ZyXEL Communications P-660 series Betriebsanweisung

www.zyxel.comwww.zyxel.comP-660R-F1 SeriesADSL2+ RouterCopyright © 2011 ZyXEL Communications CorporationVersion 3.70Edition 1, 05/2011Default Login De

P-660R-F1 Series User’s Guide103.2.2 Manual Configuration ...

Chapter 7 FirewallsP-660R-F1 Series User’s Guide100You may define additional rules and sets or modify existing ones but please exercise extreme cautio

Chapter 7 FirewallsP-660R-F1 Series User’s Guide1013 Does a rule that allows Internet users access to resources on the LAN create a security vulnerab

Chapter 7 FirewallsP-660R-F1 Series User’s Guide102As a result, the ZyXEL Device resets the connection, as the connection has not been acknowledged.Fi

Chapter 7 FirewallsP-660R-F1 Series User’s Guide1034 The ZyXEL Device then sends it to the computer on the LAN in Subnet 1.Figure 63 IP Alias123LAN

Chapter 7 FirewallsP-660R-F1 Series User’s Guide104

P-660R-F1 Series User’s Guide 105CHAPTER 8Packet Filters8.1 OverviewYour ZyXEL Device uses filters to decide whether to allow passage of traffic. T

Chapter 8 Packet FiltersP-660R-F1 Series User’s Guide106Figure 64 Security > Packet FilterThe following table describes the fields in this screen

Chapter 8 Packet FiltersP-660R-F1 Series User’s Guide107In the Packet Filter screen, select Protocol Filter from the Filter Type field. Then click th

Chapter 8 Packet FiltersP-660R-F1 Series User’s Guide108Figure 66 Security > Packet Filter > Edit (Protocol Filter) > Edit RuleThe followin

Chapter 8 Packet FiltersP-660R-F1 Series User’s Guide1098.2.3 Editing Generic FiltersUse this screen to display a generic filter set on your ZyXEL D

P-660R-F1 Series User’s Guide116.1 NAT Overview ...

Chapter 8 Packet FiltersP-660R-F1 Series User’s Guide110In the Packet Filter screen, select Generic Filter from the Filter Type field. Then click the

Chapter 8 Packet FiltersP-660R-F1 Series User’s Guide1118.2.4 Configuring Generic Packet Rules Use this screen to configure generic filter rules. In

Chapter 8 Packet FiltersP-660R-F1 Series User’s Guide1128.3 Packet Filter Technical ReferenceThis section provides some technical background informat

Chapter 8 Packet FiltersP-660R-F1 Series User’s Guide113Packet Filtering• The router filters packets as they pass through the router’s interface acco

Chapter 8 Packet FiltersP-660R-F1 Series User’s Guide1146 The firewall can block specific URL traffic that might occur in the future. The URL can be s

P-660R-F1 Series User’s Guide 115CHAPTER 9Certificates9.1 OverviewThis chapter describes how your ZyXEL Device can use certificates as a means of a

Chapter 9 CertificatesP-660R-F1 Series User’s Guide116Certificate File FormatsThe certification authority certificate that you want to import has to b

Chapter 9 CertificatesP-660R-F1 Series User’s Guide1179.2 The My Certificates ScreenThis is the ZyXEL Device’s summary list of certificates and cert

Chapter 9 CertificatesP-660R-F1 Series User’s Guide1189.2.1 My Certificate Import Follow the instructions in this screen to save an existing certific

Chapter 9 CertificatesP-660R-F1 Series User’s Guide119Note: You must remove any spaces from the certificate’s filename before you can import it.Figur

P-660R-F1 Series User’s Guide128.2.1 Editing Protocol Filters ...

Chapter 9 CertificatesP-660R-F1 Series User’s Guide1209.2.2 My Certificate Create Use this screen to have the ZyXEL Device create a self-signed certi

Chapter 9 CertificatesP-660R-F1 Series User’s Guide121Country Type up to 127 characters to identify the nation where the certificate owner is located

Chapter 9 CertificatesP-660R-F1 Series User’s Guide122After you click Apply in the My Certificate Create screen, you see a screen that tells you the Z

Chapter 9 CertificatesP-660R-F1 Series User’s Guide123Certificates > My Certificates to open the My Certificates screen. Click the edit icon to op

Chapter 9 CertificatesP-660R-F1 Series User’s Guide124Certification Path Click the Refresh button to have this read-only text box display the hierarch

Chapter 9 CertificatesP-660R-F1 Series User’s Guide1259.3 The Trusted CAs Screen This screen displays a summary list of certificates of the certific

Chapter 9 CertificatesP-660R-F1 Series User’s Guide126certificate that is signed by one of these certification authorities. Click Security > Certif

Chapter 9 CertificatesP-660R-F1 Series User’s Guide1279.3.1 Trusted CA Import Follow the instructions in this screen to save a trusted certificatio

Chapter 9 CertificatesP-660R-F1 Series User’s Guide1289.3.2 Trusted CA Details Use this screen to view in-depth information about the certification a

Chapter 9 CertificatesP-660R-F1 Series User’s Guide129Certificate Path Click the Refresh button to have this read-only text box display the end entit

P-660R-F1 Series User’s Guide1311.3 The Class Setup Screen ...

