ZyXEL P-661HW-D1 User Guide
ZyXEL P-661HW-D1 Manual
 |
View all ZyXEL P-661HW-D1 manuals
Add to My Manuals
Save this manual to your list of manuals |
ZyXEL P-661HW-D1 manual content summary:
- ZyXEL P-661HW-D1 | User Guide - Page 1
P-661HNU-Fx 801.11n Wireless ADSL+ 4-port Security Gateway Default Login Details IP Address https://192.168.1.1 Admin User Name: admin Password: 1234 User User Name: user Password: 1234 Firmwawrwew.Vzyexresl.icoonm 3.10 Edition 1, 10/2010 www.zyxel.com Copyright © 2010 ZyXEL Communications - ZyXEL P-661HW-D1 | User Guide - Page 2
- ZyXEL P-661HW-D1 | User Guide - Page 3
your comments, questions or suggestions to: [email protected] Thank you! The Technical Writing Team, ZyXEL Communications Corp., 6 Innovation Road II, Science-Based Industrial Park, Hsinchu, 30099, Taiwan. Need More Help? More help is available at www.zyxel.com. P-661HNU-Fx User's Guide 3 - ZyXEL P-661HW-D1 | User Guide - Page 4
ZyXEL products. • Forum This contains discussions on ZyXEL products. Learn from others who use ZyXEL products and share your experiences as well. Customer Support Should problems received your device. • Brief description of the problem and the steps you took to solve it. 4 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 5
things you may need to configure or helpful tips) or recommendations. Syntax Conventions • The P-661HNU-Fx may be referred to as the "ZyXEL Device", the "device", the "system" or the "product" in this User's Guide. • Product labels, screen names, field labels and field choices are all in bold font - ZyXEL P-661HW-D1 | User Guide - Page 6
Document Conventions Icons Used in Figures Figures in this User's Guide may use the following generic icons. The ZyXEL Device icon is not an exact representation of your device. ZyXEL Device Computer Notebook computer Server Firewall Router Switch 6 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 7
to the correct ports. • Place connecting cables carefully so that no one will step on them or stumble over them. • Always disconnect all cables from this device before servicing or • disassembling. Used electrical and electronic equipment should be treated separately. P-661HNU-Fx User's Guide 7 - ZyXEL P-661HW-D1 | User Guide - Page 8
Safety Warnings 8 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 9
...205 Certificates ...207 VPN ...217 System Monitor ...241 User Account ...245 Remote MGMT ...247 System ...249 Time Setting ...251 Log Setting ...253 Firmware Upgrade ...255 Backup/Restore ...257 Diagnostic ...261 Troubleshooting ...265 Product Specifications ...273 P-661HNU-Fx User's Guide 9 - ZyXEL P-661HW-D1 | User Guide - Page 10
Contents Overview 10 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 11
ZyXEL Device's USB and Print Server Support 23 1.3 The WPS/WLAN Button ...24 1.4 Ways to Manage the ZyXEL Device 25 1.5 Good Habits for Managing the ZyXEL Device 26 1.6 LEDs (Lights) ...26 1.7 The RESET ...37 3.1 Overview ...37 3.2 Setting Up Your DSL Connection 37 P-661HNU-Fx User's Guide 11 - ZyXEL P-661HW-D1 | User Guide - Page 12
ZyXEL Utility 42 3.3.4 Configuring the Wireless Client using the WPS PIN number 49 3.4 Setting Up NAT Port Forwarding 50 3.5 Using the File Sharing Feature 52 3.5.1 Set Up File Sharing ...52 3.5.2 Access Your Shared Files 6.1.1 What You Can Do in this Chapter 111 12 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 13
128 6.7.2 Wireless Security Overview 128 6.7.3 Signal Problems ...131 6.7.4 BSS ...131 6.7.5 MBSSID ...132 UPnP Screen ...148 7.5 The File Sharing Screen ...149 7.5.1 Before You Begin ...149 7.5.2 Add/Edit File Sharing 151 7.5.3 Add New User ... Static Route ...170 P-661HNU-Fx User's Guide 13 - ZyXEL P-661HW-D1 | User Guide - Page 14
.6.1 IP Precedence ...187 10.6.2 DiffServ ...187 Chapter 11 Network Address Translation (NAT 189 11.1 Overview ...189 11.1.1 What You Can Do in this Chapter 189 11.1.2 What You Need To Know 189 11.2 The Port Forwarding Screen 190 11.2.1 The Port Forwarding Screen 191 11.2.2 The Port Forwarding - ZyXEL P-661HW-D1 | User Guide - Page 15
IPSec VPN 218 16.1.3 Before You Begin 219 16.2 VPN Setup Screen ...220 16.3 The VPN Edit Screen ...222 16.4 Configuring Advanced Settings 226 16.5 Viewing SA Monitor ...228 16.6 IPSec VPN Technical Reference 229 16.6.1 IPSec Architecture 229 16.6.2 IPSec and NAT ...230 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 16
16.6.6 Negotiation Mode 234 16.6.7 Remote DNS Server 234 16.6.8 ID Type and Content 235 16.6.9 Pre-Shared Key ...237 16.6.10 Diffie-Hellman (DH) Key Groups 237 16.6.11 Telecommuter VPN/IPSec Examples 237 .2 The Time Setting Screen 251 Chapter 22 Log Setting ...253 16 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 17
Appendix A IP Addresses and Subnetting 283 Appendix B Setting Up Your Computer's IP Address 295 Appendix C Pop-up Windows, Java Script and Java Permissions 325 Appendix D Wireless LANs 335 Appendix E Common Services 359 Appendix F Open Software Announcements 363 P-661HNU-Fx User's Guide 17 - ZyXEL P-661HW-D1 | User Guide - Page 18
Table of Contents Appendix G Legal Information 393 Index...1 18 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 19
PART I User's Guide 19 - ZyXEL P-661HW-D1 | User Guide - Page 20
20 - ZyXEL P-661HW-D1 | User Guide - Page 21
. • "U" denotes a USB port used to set up a 3G WAN connection via a 3G wireless dongle or share files via a USB memory stick or a USB hard drive. The ZyXEL Device can also function as a print server with a USB printer connected. • Models ending in "1", for example P-661HNU-F1, denote a device that - ZyXEL P-661HW-D1 | User Guide - Page 22
shared Internet access by connecting the DSL port to the DSL/MODEM jack on a splitter or your telephone wall jack. Computers can connect to the ZyXEL Device's ETHERNET ports (or wirelessly). Figure 1 ZyXEL Device's Internet Access Application LAN WAN DSL 1.2.1.1 3G WAN The USB port the ZyXEL - ZyXEL P-661HW-D1 | User Guide - Page 23
Application WLAN WAN LAN 1.2.3 ZyXEL Device's USB and Print Server Support Use the built-in USB 2.0 port to share files via a USB memory stick or a USB hard drive (A). Alternatively, you can add a USB printer (B) and make it available on your local area network. P-661HNU-Fx User's Guide 23 - ZyXEL P-661HW-D1 | User Guide - Page 24
Chapter 1 Introduction Figure 4 USB File Sharing / Print Server Application A B ZyXEL Device. The WLAN/WPS LED should flash while the ZyXEL Device sets up a WPS connection with the wireless device. 5 The WLAN/WPS light on the P-661HNU-Fx shines steadily when connected. 24 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 25
to Manage the ZyXEL Device Use any of the following methods to manage the ZyXEL Device. • Web Configurator. This is recommended for everyday management of the ZyXEL Device using a (supported) web browser. • FTP for firmware upgrades and configuration backup/restore. P-661HNU-Fx User's Guide 25 - ZyXEL P-661HW-D1 | User Guide - Page 26
device becomes unstable or even crashes. If you forget your password, you will have to reset the ZyXEL Device to its factory default settings. If you backed up an earlier configuration file, you would not have to totally re-configure the ZyXEL Device. You could simply restore your last configuration - ZyXEL P-661HW-D1 | User Guide - Page 27
a USB connection. Refer to the Quick Start Guide for information on hardware connections. 1.7 The RESET Button If you forget your password or cannot access the web configurator, you will need to use the RESET button at the back of the device to reload the factory-default configuration file. This - ZyXEL P-661HW-D1 | User Guide - Page 28
Chapter 1 Introduction 28 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 29
enabled by default in Windows XP SP (Service Pack) 2. • JavaScript (enabled by default). • Java permissions (enabled by default). See ZyXEL Device hardware is properly connected (refer to the Quick Start Guide). 2 Launch your web browser. 3 Type "192.168.1.1" as the URL. P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 30
. It is strongly recommended you change the default password. Enter a new password, retype it to confirm and click Apply; alternatively click Skip to proceed to the Connection Status screen if you do not want to change the password now. Figure 7 Change Password Screen 30 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 31
Chapter 2 Introducing the Web Configurator 6 The Connection Status screen appears. Figure 8 Connection Status 7 Click System Info to display the System Info screen, where you can view the ZyXEL Device's interface and system information. P-661HNU-Fx User's Guide 31 - ZyXEL P-661HW-D1 | User Guide - Page 32
2.2.1 Title Bar The title bar shows the following icon in the upper right corner. Click this icon to log out of the web configurator. 32 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 33
status of the ZyXEL Device's ports. The connected ports are in color and disconnected ports are gray. 2.2.3 . You can also configure ISP parameters, WAN IP address assignment, DNS servers and other advanced properties ZyXEL Device enables or disables the wireless LAN. P-661HNU-Fx User's Guide 33 - ZyXEL P-661HW-D1 | User Guide - Page 34
to assign specific IP addresses to individual MAC addresses. UPnP Use this screen to enable the UPnP function. File Sharing Use this screen to enable file sharing via the ZyXEL Device. Printer Server Use this screen to enable or disable sharing of a USB printer via your ZyXEL Device. Static - ZyXEL P-661HW-D1 | User Guide - Page 35
the factory default settings. Reboot Reboot Use this screen to reboot the ZyXEL Device without turning the power off. Diagnostic Ping Use this screen to test the connections to other devices. DSL Line Use this screen to identify problems with the DSL connection. P-661HNU-Fx User's Guide 35 - ZyXEL P-661HW-D1 | User Guide - Page 36
Chapter 2 Introducing the Web Configurator 36 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 37
details on the ZyXEL Device's hardware connections. 2 Connect one end of a DSL cable to the DSL port of your ZyXEL Device. The other end should be connected to the DSL port in your house, the DSL/Modem jack on a splitter or another DSL router/modem provided by your ISP. P-661HNU-Fx User's Guide 37 - ZyXEL P-661HW-D1 | User Guide - Page 38
Type PPP over Ethernet (PPPoE) ATM PVC Configuration VPI/VCI 36/48 Encapsulation LLC/SNAP-BRIDGING Mode Service Category UBR without PCR PPP Information PPP User Name [email protected] PPP Password ABCDEF! PPPoE Service My DSL Name Authentication Auto Method 38 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 39
: Disabled NAT: Enabled IGMP Multicast Proxy: Enabled Apply as Default Gateway: Enable DNS Server: Static DNS IP Address (Primary: 192.168.1.254 Secondary: 192.168.1.253) Enter or select these values and click Apply. This completes your DSL WAN connection setting. P-661HNU-Fx User's Guide 39 - ZyXEL P-661HW-D1 | User Guide - Page 40
website, such as "www.zyxel.com" to see if you have correctly set up your Internet connection. Be sure to contact your service provider for any information you client using two methods: the ZyXEL utility method and the WPS PIN method. Refer to the Quick Start Guide if you wish to connect wirelessly - ZyXEL P-661HW-D1 | User Guide - Page 41
the ZyXEL Device and the wireless client. SSID 802.11 mode Channel Security SSID_Example3 802.11b/g auto WPA-PSK (Pre-Shared Key: ThisismyWPA-PSKpre-sharedkey) We use the P-661HNU-F1 web : Network > Wireless LAN > General 2 Make sure Enable Wireless LAN is selected. P-661HNU-Fx User's Guide 41 - ZyXEL P-661HW-D1 | User Guide - Page 42
Mode Select field. 5 Select More Secure as your security level and set security mode to WPA-PSK and enter "ThisismyWPA-PSKpre-sharedkey" in the Pre-Shared ZyXEL Utility This section describes how to connect the wireless client to a network using a ZyXEL USB Wireless adapter and the ZyXEL Manually - ZyXEL P-661HW-D1 | User Guide - Page 43
must know its Service Set IDentity (SSID) and WPA-PSK pre-shared key. In this example, the SSID is "SSID_Example3" and the pre-shared key is "ThisismyWPA-PSKpre-sharedkey". After you install the ZyXEL utility and the wireless client closer to the AP or peer computer. P-661HNU-Fx User's Guide 43 - ZyXEL P-661HW-D1 | User Guide - Page 44
window will pop up prompting you to specify the security settings. Enter the pre-shared key and leave the encryption type at the default setting. Use the Next button to move on to the next screen. You your settings and click Save to continue. Tutorial: Confirm Save 44 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 45
6 Open your Internet browser and enter http://www.zyxel.com or the URL of any other web site screen, check the Troubleshooting section of this User's Guide or contact your shared key is "ThisismyWPA-PSKpre-sharedkey". You have chosen the profile name "PN_Example3". P-661HNU-Fx User's Guide 45 - ZyXEL P-661HW-D1 | User Guide - Page 46
Chapter 3 Tutorials 1 Open the ZyXEL utility and click the Profile tab to open the screen shown next. name (of up to 32 printable ASCII characters). Select Infrastructure and either manually enter or select the AP's SSID in the Scan Info table and click Select. 46 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 47
depending on the encryption method you selected in the previous screen. Enter the pre-shared key and leave the encryption type at the default setting. Tutorial: Profile Encryption 6 In the next screen, leave both boxes selected. Tutorial: Wireless Protocol Settings. P-661HNU-Fx User's Guide 47 - ZyXEL P-661HW-D1 | User Guide - Page 48
details of the active connection. 10 Open your Internet browser, enter http://www.zyxel.com or the URL of any other web site in the address bar and press Also, refer to the Troubleshooting section of this User's Guide or contact your network administrator if necessary. 48 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 49
Configurator for this. 1 Place a WPS-enabled device that supports the WPS PIN configuration method near the ZyXEL Device. 2 Log into the ZyXEL Device's web configurator at http://192.168.1.1 (see Introducing the other device's documentation if you cannot locate the PIN P-661HNU-Fx User's Guide 49 - ZyXEL P-661HW-D1 | User Guide - Page 50
Forwarding Setup D=192.168.1.34 LAN port 666 WAN A You may set up the port settings by configuring the port settings for the Doom server computer (see Chapter 11 on page 190 for more information). 1 Click Network Setting > NAT > Port Forwarding. Click Add new rule. 50 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 51
should appear in the table. Make sure the Status check box for this rule is selected. Click Apply to have the ZyXEL Device start forwarding port 666 traffic to the computer with IP address 192.168.1.34. Players on the Internet then can have access to your Doom server. P-661HNU-Fx User's Guide 51 - ZyXEL P-661HW-D1 | User Guide - Page 52
to the Share Directory List. 3.5.1.2 Set up File Sharing on Your ZyXEL Device You also need to set up file sharing on your ZyXEL Device in order to share files. 1 Click Add new share in the File Sharing screen. Select your USB device from the Volume drop-down list box. 52 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 53
the Access Level as Public to allow anyone connected to the ZyXEL Device to access the share. Tutorial: USB Services > File Sharing > Share Configuration 4 Set the Access Level to Security if you wish to restrict access to the share for certain users. If you select this option, the screen should - ZyXEL P-661HW-D1 | User Guide - Page 54
of letters and numbers. It is case sensitive and it must be between 5 and 15 characters long. 11 This sets up the file sharing server. You can see the USB storage device listed in the table below. Tutorial: USB Services > File Sharing > Share Configuration (2) 54 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 55
