Quick Start Guide
Page 6
... Disable wireless security using the wireless wizard, the P662HW-D will reset the P-662HW-D to the ETHERNET port, follow these steps. 6 Note: If you cannot access the Internet when your DSL connection. 8 Follow the directions in the RESET button for too long, as this will replace the WEP key with a WPA-PSK. See the appendix in the User's Guide for more information, see Wireless LAN in the Adapter screen. P-662HW-D Series Quick Start Guide 7 Click INTERNET / WIRELESS SETUP. You must enable OTIST on the P-662HW-D, use...
... Disable wireless security using the wireless wizard, the P662HW-D will reset the P-662HW-D to the ETHERNET port, follow these steps. 6 Note: If you cannot access the Internet when your DSL connection. 8 Follow the directions in the RESET button for too long, as this will replace the WEP key with a WPA-PSK. See the appendix in the User's Guide for more information, see Wireless LAN in the Adapter screen. P-662HW-D Series Quick Start Guide 7 Click INTERNET / WIRELESS SETUP. You must enable OTIST on the P-662HW-D, use...
User Guide
Page 19
....1 Introducing Universal Plug and Play 303 22.1.1 How do I know if I'm using UPnP 303 22.1.2 NAT Traversal ...303 22.1.3 Cautions with UPnP 303 22.2 UPnP and ZyXEL ...304 22.2.1 Configuring UPnP 304 22.3 Installing UPnP in Windows Example 305 22.4 Using UPnP in Windows XP Example 308 Part V: Maintenance, Troubleshooting and Specifications 315 Chapter 23 System ...317 23.1 General Setup and System Name 317 23.1.1 System Configuration 317 P-662H/HW-D Series User's Guide 19
....1 Introducing Universal Plug and Play 303 22.1.1 How do I know if I'm using UPnP 303 22.1.2 NAT Traversal ...303 22.1.3 Cautions with UPnP 303 22.2 UPnP and ZyXEL ...304 22.2.1 Configuring UPnP 304 22.3 Installing UPnP in Windows Example 305 22.4 Using UPnP in Windows XP Example 308 Part V: Maintenance, Troubleshooting and Specifications 315 Chapter 23 System ...317 23.1 General Setup and System Name 317 23.1.1 System Configuration 317 P-662H/HW-D Series User's Guide 19
User Guide
Page 23
... List of Figures Figure 1 ZyXEL Device Internet Access Application 40 Figure 2 ZyXEL Device LAN-to-LAN Application Example 40 Figure 3 Firewall Application ...41 Figure 4 P-662H Front Panel ...41 Figure 5 P-662HW Front Panel ...41 Figure 6 Password Screen ...44 Figure 7 Change Password at Login ...45 Figure 8 Replace Factory Default Certificate 45 Figure 9 Select a Mode ...46 Figure 10 Web Configurator: Main Screen 47 Figure 11 Status Screen ...51 Figure 12 Status: Any IP Table ...53 Figure 13 Status: WLAN Status...
... List of Figures Figure 1 ZyXEL Device Internet Access Application 40 Figure 2 ZyXEL Device LAN-to-LAN Application Example 40 Figure 3 Firewall Application ...41 Figure 4 P-662H Front Panel ...41 Figure 5 P-662HW Front Panel ...41 Figure 6 Password Screen ...44 Figure 7 Change Password at Login ...45 Figure 8 Replace Factory Default Certificate 45 Figure 9 Select a Mode ...46 Figure 10 Web Configurator: Main Screen 47 Figure 11 Status Screen ...51 Figure 12 Status: Any IP Table ...53 Figure 13 Status: WLAN Status...
User Guide
Page 42
... connected to the Quick Start Guide for information on hardware connections. 42 P-662H/HW-D Series User's Guide Blinking The CON/AUX switch is sending or receiving data through a dial-up modem or ISDN TA. DSL/ACT Green On The ZyXEL Device has a successful DSL connection. Blinking The DSL is no traffic detected. Off The system is not receiving power or there is attempting to authenticate. Red On The ZyXEL Device failed to synchronize with no DSL connection...
... connected to the Quick Start Guide for information on hardware connections. 42 P-662H/HW-D Series User's Guide Blinking The CON/AUX switch is sending or receiving data through a dial-up modem or ISDN TA. DSL/ACT Green On The ZyXEL Device has a successful DSL connection. Blinking The DSL is no traffic detected. Off The system is not receiving power or there is attempting to authenticate. Red On The ZyXEL Device failed to synchronize with no DSL connection...
User Guide
Page 48
... and interface status information. Network Remote Node Use this screen to a remote gateway. WAN Internet Access Setup This screen allows you to edit/add a firewall rule. MAC Filter Use this screen to devices or block the devices from accessing the ZyXEL Device. Port Forwarding Use this screen to configure the ZyXEL Device to block access to configure servers behind the ZyXEL Device. DMZ DMZ Use this screen to the delivery requirements of the firewall rules, and allows you to prioritize wireless traffic according to configure LAN TCP/IP settings, enable Any IP and...
