User Guide
Page 3
.... Other trademarks mentioned in any liability arising out of the application or use of ZyXEL Communications, Inc. Disclaimer ZyXEL does not assume any form or by ZyXEL Communications Corporation. Published by any language, or transmitted in this publication are used for..., stored in a retrieval system, translated into any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without notice. The contents of others. Copyright 3 P-334U/P-335U User's Guide Copyright Copyright © 2006 by ZyXEL Communications Corporation.
.... Other trademarks mentioned in any liability arising out of the application or use of ZyXEL Communications, Inc. Disclaimer ZyXEL does not assume any form or by ZyXEL Communications Corporation. Published by any language, or transmitted in this publication are used for..., stored in a retrieval system, translated into any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without notice. The contents of others. Copyright 3 P-334U/P-335U User's Guide Copyright Copyright © 2006 by ZyXEL Communications Corporation.
User Guide
Page 15
P-334U/P-335U User's Guide Chapter 13 IPSec VPN ...139 13.1 IPSec VPN Overview 139 13.1.1 IKE SA (IKE Phase 1) Overview 140 13.1.1.1 IP Addresses of the ZyXEL Device and Remote IPSec Router ..140 13.1.2 IKE SA Setup 140 13.1.2.1 IKE SA Proposal 141 13.1.2.2 Diffie-Hellman (DH) Key Exchange 141 13...IKE 148 13.5 Advanced VPN Rule Setup (IKE 153 13.6 IPSec SA Using Manual Keys 159 13.6.1 IPSec SA Proposal Using Manual Keys 160 13.6.2 Authentication and the Security Parameter Index (SPI 160 13.7 VPN Rule Setup (Manual 160 13.8 VPN SA Monitor 164 13.9 VPN Global Setting 165 13.10 ...
P-334U/P-335U User's Guide Chapter 13 IPSec VPN ...139 13.1 IPSec VPN Overview 139 13.1.1 IKE SA (IKE Phase 1) Overview 140 13.1.1.1 IP Addresses of the ZyXEL Device and Remote IPSec Router ..140 13.1.2 IKE SA Setup 140 13.1.2.1 IKE SA Proposal 141 13.1.2.2 Diffie-Hellman (DH) Key Exchange 141 13...IKE 148 13.5 Advanced VPN Rule Setup (IKE 153 13.6 IPSec SA Using Manual Keys 159 13.6.1 IPSec SA Proposal Using Manual Keys 160 13.6.2 Authentication and the Security Parameter Index (SPI 160 13.7 VPN Rule Setup (Manual 160 13.8 VPN SA Monitor 164 13.9 VPN Global Setting 165 13.10 ...
User Guide
Page 21
P-334U/P-335U User's Guide Figure 80 Content Filter: Filter 134 Figure 81 Content Filter: Schedule 135 Figure 82 VPN: Example ...139 Figure 83 VPN: IKE SA and ... 148 Figure 92 Security > VPN > Rule Setup: IKE (Basic 149 Figure 93 Security > VPN > Rule Setup: IKE (Advanced 154 Figure 94 Security > VPN > Rule Setup: Manual 161 Figure 95 Security > VPN > SA Monitor 164 Figure 96 Security > VPN > Global Setting 165 Figure 97 Telecommuters Sharing One VPN Rule Example 166 Figure...
P-334U/P-335U User's Guide Figure 80 Content Filter: Filter 134 Figure 81 Content Filter: Schedule 135 Figure 82 VPN: Example ...139 Figure 83 VPN: IKE SA and ... 148 Figure 92 Security > VPN > Rule Setup: IKE (Basic 149 Figure 93 Security > VPN > Rule Setup: IKE (Advanced 154 Figure 94 Security > VPN > Rule Setup: Manual 161 Figure 95 Security > VPN > SA Monitor 164 Figure 96 Security > VPN > Global Setting 165 Figure 97 Telecommuters Sharing One VPN Rule Example 166 Figure...
User Guide
Page 26
P-334U/P-335U User's Guide Table 37 Advanced LAN ...108 Table 38 DHCP Server General 111 Table 39 DHCP Server Advanced 113 Table 40 Client List ...114 Table ... 148 Table 52 Security > VPN > Rule Setup: IKE (Basic 149 Table 53 Security > VPN > Rule Setup: IKE (Advanced 155 Table 54 Security > VPN > Rule Setup: Manual 161 Table 55 SECURITY > VPN > SA Monitor 165 Table 56 Security > VPN > Global Setting 165 Table 57 Telecommuters Sharing One VPN Rule Example 166 Table...
