Quick Start Guide
Page 10
... (see section 3). • Click Network > WAN > Internet Connection. Ensure that the settings in this will reset the P-660HW-Dx v2 to use the wizard (see section 3) or hold the RESET button in for more information, see Wireless LAN in the User's Guide. Click Apply. 10 If you have ...the P-660HW-Dx v2 is successful, check whether you allow pop-up windows, JavaScripts and Java permissions or set to the factory defaults. If they are still different, turn off and on. If the test is correctly connected. (See section 1.) If the lights are different from the ZyXEL device...
... (see section 3). • Click Network > WAN > Internet Connection. Ensure that the settings in this will reset the P-660HW-Dx v2 to use the wizard (see section 3) or hold the RESET button in for more information, see Wireless LAN in the User's Guide. Click Apply. 10 If you have ...the P-660HW-Dx v2 is successful, check whether you allow pop-up windows, JavaScripts and Java permissions or set to the factory defaults. If they are still different, turn off and on. If the test is correctly connected. (See section 1.) If the lights are different from the ZyXEL device...
User Guide
Page 11
... ...21 List of Tables...27 Part I: Introduction 31 Chapter 1 Introducing the ZyXEL Device 33 1.1 Overview ...33 1.2 Ways to Manage the ZyXEL Device 35 1.3 Good Habits for Managing the ZyXEL Device 35 1.4 LEDs ...35 1.5 Hardware Connections ...36 1.5.1 Splitters and Microfilters...39 2.1 Web Configurator Overview 39 2.2 Accessing the Web Configurator 39 2.2.1 User Access ...40 2.2.2 Administrator Access 40 2.3 Resetting the ZyXEL Device 42 2.3.1 Using the Reset Button 42 2.4 Navigating the Web Configurator 42 2.4.1 Navigation Panel ...42 2.4.2 Status Screen ...44 2.4.3 Status: Any IP ...
... ...21 List of Tables...27 Part I: Introduction 31 Chapter 1 Introducing the ZyXEL Device 33 1.1 Overview ...33 1.2 Ways to Manage the ZyXEL Device 35 1.3 Good Habits for Managing the ZyXEL Device 35 1.4 LEDs ...35 1.5 Hardware Connections ...36 1.5.1 Splitters and Microfilters...39 2.1 Web Configurator Overview 39 2.2 Accessing the Web Configurator 39 2.2.1 User Access ...40 2.2.2 Administrator Access 40 2.3 Resetting the ZyXEL Device 42 2.3.1 Using the Reset Button 42 2.4 Navigating the Web Configurator 42 2.4.1 Navigation Panel ...42 2.4.2 Status Screen ...44 2.4.3 Status: Any IP ...
User Guide
Page 29
... 93 Log Settings ...235 Table 94 System Maintenance Logs ...237 Table 95 System Error Logs ...238 Table 96 Access Control Logs ...238 Table 97 TCP Reset Logs ...239 Table 98 Packet Filter Logs ...239 Table 99 ICMP Logs ...240 Table 100 CDR Logs ...240 Table 101 PPP Logs ...240 Table 102... IEEE 802.11g ...275 Table 122 Wireless Security Levels ...276 Table 123 Comparison of EAP Authentication Types 279 Table 124 Wireless Security Relational Matrix 282 P-660HW-Dx v2 User's Guide 29
... 93 Log Settings ...235 Table 94 System Maintenance Logs ...237 Table 95 System Error Logs ...238 Table 96 Access Control Logs ...238 Table 97 TCP Reset Logs ...239 Table 98 Packet Filter Logs ...239 Table 99 ICMP Logs ...240 Table 100 CDR Logs ...240 Table 101 PPP Logs ...240 Table 102... IEEE 802.11g ...275 Table 122 Wireless Security Levels ...276 Table 123 Comparison of EAP Authentication Types 279 Table 124 Wireless Security Relational Matrix 282 P-660HW-Dx v2 User's Guide 29
User Guide
Page 35
See the SNMP chapter in a safe place. • Back up an earlier configuration file, you would not have to reset the ZyXEL Device to its factory default settings. SPTGEN is a text configuration file that consists of different types of characters, such as ...Configurator. Chapter 1 Introducing the ZyXEL Device 1.2 Ways to Manage the ZyXEL Device Use any of the following figure shows the ZyXEL Device's LEDs. This is recommended for firmware upgrades and configuration backup/restore (Chapter 19 on page 251) • SNMP. Figure 3 Front Panel P-660HW-Dx v2 User's Guide 35 This is...
