User Guide
Page 3
... electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without notice. This publication is a registered trademark of their respective owners. All rights reserved. The contents of ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation. Copyright 3 ZyXEL further reserves the right to change without the prior ..., stored in a retrieval system, translated into any language, or transmitted in this publication may be properties of ZyXEL Communications, Inc. P-334U/P-335U User's Guide Copyright Copyright © 2006 by...
... electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without notice. This publication is a registered trademark of their respective owners. All rights reserved. The contents of ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation. Copyright 3 ZyXEL further reserves the right to change without the prior ..., stored in a retrieval system, translated into any language, or transmitted in this publication may be properties of ZyXEL Communications, Inc. P-334U/P-335U User's Guide Copyright Copyright © 2006 by...
User Guide
Page 15
P-334U/P-335U User's Guide Chapter 13 IPSec VPN ...139 13.1 IPSec VPN Overview 139 13.1.1 IKE SA (IKE Phase 1) Overview 140 13.1.1.1 IP Addresses of the ZyXEL Device and Remote IPSec Router ..140 13.1.2 IKE SA Setup 140 13.1.2.1 IKE SA Proposal 141 13.1.2.2 Diffie-Hellman (DH) Key Exchange 141 13...IKE 148 13.5 Advanced VPN Rule Setup (IKE 153 13.6 IPSec SA Using Manual Keys 159 13.6.1 IPSec SA Proposal Using Manual Keys 160 13.6.2 Authentication and the Security Parameter Index (SPI 160 13.7 VPN Rule Setup (Manual 160 13.8 VPN SA Monitor 164 13.9 VPN Global Setting 165 13.10 ...
P-334U/P-335U User's Guide Chapter 13 IPSec VPN ...139 13.1 IPSec VPN Overview 139 13.1.1 IKE SA (IKE Phase 1) Overview 140 13.1.1.1 IP Addresses of the ZyXEL Device and Remote IPSec Router ..140 13.1.2 IKE SA Setup 140 13.1.2.1 IKE SA Proposal 141 13.1.2.2 Diffie-Hellman (DH) Key Exchange 141 13...IKE 148 13.5 Advanced VPN Rule Setup (IKE 153 13.6 IPSec SA Using Manual Keys 159 13.6.1 IPSec SA Proposal Using Manual Keys 160 13.6.2 Authentication and the Security Parameter Index (SPI 160 13.7 VPN Rule Setup (Manual 160 13.8 VPN SA Monitor 164 13.9 VPN Global Setting 165 13.10 ...
User Guide
Page 21
P-334U/P-335U User's Guide Figure 80 Content Filter: Filter 134 Figure 81 Content Filter: Schedule 135 Figure 82 VPN: Example ...139 Figure 83 VPN: IKE SA and ... 148 Figure 92 Security > VPN > Rule Setup: IKE (Basic 149 Figure 93 Security > VPN > Rule Setup: IKE (Advanced 154 Figure 94 Security > VPN > Rule Setup: Manual 161 Figure 95 Security > VPN > SA Monitor 164 Figure 96 Security > VPN > Global Setting 165 Figure 97 Telecommuters Sharing One VPN Rule Example 166 Figure...
P-334U/P-335U User's Guide Figure 80 Content Filter: Filter 134 Figure 81 Content Filter: Schedule 135 Figure 82 VPN: Example ...139 Figure 83 VPN: IKE SA and ... 148 Figure 92 Security > VPN > Rule Setup: IKE (Basic 149 Figure 93 Security > VPN > Rule Setup: IKE (Advanced 154 Figure 94 Security > VPN > Rule Setup: Manual 161 Figure 95 Security > VPN > SA Monitor 164 Figure 96 Security > VPN > Global Setting 165 Figure 97 Telecommuters Sharing One VPN Rule Example 166 Figure...
User Guide
Page 26
P-334U/P-335U User's Guide Table 37 Advanced LAN ...108 Table 38 DHCP Server General 111 Table 39 DHCP Server Advanced 113 Table 40 Client List ...114 Table ... 148 Table 52 Security > VPN > Rule Setup: IKE (Basic 149 Table 53 Security > VPN > Rule Setup: IKE (Advanced 155 Table 54 Security > VPN > Rule Setup: Manual 161 Table 55 SECURITY > VPN > SA Monitor 165 Table 56 Security > VPN > Global Setting 165 Table 57 Telecommuters Sharing One VPN Rule Example 166 Table...
