User Guide
Page 3
...concepts and topology. Send all User Guide-related comments, questions or suggestions for improvement to www.zyxel.com for additional support documentation and product certifications. The Technical Writing Team, ZyXEL Communications Corp., 6 Innovation Road II, Science-Based Industrial Park, Hsinchu, 300, Taiwan. ... Thank you! You should have at least a basic knowledge of individual screens and supplementary information. E-mail: techwriters@zyxel.com.tw P-660H-Tx v2 User's Guide 3 About This User's Guide About This User's Guide Intended Audience This manual is intended for people ...
...concepts and topology. Send all User Guide-related comments, questions or suggestions for improvement to www.zyxel.com for additional support documentation and product certifications. The Technical Writing Team, ZyXEL Communications Corp., 6 Innovation Road II, Science-Based Industrial Park, Hsinchu, 300, Taiwan. ... Thank you! You should have at least a basic knowledge of individual screens and supplementary information. E-mail: techwriters@zyxel.com.tw P-660H-Tx v2 User's Guide 3 About This User's Guide About This User's Guide Intended Audience This manual is intended for people ...
User Guide
Page 16
... Telnet ...171 14.4 Configuring Telnet ...171 14.5 Telnet Login ...172 14.6 Configuring FTP ...173 14.7 SNMP ...174 14.7.1 Supported MIBs ...175 14.7.2 SNMP Traps ...175 14.7.3 Configuring SNMP 175 14.8 Configuring DNS ...177 14.9 Configuring ICMP ...177 14.10... I know if I'm using UPnP 181 15.1.2 NAT Traversal ...181 15.1.3 Cautions with UPnP 181 15.2 UPnP and ZyXEL ...182 15.2.1 Configuring UPnP 182 15.3 Installing UPnP in Windows Example 183 15.3.1 Installing UPnP in Windows Me 183...189 Part VI: Maintenance and Troubleshooting 193 Chapter 16 System ...195 16 P-660H-Tx v2 User's Guide
... Telnet ...171 14.4 Configuring Telnet ...171 14.5 Telnet Login ...172 14.6 Configuring FTP ...173 14.7 SNMP ...174 14.7.1 Supported MIBs ...175 14.7.2 SNMP Traps ...175 14.7.3 Configuring SNMP 175 14.8 Configuring DNS ...177 14.9 Configuring ICMP ...177 14.10... I know if I'm using UPnP 181 15.1.2 NAT Traversal ...181 15.1.3 Cautions with UPnP 181 15.2 UPnP and ZyXEL ...182 15.2.1 Configuring UPnP 182 15.3 Installing UPnP in Windows Example 183 15.3.1 Installing UPnP in Windows Me 183...189 Part VI: Maintenance and Troubleshooting 193 Chapter 16 System ...195 16 P-660H-Tx v2 User's Guide
User Guide
Page 27
... Table 97 RFC-2408 ISAKMP Payload Types 225 Table 98 Device Specifications ...233 Table 99 Firmware ...234 Table 100 Firmware Specifications ...235 Table 101 Standards Supported ...236 Table 102 Abbreviations Used in the Example Internal SPTGEN Screens Table 244 Table 103 Menu 1 General Setup ...244 Table 104 Menu 3 ...244 Table 105... Subnets ...278 Table 122 24-bit Network Number Subnet Planning 279 Table 123 16-bit Network Number Subnet Planning 279 Table 124 Firewall Commands ...289 P-660H-Tx v2 User's Guide 27
... Table 97 RFC-2408 ISAKMP Payload Types 225 Table 98 Device Specifications ...233 Table 99 Firmware ...234 Table 100 Firmware Specifications ...235 Table 101 Standards Supported ...236 Table 102 Abbreviations Used in the Example Internal SPTGEN Screens Table 244 Table 103 Menu 1 General Setup ...244 Table 104 Menu 3 ...244 Table 105... Subnets ...278 Table 122 24-bit Network Number Subnet Planning 279 Table 123 16-bit Network Number Subnet Planning 279 Table 124 Firewall Commands ...289 P-660H-Tx v2 User's Guide 27
User Guide
Page 31
...Model names ending in Table 1 on the bottom of your ADSL-enabled telephone line. 1 Only use firmware for a full list of the ZyXEL Device. The ZyXEL Device provides protection from the WAN. The DSL RJ-11 (ADSL over POTS models) or RJ-45 (ADSL over analog (POTS) or digital...secure Internet access over ISDN models) connects to the label on page 32. The firewall supports TCP/UDP inspection and DoS (Denial of Services) detection and prevention, as well as shown in "1", for example P-660H-T1 v2, denote a device that works over the analog telephone system, POTS (Plain Old Telephone ...
