User Guide
Page 13
... ...81 5.8 Configuring WAN Backup 82 Chapter 6 LAN Setup...85 6.1 LAN Overview ...85 6.1.1 LANs, WANs and the ZyXEL Device 85 6.1.2 DHCP Setup ...86 6.1.3 DNS Server Address 86 6.2 LAN TCP/IP ...86 6.2.1 IP Address and Subnet...NAT 100 7.3 SIP ALG ...100 7.4 NAT General Setup ...101 7.5 Port Forwarding ...102 7.5.1 Default Server IP Address 102 7.5.2 Port Forwarding: Services and Port Numbers 102 7.5.3 Configuring Servers Behind Port Forwarding (Example 103 7.6 Configuring Port Forwarding 103 7.6.1 Port Forwarding Rule Edit 104 7.7 Address Mapping ...105 7.7.1 Address Mapping Rule Edit ...
... ...81 5.8 Configuring WAN Backup 82 Chapter 6 LAN Setup...85 6.1 LAN Overview ...85 6.1.1 LANs, WANs and the ZyXEL Device 85 6.1.2 DHCP Setup ...86 6.1.3 DNS Server Address 86 6.2 LAN TCP/IP ...86 6.2.1 IP Address and Subnet...NAT 100 7.3 SIP ALG ...100 7.4 NAT General Setup ...101 7.5 Port Forwarding ...102 7.5.1 Default Server IP Address 102 7.5.2 Port Forwarding: Services and Port Numbers 102 7.5.3 Configuring Servers Behind Port Forwarding (Example 103 7.6 Configuring Port Forwarding 103 7.6.1 Port Forwarding Rule Edit 104 7.7 Address Mapping ...105 7.7.1 Address Mapping Rule Edit ...
User Guide
Page 20
... Figure 52 NAT General ...101 Figure 53 Multiple Servers Behind NAT Example 103 Figure 54 NAT Port Forwarding ...104 Figure 55 Port Forwarding Rule Setup 105 Figure 56 Address Mapping Rules ...106 Figure 57 Edit Address Mapping Rule 107 Figure... 132 Figure 67 Firewall: Configure Customized Services 133 Figure 68 Firewall Example: Rules ...134 Figure 69 Edit Custom Port Example 134 Figure 70 Firewall Example: Edit Rule: Destination Address 135 Figure 71 Firewall Example: Edit Rule: Select... Edit ...153 Figure 81 Subnet-based Bandwidth Management Example 156 20 P-660H-Tx v2 User's Guide
... Figure 52 NAT General ...101 Figure 53 Multiple Servers Behind NAT Example 103 Figure 54 NAT Port Forwarding ...104 Figure 55 Port Forwarding Rule Setup 105 Figure 56 Address Mapping Rules ...106 Figure 57 Edit Address Mapping Rule 107 Figure... 132 Figure 67 Firewall: Configure Customized Services 133 Figure 68 Firewall Example: Rules ...134 Figure 69 Edit Custom Port Example 134 Figure 70 Firewall Example: Edit Rule: Destination Address 135 Figure 71 Firewall Example: Edit Rule: Select... Edit ...153 Figure 81 Subnet-based Bandwidth Management Example 156 20 P-660H-Tx v2 User's Guide
User Guide
Page 25
...Table 27 NAT Mapping Types ...100 Table 28 NAT General ...101 Table 29 Services and Port Numbers 102 Table 30 NAT Port Forwarding ...104 Table 31 Port Forwarding Rule Setup 105 Table 32 Address Mapping Rules ...106 Table 33 Edit Address Mapping Rule 108... Table 34 Common IP Ports ...113 Table 35 ICMP Commands That Trigger Alerts 116 Table 36 Legal NetBIOS Commands ...116 Table 37 Legal SMTP Commands ...116 Table 38 Firewall: General ...127 P-660H-Tx v2...
...Table 27 NAT Mapping Types ...100 Table 28 NAT General ...101 Table 29 Services and Port Numbers 102 Table 30 NAT Port Forwarding ...104 Table 31 Port Forwarding Rule Setup 105 Table 32 Address Mapping Rules ...106 Table 33 Edit Address Mapping Rule 108... Table 34 Common IP Ports ...113 Table 35 ICMP Commands That Trigger Alerts 116 Table 36 Legal NetBIOS Commands ...116 Table 37 Legal SMTP Commands ...116 Table 38 Firewall: General ...127 P-660H-Tx v2...
