User Guide
Page 13
......81 5.8 Configuring WAN Backup 82 Chapter 6 LAN Setup...85 6.1 LAN Overview ...85 6.1.1 LANs, WANs and the ZyXEL Device 85 6.1.2 DHCP Setup ...86 6.1.3 DNS Server Address 86 6.2 LAN TCP/IP ...86 6.2.1 IP Address and ......101 7.5 Port Forwarding ...102 7.5.1 Default Server IP Address 102 7.5.2 Port Forwarding: Services and Port Numbers 102 7.5.3 Configuring Servers Behind Port Forwarding (Example 103 7.6 Configuring Port Forwarding 103 7.6.1 Port Forwarding Rule Edit 104 7.7 Address Mapping ...105 7.7.1 Address Mapping Rule Edit 107 Part IV: Security 109 P-660H-Tx v2 User's Guide ...
......81 5.8 Configuring WAN Backup 82 Chapter 6 LAN Setup...85 6.1 LAN Overview ...85 6.1.1 LANs, WANs and the ZyXEL Device 85 6.1.2 DHCP Setup ...86 6.1.3 DNS Server Address 86 6.2 LAN TCP/IP ...86 6.2.1 IP Address and ......101 7.5 Port Forwarding ...102 7.5.1 Default Server IP Address 102 7.5.2 Port Forwarding: Services and Port Numbers 102 7.5.3 Configuring Servers Behind Port Forwarding (Example 103 7.6 Configuring Port Forwarding 103 7.6.1 Port Forwarding Rule Edit 104 7.7 Address Mapping ...105 7.7.1 Address Mapping Rule Edit 107 Part IV: Security 109 P-660H-Tx v2 User's Guide ...
User Guide
Page 20
... Figure 52 NAT General ...101 Figure 53 Multiple Servers Behind NAT Example 103 Figure 54 NAT Port Forwarding ...104 Figure 55 Port Forwarding Rule Setup 105 Figure 56 Address Mapping Rules ...106 Figure 57 Edit Address Mapping Rule 107 Figure... 132 Figure 67 Firewall: Configure Customized Services 133 Figure 68 Firewall Example: Rules ...134 Figure 69 Edit Custom Port Example 134 Figure 70 Firewall Example: Edit Rule: Destination Address 135 Figure 71 Firewall Example: Edit Rule: Select... Edit ...153 Figure 81 Subnet-based Bandwidth Management Example 156 20 P-660H-Tx v2 User's Guide
... Figure 52 NAT General ...101 Figure 53 Multiple Servers Behind NAT Example 103 Figure 54 NAT Port Forwarding ...104 Figure 55 Port Forwarding Rule Setup 105 Figure 56 Address Mapping Rules ...106 Figure 57 Edit Address Mapping Rule 107 Figure... 132 Figure 67 Firewall: Configure Customized Services 133 Figure 68 Firewall Example: Rules ...134 Figure 69 Edit Custom Port Example 134 Figure 70 Firewall Example: Edit Rule: Destination Address 135 Figure 71 Firewall Example: Edit Rule: Select... Edit ...153 Figure 81 Subnet-based Bandwidth Management Example 156 20 P-660H-Tx v2 User's Guide
User Guide
Page 25
...Table 27 NAT Mapping Types ...100 Table 28 NAT General ...101 Table 29 Services and Port Numbers 102 Table 30 NAT Port Forwarding ...104 Table 31 Port Forwarding Rule Setup 105 Table 32 Address Mapping Rules ...106 Table 33 Edit Address Mapping Rule 108... Table 34 Common IP Ports ...113 Table 35 ICMP Commands That Trigger Alerts 116 Table 36 Legal NetBIOS Commands ...116 Table 37 Legal SMTP Commands ...116 Table 38 Firewall: General ...127 P-660H-Tx v2...
...Table 27 NAT Mapping Types ...100 Table 28 NAT General ...101 Table 29 Services and Port Numbers 102 Table 30 NAT Port Forwarding ...104 Table 31 Port Forwarding Rule Setup 105 Table 32 Address Mapping Rules ...106 Table 33 Edit Address Mapping Rule 108... Table 34 Common IP Ports ...113 Table 35 ICMP Commands That Trigger Alerts 116 Table 36 Legal NetBIOS Commands ...116 Table 37 Legal SMTP Commands ...116 Table 38 Firewall: General ...127 P-660H-Tx v2...
