User Guide
Page 6
Device Computer Notebook computer Server DSLAM Firewall Telephone Switch Router 6 P-870HN-5xb User's Guide Document Conventions Icons Used in Figures Figures in this User's Guide may use the following generic icons. The Device icon is not an exact representation of your device.
Device Computer Notebook computer Server DSLAM Firewall Telephone Switch Router 6 P-870HN-5xb User's Guide Document Conventions Icons Used in Figures Figures in this User's Guide may use the following generic icons. The Device icon is not an exact representation of your device.
User Guide
Page 9
... Configurator 51 Technical Reference ...57 Status Screens ...59 WAN Setup ...73 LAN Setup ...103 Wireless LAN ...115 Network Address Translation (NAT 147 MAC Filter ...159 Firewall ...163 Certificate ...169 Static Route ...181 Policy Forwarding ...185 DNS Route ...189 RIP ...191 Quality of Service (QoS) ...193 Dynamic DNS Setup ...217 Remote Management... (UPnP 227 Parental Control ...241 Interface Group ...245 Captive Portal ...251 System Settings ...253 Logs ...259 Tools ...263 Diagnostic ...269 Troubleshooting ...275 Product Specifications ...281 P-870HN-5xb User's Guide 9
... Configurator 51 Technical Reference ...57 Status Screens ...59 WAN Setup ...73 LAN Setup ...103 Wireless LAN ...115 Network Address Translation (NAT 147 MAC Filter ...159 Firewall ...163 Certificate ...169 Static Route ...181 Policy Forwarding ...185 DNS Route ...189 RIP ...191 Quality of Service (QoS) ...193 Dynamic DNS Setup ...217 Remote Management... (UPnP 227 Parental Control ...241 Interface Group ...245 Captive Portal ...251 System Settings ...253 Logs ...259 Tools ...263 Diagnostic ...269 Troubleshooting ...275 Product Specifications ...281 P-870HN-5xb User's Guide 9
User Guide
Page 14
... 10.1 Overview ...163 10.1.1 What You Can Do in this Chapter 163 10.2 What You Need to Know 163 10.3 The Firewall Screen ...164 10.3.1 Creating Incoming Firewall Rules 166 Chapter 11 Certificate ...169 11.1 Overview ...169 11.1.1 What You Can Do in this Chapter 169 11.2 What You Need to Know....1.1 What You Can Do in this Chapter 185 13.2 The Policy Forwarding Screen 185 13.2.1 Policy Forwarding Setup 186 Chapter 14 DNS Route ...189 14 P-870HN-5xb User's Guide
... 10.1 Overview ...163 10.1.1 What You Can Do in this Chapter 163 10.2 What You Need to Know 163 10.3 The Firewall Screen ...164 10.3.1 Creating Incoming Firewall Rules 166 Chapter 11 Certificate ...169 11.1 Overview ...169 11.1.1 What You Can Do in this Chapter 169 11.2 What You Need to Know....1.1 What You Can Do in this Chapter 185 13.2 The Policy Forwarding Screen 185 13.2.1 Policy Forwarding Setup 186 Chapter 14 DNS Route ...189 14 P-870HN-5xb User's Guide
User Guide
Page 55
...incoming IP filtering rule that allows incoming traffic from the WAN. IP Address Use this screen to view QoS packets statistics. P-870HN-5xb User's Guide 55 Trusted CA Use this screen to configure QoS policers to limit the transmission rate of the trusted CAs....routes to be managed by an ACS (Auto Configuration Server). Chapter 3 Introducing the Web Configurator Table 3 Navigation Panel Summary LINK TAB FUNCTION Firewall Incoming This screen shows a summary of the IP filtering rules, and allows you to use a static hostname alias for specific domains to ...
...incoming IP filtering rule that allows incoming traffic from the WAN. IP Address Use this screen to view QoS packets statistics. P-870HN-5xb User's Guide 55 Trusted CA Use this screen to configure QoS policers to limit the transmission rate of the trusted CAs....routes to be managed by an ACS (Auto Configuration Server). Chapter 3 Introducing the Web Configurator Table 3 Navigation Panel Summary LINK TAB FUNCTION Firewall Incoming This screen shows a summary of the IP filtering rules, and allows you to use a static hostname alias for specific domains to ...