P-334U/P-335U User's Guide Table 37 Advanced LAN ...108 Table 38 DHCP Server General 111 Table 39 DHCP Server Advanced 113 Table 40 Client List ...114 Table ... 148 Table 52 Security > VPN > Rule Setup: IKE (Basic 149 Table 53 Security > VPN > Rule Setup: IKE (Advanced 155 Table 54 Security > VPN > Rule Setup: Manual 161 Table 55 SECURITY > VPN > SA Monitor 165 Table 56 Security > VPN > Global Setting 165 Table 57 Telecommuters Sharing One VPN Rule Example 166 Table...
User Guide
Page 29
...Guide-related comments, questions or suggestions for you to configure your purchase of the P-334U or P-335U 802.11a/g Wireless Router. This manual is designed to type one predefined choice. • Mouse action sequences are denoted using the web configurator.... P-334U/P-335U User's Guide Preface Congratulations on getting started. • Web Configurator Online Help Embedded web help you through the configuration of your ZyXEL Device using ...
...Guide-related comments, questions or suggestions for you to configure your purchase of the P-334U or P-335U 802.11a/g Wireless Router. This manual is designed to type one predefined choice. • Mouse action sequences are denoted using the web configurator.... P-334U/P-335U User's Guide Preface Congratulations on getting started. • Web Configurator Online Help Embedded web help you through the configuration of your ZyXEL Device using ...
User Guide
Page 35
...the WLAN settings are manually configured after OTIST is not sending/receiving data through the wireless LAN. The ZyXEL Device is sending/receiving data. The LAN is not ready, or has failed. The ZyXEL Device is too low. Chapter 1 Getting to the ZyXEL Device is sending/... successful connection. The print server is not ready or has failed. P-334U/P-335U User's Guide The following table describes the LEDs. The ZyXEL Device is performing testing. The ZyXEL Device is sending/receiving data. The ZyXEL Device has a successful 100Mb Ethernet connection. Table 1 Front Panel LEDs LED...
...the WLAN settings are manually configured after OTIST is not sending/receiving data through the wireless LAN. The ZyXEL Device is sending/receiving data. The LAN is not ready, or has failed. The ZyXEL Device is too low. Chapter 1 Getting to the ZyXEL Device is sending/... successful connection. The print server is not ready or has failed. P-334U/P-335U User's Guide The following table describes the LEDs. The ZyXEL Device is performing testing. The ZyXEL Device is sending/receiving data. The ZyXEL Device has a successful 100Mb Ethernet connection. Table 1 Front Panel LEDs LED...
User Guide
Page 44
...-only information here relates to obtain TCP/IP configuration at start-up from a server. P-334U/P-335U User's Guide Figure 9 Summary: BW MGMT Monitor 2.4.3 Summary: DHCP Table DHCP (Dynamic Host ... 2132) allows individual clients to your LAN, or else the computer must be manually configured. Click the DHCP Table (Details...) hyperlink in this screen. If DHCP service is the... must have another DHCP server on your DHCP status. You can configure the ZyXEL Device as a server, the ZyXEL Device provides the TCP/IP configuration for the clients. This field displays the computer...
...-only information here relates to obtain TCP/IP configuration at start-up from a server. P-334U/P-335U User's Guide Figure 9 Summary: BW MGMT Monitor 2.4.3 Summary: DHCP Table DHCP (Dynamic Host ... 2132) allows individual clients to your LAN, or else the computer must be manually configured. Click the DHCP Table (Details...) hyperlink in this screen. If DHCP service is the... must have another DHCP server on your DHCP status. You can configure the ZyXEL Device as a server, the ZyXEL Device provides the TCP/IP configuration for the clients. This field displays the computer...
User Guide
Page 63
P-334U/P-335U User's Guide Table 18 Wizard Step 3: WAN IP and DNS Server Addresses LABEL First ... server. Click Exit to continue. Once it is advisable to configure the WAN port's MAC address by either using the ZyXEL Device's MAC address, copying the MAC address from a computer on your ISP does not presently require MAC address authentication.....1.65-192.168.1.254. 255.255.255.0 192.168.1.1(ZyXEL Device LAN IP) This screen allows users to clone the MAC address from a computer on your LAN even if your LAN or manually entering a MAC address. It is successfully configured, the ...