User Guide
Page 42
... General Use this screen to configure servers behind the ZyXEL Device. Port Forwarding Use this screen to enable NAT. Monitor Use this screen to configure LAN DHCP settings. DHCP Setup Use this screen to view the ZyXEL Device's bandwidth usage and allotments. Client List Use ...IP settings, enable Any IP and other advanced properties. Bandwidth MGMT Summary Use this screen to set up dynamic DNS. 42 P-660H-Tx v2 User's Guide Chapter 2 Introducing the Web Configurator Table 3 Web Configurator Screens Summary (continued) LINK/ICON SUB-LINK FUNCTION LAN ...
... General Use this screen to configure servers behind the ZyXEL Device. Port Forwarding Use this screen to enable NAT. Monitor Use this screen to configure LAN DHCP settings. DHCP Setup Use this screen to view the ZyXEL Device's bandwidth usage and allotments. Client List Use ...IP settings, enable Any IP and other advanced properties. Bandwidth MGMT Summary Use this screen to set up dynamic DNS. 42 P-660H-Tx v2 User's Guide Chapter 2 Introducing the Web Configurator Table 3 Web Configurator Screens Summary (continued) LINK/ICON SUB-LINK FUNCTION LAN ...
User Guide
Page 79
... don't want the connection up all the time. Gateway IP address Specify a gateway IP address (supplied by your ISP). The ZyXEL Device will try to 31 is disconnected. Select SUA Only if you . Back Click Back to return to use NAT. VPI...660H-Tx v2 User's Guide 79 A static IP address is assigned a specific virtual circuit, for example, the source address of a host in dotted decimal notation. the ISP assigns you a different one network to disable NAT. Connection Nailed-Up Connection Select Nailed-Up Connection when you . Click Edit to go to the Port Forwarding...
... don't want the connection up all the time. Gateway IP address Specify a gateway IP address (supplied by your ISP). The ZyXEL Device will try to 31 is disconnected. Select SUA Only if you . Back Click Back to return to use NAT. VPI...660H-Tx v2 User's Guide 79 A static IP address is assigned a specific virtual circuit, for example, the source address of a host in dotted decimal notation. the ISP assigns you a different one network to disable NAT. Connection Nailed-Up Connection Select Nailed-Up Connection when you . Click Edit to go to the Port Forwarding...
User Guide
Page 98
...50 How NAT Works 7.1.4 NAT Application The following figure illustrates this chapter. 98 P-660H-Tx v2 User's Guide More examples follow at the end of an outside world. In addition... the destination address (the inside global address) back to the inside local address before forwarding the packet to RFC 1631, The IP Network Address Translator (NAT). 7.1.3 How NAT...and a destination address. For more information on other networks. The ZyXEL Device keeps track of the original addresses and port numbers so incoming reply packets can designate servers, for communication with ...
...50 How NAT Works 7.1.4 NAT Application The following figure illustrates this chapter. 98 P-660H-Tx v2 User's Guide More examples follow at the end of an outside world. In addition... the destination address (the inside global address) back to the inside local address before forwarding the packet to RFC 1631, The IP Network Address Translator (NAT). 7.1.3 How NAT...and a destination address. For more information on other networks. The ZyXEL Device keeps track of the original addresses and port numbers so incoming reply packets can designate servers, for communication with ...
User Guide
Page 101
...52 NAT General The following screen. Each NAT session establishes a corresponding firewall session. If your ZyXEL Device. Use this number to establish NAT sessions. Chapter 7 Network Address Translation (NAT) Screens ... up SUA/NAT, to allow traffic from the WAN to access the Internet. P-660H-Tx v2 User's Guide 101 In this case, no single client is not degraded by the...available NAT sessions. Cancel Click Cancel to make sure SIP (VoIP) works correctly with port-forwarding and porttriggering rules. Max NAT/ Firewall Session Per User When computers use peer to ...
...52 NAT General The following screen. Each NAT session establishes a corresponding firewall session. If your ZyXEL Device. Use this number to establish NAT sessions. Chapter 7 Network Address Translation (NAT) Screens ... up SUA/NAT, to allow traffic from the WAN to access the Internet. P-660H-Tx v2 User's Guide 101 In this case, no single client is not degraded by the...available NAT sessions. Cancel Click Cancel to make sure SIP (VoIP) works correctly with port-forwarding and porttriggering rules. Max NAT/ Firewall Session Per User When computers use peer to ...