Chapter 9 CertificatesP-660R-F1 Series User’s Guide1309.4 The Trusted Remote Hosts Screens This screen displays a list of the certificates of peers t

Chapter 9 CertificatesP-660R-F1 Series User’s Guide131The following table describes the labels in this screen. Table 48 Trusted Remote Hosts 9.4.1

Chapter 9 CertificatesP-660R-F1 Series User’s Guide132Note: The trusted remote host certificate must be a self-signed certificate; and you must remove

Chapter 9 CertificatesP-660R-F1 Series User’s Guide133the Trusted Remote Hosts screen. Click the details icon to open the Trusted Remote Host Details

Chapter 9 CertificatesP-660R-F1 Series User’s Guide134Version This field displays the X.509 version number. Serial Number This field displays the cert

Chapter 9 CertificatesP-660R-F1 Series User’s Guide1359.5 The Directory Servers Screens This screen displays a summary list of directory servers (th

Chapter 9 CertificatesP-660R-F1 Series User’s Guide1369.5.1 Directory Server Add and Edit Use this screen to configure information about a directory

Chapter 9 CertificatesP-660R-F1 Series User’s Guide1379.6 Certificates Technical ReferenceThis section provides technical background information abo

Chapter 9 CertificatesP-660R-F1 Series User’s Guide138Advantages of CertificatesCertificates offer the following benefits.• The ZyXEL Device only has

Chapter 9 CertificatesP-660R-F1 Series User’s Guide139Trusted Remote Host Certificate FingerprintsA certificate’s fingerprints are message digests ca

P-660R-F1 Series User’s Guide1414.3.2 Installing UPnP in Windows XP ...177

Chapter 9 CertificatesP-660R-F1 Series User’s Guide140

P-660R-F1 Series User’s Guide 141CHAPTER 10Static RouteThis chapter shows you how to configure static routes for your ZyXEL Device.10.1 Static Rout

Chapter 10 Static RouteP-660R-F1 Series User’s Guide14210.2 Configuring Static Route Click Advanced > Static Route to open the Static Route screen

Chapter 10 Static RouteP-660R-F1 Series User’s Guide14310.2.1 Static Route Edit Select a static route index number and click Edit. The screen show

Chapter 10 Static RouteP-660R-F1 Series User’s Guide144

P-660R-F1 Series User’s Guide 145CHAPTER 11Quality Of Service11.1 Overview Use the QoS screens to set up your ZyXEL Device to use QoS for traffic

Chapter 11 Quality Of ServiceP-660R-F1 Series User’s Guide146Tagging and MarkingIn a QoS class, you can configure whether to add or change the DiffSer

Chapter 11 Quality Of ServiceP-660R-F1 Series User’s Guide147match these two classes are assigned priority queue based on the internal QoS mapping ta

Chapter 11 Quality Of ServiceP-660R-F1 Series User’s Guide148Figure 89 QoS Class Example: VoIP -2Figure 90 QoS Class Example: Boss -1

Chapter 11 Quality Of ServiceP-660R-F1 Series User’s Guide149Figure 91 QoS Class Example: Boss -211.2 The QoS General Screen Use this screen to en

P-660R-F1 Series User’s Guide15Appendix A ...

Chapter 11 Quality Of ServiceP-660R-F1 Series User’s Guide150Click Advanced > QoS to open the screen as shown next. Figure 92 Advanced > QoS &

Chapter 11 Quality Of ServiceP-660R-F1 Series User’s Guide15111.3 The Class Setup Screen Use this screen to add, edit or delete classifiers. A clas

Chapter 11 Quality Of ServiceP-660R-F1 Series User’s Guide15211.3.1 The Class Configuration Screen Use this screen to configure a classifier. Click t

Chapter 11 Quality Of ServiceP-660R-F1 Series User’s Guide153Routing Policy Select the next hop to which traffic of this class should be forwarded.Se

Chapter 11 Quality Of ServiceP-660R-F1 Series User’s Guide154Exclude Select this option to exclude the packets that match the specified criteria from

Chapter 11 Quality Of ServiceP-660R-F1 Series User’s Guide15511.4 The QoS Monitor Screen Use this screen to view the ZyXEL Device’s QoS packet stati

Chapter 11 Quality Of ServiceP-660R-F1 Series User’s Guide15611.5 QoS Technical ReferenceThis section provides some technical background information

Chapter 11 Quality Of ServiceP-660R-F1 Series User’s Guide15711.5.3 DiffServ QoS is used to prioritize source-to-destination traffic flows. All pack

Chapter 11 Quality Of ServiceP-660R-F1 Series User’s Guide1583 3 1 001110001100001010001000250~11004 4 2 0101100101000100100100005 5 3 011110011100011

P-660R-F1 Series User’s Guide 159CHAPTER 12Dynamic DNS SetupThis chapter discusses how to configure your ZyXEL Device to use Dynamic DNS.12.1 Dynam

P-660R-F1 Series User’s Guide16

Chapter 12 Dynamic DNS SetupP-660R-F1 Series User’s Guide160See Section 12.1 on page 159 for more information. Figure 96 Dynamic DNSThe following ta