User Guide
Page 42
...Security Firewall General Use this screen to define a bandwidth rule. Trusted Use this screen to set up dynamic DNS. 42 P-660H-Tx v2 User's Guide Rule Setup Use this screen to activate/deactivate the firewall and the direction of users on the LAN from content ...NAT General Use this screen to enable bandwidth management on your ZyXEL Device. Dynamic DNS Use this screen to view the ZyXEL Device's bandwidth usage and allotments. Port Forwarding Use this screen to configure servers behind the ZyXEL Device. DHCP Setup Use this screen to configure LAN DHCP settings...
...Security Firewall General Use this screen to define a bandwidth rule. Trusted Use this screen to set up dynamic DNS. 42 P-660H-Tx v2 User's Guide Rule Setup Use this screen to activate/deactivate the firewall and the direction of users on the LAN from content ...NAT General Use this screen to enable bandwidth management on your ZyXEL Device. Dynamic DNS Use this screen to view the ZyXEL Device's bandwidth usage and allotments. Port Forwarding Use this screen to configure servers behind the ZyXEL Device. DHCP Setup Use this screen to configure LAN DHCP settings...
User Guide
Page 79
...the translation of the IP address of multiplexing used within another network. NAT NAT is disconnected. P-660H-Tx v2 User's Guide 79 If assigned a name in the IP Address field. By prior agreement, a ... PPPoE service here. Subnet Mask Enter a subnet mask in the IP Address field below. The ZyXEL Device will not timeout. Max Idle Timeout Specify an idle time-out in the Max Idle Timeout... a dynamic IP address; Select SUA Only if you . Click Edit to go to the Port Forwarding screen to the previous screen. Back Click Back to return to edit a server mapping set of...
...the translation of the IP address of multiplexing used within another network. NAT NAT is disconnected. P-660H-Tx v2 User's Guide 79 If assigned a name in the IP Address field. By prior agreement, a ... PPPoE service here. Subnet Mask Enter a subnet mask in the IP Address field below. The ZyXEL Device will not timeout. Max Idle Timeout Specify an idle time-out in the Max Idle Timeout... a dynamic IP address; Select SUA Only if you . Click Edit to go to the Port Forwarding screen to the previous screen. Back Click Back to return to edit a server mapping set of...
User Guide
Page 98
... can be either local or global) of firewall protection. The ZyXEL Device keeps track of this . Figure 50 How NAT Works 7.1.4 NAT Application The following figure illustrates this chapter. 98 P-660H-Tx v2 User's Guide The global IP addresses for communication with three distinct WAN networks. In ...the destination address on IP address translation, refer to the original inside global address) before forwarding it to the Internet. It replaces the original IP source address (and TCP or UDP source port numbers for Many-to-One and Many-to-Many Overload NAT mapping) in a packet...
... can be either local or global) of firewall protection. The ZyXEL Device keeps track of this . Figure 50 How NAT Works 7.1.4 NAT Application The following figure illustrates this chapter. 98 P-660H-Tx v2 User's Guide The global IP addresses for communication with three distinct WAN networks. In ...the destination address on IP address translation, refer to the original inside global address) before forwarding it to the Internet. It replaces the original IP source address (and TCP or UDP source port numbers for Many-to-One and Many-to-Many Overload NAT mapping) in a packet...
User Guide
Page 101
...box to peer applications, you have just one public WAN IP address for your ZyXEL Device. Click Network > NAT to make sure SIP (VoIP) works correctly with port-forwarding and porttriggering rules. Table 28 NAT General LABEL DESCRIPTION Active Network Address Translation (NAT...) Select this to open the following table describes the labels in this can establish, this screen. P-660H-Tx v2 User's Guide 101 Chapter 7 Network...
...box to peer applications, you have just one public WAN IP address for your ZyXEL Device. Click Network > NAT to make sure SIP (VoIP) works correctly with port-forwarding and porttriggering rules. Table 28 NAT General LABEL DESCRIPTION Active Network Address Translation (NAT...) Select this to open the following table describes the labels in this can establish, this screen. P-660H-Tx v2 User's Guide 101 Chapter 7 Network...
