User Guide
Page 35
...side labeled "Modem" or "DSL" to your telephone works. P-660H-Tx v2 User's Guide 35 The use of a telephone microfilter is optional. 1 Locate and disconnect each telephone. 2 Connect a cable from the wall jack to ensure that your ZyXEL Device. 3 Connect the side labeled "Line" to the Quick Start...not work, disconnect the microfilter and contact either your local telephone company or the provider of the microfilter to your telephone as a low-pass filter, for information on hardware connections. A microfilter acts as shown in the following figure. 4 After you are done, make sure ...
...side labeled "Modem" or "DSL" to your telephone works. P-660H-Tx v2 User's Guide 35 The use of a telephone microfilter is optional. 1 Locate and disconnect each telephone. 2 Connect a cable from the wall jack to ensure that your ZyXEL Device. 3 Connect the side labeled "Line" to the Quick Start...not work, disconnect the microfilter and contact either your local telephone company or the provider of the microfilter to your telephone as a low-pass filter, for information on hardware connections. A microfilter acts as shown in the following figure. 4 After you are done, make sure ...
User Guide
Page 56
...Static IP Address if your changes to the next wizard screen. A dynamic IP address is a fixed IP that your changes. 56 P-660H-Tx v2 User's Guide The DNS servers are implementing subnetting. Figure 24 Internet Connection with ENET ENCAP LABEL DESCRIPTION Obtain an IP A static IP ... previous wizard screen. Automatically Select Obtain an IP Address Automatically if you are passed to the DHCP clients along with RFC 1483 (continued) LABEL DESCRIPTION Next Click Next to continue to the ZyXEL Device. Server Back Click Back to go back to close the wizard screen...
...Static IP Address if your changes to the next wizard screen. A dynamic IP address is a fixed IP that your changes. 56 P-660H-Tx v2 User's Guide The DNS servers are implementing subnetting. Figure 24 Internet Connection with ENET ENCAP LABEL DESCRIPTION Obtain an IP A static IP ... previous wizard screen. Automatically Select Obtain an IP Address Automatically if you are passed to the DHCP clients along with RFC 1483 (continued) LABEL DESCRIPTION Next Click Next to continue to the ZyXEL Device. Server Back Click Back to go back to close the wizard screen...
User Guide
Page 76
... the necessary configuration changes. PPPoE Passthrough This feature is not appropriate. Each host can enable PPPoE pass through to allow hosts on the LAN to use PPPoE client software on their computers to connect to ...ten hosts on the LAN to use the WAN > Internet Connection screen to save the changes. PPPoE pass through if you do not need to allow up Internet access, you use PPPoE client software on their...are required for Internet access. Figure 36 More Connections 76 P-660H-Tx v2 User's Guide Apply Click Apply to set the ZyXEL Device to the previous screen.
... the necessary configuration changes. PPPoE Passthrough This feature is not appropriate. Each host can enable PPPoE pass through to allow hosts on the LAN to use PPPoE client software on their computers to connect to ...ten hosts on the LAN to use the WAN > Internet Connection screen to save the changes. PPPoE pass through if you do not need to allow up Internet access, you use PPPoE client software on their...are required for Internet access. Figure 36 More Connections 76 P-660H-Tx v2 User's Guide Apply Click Apply to set the ZyXEL Device to the previous screen.
User Guide
Page 86
... share a common street name, so too do computers on a LAN share one common network number. 86 P-660H-Tx v2 User's Guide If your ISP did not give you must know the IP address of the DHCP setup under all...fields in the form of an information sheet, when you must be manually configured. 6.1.2.1 IP Pool Setup The ZyXEL Device is pre-configured with the assigned IP address and subnet mask. Please note that an ISP disseminates the... individual clients to obtain TCP/IP configuration at start-up DHCP are passed to the client machines along with a pool of IP addresses for the clients.
... share a common street name, so too do computers on a LAN share one common network number. 86 P-660H-Tx v2 User's Guide If your ISP did not give you must know the IP address of the DHCP setup under all...fields in the form of an information sheet, when you must be manually configured. 6.1.2.1 IP Pool Setup The ZyXEL Device is pre-configured with the assigned IP address and subnet mask. Please note that an ISP disseminates the... individual clients to obtain TCP/IP configuration at start-up DHCP are passed to the client machines along with a pool of IP addresses for the clients.