... and interface status information. Network Remote Node Use this screen to a remote gateway. WAN Internet Access Setup This screen allows you to edit/add a firewall rule. MAC Filter Use this screen to devices or block the devices from accessing the ZyXEL Device. Port Forwarding Use this screen to configure the ZyXEL Device to block access to configure servers behind the ZyXEL Device. DMZ DMZ Use this screen to the delivery requirements of the firewall rules, and allows you to prioritize wireless traffic according to configure LAN TCP/IP settings, enable Any IP and...
User Guide
Page 49
... the ZyXEL Device's CAsigned certificates. Trusted Remote Use this screen to enable bandwidth management on the ZyXEL Device. Bandwidth MGMT Summary Use this screen to import self-signed certificates. Certificates My Certificates Use this screen to look at the current status of valid and revoked certificates). Advanced Static Route Use this screen to configure IP static routes. P-662H/HW-D Series User's Guide 49 Online Status Use this screen to view information about users accessing the Internet.
... the ZyXEL Device's CAsigned certificates. Trusted Remote Use this screen to enable bandwidth management on the ZyXEL Device. Bandwidth MGMT Summary Use this screen to import self-signed certificates. Certificates My Certificates Use this screen to look at the current status of valid and revoked certificates). Advanced Static Route Use this screen to configure IP static routes. P-662H/HW-D Series User's Guide 49 Online Status Use this screen to view information about users accessing the Internet.
User Guide
Page 52
... the LAN port IP subnet mask. System Status System Uptime This is activated. Heap memory refers to red when the maximum is in kilobytes). WLAN Status This screen displays the MAC address(es) of computers, which are (wireless devices currently associating with the ZyXEL Device. only) 52 P-662H/HW-D Series User's Guide Channel This is the channel number used by ZyNOS (ZyXEL Network Operating System) and is not used to view a list of IP addresses and MAC addresses...
... the LAN port IP subnet mask. System Status System Uptime This is activated. Heap memory refers to red when the maximum is in kilobytes). WLAN Status This screen displays the MAC address(es) of computers, which are (wireless devices currently associating with the ZyXEL Device. only) 52 P-662H/HW-D Series User's Guide Channel This is the channel number used by ZyNOS (ZyXEL Network Operating System) and is not used to view a list of IP addresses and MAC addresses...
User Guide
Page 105
... the ZyXEL Device. The address 224.0.0.1 is used by IP multicast computers. All hosts must set to the ZyXEL Device and access the Internet. Chapter 6 LAN Setup 224.0.0.0 is not assigned to participate in IGMP. IP multicasting can still use a static IP address in another network, you may need to manually configure the network settings of the computer and the ZyXEL Device are not in the same subnet. Select None to disable IP multicasting on the ZyXEL Device LAN and/or WAN interfaces in the web configurator (LAN...
... the ZyXEL Device. The address 224.0.0.1 is used by IP multicast computers. All hosts must set to the ZyXEL Device and access the Internet. Chapter 6 LAN Setup 224.0.0.0 is not assigned to participate in IGMP. IP multicasting can still use a static IP address in another network, you may need to manually configure the network settings of the computer and the ZyXEL Device are not in the same subnet. Select None to disable IP multicasting on the ZyXEL Device LAN and/or WAN interfaces in the web configurator (LAN...
User Guide
Page 158
... a number of specific systems. The router need only allow a private Local Area Network (LAN) to protect against defined access rules. The ZyXEL Device is to allow application traffic destined for external servers. These computers will not be important to outside world. They make access control decisions based on page 162 for valid application-specific data. Firewalls, of one Ethernet LAN port, which physically separate the network into two areas. • The DSL/ISDN port connects to the Internet...
... a number of specific systems. The router need only allow a private Local Area Network (LAN) to protect against defined access rules. The ZyXEL Device is to allow application traffic destined for external servers. These computers will not be important to outside world. They make access control decisions based on page 162 for valid application-specific data. Firewalls, of one Ethernet LAN port, which physically separate the network into two areas. • The DSL/ISDN port connects to the Internet...
User Guide
Page 165
... that is used to work properly, this , the ZyXEL Device inspects the application-level FTP data. Its IP address and port pairs will open a data connection from the LAN), its connection information is even more restrictive. This can use the web configurator's Custom Ports feature to achieve this connection must be supported on the LAN). 10.5.4 UDP/ICMP Security UDP and ICMP do this point, the remote server will be used to reroute traffic through...