P-334U/P-335U User's Guide Table 18 Wizard Step 3: WAN IP and DNS Server Addresses LABEL First ... server. Click Exit to continue. Once it is advisable to configure the WAN port's MAC address by either using the ZyXEL Device's MAC address, copying the MAC address from a computer on your ISP does not presently require MAC address authentication.....1.65-192.168.1.254. 255.255.255.0 192.168.1.1(ZyXEL Device LAN IP) This screen allows users to clone the MAC address from a computer on your LAN even if your LAN or manually entering a MAC address. It is successfully configured, the ...
User Guide
Page 77
...will refer to both as "AP" here) in a WLAN on a periodic basis. The key must be shared between the external accounting server and the ZyXEL Device. P-334U/P-335U User's Guide Table 27 Wireless: WPA/WPA2 LABEL DESCRIPTION Group Key Update Timer The Group Key Update Timer is the WPA/WPA2 equivalent of... management) or RADIUS server (if using WPA/WPA2 key management) sends a new group key out to configure the settings on the AP and then manually configure the exact same settings on the external accounting server and your AP's SSID and WEP or WPA-PSK security settings to be the same...
...will refer to both as "AP" here) in a WLAN on a periodic basis. The key must be shared between the external accounting server and the ZyXEL Device. P-334U/P-335U User's Guide Table 27 Wireless: WPA/WPA2 LABEL DESCRIPTION Group Key Update Timer The Group Key Update Timer is the WPA/WPA2 equivalent of... management) or RADIUS server (if using WPA/WPA2 key management) sends a new group key out to configure the settings on the AP and then manually configure the exact same settings on the external accounting server and your AP's SSID and WEP or WPA-PSK security settings to be the same...
User Guide
Page 80
...and have OTIST enabled. 1 In the AP, a web configurator screen pops up WEP or WPA-PSK encryption manually for an OTIST-enabled AP. 80 Chapter 4 Wireless LAN Click Yes for it can start the utility. Click ...go back to get settings from. 4.4.3 Notes on OTIST 1 If you to select one AP to the ZyXEL utility main screen. It closes when the transfer is more than one OTIST-enabled AP within range, you ...8226; If there is complete. After reviewing the settings, click OK. P-334U/P-335U User's Guide 4.4.2 Starting OTIST Note: You must all within three minutes (at the time of writing).
...and have OTIST enabled. 1 In the AP, a web configurator screen pops up WEP or WPA-PSK encryption manually for an OTIST-enabled AP. 80 Chapter 4 Wireless LAN Click Yes for it can start the utility. Click ...go back to get settings from. 4.4.3 Notes on OTIST 1 If you to select one AP to the ZyXEL utility main screen. It closes when the transfer is more than one OTIST-enabled AP within range, you ...8226; If there is complete. After reviewing the settings, click OK. P-334U/P-335U User's Guide 4.4.2 Starting OTIST Note: You must all within three minutes (at the time of writing).
User Guide
Page 81
Therefore, if a new wireless client joins your ZyXEL Device's MAC filter settings, click Network > Wireless LAN > MAC Filter. Every Ethernet device has a unique MAC (Media Access Control) address. P-334U/P-335U User's Guide 2 If an OTIST-enabled wireless client loses its wireless connection for more than ten seconds, it...on the AP and ALL wireless clients again. 4.5 MAC Filter The MAC filter screen allows you manually have the wireless client search for up to one minute. (If you to configure the ZyXEL Device to give exclusive access to up to 32 devices (Allow) or exclude up to generate...
Therefore, if a new wireless client joins your ZyXEL Device's MAC filter settings, click Network > Wireless LAN > MAC Filter. Every Ethernet device has a unique MAC (Media Access Control) address. P-334U/P-335U User's Guide 2 If an OTIST-enabled wireless client loses its wireless connection for more than ten seconds, it...on the AP and ALL wireless clients again. 4.5 MAC Filter The MAC filter screen allows you manually have the wireless client search for up to one minute. (If you to configure the ZyXEL Device to give exclusive access to up to 32 devices (Allow) or exclude up to generate...
User Guide
Page 88
.../P-335U User's Guide 5.3.1 Connecting to a Wireless LAN The following diagram. This example illustrates how to manually connect your wireless client to an access point (AP) which is configured for WPA-PSK security and connected to join a wireless network using the Site Survey screen. 1 Open the ZyXEL ...on or move the wireless client closer to search again. Make sure the AP or peer computer is no wireless security configured. • Manually connect to a network. • Configure a profile to have the wireless client automatically connect to a specific network or peer computer. In ...