See the SNMP chapter in a safe place. • Back up an earlier configuration file, you would not have to reset the ZyXEL Device to its factory default settings. SPTGEN is a text configuration file that consists of different types of characters, such as ...Configurator. Chapter 1 Introducing the ZyXEL Device 1.2 Ways to Manage the ZyXEL Device Use any of the following figure shows the ZyXEL Device's LEDs. This is recommended for firmware upgrades and configuration backup/restore (Chapter 19 on page 251) • SNMP. Figure 3 Front Panel P-660HW-Dx v2 User's Guide 35 This is...
User Guide
Page 42
...exit the web configurator. Chapter 2 Introducing the Web Configurator 2.3 Resetting the ZyXEL Device If you forget your password or cannot access the web configurator, you will be reset to "1234". 2.3.1 Using the Reset Button 1 Make sure the POWER LED is on the navigation ...RESET button at any time to configure ZyXEL Device features. Figure 12 Web Configurator: Main Screen Click the Logout icon at the back of most screens) to reload the factory-default configuration file. " Click the icon (located in the top right corner of the ZyXEL Device to view embedded help. 42 P-660HW-Dx v2...
...exit the web configurator. Chapter 2 Introducing the Web Configurator 2.3 Resetting the ZyXEL Device If you forget your password or cannot access the web configurator, you will be reset to "1234". 2.3.1 Using the Reset Button 1 Make sure the POWER LED is on the navigation ...RESET button at any time to configure ZyXEL Device features. Figure 12 Web Configurator: Main Screen Click the Logout icon at the back of most screens) to reload the factory-default configuration file. " Click the icon (located in the top right corner of the ZyXEL Device to view embedded help. 42 P-660HW-Dx v2...
User Guide
Page 44
.... Diagnostic General These screens display information to help you identify problems with the ZyXEL Device general connection. Configuration Use this screen to upload firmware to your ZyXEL Device. Not all models. 44 P-660HW-Dx v2 User's Guide Tools Firmware Use this screen to backup and restore the configuration or reset the factory defaults to your...
.... Diagnostic General These screens display information to help you identify problems with the ZyXEL Device general connection. Configuration Use this screen to upload firmware to your ZyXEL Device. Not all models. 44 P-660HW-Dx v2 User's Guide Tools Firmware Use this screen to backup and restore the configuration or reset the factory defaults to your...
User Guide
Page 117
P-660HW-Dx v2 User's Guide 117 Cancel Click Cancel to reload the previous configuration for this meant that you start transferring settings. You can enable OTIST using the RESET button or the web configurator. 7.4.1.1.1 Reset button If you use the RESET button, the default (01234567) or previous saved (through ... to wireless clients that support OTIST and are within transmission range. " If you to transfer your changes to the ZyXEL Device. Hold in the RESET button for you if you want to eight seconds. OTIST (One-Touch Intelligent Security Technology) allows you hold in ...
P-660HW-Dx v2 User's Guide 117 Cancel Click Cancel to reload the previous configuration for this meant that you start transferring settings. You can enable OTIST using the RESET button or the web configurator. 7.4.1.1.1 Reset button If you use the RESET button, the default (01234567) or previous saved (through ... to wireless clients that support OTIST and are within transmission range. " If you to transfer your changes to the ZyXEL Device. Hold in the RESET button for you if you want to eight seconds. OTIST (One-Touch Intelligent Security Technology) allows you hold in ...
