User Guide
Page 35
... 1.6 Hardware Connections Refer to your telephone as a low-pass filter, for information on hardware connections. P-660H-Tx v2 User's Guide 35 A microfilter acts as shown in the higher bandwidth range, above 4KHz. Chapter 1 Introducing the ZyXEL Device 2 Connect the side labeled "Modem" or "DSL" to your ZyXEL Device. 3 Connect the side labeled "Line" to ensure...
... 1.6 Hardware Connections Refer to your telephone as a low-pass filter, for information on hardware connections. P-660H-Tx v2 User's Guide 35 A microfilter acts as shown in the higher bandwidth range, above 4KHz. Chapter 1 Introducing the ZyXEL Device 2 Connect the side labeled "Modem" or "DSL" to your ZyXEL Device. 3 Connect the side labeled "Line" to ensure...
User Guide
Page 56
... Click Back to go back to close the wizard screen without saving your changes. 56 P-660H-Tx v2 User's Guide Apply Click Apply to save your changes to the Internet. Table 10 Internet...in dotted decimal notation. the ISP assigns you a different one each time you connect to the ZyXEL Device. Chapter 3 Wizard Setup for Internet Access Table 9 Internet Connection with RFC 1483 (continued)... LABEL DESCRIPTION Next Click Next to continue to calculate a subnet mask If you are passed to close the wizard screen without saving your changes. Refer to the appendices to the next...
... Click Back to go back to close the wizard screen without saving your changes. 56 P-660H-Tx v2 User's Guide Apply Click Apply to save your changes to the Internet. Table 10 Internet...in dotted decimal notation. the ISP assigns you a different one each time you connect to the ZyXEL Device. Chapter 3 Wizard Setup for Internet Access Table 9 Internet Connection with RFC 1483 (continued)... LABEL DESCRIPTION Next Click Next to continue to calculate a subnet mask If you are passed to close the wizard screen without saving your changes. Refer to the appendices to the next...
User Guide
Page 76
...addition to the ZyXEL Device's built-in bridge mode. When you use a static WAN IP address or in PPPoE client, you can have a separate account and a public WAN IP address. Figure 36 More Connections 76 P-660H-Tx v2 User's Guide Each host can enable PPPoE pass through is an... alternative to NAT for Internet access. Chapter 5 WAN Setup Table 16 Advanced Internet Connection Setup (continued) LABEL DESCRIPTION Zero Configuration This feature is not applicable/available when you configure the ZyXEL Device to...
...addition to the ZyXEL Device's built-in bridge mode. When you use a static WAN IP address or in PPPoE client, you can have a separate account and a public WAN IP address. Figure 36 More Connections 76 P-660H-Tx v2 User's Guide Each host can enable PPPoE pass through is an... alternative to NAT for Internet access. Chapter 5 WAN Setup Table 16 Advanced Internet Connection Setup (continued) LABEL DESCRIPTION Zero Configuration This feature is not applicable/available when you configure the ZyXEL Device to...
User Guide
Page 86
...the LAN Setup screen. 6.2 LAN TCP/IP The ZyXEL Device has built-in DHCP server capability that assigns...The ZyXEL Device is pre-configured with the assigned IP address and subnet mask. When configured as a server, the ZyXEL Device...feature. The ZyXEL Device acts as a DNS proxy when the Primary and Secondary DNS Server fields are passed to the ...DNS server extensions of the DHCP setup under all circumstances. The ZyXEL Device supports the IPCP DNS server extensions through IPCP negotiation. ...DHCP pool to your ISP gives you can configure the ZyXEL Device as a DHCP server or disable it. The ...
...the LAN Setup screen. 6.2 LAN TCP/IP The ZyXEL Device has built-in DHCP server capability that assigns...The ZyXEL Device is pre-configured with the assigned IP address and subnet mask. When configured as a server, the ZyXEL Device...feature. The ZyXEL Device acts as a DNS proxy when the Primary and Secondary DNS Server fields are passed to the ...DNS server extensions of the DHCP setup under all circumstances. The ZyXEL Device supports the IPCP DNS server extensions through IPCP negotiation. ...DHCP pool to your ISP gives you can configure the ZyXEL Device as a DHCP server or disable it. The ...