Chapter 12 Dynamic DNS SetupP-660R-F1 Series User’s Guide161Dynamic DNS server auto detect IP AddressSelect this option only when there are one or mo

Chapter 12 Dynamic DNS SetupP-660R-F1 Series User’s Guide162

P-660R-F1 Series User’s Guide 163CHAPTER 13Remote Management ConfigurationThis chapter provides information on configuring remote management.13.1 R

Chapter 13 Remote Management ConfigurationP-660R-F1 Series User’s Guide164• Use the ZyXEL Device’s WAN IP address when configuring from the WAN. • Use

Chapter 13 Remote Management ConfigurationP-660R-F1 Series User’s Guide1652 HTTP connection requests from a web browser go to port 80 (by default) on

Chapter 13 Remote Management ConfigurationP-660R-F1 Series User’s Guide166The following table describes the labels in this screen. LABEL DESCRIPTIONPo

Chapter 13 Remote Management ConfigurationP-660R-F1 Series User’s Guide16713.3 TelnetYou can configure your ZyXEL Device for remote Telnet access as

Chapter 13 Remote Management ConfigurationP-660R-F1 Series User’s Guide16813.5 Configuring FTP You can upload and download the ZyXEL Device’s firmwar

Chapter 13 Remote Management ConfigurationP-660R-F1 Series User’s Guide16913.6 SNMPSimple Network Management Protocol (SNMP) is a protocol used for

P-660R-F1 Series User’s Guide17Contents OverviewCopyright ...

Chapter 13 Remote Management ConfigurationP-660R-F1 Series User’s Guide170• Set - Allows the manager to set values for object variables within an agen

Chapter 13 Remote Management ConfigurationP-660R-F1 Series User’s Guide17113.6.3 Configuring SNMPTo change your ZyXEL Device’s SNMP settings, click

Chapter 13 Remote Management ConfigurationP-660R-F1 Series User’s Guide17213.7 Configuring DNS Use DNS (Domain Name System) to map a domain name to

Chapter 13 Remote Management ConfigurationP-660R-F1 Series User’s Guide17313.8 Configuring ICMP To change your ZyXEL Device’s security settings, cli

P-660R-F1 Series User’s Guide 174CHAPTER 14Universal Plug-and-Play (UPnP)This chapter introduces the UPnP feature in the web configurator.14.1 Intr

Chapter 14 Universal Plug-and-Play (UPnP)P-660R-F1 Series User’s Guide175All UPnP-enabled devices may communicate freely with each other without addi

Chapter 14 Universal Plug-and-Play (UPnP)P-660R-F1 Series User’s Guide17614.3 Installing UPnP in Windows ExampleThis section shows how to install UPn

Chapter 14 Universal Plug-and-Play (UPnP)P-660R-F1 Series User’s Guide1773 In the Communications window, select the Universal Plug and Play check box

Chapter 14 Universal Plug-and-Play (UPnP)P-660R-F1 Series User’s Guide1784 The Windows Optional Networking Components Wizard window displays. Select N

Chapter 14 Universal Plug-and-Play (UPnP)P-660R-F1 Series User’s Guide17914.4 Using UPnP in Windows XP ExampleThis section shows you how to use the

P-660R-F1 Series User’s Guide18

Chapter 14 Universal Plug-and-Play (UPnP)P-660R-F1 Series User’s Guide1803 In the Internet Connection Properties window, click Settings to see the por

Chapter 14 Universal Plug-and-Play (UPnP)P-660R-F1 Series User’s Guide1814 You may edit or delete the port mappings or click Add to manually add port

Chapter 14 Universal Plug-and-Play (UPnP)P-660R-F1 Series User’s Guide1826 Double-click on the icon to display your current Internet connection status

Chapter 14 Universal Plug-and-Play (UPnP)P-660R-F1 Series User’s Guide1833 Select My Network Places under Other Places. Figure 118 Network Connecti

Chapter 14 Universal Plug-and-Play (UPnP)P-660R-F1 Series User’s Guide1845 Right-click on the icon for your ZyXEL Device and select Invoke. The web co

P-660R-F1 Series User’s Guide 185CHAPTER 15SystemUse this screen to configure the ZyXEL Device’s time and date settings.15.1 General Setup15.1.1 G

Chapter 15 SystemP-660R-F1 Series User’s Guide186Click Maintenance > System to open the General screen. Figure 121 System General SetupThe follow

Chapter 15 SystemP-660R-F1 Series User’s Guide18715.2 Time Setting To change your ZyXEL Device’s time and date, click Maintenance > System > T

Chapter 15 SystemP-660R-F1 Series User’s Guide188The following table describes the fields in this screen. Table 70 System Time SettingLABEL DESCRIP

Chapter 15 SystemP-660R-F1 Series User’s Guide189Start Date Configure the day and time when Daylight Saving Time starts if you selected Enable Dayli

P-660R-F1 Series User’s Guide 19CHAPTER 1Getting To Know Your ZYXELDEVICEThis chapter describes the key features and applications of your ZyXEL Devi

Chapter 15 SystemP-660R-F1 Series User’s Guide190

P-660R-F1 Series User’s Guide 191CHAPTER 16Logs16.1 OverviewThis chapter contains information about configuring general log settings and viewing th