port must be configured with the IP address of the ZyXEL Device and must use the LPR protocol to communicate with the printer. Consult your operating systems documentation for instructions on how to do this or follow the instructions below if you have a Windows 2000/XP operating system. P-661HNU-Fx - ZyXEL P-661HW-D1 | User Guide - Page 56
: Open Printers Window The Printers folder opens up. First you need to open up the properties windows for the printer you want to configure a TCP/IP port. 2 Locate your printer. 3 Right click on your printer and select Properties. Tutorial: Open Printer Properties 56 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 57
Chapter 3 Tutorials 5 A Printer Ports window appears. Select Standard TCP/IP Port and click New Port... Tutorial: Add a Port Window 6 Add Standard TCP/IP Printer Port Wizard window opens up. Click Next to start configuring the printer port. Tutorial: Add a Port Wizard P-661HNU-Fx User's Guide 57 - ZyXEL P-661HW-D1 | User Guide - Page 58
Port Settings 9 Confirm the IP address of the ZyXEL Device in the IP Address field. 10 Select LPR under Protocol. 11 Type the LPR queue name of your printer model in the Queue Name field and click OK. Refer to your printer documentation for the LPR queue name. Some 58 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 59
descriptive name for the Queue Name. Tutorial: Custom Port Settings 12 Continue through the wizard, apply your settings and close the wizard window. Tutorial: Finish Adding the TCP/IP Port 13 Repeat steps 1 to 12 to add this printer to other computers on your network. P-661HNU-Fx User's Guide 59 - ZyXEL P-661HW-D1 | User Guide - Page 60
look different on your operating system. 1 Click Start > Control Panel > Printers and Faxes to open the Printers and Faxes screen. Click Add a Printer. Tutorial: Printers Folder 2 The Add Printer Wizard screen displays. Click Next. Tutorial: Add Printer Wizard: Welcome 60 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 61
Chapter 3 Tutorials 3 Select Local printer attached to this computer and click Next. Tutorial: Add Printer Wizard: Local or Network Printer 4 Select Create a new port and Standard TCP/IP Port. Click Next. Tutorial: Add Printer Wizard: Select the Printer Port P-661HNU-Fx User's Guide 61 - ZyXEL P-661HW-D1 | User Guide - Page 62
field updates automatically to reflect the IP address of the port. Click Next. Note: The computer from which you are configuring the TCP/IP printer port must be on the same LAN in order to use the printer sharing function. Tutorial: Enter IP Address of the ZyXEL Device 62 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 63
Chapter 3 Tutorials 8 Confirm the IP address of the ZyXEL Device in the Printer Name or IP Address field. 9 Select LPR under Protocol. 10 Type LP1 in the Queue Name field and click OK to go back to the previous screen and click Next. Tutorial: Custom Port Settings P-661HNU-Fx User's Guide 63 - ZyXEL P-661HW-D1 | User Guide - Page 64
is not displayed in the list of Printers, you can insert the printer driver installation CD/disk or download the driver file to your computer, click Have Disk... and install the new printer driver. 15 Click Next to continue. Tutorial: Add Printer Wizard: Printer Driver 64 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 65
to identify the printer and then click Next to continue. Tutorial: Add Printer Wizard: Name Your Printer 18 The ZyXEL Device is a print server itself and you do not need to have your computer act as a print server by sharing the printer with other users in the same P-661HNU-Fx User's Guide 65 - ZyXEL P-661HW-D1 | User Guide - Page 66
Wizard: Printer Sharing 19 Select Yes and then click the Next button if you want to print a test page. A popup screen displays to ask if the test page printed correctly. Otherwise select No and then click Next to continue. Tutorial: Add Printer Wizard: Print Test Page 66 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 67
The following screen shows your current printer settings. Select Finish to complete adding a new printer. Tutorial: Add Printer Wizard Complete Add a New Printer Using Macintosh OS X Complete the 3 Double-click the Applications folder. Tutorial: Macintosh HD folder P-661HNU-Fx User's Guide 67 - ZyXEL P-661HW-D1 | User Guide - Page 68
Printer List configuration screen. Select IP Printing from the drop-down list box. 8 In the Printer's Address field, type the IP address of your ZyXEL Device. 9 Deselect the Use default queue on server check box. 10 Type LP1 (a parallel port) in the Queue Name field. 68 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 69
Name LP1 on 192.168.1.1 displays in the Printer List field. The default printer Name displays in bold type. Tutorial: Print Server Your Macintosh print server driver setup is complete. You can now use the ZyXEL Device's print server to print from a Macintosh computer. P-661HNU-Fx User's Guide 69 - ZyXEL P-661HW-D1 | User Guide - Page 70
time surfing the web and downloading media files. He decided to prevent Josephine from accessing the Internet so that she can concentrate on preparing for her final exams. Josephine's computer connects wirelessly to the Internet through the ZyXEL 661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 71
Device's WAN default gateway by default. In this case, B will never receive the traffic. N1 A R N2 B You need to specify a static routing rule on the ZyXEL Device to specify R as the router in charge of forwarding traffic to N2. In this case, the ZyXEL Device routes P-661HNU-Fx User's Guide 71 - ZyXEL P-661HW-D1 | User Guide - Page 72
This tutorial uses the following example IP settings: N1 A R N2 B Table 3 IP Settings in this Tutorial DEVICE / COMPUTER IP ADDRESS The ZyXEL Device's WAN 172.16.1.1 The ZyXEL Device's LAN 192.168.1.1 A and subnet mask 255.255.255.0 for the destination, N2. 72 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 73
in the Gateway IP Address field. by the user-defined QoS settings on the ZyXEL Device. It always gets the highest priority. twice every hour. You also upload data files (such as logs and email archives) delayed when there is network congestion. • Note the IP address (192.168.1.23 for example) and/or - ZyXEL P-661HW-D1 | User Guide - Page 74
is assigned a priority queue based on the internal QoS mapping table on the ZyXEL Device. QoS Example ZyXEL Device DSL 1000 kbps Your computer IP=192.168.1.23 and/or MAC=AA:FF:AA:FF:AA:FF E-mail: , then click Apply. • Name: Email • Priority: 7 (High) • Weight: 15 74 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 75
as Email in this example. Link this to a queue created in the QoS > Queue Setup screen, which is the Email queue created in this example. P-661HNU-Fx User's Guide 75 - ZyXEL P-661HW-D1 | User Guide - Page 76
compared to other network traffic. Tutorial: Advanced > QoS > Monitor 3.10 Access the ZyXEL Device Using DDNS If you connect your ZyXEL Device to the Internet and it uses a dynamic WAN IP address, it is inconvenient for you to manage the device from the Internet. The 76 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 77
as the username and password. 3 Log into www.dyndns.org using your account. 4 Add a new DDNS host name. This tutorial uses the following settings as an example. • Host name: zyxelrouter.dyndns.org • Service Type: Host with IP address • IP Address: Enter the WAN IP address that your ZyXEL Device is - ZyXEL P-661HW-D1 | User Guide - Page 78
test this: 1 Open a web browser on the computer (using the IP address a.b.c.d) that is connected to the Internet. 2 Type http://zyxelrouter.dyndns.org and press [Enter]. 3 The ZyXEL Device's login page should appear. You can then log into the ZyXEL Device and manage it. 78 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 79
PART II Technical Reference 79 - ZyXEL P-661HW-D1 | User Guide - Page 80
80 - ZyXEL P-661HW-D1 | User Guide - Page 81
the web configurator, the Connection Status screen appears. This shows the network connection status of the ZyXEL Device and clients connected to it. Use the System Info screen to look at the current clients. A warning message appears if there is a connection problem. P-661HNU-Fx User's Guide 81 - ZyXEL P-661HW-D1 | User Guide - Page 82
to view the status in a list, click List View in the Viewing mode selection box. You can configure how often you want the ZyXEL Device to update this screen in Refresh Interval. Figure 10 Connection Status: Icon . In List View, you can also view the client's information. 82 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 83
the date the firmware version was created. Go to the Maintenance > Firmware Upgrade screen to change it. WAN Information Mode This is the method of encapsulation used by your ISP. IP Address This field displays the current IP address of the ZyXEL Device in the WAN. P-661HNU-Fx User's Guide 83 - ZyXEL P-661HW-D1 | User Guide - Page 84
displays Up when the ZyXEL Device is connected through an Ethernet cable to a computer or a HUB. It displays Down when the ZyXEL Device's Ethernet port is disconnected. For the WLAN interface, it displays Active when WLAN is enabled or InActive when WLAN is disabled. 84 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 85
the port speed. USB Status Type This shows the type of device connected to the ZyXEL Device. Status This field shows Available if the USB device is currently active. It shows N/A if there are no device connected to the ZyXEL Device or the connected device is not working. P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 86
Chapter 4 Connection Status and System Info Screens 86 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 87
Overview This chapter discusses the ZyXEL Device's Broadband screens. Use these screens to configure your ZyXEL Device for Internet access. A LAN and WAN LAN WAN You can attach a 3G wireless adapter to the USB port and set the ZyXEL Device to use this 3G connection as your WAN or a backup when - ZyXEL P-661HW-D1 | User Guide - Page 88
a dial-up Internet connection using PPPoE (PPP over Ethernet), they should also provide a username and password (and service name) for user authentication. WAN IP Address The WAN IP address is an IP address for the ZyXEL Device, which makes it accessible from an outside network. It is used by the - ZyXEL P-661HW-D1 | User Guide - Page 89
Type This shows the type of interface used by this connection. Mode This shows whether the connection is in routing mode or bridge mode. Encapsulation This shows the method of encapsulation used by this connection. VPI This is the Virtual Path Identifier (VPI). P-661HNU-Fx User's Guide 89 - ZyXEL P-661HW-D1 | User Guide - Page 90
ZyXEL Device. A window displays asking you to confirm that you want to delete the connection. 5.2.1 Add/Edit Internet Connection Use this screen to configure a WAN connection. The screen varies depending on the encapsulation method used and WAN service type you select. 90 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 91
WAN Interface in the Network Setting > Broadband screen or the Edit icon next to the connection you want to configure. Select Routing as the encapsulation mode and PPPoE as the WAN service type. Figure 16 Broadband Add/Edit: Routing- PPPoE P-661HNU-Fx User's Guide 91 - ZyXEL P-661HW-D1 | User Guide - Page 92
. Type ADSL: The ZyXEL Device uses the ADSL technology for data transmission over the DSL port. Mode Select Routing (default) from the drop-down list box if your ISP give you one IP address only and you want multiple computers to share an Internet account. WAN Service Type This field is - ZyXEL P-661HW-D1 | User Guide - Page 93
the ZyXEL Device to get subscribing information and maintain a joined member list for each multicast group. It can reduce multicast traffic significantly. Select this option to have the ZyXEL Device use the WAN interface of this connection as the system default gateway. P-661HNU-Fx User's Guide 93 - ZyXEL P-661HW-D1 | User Guide - Page 94
in the WAN Service Type field. Obtain DNS info Select this to have the ZyXEL Device get the DNS server addresses Automatically from the ISP automatically. Use the following Select this to have the ZyXEL Device use the DNS server addresses Static DNS IP you configure manually. Address Primary - ZyXEL P-661HW-D1 | User Guide - Page 95
WAN Interface in the Network Setting > Broadband screen or the Edit icon next to the connection you want to configure. Select Routing as the encapsulation mode and IPoE as the WAN service type. Figure 17 Broadband Add/Edit: Routing- IPoE P-661HNU-Fx User's Guide 95 - ZyXEL P-661HW-D1 | User Guide - Page 96
. Type ADSL: The ZyXEL Device uses the ADSL technology for data transmission over the DSL port. Mode Select Routing (default) from the drop-down list box if your ISP give you one IP address only and you want multiple computers to share an Internet account. WAN Service Type This field is - ZyXEL P-661HW-D1 | User Guide - Page 97
server addresses Automatically from the ISP automatically. Use the following Select this to have the ZyXEL Device use the DNS server addresses Static DNS IP you configure manually. Address Primary DNS Enter the first DNS server address assigned by the ISP. Server P-661HNU-Fx User's Guide 97 - ZyXEL P-661HW-D1 | User Guide - Page 98
connection. Type ADSL: The ZyXEL Device uses the ADSL technology for data transmission over the DSL port. Mode Select Routing (default) from the drop-down list box if your ISP give you one IP address only and you want multiple computers to share an Internet account. 98 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 99
connection to have its own MAC address or all connections share one MAC address but use different VLAN IDs for different services. EoA supports IPoE, PPPoE and RFC1483/2684 bridging encapsulation methods. Encapsulation Mode The encapsulation method of multiplexing used by your is LLC/SNAPBRIDGING - ZyXEL P-661HW-D1 | User Guide - Page 100
Bridge in the WAN Service Type field. Obtain DNS info Select this to have the ZyXEL Device get the DNS server addresses Automatically from the ISP automatically. Use the following Select this to have the ZyXEL Device use the DNS server addresses Static DNS IP you configure manually. Address - ZyXEL P-661HW-D1 | User Guide - Page 101
General Name Enter a service name of the connection. Type Select ADSL as the interface for which you want to configure here. Mode The ZyXEL Device uses the ADSL technology for data transmission over the DSL port. Select Bridge when your ISP provides you more than one IP address and you want - ZyXEL P-661HW-D1 | User Guide - Page 102
Broadband > 3G Backup. At the time of writing, the 3G cards you can use in the ZyXEL Device are Huawei E220 and E270. Note: The actual data rate you obtain varies depending the 3G card you use, the signal strength to the service provider's base station, and so on. 102 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 103
one in the ZyXEL Device. Otherwise, it displays N/A. Username Type the user name (of up to 70 ASCII printable characters) given to you by your service provider. Password Type the password (of up to ISP disabled PIN code authentication, leave this field blank. P-661HNU-Fx User's Guide 103 - ZyXEL P-661HW-D1 | User Guide - Page 104
about the ZyXEL Device features described in this chapter. Encapsulation Be sure to use the encapsulation method required by your ISP. The ZyXEL Device can work in bridge mode or routing mode. When the ZyXEL Device is in routing mode, it supports the following methods. 104 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 105
IP services for individuals. Operationally, PPPoE saves significant effort for both you and the ISP or carrier, as it requires no specific configuration of the broadband modem at the customer site. By implementing PPPoE directly on the ZyXEL more detailed information. P-661HNU-Fx User's Guide 105 - ZyXEL P-661HW-D1 | User Guide - Page 106
