User Guide
Page 12
P-660HW-T v2 User's Guide 2.4.6 Status: Packet Statistics 51 2.4.7 Changing Login Password 52 Chapter 3 Wizard Setup for Internet Access 55 3.1 Introduction ...55 3.2 Internet Access Wizard Setup 55 3.2.1 Automatic ... with PPPoA or PPPoE Encapsulation 77 5.1.5.2 IP Assignment with RFC 1483 Encapsulation 77 5.1.5.3 IP Assignment with ENET ENCAP Encapsulation 78 5.1.6 Nailed-Up Connection (PPP 78 5.1.7 NAT ...78 5.2 Metric ...78 5.3 Traffic Shaping 79 12 Table of Contents
P-660HW-T v2 User's Guide 2.4.6 Status: Packet Statistics 51 2.4.7 Changing Login Password 52 Chapter 3 Wizard Setup for Internet Access 55 3.1 Introduction ...55 3.2 Internet Access Wizard Setup 55 3.2.1 Automatic ... with PPPoA or PPPoE Encapsulation 77 5.1.5.2 IP Assignment with RFC 1483 Encapsulation 77 5.1.5.3 IP Assignment with ENET ENCAP Encapsulation 78 5.1.6 Nailed-Up Connection (PPP 78 5.1.7 NAT ...78 5.2 Metric ...78 5.3 Traffic Shaping 79 12 Table of Contents
User Guide
Page 14
P-660HW-T v2 User's Guide 7.1.3 DNS Server Address 112 7.1.4 DNS Server Address Assignment ...Alias ...121 Chapter 8 Network Address Translation (NAT) Screens 125 8.1 NAT Overview 125 8.1.1 NAT Definitions 125 8.1.2 What NAT Does 126 8.1.3 How NAT Works 126 8.1.4 NAT Application 127 8.1.5 NAT Mapping Types 127 8.2 SUA (Single User Account) Versus NAT 128 8.3 NAT General Setup 128 8.4 Port Forwarding 129 8.4.1... Application-level Firewalls 138 9.2.3 Stateful Inspection Firewalls 138 9.3 Introduction to ZyXEL's Firewall 138 9.3.1 Denial of Service Attacks 139 14 Table of Contents
P-660HW-T v2 User's Guide 7.1.3 DNS Server Address 112 7.1.4 DNS Server Address Assignment ...Alias ...121 Chapter 8 Network Address Translation (NAT) Screens 125 8.1 NAT Overview 125 8.1.1 NAT Definitions 125 8.1.2 What NAT Does 126 8.1.3 How NAT Works 126 8.1.4 NAT Application 127 8.1.5 NAT Mapping Types 127 8.2 SUA (Single User Account) Versus NAT 128 8.3 NAT General Setup 128 8.4 Port Forwarding 129 8.4.1... Application-level Firewalls 138 9.2.3 Stateful Inspection Firewalls 138 9.3 Introduction to ZyXEL's Firewall 138 9.3.1 Denial of Service Attacks 139 14 Table of Contents
User Guide
Page 17
P-660HW-T v2 User's Guide Chapter 14 Dynamic DNS Setup 191 14.1 Dynamic DNS Overview 191 14.1.1 DYNDNS Wildcard 191 14.2 Configuring Dynamic DNS 191 Chapter 15 Remote Management Configuration 195 15.1 Remote Management Overview 195 15.1.1 Remote Management Limitations 195 15.1.2 Remote Management and NAT 196 15.1.3... Introducing Universal Plug and Play 207 16.1.1 How do I know if I'm using UPnP 207 16.1.2 NAT Traversal 207 16.1.3 Cautions with UPnP 208 16.2 UPnP and ZyXEL 208 16.2.1 Configuring UPnP 208 16.3 Installing UPnP in Windows Example 209 16.3.1 Installing UPnP in Windows ...
P-660HW-T v2 User's Guide Chapter 14 Dynamic DNS Setup 191 14.1 Dynamic DNS Overview 191 14.1.1 DYNDNS Wildcard 191 14.2 Configuring Dynamic DNS 191 Chapter 15 Remote Management Configuration 195 15.1 Remote Management Overview 195 15.1.1 Remote Management Limitations 195 15.1.2 Remote Management and NAT 196 15.1.3... Introducing Universal Plug and Play 207 16.1.1 How do I know if I'm using UPnP 207 16.1.2 NAT Traversal 207 16.1.3 Cautions with UPnP 208 16.2 UPnP and ZyXEL 208 16.2.1 Configuring UPnP 208 16.3 Installing UPnP in Windows Example 209 16.3.1 Installing UPnP in Windows ...