...Model names ending in Table 1 on the bottom of your ADSL-enabled telephone line. 1 Only use firmware for a full list of the ZyXEL Device. The ZyXEL Device provides protection from the WAN. The DSL RJ-11 (ADSL over POTS models) or RJ-45 (ADSL over analog (POTS) or digital...secure Internet access over ISDN models) connects to the label on page 32. The firewall supports TCP/UDP inspection and DoS (Denial of Services) detection and prevention, as well as shown in "1", for example P-660H-T1 v2, denote a device that works over the analog telephone system, POTS (Plain Old Telephone ...
User Guide
Page 32
...Table 1 ADSL Standards DATA RATE STANDARD UPSTREAM DOWNSTREAM ADSL 832 kbps 8Mbps ADSL2 3.5Mbps 12Mbps ADSL2+ 3.5Mbps 24Mbps " If your ZyXEL Device does not support Annex M, the maximum ADSL2/2+ upstream data rate is shown as follows. " The standard your ISP, line quality, etc. ... support Annex M. Actual speeds attained also depend on the distance from your ISP supports determines the maximum upstream and downstream speeds attainable. Maximum data rates attainable for each standard are shown in the next table. A typical LAN-to manage the ZyXEL Device. 32 P-660H-Tx v2...
...Table 1 ADSL Standards DATA RATE STANDARD UPSTREAM DOWNSTREAM ADSL 832 kbps 8Mbps ADSL2 3.5Mbps 12Mbps ADSL2+ 3.5Mbps 24Mbps " If your ZyXEL Device does not support Annex M, the maximum ADSL2/2+ upstream data rate is shown as follows. " The standard your ISP, line quality, etc. ... support Annex M. Actual speeds attained also depend on the distance from your ISP supports determines the maximum upstream and downstream speeds attainable. Maximum data rates attainable for each standard are shown in the next table. A typical LAN-to manage the ZyXEL Device. 32 P-660H-Tx v2...
User Guide
Page 33
...8226; Back up an earlier configuration file, you will have to configure many devices of the ZyXEL Device using a (supported) web browser. • Command Line Interface. This is especially convenient if you to manage the ZyXEL Device more secure and to configure the device by service engineers. • FTP for everyday ...the same type. • TR-069. Use a password that's not easy to guess and that allows you need to totally re-configure the ZyXEL Device. Chapter 1 Introducing the ZyXEL Device • Web Configurator. Figure 3 Front Panel P-660H-Tx v2 User's Guide 33
...8226; Back up an earlier configuration file, you will have to configure many devices of the ZyXEL Device using a (supported) web browser. • Command Line Interface. This is especially convenient if you to manage the ZyXEL Device more secure and to configure the device by service engineers. • FTP for everyday ...the same type. • TR-069. Use a password that's not easy to guess and that allows you need to totally re-configure the ZyXEL Device. Chapter 1 Introducing the ZyXEL Device • Web Configurator. Figure 3 Front Panel P-660H-Tx v2 User's Guide 33
User Guide
Page 59
...(H.323) Sending voice signals over the Internet is a standard teleconferencing protocol suite that may not be possible by e-mail. P-660H-Tx v2 User's Guide 59 Here are some default ports for real-time point-to -point and multipoint communication between client computers over the...DESCRIPTION E-Mail Electronic mail consists of messages sent through the ZyXEL Device's WAN port and prioritize the distribution of the bandwidth according to specific groups or individuals. port 143 SMTP - port 25 HTTP - NetMeeting supports VoIP, text chat sessions, a whiteboard, file transfers and ...