User Guide
Page 120
... Yes for the AP to transfer settings. 4 If you change the SSID or the keys on the AP and ALL wireless clients again. 120 P-660HW-Dx v2 User's Guide click Cancel in the OTIST progress screen to stop the search.) 3 When the wireless client finds an OTIST-enabled AP, you must still... click Start in the AP OTIST web configurator screen or hold in the RESET button (for one to the ZyXEL utility main screen. Chapter 7 Wireless LAN Figure...
... Yes for the AP to transfer settings. 4 If you change the SSID or the keys on the AP and ALL wireless clients again. 120 P-660HW-Dx v2 User's Guide click Cancel in the OTIST progress screen to stop the search.) 3 When the wireless client finds an OTIST-enabled AP, you must still... click Start in the AP OTIST web configurator screen or hold in the RESET button (for one to the ZyXEL utility main screen. Chapter 7 Wireless LAN Figure...
User Guide
Page 159
... of the firewall rules. Click Apply to silently discard the packets without passing through the router. Refer to LAN). P-660HW-Dx v2 User's Guide 159 The ZyXEL Device performs access control and protects against Denial of Service (DoS) attacks when the firewall is the direction of travel ... sender. For example, LAN to LAN / Router means packets traveling from the WAN go directly to a LAN computer without sending a TCP reset packet or an ICMP destination-unreachable message to activate the firewall. Click Cancel to begin configuring this check box to the sender. Note the ...
... of the firewall rules. Click Apply to silently discard the packets without passing through the router. Refer to LAN). P-660HW-Dx v2 User's Guide 159 The ZyXEL Device performs access control and protects against Denial of Service (DoS) attacks when the firewall is the direction of travel ... sender. For example, LAN to LAN / Router means packets traveling from the WAN go directly to a LAN computer without sending a TCP reset packet or an ICMP destination-unreachable message to activate the firewall. Click Cancel to begin configuring this check box to the sender. Note the ...
User Guide
Page 160
...is important as rules are using . Select the check box to disable the rule. Clear the check box to enable the rule. P-660HW-Dx v2 User's Guide The firewall rules that a blank source or destination address is turned on page 169 for more information. Destination IP This drop... displays whether the firewall silently discards packets (Drop), discards packets and sends a TCP reset packet or an ICMP destination-unreachable message to the sender (Reject) or allows the passage of the ZyXEL Device's memory for which this firewall rule applies. Packet Direction Use the drop-down list...
...is important as rules are using . Select the check box to disable the rule. Clear the check box to enable the rule. P-660HW-Dx v2 User's Guide The firewall rules that a blank source or destination address is turned on page 169 for more information. Destination IP This drop... displays whether the firewall silently discards packets (Drop), discards packets and sends a TCP reset packet or an ICMP destination-unreachable message to the sender (Reject) or allows the passage of the ZyXEL Device's memory for which this firewall rule applies. Packet Direction Use the drop-down list...
User Guide
Page 163
Subnet Mask Enter the subnet mask here, if applicable. Edit Select Drop to silently discard the packets without sending a TCP reset packet or an ICMP destination-unreachable message to the Source or Destination Address box. Source/Destination Address Address Type Do you want your rule to ..., and/or subnets. Select an option from the drop-down list box to select what the firewall is to deny the packets and send a TCP reset packet (for a TCP packet) or an ICMP destination-unreachable message (for Matched Packet Use the drop-down list box that match this rule. Start IP...
Subnet Mask Enter the subnet mask here, if applicable. Edit Select Drop to silently discard the packets without sending a TCP reset packet or an ICMP destination-unreachable message to the Source or Destination Address box. Source/Destination Address Address Type Do you want your rule to ..., and/or subnets. Select an option from the drop-down list box to select what the firewall is to deny the packets and send a TCP reset packet (for a TCP packet) or an ICMP destination-unreachable message (for Matched Packet Use the drop-down list box that match this rule. Start IP...
User Guide
Page 172
...response packet. If you have servers that the probing packets must first traverse the ZyXEL Device's firewall mechanism before you can use the default threshold values, or you continue configuring firewall rules. 172 P-660HW-Dx v2 User's Guide Cancel Click Cancel to begin configuring this option to drop sessions ... the default values should be reduced. Select LAN to reply to all sessions. Otherwise select LAN & WAN to reply to send a TCP reset packet for a blocked TCP packet or an ICMP port-unreachable packet for unused ports. Refer to Section 10.10.3 on page 173 to ...
