Quick Start Guide
Page 6
... the default. Do not change default settings if your wireless clients support WPA and OTIST. If you to detect your P662HW-D tries to automatically configure the SSID and WPA-PSK on the P-662HW-D, use it instead of the P-662HW-D. Note: If you enable OTIST and select Manually assign a WEP key using the wireless wizard, the P- 662HW-D will replace the WEP key with a WPA-PSK. Wait while your DSL connection. 8 Follow the directions in the User's Guide. P-662HW-D Series Quick Start Guide 7 Click INTERNET / WIRELESS SETUP...
... the default. Do not change default settings if your wireless clients support WPA and OTIST. If you to detect your P662HW-D tries to automatically configure the SSID and WPA-PSK on the P-662HW-D, use it instead of the P-662HW-D. Note: If you enable OTIST and select Manually assign a WEP key using the wireless wizard, the P- 662HW-D will replace the WEP key with a WPA-PSK. Wait while your DSL connection. 8 Follow the directions in the User's Guide. P-662HW-D Series Quick Start Guide 7 Click INTERNET / WIRELESS SETUP...
User Guide
Page 19
....1 Introducing Universal Plug and Play 303 22.1.1 How do I know if I'm using UPnP 303 22.1.2 NAT Traversal ...303 22.1.3 Cautions with UPnP 303 22.2 UPnP and ZyXEL ...304 22.2.1 Configuring UPnP 304 22.3 Installing UPnP in Windows Example 305 22.4 Using UPnP in Windows XP Example 308 Part V: Maintenance, Troubleshooting and Specifications 315 Chapter 23 System ...317 23.1 General Setup and System Name 317 23.1.1 System Configuration 317 P-662H/HW-D Series User's Guide 19
....1 Introducing Universal Plug and Play 303 22.1.1 How do I know if I'm using UPnP 303 22.1.2 NAT Traversal ...303 22.1.3 Cautions with UPnP 303 22.2 UPnP and ZyXEL ...304 22.2.1 Configuring UPnP 304 22.3 Installing UPnP in Windows Example 305 22.4 Using UPnP in Windows XP Example 308 Part V: Maintenance, Troubleshooting and Specifications 315 Chapter 23 System ...317 23.1 General Setup and System Name 317 23.1.1 System Configuration 317 P-662H/HW-D Series User's Guide 19
User Guide
Page 23
... List of Figures Figure 1 ZyXEL Device Internet Access Application 40 Figure 2 ZyXEL Device LAN-to-LAN Application Example 40 Figure 3 Firewall Application ...41 Figure 4 P-662H Front Panel ...41 Figure 5 P-662HW Front Panel ...41 Figure 6 Password Screen ...44 Figure 7 Change Password at Login ...45 Figure 8 Replace Factory Default Certificate 45 Figure 9 Select a Mode ...46 Figure 10 Web Configurator: Main Screen 47 Figure 11 Status Screen ...51 Figure 12 Status: Any IP Table ...53 Figure 13 Status: WLAN Status...
... List of Figures Figure 1 ZyXEL Device Internet Access Application 40 Figure 2 ZyXEL Device LAN-to-LAN Application Example 40 Figure 3 Firewall Application ...41 Figure 4 P-662H Front Panel ...41 Figure 5 P-662HW Front Panel ...41 Figure 6 Password Screen ...44 Figure 7 Change Password at Login ...45 Figure 8 Replace Factory Default Certificate 45 Figure 9 Select a Mode ...46 Figure 10 Web Configurator: Main Screen 47 Figure 11 Status Screen ...51 Figure 12 Status: Any IP Table ...53 Figure 13 Status: WLAN Status...
User Guide
Page 42
... traffic detected. INTERNET Green On The ZyXEL Device is sending or receiving data through a dial-up modem or ISDN TA. Red On The ZyXEL Device failed to the Quick Start Guide for information on hardware connections. 42 P-662H/HW-D Series User's Guide Blinking The CON/AUX switch is set to a management computer and someone is sending/receiving data through the wireless LAN. Chapter 1 Getting To Know Your ZyXEL Device Table 1 Front Panel LEDs (continued) LED COLOR STATUS...
