's Guide 363 - ZyXEL P-793H v2 | User Guide - Page 364
ENTER to Confirm" to save your configuration, or press [ESC] to cancel. This data will now be displayed on Menu 21.1.1 - Filter Rules Summary. 364 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 365
Chapter 32 Filter Configuration The following figure illustrates the logic flow of an IP filter. Figure 186 Executing an IP Filter P-793H v2 User's Guide 365 - ZyXEL P-793H v2 | User Guide - Page 366
of the packet to check with the Offset (from 0) and the Length fields, both in bytes. The P-793H v2 applies the Mask (bit-wise ANDing) to the data portion before comparing the result against the Value to determine wish to compare. The range for this field is 0 to 8. 366 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 367
now be displayed on Menu 21.1.1 - Filter Rules Summary. 32.3 Example Filter Let's look at an example to block outside users from accessing the P-793H v2 via telnet. Please see our included disk for more example filters. Figure 188 Telnet Filter Example 1 Enter 21 from the main menu to open Menu - ZyXEL P-793H v2 | User Guide - Page 368
Mask= Port #= Port # Comp= None TCP Estab= No More= No Log= None Action Matched= Drop Action Not Matched= Forward The port number for the telnet service (TCP protocol) is 23. See RFC 1060 for port numbers of well-known services. 368 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 369
rules act on the IP packets. Generic and TCP/IP filter rules are discussed in more detail in the next section. When NAT (Network Address P-793H v2 User's Guide 369 - ZyXEL P-793H v2 | User Guide - Page 370
applied to the raw packets that appear on the wire. They are applied at the point when the P-793H v2 is receiving and sending the packets; in other words the interface. The interface can be an Ethernet port (from twelve) by entering their numbers separated by commas, for 370 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 371
cascade up to four filter sets by entering their numbers separated by commas. The P-793H v2 already has filters to prevent NetBIOS traffic from triggering calls, and block incoming telnet, filters= device filters= Call Filter Sets: protocol filters= device filters= P-793H v2 User's Guide 371 - ZyXEL P-793H v2 | User Guide - Page 372
Chapter 32 Filter Configuration 372 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 373
menu. Table 132 Menu 23: System Password FIELD DESCRIPTION Old Password Enter the current administrator password for the P-793H v2. New Password Enter the new administrator password for the P-793H v2. Retype to confirm Enter the new administrator password again. P-793H v2 User's Guide 373 - ZyXEL P-793H v2 | User Guide - Page 374
Chapter 33 System Password 374 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 375
and the status4 and statistics of the ports, as shown in the next figure. System Status is a tool that can be used to mon23itor your P-793H v2. Specifically, it gives you information on your system firmware version, number of packets sent and number of packets received. P-793H v2 User's Guide 375 - ZyXEL P-793H v2 | User Guide - Page 376
a call) if you're using PPPoE encapsulation. It displays N/A if the port is not connected. TxPkts This is the number of packets transmitted from the P-793H v2 to the remote node. RxPkts This is the number of packets received by the P-793H v2 from the remote node. P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 377
Information and Console Port Speed: 1 Enter 24 to go to Menu 24 - System Maintenance. 2 Enter 2 to open Menu 24.2 - System Information and Console Port Speed. P-793H v2 User's Guide 377 - ZyXEL P-793H v2 | User Guide - Page 378
to the routing protocol used. Refers to the version of ZyXEL's Network Operating System software. Refers to the SHDSL chipset inside the P-793H v2. This refers to the operational protocol the P-793H v2 and DSLAM (Digital Subscriber Line Access Multiplexer) are using. 378 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 379
P793H v2. IP Address This is the IP address of the P-793H v2 in dotted decimal notation. IP Mask This shows the IP mask of the P-793H v2. DHCP This field shows the DHCP setting of the P-793H v2 Your P-793H v2 supports 9600 (default), 19200, 793H v2. The first is the error logs and trace records - ZyXEL P-793H v2 | User Guide - Page 380
Chapter 34 System Information & Diagnosis After the P-793H v2 finishes displaying, you will have the option to clear the error log. MPOA Link Down netMakeChannDial: err=-3001 Last errorlog repeat 18 Times SMT Password pass SMT Session Begin netMakeChannDial: err=-3001 Last errorlog repeat 216 Times - ZyXEL P-793H v2 | User Guide - Page 381