User Guide
Page 102
..., the ZyXEL Device discards all packets received for ports that you do not allow you are not specified here or in the remote management setup. 7.5.2 Port Forwarding: Services and Port Numbers Use the Port Forwarding screen to forward incoming service requests to the server(s) on port 21. ...110 NNTP (Network News Transport Protocol) 119 SNMP (Simple Network Management Protocol) 161 102 P-660H-Tx v2 User's Guide The port number identifies a service; The most often used port numbers are not specified in the following table. Your ISP may periodically check for servers and...
..., the ZyXEL Device discards all packets received for ports that you do not allow you are not specified here or in the remote management setup. 7.5.2 Port Forwarding: Services and Port Numbers Use the Port Forwarding screen to forward incoming service requests to the server(s) on port 21. ...110 NNTP (Network News Transport Protocol) 119 SNMP (Simple Network Management Protocol) 161 102 P-660H-Tx v2 User's Guide The port number identifies a service; The most often used port numbers are not specified in the following table. Your ISP may periodically check for servers and...
User Guide
Page 103
...General screen. Figure 53 Multiple Servers Behind NAT Example 7.6 Configuring Port Forwarding " The Port Forwarding screen is available only when you do not assign a Default Server IP address, the ZyXEL Device discards all packets received for particular services. Chapter 7 ...PORT NUMBER 162 1723 7.5.3 Configuring Servers Behind Port Forwarding (Example) Let's say you want to assign ports 21-25 to one FTP, Telnet and SMTP server (A in the example), port 80 to another (B in the example) and assign a default server IP address of 192.168.1.35 to open the following screen. P-660H-Tx v2...
...General screen. Figure 53 Multiple Servers Behind NAT Example 7.6 Configuring Port Forwarding " The Port Forwarding screen is available only when you do not assign a Default Server IP address, the ZyXEL Device discards all packets received for particular services. Chapter 7 ...PORT NUMBER 162 1723 7.5.3 Configuring Servers Behind Port Forwarding (Example) Let's say you want to assign ports 21-25 to one FTP, Telnet and SMTP server (A in the example), port 80 to another (B in the example) and assign a default server IP address of 192.168.1.35 to open the following screen. P-660H-Tx v2...
User Guide
Page 104
... this check box to the ZyXEL Device. End Port This is the rule index number (read-only). Cancel Click Cancel to return to the previous configuration. 7.6.1 Port Forwarding Rule Edit To edit a port forwarding rule, click the rule's edit icon ( to display the screen shown next. ) in the Port Forwarding screen 104 P-660H-Tx v2 User's Guide Server IP Address...
... this check box to the ZyXEL Device. End Port This is the rule index number (read-only). Cancel Click Cancel to return to the previous configuration. 7.6.1 Port Forwarding Rule Edit To edit a port forwarding rule, click the rule's edit icon ( to display the screen shown next. ) in the Port Forwarding screen 104 P-660H-Tx v2 User's Guide Server IP Address...
User Guide
Page 105
...the rule. To forward only one port, enter the port number again in the Start Port field above . To forward a series of empty P-660H-Tx v2 User's Guide 105 Table 31 Port Forwarding Rule Setup LABEL ...DESCRIPTION Active Click this field. If there are ignored. End Port Enter a port number in this screen. Chapter 7 Network Address Translation (NAT) Screens Figure 55 Port Forwarding Rule Setup The following table describes the fields in this field. Service Name Enter a name to the ZyXEL...
...the rule. To forward only one port, enter the port number again in the Start Port field above . To forward a series of empty P-660H-Tx v2 User's Guide 105 Table 31 Port Forwarding Rule Setup LABEL ...DESCRIPTION Active Click this field. If there are ignored. End Port Enter a port number in this screen. Chapter 7 Network Address Translation (NAT) Screens Figure 55 Port Forwarding Rule Setup The following table describes the fields in this field. Service Name Enter a name to the ZyXEL...
User Guide
Page 108
...Local IP addresses are N/A for One-to-One and Server mapping types. This field is set that previous ZyXEL routers supported only. • Many-to-Many Overload: Many-to-Many Overload mode maps multiple local IP ...the previous screen. Edit Details Click this screen afresh. 108 P-660H-Tx v2 User's Guide Local Start IP This is equivalent to SUA (i.e., PAT, port address translation), ZyXEL's Single User Account feature that you to specify inside servers of ... to begin configuring this link to go to the Port Forwarding screen to edit a server mapping set to Server.
...Local IP addresses are N/A for One-to-One and Server mapping types. This field is set that previous ZyXEL routers supported only. • Many-to-Many Overload: Many-to-Many Overload mode maps multiple local IP ...the previous screen. Edit Details Click this screen afresh. 108 P-660H-Tx v2 User's Guide Local Start IP This is equivalent to SUA (i.e., PAT, port address translation), ZyXEL's Single User Account feature that you to specify inside servers of ... to begin configuring this link to go to the Port Forwarding screen to edit a server mapping set to Server.