User Guide
Page 22
P-660HW-T v2 User's Guide Figure 39 Internet Connection (PPPoE 81 Figure 40 Advanced Internet Connection Setup 83 Figure 41 More Connections 85 Figure 42 More Connections Edit ... Network & Partitioned Logical Networks 122 Figure 69 LAN IP Alias ...122 Figure 70 How NAT Works 126 Figure 71 NAT Application With IP Alias 127 Figure 72 NAT General ...129 Figure 73 Multiple Servers Behind NAT Example 131 Figure 74 NAT Port Forwarding 131 Figure 75 Port Forwarding Rule Setup 132 Figure 76 Address Mapping...
P-660HW-T v2 User's Guide Figure 39 Internet Connection (PPPoE 81 Figure 40 Advanced Internet Connection Setup 83 Figure 41 More Connections 85 Figure 42 More Connections Edit ... Network & Partitioned Logical Networks 122 Figure 69 LAN IP Alias ...122 Figure 70 How NAT Works 126 Figure 71 NAT Application With IP Alias 127 Figure 72 NAT General ...129 Figure 73 Multiple Servers Behind NAT Example 131 Figure 74 NAT Port Forwarding 131 Figure 75 Port Forwarding Rule Setup 132 Figure 76 Address Mapping...
User Guide
Page 28
P-660HW-T v2 User's Guide Table 39 LAN IP Alias ...122 Table 40 NAT Definitions ...125 Table 41 NAT Mapping Types 128 Table 42 NAT General ...129 Table 43 Services and Port Numbers 130 Table 44 NAT Port Forwarding 132 Table 45 Port Forwarding Rule Setup 133 Table 46 Address Mapping Rules 134 Table 47 Edit Address Mapping...
P-660HW-T v2 User's Guide Table 39 LAN IP Alias ...122 Table 40 NAT Definitions ...125 Table 41 NAT Mapping Types 128 Table 42 NAT General ...129 Table 43 Services and Port Numbers 130 Table 44 NAT Port Forwarding 132 Table 45 Port Forwarding Rule Setup 133 Table 46 Address Mapping Rules 134 Table 47 Edit Address Mapping...
User Guide
Page 35
P-660HW-T v2 User's Guide Media Bandwidth Management ZyXEL's Media Bandwidth Management allows you to specify ...server. DHCP DHCP (Dynamic Host Configuration Protocol) allows the individual clients (computers) to DHCP clients. The ZyXEL Device can assign IP addresses, an IP default gateway and DNS servers to obtain the TCP/IP configuration ...used in DHCP server capability enabled by default. The PPPoE driver on the ZyXEL Device is made). Network Address Translation (NAT) Network Address Translation (NAT) allows the translation of PPPoE thus saving you can dynamically join a ...
P-660HW-T v2 User's Guide Media Bandwidth Management ZyXEL's Media Bandwidth Management allows you to specify ...server. DHCP DHCP (Dynamic Host Configuration Protocol) allows the individual clients (computers) to DHCP clients. The ZyXEL Device can assign IP addresses, an IP default gateway and DNS servers to obtain the TCP/IP configuration ...used in DHCP server capability enabled by default. The PPPoE driver on the ZyXEL Device is made). Network Address Translation (NAT) Network Address Translation (NAT) allows the translation of PPPoE thus saving you can dynamically join a ...
User Guide
Page 45
...the firewall rules, and allows you to partition your LAN interface into subnets. Use this screen to enable NAT. General Use this screen to change your ZyXEL Device. Use this screen to enable bandwidth management on your anti-probing settings. Use this screen to ... screen to configure LAN TCP/IP settings, enable Any IP and other advanced properties. P-660HW-T v2 User's Guide Table 3 Web Configurator Screens Summary (continued) LINK/ICON LAN Wireless LAN NAT Security Firewall Content Filter Advanced Static Route Bandwidth MGMT Dynamic DNS SUB-LINK FUNCTION IP Use...
...the firewall rules, and allows you to partition your LAN interface into subnets. Use this screen to enable NAT. General Use this screen to change your ZyXEL Device. Use this screen to enable bandwidth management on your anti-probing settings. Use this screen to ... screen to configure LAN TCP/IP settings, enable Any IP and other advanced properties. P-660HW-T v2 User's Guide Table 3 Web Configurator Screens Summary (continued) LINK/ICON LAN Wireless LAN NAT Security Firewall Content Filter Advanced Static Route Bandwidth MGMT Dynamic DNS SUB-LINK FUNCTION IP Use...