34.4.2 Syslog Logging The P-793H v2 uses the syslog facility to log the CDR (Call Detail Record) and system messages to a 793H v2 sends five types of syslog messages. Some examples (not all P793H v2 specific) of these syslog messages with their message formats are shown next: P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 382
Trigger: Protocol=1, Data=4500002c1b0140001f06b50ec0a86614ca849a7b0427001700195b3e00000000 600220008cd40000020405b4 Jul 19 11:29:06 192.168.102.2 ZyXEL: Packet Trigger: Protocol=1, Data=45000028240140001f06ac12c0a86614ca849a7b0427001700195b451d143013 5004000077600000 382 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 383
:52 202.132.155.97 ZyXEL: GEN[ffffffffffff0080] }S05>R01mF Mar 03 12:00:57 202.132.155.97 ZyXEL: GEN[00a0c5f502010080] }S05>R01mF Mar 03 12:01:06 202.132.155.97 ZyXEL: IP[Src=192.168.2.33 Dst=202.132.155.93 TCP spo=01170 dpo=00021]}S04>R01mF P-793H v2 User's Guide 383 - ZyXEL P-793H v2 | User Guide - Page 384
ZyXEL: ppp:LCP Closing Jul 19 11:42:49 192.168.102.2 ZyXEL: ppp:IPCP Closing Jul 19 11:42:54 192.168.102.2 ZyXEL 80 :137 |UDP|default permit:|B 08-01-200011:48:41Local1.Notice192.168.10 default permit:|B 34.5 Diagnostic The diagnostic facility allows you to test the different aspects of your P-793H v2 - ZyXEL P-793H v2 | User Guide - Page 385
table describes the labels in this screen. Table 136 Menu 24.4: System Maintenance - Diagnostic FIELD DESCRIPTION Reset xDSL Enter 1 to reset the DSL connection on the WAN port. Ping Host Enter 12 to ping any you would like to perform or press [ESC] to cancel. P-793H v2 User's Guide 385 - ZyXEL P-793H v2 | User Guide - Page 386
Chapter 34 System Information & Diagnosis 386 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 387
if you want to return the P-793H v2 to the original default settings. The firmware determines the P-793H v2's available features and functionality. You can download new firmware releases from your nearest ZyXEL FTP site to use to upgrade your P793H v2's performance. 35.2 Filename Conventions The - ZyXEL P-793H v2 | User Guide - Page 388
replaces the entire ROM file system, including your P793H v2 configurations, system-related data (including the default password), the error log and the trace log. *.rom Firmware Ras This is the generic name for the ZyNOS firmware on the P-793H v2. *.bin 35.3 Backup Configuration Note: The - ZyXEL P-793H v2 | User Guide - Page 389
please see your user manual. 35.3.2 Using the FTP Command from the Command Line 1 Launch the FTP client on your computer. 2 Enter "open", followed by a space and the IP address of your P-793H v2. 3 Press [ENTER] when prompted for a username. 4 Enter your password as requested (the default is "1234 - ZyXEL P-793H v2 | User Guide - Page 390
Password to login. Transfer Type Transfer files in either ASCII (plain text format) or in binary mode. Configuration and firmware files should be transferred in binary mode Initial Remote Directory Specify the default 2 You have disabled Telnet service in menu 24.11. 390 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 391
TFTP The P-793H v2 supports the up/downloading of the firmware and the the P-793H v2 and log in. Because TFTP does not have any security checks, the P-793H v2 records the IP default) when the file transfer is complete. 4 Launch the TFTP client on your computer and connect to the P-793H v2 - ZyXEL P-793H v2 | User Guide - Page 392
793H v2. 192.168.1.1 is the P-793H v2's default IP address when shipped. Send/Fetch Use "Send" to upload the file to the P-793H v2 and "Fetch" to back up the file on your computer. Local File Enter the path and name of the firmware . Do you want to continue (y/n): 392 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 393
Chapter 35 Firmware and Configuration File Maintenance 2 The following screen indicates that the stored on disk. FTP is the preferred method for restoring your current computer configuration to your P-793H v2 since FTP is faster. Please note that you must wait for the system to automatically restart - ZyXEL P-793H v2 | User Guide - Page 394
menu to restore using TFTP), please see your user manual. 1 Launch the FTP client on your computer. 2 Enter "open", followed by a space and the IP address of your P-793H v2. 3 Press [ENTER] when prompted for a username. 4 Enter your password as requested (the default is "1234"). 5 Enter "bin" to set - ZyXEL P-793H v2 | User Guide - Page 395
Chapter 35 Firmware and Configuration File Maintenance 8 Enter "quit" to exit the ftp prompt. The P-793H v2 will automatically restart after a successful restore process. 35.4.2 Restore : Starting Xmodem Download Screen Starting XMODEM download (CRC mode) ...CCCCCCCCC P-793H v2 User's Guide 395 - ZyXEL P-793H v2 | User Guide - Page 396
screen. Press any key to restart the P-793H v2 and return to the SMT menu. Figure 215 instructions in Menu 24.7.2 - System Maintenance Upload System Configuration File (for console port). Do not interrupt the file transfer process as this may PERMANENTLY DAMAGE YOUR P-793H v2. 35.5.1 Firmware - ZyXEL P-793H v2 | User Guide - Page 397