User Guide
Page 91
... IP feature. Clear this screen. Any IP Setup Select the Active check box to the LAN. For some dial-up services such as shown. P-660H-Tx v2 User's Guide 91 RIP Version Select the RIP version from None, Both, In Only and Out Only. When you disable the Any IP feature, ... WAN to LAN traffic, you also need to enable the default WAN to disable it may sometimes be necessary to allow NetBIOS packets to pass through the ZyXEL Device. Multicast IGMP (Internet Group Multicast Protocol) is enabled with dynamic IP addresses or static IP addresses in the same subnet as IP address...
... IP feature. Clear this screen. Any IP Setup Select the Active check box to the LAN. For some dial-up services such as shown. P-660H-Tx v2 User's Guide 91 RIP Version Select the RIP version from None, Both, In Only and Out Only. When you disable the Any IP feature, ... WAN to LAN traffic, you also need to enable the default WAN to disable it may sometimes be necessary to allow NetBIOS packets to pass through the ZyXEL Device. Multicast IGMP (Internet Group Multicast Protocol) is enabled with dynamic IP addresses or static IP addresses in the same subnet as IP address...
User Guide
Page 93
...Table 24 LAN Client List LABEL DESCRIPTION IP Address Enter the IP address that you to assign IP addresses on your ZyXEL Device's static DHCP settings, click Network > LAN > Client List. Enter the IP addresses of hexadecimal characters, for...MAC address specified below. Chapter 6 LAN Setup Table 23 DHCP Setup LABEL DESCRIPTION DNS Servers Assigned by DHCP Server The ZyXEL Device passes a DNS (Domain Name System) server IP address to add a static DHCP entry. Every Ethernet device has a unique... the DHCP Setup for example, 00:A0:C5:00:00:02. P-660H-Tx v2 User's Guide 93
...Table 24 LAN Client List LABEL DESCRIPTION IP Address Enter the IP address that you to assign IP addresses on your ZyXEL Device's static DHCP settings, click Network > LAN > Client List. Enter the IP addresses of hexadecimal characters, for...MAC address specified below. Chapter 6 LAN Setup Table 23 DHCP Setup LABEL DESCRIPTION DNS Servers Assigned by DHCP Server The ZyXEL Device passes a DNS (Domain Name System) server IP address to add a static DHCP entry. Every Ethernet device has a unique... the DHCP Setup for example, 00:A0:C5:00:00:02. P-660H-Tx v2 User's Guide 93
User Guide
Page 100
... Full Feature NAT to map multiple global IP addresses to multiple private LAN IP addresses of mapping, Many-to pass through NAT (are NAT un-friendly) because they embed IP addresses and port numbers in the data stream. ... ALG allows SIP calls to -One and Server. You do not need to use STUN or an outbound proxy if your ZyXEL Device is a ZyNOS implementation of a subset of NAT that supports two types of clients or servers using mapping types as ...197;Æ IGA1 7.2 SUA (Single User Account) Versus NAT SUA (Single User Account) is behind a SIP ALG. 100 P-660H-Tx v2 User's Guide
... Full Feature NAT to map multiple global IP addresses to multiple private LAN IP addresses of mapping, Many-to pass through NAT (are NAT un-friendly) because they embed IP addresses and port numbers in the data stream. ... ALG allows SIP calls to -One and Server. You do not need to use STUN or an outbound proxy if your ZyXEL Device is a ZyNOS implementation of a subset of NAT that supports two types of clients or servers using mapping types as ...197;Æ IGA1 7.2 SUA (Single User Account) Versus NAT SUA (Single User Account) is behind a SIP ALG. 100 P-660H-Tx v2 User's Guide
User Guide
Page 112
...one type or another, have access to outside world. Since they use a specific service. 112 P-660H-Tx v2 User's Guide They make access control decisions based on stateful inspection. The ZyXEL Device is the only host whose name must be used to prevent theft, destruction and modification of .... This allows it to be securely connected to use programs written for specific Internet services, such as proxies for all data passing between the LAN and the Internet. However, "inbound access" will have become an integral part of standard security solutions for enterprises. 8.3...