User Guide
Page 152
...segment as the device's LAN or WAN port. Destination This parameter specifies the IP network address of the gateway. The gateway helps forward packets to remove a static route from the ZyXEL Device. The screen shown next appears. Name...a static route index number and click Edit ( ). Subnet Mask This is a router or switch on the ZyXEL Device. Chapter 11 Static Route Figure 79 Static Route The following table describes the labels in this static route....box to configure the required information for a static route. 152 P-660H-Tx v2 User's Guide Otherwise, clear the check box.
...segment as the device's LAN or WAN port. Destination This parameter specifies the IP network address of the gateway. The gateway helps forward packets to remove a static route from the ZyXEL Device. The screen shown next appears. Name...a static route index number and click Edit ( ). Subnet Mask This is a router or switch on the ZyXEL Device. Chapter 11 Static Route Figure 79 Static Route The following table describes the labels in this static route....box to configure the required information for a static route. 152 P-660H-Tx v2 User's Guide Otherwise, clear the check box.
User Guide
Page 153
... Enter the name of the final destination. The gateway is always based on the same network segment as the device's LAN or WAN port. Cancel Click Cancel to begin configuring this screen. Destination IP Address This parameter specifies the IP network address of the IP static route... number to be identical to the host ID. The gateway helps forward packets to the previous screen without saving. P-660H-Tx v2 User's Guide 153 Routing is a router or switch on network number. If you to the ZyXEL Device. Apply Click Apply to save your changes to activate/deactivate...
... Enter the name of the final destination. The gateway is always based on the same network segment as the device's LAN or WAN port. Cancel Click Cancel to begin configuring this screen. Destination IP Address This parameter specifies the IP network address of the IP static route... number to be identical to the host ID. The gateway helps forward packets to the previous screen without saving. P-660H-Tx v2 User's Guide 153 Routing is a router or switch on network number. If you to the ZyXEL Device. Apply Click Apply to save your changes to activate/deactivate...
User Guide
Page 182
...). See Section 15.1 on page 181 for the UPnP enabled application. 182 P-660H-Tx v2 User's Guide For security reasons, the ZyXEL Device allows multicast messages only on the LAN. See the following table describes the fields in order to manually configure port forwarding for more information. Allow users to make configuration changes through the...
...). See Section 15.1 on page 181 for the UPnP enabled application. 182 P-660H-Tx v2 User's Guide For security reasons, the ZyXEL Device allows multicast messages only on the LAN. See the following table describes the fields in order to manually configure port forwarding for more information. Allow users to make configuration changes through the...
User Guide
Page 213
...via ftp. FTP login failed Someone has failed to log on to the router via ftp. The maximum number of example log messages. P-660H-Tx v2 User's Guide 213 Table 79 System Maintenance Logs LOG MESSAGE DESCRIPTION Time calibration is successful The router has adjusted its time based on to ...: Firewall Alert From xxxxx Date: Fri, 07 Apr 2000 10:05:42 From: user@zyxel.com To: user@zyxel.com 1|Apr 7 00 |From:192.168.1.1 To:192.168.1.255 |default policy |forward | 09:54:03 |UDP src port:00520 dest port:00520 | | 2|Apr 7 00 |From:192.168.1.131 To:192.168.1.255 |default...
...via ftp. FTP login failed Someone has failed to log on to the router via ftp. The maximum number of example log messages. P-660H-Tx v2 User's Guide 213 Table 79 System Maintenance Logs LOG MESSAGE DESCRIPTION Time calibration is successful The router has adjusted its time based on to ...: Firewall Alert From xxxxx Date: Fri, 07 Apr 2000 10:05:42 From: user@zyxel.com To: user@zyxel.com 1|Apr 7 00 |From:192.168.1.1 To:192.168.1.255 |default policy |forward | 09:54:03 |UDP src port:00520 dest port:00520 | | 2|Apr 7 00 |From:192.168.1.131 To:192.168.1.255 |default...
User Guide
Page 217
DNS resolving failed The ZyXEL Device cannot get the IP address of a requested web page matched a user defined keyword. %s: Not in trusted web The web site is not in a trusted ... box, the system forwards the web content. filter server fail License key is invalid The external content filtering license key is not on according to the external content filtering server failed. Creating socket failed The ZyXEL Device cannot issue a query because TCP/IP socket creation failed, port:port number. P-660H-Tx v2 User's Guide 217 Waiting...