protocol is assigned to a specific virtual circuit; for example, VC1 carries IP, etc. VC-based multiplexing may be dominant in environments where dynamic creation to the default of "0", the system will assign a maximum value that correlates to your upstream line rate. 106 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 107
. PCR and MBS define the burst levels, SCR defines the minimum level. An example of an VBR-nRT connection would be non-time sensitive data file transfers. P-661HNU-Fx User's Guide 107 - ZyXEL P-661HW-D1 | User Guide - Page 108
file transfer. IP Address Assignment A static IP is a fixed IP that your ISP gives you. A dynamic IP IP. However the encapsulation method assigned influences your choices for IP address and default printers port. With VLAN, all broadcasts are confined to a specific broadcast domain. Multicast IP IP IP - ZyXEL P-661HW-D1 | User Guide - Page 109
If your ISP gives you DNS server addresses, manually enter them in the DNS server fields. 2 If your ISP dynamically assigns the DNS server IP addresses (along with the ZyXEL Device's WAN IP address), set the DNS server fields to get the DNS server address from the ISP. P-661HNU-Fx User's Guide 109 - ZyXEL P-661HW-D1 | User Guide - Page 110
also known as TIA-EIA-95. 2.5G 2.75G Packetswitched Packetswitched GPRS (General Packet Radio Services), High-Speed CircuitSwitched Data (HSCSD), etc. Enhanced Data rates for GSM Evolution (EDGE), Enhanced sector coordinate global telecom networks and services. 110 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 111
, which can connect with numerous wireless clients and let them access the network. • A bridge is a radio that relays communications between access points and wireless clients, extending a network's range. Traditionally, a wireless network operates in one of two ways. P-661HNU-Fx User's Guide 111 - ZyXEL P-661HW-D1 | User Guide - Page 112
as the printer) or with the Internet. Your ZyXEL Device is the AP. Every wireless network must follow these basic guidelines: • Every device in the same wireless network must use the same SSID. The SSID is the name of the wireless network. It stands for Service 661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 113
connected to the wireless LAN and you change the ZyXEL Device's SSID or security settings, you will lose your wireless connection when you press Apply to confirm. You must then change the wireless settings of your computer to match the ZyXEL Device's new settings. P-661HNU-Fx User's Guide 113 - ZyXEL P-661HW-D1 | User Guide - Page 114
the wireless LAN. Wireless Network Settings Wireless The SSID (Service Set IDentity) identifies the service set with which a Network wireless device is associated. Wireless MAC address of the wireless interface on the ZyXEL Device when wireless LAN is enabled. 114 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 115
modes. Click Apply to save your changes back to the ZyXEL Device. Click Cancel to restore your previously saved settings. 6.2.1 No Security Select No Security to allow wireless stations to communicate with the access points without any data encryption or authentication. P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 116
on your ZyXEL Device, Basic (Static WEP/Shared WEP Encryption) WEP , Open System (Static WEP) and Shared Key (Shared WEP). Open system is implemented for or peer computer do not share a secret key. Thus the wireless that is not encrypted. Shared key mode involves a shared secret key to authenticate - ZyXEL P-661HW-D1 | User Guide - Page 117
the ZyXEL Device and the wireless stations must use the same WEP key for data transmission. If you want to manually set the WEP key, enter any 5 or 13 characters (ASCII string) or 10 or 26 hexadecimal characters ("0-9", "A-F") for a 64bit or 128-bit WEP key respectively. P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 118
mode provides both improved data encryption and user authentication over WEP. Using a Pre-Shared Key (PSK), both the ZyXEL Device and the connecting client share a common password from the Security Mode list. Figure password, instead of user-specific credentials. more.../hide more Type a pre-shared - ZyXEL P-661HW-D1 | User Guide - Page 119
mode to connect to your ZyXEL Device. The ZyXEL Device supports WPA-PSK and WPA2-PSK simultaneously. Encryption If the security mode is WPA-PSK, the encryption mode mode is WPA-PSK2 and WPA-PSK Compatible is enabled, the encryption mode security mode is currently The WPA security mode is a security - ZyXEL P-661HW-D1 | User Guide - Page 120
. The default port number is 1812. You need not change this value unless your network administrator instructs you to do so with additional information. Shared Secret Enter a password (up to 31 alphanumeric characters) as the key to be shared between the external authentication server and the ZyXEL - ZyXEL P-661HW-D1 | User Guide - Page 121
the Service Set with which a wireless device is associated. This field displays the name of the wireless profile on the network. When a wireless client scans for an AP to associate with, this is the name that is broadcast and seen in the wireless client utility. P-661HNU-Fx User's Guide 121 - ZyXEL P-661HW-D1 | User Guide - Page 122
> More AP LABEL DESCRIPTION Security This field indicates the security mode of the SSID profile. Modify Click the Edit icon to configure Settings Wireless Network Name (SSID) The SSID (Service Set IDentity) identifies the service set with which a wireless device is associated. Wireless - ZyXEL P-661HW-D1 | User Guide - Page 123
page 135 for more information about WPS. Note: The ZyXEL Device applies the security settings of the SSID1 profile (see Section 6.2 on page 113). If you want to use the WPS feature, make sure you have set the security mode of SSID1 to WPA-PSK, WPA2-PSK or No Security. P-661HNU-Fx User's Guide 123 - ZyXEL P-661HW-D1 | User Guide - Page 124
WPS Click this button to add another WPS-enabled wireless device (within wireless range of the ZyXEL Device) to your wireless network. This button may either be a physical button on the outside (Personal Identification Number) of the client into the ZyXEL Device. 124 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 125
security settings for WPS connections on the ZyXEL Device. 802.11 Mode This is the 802.11 mode used. Only compliant WLAN devices can associate with the ZyXEL Device. SSID This is the name disable Wi-Fi MultiMedia (WMM) wireless networks for multimedia applications. P-661HNU-Fx User's Guide 125 - ZyXEL P-661HW-D1 | User Guide - Page 126
This enables the ZyXEL Device to automatically give a service a priority level according to the ToS value in the IP header of packets it sends. WMM QoS (Wifi MultiMedia Quality of Service) gives high priority Click Cancel to restore your previously saved settings. 126 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 127
> Scheduling LABEL DESCRIPTION Wireless LAN Scheduling Select Enable to activate wireless LAN scheduling on your ZyXEL Device. WLAN status Select On or Off to enable or disable the wireless LAN. Day wireless LANs in depth. For more information, see the appendix. P-661HNU-Fx User's Guide 127 - ZyXEL P-661HW-D1 | User Guide - Page 128
password, or a "key" phrase) can access the network. Second, they encrypt. This means that the information sent over the air is encoded. Only people with the code key can understand the information, and only people who have been authenticated are given the code key. 128 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 129
A good way to come up with effective security keys, passwords and so on is to use obscure information that you in which case the ZyXEL Device does not broadcast the SSID. In addition, you should change the default SSID to something that 6, 7, 8, 9, A, B, C, D, E, and F. P-661HNU-Fx User's Guide 129 - ZyXEL P-661HW-D1 | User Guide - Page 130
use the MAC address filter to tell the ZyXEL Device which devices are allowed or not allowed device in the wireless network has to support IEEE 802.1x to do this. For wireless networks, you can store the user names and passwords for each user in a RADIUS server. WPA2 130 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 131
wireless network supports. For example, suppose you have a wireless network with the ZyXEL Device and such as electric motors or microwaves. Problems with absorption occur when physical objects the signal. 6.7.4 BSS A Basic Service Set (BSS) exists when all communications 661HNU-Fx User's Guide 131 - ZyXEL P-661HW-D1 | User Guide - Page 132
The ZyXEL Device's MBSSID (Multiple Basic Service Set IDentifier) function allows you to use one access point to provide several BSSs simultaneously. You can then assign varying QoS priorities and/or security modes Protected Setup (WPS) Your ZyXEL Device supports WiFi Protected Setup (WPS - ZyXEL P-661HW-D1 | User Guide - Page 133
to configure security settings manually. Each WPS connection works between two devices. Both devices must support WPS (check each utility and locate the button (see the device's User's Guide for how to do this - for the ZyXEL Device, see Section 6.4 on page 123). 3 Press P-661HNU-Fx User's Guide 133 - ZyXEL P-661HW-D1 | User Guide - Page 134
or in the WPS section of the client's configuration interface (see the device's User's Guide for how to find the WPS PIN - for the ZyXEL Device, see Section 6.4 on page 123). 4 Enter the client's PIN in the AP see the wireless client in the list, WPS was successful. 134 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 135
or WPA2-PSK pre-shared key to the enrollee. Whether WPA-PSK or WPA2-PSK is used depends on the standards supported by the devices. If the registrar is already part of a network, it sends the existing information. If not, it generates the SSID and WPA(2)-PSK randomly. P-661HNU-Fx User's Guide 135 - ZyXEL P-661HW-D1 | User Guide - Page 136
not part of an existing network and can act as either enrollee or registrar (if it supports both functions). If the registrar is unconfigured, the security settings it transmits to the enrollee are AP to act as an enrollee, you must reset it to its factory defaults. 136 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 137
In step 2, you add another wireless client to the network. You know that Client 1 supports registrar mode, but it is better to use AP1 for the WPS handshake with the new client since 2 EXISTING CONNECTION REGISTRAR CLIENT 1 ENROLLEE SECURITY INFO AP1 CLIENT 2 P-661HNU-Fx User's Guide 137 - ZyXEL P-661HW-D1 | User Guide - Page 138
access point. However, you know that Client 2 supports the registrar function, so you use it to perform a randomly-generated WPA-PSK or WPA2PSK pre-shared key from the registrar device to the enrollee devices key the network is using (if the device supports this feature). Then, you can enter the - ZyXEL P-661HW-D1 | User Guide - Page 139
your wireless clients (usually printed on a label on the bottom of the device). If there is an unknown MAC address you can remove it or reset the AP. P-661HNU-Fx User's Guide 139 - ZyXEL P-661HW-D1 | User Guide - Page 140
Chapter 6 Wireless 140 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 141
LAN (Section 7.3 on page 146). • Use the UPnP screen to enable UPnP (Section 7.4 on page 148). • Use the File Sharing screen to enable file-sharing server (Section 7.5 on page 149). • Use the Printer Server screen to enable the print server (Section 7.6 on page 153). P-661HNU-Fx User's Guide 141 - ZyXEL P-661HW-D1 | User Guide - Page 142
ZyXEL Device unless you are instructed to do otherwise. DHCP DHCP (Dynamic Host Configuration Protocol) allows clients to obtain TCP/IP configuration at start-up from a server. This ZyXEL Device has a built-in DHCP server capability that assigns IP addresses and DNS servers to systems that support - ZyXEL P-661HW-D1 | User Guide - Page 143
resources such as a printer or files. Windows automatically assigns the workgroup name when you set up a network. Shares When settings are set to default, each USB device connected to the ZyXEL Device is given a folder, called a "share". If a USB hard drive connected to the ZyXEL Device has more - ZyXEL P-661HW-D1 | User Guide - Page 144
Remote (LPR) Protocol is software that provides printer spooling and print-server features using TCP/IP to connect printers and computers on a network. Supported OSs Your operating system must support TCP/IP ports for printing and be compatible with the LPR protocol. 144 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 145
Networking The following OSs support ZyXEL Device's printer sharing feature. • Microsoft default). Your ZyXEL Device automatically computes the subnet mask based on the IP address you enter, so do not change this field unless you are instructed to do so. DHCP Server State P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 146
DHCP Select Enable to have your ZyXEL Device assign IP addresses, an IP default gateway and DNS servers to LAN computers must have their DNS server addresses manually configured. If you do not configure a DNS server, you must know the IP address of a computer in order 661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 147
all check boxes or select the check box(es) in each entry to have the ZyXEL Device always assign the selected entry(ies)'s IP address(es) to the corresponding MAC address(es) (and host name(s)). You can screen, the following screen displays. Figure 41 Static DHCP: Add P-661HNU-Fx User's Guide 147 - ZyXEL P-661HW-D1 | User Guide - Page 148
UPnP. Be aware that anyone could use a UPnP application to open the web configurator's login screen without entering the ZyXEL Device's IP address (although you must still enter the password to access the web configurator). Apply Click Apply to save your changes. 148 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 149
for browsing. If you are connecting a USB hard drive that comes with an external power supply, make sure it is connected to an appropriate power source that is on. Note: If your USB device cannot be detected by the ZyXEL Device, see troubleshooting for suggestions. P-661HNU-Fx User's Guide 149 - ZyXEL P-661HW-D1 | User Guide - Page 150
as an example for Username. If no users have been created, these fields will appear empty. Add New User Click this only if you want to define a user name and a password required to access the share - see 7.5.3. Active Status Note: By default, everyone connected to the ZyXEL Device can access the - ZyXEL P-661HW-D1 | User Guide - Page 151
the default option. Select Security if you wish define usernames and passwords required to access a specific share - see 7.5.3 to create users. If you select this option, two lists will appear below and you must select from those lists which users can access the share P-661HNU-Fx User's Guide 151 - ZyXEL P-661HW-D1 | User Guide - Page 152
. The password is case sensitive. Retype New Password Retype the password that you entered above Apply Click Apply to save your changes. Back Click Back to return to the previous screen. Click on the Edit icon under the Modify label to change a user's settings. 152 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 153
your printer to the ZyXEL Device instead. Use this screen to enable or disable sharing of a USB printer via your ZyXEL Device. To access this screen, click Network Setting > Home Networking > Printer Server. Figure 48 Network Setting > Home Networking > Printer Server P-661HNU-Fx User's Guide 153 - ZyXEL P-661HW-D1 | User Guide - Page 154
ZyXEL Device as a DHCP server or disable it. When configured as a server, the ZyXEL Device provides the TCP/IP configuration for the clients. If you turn DHCP service off, you must have another DHCP server on your LAN, or else the computer must be manually configured. 154 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 155