...response packet. If you have servers that the probing packets must first traverse the ZyXEL Device's firewall mechanism before you can use the default threshold values, or you continue configuring firewall rules. 172 P-660HW-Dx v2 User's Guide Cancel Click Cancel to begin configuring this option to drop sessions ... the default values should be reduced. Select LAN to reply to all sessions. Otherwise select LAN & WAN to reply to send a TCP reset packet for a blocked TCP packet or an ICMP port-unreachable packet for unused ports. Refer to Section 10.10.3 on page 173 to ...
User Guide
Page 212
... will reply with an ICMP Port Unreachable packet for a port probe on The ZyXEL Device will not respond to the Internet. If you select this screen afresh. 212 P-660HW-Dx v2 User's Guide Respond to Ping on its unused TCP ports. Table 88 Remote Management: ICMP LABEL DESCRIPTION ... this screen. Therefore if the firewall mechanism blocks a probing packet, the ZyXEL Device reacts based on its unused UDP ports, and a TCP Reset packet for unused ports, thus leaving the unused ports and the ZyXEL Device unseen. Select WAN to reply to save your customized settings and exit...
... will reply with an ICMP Port Unreachable packet for a port probe on The ZyXEL Device will not respond to the Internet. If you select this screen afresh. 212 P-660HW-Dx v2 User's Guide Respond to Ping on its unused TCP ports. Table 88 Remote Management: ICMP LABEL DESCRIPTION ... this screen. Therefore if the firewall mechanism blocks a probing packet, the ZyXEL Device reacts based on its unused UDP ports, and a TCP Reset packet for unused ports, thus leaving the unused ports and the ZyXEL Device unseen. Select WAN to reply to save your customized settings and exit...
User Guide
Page 239
... attack (the TCP incomplete count is per destination host.) Note: Refer to check the TCP state. P-660HW-Dx v2 User's Guide 239 TCP idle (established) timeout (s): 150 minutes TCP reset timeout: 10 seconds The router sent a TCP reset packet when the number of incomplete connections (TCP and UDP) exceeded the userconfigured threshold. (Incomplete count...
... attack (the TCP incomplete count is per destination host.) Note: Refer to check the TCP state. P-660HW-Dx v2 User's Guide 239 TCP idle (established) timeout (s): 150 minutes TCP reset timeout: 10 seconds The router sent a TCP reset packet when the number of incomplete connections (TCP and UDP) exceeded the userconfigured threshold. (Incomplete count...
User Guide
Page 255
... the power off. Click Maintenance > Tools > Restart. This does not affect the ZyXEL Device's configuration. Figure 151 Restart Screen P-660HW-Dx v2 User's Guide 255 You can also press the RESET button on the RESET button. 19.3 Restart System restart allows you to reset the factory defaults of your ZyXEL Device. Click Restart to its factory defaults.
... the power off. Click Maintenance > Tools > Restart. This does not affect the ZyXEL Device's configuration. Figure 151 Restart Screen P-660HW-Dx v2 User's Guide 255 You can also press the RESET button on the RESET button. 19.3 Restart System restart allows you to reset the factory defaults of your ZyXEL Device. Click Restart to its factory defaults.
User Guide
Page 258
.... Capture All Logs Click this operation, for troubleshooting problems with the DSL line. 258 P-660HW-Dx v2 User's Guide DSL Line Status Click this button to view ATM status. Reset ADSL Line Click this test. Reset ADSL Line Successfully!" The large text box above then displays the progress and results of this... an OAM F5 packet to the DSLAM/ATM switch and then returns it (loops it back) to the ZyXEL Device. The ATM loopback test is useful for example: "Start to reset ADSL Loading ADSL modem F/W... Make sure you have configured at least one PVC with proper VPIs/VCIs before ...