User Guide
Page 91
... Select the RIP version from the WAN to the LAN. Select None to disable it may sometimes be necessary to allow NetBIOS packets to pass through the ZyXEL Device. Windows Networking (NetBIOS over TCP/IP) NetBIOS (Network Basic Input/Output System) are not in a multicast group. Back Click Back to...from None, Both, In Only and Out Only. If your ZyXEL Device's advanced LAN settings, click the Advanced Setup button in the LAN IP screen. P-660H-Tx v2 User's Guide 91 The ZyXEL Device supports both IGMP version 1 (IGMP-v1) and IGMP-v2. When you also need to enable the default WAN to ...
... Select the RIP version from the WAN to the LAN. Select None to disable it may sometimes be necessary to allow NetBIOS packets to pass through the ZyXEL Device. Windows Networking (NetBIOS over TCP/IP) NetBIOS (Network Basic Input/Output System) are not in a multicast group. Back Click Back to...from None, Both, In Only and Out Only. If your ZyXEL Device's advanced LAN settings, click the Advanced Setup button in the LAN IP screen. P-660H-Tx v2 User's Guide 91 The ZyXEL Device supports both IGMP version 1 (IGMP-v1) and IGMP-v2. When you also need to enable the default WAN to ...
User Guide
Page 93
... characters, for the DHCP client. Chapter 6 LAN Setup Table 23 DHCP Setup LABEL DESCRIPTION DNS Servers Assigned by DHCP Server The ZyXEL Device passes a DNS (Domain Name System) server IP address to add a static DHCP entry. Primary DNS Server Secondary DNS Server This field...ZyXEL Device acts as shown. The screen appears as a DNS proxy and forwards the DHCP client's DNS query to the real DNS server learned through IPCP and relays the response back to the DHCP clients along with the MAC address specified below. P-660H-Tx v2 User's Guide 93 If the fields are passed...
... characters, for the DHCP client. Chapter 6 LAN Setup Table 23 DHCP Setup LABEL DESCRIPTION DNS Servers Assigned by DHCP Server The ZyXEL Device passes a DNS (Domain Name System) server IP address to add a static DHCP entry. Primary DNS Server Secondary DNS Server This field...ZyXEL Device acts as shown. The screen appears as a DNS proxy and forwards the DHCP client's DNS query to the real DNS server learned through IPCP and relays the response back to the DHCP clients along with the MAC address specified below. P-660H-Tx v2 User's Guide 93 If the fields are passed...
User Guide
Page 100
...;Æ IGA1 Server 3 IPÅÆ IGA1 7.2 SUA (Single User Account) Versus NAT SUA (Single User Account) is behind a SIP ALG. 100 P-660H-Tx v2 User's Guide The ZyXEL Device also supports Full Feature NAT to map multiple global IP addresses to multiple private LAN IP addresses of mapping, Many-to... pass through NAT (are NAT un-friendly) because they embed IP addresses and port numbers in their packets' data payload. Table 27 NAT...
...;Æ IGA1 Server 3 IPÅÆ IGA1 7.2 SUA (Single User Account) Versus NAT SUA (Single User Account) is behind a SIP ALG. 100 P-660H-Tx v2 User's Guide The ZyXEL Device also supports Full Feature NAT to map multiple global IP addresses to multiple private LAN IP addresses of mapping, Many-to... pass through NAT (are NAT un-friendly) because they embed IP addresses and port numbers in their packets' data payload. Table 27 NAT...
User Guide
Page 112
...ZyXEL Device also has packet filtering capabilities. Chapter 8 Firewalls 8.2.2 Application-level Firewalls Application-level firewalls restrict access by screening data packets against Denial of Service attacks when activated. However, "inbound access" will have access to a number of specific systems. The router need only allow application traffic destined for all data passing... to use programs written for more effectively than they use a specific service. 112 P-660H-Tx v2 User's Guide The ZyXEL Device is the only host whose name must be less complex than if it to Internet...
...ZyXEL Device also has packet filtering capabilities. Chapter 8 Firewalls 8.2.2 Application-level Firewalls Application-level firewalls restrict access by screening data packets against Denial of Service attacks when activated. However, "inbound access" will have access to a number of specific systems. The router need only allow application traffic destined for all data passing... to use programs written for more effectively than they use a specific service. 112 P-660H-Tx v2 User's Guide The ZyXEL Device is the only host whose name must be less complex than if it to Internet...
