Support Guide
Page 2
...169; 2010 ZyXEL Communications Corporation. What is DDNS wildcard? How can I do it possible to use PPPoE 13 9. What's the difference between them 13 7. What is Traffic Shaping 14 13. What's Multilingual Embedded Web Configurator 6 2. How do we perform traffic shaping in the P-660HN-T1A 15 14.... 5. How to access a server running behind SUA from the outside Internet? What is the micro filter or splitter used for Web Configurator 12 3. When should I do I manage P-660HN-T1A 12 2. How do I know I use SUA 7 9. What is SUA? How do the parameters (PCR, SCR, MBS)...
...169; 2010 ZyXEL Communications Corporation. What is DDNS wildcard? How can I do it possible to use PPPoE 13 9. What's the difference between them 13 7. What is Traffic Shaping 14 13. What's Multilingual Embedded Web Configurator 6 2. How do we perform traffic shaping in the P-660HN-T1A 15 14.... 5. How to access a server running behind SUA from the outside Internet? What is the micro filter or splitter used for Web Configurator 12 3. When should I do I manage P-660HN-T1A 12 2. How do I know I use SUA 7 9. What is SUA? How do the parameters (PCR, SCR, MBS)...
Support Guide
Page 3
...18 8. How do I know the details of Wireless LAN 28 3 All contents copyright © 2010 ZyXEL Communications Corporation. What are the default ACL firewall rules in P-660HN-T1A? . 23 Configuration 23 1. What is Brute-force attack 23 12. What is LAND attack 22 11 What is SYN Flood... What is IP Spoofing attack 23 13. What is Ping of firewalls 20 4. What is a Wireless LAN 28 2. What makes P-660HN-T1A secure 20 3. How do I configure the firewall 23 2. How do I view the firewall log 26 4. What is a network firewall 20 2. What are the basic ...
...18 8. How do I know the details of Wireless LAN 28 3 All contents copyright © 2010 ZyXEL Communications Corporation. What are the default ACL firewall rules in P-660HN-T1A? . 23 Configuration 23 1. What is Brute-force attack 23 12. What is LAND attack 22 11 What is SYN Flood... What is IP Spoofing attack 23 13. What is Ping of firewalls 20 4. What is a Wireless LAN 28 2. What makes P-660HN-T1A secure 20 3. How do I configure the firewall 23 2. How do I view the firewall log 26 4. What is a network firewall 20 2. What are the basic ...
Support Guide
Page 5
... Application Notes 86 1. The WPS/WLAN Button 106 Support Tool 107 1. Firmware/Configurations Uploading and Downloading using TFTP ...112 Using TFTP client software 112 ...660HN-T1A 81 16. Using syslog 69 10. P-660HN Series Support Notes 4. Network Management Using SNMP 67 9. Using IP Alias 70 11. MAC Filter 92 3. Using IP Multicast 78 14. Configure a Wireless Client to configure...(Wired Equivalent Privacy 94 4. Using Zero-Configuration 79 15. Using the Dynamic DNS (DDNS 64 7. Using Call Scheduling 75 13. Configure 802.1x and WPA 102 6. Using ...
... Application Notes 86 1. The WPS/WLAN Button 106 Support Tool 107 1. Firmware/Configurations Uploading and Downloading using TFTP ...112 Using TFTP client software 112 ...660HN-T1A 81 16. Using syslog 69 10. P-660HN Series Support Notes 4. Network Management Using SNMP 67 9. Using IP Alias 70 11. MAC Filter 92 3. Using IP Multicast 78 14. Configure a Wireless Client to configure...(Wired Equivalent Privacy 94 4. Using Zero-Configuration 79 15. Using the Dynamic DNS (DDNS 64 7. Using Call Scheduling 75 13. Configure 802.1x and WPA 102 6. Using ...
Support Guide
Page 6
... TFTP client program to put firmware in file 'ras' in your P-660HN-T1A. What's Multilingual Embedded Web Configurator? The Command Line Interface is for uploading firmware via TFTP is finished, the P-660HN-T1A will prepare special Upload Software for you to transfer the firmware to upload...from the Prestige. 6 All contents copyright © 2010 ZyXEL Communications Corporation. You CAN NOT upload the firmware and configuration file via LAN. In this moment. The P-660HN-T1A allows you . How do I access the P-660HN-T1A Command Line Interface (CLI)? Use the TELNET client program...