User Guide
Page 80
Click Network > WAN > Internet Connection. To use NAT, firewall or IGMP proxy in Kbps) allowed for each interface. A default name ipoa*, pppoa*, atm* or ptm* indicates DSL port. The number after the underscore (_) represents ... interface. Figure 33 Internet Connection The following table describes the labels in VLAN MUX Mode, you the configured WAN services (connections) on transmission rate. 80 P-870HN-5xb User's Guide
Click Network > WAN > Internet Connection. To use NAT, firewall or IGMP proxy in Kbps) allowed for each interface. A default name ipoa*, pppoa*, atm* or ptm* indicates DSL port. The number after the underscore (_) represents ... interface. Figure 33 Internet Connection The following table describes the labels in VLAN MUX Mode, you the configured WAN services (connections) on transmission rate. 80 P-870HN-5xb User's Guide
User Guide
Page 81
.... This displays N/A when the interface used by the connection is no VLAN ID number assigned. Firewall This shows whether the firewall is activated or not for this connection. The firewall is not available when the connection uses the bridging service. Chapter 5 WAN Setup Table 13 Internet... sent through this connection. IPv6 is not available when the connection uses the bridging service. Figure 34 WAN Configuration: WAN Interface P-870HN-5xb User's Guide 81 This displays N/A when there is not available when the connection uses the bridging service. IGMP is no priority...
.... This displays N/A when the interface used by the connection is no VLAN ID number assigned. Firewall This shows whether the firewall is activated or not for this connection. The firewall is not available when the connection uses the bridging service. Chapter 5 WAN Setup Table 13 Internet... sent through this connection. IPv6 is not available when the connection uses the bridging service. Figure 34 WAN Configuration: WAN Interface P-870HN-5xb User's Guide 81 This displays N/A when there is not available when the connection uses the bridging service. IGMP is no priority...
User Guide
Page 85
... prefix Automatically from the PPPoE or PPPoA server. • Static IPv4 Address: Select this connection. Get IPv6 Address Select this remote node. P-870HN-5xb User's Guide 85 This field is 0, which means the Internet session will not timeout. Specify an idle time-out when you want to... and access the Internet. PAP - CHAP is readily available on this connection. Options are: AUTO - Select this check box to activate the firewall on this connection. The subnet mask must be smaller than PAP; however, PAP is more platforms. Use the drop-down list box to select...
... prefix Automatically from the PPPoE or PPPoA server. • Static IPv4 Address: Select this connection. Get IPv6 Address Select this remote node. P-870HN-5xb User's Guide 85 This field is 0, which means the Internet session will not timeout. Specify an idle time-out when you want to... and access the Internet. PAP - CHAP is readily available on this connection. Options are: AUTO - Select this check box to activate the firewall on this connection. The subnet mask must be smaller than PAP; however, PAP is more platforms. Use the drop-down list box to select...
User Guide
Page 90
...90 P-870HN-5xb User's Guide Click this screen. It must be smaller than C class (255.255.255.0). Click this button to the previous screen. This field is available only when you select IP over Ethernet in this button to return to continue. 5.6.1.4 NAT, IGMP Multicast and Firewall Activation... NAT. This allows the Device to assign the LAN DHCP clients private IP addresses. Figure 40 WAN Configuration: NAT, IGMP Multicast and Firewall Activation: IPoE/ IPoA The following table describes the labels in the WAN Service Configuration screen or set the DSL link type to activate...
...90 P-870HN-5xb User's Guide Click this screen. It must be smaller than C class (255.255.255.0). Click this button to the previous screen. This field is available only when you select IP over Ethernet in this button to return to continue. 5.6.1.4 NAT, IGMP Multicast and Firewall Activation... NAT. This allows the Device to assign the LAN DHCP clients private IP addresses. Figure 40 WAN Configuration: NAT, IGMP Multicast and Firewall Activation: IPoE/ IPoA The following table describes the labels in the WAN Service Configuration screen or set the DSL link type to activate...
User Guide
Page 91
.... WAN Interfaces Selected WAN Interface Select a WAN interface through which to forward the traffic. P-870HN-5xb User's Guide 91 It can select from. there is not available when you select Bridging... priority order remove them all and add them back in this connection. This allows the ZyXEL Device to continue. Available Routed These are the WAN interfaces you want to forward IPv6 ...button to get subscription information and maintain a joined member list for the device to have the ZyXEL Device act as an MLD proxy on this screen. You can select multiple WAN interfaces for ...
.... WAN Interfaces Selected WAN Interface Select a WAN interface through which to forward the traffic. P-870HN-5xb User's Guide 91 It can select from. there is not available when you select Bridging... priority order remove them all and add them back in this connection. This allows the ZyXEL Device to continue. Available Routed These are the WAN interfaces you want to forward IPv6 ...button to get subscription information and maintain a joined member list for the device to have the ZyXEL Device act as an MLD proxy on this screen. You can select multiple WAN interfaces for ...
User Guide
Page 94
... Connection Type This is active or not. This shows whether full cone NAT is active or not for this connection. This shows whether Firewall is active or not for this connection. This shows whether NAT is blank for this connection. Click this button to return to save ...your changes. 94 P-870HN-5xb User's Guide This shows whether this service is the encapsulation method used by the ISP, manually configured or not configurable. Chapter 5 WAN Setup...
