Support Guide
Page 2
... ...6 3. What should I upgrade/backup the firmware by using PPPoE 13 8. Is it 8 11. What's the difference between them 13 7. Does the P-660HN-T1A support DDNS wildcard 14 12. What's Multilingual Embedded Web Configurator 6 2. How do I use the Reset button 7 8. How to access a server running behind...parameters (PCR, SCR, MBS) mean ? ...15 16. What is content filter 16 ADSL FAQ ...17 2 All contents copyright © 2010 ZyXEL Communications Corporation. What is the default password for 13 6. What is Traffic Shaping 14 13. Why does my provider use PPPoE 13 9.
... ...6 3. What should I upgrade/backup the firmware by using PPPoE 13 8. Is it 8 11. What's the difference between them 13 7. Does the P-660HN-T1A support DDNS wildcard 14 12. What's Multilingual Embedded Web Configurator 6 2. How do I use the Reset button 7 8. How to access a server running behind...parameters (PCR, SCR, MBS) mean ? ...15 16. What is content filter 16 ADSL FAQ ...17 2 All contents copyright © 2010 ZyXEL Communications Corporation. What is the default password for 13 6. What is Traffic Shaping 14 13. Why does my provider use PPPoE 13 9.
Support Guide
Page 3
...660HN Series Support Notes 1. What is IP Spoofing attack 23 13. What makes P-660HN-T1A... secure 20 3. How do I upload the firmware and configuration file using Web Configurator/Telnet over WAN 25 Log and Alert 26 1. When does the P-660HN-T1A... generate the firewall log? ..... 26 2. Why do I know the ADSL line is Denials of firewall in the P-660HN-T1A... 4. How do I configure my P-660HN-T1A using FTP over WAN 24 4. What...Death attack 22 8. How does the P-660HN-T1A work on a noisy ADSL 17 6.... and NAT built-in P-660HN-T1A? . 23 Configuration 23 1. ...
...660HN Series Support Notes 1. What is IP Spoofing attack 23 13. What makes P-660HN-T1A... secure 20 3. How do I upload the firmware and configuration file using Web Configurator/Telnet over WAN 25 Log and Alert 26 1. When does the P-660HN-T1A... generate the firewall log? ..... 26 2. Why do I know the ADSL line is Denials of firewall in the P-660HN-T1A... 4. How do I configure my P-660HN-T1A using FTP over WAN 24 4. What...Death attack 22 8. How does the P-660HN-T1A work on a noisy ADSL 17 6.... and NAT built-in P-660HN-T1A? . 23 Configuration 23 1. ...
Support Guide
Page 4
... What is Frequency-hopping Spread Spectrum Technology - (FHSS 32 Security FAQ 33 1. What is Infrastructure mode 32 3. Internet Access Using P-660HN-T1A under Routing mode.. 39 3. Internet Access Using P-660HN-T1A under Bridge mode.... 36 2. What types of devices use wireless products from a variety of SSID, can you find 802.11 wireless...What are potential factors that may causes interference among WLAN products 30 12. By turning off the broadcast of vendors 29 7. Setup the P-660HN-T1A as a DHCP Relay 42 4 All contents copyright © 2010 ZyXEL Communications Corporation.
... What is Frequency-hopping Spread Spectrum Technology - (FHSS 32 Security FAQ 33 1. What is Infrastructure mode 32 3. Internet Access Using P-660HN-T1A under Routing mode.. 39 3. Internet Access Using P-660HN-T1A under Bridge mode.... 36 2. What types of devices use wireless products from a variety of SSID, can you find 802.11 wireless...What are potential factors that may causes interference among WLAN products 30 12. By turning off the broadcast of vendors 29 7. Setup the P-660HN-T1A as a DHCP Relay 42 4 All contents copyright © 2010 ZyXEL Communications Corporation.
Support Guide
Page 5
... the Firmware and Configuration Files ...... 115 CI Command Reference 118 Command Syntax and General User Interface 118 5 All contents copyright © 2010 ZyXEL Communications Corporation. Change WAN MTU via WEB-GUI 84 Wireless Application Notes 86 1. Site Survey 98 5. LAN/WAN Packet Trace 107 ...Downloading using TFTP ...112 Using TFTP client software 112 Using TFTP command on Windows NT 114 Using TFTP command on P-660HN-T1A 81 16. Using the Dynamic DNS (DDNS 64 7. QoS(802.1Q 66 8. Using IP Multicast 78 14. SUA Notes 43 5. Using IP...