Then type "root" and SMT password as requested. 3. Type "put firmware using TFTP (note that you must remain on this menu to upload system firmware using TFTP), please see your manual. To upload the firmware and the configuration file, follow these examples P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 398
. 4 Enter your password as requested (the default is "1234"). 5 Enter "bin" to set transfer mode to binary. 6 Use "put" to transfer files from the computer to the P-793H v2, for example, "put firmware.bin ras" transfers the firmware on your computer (firmware.bin) to the P-793H v2 and renames it - ZyXEL P-793H v2 | User Guide - Page 399
both telnet and TFTP clients. To transfer the firmware and the configuration file, follow the procedure shown next. 1 Use telnet from your computer to connect to the P-793H v2 and log in. Because TFTP does not have any security checks, the P-793H v2 records the IP address of the telnet client and - ZyXEL P-793H v2 | User Guide - Page 400
firmware to your P-793H v2. However, in the event of your network being down, uploading files is only possible with a direct connection to your P-793H v2 Upload Firmware to display Menu 24.7.1 - System Maintenance - Upload System Firmware, and then follow the instructions as 793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 401
when it is restarted; please adjust your terminal's speed accordingly. The password may change (menu 23), also. 3. When uploading the DEFAULT configuration file, the console port speed will be reset to 9600 bps and the password to "1234". Do You Wish To Proceed:(Y/N) P-793H v2 User's Guide 401 - ZyXEL P-793H v2 | User Guide - Page 402
Chapter 35 Firmware and Configuration File Maintenance 2 After the "Starting Xmodem upload" message other serial communications programs should be similar. 3 Enter "atgo" to restart the P-793H v2. 35.5.11 Example Xmodem Configuration Upload Using HyperTerminal Click Transfer, then Send File to - ZyXEL P-793H v2 | User Guide - Page 403
Interpreter (CI) is a part of the main router firmware. The CI provides much of the same functionality as the console connection. See the included disk or zyxel.com for more detailed information on CI commands 6. Restore Configuration 7. Upload Firmware 8. Command Interpreter Mode 9. Call - ZyXEL P-793H v2 | User Guide - Page 404
Figure 224 Valid Commands Copyright (c) 1994 - 2006 ZyXEL Communications Corp. P-793H> ? Valid commands are: sys exit device ether wan poe xdsl aux config ip ipsec ppp bridge hdap bm lan P-793H> 36.2 Call Control Support The P-793H v2 provides a call control function for budget - ZyXEL P-793H v2 | User Guide - Page 405
outgoing calls to that remote node will be blocked. After each period, the total budget is reset. The default for the total budget is 0 minutes and the period is 0 hours, meaning no budget control. You that 5 minutes out of a total allocation of 10 minutes have lapsed. P-793H v2 User's Guide 405 - ZyXEL P-793H v2 | User Guide - Page 406
Date Setting The P-793H v2's Real Time Chip (RTC) keeps track of the time and date. There is also a software mechanism to set the time manually or get the current Upload Firmware 8. Command Interpreter Mode 9. Call Control 10. Time and Date Setting 11. Remote Management 406 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 407
time service protocol that your timeserver uses. Not all time servers support all the total number of seconds since 1970/1/1 at 0:0:0. The default, NTP (RFC-1305), is similar to Time (RFC- enter the new time and new date manually. Enter the IP address or domain name 793H v2 User's Guide 407 - ZyXEL P-793H v2 | User Guide - Page 408
this menu, press [ENTER] at the message "Press ENTER to Confirm or ESC to Cancel" to save your configuration, or press [ESC] to cancel. 408 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 409
LAN only, WAN only, ALL or Disable. Secured Client The default 0.0.0.0 allows any client to use this service to remotely IP manage the P-793H v2. Enter an IP address to restrict access to a client with menu 11.5 (WAN) is applied to block a Telnet, FTP or Web service. P-793H v2 User's Guide 409 - ZyXEL P-793H v2 | User Guide - Page 410
You have disabled that service in menu 24.11. 3 The IP address in the Secure Client IP field (menu 24.11) does not match the client IP address. If it does not match, the P-793H v2 will disconnect the session one time. 6 There is a firewall rule that blocks it. 410 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 411
record a television program in a VCR or TiVo. 37.2 Schedule Setup This menu is only applicable if your Internet connection uses PPPoE encapsulation. Use this menu to look at the schedule sets in the P-793H v2 Enter Schedule Set Number to Configure= 0 Edit Name= N/A P-793H v2 User's Guide 411 - ZyXEL P-793H v2 | User Guide - Page 412