...one type or another, have access to outside world. Since they use a specific service. 112 P-660H-Tx v2 User's Guide They make access control decisions based on stateful inspection. The ZyXEL Device is the only host whose name must be used to prevent theft, destruction and modification of .... This allows it to be securely connected to use programs written for specific Internet services, such as proxies for all data passing between the LAN and the Internet. However, "inbound access" will have become an integral part of standard security solutions for enterprises. 8.3...
User Guide
Page 119
... connection from the Internet. However, at the very minimum, they could be allowed to pass through if it corresponds to a valid connection (that is, if it adds a cache entry for ICMP, except that the ZyXEL Device is even more restrictive. For a short period of the security policy (as is...are used to reroute traffic through the firewall. This can be done safely, since they contain an IP address pair (source and destination). P-660H-Tx v2 User's Guide 119 Its IP address and port pairs will be rejected. Specifically, it searches for outgoing "PORT" commands, and when it sees...
... connection from the Internet. However, at the very minimum, they could be allowed to pass through if it corresponds to a valid connection (that is, if it adds a cache entry for ICMP, except that the ZyXEL Device is even more restrictive. For a short period of the security policy (as is...are used to reroute traffic through the firewall. This can be done safely, since they contain an IP address pair (source and destination). P-660H-Tx v2 User's Guide 119 Its IP address and port pairs will be rejected. Specifically, it searches for outgoing "PORT" commands, and when it sees...
User Guide
Page 121
...; To block/allow both inbound (WAN to LAN) and outbound (LAN to WAN) traffic between the ZyXEL Device's filtering and firewall functions. 8.7.1 Packet Filtering: • The router filters packets as their MAC ... Firewall Below are some comparisons between the specific inside host or an outside host/network "B". P-660H-Tx v2 User's Guide 121 Filters can not distinguish traffic originating from an inside host/network "A" and ... inspects packet contents as well as they pass through the trash of rules to the application layer. • The firewall performs stateful inspection.
...; To block/allow both inbound (WAN to LAN) and outbound (LAN to WAN) traffic between the ZyXEL Device's filtering and firewall functions. 8.7.1 Packet Filtering: • The router filters packets as their MAC ... Firewall Below are some comparisons between the specific inside host or an outside host/network "B". P-660H-Tx v2 User's Guide 121 Filters can not distinguish traffic originating from an inside host/network "A" and ... inspects packet contents as well as they pass through the trash of rules to the application layer. • The firewall performs stateful inspection.
User Guide
Page 127
...is the direction of travel of triangle route topology on triangle route topology. P-660H-Tx v2 User's Guide 127 See the appendix for more on the network. Click this...and do not match any of your changes to silently discard the packets without passing through the router. Table 38 Firewall: General LABEL DESCRIPTION Active Firewall Select this... UDP packet) to activate the firewall. Chapter 9 Firewall Configuration The following screen. The ZyXEL Device performs access control and protects against Denial of the configured firewall rules. This screen ...
...is the direction of travel of triangle route topology on triangle route topology. P-660H-Tx v2 User's Guide 127 See the appendix for more on the network. Click this...and do not match any of your changes to silently discard the packets without passing through the router. Table 38 Firewall: General LABEL DESCRIPTION Active Firewall Select this... UDP packet) to activate the firewall. Chapter 9 Firewall Configuration The following screen. The ZyXEL Device performs access control and protects against Denial of the configured firewall rules. This screen ...
User Guide
Page 155
...for subnet B. P-660H-Tx v2 User's Guide 155 You can create bandwidth classes based on an application and/or subnet. The sum of bandwidth capacity (bandwidth budgets) to different bandwidth rules. Traffic redirect or IP alias may cause LAN-to-LAN traffic to pass through an interface... traffic flowing out of the router, regardless of traffic that apply to any interface must be managed by bandwidth management. The ZyXEL Device does not control the bandwidth of the traffic's source. CHAPTER 12 Bandwidth Management This chapter contains information about configuring bandwidth ...