... that is used to work properly, this , the ZyXEL Device inspects the application-level FTP data. Its IP address and port pairs will open a data connection from the LAN), its connection information is even more restrictive. This can use the web configurator's Custom Ports feature to achieve this connection must be supported on the LAN). 10.5.4 UDP/ICMP Security UDP and ICMP do this point, the remote server will be used to reroute traffic through...
User Guide
Page 166
... known security deficiencies. When you upgrade to the latest versions, you get the latest patches and fixes. • If you use passwords that are not easy to block packets for the services at specific interfaces. • Protect against misuse. Good network administration takes into your software regularly. A determined hacker might be careful with Your Firewall • Change the default password via a web page unless the web site uses secure connections.
... known security deficiencies. When you upgrade to the latest versions, you get the latest patches and fixes. • If you use passwords that are not easy to block packets for the services at specific interfaces. • Protect against misuse. Good network administration takes into your software regularly. A determined hacker might be careful with Your Firewall • Change the default password via a web page unless the web site uses secure connections.
User Guide
Page 200
... information on commonly used services. 13.2.3 Configuring Web Site Filters Use this screen to enable content filtering and to the name of services that the ZyXEL Device supports. For example, look at the default configuration labeled "(DNS)". (UDP/TCP:53) means UDP port 53 and TCP port 53. Figure 115 Content Access Control: General: Web Site Filter 200 P-662H/HW-D Series User's Guide The first field indicates the IP protocol type (TCP, UDP, or...
... information on commonly used services. 13.2.3 Configuring Web Site Filters Use this screen to enable content filtering and to the name of services that the ZyXEL Device supports. For example, look at the default configuration labeled "(DNS)". (UDP/TCP:53) means UDP port 53 and TCP port 53. Figure 115 Content Access Control: General: Web Site Filter 200 P-662H/HW-D Series User's Guide The first field indicates the IP protocol type (TCP, UDP, or...
User Guide
Page 230
... problems using IKE key management. The remote IPSec router must also have the same configured local or remote IP address, but the ZyXEL Device drops trailing spaces. IKE provides more than one is configured to Range, enter the beginning (static) IP address, in order for a specific range of the local IP addresses cannot overlap between rules. The ZyXEL Device assigns this additional DNS server to the ZyXEL Device's DHCP clients that services the VPN, type its IP address here. You can have keep alive enabled in a range of local addresses...
... problems using IKE key management. The remote IPSec router must also have the same configured local or remote IP address, but the ZyXEL Device drops trailing spaces. IKE provides more than one is configured to Range, enter the beginning (static) IP address, in order for a specific range of the local IP addresses cannot overlap between rules. The ZyXEL Device assigns this additional DNS server to the ZyXEL Device's DHCP clients that services the VPN, type its IP address here. You can have keep alive enabled in a range of local addresses...
User Guide
Page 241
... 16 characters for MD5 authentication or 20 characters for maximum security. Secure Gateway Address Type the WAN IP address or the URL (up a tunnel without encryption. A Security Association (SA) is configured as 0.0.0.0: The ZyXEL Device uses the current ZyXEL Device WAN IP address (static or dynamic) to set up to 31 characters) of security settings related to set up the VPN tunnel. Encapsulation Key With DES, type a unique key 8 characters long. P-662H/HW-D Series User's Guide 241 If you select ESP...
... 16 characters for MD5 authentication or 20 characters for maximum security. Secure Gateway Address Type the WAN IP address or the URL (up a tunnel without encryption. A Security Association (SA) is configured as 0.0.0.0: The ZyXEL Device uses the current ZyXEL Device WAN IP address (static or dynamic) to set up to 31 characters) of security settings related to set up the VPN tunnel. Encapsulation Key With DES, type a unique key 8 characters long. P-662H/HW-D Series User's Guide 241 If you select ESP...
User Guide
Page 299
... user attempts to probe an unsupported port on your ZyXEL Device, an ICMP response packet is 53 and cannot be changed here. Chapter 21 Remote Management Configuration 21.7 Configuring DNS Use DNS (Domain Name System) to map a domain name to set from which IP address the ZyXEL Device will accept DNS queries and on which interface it can send them your ZyXEL Device's DNS settings. Secured Client IP A secured client is allowed to send DNS queries to the ZyXEL Device. Use this screen. Access Status...
... user attempts to probe an unsupported port on your ZyXEL Device, an ICMP response packet is 53 and cannot be changed here. Chapter 21 Remote Management Configuration 21.7 Configuring DNS Use DNS (Domain Name System) to map a domain name to set from which IP address the ZyXEL Device will accept DNS queries and on which interface it can send them your ZyXEL Device's DNS settings. Secured Client IP A secured client is allowed to send DNS queries to the ZyXEL Device. Use this screen. Access Status...