Chapter 16 LogsP-660R-F1 Series User’s Guide192 Figure 123 Maintenance > Logs > View LogThe following table describes the fields in this scree

Chapter 16 LogsP-660R-F1 Series User’s Guide19316.3 The Log Settings ScreenUse the Log Settings screen to configure the mail server, the syslog serv

Chapter 16 LogsP-660R-F1 Series User’s Guide194Table 72 Maintenance > Logs > Log SettingsLABEL DESCRIPTIONE-mail Log SettingsMail Server Ente

Chapter 16 LogsP-660R-F1 Series User’s Guide19516.4 SMTP Error MessagesIf there are difficulties in sending e-mail the following error message appea

Chapter 16 LogsP-660R-F1 Series User’s Guide196"End of Log" message shows that a complete log has been sent.Figure 125 E-mail Log ExampleS

Chapter 16 LogsP-660R-F1 Series User’s Guide19716.5 Log DescriptionsThis section provides descriptions of example log messages. Table 74 System Ma

Chapter 16 LogsP-660R-F1 Series User’s Guide198Table 75 System Error LogsTable 76 Access Control LogsTable 77 TCP Reset LogsLOG MESSAGE DESCRIPT

Chapter 16 LogsP-660R-F1 Series User’s Guide199Table 78 Packet Filter LogsTable 79 ICMP LogsTable 80 CDR LogsExceed MAX incomplete, sent TCP RS

Chapter 1 Getting To Know Your ZyXEL DeviceP-660R-F1 Series User’s Guide201.2 Features High Speed Internet AccessThe DSL RJ-11 (ADSL over POTS model

Chapter 16 LogsP-660R-F1 Series User’s Guide200Table 81 PPP LogsTable 82 UPnP LogsTable 83 Content Filtering LogsTable 84 Attack LogsUnsupport

Chapter 16 LogsP-660R-F1 Series User’s Guide201Table 85 802.1X LogsTable 86 ACL Setting Nports scan TCPThe firewall detected a TCP port scan atta

Chapter 16 LogsP-660R-F1 Series User’s Guide202Table 87 ICMP Notes(L to ZyXEL Device) LAN to ZyXEL DeviceACL set for packets traveling from the LAN

Chapter 16 LogsP-660R-F1 Series User’s Guide203Table 88 System LogsThe following table shows RFC-2408 ISAKMP payload types that the log displays. P

Chapter 16 LogsP-660R-F1 Series User’s Guide204

P-660R-F1 Series User’s Guide 205CHAPTER 17ToolsThis chapter describes how to upload new firmware, manage configuration and restart your ZyXEL Devic

Chapter 17 ToolsP-660R-F1 Series User’s Guide206Note: Do NOT turn off the ZyXEL Device while firmware upload is in progress!After you see the Firmware

Chapter 17 ToolsP-660R-F1 Series User’s Guide20717.2 Configuration ScreenClick Maintenance > Tools > Configuration. Information related to fac

Chapter 17 ToolsP-660R-F1 Series User’s Guide208After you see a “Restore Configuration successful” screen, you must then wait one minute before loggin

Chapter 17 ToolsP-660R-F1 Series User’s Guide209You can also press the RESET button on the rear panel to reset the factory defaults of your ZyXEL Dev

Chapter 1 Getting To Know Your ZyXEL DeviceP-660R-F1 Series User’s Guide21PPPoE (RFC2516)PPPoE (Point-to-Point Protocol over Ethernet) emulates a dia

P-660R-F1 Series User’s Guide 210CHAPTER 18DiagnosticThese read-only screens display information to help you identify problems with the ZyXEL Device

Chapter 18 DiagnosticP-660R-F1 Series User’s Guide21118.2 DSL Line Diagnostic Click Maintenance > Diagnostic > DSL Line to open the screen s

Chapter 18 DiagnosticP-660R-F1 Series User’s Guide212

P-660R-F1 Series User’s Guide 213CHAPTER 19TroubleshootingThis chapter covers potential problems and the corresponding remedies.19.1 Problems Start

Chapter 19 TroubleshootingP-660R-F1 Series User’s Guide21419.3 Problems with the WANTable 96 Troubleshooting the WANPROBLEM CORRECTIVE ACTIONThe DS

Chapter 19 TroubleshootingP-660R-F1 Series User’s Guide21519.4 Problems Accessing the ZyXEL DeviceTable 97 Troubleshooting Accessing the ZyXEL Dev

Chapter 19 TroubleshootingP-660R-F1 Series User’s Guide216

P-660R-F1 Series User’s Guide 217APPENDIX A Product SpecificationsSee also the Introduction chapter for a general overview of the key features.Speci

P-660R-F1 Series User’s Guide218Table 99 FirmwareADSL Standards Multi-Mode standard (ANSI T1.413,Issue 2; G.dmt(G.992.1); G.lite(G992.2)).ADSL2 G.dm

P-660R-F1 Series User’s Guide219Static Routes 16 IP and 4 BridgeOther Features Any IPZero Configuration (VC auto-hunting)Traffic RedirectDynamic DNSI