. Private IP Addresses Every machine on the Internet must have a unique address. If your networks are isolated from the Internet, for example, only between your two branch offices, you can assign any IP addresses to the hosts without problems. However, the Internet P-661HNU-Fx User's Guide 155 - ZyXEL P-661HW-D1 | User Guide - Page 156
of IP Address Space". ZyXEL Device Print Server Compatible USB Printers The following is a list of USB printer models compatible with the ZyXEL Device print server. Table 32 Compatible USB Printers BRAND CX3500 EPSON CX3900 EPSON EPL-5800 EPSON EPL-6200L 156 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 157
Table 32 Compatible USB Printers (continued) BRAND MODEL EPSON LP-2500 EPSON LP-8900 EPSON RX 510 EPSON RX 530 EPSON 5610 HP Officejet 7210 HP Officejet Pro L7380 HP Photosmart 2610 HP Photosmart 3110 HP Photosmart 7150 P-661HNU-Fx User's Guide Chapter 7 Home Networking 157 - ZyXEL P-661HW-D1 | User Guide - Page 158
Chapter 7 Home Networking Table 32 Compatible USB Printers (continued) BRAND MODEL HP Photosmart 7830 HP Photosmart C5280 HP Photosmart D5160 HP PSC 1350 HP install the UPnP in Windows Me. 1 Click Start and Control Panel. Double-click Add/Remove Programs. 158 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 159
the Communications window, select the Universal Plug and Play check box in the Components selection box. Figure 51 Add/Remove Programs: Windows Setup: Communication: Components P-661HNU-Fx User's Guide 159 - ZyXEL P-661HW-D1 | User Guide - Page 160
. 2 Double-click Network Connections. 3 In the Network Connections window, click Advanced in the main menu and select Optional Networking Components .... Figure 52 Network Connections 160 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 161
Chapter 7 Home Networking 4 The Windows Optional Networking Components Wizard window displays. Select Networking Service in the Components selection box and click Details. Figure 53 Windows Optional Networking Components Wizard P-661HNU-Fx User's Guide 161 - ZyXEL P-661HW-D1 | User Guide - Page 162
Figure 54 Networking Services 6 Click OK to port of the ZyXEL Device. Turn on your computer and the ZyXEL Device. Auto-discover Your UPnP-enabled Network Device 1 Click Start and Control Panel. Double-click Network Connections. An icon displays under Internet Gateway. 162 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 163
2 Right-click the icon and select Properties. Figure 55 Network Connections Chapter 7 Home Networking P-661HNU-Fx User's Guide 163 - ZyXEL P-661HW-D1 | User Guide - Page 164
Chapter 7 Home Networking 3 In the Internet Connection Properties window, click Settings to see the port mappings there were automatically created. Figure 56 Internet Connection Properties 164 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 165
to manually add port mappings. Figure 57 Internet Connection Properties: Advanced Settings Figure 58 Internet Connection Properties: Advanced Settings: Add 5 When the UPnP-enabled device is disconnected from your computer, all port mappings will be deleted automatically. P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 166
without finding out the IP address of the ZyXEL Device first. This comes helpful if you do not know the IP address of the ZyXEL Device. Follow the steps below to access the web configurator. 1 Click Start and then Control Panel. 2 Double-click Network Connections. 166 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 167
3 Select My Network Places under Other Places. Figure 61 Network Connections Chapter 7 Home Networking 4 An icon with the description for each UPnP-enabled device displays under Local Network. P-661HNU-Fx User's Guide 167 - ZyXEL P-661HW-D1 | User Guide - Page 168
. Figure 62 Network Connections: My Network Places 6 Right-click on the icon for your ZyXEL Device and select Properties. A properties window displays with basic information about the ZyXEL Device. Figure 63 Network Connections: My Network Places: Properties: Example 168 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 169
You create one static route to connect to services offered by your ISP behind router R2. You create another static route to communicate with a separate network behind a router R3 connected to the LAN. Figure 64 Example of Static Routing Topology A R1 LAN R3 WAN R2 P-661HNU-Fx User's Guide 169 - ZyXEL P-661HW-D1 | User Guide - Page 170
as the device's LAN or WAN port. The gateway helps forward packets to their destinations. Subnet Mask This parameter specifies the IP network subnet mask of the final route on the ZyXEL Device. Click the Delete icon to remove a static route from the ZyXEL Device. 170 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 171
network segment as the device's LAN or WAN port. The gateway helps forward packets to their destinations. You can decide if you want to forward packets to a gateway IP address or a bound interface. Apply Back If changes. Click Back to exit this screen without saving. P-661HNU-Fx User's Guide 171 - ZyXEL P-661HW-D1 | User Guide - Page 172
Chapter 8 Routing 172 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 173
have the ZyXEL Device forward DNS requests for the domain name mail.example.com through the WAN interface ppp1.123 to the DNS server 10.10.23.7. Figure 67 Example of DNS Routing Topology LAN WAN atm0.100 DNS:168.92.5.1 (Default) ppp1.123 sip.service.com P-661HNU-Fx User's Guide mail.example - ZyXEL P-661HW-D1 | User Guide - Page 174
Route Screen The DNS Route screens let you view and configure DNS routes on the ZyXEL Device. Click Network Setting > DNS Route to open the DNS Route screen. Figure 68 a DNS route on the ZyXEL Device. Click the Delete icon to remove a DNS route from the ZyXEL Device. 174 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 175
"*" (asterisk) as the left most part of a domain name, such as *.example.com. The ZyXEL Device forwards DNS queries for any domain name ending in example.com to the WAN interface specified in this route. changes. Back Click Back to exit this screen without saving. P-661HNU-Fx User's Guide 175 - ZyXEL P-661HW-D1 | User Guide - Page 176
Chapter 9 DNS Route 176 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 177
those for which jitter alone is a problem such as Internet radio or streaming video ZyXEL Device to automatically assign priority to upstream traffic according to the IEEE 802.1p priority level, IP ZyXEL Device's QoS-related packet statistics (Section 10.5 on page 186). P-661HNU-Fx User's Guide 177 - ZyXEL P-661HW-D1 | User Guide - Page 178
CoS (class of service) is a way ZyXEL Device automatically assign priority to upstream traffic according to the IEEE 802.1p priority level, IP precedence or packet length. Click Network Setting > QoS to open the General screen. Figure 70 Network Setting > QoS > General 178 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 179
your network performance. You can give priority to traffic that the ZyXEL Device forwards out through the WAN interface. Give high priority to voice and video to make them run more smoothly. Similarly, give low priority to many large file downloads so that they do not reduce the quality of other - ZyXEL P-661HW-D1 | User Guide - Page 180
Chapter 10 Quality of Service (QoS) 10.3 The Queue Setup shows the descriptive name of this queue. Interface This shows the name of the ZyXEL Device's interface through which traffic in this queue passes. Priority This shows the priority previously saved settings. 180 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 181
10 Quality of Service (QoS) 10.3.1 Limit Apply Back If two queues have the same priority level, the ZyXEL Device divides the bandwidth across the queues according to their weights. Queues address, source port number, destination port number or incoming interface. For P-661HNU-Fx User's Guide 181 - ZyXEL P-661HW-D1 | User Guide - Page 182
port (such as Telnet) to form a flow. You can give different priorities to traffic that the ZyXEL Device forwards out through the WAN interface. Give high priority to voice and video to make them run more smoothly. Similarly, give low priority to many large file downloads P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 183
Chapter 10 Quality of Service (QoS) 10.4.1 Add/Edit QoS Class Click Add new Classifier in the Class Setup screen or the Edit icon to enable this classifier. Class Name Enter a descriptive name of up to 32 printable English keyboard characters, including spaces. P-661HNU-Fx User's Guide 183 - ZyXEL P-661HW-D1 | User Guide - Page 184
any source IP address. Enter the source subnet mask. If you select TCP or UDP in the IP Protocol field, select the check box and enter the port number(s) of the source. Select this option to exclude the packets that match the specified criteria from this classifier. 184 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 185
port number(s) of the source. Select this option to exclude the packets that match the specified criteria from this classifier. This field is available only when you select IP in the Ether Type field. IP Packet Length DSCP Select this option and select the protocol (service you select IP in the - ZyXEL P-661HW-D1 | User Guide - Page 186
IP Protocol field. Select this option and select a DHCP option. If you select Vendor Class ID (DHCP Option 60), enter the Class ID of the matched traffic, such as the type of the hardware or firmware packets. Service Exclude Select the service classification To view the ZyXEL Device's QoS packet - ZyXEL P-661HW-D1 | User Guide - Page 187
to different packet types. DiffServ (Differentiated Services) is a class of service (CoS) model that marks packets so that they receive specific per-hop treatment at DiffServ-compliant network devices along the route based on the application types and traffic flow. P-661HNU-Fx User's Guide 187 - ZyXEL P-661HW-D1 | User Guide - Page 188
Hop Behavior DiffServ defines a new DS (Differentiated Services) field to replace the Type of Service (TOS) field in the IP header. The DS field contains a 2-bit forwarding. Resources can then be allocated according to the DSCP values and the configured policies. 188 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 189
global address refers to the IP address of the host when the same packet is traveling in the WAN side. NAT In the simplest form, NAT changes the source IP address in a packet received from a subscriber (the inside local address) to another (the inside global address) P-661HNU-Fx User's Guide 189 - ZyXEL P-661HW-D1 | User Guide - Page 190
Port Forwarding (Example) Let's say you want to assign ports 21-25 to one FTP, Telnet and SMTP server (A in the example), port 80 to another (B in the example) and assign a default server IP address of 192.168.1.35 to a third (C in the example). You assign the LAN IP 190 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 191
manually added a service. You can change this by clicking the edit icon. This shows the WAN interface through which the service is forwarded. This is the first external port number that identifies a service. This is the last external port number that identifies a service. P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 192
the last internal port number that identifies a service. Port Server IP Address This is the server's IP address. Protocol This shows the IP protocol supported by this virtual server, whether it is TCP, UDP, or TCP/UDP. Modify Click the Edit icon to edit the port forwarding rule. Apply Cancel - ZyXEL P-661HW-D1 | User Guide - Page 193
field. To forward a series of ports, enter the last port number in a series that begins with the port number in the External Start Port field above. Translation Start Port This shows the port number to which you want the ZyXEL Device to translate the incoming port. For a range of ports, enter the - ZyXEL P-661HW-D1 | User Guide - Page 194
Inside/outside denotes where a host is located relative to the ZyXEL Device, for example, the computers of your subscribers are the in the local network, while an inside global address (IGA) is the IP address of the same inside host when the packet is on the WAN WAN. 194 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 195
hosts on other networks. It replaces the original IP source address (and TCP or UDP source port numbers for Many-to-One and Many-to-Many Overload NAT mapping) in each packet and then forwards it to the Internet. The ZyXEL Device keeps track of the original addresses P-661HNU-Fx User's Guide 195 - ZyXEL P-661HW-D1 | User Guide - Page 196
192.168.1.12 SA 192.168.1.10 NAT Table Inside Local IP Address 192.168.1.10 192.168.1.11 192.168.1.12 192.168.1.13 Inside Global IP Address IGA 1 IGA 2 IGA 3 IGA 4 SA IGA1 WAN Inside Local Address (ILA) 192.168.1.11 192.168.1.10 Inside Global Address (IGA) 196 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 197
.dyndns.org to be aliased to the same IP address as yourhost.dyndns.org. This feature is useful if you want to be able to use, for example, www.yourhost.dyndns.org and still reach your hostname. If you have a private WAN IP address, then you cannot use Dynamic DNS. P-661HNU-Fx User's Guide 197 - ZyXEL P-661HW-D1 | User Guide - Page 198
provider. User Name Password Apply Cancel You can specify up to two host names in the field separated by a comma (","). Type your user name. Type the password assigned to you. Click Apply to save your changes. Click Cancel to restore your previously saved settings. 198 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 199
WLAN. The following figure illustrates the default firewall action. User A can initiate ZyXEL Device's firewall (Section 13.2 on page 201). • Use the Services screen to view the configured firewall rules and add, edit or remove a firewall rule (Section 13.3 on page 201). P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 200
and a gateway to the Internet. ICMP uses Internet Protocol (IP) datagrams, but the messages are processed by the TCP/IP software and directly apparent to the application user. Finding Out More See Section 13.4 on page 203 for advanced technical information on firewall. 200 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 201
firewall. The ZyXEL Device performs access control and protects against Denial of Service (DoS) Services Screen Use this screen to enable service blocking and to maintain the list of services you want to block. To access this screen, click Security > Firewall > Services. P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 202
. For example, suppose you want to define the Gnutella service. Select TCP type and enter a port range of 6345-6349. Click this to add the selected service in Available Services to the Blocked Services list. Note that the service is blocked immediately after clicking this. P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 203
Change the default password via web configurator. 2 Think about access control before you connect to the network in any way. 3 Limit who can access your ZyXEL Device. 4 Don't enable any local service (such , if IRC is blocked, are there users that require this service? P-661HNU-Fx User's Guide 203 - ZyXEL P-661HW-D1 | User Guide - Page 204
that allows Internet users access to resources on the LAN create a security vulnerability? For example, if FTP ports (TCP 20, 21) are allowed from the Internet to the LAN, Internet users may be able to into the correct fields in the web configurator screens. 204 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 205
14 MAC Filter 14.1 Overview This chapter discusses MAC address filtering. You can configure the ZyXEL Device to permit access to clients based on their MAC addresses in the MAC Filter screen. :02. You need to know the MAC address of the devices to configure this screen. P-661HNU-Fx User's Guide 205 - ZyXEL P-661HW-D1 | User Guide - Page 206