User Guide
Page 119
... from the Internet. This can be used for sending commands between endpoints, and then "data connections" which can be stored. P-660H-Tx v2 User's Guide 119 However, at the very minimum, they could be analyzed in order to build "virtual connections" in through attacking...properly, this connection must be rejected. Consider the FTP protocol. A packet is only allowed to pass through even though a connection from the WAN that the ZyXEL Device is added which includes connection information such as FTP and RealAudio) utilize multiple network connections simultaneously....
... from the Internet. This can be used for sending commands between endpoints, and then "data connections" which can be stored. P-660H-Tx v2 User's Guide 119 However, at the very minimum, they could be analyzed in order to build "virtual connections" in through attacking...properly, this connection must be rejected. Consider the FTP protocol. A packet is only allowed to pass through even though a connection from the WAN that the ZyXEL Device is added which includes connection information such as FTP and RealAudio) utilize multiple network connections simultaneously....
User Guide
Page 121
... Below are neither TCP nor UDP, nor ICMP packets. • To block/allow LAN packets by their source and destination addresses. P-660H-Tx v2 User's Guide 121 Filters can be matched with the outbound request for other layers, from the network layer (IP headers) up to ... block/allow both inbound (WAN to LAN) and outbound (LAN to WAN) traffic between the ZyXEL Device's filtering and firewall functions. 8.7.1 Packet Filtering: • The router filters packets as they pass through the trash of companies or individuals for information that , for example, a legitimate incoming packet...
... Below are neither TCP nor UDP, nor ICMP packets. • To block/allow LAN packets by their source and destination addresses. P-660H-Tx v2 User's Guide 121 Filters can be matched with the outbound request for other layers, from the network layer (IP headers) up to ... block/allow both inbound (WAN to LAN) and outbound (LAN to WAN) traffic between the ZyXEL Device's filtering and firewall functions. 8.7.1 Packet Filtering: • The router filters packets as they pass through the trash of companies or individuals for information that , for example, a legitimate incoming packet...
User Guide
Page 127
Select Drop to silently discard the packets without passing through the router. Select Permit to activate the firewall...Firewall: General LABEL DESCRIPTION Active Firewall Select this button to the sender. Firewall rules are listed. The ZyXEL Device performs access control and protects against Denial of Service (DoS) attacks when the firewall is the ...default action that are applied in this check box to have the ZyXEL Device firewall permit the use of packets to the sender. P-660H-Tx v2 User's Guide 127 Chapter 9 Firewall Configuration The following screen. Basic......
Select Drop to silently discard the packets without passing through the router. Select Permit to activate the firewall...Firewall: General LABEL DESCRIPTION Active Firewall Select this button to the sender. Firewall rules are listed. The ZyXEL Device performs access control and protects against Denial of Service (DoS) attacks when the firewall is the ...default action that are applied in this check box to have the ZyXEL Device firewall permit the use of packets to the sender. P-660H-Tx v2 User's Guide 127 Chapter 9 Firewall Configuration The following screen. Basic......
User Guide
Page 155
...classes based on an application and/or subnet. Traffic redirect or IP alias may cause LAN-to-LAN traffic to pass through an interface. P-660H-Tx v2 User's Guide 155 CHAPTER 12 Bandwidth Management This chapter contains information about configuring bandwidth management, editing rules and viewing the... Management You can create bandwidth classes based on individual applications (like VoIP, Web, FTP, Email and Video for subnet B. The ZyXEL Device does not control the bandwidth of the bandwidth allotments that apply to any interface must be managed by bandwidth management.
...classes based on an application and/or subnet. Traffic redirect or IP alias may cause LAN-to-LAN traffic to pass through an interface. P-660H-Tx v2 User's Guide 155 CHAPTER 12 Bandwidth Management This chapter contains information about configuring bandwidth management, editing rules and viewing the... Management You can create bandwidth classes based on individual applications (like VoIP, Web, FTP, Email and Video for subnet B. The ZyXEL Device does not control the bandwidth of the bandwidth allotments that apply to any interface must be managed by bandwidth management.