.../P-335U User's Guide 5.3.1 Connecting to a Wireless LAN The following diagram. This example illustrates how to manually connect your wireless client to an access point (AP) which is configured for WPA-PSK security and connected to join a wireless network using the Site Survey screen. 1 Open the ZyXEL ...on or move the wireless client closer to search again. Make sure the AP or peer computer is no wireless security configured. • Manually connect to a network. • Configure a profile to have the wireless client automatically connect to a specific network or peer computer. In ...
User Guide
Page 91
...This screen varies depending on the encryption method you want to connect (In this example, WPA-PSK). Figure 57 ZyXEL Utility: Profile Encryption Chapter 5 Wireless Tutorial 91 P-334U/P-335U User's Guide you selected in the previous screen. You can also configure your profile for a wireless network that ... want to 32 printable ASCII characters). Select Infrastructure and either manually enter or select the AP's SSID in the list. Enter the pre-shared key and leave the encryption type at the default setting. Figure 55 ZyXEL Utility: Add New Profile 3 Give the profile a descriptive ...
...This screen varies depending on the encryption method you want to connect (In this example, WPA-PSK). Figure 57 ZyXEL Utility: Profile Encryption Chapter 5 Wireless Tutorial 91 P-334U/P-335U User's Guide you selected in the previous screen. You can also configure your profile for a wireless network that ... want to 32 printable ASCII characters). Select Infrastructure and either manually enter or select the AP's SSID in the list. Enter the pre-shared key and leave the encryption type at the default setting. Figure 55 ZyXEL Utility: Add New Profile 3 Give the profile a descriptive ...
User Guide
Page 97
...be copied to the rom file (ZyNOS configuration file). Chapter 6 WAN 97 P-334U/P-335U User's Guide Table 31 Ethernet Encapsulation LABEL DESCRIPTION Get automatically Select this option If your changes back to the ZyXEL Device. The field to the right displays the (read-only) DNS server IP address...authentication method that the ISP assigns. DNS Servers First DNS Server Second DNS Server Third DNS Server Select From ISP if your LAN or manually entering a MAC address. Gateway IP Address Enter a Gateway IP Address (if your WAN IP address in the field to configure the ...
...be copied to the rom file (ZyNOS configuration file). Chapter 6 WAN 97 P-334U/P-335U User's Guide Table 31 Ethernet Encapsulation LABEL DESCRIPTION Get automatically Select this option If your changes back to the ZyXEL Device. The field to the right displays the (read-only) DNS server IP address...authentication method that the ISP assigns. DNS Servers First DNS Server Second DNS Server Third DNS Server Select From ISP if your LAN or manually entering a MAC address. Gateway IP Address Enter a Gateway IP Address (if your WAN IP address in the field to configure the ...
User Guide
Page 100
... the second User-Defined changes to a private server, creating a Virtual Private Network (VPN) using the ZyXEL Device's MAC address, copying the MAC address from a remote client to None after you click Apply. ...multi-protocol and virtual private networking over public networks, such as the Internet. P-334U/P-335U User's Guide Table 32 PPPoE Encapsulation LABEL DESCRIPTION First DNS Server Second DNS Server Third ...DNS Server Select From ISP if your LAN or manually entering a MAC address. The field to use the factory assigned default MAC Address. ...
... the second User-Defined changes to a private server, creating a Virtual Private Network (VPN) using the ZyXEL Device's MAC address, copying the MAC address from a remote client to None after you click Apply. ...multi-protocol and virtual private networking over public networks, such as the Internet. P-334U/P-335U User's Guide Table 32 PPPoE Encapsulation LABEL DESCRIPTION First DNS Server Second DNS Server Third ...DNS Server Select From ISP if your LAN or manually entering a MAC address. The field to use the factory assigned default MAC Address. ...
User Guide
Page 103
...RIP broadcast. IP Address and enter the IP address of the computer on your LAN or manually entering a MAC address. It will be copied to configure the WAN port's MAC address by either using the ZyXEL Device's MAC address, copying the MAC address from a computer on the LAN whose MAC you...User-Defined, but leave the IP address set to Yes, this option and enter the MAC address you click Apply. Chapter 6 WAN 103 P-334U/P-335U User's Guide Table 33 PPTP Encapsulation LABEL Private DNS Servers First DNS Server Second DNS Server Third DNS Server WAN MAC Address Factory default Clone...
...RIP broadcast. IP Address and enter the IP address of the computer on your LAN or manually entering a MAC address. It will be copied to configure the WAN port's MAC address by either using the ZyXEL Device's MAC address, copying the MAC address from a computer on the LAN whose MAC you...User-Defined, but leave the IP address set to Yes, this option and enter the MAC address you click Apply. Chapter 6 WAN 103 P-334U/P-335U User's Guide Table 33 PPTP Encapsulation LABEL Private DNS Servers First DNS Server Second DNS Server Third DNS Server WAN MAC Address Factory default Clone...