Internet connection uses PPPoE encapsulation. Use this menu to configure the schedule sets in the P-793H v2. To open this menu, enter the number of the schedule set in the Enter Schedule Saturday= N/A Start Time(hh:mm)= 00 : 00 Duration(hh:mm)= 00 : 00 Action= Forced On 412 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 413
-Demand means that this schedule permits a demand call on the line. Disable Dial-On-Demand means that this schedule prevents a demand call on the line. P-793H v2 User's Guide 413 - ZyXEL P-793H v2 | User Guide - Page 414
Chapter 37 Schedule Setup 414 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 415
CHAPTER 38 Troubleshooting This chapter offers some suggestions to solve problems you might encounter. The potential problems are divided into the following categories. • Power, Hardware Connections, and LEDs • P-793H v2 Access and Login • Internet Access • Network Connections 38.1 Power, Hardware - ZyXEL P-793H v2 | User Guide - Page 416
Chapter 38 Troubleshooting 3 Inspect your cables for damage. Contact the vendor to replace any damaged cables. 4 Turn the P-793H v2 off and on. 5 If the problem continues, contact the vendor. 38.2 P-793H v2 Access and Login I forgot the IP address for the P-793H v2. 1 The default IP address is - ZyXEL P-793H v2 | User Guide - Page 417
, and try to access the P-793H v2 with the default IP address. See Section 1.5 on page 41. 5 If the problem continues, contact the network administrator or vendor, or try one of the advanced suggestions. Advanced Suggestions • Try to access the P-793H v2 using another service, such as Telnet. If you - ZyXEL P-793H v2 | User Guide - Page 418
all the cables from your device, and follow the directions in the Quick Start Guide again. 4 If the problem continues, contact your ISP. I cannot access the Internet anymore. I had access to the Internet (with the P793H v2), but my Internet connection is not available anymore. 1 Check the hardware - ZyXEL P-793H v2 | User Guide - Page 419
problem continues, contact your ISP. The Internet connection is slow or intermittent. Chapter 38 Troubleshooting 1 There might be a lot of traffic on the network. Look at the LEDs, and check Section 1.4 on page 40. If the P-793H v2 1 and connection 2 respectively. P-793H v2 User's Guide 419 - ZyXEL P-793H v2 | User Guide - Page 420
38 Troubleshooting • If the INTERNET LED lights red, the P-793H v2 attempted to become IP connected but failed. The reason might be no DHCP response, no PPPoE response, PPPoE authentication failed, or no IP address from IPCP. Please check if you have entered the correct ISP account and password when - ZyXEL P-793H v2 | User Guide - Page 421
Table 145 Device Default IP Address Default Subnet Mask Default Password 192.168.1.1 255.255.255.0 (24 bits) user: "user" DHCP Pool Dimensions (W x D x H) Power Specification G.SHDSL Port administrator: "1234 ) 0º C ~ 40º C -20º ~ 60º C 20% ~ 90% RH 20% ~ 95% RH P-793H v2 User's Guide 421 - ZyXEL P-793H v2 | User Guide - Page 422
Appendix A Product Specifications Table 146 Firmware Routing/Bridge Support IP (RFC 791) routing is supported. TCP, UDP, ICMP, IGMP v1 and v2, ARP, RIP v1, RIP v2 Transparent bridging (IEEE 802.1D) G.SHDSL PPP BCP (RFC 3185) support Connection with symmetric speed up to 11.4 Mbps in either ATM - ZyXEL P-793H v2 | User Guide - Page 423
II support TFTP & FTP firmware upgrade and configuration backup VPN TR-069(HTTPS) IPSec VPN support 10 VPN tunnels IKE/ Manual Key DES/3DES/AES Encryption (HW DES) MD5/ SHA1 Authentication FQDN NETBIOS pass-through for IPSec IPSec VPN keep-alive IPSec NAT Traversal P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 424
Appendix A Product Specifications Table 146 Firmware (continued) Diagnostics Capabilities (for the following circuitry) FLASH memory SDSL circuitry RAM Others LAN port DNS Proxy UNIX syslog 424 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 425
feature to have the P-793H v2 assign IP addresses, an IP default gateway and DNS servers to computers on your network. With Dynamic DNS (Domain Name System) support, you can use a fixed URL, www.zyxel.com for example, with a dynamic IP address. You must register for this service with a Dynamic DNS - ZyXEL P-793H v2 | User Guide - Page 426
Table 147 Firmware Features FEATURE DESCRIPTION Content Filter The P-793H v2 blocks or allows service (HTTP or FTP traffic for example) from a computer on a network (LAN or WAN for example) can access the P-793H v2. Figure 232 Y-Cable Configuration DSL 1 DSL 2 426 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 427
APPENDIX B Wall-mounting Instructions Do the following to hang your P-793H v2 on a wall. Note: See 793H v2 with the connection cables. 5 Align the holes on the back of the P-793H v2 with the screws on the wall. Hang the P-793H v2 on the screws. Figure 233 Wall-mounting Example P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 428