... TFTP client program to put firmware in file 'ras' in your P-660HN-T1A. What's Multilingual Embedded Web Configurator? The Command Line Interface is for uploading firmware via TFTP is finished, the P-660HN-T1A will prepare special Upload Software for you to transfer the firmware to upload...from the Prestige. 6 All contents copyright © 2010 ZyXEL Communications Corporation. You CAN NOT upload the firmware and configuration file via LAN. In this moment. The P-660HN-T1A allows you . How do I access the P-660HN-T1A Command Line Interface (CLI)? Use the TELNET client program...
Support Guide
Page 7
... then recomputes the appropriate header checksums and forwards the packet to your P-660HN-T1A on the rear panel of the 7 All contents copyright © 2010 ZyXEL Communications Corporation. Use the TELNET client program in the P-660HN-T1A. 6. b. a. Press the RESET button for the cost of a local...account. a. Make sure the POWER led is on (not blinking) b. How to blink, the default configuration has been restored and the P-660HN-T1A restarts. 8. When reply packets from the P-660HN-T1A. Enter CI command 'sys stdio 0' disable Stdio idle timeout c. How do if I use the Reset...
... then recomputes the appropriate header checksums and forwards the packet to your P-660HN-T1A on the rear panel of the 7 All contents copyright © 2010 ZyXEL Communications Corporation. Use the TELNET client program in the P-660HN-T1A. 6. b. a. Press the RESET button for the cost of a local...account. a. Make sure the POWER led is on (not blinking) b. How to blink, the default configuration has been restored and the P-660HN-T1A restarts. 8. When reply packets from the P-660HN-T1A. Enter CI command 'sys stdio 0' disable Stdio idle timeout c. How do if I use the Reset...
Support Guide
Page 8
..., multiple severs using the same port (e.g., FTP servers using it. 9. The P-660HN-T1A supports 8 sets since the servers share only one set with multiple global IP addresses 8 All contents copyright © 2010 ZyXEL Communications Corporation. By fatory default, the NAT is select as SUA in the opposite... server must be mapped to Many No Overload and Server. The P-660HN-T1A supports NAT sets on the LAN accessible from the outside with 2 rules: Many-to the outside access. With SUA, 'visible' servers had to be configured. (You can make a local server accessible to -One and Server...
..., multiple severs using the same port (e.g., FTP servers using it. 9. The P-660HN-T1A supports 8 sets since the servers share only one set with multiple global IP addresses 8 All contents copyright © 2010 ZyXEL Communications Corporation. By fatory default, the NAT is select as SUA in the opposite... server must be mapped to Many No Overload and Server. The P-660HN-T1A supports NAT sets on the LAN accessible from the outside with 2 rules: Many-to the outside access. With SUA, 'visible' servers had to be configured. (You can make a local server accessible to -One and Server...
Support Guide
Page 10
The filters have been separated into two groups. The P-660HN-T1A's filter sets provide a means to see. Server Server 1 IPIGA1 Server 2 IPIGA1 13. How many network users can configure the filter rule in CLI to protect against IP spoofing attacks? Generic filters ... Source IP Addr =a.b.c.d Source IP Mask =w.x.y.z Action Matched =Drop 10 All contents copyright © 2010 ZyXEL Communications Corporation. P-660HN Series Support Notes ILA1IGA1 Many-to view the current active NAT sessions. 14. You can I protect against IP spoofing attacks. What...
The filters have been separated into two groups. The P-660HN-T1A's filter sets provide a means to see. Server Server 1 IPIGA1 Server 2 IPIGA1 13. How many network users can configure the filter rule in CLI to protect against IP spoofing attacks? Generic filters ... Source IP Addr =a.b.c.d Source IP Mask =w.x.y.z Action Matched =Drop 10 All contents copyright © 2010 ZyXEL Communications Corporation. P-660HN Series Support Notes ILA1IGA1 Many-to view the current active NAT sessions. 14. You can I protect against IP spoofing attacks. What...