User Guide
Page 102
... inside (behind NAT on the LAN) servers, for further information about port numbers. Many residential broadband ISP accounts do not assign a Default Server IP address, the ZyXEL Device discards all packets received for ports that are not specified in the following table. A default server receives ... (Network News Transport Protocol) 119 SNMP (Simple Network Management Protocol) 161 102 P-660H-Tx v2 User's Guide You may suspend your account if it might be forwarded, and the local IP address of port numbers. You can make visible to the outside world. If you can allocate a...
... inside (behind NAT on the LAN) servers, for further information about port numbers. Many residential broadband ISP accounts do not assign a Default Server IP address, the ZyXEL Device discards all packets received for ports that are not specified in the following table. A default server receives ... (Network News Transport Protocol) 119 SNMP (Simple Network Management Protocol) 161 102 P-660H-Tx v2 User's Guide You may suspend your account if it might be forwarded, and the local IP address of port numbers. You can make visible to the outside world. If you can allocate a...
User Guide
Page 103
... address, the ZyXEL Device discards all packets received for particular services. See Table 29 on the Internet. You assign the LAN IP addresses and the ISP assigns the WAN IP address. Click Network > NAT > Port Forwarding to a third (C in the remote management setup. P-660H-Tx v2 User's Guide ...103 The NAT network appears as a single host on page 102 for port numbers commonly used for ports that are not specified here or in the example).
... address, the ZyXEL Device discards all packets received for particular services. See Table 29 on the Internet. You assign the LAN IP addresses and the ISP assigns the WAN IP address. Click Network > NAT > Port Forwarding to a third (C in the remote management setup. P-660H-Tx v2 User's Guide ...103 The NAT network appears as a single host on page 102 for port numbers commonly used for ports that are not specified here or in the example).
User Guide
Page 104
... you do not assign a Default Server IP address, the ZyXEL Device discards all packets received for ports that are not specified here or in the Port Forwarding screen 104 P-660H-Tx v2 User's Guide Cancel Click Cancel to return to the previous configuration. 7.6.1 Port Forwarding Rule Edit To edit a port forwarding rule, click the rule's edit icon ( to display the...
... you do not assign a Default Server IP address, the ZyXEL Device discards all packets received for ports that are not specified here or in the Port Forwarding screen 104 P-660H-Tx v2 User's Guide Cancel Click Cancel to return to the previous configuration. 7.6.1 Port Forwarding Rule Edit To edit a port forwarding rule, click the rule's edit icon ( to display the...
User Guide
Page 105
... a name to identify this check box to the ZyXEL Device. To forward a series of ports, enter the last port number in a series that begins with the port number in the order that number of the server here. Server IP Address Enter the inside IP address of empty P-660H-Tx v2 User's Guide 105 Back Click Back to...
... a name to identify this check box to the ZyXEL Device. To forward a series of ports, enter the last port number in a series that begins with the port number in the order that number of the server here. Server IP Address Enter the inside IP address of empty P-660H-Tx v2 User's Guide 105 Back Click Back to...
User Guide
Page 108
...the NAT to be accessible to the outside world. This is equivalent to SUA (i.e., PAT, port address translation), ZyXEL's Single User Account feature that port numbers do not change for One-to-one NAT mapping type. • Many-to-One:...to return to choose a server mapping set. Cancel Click Cancel to begin configuring this link to go to the Port Forwarding screen to specify inside servers of the following table describes the fields in the Server Mapping Set field. If your...mapping set to -One and Server mapping types. Edit Details Click this screen afresh. 108 P-660H-Tx v2 User's Guide
...the NAT to be accessible to the outside world. This is equivalent to SUA (i.e., PAT, port address translation), ZyXEL's Single User Account feature that port numbers do not change for One-to-one NAT mapping type. • Many-to-One:...to return to choose a server mapping set. Cancel Click Cancel to begin configuring this link to go to the Port Forwarding screen to specify inside servers of the following table describes the fields in the Server Mapping Set field. If your...mapping set to -One and Server mapping types. Edit Details Click this screen afresh. 108 P-660H-Tx v2 User's Guide
User Guide
Page 152
... icon to configure the required information for a static route. 152 P-660H-Tx v2 User's Guide The screen shown next appears. Use this route. Destination...that describes or identifies this screen to remove a static route from the ZyXEL Device. Modify Click the Edit icon to go to their destinations. Chapter...This is a router or switch on network number. The gateway helps forward packets to the screen where you want to activate this screen. Routing...that you can set up a static route on the ZyXEL Device. Table 49 Static Route LABEL DESCRIPTION # This is always based ...
