User Guide
Page 3
...comments, questions or suggestions for people who want to configure the ZyXEL Device using the web configurator. E-mail: techwriters@zyxel.com.tw P-660H-Tx v2 User's Guide 3 You should have at least a basic knowledge... of individual screens and supplementary information. About This User's Guide About This User's Guide Intended Audience This manual is intended for improvement to the following address, or use the web configurator to configure the ZyXEL Device. • Supporting...
...comments, questions or suggestions for people who want to configure the ZyXEL Device using the web configurator. E-mail: techwriters@zyxel.com.tw P-660H-Tx v2 User's Guide 3 You should have at least a basic knowledge... of individual screens and supplementary information. About This User's Guide About This User's Guide Intended Audience This manual is intended for improvement to the following address, or use the web configurator to configure the ZyXEL Device. • Supporting...
User Guide
Page 16
... Telnet ...171 14.4 Configuring Telnet ...171 14.5 Telnet Login ...172 14.6 Configuring FTP ...173 14.7 SNMP ...174 14.7.1 Supported MIBs ...175 14.7.2 SNMP Traps ...175 14.7.3 Configuring SNMP 175 14.8 Configuring DNS ...177 14.9 Configuring ICMP ...177 14.10... I know if I'm using UPnP 181 15.1.2 NAT Traversal ...181 15.1.3 Cautions with UPnP 181 15.2 UPnP and ZyXEL ...182 15.2.1 Configuring UPnP 182 15.3 Installing UPnP in Windows Example 183 15.3.1 Installing UPnP in Windows Me 183...189 Part VI: Maintenance and Troubleshooting 193 Chapter 16 System ...195 16 P-660H-Tx v2 User's Guide
... Telnet ...171 14.4 Configuring Telnet ...171 14.5 Telnet Login ...172 14.6 Configuring FTP ...173 14.7 SNMP ...174 14.7.1 Supported MIBs ...175 14.7.2 SNMP Traps ...175 14.7.3 Configuring SNMP 175 14.8 Configuring DNS ...177 14.9 Configuring ICMP ...177 14.10... I know if I'm using UPnP 181 15.1.2 NAT Traversal ...181 15.1.3 Cautions with UPnP 181 15.2 UPnP and ZyXEL ...182 15.2.1 Configuring UPnP 182 15.3 Installing UPnP in Windows Example 183 15.3.1 Installing UPnP in Windows Me 183...189 Part VI: Maintenance and Troubleshooting 193 Chapter 16 System ...195 16 P-660H-Tx v2 User's Guide
User Guide
Page 27
... Table 97 RFC-2408 ISAKMP Payload Types 225 Table 98 Device Specifications ...233 Table 99 Firmware ...234 Table 100 Firmware Specifications ...235 Table 101 Standards Supported ...236 Table 102 Abbreviations Used in the Example Internal SPTGEN Screens Table 244 Table 103 Menu 1 General Setup ...244 Table 104 Menu 3 ...244 Table 105... Subnets ...278 Table 122 24-bit Network Number Subnet Planning 279 Table 123 16-bit Network Number Subnet Planning 279 Table 124 Firewall Commands ...289 P-660H-Tx v2 User's Guide 27
... Table 97 RFC-2408 ISAKMP Payload Types 225 Table 98 Device Specifications ...233 Table 99 Firmware ...234 Table 100 Firmware Specifications ...235 Table 101 Standards Supported ...236 Table 102 Abbreviations Used in the Example Internal SPTGEN Screens Table 244 Table 103 Menu 1 General Setup ...244 Table 104 Menu 3 ...244 Table 105... Subnets ...278 Table 122 24-bit Network Number Subnet Planning 279 Table 123 16-bit Network Number Subnet Planning 279 Table 124 Firewall Commands ...289 P-660H-Tx v2 User's Guide 27
User Guide
Page 31
... high-speed Internet access solution. The firewall supports TCP/UDP inspection and DoS (Denial of your ZyXEL Device. It also introduces the ways you can manage the ZyXEL Device. 1.1 Overview The ZyXEL Device is shown below P-660H-Tx v2 User's Guide 31 A typical Internet access ...over ISDN (Integrated Services Digital Network). See the Product Specifications appendix for example P-660H-T1 v2, denote a device that works over analog (POTS) or digital (ISDN) telephone lines (depending on your ZyXEL Device's specific model. Model names ending in "3" denote a device that works over...
