User Guide
Page 21
... 111 FTP Remote Management 188 Figure 112 DNS Remote Management 189 Figure 113 Configuring UPnP 192 Figure 114 Configuring Print Server 200 Figure 115 CD Autorun Screen 201 Figure 116 CD Autorun Screen: Printer Server Driver Setup 202 Figure 117 Network Print Server Setup Wizard: Welcome 203 Figure 118 Network Print Server Setup Wizard: Select A Print Server 203 Figure 119 Network Print Server Setup Wizard: Change Settings 204 Figure 120 Network Print Server Setup Wizard: Select A Printer 205 Figure 121 Network Print Server Setup Wizard: Summary...
... 111 FTP Remote Management 188 Figure 112 DNS Remote Management 189 Figure 113 Configuring UPnP 192 Figure 114 Configuring Print Server 200 Figure 115 CD Autorun Screen 201 Figure 116 CD Autorun Screen: Printer Server Driver Setup 202 Figure 117 Network Print Server Setup Wizard: Welcome 203 Figure 118 Network Print Server Setup Wizard: Select A Print Server 203 Figure 119 Network Print Server Setup Wizard: Change Settings 204 Figure 120 Network Print Server Setup Wizard: Select A Printer 205 Figure 121 Network Print Server Setup Wizard: Summary...
User Guide
Page 29
... contain connection information and instructions on your mouse pointer to Settings and then click Control Panel. • "e.g.," is a shorthand for "for instance", and "i.e.," means "that is designed to guide you through the configuration of your ZyXEL Device. User Guide Feedback Help us help you ! Thank you ! Note: Use the web configurator or command interpreter interface to configure your ZyXEL Device using a right angle bracket ( > ). Preface 29 This manual is designed to help you...
... contain connection information and instructions on your mouse pointer to Settings and then click Control Panel. • "e.g.," is a shorthand for "for instance", and "i.e.," means "that is designed to guide you through the configuration of your ZyXEL Device. User Guide Feedback Help us help you ! Thank you ! Note: Use the web configurator or command interpreter interface to configure your ZyXEL Device using a right angle bracket ( > ). Preface 29 This manual is designed to help you...
User Guide
Page 31
... complete list of features. 1.2 Applications for the ZyXEL Device Here are some examples of the ZyXEL Device. 1.1 ZyXEL Device Overview The P-334U or P-335U is the ideal secure wireless firewall router for all data passing between sites. Note: Only use media bandwidth management to efficiently manage traffic on hardware connections. 1.2.1 Secure Broadband Internet Access via Cable or DSL Modem For Internet access, connect the WAN Ethernet port to your existing Internet access gateway (company network, or your ZyXEL Device's specific model. See the Quick Start Guide for instructions on...
... complete list of features. 1.2 Applications for the ZyXEL Device Here are some examples of the ZyXEL Device. 1.1 ZyXEL Device Overview The P-334U or P-335U is the ideal secure wireless firewall router for all data passing between sites. Note: Only use media bandwidth management to efficiently manage traffic on hardware connections. 1.2.1 Secure Broadband Internet Access via Cable or DSL Modem For Internet access, connect the WAN Ethernet port to your existing Internet access gateway (company network, or your ZyXEL Device's specific model. See the Quick Start Guide for instructions on...
User Guide
Page 35
... 802.11a wireless LAN mode, but is sending/receiving data through the wireless LAN. Chapter 1 Getting to a wireless client. P-334U/P-335U User's Guide The following table describes the LEDs. The WAN connection is sending/receiving data. The ZyXEL Device is in progress OTIST is activated and the wireless security settings are changed. The print server is not sending/receiving data through the IEEE 802.11b or g wireless LAN. The ZyXEL Device is sending...
... 802.11a wireless LAN mode, but is sending/receiving data through the wireless LAN. Chapter 1 Getting to a wireless client. P-334U/P-335U User's Guide The following table describes the LEDs. The WAN connection is sending/receiving data. The ZyXEL Device is in progress OTIST is activated and the wireless security settings are changed. The print server is not sending/receiving data through the IEEE 802.11b or g wireless LAN. The ZyXEL Device is sending...
User Guide
Page 38
... factory-default configuration file. When the PWR LED begins to blink, the defaults have been restored and the ZyXEL Device restarts. 2.4 Navigating the Web Configurator We use the RESET button at the back of the ZyXEL Device to blink and then release it. P-334U/P-335U User's Guide Figure 7 Change Password Screen Note: The management session automatically times out when the time period set in this guide as an example. Simply log back into the ZyXEL Device if this happens to you. 2.3 Resetting...