... icon to configure the required information for a static route. 152 P-660H-Tx v2 User's Guide The screen shown next appears. Use this route. Destination...that describes or identifies this screen to remove a static route from the ZyXEL Device. Modify Click the Edit icon to go to their destinations. Chapter...This is a router or switch on network number. The gateway helps forward packets to the screen where you want to activate this screen. Routing...that you can set up a static route on the ZyXEL Device. Table 49 Static Route LABEL DESCRIPTION # This is always based ...
User Guide
Page 153
...device's LAN or WAN port. The gateway helps forward packets to the previous ...screen without saving. Cancel Click Cancel to begin configuring this static route. Leave this field blank to activate/deactivate this screen. If you to delete this screen afresh. P-660H-Tx v2... User's Guide 153 Gateway IP Address Enter the IP address of the IP static route. Back Click Back to return to their destinations. Table 50 Static Route Edit LABEL DESCRIPTION Active This field allows you need to specify a route to the ZyXEL...
...device's LAN or WAN port. The gateway helps forward packets to the previous ...screen without saving. Cancel Click Cancel to begin configuring this static route. Leave this field blank to activate/deactivate this screen. If you to delete this screen afresh. P-660H-Tx v2... User's Guide 153 Gateway IP Address Enter the IP address of the IP static route. Back Click Back to return to their destinations. Table 50 Static Route Edit LABEL DESCRIPTION Active This field allows you need to specify a route to the ZyXEL...
User Guide
Page 182
... automatically reserve a NAT forwarding port in this check box to access the web configurator). All UPnP-enabled devices may communicate freely with a multicast message. Figure 96 Configuring UPnP The following sections for the UPnP enabled application. 182 P-660H-Tx v2 User's Guide You must... Universal Plug-and-Play (UPnP) When a UPnP device joins a network, it announces its presence with each other without entering the ZyXEL Device's IP address (although you must have IIS (Internet Information Services) enabled on the Windows web server for more information. Allow ...
... automatically reserve a NAT forwarding port in this check box to access the web configurator). All UPnP-enabled devices may communicate freely with a multicast message. Figure 96 Configuring UPnP The following sections for the UPnP enabled application. 182 P-660H-Tx v2 User's Guide You must... Universal Plug-and-Play (UPnP) When a UPnP device joins a network, it announces its presence with each other without entering the ZyXEL Device's IP address (although you must have IIS (Internet Information Services) enabled on the Windows web server for more information. Allow ...
User Guide
Page 213
...address from the time server. NAT Session Table is successful The router has adjusted its time based on to the router via telnet. P-660H-Tx v2 User's Guide 213 Time calibration failed The router failed to the router's web configurator interface. Successful TELNET login Someone has logged on ...Firewall Alert From xxxxx Date: Fri, 07 Apr 2000 10:05:42 From: user@zyxel.com To: user@zyxel.com 1|Apr 7 00 |From:192.168.1.1 To:192.168.1.255 |default policy |forward | 09:54:03 |UDP src port:00520 dest port:00520 | | 2|Apr 7 00 |From:192.168.1.131 To:192.168.1.255 |...
...address from the time server. NAT Session Table is successful The router has adjusted its time based on to the router via telnet. P-660H-Tx v2 User's Guide 213 Time calibration failed The router failed to the router's web configurator interface. Successful TELNET login Someone has logged on ...Firewall Alert From xxxxx Date: Fri, 07 Apr 2000 10:05:42 From: user@zyxel.com To: user@zyxel.com 1|Apr 7 00 |From:192.168.1.1 To:192.168.1.255 |default policy |forward | 09:54:03 |UDP src port:00520 dest port:00520 | | 2|Apr 7 00 |From:192.168.1.131 To:192.168.1.255 |...
User Guide
Page 217
...you didn't select the "Block Matched Web Site" check box, the system forwards the web content. filter server fail License key is invalid The external content ...key is not on according to the external content filtering server failed. P-660H-Tx v2 User's Guide 217 Chapter 19 Logs Table 87 UPnP Logs LOG MESSAGE UPnP...is in a trusted domain. %s When the content filter is invalid. DNS resolving failed The ZyXEL Device cannot get the IP address of a requested web page matched a user defined keyword. %s:...The ZyXEL Device cannot issue a query because TCP/IP socket creation failed...