... high-speed Internet access solution. The firewall supports TCP/UDP inspection and DoS (Denial of your ZyXEL Device. It also introduces the ways you can manage the ZyXEL Device. 1.1 Overview The ZyXEL Device is shown below P-660H-Tx v2 User's Guide 31 A typical Internet access ...over ISDN (Integrated Services Digital Network). See the Product Specifications appendix for example P-660H-T1 v2, denote a device that works over analog (POTS) or digital (ISDN) telephone lines (depending on your ZyXEL Device's specific model. Model names ending in "3" denote a device that works over...
User Guide
Page 32
...as follows. A typical LAN-to connect two geographically dispersed networks over ISDN do not support Annex M. Actual speeds attained also depend on the distance from your ZyXEL Device does not support Annex M, the maximum ADSL2/2+ upstream data rate is compatible with the ADSL/ADSL2/... following methods to -LAN Application Example The ZyXEL Device is 1.2 Mbps. Figure 2 LAN-to manage the ZyXEL Device. 32 P-660H-Tx v2 User's Guide " The standard your ISP supports determines the maximum upstream and downstream speeds attainable. ZyXEL Devices which work over the ADSL line. ...
...as follows. A typical LAN-to connect two geographically dispersed networks over ISDN do not support Annex M. Actual speeds attained also depend on the distance from your ZyXEL Device does not support Annex M, the maximum ADSL2/2+ upstream data rate is compatible with the ADSL/ADSL2/... following methods to -LAN Application Example The ZyXEL Device is 1.2 Mbps. Figure 2 LAN-to manage the ZyXEL Device. 32 P-660H-Tx v2 User's Guide " The standard your ISP supports determines the maximum upstream and downstream speeds attainable. ZyXEL Devices which work over the ADSL line. ...
User Guide
Page 33
...many devices of the ZyXEL Device using a (supported) web browser. • Command Line Interface. If you backed up the configuration (and make the ZyXEL Device more secure and to configure the device by uploading an SPTGEN file. Figure 3 Front Panel P-660H-Tx v2 User's Guide 33 ... up an earlier configuration file, you will have to its factory default settings. This is especially convenient if you to manage the ZyXEL Device more effectively. • Change the password. This is recommended for troubleshooting by an SNMP manager. You could simply restore your...
...many devices of the ZyXEL Device using a (supported) web browser. • Command Line Interface. If you backed up the configuration (and make the ZyXEL Device more secure and to configure the device by uploading an SPTGEN file. Figure 3 Front Panel P-660H-Tx v2 User's Guide 33 ... up an earlier configuration file, you will have to its factory default settings. This is especially convenient if you to manage the ZyXEL Device more effectively. • Change the password. This is recommended for troubleshooting by an SNMP manager. You could simply restore your...
User Guide
Page 59
... a standard teleconferencing protocol suite that does not provide a guaranteed quality of service. port 143 SMTP - NetMeeting supports VoIP, text chat sessions, a whiteboard, file transfers and application sharing. H.323 is transported primarily over TCP,... Media Bandwidth Management Setup: Services SERVICE DESCRIPTION E-Mail Electronic mail consists of messages sent through the ZyXEL Device's WAN port and prioritize the distribution of the bandwidth according to specific groups or individuals. ... is called Voice over the Internet. P-660H-Tx v2 User's Guide 59
... a standard teleconferencing protocol suite that does not provide a guaranteed quality of service. port 143 SMTP - NetMeeting supports VoIP, text chat sessions, a whiteboard, file transfers and application sharing. H.323 is transported primarily over TCP,... Media Bandwidth Management Setup: Services SERVICE DESCRIPTION E-Mail Electronic mail consists of messages sent through the ZyXEL Device's WAN port and prioritize the distribution of the bandwidth according to specific groups or individuals. ... is called Voice over the Internet. P-660H-Tx v2 User's Guide 59
User Guide
Page 67
The ZyXEL Device supports the following methods. 5.1.1.1 ENET ENCAP The MAC Encapsulated Routing Link Protocol (ENET ENCAP) is an outside connection to another network or the Internet. 5.1.1 Encapsulation Be ... (rather than individual computers), the computers on the LAN do not need PPPoE software installed, since the ZyXEL Device does that works with existing access control systems (for individuals. P-660H-Tx v2 User's Guide 67 Furthermore, with NAT, all of the task. CHAPTER 5 WAN Setup This chapter describes how to configure WAN settings...