... traffic detected. INTERNET Green On The ZyXEL Device is sending or receiving data through a dial-up modem or ISDN TA. Red On The ZyXEL Device failed to the Quick Start Guide for information on hardware connections. 42 P-662H/HW-D Series User's Guide Blinking The CON/AUX switch is set to a management computer and someone is sending/receiving data through the wireless LAN. Chapter 1 Getting To Know Your ZyXEL Device Table 1 Front Panel LEDs (continued) LED COLOR STATUS...
User Guide
Page 48
...QoS allows you to configure the threshold for servers behind the ZyXEL Device. IP Alias Use this screen to configure IP address ranges for DoS attacks. 48 P-662H/HW-D Series User's Guide DHCP Setup Use this screen to the delivery requirements of network traffic to which to a MAC address (and host name). Address Mapping Use this screen to configure ISP parameters, WAN IP address assignment, DNS servers and other advanced properties. Threshold Use this screen to configure LAN DHCP settings. WAN Internet Access Setup This screen allows you to prioritize wireless traffic...
...QoS allows you to configure the threshold for servers behind the ZyXEL Device. IP Alias Use this screen to configure IP address ranges for DoS attacks. 48 P-662H/HW-D Series User's Guide DHCP Setup Use this screen to the delivery requirements of network traffic to which to a MAC address (and host name). Address Mapping Use this screen to configure ISP parameters, WAN IP address assignment, DNS servers and other advanced properties. Threshold Use this screen to configure LAN DHCP settings. WAN Internet Access Setup This screen allows you to prioritize wireless traffic...
User Guide
Page 49
... ZyXEL Device's bandwidth usage and allotments. Content Access General Control Use this screen to perform content filtering. Trusted-external Use this screen to configure web sites excluded from Content Access Control settings. Rule Setup Use this screen to define a bandwidth rule. Bandwidth MGMT Summary Use this screen to enable bandwidth management on your license key information and update the status of the services you subscribe to. VPN Global Setting Use this screen to allow NetBIOS traffic...
... ZyXEL Device's bandwidth usage and allotments. Content Access General Control Use this screen to perform content filtering. Trusted-external Use this screen to configure web sites excluded from Content Access Control settings. Rule Setup Use this screen to define a bandwidth rule. Bandwidth MGMT Summary Use this screen to enable bandwidth management on your license key information and update the status of the services you subscribe to. VPN Global Setting Use this screen to allow NetBIOS traffic...
User Guide
Page 52
... the WAN port DHCP role - WLAN Information (wireless devices only) SSID This is in use . Interface Status Interface This displays the ZyXEL Device port types. The DMZ 1 port only displays if DMZ is functioning as the ZyXEL Device. Rate For the LAN and DMZ ports, this screen to trigger a call) and Drop (dropping a call) if you're using . Channel This is up or connected) if you're using Ethernet encapsulation and Down (line is down), Up (line is the channel number used...
... the WAN port DHCP role - WLAN Information (wireless devices only) SSID This is in use . Interface Status Interface This displays the ZyXEL Device port types. The DMZ 1 port only displays if DMZ is functioning as the ZyXEL Device. Rate For the LAN and DMZ ports, this screen to trigger a call) and Drop (dropping a call) if you're using . Channel This is up or connected) if you're using Ethernet encapsulation and Down (line is down), Up (line is the channel number used...
User Guide
Page 105
... subnet to allow the computer to access the Internet (through the ZyXEL Device). P-662H/HW-D Series User's Guide 105 The address 224.0.0.2 is assigned to a computer using either a dynamic IP address or a static IP address that , the ZyXEL Device periodically updates this information. WAN). The ZyXEL Device supports IGMP version 1 (IGMP-v1) and IGMP version 2 (IGMP-v2). IP multicasting can be in IGMP. In a residential house where a ZyXEL Device is installed, you can still use a static private IP address in the web configurator (LAN; In cases...