Appendix B Wall-mounting Instructions 428 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 429
systems. After the appropriate TCP/IP components are installed, configure the TCP/IP settings in order to "communicate" with your network. If you manually assign IP information instead of using dynamic assignment, make sure that your computers have IP addresses that place them in the same subnet as - ZyXEL P-793H v2 | User Guide - Page 430
your network adapter and then click OK. If you need TCP/IP: 1 In the Network window, click Add. 2 Select Protocol and then click Add. 430 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 431
IP address and type your information into the IP Address and Subnet Mask fields. Figure 235 Windows 95/98/Me: TCP/IP Properties: IP Address P-793H v2 User's Guide 431 - ZyXEL P-793H v2 | User Guide - Page 432
6 Click OK to close the Network window. Insert the Windows CD if prompted. 7 Turn on your P-793H v2 and restart your computer when prompted. Verifying Settings 1 Click Start and then Run. 2 In the Run see your computer's IP address, subnet mask and default gateway. 432 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 433
Setting up Your Computer's IP Address Windows 2000/NT/XP The following example figures use the default Windows XP GUI theme. 1 Click start (Start in Windows 2000/NT), Settings, Control Panel and Dialup Connections in Windows 2000/NT). Figure 238 Windows XP: Control Panel P-793H v2 User's Guide 433 - ZyXEL P-793H v2 | User Guide - Page 434
click Properties. Figure 240 Windows XP: Local Area Connection Properties 5 The Internet Protocol TCP/IP Properties window opens (the General tab in Windows XP). 434 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 435
address of the default gateway in Gateway. To manually configure a default metric (the number of transmission hops), clear the Automatic metric check box and type a metric in Metric. • Click Add. • Repeat the previous three steps for each default gateway you want to add. P-793H v2 User's Guide 435 - ZyXEL P-793H v2 | User Guide - Page 436
server IP address(es), click Use the following DNS server addresses, and type them in the Preferred DNS server and Alternate DNS server fields. 436 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 437
Command Prompt window, type "ipconfig" and then press [ENTER]. You can also open Network Connections, right-click a network connection, click Status and then click the Support tab. Windows Vista This section shows screens from Windows Vista Enterprise Version 6.0. P-793H v2 User's Guide 437 - ZyXEL P-793H v2 | User Guide - Page 438
Panel, double-click Network and Internet. Figure 245 Windows Vista: Control Panel 3 Click Network and Sharing Center. Figure 246 Windows Vista: Network And Internet 438 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 439
: During this procedure, click Continue whenever Windows displays a screen saying that it needs your permission to continue. Figure 248 Windows Vista: Network and Sharing Center P-793H v2 User's Guide 439 - ZyXEL P-793H v2 | User Guide - Page 440
an IP address automatically. • If you have a static IP address click Use the following IP address and fill in the IP address, Subnet mask, and Default gateway fields. 440 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 441
address of the default gateway in Gateway. To manually configure a default metric (the number of transmission hops), clear the Automatic metric check box and type a metric in Metric. • Click Add. • Repeat the previous three steps for each default gateway you want to add. P-793H v2 User's Guide 441 - ZyXEL P-793H v2 | User Guide - Page 442
server IP address(es), click Use the following DNS server addresses, and type them in the Preferred DNS server and Alternate DNS server fields. 442 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 443
Area Connection Properties window. 12 Close the Network Connections window. 13 Turn on your P-793H v2 and restart your computer (if prompted). Verifying Settings 1 Click Start, All Programs, -click a network connection, click Status and then click the Support tab. P-793H v2 User's Guide 443 - ZyXEL P-793H v2 | User Guide - Page 444
Appendix C Setting up Your Computer's IP Address Macintosh OS 8/9 1 Click the Apple menu, Control Panel and double-click TCP/IP to open the TCP/ IP Control Panel. Figure 253 Macintosh OS 8/9: Apple Menu 444 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 445
statically assigned settings, do the following: • From the Configure box, select Manually. • Type your IP address in the IP Address box. • Type 793H v2 and restart your computer (if prompted). Verifying Settings Check your TCP/IP properties in the TCP/IP Control Panel window. P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 446