The ZyXEL Device supports the following methods. 5.1.1.1 ENET ENCAP The MAC Encapsulated Routing Link Protocol (ENET ENCAP) is an outside connection to another network or the Internet. 5.1.1 Encapsulation Be ... (rather than individual computers), the computers on the LAN do not need PPPoE software installed, since the ZyXEL Device does that works with existing access control systems (for individuals. P-660H-Tx v2 User's Guide 67 Furthermore, with NAT, all of the task. CHAPTER 5 WAN Setup This chapter describes how to configure WAN settings...
User Guide
Page 69
...demand. However the encapsulation method assigned influences your choices for a dynamic IP, the ZyXEL Device acts as a DHCP client on and whenever the connection is disabled. However for...ZyXEL Device does two things when you have either a static or dynamic IP. The first is that idle timeout is down. The second is that your ISP. P-660H-Tx v2 User's Guide 69 Please see the appendix for multiple protocol support...the VCI is 32 to 65535 (0 to 31 is a fixed IP that the ZyXEL Device will try to the ZyXEL Device. 5.1.6 Nailed-Up Connection (PPP) A nailed-up connection is a dial-...
...demand. However the encapsulation method assigned influences your choices for a dynamic IP, the ZyXEL Device acts as a DHCP client on and whenever the connection is disabled. However for...ZyXEL Device does two things when you have either a static or dynamic IP. The first is that idle timeout is down. The second is that your ISP. P-660H-Tx v2 User's Guide 69 Please see the appendix for multiple protocol support...the VCI is 32 to 65535 (0 to 31 is a fixed IP that the ZyXEL Device will try to the ZyXEL Device. 5.1.6 Nailed-Up Connection (PPP) A nailed-up connection is a dial-...
User Guide
Page 75
The ZyXEL Device supports both IGMP version 1 (IGMP-v1) and IGMP-v2. Peak Cell Rate Divide the DSL line rate (bps) by 424 (the size of cells that system default is a network-layer protocol used to specify ... the sender can be less than 65535. Maximum Burst Maximum Burst Size (MBS) refers to the maximum number of an ATM cell) to disable it. P-660H-Tx v2 User's Guide 75
The ZyXEL Device supports both IGMP version 1 (IGMP-v1) and IGMP-v2. Peak Cell Rate Divide the DSL line rate (bps) by 424 (the size of cells that system default is a network-layer protocol used to specify ... the sender can be less than 65535. Maximum Burst Maximum Burst Size (MBS) refers to the maximum number of an ATM cell) to disable it. P-660H-Tx v2 User's Guide 75
User Guide
Page 80
Advanced Setup Click this screen afresh. The ZyXEL Device supports both IGMP version 1 (IGMP-v1) and IGMP-v2. This is a network-layer protocol used to establish membership in a multicast group. The screen appears as e-mail. Select VBR-nRT (Variable Bit Rate-non ... by 424 (the size of your WAN setup. 5.6.2 Configuring More Connections Advanced Setup To edit your ZyXEL Device's advanced WAN settings, click the Advanced Setup button in this screen. Type the PCR here. 80 P-660H-Tx v2 User's Guide ATM QoS ATM QoS Type Select CBR (Continuous Bit Rate) to find the Peak...
Advanced Setup Click this screen afresh. The ZyXEL Device supports both IGMP version 1 (IGMP-v1) and IGMP-v2. This is a network-layer protocol used to establish membership in a multicast group. The screen appears as e-mail. Select VBR-nRT (Variable Bit Rate-non ... by 424 (the size of your WAN setup. 5.6.2 Configuring More Connections Advanced Setup To edit your ZyXEL Device's advanced WAN settings, click the Advanced Setup button in this screen. Type the PCR here. 80 P-660H-Tx v2 User's Guide ATM QoS ATM QoS Type Select CBR (Continuous Bit Rate) to find the Peak...
User Guide
Page 86
..., or else the computer must be manually configured. 6.1.2.1 IP Pool Setup The ZyXEL Device is extremely important because without it, you must have another DHCP server on a LAN share one common network number. 86 P-660H-Tx v2 User's Guide If your ISP gives you explicit DNS servers, make sure that ...you enter their IP addresses in the LAN Setup screen. 6.2 LAN TCP/IP The ZyXEL Device has built-in DHCP server capability that assigns IP addresses and DNS servers to systems that support DHCP client...
..., or else the computer must be manually configured. 6.1.2.1 IP Pool Setup The ZyXEL Device is extremely important because without it, you must have another DHCP server on a LAN share one common network number. 86 P-660H-Tx v2 User's Guide If your ISP gives you explicit DNS servers, make sure that ...you enter their IP addresses in the LAN Setup screen. 6.2 LAN TCP/IP The ZyXEL Device has built-in DHCP server capability that assigns IP addresses and DNS servers to systems that support DHCP client...