Support Guide
Page 12
...contents copyright © 2010 ZyXEL Communications Corporation. There are : Common User Account: user Administrator Account: 1234. By factory default the password for the two accounts are two different accounts for P-660HN-T1A Web Configurator: Common User Account and ...Administrator Account. What's the difference between 'Common User Account' and 'Administrator Account'? How do I manage P-660HN-T1A? Multilingual Embedded Web GUI for Local and...
...contents copyright © 2010 ZyXEL Communications Corporation. There are : Common User Account: user Administrator Account: 1234. By factory default the password for the two accounts are two different accounts for P-660HN-T1A Web Configurator: Common User Account and ...Administrator Account. What's the difference between 'Common User Account' and 'Administrator Account'? How do I manage P-660HN-T1A? Multilingual Embedded Web GUI for Local and...
Support Guide
Page 13
...a static hostname, allowing your voice transmissions. P-660HN Series Support Notes 5. If you need to provide services using their existing network configuration over the broadband connections. If you are simply...voice band uses the lower frequency ranging from various 13 All contents copyright © 2010 ZyXEL Communications Corporation. What is DDNS? PPPoE requires a user account to login to 4KHz, while...a dynamic IP address to the ISP you probably are probably using PPPoE? The P-660HN-T1A supports Bridge and Router mode, what's the difference between them? In this case, ...
...a static hostname, allowing your voice transmissions. P-660HN Series Support Notes 5. If you need to provide services using their existing network configuration over the broadband connections. If you are simply...voice band uses the lower frequency ranging from various 13 All contents copyright © 2010 ZyXEL Communications Corporation. What is DDNS? PPPoE requires a user account to login to 4KHz, while...a dynamic IP address to the ISP you probably are probably using PPPoE? The P-660HN-T1A supports Bridge and Router mode, what's the difference between them? In this case, ...
Support Guide
Page 14
...usable. 10. Yes, the P-660HN-T1A supports DDNS wildcard that the server can use things such as www.yourhost.dyndns.org and still reach your internal server to -DNS table in Menu 1.1 Configure Dynamic DNS. 12. When using wildcard, you apply a DNS name (e.g., www.zyxel.com.tw) for your web ...server (i.e., www.zyxel.com.tw) is DDNS wildcard? If another VCs are serveral VCs in the P-660HN-T1A but only one time, the P-660HN-T1A allocates all the Bandwidth to ...
...usable. 10. Yes, the P-660HN-T1A supports DDNS wildcard that the server can use things such as www.yourhost.dyndns.org and still reach your internal server to -DNS table in Menu 1.1 Configure Dynamic DNS. 12. When using wildcard, you apply a DNS name (e.g., www.zyxel.com.tw) for your web ...server (i.e., www.zyxel.com.tw) is DDNS wildcard? If another VCs are serveral VCs in the P-660HN-T1A but only one time, the P-660HN-T1A allocates all the Bandwidth to ...
Support Guide
Page 15
...UBR): An ATM bandwidth-allocation service that can tolerate delays, such as e-mail. 15 All contents copyright © 2010 ZyXEL Communications Corporation. The P-660HN-T1A is set of actions taken by PCR. If you do the parameters (PCR, SCR, MBS) mean ? Traffic shaping ...parameters (PCR, SCR, MBS) can be discarded if the virtual connection experiences congestion. What do not need traffic shaping, please set in Web Configurator, ...
...UBR): An ATM bandwidth-allocation service that can tolerate delays, such as e-mail. 15 All contents copyright © 2010 ZyXEL Communications Corporation. The P-660HN-T1A is set of actions taken by PCR. If you do the parameters (PCR, SCR, MBS) mean ? Traffic shaping ...parameters (PCR, SCR, MBS) can be discarded if the virtual connection experiences congestion. What do not need traffic shaping, please set in Web Configurator, ...
Support Guide
Page 16
You can set a schedule for which the P-660HN-T1A will not perform content filtering. It contains two subclasses: Variable bit rate nonreal time (VBR-nRT): Variable bit rate real time (VBR-RT): 16. What ... setup, Security -> Filter. 16 All contents copyright © 2010 ZyXEL Communications Corporation. You can configure the details about it in the URL. You can select VBR for bursty traffic and bandwidth sharing with other applications. P-660HN Series Support Notes Variable bit rate(VBR): An ATM bandwidth-allocation service that you to create and...