Chapter 1 Getting To Know Your ZyXEL DeviceP-660R-F1 Series User’s Guide221.3.1 Internet AccessThe ZyXEL Device is the ideal high-speed Internet acce

P-660R-F1 Series User’s Guide220

P-660R-F1 Series User’s Guide 221APPENDIX BWall-mounting InstructionsDo the following to hang your ZyXEL Device on a wall.Note: See the product spec

P-660R-F1 Series User’s Guide222

P-660R-F1 Series User’s Guide 223APPENDIX CSetting up Your Computer’s IP AddressAll computers must have a 10M or 100M Ethernet adapter card and TCP/

P-660R-F1 Series User’s Guide224Installing ComponentsThe Network window Configuration tab displays a list of installed components. You need a network

P-660R-F1 Series User’s Guide225• If you have a static IP address, select Specify an IP address and type your information into the IP Address and Sub

P-660R-F1 Series User’s Guide2264 Click the Gateway tab.• If you do not know your gateway’s IP address, remove previously installed gateways.• If you

P-660R-F1 Series User’s Guide2272 In the Control Panel, double-click Network Connections (Network and Dial-up Connections in Windows 2000/NT).Figure

P-660R-F1 Series User’s Guide2284 Select Internet Protocol (TCP/IP) (under the General tab in Win XP) and then click Properties.Figure 144 Windows X

P-660R-F1 Series User’s Guide229• Click Advanced.Figure 145 Windows XP: Internet Protocol (TCP/IP) Properties6 If you do not know your gateway&apo

Chapter 1 Getting To Know Your ZyXEL DeviceP-660R-F1 Series User’s Guide23The following table describes the lights. 1.5 Hardware ConnectionRefer

P-660R-F1 Series User’s Guide230• Click OK when finished.Figure 146 Windows XP: Advanced TCP/IP Properties7 In the Internet Protocol TCP/IP Properti

P-660R-F1 Series User’s Guide231If you have previously configured DNS servers, click Advanced and then the DNS tab to order them.Figure 147 Windows

P-660R-F1 Series User’s Guide232Macintosh OS 8/9 1 Click the Apple menu, Control Panel and double-click TCP/IP to open the TCP/IP Control Panel.Figure

P-660R-F1 Series User’s Guide2332 Select Ethernet built-in from the Connect via list.Figure 149 Macintosh OS 8/9: TCP/IP3 For dynamically assigned

P-660R-F1 Series User’s Guide234•Select Built-in Ethernet from the Show list. • Click the TCP/IP tab.3 For dynamically assigned settings, select Using

P-660R-F1 Series User’s Guide235Linux This section shows you how to configure your computer’s TCP/IP settings in Red Hat Linux 9.0. Procedure, screen

P-660R-F1 Series User’s Guide2362 Double-click on the profile of the network card you wish to configure. The Ethernet Device General screen displays a

P-660R-F1 Series User’s Guide2376 Click the Activate button to apply the changes. The following screen displays. Click Yes to save the changes in all

P-660R-F1 Series User’s Guide2382 If you know your DNS server IP address(es), enter the DNS server information in the resolv.conf file in the /etc dir

P-660R-F1 Series User’s Guide 239APPENDIX DIP Addresses and SubnettingThis appendix introduces IP addresses, IP address classes and subnet masks. Yo

P-660R-F1 Series User’s Guide 24CHAPTER 2Introducing the Web ConfiguratorThis chapter describes how to access and navigate the web configurator.2.1

P-660R-F1 Series User’s Guide240An IP address with host IDs of all zeros is the IP address of the network (192.168.1.0 for example). An IP address wit

P-660R-F1 Series User’s Guide241Subnet masks are expressed in dotted decimal notation just like IP addresses. The “natural” masks for class A, B and

P-660R-F1 Series User’s Guide242Example: Two SubnetsAs an example, you have a class “C” address 192.168.1.0 with subnet mask of 255.255.255.0. The fir

P-660R-F1 Series User’s Guide243Host IDs of all zeros represent the subnet itself and host IDs of all ones are the broadcast address for that subnet,

P-660R-F1 Series User’s Guide244Example Eight SubnetsSimilarly use a 27-bit mask to create eight subnets (000, 001, 010, 011, 100, 101, 110 and 111).

P-660R-F1 Series User’s Guide245A class “B” address has two host ID octets available for subnetting and a class “A” address has three host ID octets

P-660R-F1 Series User’s Guide246

P-660R-F1 Series User’s Guide 247APPENDIX ESplitters and MicrofiltersThis appendix tells you how to install a POTS splitter or a telephone microfilt

P-660R-F1 Series User’s Guide2484 After you are done, make sure that your telephone works. If your telephone does not work, disconnect the microfilter

P-660R-F1 Series User’s Guide249ZyXEL Device With ISDNThis section relates to people who use their ZyXEL Device with ADSL over ISDN (digital telephon

Chapter 2 Introducing the Web ConfiguratorP-660R-F1 Series User’s Guide255 A window displays as shown. Enter the default admin password 1234 to confi

P-660R-F1 Series User’s Guide250

P-660R-F1 Series User’s Guide 251APPENDIX FPop-up Windows, JavaScripts and JavaPermissionsIn order to use the web configurator you need to allow:• W