wireless clients access to the ZyXEL Device. To change your ZyXEL Device's MAC filter settings, to the ZyXEL Device. MAC addresses not listed will be denied access to the ZyXEL Device. MAC the wireless station that are allowed access to the ZyXEL Device in these address fields. Enter the MAC - ZyXEL P-661HW-D1 | User Guide - Page 207
.2 on page 210). • Use the Trusted CA screens to save the certificates of trusted CAs to the ZyXEL Device. You can also export the certificates to a computer (Section 15.2.1 on page 212). 15.1.2 What Tim keeps the private key and makes the public key openly available. P-661HNU-Fx User's Guide 207 - ZyXEL P-661HW-D1 | User Guide - Page 208
key to decrypt the message. The ZyXEL Device uses certificates based on public-key of connection. For example, a VPN tunnel might use the triple DES File Formats The certification authority certificate that you want to import has to be in one of these file formats: 208 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 209
many programs use text files by default. 15.1.3 Verifying a Certificate Before you import a trusted CA or trusted remote host certificate into the ZyXEL Device, you should certificate has a ".cer" or ".crt" file name extension. Figure 86 Certificates on Your Computer P-661HNU-Fx User's Guide 209 - ZyXEL P-661HW-D1 | User Guide - Page 210
to view the ZyXEL Device's summary list of certificates and certification requests. You can import the following certificates to your ZyXEL Device: • Web Server - This certificate secures HTTP connections. • SSH/SCP/SFTP - This certificate secures remote connections. 210 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 211
Cert Click this button and then Save in the File Download screen. The Save As screen opens, browse to file you want to upload. Current File This field displays the name used to identify this certificate. It is recommended that you give each certificate a unique name. P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 212
SSH/SCP/SFTP certificate. Replace Reset This shows the file format of the current certificate. Click this to replace the certificate(s) and save your changes back to the ZyXEL Device. Click this to clear a certificate that one or more features is configured to use. 212 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 213
Trusted CA > Import LABEL DESCRIPTION Certificate File Path Type in the location of the file you want to upload in this ZyXEL Device to check a certification authority's list of revoked certificates before trusting a certificate issued by the certification authority. P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 214
the certificate into an e-mail to send to friends or colleagues or you can copy and paste the certificate into a text editor and save the file on a management computer for later distribution (via floppy disk for example). Click this to return to the previous screen. 214 - ZyXEL P-661HW-D1 | User Guide - Page 215
VPN Certificates LABEL DESCRIPTION Import Certificate Click this button to open a screen where you can save the certificate of a certification authority that you trust to the ZyXEL to use.). Click on the Download icon to download a certificate to your computer. P-661HNU-Fx User's Guide 215 - ZyXEL P-661HW-D1 | User Guide - Page 216
certificate to the ZyXEL Device. Figure 93 Security > Certificates > VPN Certificates The following table describes the labels in this screen. Table 56 VPN Certificates > Apply to save the certificate on the ZyXEL Device. Click Back to return to the previous screen. 216 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 217
What You Can Do in the VPN Screens • Use the Setup screen (Section 16.2 on page 220) to view the configured VPN policies and add, edit or remove a VPN policy. • Use the Monitor screen (Section 16.5 on page 228) to display and manage the current active VPN connections. P-661HNU-Fx User's Guide 217 - ZyXEL P-661HW-D1 | User Guide - Page 218
is configured as 0.0.0.0: • The ZyXEL Device uses the current ZyXEL Device WAN IP address (static or dynamic) to set up the VPN tunnel. Secure Gateway Address Secure Gateway Address is the WAN IP address or domain name of the remote IPSec router (secure gateway). 218 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 219
Manual key management. Finding Out More See Section 16.6 on page 229 for advanced technical information on IPSec VPN. 16.1.3 Before You Begin If a VPN tunnel uses Telnet, FTP, WWW, then you should configure remote management (Remote MGMT) to allow access for that service. P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 220
active or not. A Yes signifies that this VPN policy is active. No signifies that this VPN policy is not active. Tunnel Name This field displays the identification name for this VPN policy. Local Address This field will display the IP addres used by the ZyXEL Device. 220 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 221
to go to the screen where you can edit the VPN configuration. Apply Cancel Click the Remove icon to remove an existing VPN configuration. Click this to save your changes and apply them to the ZyXEL Device. Click this return your settings to their last saved values. P-661HNU-Fx User's Guide 221 - ZyXEL P-661HW-D1 | User Guide - Page 222
you want to set up a VPN tunnel when there are NAT routers between the ZyXEL Device and remote IPSec router. The remote IPSec router must also enable NAT traversal, and the NAT routers have to forward UDP port 4500 packets to the remote IPSec router behind the NAT router. P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 223
same negotiation mode. Local Specify the IP addresses of the devices behind the ZyXEL Device that can use the VPN tunnel. The local IP addresses must the internet My IP Address only shows the IP of the selected interface. There is no need to modify this information. P-661HNU-Fx User's Guide 223 - ZyXEL P-661HW-D1 | User Guide - Page 224
VPN connection. Local ID Content If you are not sure of this information you can leave it blank, but do not use 0.0.0.0. Select IP to identify this ZyXEL Device by its IP address. Select DNS to identify this ZyXEL any string. Select IP to identify the remote IPSec router by its IP address. Select - ZyXEL P-661HW-D1 | User Guide - Page 225
ZyXEL Device to distinguish between VPN connection requests that come in from remote IPSec routers with dynamic WAN IP addresses. Security Protocol Pre-Shared Key Click the button to use a pre-shared to the ZyXEL Device. Click Back to return to the previous screen. P-661HNU-Fx User's Guide 225 - ZyXEL P-661HW-D1 | User Guide - Page 226
Edit > Advanced Setup The following table describes the fields in this screen. Table 59 Security > VPN > Setup > Edit > Advanced Setup LABEL DESCRIPTION Advanced Setup Phase 1 Encryption Algorithm Select 3DES, are considered even more secure than MD5 and SHA1. 226 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 227
. However, every time the VPN tunnel renegotiates, all users accessing remote resources are temporarily disconnected. Perfect Forward Secrecy (PFS) is disabled (NONE) by default in phase 2 IPSec SA refers to Diffie-Hellman Group 14, providing 2048 bits of key strength. P-661HNU-Fx User's Guide 227 - ZyXEL P-661HW-D1 | User Guide - Page 228
router must support DPD. If there has been no traffic for at least 15 seconds, the ZyXEL Device sends a message to the remote IPSec router. If the remote IPSec router responds, the ZyXEL Device transmits algorithm, and authentication algorithm used in each VPN tunnel. 228 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 229
current active VPN connection(s). 16.6 IPSec VPN Technical default standards for packet structure (including implementation algorithms). The Encryption Algorithm describes the use of encryption techniques such as DES (Data Encryption Standard) and Triple DES algorithms. P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 230
are performed over the combination of the "original header plus original payload," which is unchanged by a NAT device. Transport mode ESP with authentication is not compatible with NAT. Table 61 VPN and NAT SECURITY PROTOCOL AH AH MODE NAT Transpor N t Tunnel N 230 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 231
a result, the VPN device at the transport mode either, but the ZyXEL Device forward UDP port 500 to IPSec router A. Finally, NAT is compatible with ESP in tunnel mode because integrity checks are performed over the combination of the "original header plus original payload," P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 232
Y* - This is supported in the ZyXEL Device if you enable NAT traversal. 16.6.4 Encapsulation The two modes of operation for IPSec VPNs are Transport mode and Tunnel mode. Figure 103 Transport and Tunnel Mode IPSec Encapsulation Tunnel Mode Tunnel mode encapsulates the entire IP packet to transmit - ZyXEL P-661HW-D1 | User Guide - Page 233
VPN Choose a negotiation mode. • Authenticate the connection by entering a pre-shared key. • Forward Secrecy (PFS) using Diffie-Hellman public-key cryptography - see Appendix D on page 335. Select None (the default) to disable PFS. • Choose Tunnel mode or Transport mode. P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 234
VPN tunnels are created from ZyXEL Device A; one to branch office 2, one to branch office 3 and another to headquarters. In order to access computers that use private domain names on the headquarters (HQ) network, the ZyXEL Device at branch office 1 uses the Intranet 234 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 235
dynamic WAN IP addresses. The ZyXEL Device can distinguish up to 12 incoming SAs because you can select between three encryption algorithms (DES, 3DES and AES), two authentication algorithms (MD5 and SHA1) and two key groups (DH1 and DH2) when you configure a VPN rule P-661HNU-Fx User's Guide 235 - ZyXEL P-661HW-D1 | User Guide - Page 236
IP Type the IP address of your computer or leave the field blank to have the ZyXEL Device automatically use its own IP IP Type the IP address of the computer with which you will make the VPN connection or leave the field blank to have the ZyXEL match the remote router's IP address or what you - ZyXEL P-661HW-D1 | User Guide - Page 237
VPN/IPSec Examples The following examples show how multiple telecommuters can make VPN connections to a single ZyXEL Device at headquarters. The telecommuters use IPSec routers with dynamic WAN IP addresses. The ZyXEL Device at headquarters has a static public IP address. P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 238
distinguish between VPN rules. Telecommuters can each use a separate VPN rule to simultaneously access a ZyXEL Device at headquarters. They can use different IPSec parameters. The local IP addresses (or ranges of addresses) of the rules configured on the ZyXEL Device 238 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 239
A (telecommutera.dydns.org) Local ID Type: IP Local ID Content: 192.168.2.12 Local IP Address: 192.168.2.12 Headquarters ZyXEL Device Rule 1: Peer ID Type: IP Peer ID Content: 192.168.2.12 Secure Gateway Address: telecommuter1.com Remote Address 192.168.2.12 P-661HNU-Fx User's Guide 239 - ZyXEL P-661HW-D1 | User Guide - Page 240
.dydns.org) Local ID Type: E-mail Local ID Content: [email protected] Local IP Address: 192.168.4.15 Headquarters ZyXEL Device Rule 3: Peer ID Type: E-mail Peer ID Content: [email protected] Secure Gateway Address: telecommuterc.com Remote Address 192.168.4.15 240 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 241
traffic statistics (Section 17.3 on page 242). • Use the NAT screen to view the NAT status of the ZyXEL Device's client(s) (Section 17.4 on page 243). • Use the 3G Backup screen to view the 3G connection in this screen. Figure 108 System Monitor > Traffic Status > WAN P-661HNU-Fx User's Guide 241 - ZyXEL P-661HW-D1 | User Guide - Page 242
number of bytes received and sent through the WAN interface of the ZyXEL Device. Refresh Interval Select how often you want the ZyXEL Device to update this screen from the drop-down list box. Connected in this screen. Figure 109 System Monitor > Traffic Status > LAN 242 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 243
Monitor > Traffic Status > NAT LABEL DESCRIPTION Refresh Interval Select how often you want the ZyXEL Device to update this screen from the drop-down list box. Device Name This shows the name of the client. IP Address This shows the IP address of the client. P-661HNU-Fx User's Guide 243 - ZyXEL P-661HW-D1 | User Guide - Page 244
number of bytes received and sent through the 3G interface of the ZyXEL Device. Refresh Interval Select how often you want the ZyXEL Device to update this screen from the drop-down list box. Connected indicates the number of received packets dropped on this interface. P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 245
system password (up to 30 characters). Note that as you type a password, the screen displays a (*) for each character you type. After you change the password, use the new password to access the ZyXEL Device. Retype to Confirm Type the new password again for confirmation. P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 246
Chapter 18 User Account Table 73 Maintenance > User Account (continued) LABEL DESCRIPTION Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. 246 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 247
following file transfer methods use SSH: • Secure Copy (SC) is a secure way of transferring files between computers. It uses port 22. • SSH File Transfer Protocol or Secure File Transfer Protocol (SFTP) is an old way of transferring files between computers. It uses port 22. P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 248
Port You may change the server port number for a service if needed, however you must use the same port number in order to use that service for remote management. Apply Click Apply to save your changes. Cancel Click Cancel to restore your previously saved settings. 248 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 249
owner of a network connection. For example, in the network address "www.zyxel.com/support/files", the domain name is "www.zyxel.com". 20.2 The System Screen Use the System screen to configure the system computer name field and enter it as the ZyXEL Device System Name. P-661HNU-Fx User's Guide 249 - ZyXEL P-661HW-D1 | User Guide - Page 250
left idle before the session times out. The default is 5 minutes. After it times out you have to log in with your password again. Very long idle timeouts may have security risks your changes back to the ZyXEL Device. Click this to begin configuring this screen afresh. 250 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 251
describes the fields in this screen. Table 76 Maintenance > Time Setting LABEL DESCRIPTION Current Date/Time Current Time This field displays the time of your ZyXEL Device. Current Date This field displays the date of your ZyXEL Device. Time and Date Setup P-661HNU-Fx User's Guide 251 - ZyXEL P-661HW-D1 | User Guide - Page 252
. Time Protocol This shows the time service protocol that your time server sends when you turn on the ZyXEL Device. Time Server Address Enter the IP address or URL (up to 20 +1). Click Apply to save your changes. Click Reset to begin configuring this screen afresh. 252 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 253
logs and which logs and/or immediate alerts the ZyXEL Device records in the Log Setting screen. 22.2 The Log Setting Screen To change your ZyXEL Device's log settings, click Maintenance > Log Setting. The screen appears as shown. Figure 116 Maintenance > Log Setting P-661HNU-Fx User's Guide 253 - ZyXEL P-661HW-D1 | User Guide - Page 254