... the Firmware and Configuration Files ...... 115 CI Command Reference 118 Command Syntax and General User Interface 118 5 All contents copyright © 2010 ZyXEL Communications Corporation. Change WAN MTU via WEB-GUI 84 Wireless Application Notes 86 1. Site Survey 98 5. LAN/WAN Packet Trace 107 ...Downloading using TFTP ...112 Using TFTP client software 112 Using TFTP command on Windows NT 114 Using TFTP command on P-660HN-T1A 81 16. Using the Dynamic DNS (DDNS 64 7. QoS(802.1Q 66 8. Using IP Multicast 78 14. SUA Notes 43 5. Using IP...
Support Guide
Page 6
...transfer the firmware to get file 'ras' from the Prestige. 6 All contents copyright © 2010 ZyXEL Communications Corporation. The P-660HN-T1A allows you access the P-660HN-T1A as follows. a. P-660HN Series Support Notes FAQ System FAQ 1. By factory default it could not be dropped during uploading the ...to your firmware, use TFTP client program to its flash at this case, ZyXEL will be upgraded from Web Condigurator, or using FTP or TFTP client software. Please do I access the P-660HN-T1A Command Line Interface (CLI)? Use the TELNET client program in the Prestige....
...transfer the firmware to get file 'ras' from the Prestige. 6 All contents copyright © 2010 ZyXEL Communications Corporation. The P-660HN-T1A allows you access the P-660HN-T1A as follows. a. P-660HN Series Support Notes FAQ System FAQ 1. By factory default it could not be dropped during uploading the ...to your firmware, use TFTP client program to its flash at this case, ZyXEL will be upgraded from Web Condigurator, or using FTP or TFTP client software. Please do I access the P-660HN-T1A Command Line Interface (CLI)? Use the TELNET client program in the Prestige....
Support Guide
Page 7
...ZyXEL Communications Corporation. SUA (Single User Account) is a unique feature supported by Prestige, the original IP source address and TCP/UDP source port numbers are written into the destination fields of a local pool. When reply packets from a local client destined for the cost of P-660HN-T1A to put your P-660HN-T1A... will be reset to 'user', the Administrator password will be reset to your configuration in file rom-0 in the P-660HN-T1A. 6. It then recomputes the appropriate header checksums and forwards the packet to the Internet as SUA receives a packet from...
...ZyXEL Communications Corporation. SUA (Single User Account) is a unique feature supported by Prestige, the original IP source address and TCP/UDP source port numbers are written into the destination fields of a local pool. When reply packets from a local client destined for the cost of P-660HN-T1A to put your P-660HN-T1A... will be reset to 'user', the Administrator password will be reset to your configuration in file rom-0 in the P-660HN-T1A. 6. It then recomputes the appropriate header checksums and forwards the packet to the Internet as SUA receives a packet from...
Support Guide
Page 8
... global IP addresses 8 All contents copyright © 2010 ZyXEL Communications Corporation. You can configure it in Web Configurator, Advanced Setup, Network -> NAT -> Port Forwarding). 11. They are reusable, but only one global IP. The P-660HN-T1A supports NAT sets on the LAN accessible from the outside with...the IP addresses and port numbers of the local systems currently using port 21/20) are 8 remote nodes. This is possible because P-660HN-T1A delivers the packet to the local server by looking up to the outside access. There will be configured. (You can make a ...
... global IP addresses 8 All contents copyright © 2010 ZyXEL Communications Corporation. You can configure it in Web Configurator, Advanced Setup, Network -> NAT -> Port Forwarding). 11. They are reusable, but only one global IP. The P-660HN-T1A supports NAT sets on the LAN accessible from the outside with...the IP addresses and port numbers of the local systems currently using port 21/20) are 8 remote nodes. This is possible because P-660HN-T1A delivers the packet to the local server by looking up to the outside access. There will be configured. (You can make a ...
Support Guide
Page 9
... the P-660HN-T1A maps each ILA to unique IGA. Server: In Server mode, the P-660HN-T1A maps multiple inside servers to one global IP. This is equivalent to SUA (i.e., PAT, port address translation), ZyXEL's Single .... What IP/Port mapping does Multi-NAT support? The following table summarizes the five types. P-660HN Series Support Notes With SUA, 'visible' servers had to be mapped to different ports, since ... One: In One-to-One mode, the P-660HN-T1A maps one ILA to one IGA. Many to One: In Many-to-One mode, the P-660HN-T1A maps multiple ILA to one unique IGA please use...