P-334U/P-335U User's Guide Table 37 Advanced LAN ...108 Table 38 DHCP Server General 111 Table 39 DHCP Server Advanced 113 Table 40 Client List ...114 Table ... 148 Table 52 Security > VPN > Rule Setup: IKE (Basic 149 Table 53 Security > VPN > Rule Setup: IKE (Advanced 155 Table 54 Security > VPN > Rule Setup: Manual 161 Table 55 SECURITY > VPN > SA Monitor 165 Table 56 Security > VPN > Global Setting 165 Table 57 Telecommuters Sharing One VPN Rule Example 166 Table...
User Guide
Page 29
...for support documents. • Quick Start Guide The Quick Start Guide is designed to help you to www.zyxel.com for an online glossary of the P-334U or P-335U 802.11a/g Wireless Router. Note: Use the web configurator or command interpreter interface to guide you ! Not...Control Panel" means first click the Start button, then point your ZyXEL Device. Thank you to The Technical Writing Team, ZyXEL Communications Corp., 6 Innovation Road II, Science-Based Industrial Park, Hsinchu, 300, Taiwan. Preface 29 This manual is designed to guide you through all User Guide-related comments,...
...for support documents. • Quick Start Guide The Quick Start Guide is designed to help you to www.zyxel.com for an online glossary of the P-334U or P-335U 802.11a/g Wireless Router. Note: Use the web configurator or command interpreter interface to guide you ! Not...Control Panel" means first click the Start button, then point your ZyXEL Device. Thank you to The Technical Writing Team, ZyXEL Communications Corp., 6 Innovation Road II, Science-Based Industrial Park, Hsinchu, 300, Taiwan. Preface 29 This manual is designed to guide you through all User Guide-related comments,...
User Guide
Page 35
... Blinking On OTIST None Green Blinking Off Blinking On USB (P-335U only) None Green Off Off On Blinking DESCRIPTION The ZyXEL Device is not receiving power. The ZyXEL Device is receiving power and functioning properly. The ZyXEL Device is not connected. The LAN is sending/receiving data.... OTIST is not activated or WLAN settings are manually configured after OTIST is sending/receiving data. The print server has a successful connection. The print server is sending/receiving data. The ZyXEL Device is sending/receiving data. The ZyXEL Device is in IEEE 802.11a wireless LAN...
... Blinking On OTIST None Green Blinking Off Blinking On USB (P-335U only) None Green Off Off On Blinking DESCRIPTION The ZyXEL Device is not receiving power. The ZyXEL Device is receiving power and functioning properly. The ZyXEL Device is not connected. The LAN is sending/receiving data.... OTIST is not activated or WLAN settings are manually configured after OTIST is sending/receiving data. The print server has a successful connection. The print server is sending/receiving data. The ZyXEL Device is sending/receiving data. The ZyXEL Device is in IEEE 802.11a wireless LAN...
User Guide
Page 44
If DHCP service is the index number of all network clients using the ZyXEL Device's DHCP server. Click the DHCP Table (Details...) hyperlink in this screen. Figure 10 Summary: DHCP Table The following table describes the labels in...host name. 44 Chapter 2 Introducing the Web Configurator Table 5 Summary: DHCP Table LABEL # IP Address Host Name DESCRIPTION This is disabled, you must be manually configured. P-334U/P-335U User's Guide Figure 9 Summary: BW MGMT Monitor 2.4.3 Summary: DHCP Table DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individual clients...
If DHCP service is the index number of all network clients using the ZyXEL Device's DHCP server. Click the DHCP Table (Details...) hyperlink in this screen. Figure 10 Summary: DHCP Table The following table describes the labels in...host name. 44 Chapter 2 Introducing the Web Configurator Table 5 Summary: DHCP Table LABEL # IP Address Host Name DESCRIPTION This is disabled, you must be manually configured. P-334U/P-335U User's Guide Figure 9 Summary: BW MGMT Monitor 2.4.3 Summary: DHCP Table DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individual clients...
User Guide
Page 63
....1.2-192.168.1.32; 192.168.1.65-192.168.1.254. 255.255.255.0 192.168.1.1(ZyXEL Device LAN IP) This screen allows users to clone the MAC address from a computer on your LAN even if your LAN or manually entering a MAC address. Click Next to the "rom" file (ZyNOS configuration file)....must use IP addresses when configuring DDNS and the time server. Figure 29 Wizard Step 3: WAN MAC Address Chapter 3 Connection Wizard 63 P-334U/P-335U User's Guide Table 18 Wizard Step 3: WAN IP and DNS Server Addresses LABEL First DNS Server Second DNS Server Third DNS Server Back Next Exit...