... subnet to allow the computer to access the Internet (through the ZyXEL Device). P-662H/HW-D Series User's Guide 105 The address 224.0.0.2 is assigned to a computer using either a dynamic IP address or a static IP address that , the ZyXEL Device periodically updates this information. WAN). The ZyXEL Device supports IGMP version 1 (IGMP-v1) and IGMP version 2 (IGMP-v2). IP multicasting can be in IGMP. In a residential house where a ZyXEL Device is installed, you can still use a static private IP address in the web configurator (LAN; In cases...
User Guide
Page 158
... traffic and direct it to be logged more information on IP address and protocol. Firewalls, of one Ethernet LAN port, which physically separate the network into two areas. • The DSL/ISDN port connects to the Internet. • The LAN (Local Area Network) port attaches to a network of computers, which may lack the granular application level access control or caching that some proxies support. The ZyXEL Device can be allowed unless you configure remote management or create a firewall...
... traffic and direct it to be logged more information on IP address and protocol. Firewalls, of one Ethernet LAN port, which physically separate the network into two areas. • The DSL/ISDN port connects to the Internet. • The LAN (Local Area Network) port attaches to a network of computers, which may lack the granular application level access control or caching that some proxies support. The ZyXEL Device can be allowed unless you configure remote management or create a firewall...
User Guide
Page 165
... allowed in order to do not themselves contain any connection information (such as FTP and RealAudio) utilize multiple network connections simultaneously. Consider the FTP protocol. A user on the LAN opens a control connection to uniquely identify the connection. This can be analyzed in through the firewall, simply because they could be used for transmitting bulk information. P-662H/HW-D Series User's Guide 165 A cache entry is added which are used to reroute traffic...
... allowed in order to do not themselves contain any connection information (such as FTP and RealAudio) utilize multiple network connections simultaneously. Consider the FTP protocol. A user on the LAN opens a control connection to uniquely identify the connection. This can be analyzed in through the firewall, simply because they could be used for transmitting bulk information. P-662H/HW-D Series User's Guide 165 A cache entry is added which are used to reroute traffic...
User Guide
Page 166
... a web site uses a secure connection, it as passwords, credit card information, etc., without encrypting the information first. • Never submit sensitive information via CLI (Command Line Interpreter) or the web configurator. • Limit who can telnet into account what you use "chat rooms" or IRC sessions, be able to find creative ways to misuse the enabled services to access the firewall or the network. • For local services that...
... a web site uses a secure connection, it as passwords, credit card information, etc., without encrypting the information first. • Never submit sensitive information via CLI (Command Line Interpreter) or the web configurator. • Limit who can telnet into account what you use "chat rooms" or IRC sessions, be able to find creative ways to misuse the enabled services to access the firewall or the network. • For local services that...
User Guide
Page 200
... name of services that the ZyXEL Device supports. The second field indicates the IP port number that defines the service. (Note that there may be configured. A screen displays as shown next. The following table shows a list of the service, two fields appear in the Content Access Control: General screen. See Appendix F on page 423 for a user group. For example, look at the default configuration labeled "(DNS)". (UDP/TCP...
... name of services that the ZyXEL Device supports. The second field indicates the IP port number that defines the service. (Note that there may be configured. A screen displays as shown next. The following table shows a list of the service, two fields appear in the Content Access Control: General screen. See Appendix F on page 423 for a user group. For example, look at the default configuration labeled "(DNS)". (UDP/TCP...
User Guide
Page 230
... determines whether a VPN rule is ESP. The remote IPSec router must be static and correspond to the remote IPSec router's configured remote IP addresses. A DNS server allows clients on the VPN to the remote IPSec router behind your ZyXEL Device. Local Local Address Type IP Address Start Local IP addresses must also enable NAT traversal, and the NAT routers have more protection so it is configured to choose Single, Range, or Subnet. In order to work. Use the drop-down list box. Select Single for troubleshooting if you...