...(H.323) Sending voice signals over the Internet is a standard teleconferencing protocol suite that may not be possible by e-mail. P-660H-Tx v2 User's Guide 59 Here are some default ports for real-time point-to -point and multipoint communication between client computers over the...DESCRIPTION E-Mail Electronic mail consists of messages sent through the ZyXEL Device's WAN port and prioritize the distribution of the bandwidth according to specific groups or individuals. port 143 SMTP - port 25 HTTP - NetMeeting supports VoIP, text chat sessions, a whiteboard, file transfers and ...
User Guide
Page 67
... how to configure WAN settings. 5.1 WAN Overview A WAN (Wide Area Network) is only implemented with the IP network protocol. The ZyXEL Device supports the following methods. 5.1.1.1 ENET ENCAP The MAC Encapsulated Routing Link Protocol (ENET ENCAP) is an outside connection to another network or the...field in a manner similar to -Point Protocol over Ethernet) provides access control and billing functionality in the second wizard screen. P-660H-Tx v2 User's Guide 67 For instance, it requires no specific configuration of the LANs' computers will have access. IP packets are routed...
... how to configure WAN settings. 5.1 WAN Overview A WAN (Wide Area Network) is only implemented with the IP network protocol. The ZyXEL Device supports the following methods. 5.1.1.1 ENET ENCAP The MAC Encapsulated Routing Link Protocol (ENET ENCAP) is an outside connection to another network or the...field in a manner similar to -Point Protocol over Ethernet) provides access control and billing functionality in the second wizard screen. P-660H-Tx v2 User's Guide 67 For instance, it requires no specific configuration of the LANs' computers will have access. IP packets are routed...
User Guide
Page 69
... must be static with the same requirements for multiple protocol support in the future, it may be safer to select PPPoA encapsulation instead of RFC-1483, so you do not need to reconfigure either a static or dynamic IP. The ZyXEL Device does two things when you specify a nailed-up ... static IP is a fixed IP that your ISP. A nailed-up connection can be enabled or disabled if you have either a dynamic or static IP. P-660H-Tx v2 User's Guide 69 The second is that idle timeout is disabled. Chapter 5 WAN Setup 5.1.3.2 Scenario 2: One VC, One Protocol (IP) Selecting RFC-1483 ...
... must be static with the same requirements for multiple protocol support in the future, it may be safer to select PPPoA encapsulation instead of RFC-1483, so you do not need to reconfigure either a static or dynamic IP. The ZyXEL Device does two things when you specify a nailed-up ... static IP is a fixed IP that your ISP. A nailed-up connection can be enabled or disabled if you have either a dynamic or static IP. P-660H-Tx v2 User's Guide 69 The second is that idle timeout is disabled. Chapter 5 WAN Setup 5.1.3.2 Scenario 2: One VC, One Protocol (IP) Selecting RFC-1483 ...