Table 77 Maintenance > Log Setting LABEL DESCRIPTION Syslog Logging The ZyXEL Device sends a log to an external syslog server. Select server name or IP address of the syslog server that will log the selected categories of logs. UDP Port Enter the port number used by P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 255
the labels in this screen. Table 78 Maintenance > Firmware Upgrade LABEL DESCRIPTION Current Firmware Version This is the present Firmware version. File Path Type in the location of the file you want to upload in this field or click Browse ... to find it. P-661HNU-Fx User's Guide 255 - ZyXEL P-661HW-D1 | User Guide - Page 256
119 Network Temporarily Disconnected After two minutes, log in again and check your new firmware version in the Status screen. If the upload was not successful, an error screen will appear. Click OK to go back to the Firmware Upgrade screen. Figure 120 Error Message 256 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 257
recommended that you back up your configuration file before making configuration changes. The backup configuration file will be useful in case you need to return to your previous settings. Click Backup to save the ZyXEL Device's current configuration to your computer. P-661HNU-Fx User's Guide 257 - ZyXEL P-661HW-D1 | User Guide - Page 258
the same subnet as that of the default device IP address (192.168.1.1). See Appendix B on page 295 for details on how to set up your computer's IP address. If the upload was not successful, an error screen will appear. Click OK to go back to the Configuration screen. 258 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 259
reboot the ZyXEL Device remotely without turning the power off. You may need to do this if the ZyXEL Device hangs, for example. Click Maintenance > Reboot. Click the Reboot button to have the ZyXEL Device reboot. This does not affect the ZyXEL Device's configuration. P-661HNU-Fx User's Guide 259 - ZyXEL P-661HW-D1 | User Guide - Page 260
Chapter 24 Backup/Restore 260 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 261
261). • Use the DSL Line screen to check or reset your DSL connection (Section 25.3 on page 262). 25.2 The Ping Screen Use this screen to ping an IP address. Click Maintenance > Diagnostic to open the Ping screen shown next. Figure 124 Maintenance > Diagnostic > Ping P-661HNU-Fx User's Guide 261 - ZyXEL P-661HW-D1 | User Guide - Page 262
the fields in this screen. Table 80 Maintenance > Diagnostic > Ping LABEL DESCRIPTION Ping Type the IP address of a computer that you want to ping in order to test a connection. Click Ping open the screen shown next. Figure 125 Maintenance > Diagnostic > DSL Line 262 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 263
Asynchronous Transfer Mode (ATM (Quality of Service) can be ZyXEL Device sends an OAM F5 packet to the DSLAM/ATM switch and then returns it (loops it back) to the ZyXEL Device. The ATM loopback test is useful for troubleshooting problems with the DSLAM and ATM network. P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 264
downstream part of the connection (coming into the ZyXEL Device from the ISP). It is measured in sub-carrier loop has sufficient margins to support certain ADSL transmission rates, and possibly to reset ADSL Loading ADSL modem F/W... Reset ADSL Line Successfully!" 264 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 265
with the ZyXEL Device. 3 Make sure the power adaptor or cord is connected to the ZyXEL Device and plugged in to an appropriate power source. Make sure the power source is turned on. 4 Turn the ZyXEL Device off and on. 5 If the problem continues, contact the vendor. P-661HNU-Fx User's Guide 265 - ZyXEL P-661HW-D1 | User Guide - Page 266
not work, you have to reset the device to its factory defaults. See Section 1.7 on page 27. I forgot the password. 1 The default admin and user password is 1234. 2 If this does not work, you have to reset the device to its factory defaults. See Section 1.7 on page 27. 266 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 267
Guide. 3 Make sure your Internet browser does not block pop-up windows and has JavaScript and Java enabled. See Appendix C on page 325. 4 Reset the device to its factory defaults, and try to access the ZyXEL Device with the default IP address. See Section 1.7 on page 27. 5 If the problem continues - ZyXEL P-661HW-D1 | User Guide - Page 268
I cannot telnet to the ZyXEL Device. See the troubleshooting suggestions for I cannot see or access the Login screen in the web configurator. Ignore the suggestions about your browser. I cannot use FTP to upload / download the configuration file. / I cannot use FTP to upload new firmware. See the - ZyXEL P-661HW-D1 | User Guide - Page 269
Chapter 26 Troubleshooting 1 Make sure you configured a proper DSL WAN connection with the Internet account information provided by your ISP. 2 If you set up a WAN connection using bridging service (all LAN ports and WLAN BSSs are bridged to one WAN connection), make sure you turn off the DHCP - ZyXEL P-661HW-D1 | User Guide - Page 270
. The available security modes in your ZyXEL device are as follows: • WPA2-PSK: (recommended) This uses a pre-shared key with the WPA2 standard. • WPA-PSK: This has the device use either WPA-PSK or WPA2-PSK depending on which security mode the wireless client uses. 270 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 271
with an external power supply, make sure it is connected to an appropriate power source that is on. 4 Re-connect your USB device to the ZyXEL Device. 5 If the problem persists, make sure the option File Sharing Services(SMB) is enabled in the Web Configurator - see Section 3.5.1.1 on page 52. The - ZyXEL P-661HW-D1 | User Guide - Page 272
cable. The Local Area Connection icon for UPnP disappears in the screen. Restart your computer. I cannot open special applications such as white board, file transfer and video when I use the MSN messenger. 1 Wait more than three minutes. 2 Restart the applications. 272 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 273
10/100 Mbps RJ-45 Ethernet ports DSL Port P-661HNU-F1: One RJ-11 DSL port RESET Button WLAN/WPS Button P-661HNU-F3: One RJ-45 DSL port Restores factory defaults 1 second: Turn on or off WLAN 5 seconds: Start WPS USB Port One USB v2.0 port for file sharing / print server setup / 3G WAN Adapter - ZyXEL P-661HW-D1 | User Guide - Page 274
Default Password 1234 DHCP Server IP Pool Starting Address: 192.168.1.33 Static DHCP Addresses Static Routes Device Management Wireless Functionality (wireless devices only) Firmware Upgrade Size: 32 10 16 Use the web configurator to easily configure the rich range of features on the ZyXEL - ZyXEL P-661HW-D1 | User Guide - Page 275
a service (HTTP or FTP traffic for example) from a computer on a network (LAN or WAN for example) can access the ZyXEL Device. • Via HTTP/Telnet/SSH/SCP/SFTP • Configurable port number PPPoE Support (RFC2516) Multiple PVC (Permanent Virtual Circuits) Support Packet Filters • Firmware upgrade via - ZyXEL P-661HW-D1 | User Guide - Page 276
Line Interpreter) Firmware upgrade via HTTP Configuration file extraction using CLI, SFTP, SCP and TR-069. Factory reset vis CLI, TR-069 and physical button Telnet for remote management Remote Firmware Upgrade Syslog TR-069, TR-064, TR-068v2, TR098, TR-106 276 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 277
wireless stations and the access points. Multiple SSID Multiple SSID allows the ZyXEL Device to operate up to 4 different wireless networks simultaneously, each with independently standard that defines stronger encryption, authentication and key management than WPA. P-661HNU-Fx User's Guide 277 - ZyXEL P-661HW-D1 | User Guide - Page 278
bridge supported in the ZyXEL Device. Table 85 Standards Supported IP Network Address Translator (NAT) RFC 1661 The Point-to-Point Protocol (PPP) RFC 2236 Internet Group Management Protocol, Version 2 RFC 2516 A Method for Transmitting PPP Over Ethernet (PPPoE) 278 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 279
Standards Supported ( Bridges 802.1x Port Based Network Access Control IEEE 802.11e QoS IEEE 802.11 e Wireless LAN for Quality of Service SAR (Segmentation And Re-assembly) Wall-mounting Instructions Do the following to hang your ZyXEL Device on a wall. Note: See 661HNU-Fx User's Guide 279 - ZyXEL P-661HW-D1 | User Guide - Page 280
the screws on the wall. Hang the ZyXEL Device on the screws. Figure 126 Wall-mounting Example The following are dimensions of an M4 tap screw and masonry plug used for wall mounting. All measurements are in millimeters (mm). Figure 127 Masonry Plug and M4 Tap Screw 280 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 281
Chapter 27 Product Specifications P-661HNU-Fx User's Guide 281 - ZyXEL P-661HW-D1 | User Guide - Page 282
Chapter 27 Product Specifications 282 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 283
as computers, servers, routers, and printers) needs an IP address to communicate across the network. These IP address is the network number, and the other part is the host ID. In the same way that houses on a street share a common street name, the hosts on a network share 661HNU-Fx User's Guide 283 - ZyXEL P-661HW-D1 | User Guide - Page 284
and Host ID Example 1ST OCTET: 2ND OCTET: 3RD OCTET: 4TH OCTET IP Address (Binary) Subnet Mask (Binary) Network Number Host ID (192) (168) (1) (2) 11000000 10101000 00000001 00000010 11111111 11111111 11111111 00000000 11000000 10101000 00000001 00000010 284 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 285
that network (192.168.1.255 with a 24-bit subnet mask, for example). As these two IP addresses cannot be used for individual hosts, calculate the maximum number of possible hosts in a network as - 2 216 - 2 28 - 2 23 - 2 MAXIMUM NUMBER OF HOSTS 16777214 65534 254 6 P-661HNU-Fx User's Guide 285 - ZyXEL P-661HW-D1 | User Guide - Page 286
Appendix A IP Addresses and Subnetting Notation Since the mask is always a continuous number of ones beginning from the left, followed by a continuous are the network number, and the remaining octet is the host ID, allowing a maximum of 28 - 2 or 254 possible hosts. 286 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 287
Appendix A IP Addresses and Subnetting The following figure shows the company network before subnetting. Figure 129 Subnetting Example: Before Subnetting You " host ID bit can have a value of either 0 or 1, allowing two subnets; 192.168.1.0 /25 and 192.168.1.128 /25. P-661HNU-Fx User's Guide 287 - ZyXEL P-661HW-D1 | User Guide - Page 288
itself, and 192.168.1.127 with mask 255.255.255.128 is its broadcast address. Therefore, the lowest IP address that can be assigned to an actual host for subnet A is 192.168.1.1 and the highest is 192 is 26 bits (11111111.11111111.11111111.11000000) or 255.255.255.192. 288 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 289
OCTET BIT VALUE 128 10000000 11000000 Highest Host ID: 192.168.1.190 Table 93 Subnet 4 IP/SUBNET MASK IP Address IP Address (Binary) Subnet Mask (Binary) Subnet Address: 192.168.1.192 Broadcast Address: 192 ID: 192.168.1.254 LAST OCTET BIT VALUE 192 11000000 11000000 P-661HNU-Fx User's Guide 289 - ZyXEL P-661HW-D1 | User Guide - Page 290
to create eight subnets (000, 001, 010, 011, 100, 101, 110 and 111). The following table shows IP address last octet values for each subnet. Table 94 Eight Subnets SUBNET SUBNET ADDRESS 1 0 2 32 3 64 .128.0 (/17) 2 32766 2 255.255.192.0 (/18) 4 16382 290 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 291
the network number portion of an IP address. Your ZyXEL Device will compute the subnet mask automatically based on the IP address that you entered. You don't need to change the subnet mask computed by the ZyXEL Device unless you are instructed to do otherwise. P-661HNU-Fx User's Guide 291 - ZyXEL P-661HW-D1 | User Guide - Page 292
. In the following example computer A has a static (or fixed) IP address that is the same as the IP address that a DHCP server assigns to computer B which is a DHCP client. Neither can access the Internet. This problem can be solved by assigning a different static IP 292 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 293
. Figure 132 Conflicting Computer IP Addresses Example Conflicting Computer and Router IP Addresses Example More than one device can not use the same IP address. In the following example, the computer and the router's LAN port both use 192.168.1.1 as the IP address. P-661HNU-Fx User's Guide 293 - ZyXEL P-661HW-D1 | User Guide - Page 294
Appendix A IP Addresses and Subnetting The computer cannot access the Internet. This problem can be solved by assigning a different IP address to the computer or the router's LAN port. Figure 133 Conflicting Computer and Router IP Addresses Example 294 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 295
.5 on page 311 • Linux: Ubuntu 8 (GNOME) on page 314 • Linux: openSUSE 10.3 (KDE) on page 319 Windows XP/NT/2000 The following example uses the default Windows XP display theme but can also apply to Windows 2000 and Windows NT. P-661HNU-Fx User's Guide 295 - ZyXEL P-661HW-D1 | User Guide - Page 296
Appendix B Setting Up Your Computer's IP Address 1 Click Start > Control Panel. Figure 134 Windows XP: Start Menu 2 In the Control Panel, click the Network Connections icon. Figure 135 Windows XP: Control Panel 296 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 297
-click Local Area Connection and then select Properties. Figure 136 Windows XP: Control Panel > Network Connections > Properties 4 On the General tab, select Internet Protocol (TCP/IP) and then click Properties. Figure 137 Windows XP: Local Area Connection Properties P-661HNU-Fx User's Guide 297 - ZyXEL P-661HW-D1 | User Guide - Page 298
DNS server, if that information was provided. 7 Click OK to close the Internet Protocol (TCP/IP) Properties window. 8 Click OK to close the Local Area Connection Properties window. Verifying Settings 1 Click Start > All Programs > Accessories > Command Prompt. 298 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 299
Connections, right-click a network connection, click Status and then click the Support tab to view your IP address and connection information. Windows Vista This section shows screens from Windows Vista Network and Internet icon. Figure 140 Windows Vista: Control Panel P-661HNU-Fx User's Guide 299 - ZyXEL P-661HW-D1 | User Guide - Page 300
and Sharing Center 5 Right-click Local Area Connection and then select Properties. Figure 143 Windows Vista: Network and Sharing Center Note: During this procedure, click Continue whenever Windows displays a screen saying that it needs your permission to continue. 300 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 301
Appendix B Setting Up Your Computer's IP Address 6 Select Internet Protocol Version 4 (TCP/IPv4) and then select Properties. Figure 144 Windows Vista: Local Area Connection Properties P-661HNU-Fx User's Guide 301 - ZyXEL P-661HW-D1 | User Guide - Page 302
, if that information was provided.Click Advanced. 9 Click OK to close the Internet Protocol (TCP/IP) Properties window. 10 Click OK to close the Local Area Connection Properties window. Verifying Settings 1 Click Start > All Programs > Accessories > Command Prompt. 302 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 303
Network Connections, right-click a network connection, click Status and then click the Support tab to view your IP address and connection information. Windows 7 This section shows screens from Windows 7 and Internet category. Figure 147 Windows 7: Control Panel P-661HNU-Fx User's Guide 303 - ZyXEL P-661HW-D1 | User Guide - Page 304
And Sharing Center 4 Double click Local Area Connection and then select Properties. Figure 149 Windows 7: Local Area Connection Status Note: During this procedure, click Continue whenever Windows displays a screen saying that it needs your permission to continue. 304 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 305