... factory-default configuration file. When the PWR LED begins to blink, the defaults have been restored and the ZyXEL Device restarts. 2.4 Navigating the Web Configurator We use the RESET button at the back of the ZyXEL Device to blink and then release it. P-334U/P-335U User's Guide Figure 7 Change Password Screen Note: The management session automatically times out when the time period set in this guide as an example. Simply log back into the ZyXEL Device if this happens to you. 2.3 Resetting...
User Guide
Page 42
... to configure DNS servers and other advanced properties. Use this screen to enable the ZyXEL Device's DHCP server. Use this screen to configure LAN IP address and subnet mask. Use this screen to change your LAN interface into subnets. Table 4 Screens Summary LINK Status TAB Network Wireless LAN General OTIST MAC Filter WAN LAN DHCP Server Advanced Internet Connection Advanced IP IP Alias Advanced General Advanced Client List NAT DDNS Security Firewall General Application Advanced General General Services Content Filter Filter Schedule VPN (P-335U only) Management Static...
... to configure DNS servers and other advanced properties. Use this screen to enable the ZyXEL Device's DHCP server. Use this screen to configure LAN IP address and subnet mask. Use this screen to change your LAN interface into subnets. Table 4 Screens Summary LINK Status TAB Network Wireless LAN General OTIST MAC Filter WAN LAN DHCP Server Advanced Internet Connection Advanced IP IP Alias Advanced General Advanced Client List NAT DDNS Security Firewall General Application Advanced General General Services Content Filter Filter Schedule VPN (P-335U only) Management Static...
User Guide
Page 45
... WAN port, it displays the connection type (54M or 11M) when the WLAN is enabled and Down when the WLAN is the number of transmitted packets on this port. This is disabled. Chapter 2 Introducing the Web Configurator 45 Also provided are "system up time" and "poll interval(s)". This field displays Down when the line is configurable. This is disconnected. P-334U/P-335U User's Guide Table 5 Summary: DHCP...
... WAN port, it displays the connection type (54M or 11M) when the WLAN is enabled and Down when the WLAN is the number of transmitted packets on this port. This is disabled. Chapter 2 Introducing the Web Configurator 45 Also provided are "system up time" and "poll interval(s)". This field displays Down when the line is configurable. This is disconnected. P-334U/P-335U User's Guide Table 5 Summary: DHCP...
User Guide
Page 63
... LAN Servers with Fixed IP Addresses Choose an IP address Subnet mask Gateway (or default route) 192.168.1.2-192.168.1.32; 192.168.1.65-192.168.1.254. 255.255.255.0 192.168.1.1(ZyXEL Device LAN IP) This screen allows users to clone the MAC address from a computer on your LAN even if your LAN or manually entering a MAC address. Figure 29 Wizard Step 3: WAN MAC Address Chapter 3 Connection Wizard 63 If you do not configure a system DNS server, you change unless you must use IP addresses...
... LAN Servers with Fixed IP Addresses Choose an IP address Subnet mask Gateway (or default route) 192.168.1.2-192.168.1.32; 192.168.1.65-192.168.1.254. 255.255.255.0 192.168.1.1(ZyXEL Device LAN IP) This screen allows users to clone the MAC address from a computer on your LAN even if your LAN or manually entering a MAC address. Figure 29 Wizard Step 3: WAN MAC Address Chapter 3 Connection Wizard 63 If you do not configure a system DNS server, you change unless you must use IP addresses...
User Guide
Page 90
... configure a new profile. If you cannot access the web site, try changing the encryption type in the Scan Info box. You can also configure different profiles for different networks, for example if you are displayed in the Security Settings screen, check the Troubleshooting section of any other web site in the address bar. The wireless client automatically searches for WPA-PSK security. P-334U/P-335U User's Guide Figure 53 ZyXEL Utility: Link Info 6 Open your Internet...
... configure a new profile. If you cannot access the web site, try changing the encryption type in the Scan Info box. You can also configure different profiles for different networks, for example if you are displayed in the Security Settings screen, check the Troubleshooting section of any other web site in the address bar. The wireless client automatically searches for WPA-PSK security. P-334U/P-335U User's Guide Figure 53 ZyXEL Utility: Link Info 6 Open your Internet...
User Guide
Page 102
... for Internet Access Encapsulation Point-to Confirm Type your identification name for directly connected networks. Retype to -Point Tunneling Protocol (PPTP) is down. My IP Address Type the (static) IP address assigned to a private server, creating a Virtual Private Network (VPN) using TCP/IP-based networks. Remote IP Address Enter the remote IP address (if your ISP did not assign you a fixed IP address. WAN IP Address Assignment Get automatically from a remote client to you one PPTP server connection at any given time. The ZyXEL Device supports...