User Guide
Page 75
... Rate (SCR) sets the average cell rate (long-term) that system default is the maximum rate at the peak rate. The ZyXEL Device supports both IGMP version 1 (IGMP-v1) and IGMP-v2. Select None to establish membership in this screen. Peak Cell Rate Divide the DSL line rate (bps) by 424 (the size... Bit Rate-non Real Time) or VBR-RT (Variable Bit Rate-Real Time) for voice or data traffic. Type the MBS, which must be transmitted. P-660H-Tx v2 User's Guide 75
... Rate (SCR) sets the average cell rate (long-term) that system default is the maximum rate at the peak rate. The ZyXEL Device supports both IGMP version 1 (IGMP-v1) and IGMP-v2. Select None to establish membership in this screen. Peak Cell Rate Divide the DSL line rate (bps) by 424 (the size... Bit Rate-non Real Time) or VBR-RT (Variable Bit Rate-Real Time) for voice or data traffic. Type the MBS, which must be transmitted. P-660H-Tx v2 User's Guide 75
User Guide
Page 80
.... Type the PCR here. 80 P-660H-Tx v2 User's Guide Select VBR-nRT (Variable Bit Rate-non Real Time) or VBR-RT (Variable Bit Rate-Real Time) for applications that are non-time sensitive, such as shown. The ZyXEL Device supports both IGMP version 1 (IGMP-v1) and IGMP-v2. The screen appears as e-mail. Figure... ATM cell) to display the More Connections Advanced screen and edit more details of your WAN setup. 5.6.2 Configuring More Connections Advanced Setup To edit your ZyXEL Device's advanced WAN settings, click the Advanced Setup button in this screen afresh.
.... Type the PCR here. 80 P-660H-Tx v2 User's Guide Select VBR-nRT (Variable Bit Rate-non Real Time) or VBR-RT (Variable Bit Rate-Real Time) for applications that are non-time sensitive, such as shown. The ZyXEL Device supports both IGMP version 1 (IGMP-v1) and IGMP-v2. The screen appears as e-mail. Figure... ATM cell) to display the More Connections Advanced screen and edit more details of your WAN setup. 5.6.2 Configuring More Connections Advanced Setup To edit your ZyXEL Device's advanced WAN settings, click the Advanced Setup button in this screen afresh.
User Guide
Page 86
... the connection is extremely important because without it, you must have another DHCP server on a LAN share one common network number. 86 P-660H-Tx v2 User's Guide If your ISP gives you must know the IP address of a computer before you enter their IP addresses in the LAN ...the DNS server addresses, usually in the form of an information sheet, when you can access it. The ZyXEL Device supports the IPCP DNS server extensions through IPCP negotiation. You can configure the ZyXEL Device as a server, the ZyXEL Device provides the TCP/IP configuration for the DHCP clients (DHCP Pool).
... the connection is extremely important because without it, you must have another DHCP server on a LAN share one common network number. 86 P-660H-Tx v2 User's Guide If your ISP gives you must know the IP address of a computer before you enter their IP addresses in the LAN ...the DNS server addresses, usually in the form of an information sheet, when you can access it. The ZyXEL Device supports the IPCP DNS server extensions through IPCP negotiation. You can configure the ZyXEL Device as a server, the ZyXEL Device provides the TCP/IP configuration for the DHCP clients (DHCP Pool).
User Guide
Page 88
...on the network - IGMP (Internet Group Multicast Protocol) is a network-layer protocol used to establish membership in RIP-2 format; The ZyXEL Device supports both formats when receiving). After that RIP-2B uses subnet broadcasting while RIP-2M uses multicasting. 6.2.3 Multicast Traditionally, IP packets are ...any RIP packets received. • None - At start up, the ZyXEL Device queries all IP hosts (including gateways). IP multicasting can be enabled/disabled on these interfaces. 88 P-660H-Tx v2 User's Guide The Version field controls the format and the broadcasting method ...
...on the network - IGMP (Internet Group Multicast Protocol) is a network-layer protocol used to establish membership in RIP-2 format; The ZyXEL Device supports both formats when receiving). After that RIP-2B uses subnet broadcasting while RIP-2M uses multicasting. 6.2.3 Multicast Traditionally, IP packets are ...any RIP packets received. • None - At start up, the ZyXEL Device queries all IP hosts (including gateways). IP multicasting can be enabled/disabled on these interfaces. 88 P-660H-Tx v2 User's Guide The Version field controls the format and the broadcasting method ...