....1.2-192.168.1.32; 192.168.1.65-192.168.1.254. 255.255.255.0 192.168.1.1(ZyXEL Device LAN IP) This screen allows users to clone the MAC address from a computer on your LAN even if your LAN or manually entering a MAC address. Click Next to the "rom" file (ZyNOS configuration file)....must use IP addresses when configuring DDNS and the time server. Figure 29 Wizard Step 3: WAN MAC Address Chapter 3 Connection Wizard 63 P-334U/P-335U User's Guide Table 18 Wizard Step 3: WAN IP and DNS Server Addresses LABEL First DNS Server Second DNS Server Third DNS Server Back Next Exit...
User Guide
Page 77
...31 alphanumeric characters) as the access point (AP) or wireless router (we will refer to configure the settings on the AP and then manually configure the exact same settings on the external accounting server and your AP's SSID and WEP or WPA-PSK security settings to wireless clients that... you to be the same on each wireless client. OTIST (One-Touch Intelligent Security Technology) allows you to transfer your ZyXEL Device. P-334U/P-335U User's Guide Table 27 Wireless: WPA/WPA2 LABEL DESCRIPTION Group Key Update Timer The Group Key Update Timer is the rate at which...
...31 alphanumeric characters) as the access point (AP) or wireless router (we will refer to configure the settings on the AP and then manually configure the exact same settings on the external accounting server and your AP's SSID and WEP or WPA-PSK security settings to wireless clients that... you to be the same on each wireless client. OTIST (One-Touch Intelligent Security Technology) allows you to transfer your ZyXEL Device. P-334U/P-335U User's Guide Table 27 Wireless: WPA/WPA2 LABEL DESCRIPTION Group Key Update Timer The Group Key Update Timer is the rate at which...
User Guide
Page 80
... • If there is complete. Figure 41 Security Key 2 This screen appears while OTIST settings are being transferred. P-334U/P-335U User's Guide 4.4.2 Starting OTIST Note: You must all within range, you see a screen asking you to select one AP ... see this screen each time you see this screen to set up showing you the security settings to the ZyXEL utility main screen. You can start the utility. It closes when the transfer is more than one OTIST-... In the AP, a web configurator screen pops up WEP or WPA-PSK encryption manually for an OTIST-enabled AP. 80 Chapter 4 Wireless LAN
... • If there is complete. Figure 41 Security Key 2 This screen appears while OTIST settings are being transferred. P-334U/P-335U User's Guide 4.4.2 Starting OTIST Note: You must all within range, you see a screen asking you to select one AP ... see this screen each time you see this screen to set up showing you the security settings to the ZyXEL utility main screen. You can start the utility. It closes when the transfer is more than one OTIST-... In the AP, a web configurator screen pops up WEP or WPA-PSK encryption manually for an OTIST-enabled AP. 80 Chapter 4 Wireless LAN
User Guide
Page 81
...) or exclude up to one minute. (If you configure OTIST to 32 devices from accessing the ZyXEL Device (Deny). You need to configure this key changes each time you run OTIST again or enter them manually in the OTIST button (for about two seconds) for up to generate a WPA-PSK key, ... characters, for example, 00:A0:C5:00:00:02. Every Ethernet device has a unique MAC (Media Access Control) address. Figure 45 Start OTIST? P-334U/P-335U User's Guide 2 If an OTIST-enabled wireless client loses its wireless connection for more than ten seconds, it will search for an OTIST-enabled AP...
...) or exclude up to one minute. (If you configure OTIST to 32 devices from accessing the ZyXEL Device (Deny). You need to configure this key changes each time you run OTIST again or enter them manually in the OTIST button (for about two seconds) for up to generate a WPA-PSK key, ... characters, for example, 00:A0:C5:00:00:02. Every Ethernet device has a unique MAC (Media Access Control) address. Figure 45 Start OTIST? P-334U/P-335U User's Guide 2 If an OTIST-enabled wireless client loses its wireless connection for more than ten seconds, it will search for an OTIST-enabled AP...