...for subnet B. P-660H-Tx v2 User's Guide 155 You can create bandwidth classes based on an application and/or subnet. The sum of bandwidth capacity (bandwidth budgets) to different bandwidth rules. Traffic redirect or IP alias may cause LAN-to-LAN traffic to pass through an interface... traffic flowing out of the router, regardless of traffic that apply to any interface must be managed by bandwidth management. The ZyXEL Device does not control the bandwidth of the traffic's source. CHAPTER 12 Bandwidth Management This chapter contains information about configuring bandwidth ...
User Guide
Page 160
... before you want to limit the speed of bandwidth for this interface that you can configure rules for traffic that interface. 160 P-660H-Tx v2 User's Guide Speed (kbps) Enter the amount of this number higher than the interface's actual transmission speed. For example, set ...traffic to pass through the interface, regardless of the actual bandwidth. Bandwidth management applies to all bandwidth classes equally. You can set this number lower than the interface's actual transmission speed. Cancel Click Cancel to begin configuring this check box to have the ZyXEL Device ...
... before you want to limit the speed of bandwidth for this interface that you can configure rules for traffic that interface. 160 P-660H-Tx v2 User's Guide Speed (kbps) Enter the amount of this number higher than the interface's actual transmission speed. For example, set ...traffic to pass through the interface, regardless of the actual bandwidth. Bandwidth management applies to all bandwidth classes equally. You can set this number lower than the interface's actual transmission speed. Cancel Click Cancel to begin configuring this check box to have the ZyXEL Device ...
User Guide
Page 183
... and Control Panel. Click Details. Apply Click Apply to save the setting to the ZyXEL Device. P-660H-Tx v2 User's Guide 183 Chapter 15 Universal Plug-and-Play (UPnP) Table 70 Configuring UPnP LABEL DESCRIPTION Allow UPnP to pass through Firewall Select this check box to have the firewall block all UPnP application packets...
... and Control Panel. Click Details. Apply Click Apply to save the setting to the ZyXEL Device. P-660H-Tx v2 User's Guide 183 Chapter 15 Universal Plug-and-Play (UPnP) Table 70 Configuring UPnP LABEL DESCRIPTION Allow UPnP to pass through Firewall Select this check box to have the firewall block all UPnP application packets...
User Guide
Page 215
... access matched a configured filter rule (denoted by its set in the Firewall Attack Alerts screen. P-660H-Tx v2 User's Guide 215 The router sent a TCP reset packet when a TCP connection state was blocked or forwarded according to pass [TCP | UDP | IGMP | ESP | GRE | through the firewall.)Note: When the number of order.Note...
... access matched a configured filter rule (denoted by its set in the Firewall Attack Alerts screen. P-660H-Tx v2 User's Guide 215 The router sent a TCP reset packet when a TCP connection state was blocked or forwarded according to pass [TCP | UDP | IGMP | ESP | GRE | through the firewall.)Note: When the number of order.Note...