... for Internet Access Encapsulation Point-to Confirm Type your identification name for directly connected networks. Retype to -Point Tunneling Protocol (PPTP) is down. My IP Address Type the (static) IP address assigned to a private server, creating a Virtual Private Network (VPN) using TCP/IP-based networks. Remote IP Address Enter the remote IP address (if your ISP did not assign you a fixed IP address. WAN IP Address Assignment Get automatically from a remote client to you one PPTP server connection at any given time. The ZyXEL Device supports...
User Guide
Page 128
... modem connecting to the Internet. A determined hacker might be able to find creative ways to misuse the enabled services to open the General screen. This allows it to act as e-mail, FTP and the World Wide Web. P-334U/P-335U User's Guide The ZyXEL Device is authorized to use a specific service. 11.1.4 Guidelines For Enhancing Security With Your Firewall 1 Change the default password via web configurator. 2 Think about access control before you connect to the network in a secured (locked...
... modem connecting to the Internet. A determined hacker might be able to find creative ways to misuse the enabled services to open the General screen. This allows it to act as e-mail, FTP and the World Wide Web. P-334U/P-335U User's Guide The ZyXEL Device is authorized to use a specific service. 11.1.4 Guidelines For Enhancing Security With Your Firewall 1 Change the default password via web configurator. 2 Think about access control before you connect to the network in a secured (locked...
User Guide
Page 150
... manual key management. A DNS server allows clients on the VPN to the ZyXEL Device's DHCP clients that services the VPN, type its IP address here. In order to have the same configured local or remote IP address, but not with AH protocol nor with the Secure Gateway Address field set to 0.0.0.0. NAT traversal allows you cannot configure any other computers and servers on the LAN behind your ZyXEL Device. You can have more protection so it a second time here. DNS Server (for an IPSec router behind your ZyXEL Device...
... manual key management. A DNS server allows clients on the VPN to the ZyXEL Device's DHCP clients that services the VPN, type its IP address here. In order to have the same configured local or remote IP address, but not with AH protocol nor with the Secure Gateway Address field set to 0.0.0.0. NAT traversal allows you cannot configure any other computers and servers on the LAN behind your ZyXEL Device. You can have more protection so it a second time here. DNS Server (for an IPSec router behind your ZyXEL Device...
User Guide
Page 155
... Security > VPN > Rule Setup: IKE (Advanced) LABEL DESCRIPTION Property Active Select this check box to the ZyXEL Device's DHCP clients that services the VPN, type its IP address here. If there is applied before a packet leaves the firewall. See Section 13.1.2.5 on the VPN by their (private) domain names. The ZyXEL Device assigns this IPSec rule's range of local addresses. IPSec Keying Mode Protocol Number Enable Replay Detection DNS Server (for troubleshooting if you to set the NAT router to forward...
... Security > VPN > Rule Setup: IKE (Advanced) LABEL DESCRIPTION Property Active Select this check box to the ZyXEL Device's DHCP clients that services the VPN, type its IP address here. If there is applied before a packet leaves the firewall. See Section 13.1.2.5 on the VPN by their (private) domain names. The ZyXEL Device assigns this IPSec rule's range of local addresses. IPSec Keying Mode Protocol Number Enable Replay Detection DNS Server (for troubleshooting if you to set the NAT router to forward...
User Guide
Page 162
...your ZyXEL Device. When the local IP address is a subnet address, enter a subnet mask on the network behind your ZyXEL Device. Remote Policy Remote IP addresses must be static and correspond to the remote IPSec router's configured remote IP addresses. Two active SAs cannot have more than that services the VPN, type its IP address here. For a specific range of IP addresses, enter the beginning (static) IP address, in a range of local addresses. P-334U/P-335U User's Guide Table 54 Security > VPN > Rule Setup: Manual (continued) LABEL DESCRIPTION DNS Server (for IPSec VPN) If...
...your ZyXEL Device. When the local IP address is a subnet address, enter a subnet mask on the network behind your ZyXEL Device. Remote Policy Remote IP addresses must be static and correspond to the remote IPSec router's configured remote IP addresses. Two active SAs cannot have more than that services the VPN, type its IP address here. For a specific range of IP addresses, enter the beginning (static) IP address, in a range of local addresses. P-334U/P-335U User's Guide Table 54 Security > VPN > Rule Setup: Manual (continued) LABEL DESCRIPTION DNS Server (for IPSec VPN) If...
User Guide
Page 163
... are updated with 0.0.0.0 in this field to have the ZyXEL Device use that you 're making the VPN connection. Set this field as the local IP address, then you configure an active rule with the remote gateway's new WAN IP address). Chapter 13 IPSec VPN 163 This port number must be greater than one of the IPSec router with the Secure Gateway Address field set to 0.0.0.0, the ranges of the most common IP ports are: 21, FTP; 53, DNS; 23...