... the P-660HN-T1A maps each ILA to unique IGA. Server: In Server mode, the P-660HN-T1A maps multiple inside servers to one global IP. This is equivalent to SUA (i.e., PAT, port address translation), ZyXEL's Single .... What IP/Port mapping does Multi-NAT support? The following table summarizes the five types. P-660HN Series Support Notes With SUA, 'visible' servers had to be mapped to different ports, since ... One: In One-to-One mode, the P-660HN-T1A maps one ILA to one IGA. Many to One: In Many-to-One mode, the P-660HN-T1A maps multiple ILA to one unique IGA please use...
Support Guide
Page 10
... input data filter: Deny packets from the outside that claim to view the current active NAT sessions. 14. The P-660HN-T1A supports 4k sessions that is called 'device filter group', and the other is not spoofing us Filter rule setup: Filter...ZyXEL Communications Corporation. Generic filters belong to the 'device filter group', TCP/IP and IPX filters belong to protect against IP spoofing attacks? How can use „ip nat hashTable wanif0‟ to be from the inside Allow everything that you can I protect against IP spoofing attacks. The P-660HN-T1A...
... input data filter: Deny packets from the outside that claim to view the current active NAT sessions. 14. The P-660HN-T1A supports 4k sessions that is called 'device filter group', and the other is not spoofing us Filter rule setup: Filter...ZyXEL Communications Corporation. Generic filters belong to the 'device filter group', TCP/IP and IPX filters belong to protect against IP spoofing attacks? How can use „ip nat hashTable wanif0‟ to be from the inside Allow everything that you can I protect against IP spoofing attacks. The P-660HN-T1A...
Support Guide
Page 12
...check this IP address. 12 All contents copyright © 2010 ZyXEL Communications Corporation. For Administrator Account, besides accessing the status monitor of P-660HN-T1A, it can also access Wizard setup/ Advanced setup of P-660HN-T1A and check the current system status. You can only access ... Password Protected ) for Web Configurator? What's the difference between 'Common User Account' and 'Administrator Account'? You can I know the P-660HN-T1A's WAN IP address assigned by the ISP? What is the default password for remote configuration change it can view "My WAN IP : ...
...check this IP address. 12 All contents copyright © 2010 ZyXEL Communications Corporation. For Administrator Account, besides accessing the status monitor of P-660HN-T1A, it can also access Wizard setup/ Advanced setup of P-660HN-T1A and check the current system status. You can only access ... Password Protected ) for Web Configurator? What's the difference between 'Common User Account' and 'Administrator Account'? You can I know the P-660HN-T1A's WAN IP address assigned by the ISP? What is the default password for remote configuration change it can view "My WAN IP : ...
Support Guide
Page 13
... generally give one Internet account and limit only one computer to 4KHz, while ADSL data transmission uses the higher frequency. The P-660HN-T1A supports Bridge and Router mode, what's the difference between them? For most Internet users having multiple computers want to share an ...ZyXEL Communications Corporation. How do not interfere with your ISP or the information sheet given by the ISP. What is the micro filter or splitter used for your telephone set to provide services using PPPoE? In this case, we use the router mode which works as the encapsulation type in the P-660HN-T1A...
... generally give one Internet account and limit only one computer to 4KHz, while ADSL data transmission uses the higher frequency. The P-660HN-T1A supports Bridge and Router mode, what's the difference between them? For most Internet users having multiple computers want to share an ...ZyXEL Communications Corporation. How do not interfere with your ISP or the information sheet given by the ISP. What is the micro filter or splitter used for your telephone set to provide services using PPPoE? In this case, we use the router mode which works as the encapsulation type in the P-660HN-T1A...
Support Guide
Page 14
...IP-to-DNS table in the DDNS server is dynamic. When using the www.zyxel.com.tw regardless of the WAN IP of the P-660HN-T1A. If another VCs are multiple servers inside and you apply a DNS name (e.g., www.zyxel.com.tw) for your hostname. Without DDNS, we can always access the web...such as yourhost.dyndns.org. When you want your internal server to be accessed by the P-660HN-T1A, you want users to be aliased to other VCs after ward. 14 All contents copyright © 2010 ZyXEL Communications Corporation. To use things such as www.yourhost.dyndns.org and still reach your web...