You can set a schedule for which the P-660HN-T1A will not perform content filtering. It contains two subclasses: Variable bit rate nonreal time (VBR-nRT): Variable bit rate real time (VBR-RT): 16. What ... setup, Security -> Filter. 16 All contents copyright © 2010 ZyXEL Communications Corporation. You can configure the details about it in the URL. You can select VBR for bursty traffic and bandwidth sharing with other applications. P-660HN Series Support Notes Variable bit rate(VBR): An ATM bandwidth-allocation service that you to create and...
Support Guide
Page 18
...; You can use the following CI commands to identify the protocol being carried on the P-660HN-T1A's ADSL connector are providing three kinds of services (VoIP, Video and Internet) over a single... does not need the extra headers. The middle two pins for carrying each protocol but it in Web Configurator, Advanced Setup, Maintenance -> Diagnostic -> DSL Line -> DSL Status: 8. The VC-based multiplexing needs ...Though the LLC-based multiplexing can also do I know the details of the ADSL connector? P-660HN Series Support Notes 6. CI> wan adsl perfdata CI> wan adsl status CI> wan adsl ...
...; You can use the following CI commands to identify the protocol being carried on the P-660HN-T1A's ADSL connector are providing three kinds of services (VoIP, Video and Internet) over a single... does not need the extra headers. The middle two pins for carrying each protocol but it in Web Configurator, Advanced Setup, Maintenance -> Diagnostic -> DSL Line -> DSL Status: 8. The VC-based multiplexing needs ...Though the LLC-based multiplexing can also do I know the details of the ADSL connector? P-660HN Series Support Notes 6. CI> wan adsl perfdata CI> wan adsl status CI> wan adsl ...
Support Guide
Page 20
... addresses to one or multiple public addresses. What makes P-660HN-T1A secure? It also uses stateful packet inspection to determine if an inbound connection is pre-configured to the Internet. 3. The P-660HN-T1A supports Network Address Translation (NAT), which perform logging and ... destination addresses and ports of this device is a network firewall? What is performance. 20 All contents copyright © 2010 ZyXEL Communications Corporation. Packet Filtering Firewall 2. Application-level Firewall 3. This adds a level of a proxy. Stateful Inspection Firewall Packet ...
... addresses to one or multiple public addresses. What makes P-660HN-T1A secure? It also uses stateful packet inspection to determine if an inbound connection is pre-configured to the Internet. 3. The P-660HN-T1A supports Network Address Translation (NAT), which perform logging and ... destination addresses and ports of this device is a network firewall? What is performance. 20 All contents copyright © 2010 ZyXEL Communications Corporation. Packet Filtering Firewall 2. Application-level Firewall 3. This adds a level of a proxy. Stateful Inspection Firewall Packet ...
Support Guide
Page 23
...Don't forget to type in the IP specification known as the 'victim' network. P-660HN Series Support Notes 11 What is IP Spoofing attack? If there are several ways to configure the firewall for P-660HN-T1A. There are numerous hosts, this will create a large amount of ICMP echo request ...DoS attacks also use the Web Configurator to protect others from within the trusted network. IP Spoofing may be allowed through the router or firewall. 13. By factory default, if you connect your firewall. 23 All contents copyright © 2010 ZyXEL Communications Corporation. This flood of...
...Don't forget to type in the IP specification known as the 'victim' network. P-660HN Series Support Notes 11 What is IP Spoofing attack? If there are several ways to configure the firewall for P-660HN-T1A. There are numerous hosts, this will create a large amount of ICMP echo request ...DoS attacks also use the Web Configurator to protect others from within the trusted network. IP Spoofing may be allowed through the router or firewall. 13. By factory default, if you connect your firewall. 23 All contents copyright © 2010 ZyXEL Communications Corporation. This flood of...
Support Guide
Page 24
Why can access to your P-660HN-T1A or access.the Web Configurator of 3. P-660HN Series Support Notes 1. Limit who can 't I configure my P-660HN-T1A using Web Configurator/Telnet over WAN? To enable Telnet from WAN, you do not care which host is required when setting ... 2010 ZyXEL Communications Corporation. Change the default Administrator password since it is trying to telnet your P-660HN-T1A: The default value in this field is 0.0.0.0, which means you must turn the firewall off, or create a firewall rule to allow special access to your P-660HN-T1A‟s Web Configurator or ...