...you didn't select the "Block Matched Web Site" check box, the system forwards the web content. filter server fail License key is invalid The external content ...key is not on according to the external content filtering server failed. P-660H-Tx v2 User's Guide 217 Chapter 19 Logs Table 87 UPnP Logs LOG MESSAGE UPnP...is in a trusted domain. %s When the content filter is invalid. DNS resolving failed The ZyXEL Device cannot get the IP address of a requested web page matched a user defined keyword. %s:...The ZyXEL Device cannot issue a query because TCP/IP socket creation failed...
User Guide
Page 234
...Ping of Death, SYN Flood, LAND, Smurf etc. Port Forwarding 2048 NAT sessions Multimedia application PPTP under NAT/SUA IPSec passthrough SIP ALG passthrough VPN passthrough Web page blocking by URL keyword. 234 P-660H-Tx v2 User's Guide Appendix A Product Specifications Table 99 Firmware ADSL... Standards Other Protocol Support Management Firewall NAT/SUA Content Filtering Multi-Mode standard (ANSI T1.413,Issue 2; Syslog Built-in Diagnostic Tools for ...
...Ping of Death, SYN Flood, LAND, Smurf etc. Port Forwarding 2048 NAT sessions Multimedia application PPTP under NAT/SUA IPSec passthrough SIP ALG passthrough VPN passthrough Web page blocking by URL keyword. 234 P-660H-Tx v2 User's Guide Appendix A Product Specifications Table 99 Firmware ADSL... Standards Other Protocol Support Management Firewall NAT/SUA Content Filtering Multi-Mode standard (ANSI T1.413,Issue 2; Syslog Built-in Diagnostic Tools for ...
User Guide
Page 235
... Backup & Restoration Network Address Translation (NAT) Port Forwarding DHCP (Dynamic Host Configuration Protocol) Dynamic DNS Support IP Multicast IP Alias Time and Date Logging and Tracing PPPoE Note: Only upload firmware for troubleshooting. Use NAT to convert your ZyXEL Device. You can use this feature to subdivide...an external server when you can send logs from the ZyXEL web site and use a fixed URL, www.zyxel.com for each subnet. These dates and times are then used to computers on the ZyXEL Device. P-660H-Tx v2 User's Guide 235 You must have its own unique IP...
... Backup & Restoration Network Address Translation (NAT) Port Forwarding DHCP (Dynamic Host Configuration Protocol) Dynamic DNS Support IP Multicast IP Alias Time and Date Logging and Tracing PPPoE Note: Only upload firmware for troubleshooting. Use NAT to convert your ZyXEL Device. You can use this feature to subdivide...an external server when you can send logs from the ZyXEL web site and use a fixed URL, www.zyxel.com for each subnet. These dates and times are then used to computers on the ZyXEL Device. P-660H-Tx v2 User's Guide 235 You must have its own unique IP...
User Guide
Page 251
...Rule 2 Src IP address IP Filter Set 1,Rule 2 Src Subnet Mask IP Filter Set 1,Rule 2 Src Port IP Filter Set 1,Rule 2 Src Port Comp 210102013 = IP Filter Set 1,Rule 2 Act Match 210102014 = IP Filter Set 1,Rule 2 Act Not ...Match = 0 = 0 PVA INPUT = 2 = 1 = 6 = 0.0.0.0 = 0 = 138 = 0.0.0.0 = 0 = 0 Table 109 Menu 21.1 Filer Set #2, / Menu 21.1 filter set #2, FIN FN 210200001 = Filter Set 2, Nam / Menu 21.1.2.1 Filter set #2, rule #1 PVA INPUT = NetBIOS_WAN P-660H-Tx v2...
...Rule 2 Src IP address IP Filter Set 1,Rule 2 Src Subnet Mask IP Filter Set 1,Rule 2 Src Port IP Filter Set 1,Rule 2 Src Port Comp 210102013 = IP Filter Set 1,Rule 2 Act Match 210102014 = IP Filter Set 1,Rule 2 Act Not ...Match = 0 = 0 PVA INPUT = 2 = 1 = 6 = 0.0.0.0 = 0 = 138 = 0.0.0.0 = 0 = 0 Table 109 Menu 21.1 Filer Set #2, / Menu 21.1 filter set #2, FIN FN 210200001 = Filter Set 2, Nam / Menu 21.1.2.1 Filter set #2, rule #1 PVA INPUT = NetBIOS_WAN P-660H-Tx v2...