User Guide
Page 160
... connection has an upstream transmission speed of 1 Mbps. Apply Click Apply to reserve bandwidth for traffic that interface. 160 P-660H-Tx v2 User's Guide Table 57 Media Bandwidth Management: Summary LABEL DESCRIPTION Interface These read-only labels represent the physical interfaces. Bandwidth ... using bandwidth management. This may cause LAN-to-LAN traffic to pass through the interface, regardless of bandwidth for that does not match a bandwidth class or you want to the ZyXEL Device. Select Fairness-Based to enable bandwidth management on that interface....
... connection has an upstream transmission speed of 1 Mbps. Apply Click Apply to reserve bandwidth for traffic that interface. 160 P-660H-Tx v2 User's Guide Table 57 Media Bandwidth Management: Summary LABEL DESCRIPTION Interface These read-only labels represent the physical interfaces. Bandwidth ... using bandwidth management. This may cause LAN-to-LAN traffic to pass through the interface, regardless of bandwidth for that does not match a bandwidth class or you want to the ZyXEL Device. Select Fairness-Based to enable bandwidth management on that interface....
User Guide
Page 183
... (UPnP) Table 70 Configuring UPnP LABEL DESCRIPTION Allow UPnP to pass through Firewall Select this check box to have the firewall block...Apply to save the setting to install the UPnP in the Components selection box. P-660H-Tx v2 User's Guide 183 Cancel Click Cancel to return to the previously saved settings. ...15.3 Installing UPnP in Windows Example This section shows how to install UPnP in Windows Me and Windows XP. 15.3.1 Installing UPnP in Windows Me Follow the steps below to the ZyXEL...
... (UPnP) Table 70 Configuring UPnP LABEL DESCRIPTION Allow UPnP to pass through Firewall Select this check box to have the firewall block...Apply to save the setting to install the UPnP in the Components selection box. P-660H-Tx v2 User's Guide 183 Cancel Click Cancel to return to the previously saved settings. ...15.3 Installing UPnP in Windows Example This section shows how to install UPnP in Windows Me and Windows XP. 15.3.1 Installing UPnP in Windows Me Follow the steps below to the ZyXEL...
User Guide
Page 215
... packet when the number of TCP incomplete connections exceeded the user configured threshold. (the TCP incomplete count is for all TCP and UDP connections through . P-660H-Tx v2 User's Guide 215 OSPF] Packet without a NAT table entry blocked: [TCP | UDP | IGMP | ESP | GRE | OSPF] The router blocked ...Incomplete in the TCP header). Router sent blocked web site message: TCP The router sent a message to notify a user that the router blocked access to pass [TCP | UDP | IGMP | ESP | GRE | through the firewall.)Note: When the number of incomplete connections (TCP + UDP) > "Maximum ...
... packet when the number of TCP incomplete connections exceeded the user configured threshold. (the TCP incomplete count is for all TCP and UDP connections through . P-660H-Tx v2 User's Guide 215 OSPF] Packet without a NAT table entry blocked: [TCP | UDP | IGMP | ESP | GRE | OSPF] The router blocked ...Incomplete in the TCP header). Router sent blocked web site message: TCP The router sent a message to notify a user that the router blocked access to pass [TCP | UDP | IGMP | ESP | GRE | through the firewall.)Note: When the number of incomplete connections (TCP + UDP) > "Maximum ...
User Guide
Page 216
...PPP connection's Link Control Protocol stage is opening . ppp:IPCP Opening The PPP connection's Internet Protocol Control Protocol stage is closing . 216 P-660H-Tx v2 User's Guide ppp:IPCP Closing The PPP connection's Internet Protocol Control Protocol stage is the call channel ID.For example,"board 0 line 0 ...out-of-order ICMP: ICMP Router reply ICMP packet: ICMP DESCRIPTION ICMP access matched the default policy and was blocked or forwarded according to pass through. The PPPoE, PPTP or dial-up call 3, C01 Outgoing Call dev=6 ch=0 "Means the router has dialed to the PPPoE ...
...PPP connection's Link Control Protocol stage is opening . ppp:IPCP Opening The PPP connection's Internet Protocol Control Protocol stage is closing . 216 P-660H-Tx v2 User's Guide ppp:IPCP Closing The PPP connection's Internet Protocol Control Protocol stage is the call channel ID.For example,"board 0 line 0 ...out-of-order ICMP: ICMP Router reply ICMP packet: ICMP DESCRIPTION ICMP access matched the default policy and was blocked or forwarded according to pass through. The PPPoE, PPTP or dial-up call 3, C01 Outgoing Call dev=6 ch=0 "Means the router has dialed to the PPPoE ...