User Guide
Page 111
... check box selected unless your LAN, or else the computer must be manually configured. You can configure the ZyXEL Device as a DHCP server or disable it to disable the ZyXEL Device acting as a server, the ZyXEL Device provides the TCP/IP configuration for the clients. If DHCP service ...a server. The following table describes the labels in the IP address pool. This field specifies the first of the IP address pool. P-334U/P-335U User's Guide CHAPTER 8 DHCP Server 8.1 DHCP DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individual clients to obtain TCP...
... check box selected unless your LAN, or else the computer must be manually configured. You can configure the ZyXEL Device as a DHCP server or disable it to disable the ZyXEL Device acting as a server, the ZyXEL Device provides the TCP/IP configuration for the clients. If DHCP service ...a server. The following table describes the labels in the IP address pool. This field specifies the first of the IP address pool. P-334U/P-335U User's Guide CHAPTER 8 DHCP Server 8.1 DHCP DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individual clients to obtain TCP...
User Guide
Page 113
... another DHCP sever on the LAN sends a DNS query to the ZyXEL Device, the ZyXEL Device forwards the query to the ZyXEL Device's system DNS server (configured in the field to have their DNS server addresses manually configured. Select User-Defined if you must have the IP address of...act as a DNS proxy. When a computer on your ISP dynamically assigns DNS server information (and Second DNS Server the ZyXEL Device's WAN IP address). P-334U/P-335U User's Guide The following screen displays. Table 39 DHCP Server Advanced LABEL DESCRIPTION # This is the DNS server. DNS Servers...
... another DHCP sever on the LAN sends a DNS query to the ZyXEL Device, the ZyXEL Device forwards the query to the ZyXEL Device's system DNS server (configured in the field to have their DNS server addresses manually configured. Select User-Defined if you must have the IP address of...act as a DNS proxy. When a computer on your ISP dynamically assigns DNS server information (and Second DNS Server the ZyXEL Device's WAN IP address). P-334U/P-335U User's Guide The following screen displays. Table 39 DHCP Server Advanced LABEL DESCRIPTION # This is the DNS server. DNS Servers...
User Guide
Page 120
P-334U/P-335U User's Guide Figure 74 Game List Example version=1 1;name=Battlefield 1942;port=14567,22000,.... In order to the IP address of ports on the client side (LAN). With regular port forwarding you have to manually replace the LAN computer's IP address in from the server on the WAN) to use the application. 120 Chapter 9 ... on a different LAN computer, you set a forwarding port in NAT to dynamically take turns using the service. The ZyXEL Device records the IP address of the computer that computer's connection for Speed: Hot Pursuit 2;port=1230,85118512,27900,28900...
P-334U/P-335U User's Guide Figure 74 Game List Example version=1 1;name=Battlefield 1942;port=14567,22000,.... In order to the IP address of ports on the client side (LAN). With regular port forwarding you have to manually replace the LAN computer's IP address in from the server on the WAN) to use the application. 120 Chapter 9 ... on a different LAN computer, you set a forwarding port in NAT to dynamically take turns using the service. The ZyXEL Device records the IP address of the computer that computer's connection for Speed: Hot Pursuit 2;port=1230,85118512,27900,28900...
User Guide
Page 150
...local IP address is active at any time. Two active SAs can have IP addresses in a range of computers on the LAN behind your ZyXEL Device. P-334U/P-335U User's Guide Table 52 Security > VPN > Rule Setup: IKE (Basic) (continued) LABEL DESCRIPTION NAT Traversal Select this case only the ... local and remote IP addresses, as long as only one is generally recommended. For a specific range of computers on the LAN behind your ZyXEL Device. Manual is a private DNS server that have the same local or remote IP address, but not with AH protocol nor with 0.0.0.0 in a range...
...local IP address is active at any time. Two active SAs can have IP addresses in a range of computers on the LAN behind your ZyXEL Device. P-334U/P-335U User's Guide Table 52 Security > VPN > Rule Setup: IKE (Basic) (continued) LABEL DESCRIPTION NAT Traversal Select this case only the ... local and remote IP addresses, as long as only one is generally recommended. For a specific range of computers on the LAN behind your ZyXEL Device. Manual is a private DNS server that have the same local or remote IP address, but not with AH protocol nor with 0.0.0.0 in a range...