P-660R-F1 Series User’s Guide2522 Clear the Block pop-ups check box in the Pop-up Blocker section of the screen. This disables any web pop-up blockers

P-660R-F1 Series User’s Guide2532 Select Settings…to open the Pop-up Blocker Settings screen.Figure 167 Internet Options3 Type the IP address of yo

P-660R-F1 Series User’s Guide2544 Click Add to move the IP address to the list of Allowed sites.Figure 168 Pop-up Blocker Settings5 Click Close to r

P-660R-F1 Series User’s Guide2551 In Internet Explorer, click Tools, Internet Options and then the Security tab. Figure 169 Internet Options 2 Clic

P-660R-F1 Series User’s Guide2566 Click OK to close the window.Figure 170 Security Settings - Java ScriptingJava Permissions1 From Internet Explorer

P-660R-F1 Series User’s Guide2575 Click OK to close the window.Figure 171 Security Settings - Java JAVA (Sun)1 From Internet Explorer, click Tools,

P-660R-F1 Series User’s Guide2583 Click OK to close the window.Figure 172 Java (Sun)

P-660R-F1 Series User’s Guide 259IndexAactivationclassifiers 151firewalls 90generic filters 110protocol filters 107SIP ALG 84address assignment 64Add

Chapter 2 Introducing the Web ConfiguratorP-660R-F1 Series User’s Guide262.3 Resetting the ZyXEL DeviceIf you forget your password or cannot access t

P-660R-F1 Series User’s Guide260backup 207firewalls 89, 93, 97restore 207copyright 5cost of transmission 46creationcertificates 118classifiers 151CRL

P-660R-F1 Series User’s Guide 261thresholds 86, 96, 97, 98example 86half-open sessions 98ICMP 86logs 94maximum incomplete 98P2P 97packet direction 90

P-660R-F1 Series User’s Guide262TCP/IP 65LDAP 136Lightweight Directory Access Protocol, see LDAPlogin 25directory servers 137logse-mail 194firewalls 9

P-660R-F1 Series User’s Guide 263logs 109protocols supported 218QQoS802.1Q tags 153bandwidth 150classifiersactivation 151creation 151priority 152DSCP

P-660R-F1 Series User’s Guide264activation 84SMTP 80SNMP 80, 169agent 169and remote management 169manager 169MIBs 170SNMP (Simple Network Management P

P-660R-F1 Series User’s Guide 265ENET ENCAP 43mode 50modulation 50packet filter 53, 58PPP over Ethernet 43PPPoA 44Setup 43troubleshooting 214WAN (Wid

P-660R-F1 Series User’s Guide266

P-660R-F1 Series User’s Guide 267

P-660R-F1 Series User’s Guide268

Chapter 2 Introducing the Web ConfiguratorP-660R-F1 Series User’s Guide27Note: Click the icon (located in the top right corner of most screens) to

Chapter 2 Introducing the Web ConfiguratorP-660R-F1 Series User’s Guide282.4.2 Status ScreenThe following summarizes how to navigate the web configur

Chapter 2 Introducing the Web ConfiguratorP-660R-F1 Series User’s Guide29The following table describes the labels shown in the Status screen.Table 4

P-660R-F1 Series User’s Guide3About This User's GuideIntended AudienceThis manual is intended for people who want to configure the ZyXEL Device

Chapter 2 Introducing the Web ConfiguratorP-660R-F1 Series User’s Guide302.4.3 Status: Any IP TableClick the Any IP Table hyperlink in the Status scr

Chapter 2 Introducing the Web ConfiguratorP-660R-F1 Series User’s Guide312.4.4 Status: Packet StatisticsClick the Packet Statistics hyperlink in the

Chapter 2 Introducing the Web ConfiguratorP-660R-F1 Series User’s Guide322.4.5 Changing Login Password It is highly recommended that you periodically

Chapter 2 Introducing the Web ConfiguratorP-660R-F1 Series User’s Guide33password again, then click Maintenance > System to display the screen as

P-660R-F1 Series User’s Guide 34CHAPTER 3Wizard Setup for Internet AccessThis chapter provides information on the Wizard Setup screens for Internet

Chapter 3 Wizard Setup for Internet AccessP-660R-F1 Series User’s Guide353 The wizard attempts to detect which WAN connection type you are using. If

Chapter 3 Wizard Setup for Internet AccessP-660R-F1 Series User’s Guide362 Click Next to confirm your settings and test your connection.Figure 14 Au

Chapter 3 Wizard Setup for Internet AccessP-660R-F1 Series User’s Guide37The following table describes the fields in this screen.2 The next wizard sc

Chapter 3 Wizard Setup for Internet AccessP-660R-F1 Series User’s Guide38The following table describes the fields in this screen.Figure 17 Internet

Chapter 3 Wizard Setup for Internet AccessP-660R-F1 Series User’s Guide39The following table describes the fields in this screen.Figure 18 Internet

P-660R-F1 Series User’s Guide4Document ConventionsWarnings and NotesThese are how warnings and notes are shown in this User’s Guide. Warnings tell you

Chapter 3 Wizard Setup for Internet AccessP-660R-F1 Series User’s Guide40The following table describes the fields in this screen.Figure 19 Internet