Appendix B Setting Up Your Computer's IP Address 5 Select Internet Protocol Version 4 (TCP/IPv4) and then select Properties. Figure 150 Windows 7: Local Area Connection Properties P-661HNU-Fx User's Guide 305 - ZyXEL P-661HW-D1 | User Guide - Page 306
the Internet Protocol (TCP/IP) Properties window. 9 Click OK to close the Local Area Connection Properties window. Verifying Settings 1 Click Start > All Programs > Accessories > Command Prompt. 2 In the Command Prompt window, type "ipconfig" and then press [ENTER]. 306 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 307
Appendix B Setting Up Your Computer's IP Address 3 The IP settings are displayed as follows. Figure 152 Windows 7: Internet Protocol Version 4 (TCP/IPv4) Properties Mac OS can also apply to 10.3. 1 Click Apple > System Preferences. Figure 153 Mac OS X 10.4: Apple Menu P-661HNU-Fx User's Guide 307 - ZyXEL P-661HW-D1 | User Guide - Page 308
Appendix B Setting Up Your Computer's IP Address 2 In the System Preferences window, click the Network icon. Figure 154 Mac OS X 10.4: System Preferences 3 from the network connection type list, and then click Configure. Figure 155 Mac OS X 10.4: Network Preferences 308 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 309
/IP tab. Figure 156 Mac OS X 10.4: Network Preferences > TCP/IP Tab. 5 For statically assigned settings, do the following: • From the Configure IPv4 list, select Manually. • In the IP Address field, type your IP address. • In the Subnet Mask field, type your subnet mask. P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 310
device. Figure 157 Mac OS X 10.4: Network Preferences > Ethernet 6 Click Apply Now and close the window. Verifying Settings Check your TCP/IP properties by clicking Applications > Utilities > Network Utilities, and then selecting the appropriate Network Interface from the Info tab. Figure 158 Mac - ZyXEL P-661HW-D1 | User Guide - Page 311
Up Your Computer's IP Address Mac OS X: 10.5 The screens in this section are from Mac OS X 10.5. 1 Click Apple > System Preferences. Figure 159 Mac OS X 10.5: Apple Menu 2 In System Preferences, click the Network icon. Figure 160 Mac OS X 10.5: Systems Preferences P-661HNU-Fx User's Guide 311 - ZyXEL P-661HW-D1 | User Guide - Page 312
Configure list, select Using DHCP for dynamically assigned settings. 5 For statically assigned settings, do the following: • From the Configure list, select Manually. • In the IP Address field, enter your IP address. • In the Subnet Mask field, enter your subnet mask. 312 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 313
Appendix B Setting Up Your Computer's IP Address • In the Router field, enter the IP address of your ZyXEL Device. Figure 162 Mac OS X 10.5: Network Preferences > Ethernet 6 Click Apply and close the window. P-661HNU-Fx User's Guide 313 - ZyXEL P-661HW-D1 | User Guide - Page 314
your specific distribution, release version, and individual configuration. The following screens use the default Ubuntu 8 installation. Note: Make sure you are logged in as the root administrator. Follow the steps below to configure your computer IP address in GNOME: 314 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 315
window opens, click Unlock to open the Authenticate window. (By default, the Unlock button is greyed out until clicked.) You cannot make changes to your configuration unless you first enter your admin password. Figure 165 Ubuntu 8: Network Settings > Connections P-661HNU-Fx User's Guide 315 - ZyXEL P-661HW-D1 | User Guide - Page 316
and password then click the Authenticate button. Figure 166 Ubuntu 8: Administrator Account Authentication 4 In the Network Settings window, select the connection that you want to configure, then click Properties. Figure 167 Ubuntu 8: Network Settings > Connections 316 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 317
IP address. • In the Configuration list, select Static IP address if you have a static IP address. Fill in the IP address, Subnet mask, and Gateway address fields. 6 Click OK to save the changes and close the Properties dialog box and return to the Network Settings screen. P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 318
provided. Figure 169 Ubuntu 8: Network Settings > DNS 8 Click the Close button to apply the changes. Verifying Settings Check your TCP/IP properties by clicking System > Administration > Network Tools, and then selecting the appropriate Network device from the Devices 318 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 319
specific distribution, release version, and individual configuration. The following screens use the default openSUSE 10.3 installation. Note: Make sure you are logged in as the root administrator. Follow the steps below to configure your computer IP address in the KDE: P-661HNU-Fx User's Guide 319 - ZyXEL P-661HW-D1 | User Guide - Page 320
Your Computer's IP Address 1 Click K Menu > Computer > Administrator Settings (YaST). Figure 171 openSUSE 10.3: K Menu > Computer Menu 2 When the Run as Root - KDE su dialog opens, enter the admin password and click OK. Figure 172 openSUSE 10.3: K Menu > Computer Menu 320 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 321
Appendix B Setting Up Your Computer's IP Address 3 When the YaST Control Center window opens, select Network Devices and then click the Network Card icon. connection Name from the list, and then click the Configure button. Figure 174 openSUSE 10.3: Network Settings P-661HNU-Fx User's Guide 321 - ZyXEL P-661HW-D1 | User Guide - Page 322
6 Select Dynamic Address (DHCP) if you have a dynamic IP address. Select Statically assigned IP Address if you have a static IP address. Fill in the IP address, Subnet mask, and Hostname fields. 7 Click Next to save the changes and close the Network Card Setup window. 322 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 323
IP Address 8 If you know your DNS server IP address(es), click the Hostname/DNS tab in Network Settings and then enter the DNS server information in the fields provided. Figure 176 openSUSE 10.3: Network Settings 9 Click Finish to save your settings and close the window. P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 324
Verifying Settings Click the KNetwork Manager icon on the Task bar to check your TCP/IP properties. From the Options sub-menu, select Show Connection Information. Figure 177 openSUSE is working properly. Figure 178 openSUSE: Connection Status - KNetwork Manager 324 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 325
device's IP address. Disable Pop-up Blockers 1 In Internet Explorer, select Tools, Pop-up Blocker and then select Turn Off Pop-up Blocker. Figure 179 Pop-up Blocker You can also check if pop-up blocking is disabled in the Pop-up Blocker section in the Privacy tab. P-661HNU-Fx User's Guide 325 - ZyXEL P-661HW-D1 | User Guide - Page 326
to allow pop-up windows from your device, see the following steps. 1 In Internet Explorer, select Tools, Internet Options and then the Privacy tab. 326 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 327
C Pop-up Windows, Java Script and Java Permissions 2 Select Settings...to open the Pop-up Blocker Settings screen. Figure 181 Internet Options: Privacy 3 Type the IP address of your device (the web page that you do not want to have blocked) with the prefix "http://". For example, http://192.168.167 - ZyXEL P-661HW-D1 | User Guide - Page 328
Appendix C Pop-up Windows, Java Script and Java Permissions 4 Click Add to move the IP address to the list of Allowed sites. Figure 182 Pop-up Blocker Settings 5 Click Close configurator do not display properly in Internet Explorer, check that JavaScript are allowed. 328 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 329
tab. Figure 183 Internet Options: Security 2 Click the Custom Level... button. 3 Scroll down to Scripting. 4 Under Active scripting make sure that Enable is selected (the default). 5 Under Scripting of Java applets make sure that Enable is selected (the default). P-661HNU-Fx User's Guide 329 - ZyXEL P-661HW-D1 | User Guide - Page 330
then the Security tab. 2 Click the Custom Level... button. 3 Scroll down to Microsoft VM. 4 Under Java permissions make sure that a safety level is selected. 330 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 331
(Sun) 1 From Internet Explorer, click Tools, Internet Options and then the Advanced tab. 2 Make sure that Use Java 2 for under Java (Sun) is selected. P-661HNU-Fx User's Guide 331 - ZyXEL P-661HW-D1 | User Guide - Page 332
Java, JavaScript and pop-ups in one screen. Click Tools, then click Options in the screen that appears. Figure 187 Mozilla Firefox: Tools > Options 332 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 333
Appendix C Pop-up Windows, Java Script and Java Permissions Click Content.to show the screen below. Select the check boxes as shown in the following screen. Figure 188 Mozilla Firefox Content Security P-661HNU-Fx User's Guide 333 - ZyXEL P-661HW-D1 | User Guide - Page 334
Appendix C Pop-up Windows, Java Script and Java Permissions 334 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 335
up an independent network, which is commonly referred to as an ad-hoc network or Independent Basic Service Set (IBSS). The following diagram shows an example of notebook computers using wireless adapters to form A and B can access the wired network and communicate P-661HNU-Fx User's Guide 335 - ZyXEL P-661HW-D1 | User Guide - Page 336
still access the wired network but cannot communicate with each other. Figure 190 Basic Service Set ESS An Extended Service Set (ESS) consists of a series of overlapping BSSs, each containing an access mediate wireless network traffic in the immediate neighborhood. 336 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 337
are not within range of each other. The following figure illustrates a hidden node. Both stations (STA) are within range of the access point (AP) or P-661HNU-Fx User's Guide 337 - ZyXEL P-661HW-D1 | User Guide - Page 338
reach RTS/CTS size. Note: Enabling the RTS Threshold causes redundant network overhead that could negatively affect the throughput performance instead of providing a remedy. 338 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 339
preamble when all wireless devices on the network support it, otherwise the ZyXEL Device uses long preamble. Note: The wireless devices MUST use the same preamble mode in order to communicate. IEEE 802.11g Wireless 11 Mbps or lower depending on range. IEEE 802.11g has P-661HNU-Fx User's Guide 339 - ZyXEL P-661HW-D1 | User Guide - Page 340
available on your ZyXEL Device. Table 98 Wireless Security Levels SECURITY LEVEL SECURITY TYPE Least Secure Unique SSID (Default) Unique SSID with same wireless security settings on the ZyXEL Device and on all wireless clients that you want to associate with it. 340 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 341
1x are: • User based identification that allows for roaming. • Support for RADIUS (Remote Authentication Dial In User Service, RFC 2138, 2139) for centralized user profile and accounting management access. • Access-Accept Sent by a RADIUS server allowing access. P-661HNU-Fx User's Guide 341 - ZyXEL P-661HW-D1 | User Guide - Page 342
one-way authentication method. The authentication server sends a challenge to the wireless client. The wireless client 'proves' that it knows the password by encrypting the password with the challenge and sends back the information. Password is not sent in plain text. 342 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 343
, PEAP only supports EAP methods, such as EAP-MD5, EAP-MSCHAPv2 and EAP-GTC (EAP-Generic Token Card), for client authentication. EAP-GTC is implemented only by Cisco. LEAP LEAP (Lightweight Extensible Authentication Protocol) is a Cisco implementation of IEEE 802.1x. P-661HNU-Fx User's Guide 343 - ZyXEL P-661HW-D1 | User Guide - Page 344
a default encryption wireless clients support WPA2 and Shared Key) that only requires a single (identical) password entered into each access point, wireless gateway and wireless client. As long as the passwords match, a wireless client will be granted access to a WLAN. 344 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 345
not support WPA mode password approach makes WPA(2)-PSK susceptible to brute-force password-guessing attacks but it's still an improvement over WEP as it employs a consistent, single, alphanumeric password to derive a PMK which is used to generate unique temporal encryption P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 346
download that adds WPA capability to Windows XP's built-in "Zero Configuration" wireless client. However, you must run Windows XP to use it. WPA(2) with RADIUS Application Example To set up WPA(2), you need the IP address of the RADIUS server, its port number (default is 1812), and the RADIUS shared - ZyXEL P-661HW-D1 | User Guide - Page 347
AP checks each wireless client's password and allows it to join the network only if the password matches. 3 The AP and wireless clients generate a common PMK (Pairwise Master Key). The key itself is not sent over the network, but is derived from the PSK and the SSID. P-661HNU-Fx User's Guide 347 - ZyXEL P-661HW-D1 | User Guide - Page 348
Matrix AUTHENTICATION METHOD/ KEY MANAGEMENT PROTOCOL ENCRYPTIO N METHOD ENTER MANUAL KEY IEEE 802.1X Open None No Disable Enable without with Dynamic WEP Key Yes Enable without Dynamic WEP Key Yes Disable Shared WEP No Enable with Dynamic WEP Key Yes Enable without Dynamic WEP - ZyXEL P-661HW-D1 | User Guide - Page 349
. dBi represents the true gain that the antenna provides. Types of Antennas for WLAN There are two types of antennas used for wireless LAN applications. P-661HNU-Fx User's Guide 349 - ZyXEL P-661HW-D1 | User Guide - Page 350
direction of the desired coverage area. WiFi Protected Setup Your ZyXEL Device supports WiFi Protected Setup (WPS), which is an easy way to configure security settings manually. Each WPS connection works between two devices. Both devices must support WPS (check each device 661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 351
have one, log into its configuration utility and locate the button (see the device's User's Guide for how to do this - for the ZyXEL Device, see Section 6.4 on page 123). 3 Press the button on one of the devices the following steps to set up WPS using the PIN method. P-661HNU-Fx User's Guide 351 - ZyXEL P-661HW-D1 | User Guide - Page 352
configuration interface and locate the PIN. Select the PIN connection mode (not PBC connection mode). See the device's User's Guide for how to do this - for the ZyXEL Device, see Section 6.4 on page 123. 3 Log see the wireless client in the list, WPS was successful. 352 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 353
creates a secure EAP (Extensible Authentication Protocol) tunnel and sends the network name (SSID) and the WPAPSK or WPA2-PSK pre-shared key to the enrollee. Whether WPA-PSK or WPA2-PSK is used depends on the standards supported by the devices. If the registrar is P-661HNU-Fx User's Guide 353 - ZyXEL P-661HW-D1 | User Guide - Page 354
be a registrar, and so can some WPS-enabled wireless clients. By default, a WPS devices is "unconfigured". This means that it is not part network and can act as either enrollee or registrar (if it supports both functions). If the registrar is unconfigured, the security settings 661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 355
AP to act as an enrollee, you must reset it to its factory defaults. Example WPS Network Setup This section shows how another wireless client to the network. You know that Client 1 supports registrar mode, but it is better to use AP1 for the WPS handshake CLIENT 2 P-661HNU-Fx User's Guide 355 - ZyXEL P-661HW-D1 | User Guide - Page 356
access point. However, you know that Client 2 supports the registrar function, so you use it to perform a randomly-generated WPA-PSK or WPA2PSK pre-shared key from the registrar device to the enrollee devices key the network is using (if the device supports this feature). Then, you can enter the - ZyXEL P-661HW-D1 | User Guide - Page 357