User Guide
Page 216
...'s Challenge Handshake Authentication Protocol stage is connected. The PPPoE, PPTP or dial-up call 3, C01 Outgoing Call dev=6 ch=0 "Means the router has dialed to pass through. ppp:LCP Closing The PPP connection's Link Control Protocol stage is for PPTP). For type and code details, see Table 95 on page 224...%d channel%d, call%d,%s C02 OutCall Connected%d%s board%d line%d channel%d, call%d,%s C02 Call Terminated DESCRIPTION The router received the setup requirements for PPPoE, 10 is closing . 216 P-660H-Tx v2 User's Guide
...'s Challenge Handshake Authentication Protocol stage is connected. The PPPoE, PPTP or dial-up call 3, C01 Outgoing Call dev=6 ch=0 "Means the router has dialed to pass through. ppp:LCP Closing The PPP connection's Link Control Protocol stage is for PPTP). For type and code details, see Table 95 on page 224...%d channel%d, call%d,%s C02 OutCall Connected%d%s board%d line%d channel%d, call%d,%s C02 Call Terminated DESCRIPTION The router received the setup requirements for PPPoE, 10 is closing . 216 P-660H-Tx v2 User's Guide
User Guide
Page 217
...detected proxy mode in the packet. %s The content filter server responded that the web site is invalid. P-660H-Tx v2 User's Guide 217 Waiting content filter The external content filtering server did not return the category type. %s:%s The...DESCRIPTION %s: Keyword blocking The content of the external content filtering via DNS query. Creating socket failed The ZyXEL Device cannot issue a query because TCP/IP socket creation failed, port:port number. Connecting to content The... Chapter 19 Logs Table 87 UPnP Logs LOG MESSAGE UPnP pass through Firewall DESCRIPTION UPnP packets can...
...detected proxy mode in the packet. %s The content filter server responded that the web site is invalid. P-660H-Tx v2 User's Guide 217 Waiting content filter The external content filtering server did not return the category type. %s:%s The...DESCRIPTION %s: Keyword blocking The content of the external content filtering via DNS query. Creating socket failed The ZyXEL Device cannot issue a query because TCP/IP socket creation failed, port:port number. Connecting to content The... Chapter 19 Logs Table 87 UPnP Logs LOG MESSAGE UPnP pass through Firewall DESCRIPTION UPnP packets can...
User Guide
Page 222
...whose address and port are only approximate reasons for the corresponding descriptions of the certificate with the listed subject name has not passed the path verification. Due to decode the received ARL Rcvd data too large! The recorded reason codes are recorded in the... with the listed subject name. The SCEP online certificate enrollment failed. The router has verified the path of the codes. 222 P-660H-Tx v2 User's Guide The Destination field records the certification authority server's IP address and port. The router received a certification authority certificate, ...
...whose address and port are only approximate reasons for the corresponding descriptions of the certificate with the listed subject name has not passed the path verification. Due to decode the received ARL Rcvd data too large! The recorded reason codes are recorded in the... with the listed subject name. The SCEP online certificate enrollment failed. The router has verified the path of the codes. 222 P-660H-Tx v2 User's Guide The Destination field records the certification authority server's IP address and port. The router received a certification authority certificate, ...
User Guide
Page 243
...2000 User (192.168.1.1:(none)): 331 Enter PASS command Password: 230 Logged in ftp>bin 200 Type I OK ftp> put " command. Internal SPTGEN FTP Upload Example 1 Launch your computer to the ZyXEL Device using the "put rom-t ftp>bye P-660H-Tx v2 User's Guide 243 The command "bin" sets... the transfer mode to the ZyXEL Device. 4 Exit this FTP application. computer to binary. 3 Upload your "rom-t" file...
...2000 User (192.168.1.1:(none)): 331 Enter PASS command Password: 230 Logged in ftp>bin 200 Type I OK ftp> put " command. Internal SPTGEN FTP Upload Example 1 Launch your computer to the ZyXEL Device using the "put rom-t ftp>bye P-660H-Tx v2 User's Guide 243 The command "bin" sets... the transfer mode to the ZyXEL Device. 4 Exit this FTP application. computer to binary. 3 Upload your "rom-t" file...
User Guide
Page 296
... calls. For type 4, use on to configure. 0 = Between LAN and WAN 3 = IPSec packet pass through a VPN connection. Use off to enable the filter and block NetBIOS packets. Use off to initiate dial backup calls. Use off 296 P-660H-Tx v2 User's Guide config 4 off to allow NetBIOS packets to block NetBIOS packets from...
... calls. For type 4, use on to configure. 0 = Between LAN and WAN 3 = IPSec packet pass through a VPN connection. Use off to enable the filter and block NetBIOS packets. Use off to initiate dial backup calls. Use off 296 P-660H-Tx v2 User's Guide config 4 off to allow NetBIOS packets to block NetBIOS packets from...