User Guide
Page 88
P-334U/P-335U User's Guide 5.3.1 Connecting to a Wireless LAN The following diagram. There are three ... show you connect to search again. Make sure the AP or peer computer is no wireless security configured. • Manually connect to a network. • Configure a profile to have the wireless client automatically connect to an access point (AP...you want to the access point, you install the ZyXEL utility and then insert the wireless client, follow the steps below to connect to the Internet. This example illustrates how to manually connect your wireless client to a specific network or...
P-334U/P-335U User's Guide 5.3.1 Connecting to a Wireless LAN The following diagram. There are three ... show you connect to search again. Make sure the AP or peer computer is no wireless security configured. • Manually connect to a network. • Configure a profile to have the wireless client automatically connect to an access point (AP...you want to the access point, you install the ZyXEL utility and then insert the wireless client, follow the steps below to connect to the Internet. This example illustrates how to manually connect your wireless client to a specific network or...
User Guide
Page 91
Figure 56 ZyXEL Utility: Profile Security 5 This screen varies depending on the encryption method you selected in the list. P-334U/P-335U User's Guide you want to connect (In this example, WPA-PSK). Select Infrastructure and either manually enter or select the AP's SSID in the Scan Info table and click Select. 4 Choose the same...
Figure 56 ZyXEL Utility: Profile Security 5 This screen varies depending on the encryption method you selected in the list. P-334U/P-335U User's Guide you want to connect (In this example, WPA-PSK). Select Infrastructure and either manually enter or select the AP's SSID in the Scan Info table and click Select. 4 Choose the same...
User Guide
Page 97
...the MAC address you one of the computer on your LAN or manually entering a MAC address. For the service provider, PPPoE offers an access and authentication method that the ISP assigns. P-334U/P-335U User's Guide Table 31 Ethernet Encapsulation LABEL DESCRIPTION Get automatically Select this... standard (RFC 2516) specifying how a personal computer (PC) interacts with existing access control systems (for a dial-up connection using the ZyXEL Device's MAC address, copying the MAC address from ISP default selection. Select None if you change unless you do not configure a DNS ...
...the MAC address you one of the computer on your LAN or manually entering a MAC address. For the service provider, PPPoE offers an access and authentication method that the ISP assigns. P-334U/P-335U User's Guide Table 31 Ethernet Encapsulation LABEL DESCRIPTION Get automatically Select this... standard (RFC 2516) specifying how a personal computer (PC) interacts with existing access control systems (for a dial-up connection using the ZyXEL Device's MAC address, copying the MAC address from ISP default selection. Select None if you change unless you do not configure a DNS ...
User Guide
Page 100
...you set to 0.0.0.0, User-Defined changes to None after you want to save your LAN or manually entering a MAC address. Factory default Select Factory default to the rom file (ZyNOS configuration file...data from a remote client to a private server, creating a Virtual Private Network (VPN) using the ZyXEL Device's MAC address, copying the MAC address from a computer on your changes back to the right... the address will not change the setting or upload a different ROM file. P-334U/P-335U User's Guide Table 32 PPPoE Encapsulation LABEL DESCRIPTION First DNS Server Second DNS Server Third...
...you set to 0.0.0.0, User-Defined changes to None after you want to save your LAN or manually entering a MAC address. Factory default Select Factory default to the rom file (ZyNOS configuration file...data from a remote client to a private server, creating a Virtual Private Network (VPN) using the ZyXEL Device's MAC address, copying the MAC address from a computer on your changes back to the right... the address will not change the setting or upload a different ROM file. P-334U/P-335U User's Guide Table 32 PPPoE Encapsulation LABEL DESCRIPTION First DNS Server Second DNS Server Third...
User Guide
Page 103
...address will be propagated to other hosts through RIP broadcasts. If set to 0.0.0.0, User-Defined changes to None after you change your LAN or manually entering a MAC address. If you chose User-Defined, but leave the IP address set to Yes, this remote node will be copied to ... configuration file). Once it . Select From ISP if your changes back to the ZyXEL Device. Select User-Defined if you click Apply. IP Address and enter the IP address of a DNS server. P-334U/P-335U User's Guide Table 33 PPTP Encapsulation LABEL Private DNS Servers First DNS Server Second DNS...
...address will be propagated to other hosts through RIP broadcasts. If set to 0.0.0.0, User-Defined changes to None after you change your LAN or manually entering a MAC address. If you chose User-Defined, but leave the IP address set to Yes, this remote node will be copied to ... configuration file). Once it . Select From ISP if your changes back to the ZyXEL Device. Select User-Defined if you click Apply. IP Address and enter the IP address of a DNS server. P-334U/P-335U User's Guide Table 33 PPTP Encapsulation LABEL Private DNS Servers First DNS Server Second DNS...