Why can access to your P-660HN-T1A or access.the Web Configurator of 3. P-660HN Series Support Notes 1. Limit who can 't I configure my P-660HN-T1A using Web Configurator/Telnet over WAN? To enable Telnet from WAN, you do not care which host is required when setting ... 2010 ZyXEL Communications Corporation. Change the default Administrator password since it is trying to telnet your P-660HN-T1A: The default value in this field is 0.0.0.0, which means you must turn the firewall off, or create a firewall rule to allow special access to your P-660HN-T1A‟s Web Configurator or ...
Support Guide
Page 25
... ACL rule. To enable FTP from WAN. Source IP= FTP host Destination IP= P-660HN-T1A's WAN IP Service= FTP TCP/21, TCP/20 Action=Forward 25 All contents copyright © 2010 ZyXEL Communications Corporation. You can 't I upload the firmware and configuration file using FTP over WAN? (1) When the firewall is applied to allow FTP...
... ACL rule. To enable FTP from WAN. Source IP= FTP host Destination IP= P-660HN-T1A's WAN IP Service= FTP TCP/21, TCP/20 Action=Forward 25 All contents copyright © 2010 ZyXEL Communications Corporation. You can 't I upload the firmware and configuration file using FTP over WAN? (1) When the firewall is applied to allow FTP...
Support Guide
Page 26
...W AN is enabled but you can change it in Web Configurator. 2. P-660HN Series Support Notes (2) You have disabled FTP service in Web Configurator, Advanced setup, Advanced -> Remote MGNT. (3) FTP service is...the following methods, 26 All contents copyright © 2010 ZyXEL Communications Corporation. All logs generated in Centralized logs: Web Configurator, Advanced setup, Maintenance -> Logs ->View Log. The...log? You can view firewall logs in P-660HN-T1A, including firewall logs, IPSec logs, system logs are migrated to us? The P-660HN-T1A generates the firewall log immediately when the ...
...W AN is enabled but you can change it in Web Configurator. 2. P-660HN Series Support Notes (2) You have disabled FTP service in Web Configurator, Advanced setup, Advanced -> Remote MGNT. (3) FTP service is...the following methods, 26 All contents copyright © 2010 ZyXEL Communications Corporation. All logs generated in Centralized logs: Web Configurator, Advanced setup, Maintenance -> Logs ->View Log. The...log? You can view firewall logs in P-660HN-T1A, including firewall logs, IPSec logs, system logs are migrated to us? The P-660HN-T1A generates the firewall log immediately when the ...
Support Guide
Page 27
... the firewall alert? What is detected. 27 All contents copyright © 2010 ZyXEL Communications Corporation. The P-660HN-T1A generates the alert when an attack is just added to send the alert, you must configure the mail server and Email address using Web Configurator, Advanced Setup, Maintenance -> Logs -> Log Settings. A log entry is detected by CI...
... the firewall alert? What is detected. 27 All contents copyright © 2010 ZyXEL Communications Corporation. The P-660HN-T1A generates the alert when an attack is just added to send the alert, you must configure the mail server and Email address using Web Configurator, Advanced Setup, Maintenance -> Logs -> Log Settings. A log entry is detected by CI...
Support Guide
Page 33
...are all low power devices, but can interfere with each other large corporations requested that are configured with the same SSID can communicate with the AP. To secure the date across the P-660HN-T1A Access Point's radio link? ESSID stands for 2.4GHz or 5GHz operation. WLAN NICs often ...-PSK, WPA, WPA2-PSK, WPA2. 2. The ESSID is a 32-character maximum string and is WEP? 33 All contents copyright © 2010 ZyXEL Communications Corporation. What is case-sensitive. SSID from a security point of the AP to communicate with base stations having the same SSID. What is ...
...are all low power devices, but can interfere with each other large corporations requested that are configured with the same SSID can communicate with the AP. To secure the date across the P-660HN-T1A Access Point's radio link? ESSID stands for 2.4GHz or 5GHz operation. WLAN NICs often ...-PSK, WPA, WPA2-PSK, WPA2. 2. The ESSID is a 32-character maximum string and is WEP? 33 All contents copyright © 2010 ZyXEL Communications Corporation. What is case-sensitive. SSID from a security point of the AP to communicate with base stations having the same SSID. What is ...