your wireless clients (usually printed on a label on the bottom of the device). If there is an unknown MAC address you can remove it or reset the AP. P-661HNU-Fx User's Guide 357 - ZyXEL P-661HW-D1 | User Guide - Page 358
Appendix D Wireless LANs 358 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 359
. BOOTP_SERVER UDP 67 DHCP Server. CU-SEEME TCP UDP 7648 24032 A popular videoconferencing solution from White Pines Software. DNS TCP/UDP 53 Domain Name Server, a service that matches web names (for example www.zyxel.com) to IP numbers. P-661HNU-Fx User's Guide 359 - ZyXEL P-661HW-D1 | User Guide - Page 360
news groups. NFS UDP 2049 Network File System - NFS is a client/ server distributed file service that provides transparent file sharing for network environments. NNTP TCP computer get e-mail from a POP3 server through a temporary connection (TCP/IP or other). 360 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 361
Used Services (continued) NAME PROTOCOL PORT(S) for multimedia on the Internet. SFTP TCP 115 Simple File Transfer Protocol. SMTP TCP 25 Simple Mail Transfer Protocol is IP networks. Its primary function is to allow users to log into remote host systems. P-661HNU-Fx User's Guide 361 - ZyXEL P-661HW-D1 | User Guide - Page 362
PROTOCOL PORT(S) DESCRIPTION TFTP UDP 69 Trivial File Transfer Protocol is an Internet file transfer protocol similar to FTP, but uses the UDP (User Datagram Protocol) rather than TCP (Transmission Control Protocol). VDOLIVE TCP 7000 Another videoconferencing solution. 362 P-661HNU-Fx - ZyXEL P-661HW-D1 | User Guide - Page 363
OR APPENDIX BELOW. ZYXEL MAY HAVE DISTRIBUTED TO YOU HARDWARE AND/OR SOFTWARE, OR MADE AVAILABLE FOR ELECTRONIC DOWNLOADS THESE FREE SOFTWARE ZYXEL INCLUDING ANY RESTRICTIONS OR CONDITIONS STATED IN THIS END USER LICENSE AGREEMENT SHALL RESTRICT ANY RIGHTS AND LICENSES YOU P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 364
, and the applicable national laws of each respective country. All rights not granted to you herein are expressly reserved by ZyXEL. You may not remove any proprietary notice of ZyXEL or any of its not assign, sublicense, convey or otherwise transfer, pledge as security or P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 365
your use of such material is exclusively governed by their respective terms. ZyXEL has provided, as part of the Software package, access to certain third or manufacturer directly for technical support and customer service related to its software and products Warranty P-661HNU-Fx User's Guide 365 - ZyXEL P-661HW-D1 | User Guide - Page 366
SOFTWARE, AND NO WARRANTIES SHALL APPLY AFTER THAT PERIOD. 7.Limitation of Liability IN NO EVENT WILL ZyXEL BE LIABLE TO YOU OR ANY THIRD PARTY FOR ANY INCIDENTAL OR CONSEQUENTIAL DAMAGES (INCLUDING, WITHOUT , REGULATIONS, ORDERS, OR OTHER RESTRICTIONS ON THE EXPORT OF 366 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 367
of this License Agreement. Upon notification of termination, you agree to destroy or return to ZyXEL all copies of the Software and Documentation and to certify in writing that all known copies, . This License Agreement, the rights granted hereunder, the Software and P-661HNU-Fx User's Guide 367 - ZyXEL P-661HW-D1 | User Guide - Page 368
we will give to anyone who contacts us at the ZyXEL Technical Support ([email protected]), for a charge of no more than except the express written permission of ZyXEL Communications Corporation. This Product includes Bridge-utils, Busybox, Dnsmasq, Ebtables June 1991 368 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 369
your freedom to share and change it. By contrast, the GNU General Public License is intended to guarantee your freedom to share and change free freedom to distribute copies of free software (and charge for this service if you wish), that you receive source code or can get 661HNU-Fx User's Guide 369 - ZyXEL P-661HW-D1 | User Guide - Page 370
we want its recipients to know that what they have is not the original, so that any problems introduced by others will not reflect on the original authors' reputations. Finally, any free program is may at your option offer warranty protection in exchange for a fee. 370 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 371
that you also meet all of these conditions: a) You must cause the modified files to carry prominent notices stating that you changed the files and the date of any change. b) You must cause any work that you does not bring the other work under the scope of this License. P-661HNU-Fx User's Guide 371 - ZyXEL P-661HW-D1 | User Guide - Page 372
code means all the source code for all modules it contains, plus any associated interface definition files, plus the scripts used to control compilation and installation of the executable. However, as a terminated so long as such parties remain in full compliance. 372 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 373
a licensee cannot impose that choice. This section is intended to make thoroughly clear what is believed to be a consequence of the rest of this License. P-661HNU-Fx User's Guide 373 - ZyXEL P-661HW-D1 | User Guide - Page 374
, but may differ in detail to address new problems or concerns. Each version is given a distinguishing version guided by the two goals of preserving the free status of all derivatives of our free software and of promoting the sharing SERVICING, REPAIR OR CORRECTION. 374 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 375
granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to CONTRACT, TORT OR OTHERWISE, ARISING FROM,OUT OF OR IN P-661HNU-Fx User's Guide 375 - ZyXEL P-661HW-D1 | User Guide - Page 376
OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 377
THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A P-661HNU-Fx User's Guide 377 - ZyXEL P-661HW-D1 | User Guide - Page 378
CONSEQUENTIALDAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER away your freedom to share and change it. By contrast, the GNU General Public Licenses are intended to 378 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 379
share and copies of free software (and charge for this service if you wish); that you receive source code code with the library, you must provide complete object files to the recipients, so that they can relink them problems that might be introduced by others. P-661HNU-Fx User's Guide 379 - ZyXEL P-661HW-D1 | User Guide - Page 380
into non-free programs. When a program is linked with a library, whether statically or using a shared library, the combination of the two is legally speaking a combined work, a derivative of the original system, as well as its variant, the GNU/Linux operating system. 380 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 381
to it. For a library, complete source code means all the source code for all modules it contains, plus any associated interface definition files, plus the scripts used to control compilation and installation of the library. Activities other than copying, distribution and modification are not covered - ZyXEL P-661HW-D1 | User Guide - Page 382
The modified work must itself be a software library. b) You must cause the files modified to carry prominent notices stating that you changed the files and the date of any change. c) You must cause the whole of the work and thus to each and every part regardless of who 382 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 383
of the Library), rather than a "work that uses the library". The executable is therefore covered by this License. Section 6 states terms for distribution of such P-661HNU-Fx User's Guide 383 - ZyXEL P-661HW-D1 | User Guide - Page 384
shared library mechanism for linking with the Library. A suitable mechanism is one that (1) uses at run time a copy of the library already present on the user's computer system, rather than copying library functions into the executable, and (2) will operate properly with a modified 384 P-661HNU-Fx - ZyXEL P-661HW-D1 | User Guide - Page 385
copy, modify, sublicense, link with, or distribute the Library is void, and will automatically terminate your rights under this License. However, parties who have received P-661HNU-Fx User's Guide 385 - ZyXEL P-661HW-D1 | User Guide - Page 386
that system in reliance on consistent application of that system; it is up to the author/donor to decide if he or she is 386 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 387
to the present version, but may differ in detail to address new problems or concerns. Each version is given a distinguishing version number. If the be guided by the two goals of preserving the free status of all derivatives of our free software and of promoting the sharing 661HNU-Fx User's Guide 387 - ZyXEL P-661HW-D1 | User Guide - Page 388
LIBRARY IS WITH YOU. SHOULD THE LIBRARY PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION. 16. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN in the documentation and/or other materials provided with the distribution. 388 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 389
, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. P-661HNU-Fx User's Guide 389 - ZyXEL P-661HW-D1 | User Guide - Page 390
provided that the following conditions are met: 1. Redistributions of source code must retain the copyright notice, this list of conditions and the following disclaimer. 390 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 391
EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY put under another distribution licence [including the GNU Public Licence.] P-661HNU-Fx User's Guide 391 - ZyXEL P-661HW-D1 | User Guide - Page 392
Appendix F Open Software Announcements 392 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 393
manual, or otherwise, without the prior written permission of ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation. All rights reserved. Disclaimer ZyXEL of the ZyXEL Device is subject to the terms and conditions of any related service providers. 661HNU-Fx User's Guide 393 - ZyXEL P-661HW-D1 | User Guide - Page 394
not installed and used in accordance with the instructions, may cause harmful interference to radio communications. firmware-limited to channels 1 through 11. IEEE 802.11n(40MHz) operation of this product in the U.S.A. is firmware-limited to channels 3 through 9. 394 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 395
Go to http://www.zyxel.com. 2 Select your product on the ZyXEL home page to go to from this page. ZyXEL Limited Warranty ZyXEL warrants to the original faulty workmanship and/or materials, ZyXEL will, at its discretion, will be solely at the discretion of ZyXEL. This warranty shall not apply if - ZyXEL P-661HW-D1 | User Guide - Page 396
. You may also refer to the warranty policy for the region in which you bought the device at http:// www.zyxel.com/web/support_warranty_info.php. Registration Register your product online to receive e-mail notices of firmware upgrades and information at www.zyxel.com. 396 P-661HNU-Fx User's Guide - ZyXEL P-661HW-D1 | User Guide - Page 397
LAN scheduling 127 adding a printer example 60 administrator password 30 Advanced Encryption Standard, Service Set, see BSS blinking LEDs 26 Broadband 87 broadcast 108 BSS 131, 335 example 132 P-661HNU-Fx User's Guide C CA 207, 343 CBR (Constant Bit Rate) 92, 97, 99, 102 certificate factory default - ZyXEL P-661HW-D1 | User Guide - Page 398
encryption 130, 345 ESP 229 ESS 336 Extended Service Set IDentification 114, 122 Extended Service Set, see ESS external antenna 277 F File Sharing 149 file sharing 23 filters MAC address 129 firewalls 199 configuration 201 security 203 firmware 255 fragmentation threshold 128, 339 frequency range - ZyXEL P-661HW-D1 | User Guide - Page 399
multiple PVC support 275 multiplexing 106 LLC-based 106, 276 VC-based 106, 276 multiprotocol encapsulation 105 my IP address 218 L LAN 141 and USB printer 153 client list 146 MAC address 147 LAN TCP/IP 155 limitations wireless LAN 131 WPS 138 Local Area Network, see LAN login passwords 30 logout - ZyXEL P-661HW-D1 | User Guide - Page 400
server 23 Printer Server 153 printer sharing and LAN 153 configuration 55 requirements 153 TCP/IP port 55 product registration 396 profile 45 protocol 88 PSK 345 Push Button Configuration, see PBC push button, WPS 133 Q QoS 177, 178, 187 Quality of Service, see QoS Quick Start Guide 29 R RADIUS - ZyXEL P-661HW-D1 | User Guide - Page 401
trusted CAs, and certificates 212 tunnel mode 232 tutorial wireless 40 U unicast 108 Universal Plug and Play, see UPnP upgrading firmware 255 UPnP 148 forum 143 security issues 143 USB features 23 USB printer 23 P-661HNU-Fx User's Guide Index V version firmware version 83 Virtual Circuit (VC) 106 - ZyXEL P-661HW-D1 | User Guide - Page 402
with RADIUS application example 346 WPA2 344 user authentication 346 vs WPA2-PSK 345 wireless client supplicant 346 with RADIUS application example 346 WPA2-Pre-Shared Key, see WPA2-PSK WPA2-PSK 344, 345 application example 347 WPA-PSK 131, 345 application example 347 WPS 132, 135 example 137 402 - ZyXEL P-661HW-D1 | User Guide - Page 403
Index P-661HNU-Fx User's Guide 403 - ZyXEL P-661HW-D1 | User Guide - Page 404
Index 404 P-661HNU-Fx User's Guide
-
1 -
2 -
3 -
4 -
5 -
6 -
7 -
8
-
9
-
10
-
11
-
12
-
13
-
14
-
15
-
16
-
17
-
18
-
19
-
20
-
21
-
22
-
23
-
24
-
25
-
26
-
27
-
28
-
29
-
30
-
31
-
32
-
33
-
34
-
35
-
36
-
37
-
38
-
39
-
40
-
41
-
42
-
43
-
44
-
45
-
46
-
47
-
48
-
49
-
50
-
51
-
52
-
53
-
54
-
55
-
56
-
57
-
58
-
59
-
60
-
61
-
62
-
63
-
64
-
65
-
66
-
67
-
68
-
69
-
70
-
71
-
72
-
73
-
74
-
75
-
76
-
77
-
78
-
79
-
80
-
81
-
82
-
83
-
84
-
85
-
86
-
87
-
88
-
89
-
90
-
91
-
92
-
93
-
94
-
95
-
96
-
97
-
98
-
99
-
100
-
101
-
102
-
103
-
104
-
105
-
106
-
107
-
108
-
109
-
110
-
111
-
112
-
113
-
114
-
115
-
116
-
117
-
118
-
119
-
120
-
121
-
122
-
123
-
124
-
125
-
126
-
127
-
128
-
129
-
130
-
131
-
132
-
133
-
134
-
135
-
136
-
137
-
138
-
139
-
140
-
141
-
142
-
143
-
144
-
145
-
146
-
147
-
148
-
149
-
150
-
151
-
152
-
153
-
154
-
155
-
156
-
157
-
158
-
159
-
160
-
161
-
162
-
163
-
164
-
165
-
166
-
167
-
168
-
169
-
170
-
171
-
172
-
173
-
174
-
175
-
176
-
177
-
178
-
179
-
180
-
181
-
182
-
183
-
184
-
185
-
186
-
187
-
188
-
189
-
190
-
191
-
192
-
193
-
194
-
195
-
196
-
197
-
198
-
199
-
200
-
201
-
202
-
203
-
204
-
205
-
206
-
207
-
208
-
209
-
210
-
211
-
212
-
213
-
214
-
215
-
216
-
217
-
218
-
219
-
220
-
221
-
222
-
223
-
224
-
225
-
226
-
227
-
228
-
229
-
230
-
231
-
232
-
233
-
234
-
235
-
236
-
237
-
238
-
239
-
240
-
241
-
242
-
243
-
244
-
245
-
246
-
247
-
248
-
249
-
250
-
251
-
252
-
253
-
254
-
255
-
256
-
257
-
258
-
259
-
260
-
261
-
262
-
263
-
264
-
265
-
266
-
267
-
268
-
269
-
270
-
271
-
272
-
273
-
274
-
275
-
276
-
277
-
278
-
279
-
280
-
281
-
282
-
283
-
284
-
285
-
286
-
287
-
288
-
289
-
290
-
291
-
292
-
293
-
294
-
295
-
296
-
297
-
298
-
299
-
300
-
301
-
302
-
303
-
304
-
305
-
306
-
307
-
308
-
309
-
310
-
311
-
312
-
313
-
314
-
315
-
316
-
317
-
318
-
319
-
320
-
321
-
322
-
323
-
324
-
325
-
326
-
327
-
328
-
329
-
330
-
331
-
332
-
333
-
334
-
335
-
336
-
337
-
338
-
339
-
340
-
341
-
342
-
343
-
344
-
345
-
346
-
347
-
348
-
349
-
350
-
351
-
352
-
353
-
354
-
355
-
356
-
357
-
358
-
359
-
360
-
361
-
362
-
363
-
364
-
365
-
366
-
367
-
368
-
369
-
370
-
371
-
372
-
373
-
374
-
375
-
376
-
377
-
378
-
379
-
380
-
381
-
382
-
383
-
384
-
385
-
386
-
387
-
388
-
389
-
390
-
391
-
392
-
393
-
394
-
395
-
396
-
397
-
398
-
399
-
400
-
401
-
402
-
403
-
404
 |
 |
www.zyxel.com
www.zyxel.com
P-661HNU-Fx
801.11n Wireless ADSL+ 4-port Security Gateway
Copyright © 2010
ZyXEL Communications Corporation
Firmware Version 3.10
Edition 1, 10/2010
Default Login Details
IP Address
Admin
User Name: admin
Password: 1234
User
User Name: user
Password: 1234