tab. 3 For dynamically assigned settings, select Using DHCP from the Configure list. Figure 256 Macintosh OS X: Network 4 For statically assigned settings, do the following: 446 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 447
• From the Configure box, select Manually. • Type your IP address in the IP Address box. • Type your subnet mask in the Subnet mask box. • Type the IP address of your P-793H v2 in the Router address box. . Figure 257 Red Hat 9.0: KDE: Network Configuration: Devices P-793H v2 User's Guide 447 - ZyXEL P-793H v2 | User Guide - Page 448
have a static IP address, click Statically set IP Addresses and fill in the Address, Subnet mask, and Default Gateway Address fields. 3 Click OK to save the changes and close the Ethernet Device General screen. 4 KDE: Network Configuration: DNS 5 Click the Devices tab. 448 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 449
an example. Figure 261 Red Hat 9.0: Dynamic IP Address Setting in ifconfig-eth0 DEVICE=eth0 ONBOOT=yes BOOTPROTO=dhcp USERCTL=no PEERDNS=yes TYPE=Ethernet P-793H v2 User's Guide 449 - ZyXEL P-793H v2 | User Guide - Page 450
Shutting down interface eth0: Shutting down loopback interface: Setting network parameters: Bringing up loopback interface: Bringing up interface eth0: [OK] [OK] [OK] [OK] [OK] 450 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 451
packets:13 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:100 RX bytes:730412 (713.2 Kb) TX bytes:1570 (1.5 Kb) Interrupt:10 Base address:0x1000 [root@localhost]# P-793H v2 User's Guide 451 - ZyXEL P-793H v2 | User Guide - Page 452
Appendix C Setting up Your Computer's IP Address 452 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 453
to disable pop-up blocking to log into your device. Either disable pop-up blocking (enabled by default in Windows XP SP (Service Pack) 2) or allow pop-up blocking and create an exception for your device's IP address. in the Pop-up Blocker section in the Privacy tab. P-793H v2 User's Guide 453 - ZyXEL P-793H v2 | User Guide - Page 454
to allow pop-up windows from your device, see the following steps. 1 In Internet Explorer, select Tools, Internet Options and then the Privacy tab. 454 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 455
address of your device (the web page that you do not want to have blocked) with the prefix "http://". For example, http://192.168.167.1. P-793H v2 User's Guide 455 - ZyXEL P-793H v2 | User Guide - Page 456
Apply to save this setting. JavaScripts If pages of the web configurator do not display properly in Internet Explorer, check that JavaScripts are allowed. 456 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 457
tab. Figure 270 Internet Options: Security 2 Click the Custom Level... button. 3 Scroll down to Scripting. 4 Under Active scripting make sure that Enable is selected (the default). 5 Under Scripting of Java applets make sure that Enable is selected (the default). P-793H v2 User's Guide 457 - ZyXEL P-793H v2 | User Guide - Page 458
then the Security tab. 2 Click the Custom Level... button. 3 Scroll down to Microsoft VM. 4 Under Java permissions make sure that a safety level is selected. 458 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 459
(Sun) 1 From Internet Explorer, click Tools, Internet Options and then the Advanced tab. 2 Make sure that Use Java 2 for under Java (Sun) is selected. P-793H v2 User's Guide 459 - ZyXEL P-793H v2 | User Guide - Page 460
Java, Javascripts and pop-ups in one screen. Click Tools, then click Options in the screen that appears. Figure 274 Mozilla Firefox: Tools > Options 460 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 461
Appendix D Pop-up Windows, JavaScripts and Java Permissions Click Content.to show the screen below. Select the check boxes as shown in the following screen. Figure 275 Mozilla Firefox Content Security P-793H v2 User's Guide 461 - ZyXEL P-793H v2 | User Guide - Page 462
Appendix D Pop-up Windows, JavaScripts and Java Permissions 462 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 463
example 11000000, which is 192 in decimal notation). Therefore, each octet has a possible range of 00000000 to 11111111 in binary, or 0 to 255 in decimal. P-793H v2 User's Guide 463 - ZyXEL P-793H v2 | User Guide - Page 464
IP Address (Binary) Subnet Mask (Binary) Network Number Host ID (192) (168) (1) (2) 11000000 10101000 00000001 00000010 11111111 11111111 11111111 00000000 11000000 10101000 00000001 00000010 464 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 465
bits 24 bits 255.255.255.0 8 bits 29 bits 255.255.255.2 3 bits 48 224 - 2 216 - 2 28 - 2 23 - 2 MAXIMUM NUMBER OF HOSTS 16777214 65534 254 6 P-793H v2 User's Guide 465 - ZyXEL P-793H v2 | User Guide - Page 466