DNS resolving failed The ZyXEL Device cannot get the IP address of a requested web page matched a user defined keyword. %s: Not in trusted web The web site is not in a trusted ... box, the system forwards the web content. filter server fail License key is invalid The external content filtering license key is not on according to the external content filtering server failed. Creating socket failed The ZyXEL Device cannot issue a query because TCP/IP socket creation failed, port:port number. P-660H-Tx v2 User's Guide 217 Waiting...
User Guide
Page 234
...configuration backup and restoration. Transparent bridging for unsupported network layer protocols. Port Forwarding 2048 NAT sessions Multimedia application PPTP under NAT/SUA IPSec passthrough SIP ALG passthrough VPN passthrough Web page blocking by URL keyword. 234 P-660H-Tx v2 User's Guide Reports and logs. ADSL2 G.dmt.bis (G.992.3)... Specifications Table 99 Firmware ADSL Standards Other Protocol Support Management Firewall NAT/SUA Content Filtering Multi-Mode standard (ANSI T1.413,Issue 2; Prevents Denial of Service attacks such as Ping of Death, SYN Flood, LAND, Smurf etc.
...configuration backup and restoration. Transparent bridging for unsupported network layer protocols. Port Forwarding 2048 NAT sessions Multimedia application PPTP under NAT/SUA IPSec passthrough SIP ALG passthrough VPN passthrough Web page blocking by URL keyword. 234 P-660H-Tx v2 User's Guide Reports and logs. ADSL2 G.dmt.bis (G.992.3)... Specifications Table 99 Firmware ADSL Standards Other Protocol Support Management Firewall NAT/SUA Content Filtering Multi-Mode standard (ANSI T1.413,Issue 2; Prevents Denial of Service attacks such as Ping of Death, SYN Flood, LAND, Smurf etc.
User Guide
Page 235
Configuration Backup & Restoration Network Address Translation (NAT) Port Forwarding DHCP (Dynamic Host Configuration Protocol) Dynamic DNS Support IP Multicast IP Alias Time and Date Logging and Tracing PPPoE Note: Only upload firmware for example, ... an external syslog server. You must have a server (mail or web server for example) on the ZyXEL Device later if you turn on your network. These dates and times are then used in logs. P-660H-Tx v2 User's Guide 235 You can put it on your network must register for the computers on...
Configuration Backup & Restoration Network Address Translation (NAT) Port Forwarding DHCP (Dynamic Host Configuration Protocol) Dynamic DNS Support IP Multicast IP Alias Time and Date Logging and Tracing PPPoE Note: Only upload firmware for example, ... an external syslog server. You must have a server (mail or web server for example) on the ZyXEL Device later if you turn on your network. These dates and times are then used in logs. P-660H-Tx v2 User's Guide 235 You can put it on your network must register for the computers on...
User Guide
Page 251
...Rule 2 Src IP address IP Filter Set 1,Rule 2 Src Subnet Mask IP Filter Set 1,Rule 2 Src Port IP Filter Set 1,Rule 2 Src Port Comp 210102013 = IP Filter Set 1,Rule 2 Act Match 210102014 = IP Filter Set 1,Rule 2 Act Not ...Match = 0 = 0 PVA INPUT = 2 = 1 = 6 = 0.0.0.0 = 0 = 138 = 0.0.0.0 = 0 = 0 Table 109 Menu 21.1 Filer Set #2, / Menu 21.1 filter set #2, FIN FN 210200001 = Filter Set 2, Nam / Menu 21.1.2.1 Filter set #2, rule #1 PVA INPUT = NetBIOS_WAN P-660H-Tx v2...
...Rule 2 Src IP address IP Filter Set 1,Rule 2 Src Subnet Mask IP Filter Set 1,Rule 2 Src Port IP Filter Set 1,Rule 2 Src Port Comp 210102013 = IP Filter Set 1,Rule 2 Act Match 210102014 = IP Filter Set 1,Rule 2 Act Not ...Match = 0 = 0 PVA INPUT = 2 = 1 = 6 = 0.0.0.0 = 0 = 138 = 0.0.0.0 = 0 = 0 Table 109 Menu 21.1 Filer Set #2, / Menu 21.1 filter set #2, FIN FN 210200001 = Filter Set 2, Nam / Menu 21.1.2.1 Filter set #2, rule #1 PVA INPUT = NetBIOS_WAN P-660H-Tx v2...