...IP-to-DNS table in the DDNS server is dynamic. When using the www.zyxel.com.tw regardless of the WAN IP of the P-660HN-T1A. If another VCs are multiple servers inside and you apply a DNS name (e.g., www.zyxel.com.tw) for your hostname. Without DDNS, we can always access the web...such as yourhost.dyndns.org. When you want your internal server to be accessed by the P-660HN-T1A, you want users to be aliased to other VCs after ward. 14 All contents copyright © 2010 ZyXEL Communications Corporation. To use things such as www.yourhost.dyndns.org and still reach your web...
Support Guide
Page 15
... that the data can tolerate delays, such as e-mail. 15 All contents copyright © 2010 ZyXEL Communications Corporation. Total bandwidth of actions taken by PCR. The P-660HN-T1A holds the parameters for shaping the traffic among different virtual connections. Sustainable Cell Rate(SCR): The least... have a fluctuating natural bit rate. What do the ATM QoS Types (CBR, UBR, VBR-nRT, VBR-RT) mean ? The P-660HN-T1A must manage traffic fairly and provide bandwidth allocation for example, 2.3 Mbps line rate will result PCR as the maximum value according to other problems...
... that the data can tolerate delays, such as e-mail. 15 All contents copyright © 2010 ZyXEL Communications Corporation. Total bandwidth of actions taken by PCR. The P-660HN-T1A holds the parameters for shaping the traffic among different virtual connections. Sustainable Cell Rate(SCR): The least... have a fluctuating natural bit rate. What do the ATM QoS Types (CBR, UBR, VBR-nRT, VBR-RT) mean ? The P-660HN-T1A must manage traffic fairly and provide bandwidth allocation for example, 2.3 Mbps line rate will result PCR as the maximum value according to other problems...
Support Guide
Page 16
What is not sent evenly. You can also specify trusted IP Addresses on LAN for which the P-660HN-T1A will not perform content filtering. You can set a schedule for bursty traffic and bandwidth sharing with other applications. You can configure the details...: Variable bit rate nonreal time (VBR-nRT): Variable bit rate real time (VBR-RT): 16. You can select VBR for when the P-660HN-T1A performs content filtering. P-660HN Series Support Notes Variable bit rate(VBR): An ATM bandwidth-allocation service that you specify) in Web Configurator, Advanced setup, Security -> Filter. ...
What is not sent evenly. You can also specify trusted IP Addresses on LAN for which the P-660HN-T1A will not perform content filtering. You can set a schedule for bursty traffic and bandwidth sharing with other applications. You can configure the details...: Variable bit rate nonreal time (VBR-nRT): Variable bit rate real time (VBR-RT): 16. You can select VBR for when the P-660HN-T1A performs content filtering. P-660HN Series Support Notes Variable bit rate(VBR): An ATM bandwidth-allocation service that you specify) in Web Configurator, Advanced setup, Security -> Filter. ...
Support Guide
Page 17
... is the number of lines available to automatically adjust the date rate. 17 All contents copyright © 2010 ZyXEL Communications Corporation. How does the P-660HN-T1A work on the line quality, the P-660HN-T1A uses "Fall Back" and "Fall Forward" to each. The big difference between ADSL and cable modems, however...1. How does ADSL compare to 4KHz, while ADSL data transmission uses the higher frequency. You can see the DSL LED Green on the P-660HN-T1A's front panel is on a line, and will in a neighborhood get about how to connect the micro filter please refer to ensure that ...
... is the number of lines available to automatically adjust the date rate. 17 All contents copyright © 2010 ZyXEL Communications Corporation. How does the P-660HN-T1A work on the line quality, the P-660HN-T1A uses "Fall Back" and "Fall Forward" to each. The big difference between ADSL and cable modems, however...1. How does ADSL compare to 4KHz, while ADSL data transmission uses the higher frequency. You can see the DSL LED Green on the P-660HN-T1A's front panel is on a line, and will in a neighborhood get about how to connect the micro filter please refer to ensure that ...
Support Guide
Page 18
...of my ADSL line statistics? You can carry multiple protocols over one existing ADSL connection. 18 All contents copyright © 2010 ZyXEL Communications Corporation. What are the signaling pins of services (VoIP, Video and Internet) over a single VC, it requires extra header information...virtual circuit (VC). Though the LLC-based multiplexing can use the following CI commands to identify the protocol being carried on the P-660HN-T1A's ADSL connector are providing three kinds of the ADSL connector? Therefore, the VC-based multiplexing is triple play? More and more ...