User Guide
Page 337
... the error persists, you should contact your vendor. 27.2 Problems with the LAN Table 142 Troubleshooting the LAN PROBLEM CORRECTIVE ACTION The LAN LEDs Check your computer's Ethernet Card is working properly. In this case, you may have a hardware problem. do not turn on the same subnet. Make sure your Ethernet cable connections (refer to an appropriate power source. P-662H/HW-D Series User's Guide 337 Make sure that the ZyXEL Device's power adaptor is disabled, make sure that the IP address...
... the error persists, you should contact your vendor. 27.2 Problems with the LAN Table 142 Troubleshooting the LAN PROBLEM CORRECTIVE ACTION The LAN LEDs Check your computer's Ethernet Card is working properly. In this case, you may have a hardware problem. do not turn on the same subnet. Make sure your Ethernet cable connections (refer to an appropriate power source. P-662H/HW-D Series User's Guide 337 Make sure that the ZyXEL Device's power adaptor is disabled, make sure that the IP address...
User Guide
Page 338
... correct Service Type, User Name and Password (be sure to the chapter on page 336. This restores all of the factory defaults including the password. Use the ZyXEL Device's WAN IP address when configuring from the LAN. For details, refer to for instructions on remote management for details. Refer to the chapter on checking your WAN connection. I cannot access the web configurator. Refer to the WAN Setup chapter. The ISP provides the WAN IP address after authenticating you changed the password and have enabled web service access...
... correct Service Type, User Name and Password (be sure to the chapter on page 336. This restores all of the factory defaults including the password. Use the ZyXEL Device's WAN IP address when configuring from the LAN. For details, refer to for instructions on remote management for details. Refer to the chapter on checking your WAN connection. I cannot access the web configurator. Refer to the WAN Setup chapter. The ISP provides the WAN IP address after authenticating you changed the password and have enabled web service access...
User Guide
Page 349
... troubleshooting. Chapter 28 Product Specifications Table 146 Firmware Specifications (continued) Network Address Translation (NAT) Each computer on your network must have a server (mail or web server for example) on your network, you can use this feature to let people access it automatically detects the Internet connection settings (such as a virtual DeMilitarized Zone (DMZ) port. Use NAT to convert your public IP address(es) to multiple private IP addresses for the computers on your network from the ISP and makes the necessary configuration changes. PPTP...
... troubleshooting. Chapter 28 Product Specifications Table 146 Firmware Specifications (continued) Network Address Translation (NAT) Each computer on your network must have a server (mail or web server for example) on your network, you can use this feature to let people access it automatically detects the Internet connection settings (such as a virtual DeMilitarized Zone (DMZ) port. Use NAT to convert your public IP address(es) to multiple private IP addresses for the computers on your network from the ISP and makes the necessary configuration changes. PPTP...
User Guide
Page 350
...) Multiple ESSID Supports External RADIUS server using EAP-MD5, TLS, TTLS OTIST (One Touch Intelligent Security Technology) OTIST allows your wireless network. Configuration Backup & Make a copy of data through a Virtual Private Network (VPN). Dynamic DNS Support With Dynamic DNS (Domain Name System) support, you decide to revert back to an earlier configuration. You must also have the ZyXEL Device assign IP addresses, an IP default Configuration Protocol) gateway and DNS servers to -Point Tunneling Protocol (PPTP) enables secure transfer of the ZyXEL Device's configuration. IP...
...) Multiple ESSID Supports External RADIUS server using EAP-MD5, TLS, TTLS OTIST (One Touch Intelligent Security Technology) OTIST allows your wireless network. Configuration Backup & Make a copy of data through a Virtual Private Network (VPN). Dynamic DNS Support With Dynamic DNS (Domain Name System) support, you decide to revert back to an earlier configuration. You must also have the ZyXEL Device assign IP addresses, an IP default Configuration Protocol) gateway and DNS servers to -Point Tunneling Protocol (PPTP) enables secure transfer of the ZyXEL Device's configuration. IP...
User Guide
Page 356
...-D Series User's Guide If you need Client for Microsoft Networks: 1 Click Add. 2 Select Client and then click Add. 3 Select Microsoft from the list of network clients and then click OK. 5 Restart your network adapter and then click OK. Appendix A Setting up Your Computer's IP Address Figure 216 WIndows 95/98/Me: Network: Configuration Installing Components The Network window Configuration tab displays a list of manufacturers. 4 Select Client for Microsoft Networks. If you need the adapter: 1 In the Network window, click Add. 2 Select Adapter and...
...-D Series User's Guide If you need Client for Microsoft Networks: 1 Click Add. 2 Select Client and then click Add. 3 Select Microsoft from the list of network clients and then click OK. 5 Restart your network adapter and then click OK. Appendix A Setting up Your Computer's IP Address Figure 216 WIndows 95/98/Me: Network: Configuration Installing Components The Network window Configuration tab displays a list of manufacturers. 4 Select Client for Microsoft Networks. If you need the adapter: 1 In the Network window, click Add. 2 Select Adapter and...