User Guide
Page 88
... used for most networks, unless you would like to establish membership in wide use. The ZyXEL Device supports both formats when receiving). IP multicasting can be enabled/disabled on these interfaces. 88 P-660H-Tx v2 User's Guide WAN). the ZyXEL Device will send out RIP packets but will broadcast its routing table periodically and incorporate...
... used for most networks, unless you would like to establish membership in wide use. The ZyXEL Device supports both formats when receiving). IP multicasting can be enabled/disabled on these interfaces. 88 P-660H-Tx v2 User's Guide WAN). the ZyXEL Device will send out RIP packets but will broadcast its routing table periodically and incorporate...
User Guide
Page 91
...as IP address and subnet mask) of the computer, even when the IP addresses of the computer and the ZyXEL Device are TCP or UDP packets that forwards NetBIOS traffic. P-660H-Tx v2 User's Guide 91 Multicast IGMP (Internet Group Multicast Protocol) is enabled with the default policy set to block...box to forward NetBIOS packets from the LAN to the WAN and from the WAN to enable the Any IP feature. The ZyXEL Device supports both IGMP version 1 (IGMP-v1) and IGMP-v2. The screen appears as PPPoE or PPTP, NetBIOS packets cause unwanted calls. This allows a computer to the LAN.
...as IP address and subnet mask) of the computer, even when the IP addresses of the computer and the ZyXEL Device are TCP or UDP packets that forwards NetBIOS traffic. P-660H-Tx v2 User's Guide 91 Multicast IGMP (Internet Group Multicast Protocol) is enabled with the default policy set to block...box to forward NetBIOS packets from the LAN to the WAN and from the WAN to enable the Any IP feature. The ZyXEL Device supports both IGMP version 1 (IGMP-v1) and IGMP-v2. The screen appears as PPPoE or PPTP, NetBIOS packets cause unwanted calls. This allows a computer to the LAN.
User Guide
Page 92
...then enter the IP address of the actual remote DHCP server here. DNS Server 92 P-660H-Tx v2 User's Guide Table 23 DHCP Setup LABEL DESCRIPTION DHCP Setup DHCP If set to configure the DNS server information that support the DHCP client. Enter the IP address of the IP address pool. Remote DHCP...pool. Figure 46 DHCP Setup The following items need to begin configuring this screen afresh. 6.4 DHCP Setup Use this case. If set to Server, your ZyXEL Device can assign IP addresses, an IP default gateway and DNS servers to Windows 95, Windows NT and other systems that the...
...then enter the IP address of the actual remote DHCP server here. DNS Server 92 P-660H-Tx v2 User's Guide Table 23 DHCP Setup LABEL DESCRIPTION DHCP Setup DHCP If set to configure the DNS server information that support the DHCP client. Enter the IP address of the IP address pool. Remote DHCP...pool. Figure 46 DHCP Setup The following items need to begin configuring this screen afresh. 6.4 DHCP Setup Use this case. If set to Server, your ZyXEL Device can assign IP addresses, an IP default gateway and DNS servers to Windows 95, Windows NT and other systems that the...
User Guide
Page 94
...afresh. Apply Click Apply to have the IP address field editable and change it. The ZyXEL Device supports three logical LAN interfaces via its single physical Ethernet interface with the ZyXEL Device itself as an Ethernet adapter has a hardwired address that is assigned at the ...similar address. Figure 48 Physical Network & Partitioned Logical Networks 94 P-660H-Tx v2 User's Guide MAC Address The MAC (Media Access Control) or Ethernet address on a LAN (Local Area Network) is connected to the ZyXEL Device. Status This field displays whether the client is unique to...
...afresh. Apply Click Apply to have the IP address field editable and change it. The ZyXEL Device supports three logical LAN interfaces via its single physical Ethernet interface with the ZyXEL Device itself as an Ethernet adapter has a hardwired address that is assigned at the ...similar address. Figure 48 Physical Network & Partitioned Logical Networks 94 P-660H-Tx v2 User's Guide MAC Address The MAC (Media Access Control) or Ethernet address on a LAN (Local Area Network) is connected to the ZyXEL Device. Status This field displays whether the client is unique to...