User Guide
Page 217
...:port number. Chapter 19 Logs Table 87 UPnP Logs LOG MESSAGE UPnP pass through Firewall DESCRIPTION UPnP packets can pass through the firewall. Waiting content filter The external content filtering server did... site is in a trusted domain. %s When the content filter is invalid. DNS resolving failed The ZyXEL Device cannot get the IP address of a requested web page matched a user defined keyword. %s: Not...category list, but it did not respond within the timeout server timeout period. P-660H-Tx v2 User's Guide 217 filter server fail License key is invalid The external content ...
...:port number. Chapter 19 Logs Table 87 UPnP Logs LOG MESSAGE UPnP pass through Firewall DESCRIPTION UPnP packets can pass through the firewall. Waiting content filter The external content filtering server did... site is in a trusted domain. %s When the content filter is invalid. DNS resolving failed The ZyXEL Device cannot get the IP address of a requested web page matched a user defined keyword. %s: Not...category list, but it did not respond within the timeout server timeout period. P-660H-Tx v2 User's Guide 217 filter server fail License key is invalid The external content ...
User Guide
Page 222
... certificate enrollment failed because the certification authority server's IP address cannot be resolved. The router received a user certificate, with the listed subject name has not passed the path verification. The maximum size of directory data that was successful. Please see Table 93 on page 223 for not trusting the certificate. Max... Source field. The CMP online certificate enrollment was too large (the size is also recorded. The router has verified the path of the codes. 222 P-660H-Tx v2 User's Guide
... certificate enrollment failed because the certification authority server's IP address cannot be resolved. The router received a user certificate, with the listed subject name has not passed the path verification. The maximum size of directory data that was successful. Please see Table 93 on page 223 for not trusting the certificate. Max... Source field. The CMP online certificate enrollment was too large (the size is also recorded. The router has verified the path of the codes. 222 P-660H-Tx v2 User's Guide
User Guide
Page 243
..."rom-t" file when you save it to your computer but it must be named "rom-t" when you upload it to the ZyXEL Device using the "put rom-t ftp>bye P-660H-Tx v2 User's Guide 243 Appendix B Internal SPTGEN Figure 132 Internal SPTGEN FTP Download Example c:\ftp 192.168.1.1 220 PPP FTP version 1.0... ready at Sat Jan 1 03:22:12 2000 User (192.168.1.1:(none)): 331 Enter PASS command Password: 230 Logged in ftp>bin 200 Type I OK ftp> put " command. The command "bin" sets the transfer mode to the ZyXEL Device. 4 Exit this FTP application. computer to binary. 3 Upload your "rom-t" file ...
..."rom-t" file when you save it to your computer but it must be named "rom-t" when you upload it to the ZyXEL Device using the "put rom-t ftp>bye P-660H-Tx v2 User's Guide 243 Appendix B Internal SPTGEN Figure 132 Internal SPTGEN FTP Download Example c:\ftp 192.168.1.1 220 PPP FTP version 1.0... ready at Sat Jan 1 03:22:12 2000 User (192.168.1.1:(none)): 331 Enter PASS command Password: 230 Logged in ftp>bin 200 Type I OK ftp> put " command. The command "bin" sets the transfer mode to the ZyXEL Device. 4 Exit this FTP application. computer to binary. 3 Upload your "rom-t" file ...
User Guide
Page 296
... to allow NetBIOS packets to disable the filter and forward NetBIOS packets. Use off 296 P-660H-Tx v2 User's Guide Table 125 NetBIOS Filter Default Settings NAME DESCRIPTION EXAMPLE Between LAN This field displays... whether NetBIOS packets are as follows. Disabled NetBIOS Filter Configuration Syntax:sys filter netbios config where = = Identify which NetBIOS filter (numbered 0-3) to configure. 0 = Between LAN and WAN 3 = IPSec packet pass...
... to allow NetBIOS packets to disable the filter and forward NetBIOS packets. Use off 296 P-660H-Tx v2 User's Guide Table 125 NetBIOS Filter Default Settings NAME DESCRIPTION EXAMPLE Between LAN This field displays... whether NetBIOS packets are as follows. Disabled NetBIOS Filter Configuration Syntax:sys filter netbios config where = = Identify which NetBIOS filter (numbered 0-3) to configure. 0 = Between LAN and WAN 3 = IPSec packet pass...