User Guide
Page 91
...establish membership in a multicast group. This allows a computer to find a computer on the WAN. For some dial-up services such as shown. P-660H-Tx v2 User's Guide 91 Chapter 6 LAN Setup 6.3.1 Configuring Advanced LAN Setup To edit your firewall is a network-layer protocol used to disable it may ...'s advanced LAN settings, click the Advanced Setup button in this screen. The ZyXEL Device supports both IGMP version 1 (IGMP-v1) and IGMP-v2. When you also need to enable the default WAN to the ZyXEL Device or access the Internet through to the WAN in order to access the Internet ...
...establish membership in a multicast group. This allows a computer to find a computer on the WAN. For some dial-up services such as shown. P-660H-Tx v2 User's Guide 91 Chapter 6 LAN Setup 6.3.1 Configuring Advanced LAN Setup To edit your firewall is a network-layer protocol used to disable it may ...'s advanced LAN settings, click the Advanced Setup button in this screen. The ZyXEL Device supports both IGMP version 1 (IGMP-v1) and IGMP-v2. When you also need to enable the default WAN to the ZyXEL Device or access the Internet through to the WAN in order to access the Internet ...
User Guide
Page 92
... LAN Setup (continued) LABEL DESCRIPTION Apply Click Apply to configure the DNS server information that support the DHCP client. Table 23 DHCP Setup LABEL DESCRIPTION DHCP Setup DHCP If set to Server, your ZyXEL Device can assign IP addresses, an IP default gateway and DNS servers to Windows 95,...the DHCP field above then enter the IP address of the IP address pool. DNS Server 92 P-660H-Tx v2 User's Guide Figure 46 DHCP Setup The following items need to Relay, the ZyXEL Device acts as a surrogate DHCP server and relays DHCP requests and responses between the remote server and...
... LAN Setup (continued) LABEL DESCRIPTION Apply Click Apply to configure the DNS server information that support the DHCP client. Table 23 DHCP Setup LABEL DESCRIPTION DHCP Setup DHCP If set to Server, your ZyXEL Device can assign IP addresses, an IP default gateway and DNS servers to Windows 95,...the DHCP field above then enter the IP address of the IP address pool. DNS Server 92 P-660H-Tx v2 User's Guide Figure 46 DHCP Setup The following items need to Relay, the ZyXEL Device acts as a surrogate DHCP server and relays DHCP requests and responses between the remote server and...
User Guide
Page 94
... Apply Click Apply to control access between the LAN's logical networks (subnets). The ZyXEL Device supports three logical LAN interfaces via its single physical Ethernet interface with the ZyXEL Device itself as an Ethernet adapter has a hardwired address that ensures no other adapter ...entry (row). Host Name This field displays the computer host name. Figure 48 Physical Network & Partitioned Logical Networks 94 P-660H-Tx v2 User's Guide The following figure shows a LAN divided into different logical networks over the same Ethernet interface. Chapter 6 LAN...
... Apply Click Apply to control access between the LAN's logical networks (subnets). The ZyXEL Device supports three logical LAN interfaces via its single physical Ethernet interface with the ZyXEL Device itself as an Ethernet adapter has a hardwired address that ensures no other adapter ...entry (row). Host Name This field displays the computer host name. Figure 48 Physical Network & Partitioned Logical Networks 94 P-660H-Tx v2 User's Guide The following figure shows a LAN divided into different logical networks over the same Ethernet interface. Chapter 6 LAN...
User Guide
Page 95
...non-router machines since they generally do not listen to RIP-1. Chapter 6 LAN Setup To change your ZyXEL Device in dotted decimal notation. IP Subnet Mask Your ZyXEL Device will ignore any RIP packets and will automatically calculate the subnet mask based on the IP address that...RIP multicast address and so will not receive the RIP packets. P-660H-Tx v2 User's Guide 95 Alternatively, click the right mouse button to exchange routing information with other routers. By default, RIP direction is universally supported but RIP-2 carries more information. Table 25 LAN IP Alias ...