User Guide
Page 95
...change your ZyXEL Device in dotted decimal notation. IP Address Enter the IP address of RIP packets. when set to None, it will not send any RIP packets received. By default, RIP direction is universally supported but RIP...Routing Information Protocol, RFC 1058 and RFC 1389) allows a router to Both or Out Only, the ZyXEL Device will automatically calculate the subnet mask based on non-router machines since they generally do not listen... the labels in RIP-2 format; IP Subnet Mask Your ZyXEL Device will broadcast its routing table periodically. P-660H-Tx v2 User's Guide 95
...change your ZyXEL Device in dotted decimal notation. IP Address Enter the IP address of RIP packets. when set to None, it will not send any RIP packets received. By default, RIP direction is universally supported but RIP...Routing Information Protocol, RFC 1058 and RFC 1389) allows a router to Both or Out Only, the ZyXEL Device will automatically calculate the subnet mask based on non-router machines since they generally do not listen... the labels in RIP-2 format; IP Subnet Mask Your ZyXEL Device will broadcast its routing table periodically. P-660H-Tx v2 User's Guide 95
User Guide
Page 99
...Port numbers do NOT change for instance, PAT, port address translation), ZyXEL's Single User Account feature that previous ZyXEL routers supported (the SUA Only option in today's routers). • Many to Many Overload: In Many-to-Many Overload mode, the ZyXEL Device maps the multiple local IP addresses to shared global IP addresses...address. • Server: This type allows you to specify inside servers of IP/port mapping. P-660H-Tx v2 User's Guide 99 They are: • One to One: In One-to-One mode, the ZyXEL Device maps one local IP address to one global IP address. • Many to One: In...
...Port numbers do NOT change for instance, PAT, port address translation), ZyXEL's Single User Account feature that previous ZyXEL routers supported (the SUA Only option in today's routers). • Many to Many Overload: In Many-to-Many Overload mode, the ZyXEL Device maps the multiple local IP addresses to shared global IP addresses...address. • Server: This type allows you to specify inside servers of IP/port mapping. P-660H-Tx v2 User's Guide 99 They are: • One to One: In One-to-One mode, the ZyXEL Device maps one local IP address to one global IP address. • Many to One: In...
User Guide
Page 100
...SUA Only if you have just one public WAN IP address for your ZyXEL Device. • Choose Full Feature if you have multiple public WAN IP addresses for your ZyXEL Device is a ZyNOS implementation of a subset of NAT that supports two types of mapping, Many-to -Many Overload ILA1ÅÆ...ÅÆ IGA1 Server 3 IPÅÆ IGA1 7.2 SUA (Single User Account) Versus NAT SUA (Single User Account) is behind a SIP ALG. 100 P-660H-Tx v2 User's Guide You do not need to -One (SUA/PAT) ILA1ÅÆ IGA1 ILA2ÅÆ IGA1 ... Chapter 7 Network Address Translation (NAT) Screens ...
...SUA Only if you have just one public WAN IP address for your ZyXEL Device. • Choose Full Feature if you have multiple public WAN IP addresses for your ZyXEL Device is a ZyNOS implementation of a subset of NAT that supports two types of mapping, Many-to -Many Overload ILA1ÅÆ...ÅÆ IGA1 Server 3 IPÅÆ IGA1 7.2 SUA (Single User Account) Versus NAT SUA (Single User Account) is behind a SIP ALG. 100 P-660H-Tx v2 User's Guide You do not need to -One (SUA/PAT) ILA1ÅÆ IGA1 ILA2ÅÆ IGA1 ... Chapter 7 Network Address Translation (NAT) Screens ...
User Guide
Page 102
...service; Many residential broadband ISP accounts do not assign a Default Server IP address, the ZyXEL Device discards all packets received for ports that corresponds to the servers for specified services, NAT supports a default server IP address. Please refer to the server(s) on port 21. Table ... Web) 80 POP3 (Post Office Protocol) 110 NNTP (Network News Transport Protocol) 119 SNMP (Simple Network Management Protocol) 161 102 P-660H-Tx v2 User's Guide for unknown services or where one server can allocate a server IP address that are unsure, refer to your location. In...
...service; Many residential broadband ISP accounts do not assign a Default Server IP address, the ZyXEL Device discards all packets received for ports that corresponds to the servers for specified services, NAT supports a default server IP address. Please refer to the server(s) on port 21. Table ... Web) 80 POP3 (Post Office Protocol) 110 NNTP (Network News Transport Protocol) 119 SNMP (Simple Network Management Protocol) 161 102 P-660H-Tx v2 User's Guide for unknown services or where one server can allocate a server IP address that are unsure, refer to your location. In...