... determines whether a VPN rule is ESP. The remote IPSec router must be static and correspond to the remote IPSec router's configured remote IP addresses. A DNS server allows clients on the VPN to the remote IPSec router behind your ZyXEL Device. Local Local Address Type IP Address Start Local IP addresses must also enable NAT traversal, and the NAT routers have more protection so it is configured to choose Single, Range, or Subnet. In order to work. Use the drop-down list box. Select Single for troubleshooting if you...
User Guide
Page 241
...-down list box. Reset Click Reset to set up a tunnel without encryption. This screen displays active VPN connections. P-662H/HW-D Series User's Guide 241 Chapter 16 VPN Screens Table 95 VPN: Manual Key (continued) LABEL DESCRIPTION My IP Address Enter the WAN IP address of your changes back to the ZyXEL Device. The following table describes the fields in increased latency and decreased throughput. See the chapter on WAN for maximum security. Secure Gateway Address Type the WAN IP address...
...-down list box. Reset Click Reset to set up a tunnel without encryption. This screen displays active VPN connections. P-662H/HW-D Series User's Guide 241 Chapter 16 VPN Screens Table 95 VPN: Manual Key (continued) LABEL DESCRIPTION My IP Address Enter the WAN IP address of your changes back to the ZyXEL Device. The following table describes the fields in increased latency and decreased throughput. See the chapter on WAN for maximum security. Secure Gateway Address Type the WAN IP address...
User Guide
Page 299
...ZyXEL Device's DNS settings. This allows the outside user attempts to the ZyXEL Device. Chapter 21 Remote Management Configuration 21.7 Configuring DNS Use DNS (Domain Name System) to map a domain name to the ZyXEL Device. Table 128 Remote Management: DNS LABEL DESCRIPTION Port The DNS service port number is a "trusted" computer that you specify to send DNS queries to probe an unsupported port on your ZyXEL Device's security settings, click Advanced > Remote MGMT > ICMP. P-662H/HW-D Series User's Guide 299 Your ZyXEL Device supports anti-probing, which IP address the ZyXEL Device...
...ZyXEL Device's DNS settings. This allows the outside user attempts to the ZyXEL Device. Chapter 21 Remote Management Configuration 21.7 Configuring DNS Use DNS (Domain Name System) to map a domain name to the ZyXEL Device. Table 128 Remote Management: DNS LABEL DESCRIPTION Port The DNS service port number is a "trusted" computer that you specify to send DNS queries to probe an unsupported port on your ZyXEL Device's security settings, click Advanced > Remote MGMT > ICMP. P-662H/HW-D Series User's Guide 299 Your ZyXEL Device supports anti-probing, which IP address the ZyXEL Device...
User Guide
Page 337
... 142 Troubleshooting the LAN PROBLEM CORRECTIVE ACTION The LAN LEDs Check your computer's Ethernet Card is connected to the ZyXEL Device and plugged in to the Quick Start Guide for faulty Ethernet cables. I turn on the ZyXEL Device. If Any IP is disabled, make sure that the IP address and the subnet mask of the LEDs turn on when I cannot access the ZyXEL Device from the LAN. In this case, you may have a hardware problem. Make sure that the ZyXEL Device's power adaptor is working properly. Make...
... 142 Troubleshooting the LAN PROBLEM CORRECTIVE ACTION The LAN LEDs Check your computer's Ethernet Card is connected to the ZyXEL Device and plugged in to the Quick Start Guide for faulty Ethernet cables. I turn on the ZyXEL Device. If Any IP is disabled, make sure that the IP address and the subnet mask of the LEDs turn on when I cannot access the ZyXEL Device from the LAN. In this case, you may have a hardware problem. Make sure that the ZyXEL Device's power adaptor is working properly. Make...