...non-router machines since they generally do not listen to RIP-1. Chapter 6 LAN Setup To change your ZyXEL Device in dotted decimal notation. IP Subnet Mask Your ZyXEL Device will ignore any RIP packets and will automatically calculate the subnet mask based on the IP address that...RIP multicast address and so will not receive the RIP packets. P-660H-Tx v2 User's Guide 95 Alternatively, click the right mouse button to exchange routing information with other routers. By default, RIP direction is universally supported but RIP-2 carries more information. Table 25 LAN IP Alias ...
User Guide
Page 99
... different services behind the NAT to be accessible to the outside world. Port numbers do NOT change for instance, PAT, port address translation), ZyXEL's Single User Account feature that previous ZyXEL routers supported (the SUA Only option in today's routers). • Many to Many Overload: In Many-to-Many Overload mode, the... IP address to one global IP address. • Many to One: In Many-to-One mode, the ZyXEL Device maps multiple local IP addresses to -Many No Overload NAT mapping types. P-660H-Tx v2 User's Guide 99 This is equivalent to SUA (for One-to-One and Many-to one global IP...
... different services behind the NAT to be accessible to the outside world. Port numbers do NOT change for instance, PAT, port address translation), ZyXEL's Single User Account feature that previous ZyXEL routers supported (the SUA Only option in today's routers). • Many to Many Overload: In Many-to-Many Overload mode, the... IP address to one global IP address. • Many to One: In Many-to-One mode, the ZyXEL Device maps multiple local IP addresses to -Many No Overload NAT mapping types. P-660H-Tx v2 User's Guide 99 This is equivalent to SUA (for One-to-One and Many-to one global IP...
User Guide
Page 100
... IPÅÆ IGA1 Server 3 IPÅÆ IGA1 7.2 SUA (Single User Account) Versus NAT SUA (Single User Account) is behind a SIP ALG. 100 P-660H-Tx v2 User's Guide Table 27 NAT Mapping Types TYPE IP MAPPING One-to-One ILA1ÅÆ IGA1 Many-to -Many Overload ILA1ÅÆ IGA1...; IGA2 ILA3ÅÆ IGA1 ILA4ÅÆ IGA2 ... Many-to -One (SUA/PAT) ILA1ÅÆ IGA1 ILA2ÅÆ IGA1 ... The ZyXEL Device also supports Full Feature NAT to map multiple global IP addresses to multiple private LAN IP addresses of mapping, Many-to pass through NAT (are NAT...
... IPÅÆ IGA1 Server 3 IPÅÆ IGA1 7.2 SUA (Single User Account) Versus NAT SUA (Single User Account) is behind a SIP ALG. 100 P-660H-Tx v2 User's Guide Table 27 NAT Mapping Types TYPE IP MAPPING One-to-One ILA1ÅÆ IGA1 Many-to -Many Overload ILA1ÅÆ IGA1...; IGA2 ILA3ÅÆ IGA1 ILA4ÅÆ IGA2 ... Many-to -One (SUA/PAT) ILA1ÅÆ IGA1 ILA2ÅÆ IGA1 ... The ZyXEL Device also supports Full Feature NAT to map multiple global IP addresses to multiple private LAN IP addresses of mapping, Many-to pass through NAT (are NAT...
User Guide
Page 102
...broadband ISP accounts do not assign a Default Server IP address, the ZyXEL Device discards all packets received for example both FTP and web service), ...port number identifies a service; In some cases, such as for unknown services or where one server can support more than one service (for ports that are unsure, refer to the server(s) on the LAN) servers,...News Transport Protocol) 119 SNMP (Simple Network Management Protocol) 161 102 P-660H-Tx v2 User's Guide for specified services, NAT supports a default server IP address. You can make visible to specify a range of ports.
...broadband ISP accounts do not assign a Default Server IP address, the ZyXEL Device discards all packets received for example both FTP and web service), ...port number identifies a service; In some cases, such as for unknown services or where one server can support more than one service (for ports that are unsure, refer to the server(s) on the LAN) servers,...News Transport Protocol) 119 SNMP (Simple Network Management Protocol) 161 102 P-660H-Tx v2 User's Guide for specified services, NAT supports a default server IP address. You can make visible to specify a range of ports.