the address (192.168.1) are the network number, and the remaining octet is the host ID, allowing a maximum of 28 - 2 or 254 possible hosts. 466 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 467
.168.1.128 /25. The following figure shows the company network after subnetting. There are now two sub-networks, A and B. Figure 278 Subnetting Example: After Subnetting P-793H v2 User's Guide 467 - ZyXEL P-793H v2 | User Guide - Page 468
VALUE 192.168.1. 64 11000000.10101000.00000001. 01000000 11111111.11111111.11111111. 11000000 Lowest Host ID: 192.168.1.65 Highest Host ID: 192.168.1.126 468 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 469
1 30 33 62 65 94 97 126 129 158 161 190 193 222 225 254 BROADCAST ADDRESS 31 63 95 127 159 191 223 255 P-793H v2 User's Guide 469 - ZyXEL P-793H v2 | User Guide - Page 470
Where you obtain your network number depends on your particular situation. If the ISP or your network administrator assigns you a block of registered IP 470 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 471
the network number portion of an IP address. Your P793H v2 will compute the subnet mask automatically based on the IP address that you entered. You don't need to change the subnet mask computed by the P-793H v2 unless you are instructed to do otherwise. Private IP Addresses Every machine on - ZyXEL P-793H v2 | User Guide - Page 472
Appendix E IP Addresses and Subnetting 472 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 473
• Protocol: This is the type of IP protocol used by the service. If this is TCP/ UDP, then the service uses the same port number with TCP and UDP. If this is USER brief explanation of the applications that use this service or the situations in which this service is used. P-793H v2 User's Guide 473 - ZyXEL P-793H v2 | User Guide - Page 474
popular videoconferencing solution from White Pines Software. Domain Name Server, a service that matches web names (for instance www.zyxel.com) to IP numbers. The IPSEC ESP (Encapsulation Security Protocol that runs over SSL. This is another popular Internet chat program. 474 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 475
service that enables real time sound over the web. Remote Execution Daemon. Remote Login. This is an ISP that provides services mainly for cable modems. Remote Telnet. The Real Time Streaming (media control) Protocol (RTSP) is a remote control for multimedia on the Internet. P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 476
including mainframes, midrange systems, UNIX systems and network servers. The Simple Service Discovery Protocol supports Universal Plug-and-Play (UPnP). Secure Shell Remote Login Program. Stream solution. The UDP port number is specified in the application. 476 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 477
electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation. All rights reserved. Disclaimer ZyXEL harmful interference. P-793H v2 User's Guide 477 - ZyXEL P-793H v2 | User Guide - Page 478
radiate radio frequency energy, and if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that be maintained between the antenna of this device and all persons. 注意 ! P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 479
Go to http://www.zyxel.com. 2 Select your product on the ZyXEL home page to go from this page. ZyXEL Limited Warranty ZyXEL warrants to the workmanship and/or materials, ZyXEL will, at its discretion be solely at the discretion of ZyXEL. This warranty shall not apply ZyXEL shall in no event - ZyXEL P-793H v2 | User Guide - Page 480
. You may also refer to the warranty policy for the region in which you bought the device at http:// www.zyxel.com/web/support_warranty_info.php. Registration Register your product online to receive e-mail notices of firmware upgrades and information at www.zyxel.com. 480 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 481
rules 125 types 125, 126, 130 administrator password 265 AH 180 alerts 269 firewalls 143 algorithm, certificates 199 MD5 fingerprint 199 SHA1 fingerprint 199 algorithms 180 alternative subnet mask notation 466 anti-probing 134 P-793H v2 User's Guide Index Index Any IP status 54 applications high - ZyXEL P-793H v2 | User Guide - Page 482
firmware 400 content filtering 155 activation 158 example 156 keywords 158 schedules 159 trusted IP addresses 160 URL 155 copyright 477 CoS 218 DiffServ 232 creation classifiers 224 customized services 143, 144, 145 D data filter set. See filter set, data. default password 44 default server - ZyXEL P-793H v2 | User Guide - Page 483
alerts 143 anti-probing 134 asymmetrical routes 139 configuration 138, 142, 147 customized services 143, 144, 145 default action 139 DoS 134 thresholds 134, 145, 146, 147 example 135 half 389 for restoring configuration file 394 for upgrading firmware 398 limitations 285 P-793H v2 User's Guide 483 - ZyXEL P-793H v2 | User Guide - Page 484
