ZyXEL P-660HN-T1A Support Guide - Page 24

Why can't I con my P-660HN-T1A using Web Configurator/Telnet

Page 24 highlights

P-660HN Series Support Notes 1. Change the default Administrator password since it is required when setting up the firewall. 2. Limit who can access to your P-660HN-T1A‟s Web Configurator or CLI. You can enter the IP address of the secured LAN host in Web Configurator, Advanced Setup, Advanced -> Remote MGNT -> [Service] ->Secured Client IP to allow special access to your P-660HN-T1A: The default value in this field is 0.0.0.0, which means you do not care which host is trying to telnet your P-660HN-T1A or access.the Web Configurator of 3. Why can't I configure my P-660HN-T1A using Web Configurator/Telnet over WAN? There are four reasons that WWW/Telnet from WAN is blocked. (1) When the firewall is turned on, all connections from WAN to LAN are blocked by the default ACL rule. To enable Telnet from WAN, you must turn the firewall off, or create a firewall rule to allow WWW/Telnet connection from WAN. The WAN-to-LAN ACL summary will look like as shown below. WWW (For accessing Web Configurator): Source IP= Remote trusted host Destination IP= router' WAN IP Service= TCP/80 Action=Forward TELNET (For accessing Command Line Interface): Source IP= Telnet Client host Destination IP= router' WAN IP Service= TCP/23 Action=Forward 24 All contents copyright © 2010 ZyXEL Communications Corporation.

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118

P-660HN Series Support Notes
24
All contents copyright © 2010 ZyXEL Communications Corporation.
1. Change the default Administrator password since it is required when
setting up the firewall.
2. Limit who can access to your P-660HN-T1A
s Web Configurator or CLI.
You can enter the IP address of the secured LAN host in Web
Configurator, Advanced Setup,
Advanced -> Remote MGNT ->
[Service] ->Secured Client IP
to allow special access to your
P-660HN-T1A:
The default value in this field is 0.0.0.0, which means you do not care which
host is trying to telnet your P-660HN-T1A or access.the Web Configurator
of
3. Why can't I configure my P-660HN-T1A using Web Configurator/Telnet
over WAN?
There are four reasons that WWW/Telnet from WAN is blocked.
(1) When the firewall is turned on, all connections from WAN to LAN are
blocked by the default ACL rule. To enable Telnet from WAN, you must turn
the firewall off, or create a firewall rule to allow WWW/Telnet connection
from WAN. The WAN-to-LAN ACL summary will look like as shown below.
WWW (For accessing Web Configurator):
Source IP= Remote trusted host
Destination IP= router' WAN IP
Service= TCP/80
Action=Forward
TELNET (For accessing Command Line Interface):
Source IP= Telnet Client host
Destination IP= router' WAN IP
Service= TCP/23
Action=Forward