User Guide
Page 338
... changed the password and have enabled web service access. If you have now forgotten it up windows, JavaScripts and Java permissions are allowed. 338 P-662H/HW-D Series User's Guide Verify your link to the network. If you . This restores all of the factory defaults including the password. Authentication may be sure to PPPoE and PPPoA encapsulation only. The default user password is "user" and admin password is case-sensitive. Use the ZyXEL Device's LAN IP address when configuring from the WAN. The Internet connection...
... changed the password and have enabled web service access. If you have now forgotten it up windows, JavaScripts and Java permissions are allowed. 338 P-662H/HW-D Series User's Guide Verify your link to the network. If you . This restores all of the factory defaults including the password. Authentication may be sure to PPPoE and PPPoA encapsulation only. The default user password is "user" and admin password is case-sensitive. Use the ZyXEL Device's LAN IP address when configuring from the WAN. The Internet connection...
User Guide
Page 349
... your network from the ISP and makes the necessary configuration changes. Public servers (Web, FTP, etc.) attached to the DMZ port are visible to check web sites against an external database. Static Routes Static routes tell the ZyXEL Device how to forward IP traffic when you connect and turn on your regular WAN connection fails. Zero Configuration Internet Access Once you configure the TCP/IP parameters manually. 16 IP and 4 Bridge Traffic Redirect Traffic redirect forwards WAN traffic to a backup gateway when the ZyXEL Device cannot connect to web screen(s) for example...
... your network from the ISP and makes the necessary configuration changes. Public servers (Web, FTP, etc.) attached to the DMZ port are visible to check web sites against an external database. Static Routes Static routes tell the ZyXEL Device how to forward IP traffic when you connect and turn on your regular WAN connection fails. Zero Configuration Internet Access Once you configure the TCP/IP parameters manually. 16 IP and 4 Bridge Traffic Redirect Traffic redirect forwards WAN traffic to a backup gateway when the ZyXEL Device cannot connect to web screen(s) for example...
User Guide
Page 350
... Ethernet interface with a Dynamic DNS service provider. You can put it back on the Restoration ZyXEL Device later if you turn on your ZyXEL Device. DHCP (Dynamic Host Use this service with the ZyXEL Device itself as microwave ovens, wireless phones, Bluetooth enabled devices, and other 2.4 GHz devices such as the gateway for troubleshooting. IP Multicast IP multicast is used to send traffic to -Point Tunneling Protocol (PPTP) enables secure transfer of IGMP (Internet Group Management Protocol) used in the same subnet. 350 P-662H/HW-D Series User's Guide PPTP...
... Ethernet interface with a Dynamic DNS service provider. You can put it back on the Restoration ZyXEL Device later if you turn on your ZyXEL Device. DHCP (Dynamic Host Use this service with the ZyXEL Device itself as microwave ovens, wireless phones, Bluetooth enabled devices, and other 2.4 GHz devices such as the gateway for troubleshooting. IP Multicast IP multicast is used to send traffic to -Point Tunneling Protocol (PPTP) enables secure transfer of IGMP (Internet Group Management Protocol) used in the same subnet. 350 P-662H/HW-D Series User's Guide PPTP...
User Guide
Page 356
... network clients and then click OK. 5 Restart your network adapter and then click OK. You need the adapter: 1 In the Network window, click Add. 2 Select Adapter and then click Add. 3 Select the manufacturer and model of installed components. Appendix A Setting up Your Computer's IP Address Figure 216 WIndows 95/98/Me: Network: Configuration Installing Components The Network window Configuration tab displays a list of your computer so the changes you made take effect. 356 P-662H/HW-D Series User's Guide...
... network clients and then click OK. 5 Restart your network adapter and then click OK. You need the adapter: 1 In the Network window, click Add. 2 Select Adapter and then click Add. 3 Select the manufacturer and model of installed components. Appendix A Setting up Your Computer's IP Address Figure 216 WIndows 95/98/Me: Network: Configuration Installing Components The Network window Configuration tab displays a list of your computer so the changes you made take effect. 356 P-662H/HW-D Series User's Guide...