.... Capture All Logs Click this operation, for troubleshooting problems with the DSL line. 258 P-660HW-Dx v2 User's Guide DSL Line Status Click this button to view ATM status. Reset ADSL Line Click this test. Reset ADSL Line Successfully!" The large text box above then displays the progress and results of this... an OAM F5 packet to the DSLAM/ATM switch and then returns it (loops it back) to the ZyXEL Device. The ATM loopback test is useful for example: "Start to reset ADSL Loading ADSL modem F/W... Make sure you have configured at least one PVC with proper VPIs/VCIs before ...
User Guide
Page 260
... the IP address and have to reset the device to its factory defaults. The IP address of the Default Gateway might get the IP address of the ZyXEL Device by looking up windows and has JavaScripts and Java enabled. See Section 2.3 on page 95. 260 P-660HW-Dx v2 User's Guide See the Quick Start... Guide. 3 Make sure your Internet browser does not block pop-up the IP address of the ZyXEL Device (it , see or access the Login screen in your computer. To do this...
... the IP address and have to reset the device to its factory defaults. The IP address of the Default Gateway might get the IP address of the ZyXEL Device by looking up windows and has JavaScripts and Java enabled. See Section 2.3 on page 95. 260 P-660HW-Dx v2 User's Guide See the Quick Start... Guide. 3 Make sure your Internet browser does not block pop-up the IP address of the ZyXEL Device (it , see or access the Login screen in your computer. To do this...
User Guide
Page 261
...See the troubleshooting suggestions for I cannot use FTP to the ZyXEL Device. Advanced Suggestions • Try to the ZyXEL Device. 1 Make sure you have to reset the device to a LAN/ETHERNET port. V I can access the ZyXEL Device, check the remote management settings and firewall rules to ...42. 6 If the problem continues, contact the network administrator or vendor, or try to access the ZyXEL Device. See the troubleshooting suggestions for I cannot access the Internet. P-660HW-Dx v2 User's Guide 261 If you have entered the user name and password correctly. This field is case...
...See the troubleshooting suggestions for I cannot use FTP to the ZyXEL Device. Advanced Suggestions • Try to the ZyXEL Device. 1 Make sure you have to reset the device to a LAN/ETHERNET port. V I can access the ZyXEL Device, check the remote management settings and firewall rules to ...42. 6 If the problem continues, contact the network administrator or vendor, or try to access the ZyXEL Device. See the troubleshooting suggestions for I cannot access the Internet. P-660HW-Dx v2 User's Guide 261 If you have entered the user name and password correctly. This field is case...
User Guide
Page 315
... This command sets a rule to enter various, non-consecutive port numbers. P-660HW-Dx v2 User's Guide 315 You may repeat this command to have the ZyXEL Device check for TCP traffic with this destination address. config delete firewall attack This command resets all of the settings for e-mail alert. config edit firewall set rule...
... This command sets a rule to enter various, non-consecutive port numbers. P-660HW-Dx v2 User's Guide 315 You may repeat this command to have the ZyXEL Device check for TCP traffic with this destination address. config delete firewall attack This command resets all of the settings for e-mail alert. config edit firewall set rule...
User Guide
Page 341
.... Figure 204 Ideal Setup The "Triangle Route" Problem A traffic route is in the same subnet), the "triangle route" problem may occur. P-660HW-Dx v2 User's Guide 341 The steps below describe the "triangle route" problem. 1 A computer on the LAN initiates a connection by sending out a... SYN packet to a receiving server on the WAN. 2 The ZyXEL Device reroutes the SYN packet through the ZyXEL Device. As a result, the ZyXEL Device resets the ...
.... Figure 204 Ideal Setup The "Triangle Route" Problem A traffic route is in the same subnet), the "triangle route" problem may occur. P-660HW-Dx v2 User's Guide 341 The steps below describe the "triangle route" problem. 1 A computer on the LAN initiates a connection by sending out a... SYN packet to a receiving server on the WAN. 2 The ZyXEL Device reroutes the SYN packet through the ZyXEL Device. As a result, the ZyXEL Device resets the ...