Chapter 3 Wizard Setup for Internet AccessP-660R-F1 Series User’s Guide41• If the user name and/or password you entered for PPPoE or PPPoA connection

Chapter 3 Wizard Setup for Internet AccessP-660R-F1 Series User’s Guide42When you are finished with the Internet Setup Wizard the following screen dis

P-660R-F1 Series User’s Guide 43CHAPTER 4WAN SetupThis chapter describes how to configure WAN settings.4.1 WAN Overview A WAN (Wide Area Network) i

Chapter 4 WAN SetupP-660R-F1 Series User’s Guide444.1.1.3 PPPoAPPPoA stands for Point to Point Protocol over ATM Adaptation Layer 5 (AAL5). A PPPoA c

Chapter 4 WAN SetupP-660R-F1 Series User’s Guide454.1.3.2 Scenario 2: One VC, One Protocol (IP)Selecting RFC-1483 encapsulation with VC-based multip

Chapter 4 WAN SetupP-660R-F1 Series User’s Guide46Do not specify a nailed-up connection unless your telephone company offers flat-rate service or you

Chapter 4 WAN SetupP-660R-F1 Series User’s Guide47Sustained Cell Rate (SCR) is the mean cell rate of each bursty traffic source. It specifies the max

Chapter 4 WAN SetupP-660R-F1 Series User’s Guide48The VBR-nRT (non real-time Variable Bit Rate) type is used with bursty connections that do not requi

Chapter 4 WAN SetupP-660R-F1 Series User’s Guide49See Section 4.1 on page 43 for more information. Figure 24 Internet Access Setup (PPPoE)

CopyrightP-660R-F1 Series User’s Guide5CopyrightCopyright © 2011 by ZyXEL Communications Corporation.The contents of this publication may not be repr

Chapter 4 WAN SetupP-660R-F1 Series User’s Guide50The following table describes the labels in this screen. Table 12 Network > WAN > Internet

Chapter 4 WAN SetupP-660R-F1 Series User’s Guide51Gateway IP address(ENET ENCAP encapsulation only)You must specify a gateway IP address (supplied by

Chapter 4 WAN SetupP-660R-F1 Series User’s Guide524.5.1 Configuring Advanced Internet Connection Setup To edit your ZyXEL Device's advanced WAN

Chapter 4 WAN SetupP-660R-F1 Series User’s Guide53Sustain Cell Rate The Sustain Cell Rate (SCR) sets the average cell rate (long-term) that can be tr

Chapter 4 WAN SetupP-660R-F1 Series User’s Guide544.6 Configuring More ConnectionsThis section describes the protocol-independent parameters for a re

Chapter 4 WAN SetupP-660R-F1 Series User’s Guide554.6.1 More Connections Edit Click the edit icon in the More Connections screen to configure a conn

Chapter 4 WAN SetupP-660R-F1 Series User’s Guide56Encapsulation Select the method of encapsulation used by your ISP from the drop-down list box. Choic

Chapter 4 WAN SetupP-660R-F1 Series User’s Guide574.6.2 Configuring More Connections Advanced Setup To edit your ZyXEL Device's advanced WAN s

Chapter 4 WAN SetupP-660R-F1 Series User’s Guide584.7 Traffic Redirect Traffic redirect forwards traffic to a backup gateway when the ZyXEL Device c

Chapter 4 WAN SetupP-660R-F1 Series User’s Guide59The following network topology allows you to avoid triangle route security issues when the backup g

CertificationsP-660R-F1 Series User’s Guide6Federal Communications Commission (FCC) Interference StatementThis device complies with Part 15 of FCC rul

Chapter 4 WAN SetupP-660R-F1 Series User’s Guide604.8 Configuring WAN Backup To change your ZyXEL Device’s WAN backup settings, click Network > WA

Chapter 4 WAN SetupP-660R-F1 Series User’s Guide61Recovery Interval When the ZyXEL Device is using a lower priority connection (usually a WAN backup

Chapter 4 WAN SetupP-660R-F1 Series User’s Guide62

P-660R-F1 Series User’s Guide 63CHAPTER 5LAN SetupThis chapter describes how to configure LAN settings.5.1 LAN Overview A Local Area Network (LAN)

Chapter 5 LAN SetupP-660R-F1 Series User’s Guide64configuration for the clients. If you turn DHCP service off, you must have another DHCP server on yo

Chapter 5 LAN SetupP-660R-F1 Series User’s Guide655.2 LAN TCP/IP The ZyXEL Device has built-in DHCP server capability that assigns IP addresses and

Chapter 5 LAN SetupP-660R-F1 Series User’s Guide66Note: Regardless of your particular situation, do not create an arbitrary IP address; always follow

Chapter 5 LAN SetupP-660R-F1 Series User’s Guide675.2.4 Any IPTraditionally, you must set the IP addresses and the subnet masks of a computer and th

Chapter 5 LAN SetupP-660R-F1 Series User’s Guide681 When a computer (which is in a different subnet) first attempts to access the Internet, it sends p

Chapter 5 LAN SetupP-660R-F1 Series User’s Guide695.3.1 Configuring Advanced LAN Setup To edit your ZyXEL Device's advanced LAN settings, click