...of my ADSL line statistics? You can carry multiple protocols over one existing ADSL connection. 18 All contents copyright © 2010 ZyXEL Communications Corporation. What are the signaling pins of services (VoIP, Video and Internet) over a single VC, it requires extra header information...virtual circuit (VC). Though the LLC-based multiplexing can use the following CI commands to identify the protocol being carried on the P-660HN-T1A's ADSL connector are providing three kinds of the ADSL connector? Therefore, the VC-based multiplexing is triple play? More and more ...
Support Guide
Page 20
... are hosts running proxy servers, which translates the private local addresses to protect a trusted network from an untrusted network. The P-660HN-T1A is a system or group of systems that runs on the header information in individual packets. It also uses stateful packet inspection ...ZyXEL Communications Corporation. Packet Filtering Firewall 2. It hides valuable data by mean of a proxy. It may also be thought of two mechanisms: One to block the traffic, and the other to automatically detect and thwart Denial of general operating system such as UNIX or Windows NT. The P-660HN-T1A...
... are hosts running proxy servers, which translates the private local addresses to protect a trusted network from an untrusted network. The P-660HN-T1A is a system or group of systems that runs on the header information in individual packets. It also uses stateful packet inspection ...ZyXEL Communications Corporation. Packet Filtering Firewall 2. It hides valuable data by mean of a proxy. It may also be thought of two mechanisms: One to block the traffic, and the other to automatically detect and thwart Denial of general operating system such as UNIX or Windows NT. The P-660HN-T1A...
Support Guide
Page 21
...that, for example, a legitimate incoming packet can be insufficient, because packets filters typically cannot maintain session state. The P-660HN-T1A's firewall provides email service to the Internet. It takes into account the state of going through every individual rule for that...' the session data to network resources. 21 All contents copyright © 2010 ZyXEL Communications Corporation. The P-660HN-T1A's firewall uses session filtering, i.e., smart rules, that packet and allowed in the P-660HN-T1A? 1. Why do business on IP address and protocol. Although packet filter and NAT...
...that, for example, a legitimate incoming packet can be insufficient, because packets filters typically cannot maintain session state. The P-660HN-T1A's firewall provides email service to the Internet. It takes into account the state of going through every individual rule for that...' the session data to network resources. 21 All contents copyright © 2010 ZyXEL Communications Corporation. The P-660HN-T1A's firewall uses session filtering, i.e., smart rules, that packet and allowed in the P-660HN-T1A? 1. Why do business on IP address and protocol. Although packet filter and NAT...
Support Guide
Page 23
... to protect others from a trusted host and should be used to gain unauthorized access to the LAN Interface of P-660HN-T1A, you connect your firewall. 23 All contents copyright © 2010 ZyXEL Communications Corporation. P-660HN Series Support Notes 11 What is IP Spoofing attack? Note: Don't forget to quickly flood the target network with...
... to protect others from a trusted host and should be used to gain unauthorized access to the LAN Interface of P-660HN-T1A, you connect your firewall. 23 All contents copyright © 2010 ZyXEL Communications Corporation. P-660HN Series Support Notes 11 What is IP Spoofing attack? Note: Don't forget to quickly flood the target network with...
Support Guide
Page 24
...rule. To enable Telnet from WAN, you must turn the firewall off, or create a firewall rule to allow special access to your P-660HN-T1A or access.the Web Configurator of 3. WWW (For accessing Web Configurator): Source IP= Remote trusted host Destination IP= router' WAN IP ... © 2010 ZyXEL Communications Corporation. P-660HN Series Support Notes 1. You can enter the IP address of the secured LAN host in Web Configurator, Advanced Setup, Advanced -> Remote MGNT -> [Service] ->Secured Client IP to allow WWW/Telnet connection from WAN to telnet your P-660HN-T1A: The default value...
...rule. To enable Telnet from WAN, you must turn the firewall off, or create a firewall rule to allow special access to your P-660HN-T1A or access.the Web Configurator of 3. WWW (For accessing Web Configurator): Source IP= Remote trusted host Destination IP= router' WAN IP ... © 2010 ZyXEL Communications Corporation. P-660HN Series Support Notes 1. You can enter the IP address of the secured LAN host in Web Configurator, Advanced Setup, Advanced -> Remote MGNT -> [Service] ->Secured Client IP to allow WWW/Telnet connection from WAN to telnet your P-660HN-T1A: The default value...