... are updated with 0.0.0.0 in this field to have the ZyXEL Device use that you 're making the VPN connection. Set this field as the local IP address, then you configure an active rule with the remote gateway's new WAN IP address). Chapter 13 IPSec VPN 163 This port number must be greater than one of the IPSec router with the Secure Gateway Address field set to 0.0.0.0, the ranges of the most common IP ports are: 21, FTP; 53, DNS; 23...
User Guide
Page 223
... a new firmware, upload or save backup configuration files and restart the ZyXEL Device. 22.1 Firmware Upload Screen Find firmware at www.zyxel.com in a file that you must decompress compressed (.zip) files before you can upload them. See the Firmware and Configuration File Maintenance chapter for upgrading firmware using FTP/TFTP commands. Table 80 Maintenance Firmware Upload LABEL File Path Browse... to find it. Note: Do not turn off the ZyXEL Device while firmware upload...
... a new firmware, upload or save backup configuration files and restart the ZyXEL Device. 22.1 Firmware Upload Screen Find firmware at www.zyxel.com in a file that you must decompress compressed (.zip) files before you can upload them. See the Firmware and Configuration File Maintenance chapter for upgrading firmware using FTP/TFTP commands. Table 80 Maintenance Firmware Upload LABEL File Path Browse... to find it. Note: Do not turn off the ZyXEL Device while firmware upload...
User Guide
Page 231
... the error persists, you should contact your vendor. 24.2 Problems with the LAN Table 84 Troubleshooting the LAN PROBLEM The LAN LEDs do not turn on . CORRECTIVE ACTION Check your computer's Ethernet Card is connected to the ZyXEL Device and plugged in to the Quick Start Guide for faulty Ethernet cables. I turn on the ZyXEL Device. If Any IP is disabled, make sure that the IP address and the subnet mask of the LEDs turn on when I cannot access the ZyXEL Device...
... the error persists, you should contact your vendor. 24.2 Problems with the LAN Table 84 Troubleshooting the LAN PROBLEM The LAN LEDs do not turn on . CORRECTIVE ACTION Check your computer's Ethernet Card is connected to the ZyXEL Device and plugged in to the Quick Start Guide for faulty Ethernet cables. I turn on the ZyXEL Device. If Any IP is disabled, make sure that the IP address and the subnet mask of the LEDs turn on when I cannot access the ZyXEL Device...
User Guide
Page 233
... you changed the password and have enabled web service access. Your computer's and the ZyXEL Device's IP addresses must match it is not a Telnet console session running. Make sure that the Enable Parental Control check box is selected in the Parental Control screen to restrict access to web pages relevant to a restricted web page is "admin". Refer to the instructions on checking your WAN connection. See the following section to upload the default configuration file. and username using commands. Refer...
... you changed the password and have enabled web service access. Your computer's and the ZyXEL Device's IP addresses must match it is not a Telnet console session running. Make sure that the Enable Parental Control check box is selected in the Parental Control screen to restrict access to web pages relevant to a restricted web page is "admin". Refer to the instructions on checking your WAN connection. See the following section to upload the default configuration file. and username using commands. Refer...
User Guide
Page 246
... traffic to an external syslog server. You can use this service with a dynamic IP address. You must have a server (mail or web server for example) on your network, you can configure firewall on the ZyXEL Device for secure Internet access. IP multicast is enabled. 246 Appendix A Product Specifications Point-to web sites with the ZyXEL Device itself as the gateway for each subnet. The ZyXEL Device blocks access to -Point Tunneling Protocol (PPTP) enables secure transfer of computers. You can also set the time manually. With Dynamic DNS (Domain Name System) support...
... traffic to an external syslog server. You can use this service with a dynamic IP address. You must have a server (mail or web server for example) on your network, you can configure firewall on the ZyXEL Device for secure Internet access. IP multicast is enabled. 246 Appendix A Product Specifications Point-to web sites with the ZyXEL Device itself as the gateway for each subnet. The ZyXEL Device blocks access to -Point Tunneling Protocol (PPTP) enables secure transfer of computers. You can also set the time manually. With Dynamic DNS (Domain Name System) support...
Quick Start Guide
Page 5
... WAN ports act as the P-335 Plus. for details) or make sure your computer is the default) and click Login. Note: The connection wizard is available only when the P-335 Plus is in router mode. To configure the P-335 Plus's operating mode, push the PR switch on the rear panel to receive an IP address dynamically (see Troubleshooting for the first time. 4 Change the password in print server mode does not support DHCP server. To access the web configurator, make...
... WAN ports act as the P-335 Plus. for details) or make sure your computer is the default) and click Login. Note: The connection wizard is available only when the P-335 Plus is in router mode. To configure the P-335 Plus's operating mode, push the PR switch on the rear panel to receive an IP address dynamically (see Troubleshooting for the first time. 4 Change the password in print server mode does not support DHCP server. To access the web configurator, make...