CertificationsP-660R-F1 Series User’s Guide7Safety WarningsFor your safety, be sure to read and follow all warning notices and instructions.• Do NOT

Chapter 5 LAN SetupP-660R-F1 Series User’s Guide705.4 DHCP SetupUse this screen to configure the DNS server information that the ZyXEL Device sends t

Chapter 5 LAN SetupP-660R-F1 Series User’s Guide715.5 LAN Client ListThis table allows you to assign IP addresses on the LAN to specific individual

Chapter 5 LAN SetupP-660R-F1 Series User’s Guide72The following table describes the labels in this screen.5.6 LAN IP Alias IP alias allows you to pa

Chapter 5 LAN SetupP-660R-F1 Series User’s Guide73The following figure shows a LAN divided into subnets A, B, and C.Figure 38 Physical Network &

Chapter 5 LAN SetupP-660R-F1 Series User’s Guide74RIP Direction RIP (Routing Information Protocol, RFC 1058 and RFC 1389) allows a router to exchange

P-660R-F1 Series User’s Guide 75CHAPTER 6Network Address Translation (NAT) ScreensThis chapter discusses how to configure NAT on the ZyXEL Device.6.

Chapter 6 Network Address Translation (NAT) ScreensP-660R-F1 Series User’s Guide766.1.2 What NAT DoesIn the simplest form, NAT changes the source IP

Chapter 6 Network Address Translation (NAT) ScreensP-660R-F1 Series User’s Guide776.1.4 NAT ApplicationThe following figure illustrates a possible N

Chapter 6 Network Address Translation (NAT) ScreensP-660R-F1 Series User’s Guide78The following table summarizes these types.6.2 SUA (Single User Acc

Chapter 6 Network Address Translation (NAT) ScreensP-660R-F1 Series User’s Guide796.3 NAT General Setup You must create a firewall rule in addition

CertificationsP-660R-F1 Series User’s Guide8

Chapter 6 Network Address Translation (NAT) ScreensP-660R-F1 Series User’s Guide806.4 Port Forwarding A port forwarding set is a list of inside (beh

Chapter 6 Network Address Translation (NAT) ScreensP-660R-F1 Series User’s Guide816.4.3 Configuring Servers Behind Port Forwarding (Example)Let&apos

Chapter 6 Network Address Translation (NAT) ScreensP-660R-F1 Series User’s Guide82The following table describes the fields in this screen. 6.5.1 Port

Chapter 6 Network Address Translation (NAT) ScreensP-660R-F1 Series User’s Guide83The following table describes the fields in this screen. 6.6 The S

Chapter 6 Network Address Translation (NAT) ScreensP-660R-F1 Series User’s Guide84The following table describes the fields in this screen. 6.7 DMZ Ho

P-660R-F1 Series User’s Guide 85CHAPTER 7Firewalls7.1 OverviewThis chapter shows you how to enable and configure the ZyXEL Device firewall. Use the

Chapter 7 FirewallsP-660R-F1 Series User’s Guide86have access to network resources. The ZyXEL Device is pre-configured to automatically detect and thw

Chapter 7 FirewallsP-660R-F1 Series User’s Guide873 In the Rules screen, select the index number after that you want to add the rule. For example, if

Chapter 7 FirewallsP-660R-F1 Series User’s Guide88Note: Custom services show up with an “*” before their names in the Services list box and the Rules

Chapter 7 FirewallsP-660R-F1 Series User’s Guide89Rule 1 allows a “MyService” connection from the WAN to IP addresses 192.168.1.1 through 192.168.1.1

P-660R-F1 Series User’s Guide9Table of ContentsAbout This User's Guide ...

Chapter 7 FirewallsP-660R-F1 Series User’s Guide90The following table describes the labels in this screen. 7.3 The Firewall Rule ScreenNote: The orde

Chapter 7 FirewallsP-660R-F1 Series User’s Guide91Click Security > Firewall > Rules to bring up the following screen. This screen displays a li

Chapter 7 FirewallsP-660R-F1 Series User’s Guide92Modify Click the Edit icon to go to the screen where you can edit the rule.Click the Remove icon to

Chapter 7 FirewallsP-660R-F1 Series User’s Guide937.3.1 Configuring Firewall Rules Use this screen to configure firewall rules. In the Rules scree

Chapter 7 FirewallsP-660R-F1 Series User’s Guide94The following table describes the labels in this screen.7.3.2 Customized Services Configure customi

Chapter 7 FirewallsP-660R-F1 Series User’s Guide95Authority) website. Click the Edit Customized Services link while editing a firewall rule to config

Chapter 7 FirewallsP-660R-F1 Series User’s Guide96The following table describes the labels in this screen.7.4 The Firewall Threshold ScreenFor DoS at

Chapter 7 FirewallsP-660R-F1 Series User’s Guide977.4.1 Threshold ValuesIf everything is working properly, you probably do not need to change the th

Chapter 7 FirewallsP-660R-F1 Series User’s Guide98The following table describes the labels in this screen. Table 36 Security > Firewall > Thre

Chapter 7 FirewallsP-660R-F1 Series User’s Guide997.5 Firewall Technical ReferenceThis section provides some technical background information about