configuration 285, 286 upgrading firmware 286, 287 H half- see IPSec IP address 76, 80, 88, 95, 102, 113 default server 120, 122 ping 297 private 113 IP alias 109 and traffic FTP 285 Local Area Network, see LAN login passwords 44 Login screen 44 logs 269 alerts 269 e-mail 272 error messages 273 - ZyXEL P-793H v2 | User Guide - Page 485
IGMP multiplexing 79, 88, 95 LLC-based 95 VC-based 95 my IP address 162 IP alias 130 default server IP address 120, 122 example 129 examples 346 global 128 IGA 128 ILA 128 inside 128 IPSec 91 packet statistics 55 Packet Transfer Mode 76 passthrough, PPPoE 84 passwords 44 P-793H v2 User's Guide 485 - ZyXEL P-793H v2 | User Guide - Page 486
precedence 231 monitor 230 priority queue 232 486 remote node 229 routing policy 227 SIP 229 Quality of Service, see QoS R registration product 480 related documentation 3 remote management 239 DNS 248 FTP 243 ICMP 143 logs 272 SCR 84, 91, 98 secure gateway address 162 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 487
SUA 118, 119 subnet 463 P-793H v2 User's Guide Index subnet mask 102, 113, 464 subnetting 466 Sustain Cell Rate, see SCR syntax conventions 6 system 264 backing up configuration 289 backup configuration 288 firmware 284, 291 upgrading 286 version 52 name 265 passwords 44 administrator 265 users 265 - ZyXEL P-793H v2 | User Guide - Page 488
U UBR 84, 90, 100 unicast 76 Universal Plug and Play, see UPnP upgrading firmware 286, 291 UPnP 251 activation 253 cautions 252 example 253 installation 253 NAT traversal 251 accessing 43 minimum requirements 43 passwords 44 Wide Area Network, see WAN wizard 57 configuration 60 P-793H v2 User's Guide - ZyXEL P-793H v2 | User Guide - Page 489
Index P-793H v2 User's Guide 489 - ZyXEL P-793H v2 | User Guide - Page 490
Index 490 P-793H v2 User's Guide
-
1 -
2 -
3 -
4 -
5 -
6 -
7 -
8
-
9
-
10
-
11
-
12
-
13
-
14
-
15
-
16
-
17
-
18
-
19
-
20
-
21
-
22
-
23
-
24
-
25
-
26
-
27
-
28
-
29
-
30
-
31
-
32
-
33
-
34
-
35
-
36
-
37
-
38
-
39
-
40
-
41
-
42
-
43
-
44
-
45
-
46
-
47
-
48
-
49
-
50
-
51
-
52
-
53
-
54
-
55
-
56
-
57
-
58
-
59
-
60
-
61
-
62
-
63
-
64
-
65
-
66
-
67
-
68
-
69
-
70
-
71
-
72
-
73
-
74
-
75
-
76
-
77
-
78
-
79
-
80
-
81
-
82
-
83
-
84
-
85
-
86
-
87
-
88
-
89
-
90
-
91
-
92
-
93
-
94
-
95
-
96
-
97
-
98
-
99
-
100
-
101
-
102
-
103
-
104
-
105
-
106
-
107
-
108
-
109
-
110
-
111
-
112
-
113
-
114
-
115
-
116
-
117
-
118
-
119
-
120
-
121
-
122
-
123
-
124
-
125
-
126
-
127
-
128
-
129
-
130
-
131
-
132
-
133
-
134
-
135
-
136
-
137
-
138
-
139
-
140
-
141
-
142
-
143
-
144
-
145
-
146
-
147
-
148
-
149
-
150
-
151
-
152
-
153
-
154
-
155
-
156
-
157
-
158
-
159
-
160
-
161
-
162
-
163
-
164
-
165
-
166
-
167
-
168
-
169
-
170
-
171
-
172
-
173
-
174
-
175
-
176
-
177
-
178
-
179
-
180
-
181
-
182
-
183
-
184
-
185
-
186
-
187
-
188
-
189
-
190
-
191
-
192
-
193
-
194
-
195
-
196
-
197
-
198
-
199
-
200
-
201
-
202
-
203
-
204
-
205
-
206
-
207
-
208
-
209
-
210
-
211
-
212
-
213
-
214
-
215
-
216
-
217
-
218
-
219
-
220
-
221
-
222
-
223
-
224
-
225
-
226
-
227
-
228
-
229
-
230
-
231
-
232
-
233
-
234
-
235
-
236
-
237
-
238
-
239
-
240
-
241
-
242
-
243
-
244
-
245
-
246
-
247
-
248
-
249
-
250
-
251
-
252
-
253
-
254
-
255
-
256
-
257
-
258
-
259
-
260
-
261
-
262
-
263
-
264
-
265
-
266
-
267
-
268
-
269
-
270
-
271
-
272
-
273
-
274
-
275
-
276
-
277
-
278
-
279
-
280
-
281
-
282
-
283
-
284
-
285
-
286
-
287
-
288
-
289
-
290
-
291
-
292
-
293
-
294
-
295
-
296
-
297
-
298
-
299
-
300
-
301
-
302
-
303
-
304
-
305
-
306
-
307
-
308
-
309
-
310
-
311
-
312
-
313
-
314
-
315
-
316
-
317
-
318
-
319
-
320
-
321
-
322
-
323
-
324
-
325
-
326
-
327
-
328
-
329
-
330
-
331
-
332
-
333
-
334
-
335
-
336
-
337
-
338
-
339
-
340
-
341
-
342
-
343
-
344
-
345
-
346
-
347
-
348
-
349
-
350
-
351
-
352
-
353
-
354
-
355
-
356
-
357
-
358
-
359
-
360
-
361
-
362
-
363
-
364
-
365
-
366
-
367
-
368
-
369
-
370
-
371
-
372
-
373
-
374
-
375
-
376
-
377
-
378
-
379
-
380
-
381
-
382
-
383
-
384
-
385
-
386
-
387
-
388
-
389
-
390
-
391
-
392
-
393
-
394
-
395
-
396
-
397
-
398
-
399
-
400
-
401
-
402
-
403
-
404
-
405
-
406
-
407
-
408
-
409
-
410
-
411
-
412
-
413
-
414
-
415
-
416
-
417
-
418
-
419
-
420
-
421
-
422
-
423
-
424
-
425
-
426
-
427
-
428
-
429
-
430
-
431
-
432
-
433
-
434
-
435
-
436
-
437
-
438
-
439
-
440
-
441
-
442
-
443
-
444
-
445
-
446
-
447
-
448
-
449
-
450
-
451
-
452
-
453
-
454
-
455
-
456
-
457
-
458
-
459
-
460
-
461
-
462
-
463
-
464
-
465
-
466
-
467
-
468
-
469
-
470
-
471
-
472
-
473
-
474
-
475
-
476
-
477
-
478
-
479
-
480
-
481
-
482
-
483
-
484
-
485
-
486
-
487
-
488
-
489
-
490
 |
 |
www.zyxel.com
www.zyxel.com
P-793H v2
G.SHDSL.bis Bonded Broadband Gateway
Copyright © 2010
ZyXEL Communications Corporation
Firmware Version 3.70
Edition 1, 03/2010
Default Login Details
IP Address
Admin
Password
1234
User
Password
user