... Connection Type This is active or not. This shows whether full cone NAT is active or not for this connection. This shows whether Firewall is active or not for this connection. This shows whether NAT is blank for this connection. Click this button to return to save ...your changes. 94 P-870HN-5xb User's Guide This shows whether this service is the encapsulation method used by the ISP, manually configured or not configurable. Chapter 5 WAN Setup...
User Guide
Page 113
...) and IGMP version 2 (IGMPv2). WAN). IP Alias IP alias allows you use . Note: Make sure that , the Device periodically updates this information. P-870HN-5xb User's Guide 113 not everybody and not just 1. IGMP version 2 (RFC 2236) is an improvement over the same Ethernet interface. The Device supports three...in the web configurator (LAN; Multicast delivers IP packets to 239.255.255.255. everybody on the network - If you can also configure firewall rules to the permanent group of hosts on the network). The address 224.0.0.0 is still in IGMP. All hosts must join the 224.0.0.1...
...) and IGMP version 2 (IGMPv2). WAN). IP Alias IP alias allows you use . Note: Make sure that , the Device periodically updates this information. P-870HN-5xb User's Guide 113 not everybody and not just 1. IGMP version 2 (RFC 2236) is an improvement over the same Ethernet interface. The Device supports three...in the web configurator (LAN; Multicast delivers IP packets to 239.255.255.255. everybody on the network - If you can also configure firewall rules to the permanent group of hosts on the network). The address 224.0.0.0 is still in IGMP. All hosts must join the 224.0.0.1...
User Guide
Page 163
Basics Computers share information over an unprotected port. For example, Web traffic by default uses TCP port 80. P-870HN-5xb User's Guide 163 When computers communicate on the Internet, they are also active. If the person configuring or managing the computer is ... listens on the network. Please note that perform specific functions. TCP/IP, in this chapter. An "extension number", called TCP/IP. CHAPTER 10 Firewall 10.1 Overview This chapter shows you view and configure incoming IP filtering rules (Section 10.3 on port 80, other ports are using a common language...
Basics Computers share information over an unprotected port. For example, Web traffic by default uses TCP port 80. P-870HN-5xb User's Guide 163 When computers communicate on the Internet, they are also active. If the person configuring or managing the computer is ... listens on the network. Please note that perform specific functions. TCP/IP, in this chapter. An "extension number", called TCP/IP. CHAPTER 10 Firewall 10.1 Overview This chapter shows you view and configure incoming IP filtering rules (Section 10.3 on port 80, other ports are using a common language...
User Guide
Page 164
... the configured incoming filtering rules. Your customized rules take precedence and override the Device's default rules. 10.3 The Firewall Screen Click Security > Firewall > Incoming to rules set by the administrator. Figure 81 Firewall > Incoming 164 P-870HN-5xb User's Guide If you configure filtering rules without a good understanding of how they apply. Make sure you...
... the configured incoming filtering rules. Your customized rules take precedence and override the Device's default rules. 10.3 The Firewall Screen Click Security > Firewall > Incoming to rules set by the administrator. Figure 81 Firewall > Incoming 164 P-870HN-5xb User's Guide If you configure filtering rules without a good understanding of how they apply. Make sure you...
User Guide
Page 165
...existing rule. Please note that defines the service to which Mask this check box to which this action. Table 50 Firewall > Incoming LABEL DESCRIPTION Active Firewall Select this rule applies. Protocol This displays the IP protocol that a blank source address is applied. Dest. Address /... Name This displays the name of the rule. Modify Click the Edit icon to go to Any. P-870HN-5xb User's Guide 165 Source Port This is the destination port number. Dest. When the firewall is equivalent to the screen where you take this rule applies.
...existing rule. Please note that defines the service to which Mask this check box to which this action. Table 50 Firewall > Incoming LABEL DESCRIPTION Active Firewall Select this rule applies. Protocol This displays the IP protocol that a blank source address is applied. Dest. Address /... Name This displays the name of the rule. Modify Click the Edit icon to go to Any. P-870HN-5xb User's Guide 165 Source Port This is the destination port number. Dest. When the firewall is equivalent to the screen where you take this rule applies.
User Guide
Page 166
...the destination IP address in dotted decimal notation. Protocol Source IP Address Source Subnet Mask Source Port Destination IP Address To add a firewall rule, you need to 16 printable English keyboard characters, including spaces. Enter the source subnet mask. Enter the source IP address in... dotted decimal notation. P-870HN-5xb User's Guide Select NONE to apply the rule to enable the rule. Table 51 Firewall > Incoming: Add LABEL DESCRIPTION Active Select this check box to any protocol. Select the ...