User Guide
Page 111
... TCP/IP configuration at start-up from a server. When set as a server, the ZyXEL Device provides TCP/IP configuration for the clients. This field specifies the size, or count ...instructs you must have another DHCP server on your LAN, or else the computer must be manually configured. 8.2 DHCP Server General Screen Click Network > DHCP Server. The following four fields. ...68 DHCP Server General The following table describes the labels in the following screen displays. P-334U/P-335U User's Guide CHAPTER 8 DHCP Server 8.1 DHCP DHCP (Dynamic Host Configuration Protocol, RFC 2131 and...
... TCP/IP configuration at start-up from a server. When set as a server, the ZyXEL Device provides TCP/IP configuration for the clients. This field specifies the size, or count ...instructs you must have another DHCP server on your LAN, or else the computer must be manually configured. 8.2 DHCP Server General Screen Click Network > DHCP Server. The following four fields. ...68 DHCP Server General The following table describes the labels in the following screen displays. P-334U/P-335U User's Guide CHAPTER 8 DHCP Server 8.1 DHCP DHCP (Dynamic Host Configuration Protocol, RFC 2131 and...
User Guide
Page 113
... this screen. When you clear the Enable DHCP Server check box, DHCP service is disabled and you must have their DNS server addresses manually configured. If you have the ZyXEL Device act as a DNS proxy. Apply Reset Click Apply to configure DNS servers. Click Network > DHCP Server > Client List. The following ...) of the static IP table entry (row). Table 39 DHCP Server Advanced LABEL DESCRIPTION # This is the DNS server. Chapter 8 DHCP Server 113 P-334U/P-335U User's Guide The following screen displays. If you click Apply. You can also view a read -only).
... this screen. When you clear the Enable DHCP Server check box, DHCP service is disabled and you must have their DNS server addresses manually configured. If you have the ZyXEL Device act as a DNS proxy. Apply Reset Click Apply to configure DNS servers. Click Network > DHCP Server > Client List. The following ...) of the static IP table entry (row). Table 39 DHCP Server Advanced LABEL DESCRIPTION # This is the DNS server. Chapter 8 DHCP Server 113 P-334U/P-335U User's Guide The following screen displays. If you click Apply. You can also view a read -only).
User Guide
Page 120
P-334U/P-335U User's Guide Figure 74 Game List Example version=1 1;name=Battlefield 1942;port=14567,22000,...way you do not need to configure a new IP address each time you have to manually replace the LAN computer's IP address in the same manner. The ZyXEL Device records the IP address of ports on the client side (LAN). In order to...to use the same service on the LAN can use the application. 120 Chapter 9 Network Address Translation (NAT) When the ZyXEL Device's WAN port receives a response with another computer on a different LAN computer, you want a different LAN computer to ...
P-334U/P-335U User's Guide Figure 74 Game List Example version=1 1;name=Battlefield 1942;port=14567,22000,...way you do not need to configure a new IP address each time you have to manually replace the LAN computer's IP address in the same manner. The ZyXEL Device records the IP address of ports on the client side (LAN). In order to...to use the same service on the LAN can use the application. 120 Chapter 9 Network Address Translation (NAT) When the ZyXEL Device's WAN port receives a response with another computer on a different LAN computer, you want a different LAN computer to ...
User Guide
Page 150
... ESP protocol using IKE key management. Remote Policy Remote IP addresses must also have problems using Transport or Tunnel mode, but not both. P-334U/P-335U User's Guide Table 52 Security > VPN > Rule Setup: IKE (Basic) (continued) LABEL DESCRIPTION NAT Traversal Select this case only the remote...that have the same local or remote IP address, but not with AH protocol nor with manual key management. DNS Server (for IPSec VPN) If there is a useful option for an IPSec router behind your ZyXEL Device. When the local IP address is a single address, type it is a subnet...
... ESP protocol using IKE key management. Remote Policy Remote IP addresses must also have problems using Transport or Tunnel mode, but not both. P-334U/P-335U User's Guide Table 52 Security > VPN > Rule Setup: IKE (Basic) (continued) LABEL DESCRIPTION NAT Traversal Select this case only the remote...that have the same local or remote IP address, but not with AH protocol nor with manual key management. DNS Server (for IPSec VPN) If there is a useful option for an IPSec router behind your ZyXEL Device. When the local IP address is a single address, type it is a subnet...