...the destination IP address in dotted decimal notation. Protocol Source IP Address Source Subnet Mask Source Port Destination IP Address To add a firewall rule, you need to 16 printable English keyboard characters, including spaces. Enter the source subnet mask. Enter the source IP address in... dotted decimal notation. P-870HN-5xb User's Guide Select NONE to apply the rule to enable the rule. Table 51 Firewall > Incoming: Add LABEL DESCRIPTION Active Select this check box to any protocol. Select the ...
User Guide
Page 167
Back Click Back to return to save your customized settings and exit this rule applies. Chapter 10 Firewall Table 51 Firewall > Incoming: Add (continued) LABEL DESCRIPTION Destination Subnet Mask Enter the destination subnet mask. Interface Select Select All to apply the rule to all interfaces on the Device or select the specific WAN interface(s) to which this screen. Destination Port Enter the port number of the destination. P-870HN-5xb User's Guide 167 Apply Click Apply to the previous screen.
Back Click Back to return to save your customized settings and exit this rule applies. Chapter 10 Firewall Table 51 Firewall > Incoming: Add (continued) LABEL DESCRIPTION Destination Subnet Mask Enter the destination subnet mask. Interface Select Select All to apply the rule to all interfaces on the Device or select the specific WAN interface(s) to which this screen. Destination Port Enter the port number of the destination. P-870HN-5xb User's Guide 167 Apply Click Apply to the previous screen.
User Guide
Page 228
...> UPnP 228 P-870HN-5xb User's Guide When a UPnP device joins a network, it announces its presence with each other without additional configuration. ZyXEL's UPnP implementation supports Internet Gateway Device (IGD) 1.0. See the following sections for more information. UPnP and ZyXEL ZyXEL has achieved UPnP ...security issues. Network information and configuration may also be obtained and modified by users in establishing their own services and opening firewall ports may communicate freely with a multicast message. See Section 19.1 on NAT. Cautions with UPnP The automated nature ...
...> UPnP 228 P-870HN-5xb User's Guide When a UPnP device joins a network, it announces its presence with each other without additional configuration. ZyXEL's UPnP implementation supports Internet Gateway Device (IGD) 1.0. See the following sections for more information. UPnP and ZyXEL ZyXEL has achieved UPnP ...security issues. Network information and configuration may also be obtained and modified by users in establishing their own services and opening firewall ports may communicate freely with a multicast message. See Section 19.1 on NAT. Cautions with UPnP The automated nature ...
User Guide
Page 279
...3 Make sure the wireless adapter installed on the Device. 7 Make sure you allow the Device to be remotely accessed through the WLAN interface. P-870HN-5xb User's Guide 279 Check your wireless station are using a second DSL connection. ADSL and VDSL connections cannot work at one time. Chapter 27 ... the Internet using the same wireless and wireless security settings. 6 Make sure traffic between the WLAN and the LAN is not blocked by the firewall on your computer is IEEE 802.11 compatible and supports the same wireless standard as the Device. 4 Make sure your computer (with a wireless...
...3 Make sure the wireless adapter installed on the Device. 7 Make sure you allow the Device to be remotely accessed through the WLAN interface. P-870HN-5xb User's Guide 279 Check your wireless station are using a second DSL connection. ADSL and VDSL connections cannot work at one time. Chapter 27 ... the Internet using the same wireless and wireless security settings. 6 Make sure traffic between the WLAN and the LAN is not blocked by the firewall on your computer is IEEE 802.11 compatible and supports the same wireless standard as the Device. 4 Make sure your computer (with a wireless...
User Guide
Page 396
... ESSID 61 Extended Service Set IDentification 120 Extended Service Set, See ESS 340 external antenna 285 external RADIUS 285 F FCC interference statement 391 Finger 157 Firewall Creating/Editing Rules 161 firmware upload 264 upload error 265 firmware version 60 fragmentation threshold 343 frequency range 285 FTP 148, 157 H hidden node 341... 339 IEEE 802.11g 343 IEEE 802.11g wireless LAN 285 IEEE 802.11i 285 IEEE 802.1Q 100 IGMP 101, 104, 113 version 101 P-870HN-5xb User's Guide Index default LAN IP address 51 DHCP 71, 104, 111, 217 DHCP client 71 DHCP client list 71 DHCP relay 282 DHCP...
... ESSID 61 Extended Service Set IDentification 120 Extended Service Set, See ESS 340 external antenna 285 external RADIUS 285 F FCC interference statement 391 Finger 157 Firewall Creating/Editing Rules 161 firmware upload 264 upload error 265 firmware version 60 fragmentation threshold 343 frequency range 285 FTP 148, 157 H hidden node 341... 339 IEEE 802.11g 343 IEEE 802.11g wireless LAN 285 IEEE 802.11i 285 IEEE 802.1Q 100 IGMP 101, 104, 113 version 101 P-870HN-5xb User's Guide Index default LAN IP address 51 DHCP 71, 104, 111, 217 DHCP client 71 DHCP client list 71 DHCP relay 282 DHCP...