User Guide
Page 48
...port DHCP role - System Status System Uptime This is the LAN port IP subnet mask. P-660HW-T v2 User's Guide Table 4 Status Screen LABEL DESCRIPTION IP Subnet Mask This is the total time the ZyXEL Device has been on. Security This displays the WLAN security mode. The bar turns from ...'s firewall is up or connected) if you're using PPPoE encapsulation. System Mode This displays whether the ZyXEL Device is thus available for running processes like NAT, VPN and the firewall. Heap memory refers to the memory that are not in the wireless LAN. For the WAN port,...
...port DHCP role - System Status System Uptime This is the LAN port IP subnet mask. P-660HW-T v2 User's Guide Table 4 Status Screen LABEL DESCRIPTION IP Subnet Mask This is the total time the ZyXEL Device has been on. Security This displays the WLAN security mode. The bar turns from ...'s firewall is up or connected) if you're using PPPoE encapsulation. System Mode This displays whether the ZyXEL Device is thus available for running processes like NAT, VPN and the firewall. Heap memory refers to the memory that are not in the wireless LAN. For the WAN port,...
User Guide
Page 76
...Be sure to use the encapsulation and multiplexing methods used by prior mutual agreement, each protocol is carrying. P-660HW-T v2 User's Guide By implementing PPPoE directly on the ZyXEL Device (rather than individual computers), the computers on RFC1483 and sends it is not practical to a specific virtual...Provider's (ISP) DSLAM (digital access multiplexer). Despite the extra bandwidth and processing overhead, this case one VC carries multiple protocols with NAT, all of the LANs' computers will have a separate VC for more information on the number of ATM VCs is assigned to have...
...Be sure to use the encapsulation and multiplexing methods used by prior mutual agreement, each protocol is carrying. P-660HW-T v2 User's Guide By implementing PPPoE directly on the ZyXEL Device (rather than individual computers), the computers on RFC1483 and sends it is not practical to a specific virtual...Provider's (ISP) DSLAM (digital access multiplexer). Despite the extra bandwidth and processing overhead, this case one VC carries multiple protocols with NAT, all of the LANs' computers will have a separate VC for more information on the number of ATM VCs is assigned to have...
User Guide
Page 78
...660HW-T v2 User's Guide 5.1.5.3 IP Assignment with ENET ENCAP Encapsulation In this case you must be very expensive for a dynamic IP, the ZyXEL Device acts as a DHCP client on and whenever the connection is always up regardless of "3", then the normal route acts as the DHCP server assigns them to the ZyXEL... than "15" means the link is that idle timeout is of no concern 5.1.7 NAT NAT (Network Address Translation - The smaller the number, the lower the "cost". In the same manner, the ZyXEL Device uses the dial-backup route if the traffic-redirect route also fails. 78 Chapter...
...660HW-T v2 User's Guide 5.1.5.3 IP Assignment with ENET ENCAP Encapsulation In this case you must be very expensive for a dynamic IP, the ZyXEL Device acts as a DHCP client on and whenever the connection is always up regardless of "3", then the normal route acts as the DHCP server assigns them to the ZyXEL... than "15" means the link is that idle timeout is of no concern 5.1.7 NAT NAT (Network Address Translation - The smaller the number, the lower the "cost". In the same manner, the ZyXEL Device uses the dial-backup route if the traffic-redirect route also fails. 78 Chapter...
User Guide
Page 84
P-660HW-T v2 User's Guide Table 21 Advanced Internet Connection Setup (continued) LABEL DESCRIPTION ATM QoS Type... section describes the protocol-independent parameters for a remote network. Click Network > WAN > More Connections to the ISP via the ZyXEL Device. Sustain Cell Rate The Sustain Cell Rate (SCR) sets the average cell rate (long-term) that system default is... the first WAN connection. This is not applicable/available when you configure the ZyXEL Device to use the WAN > Internet Connection screen to NAT for bursty traffic and bandwidth sharing with other applications.
P-660HW-T v2 User's Guide Table 21 Advanced Internet Connection Setup (continued) LABEL DESCRIPTION ATM QoS Type... section describes the protocol-independent parameters for a remote network. Click Network > WAN > More Connections to the ISP via the ZyXEL Device. Sustain Cell Rate The Sustain Cell Rate (SCR) sets the average cell rate (long-term) that system default is... the first WAN connection. This is not applicable/available when you configure the ZyXEL Device to use the WAN > Internet Connection screen to NAT for bursty traffic and bandwidth sharing with other applications.
User Guide
Page 87
...IP Address Automatically when you have one each time you . NAT SUA only is available only when you are VC or LLC. Connect on Demand Select Connect on Demand. Subnet Mask Enter a subnet mask in the Mode field. P-660HW-T v2 User's Guide Table 23 More Connections Edit (continued) LABEL DESCRIPTION...dotted decimal notation. Refer to the appendices to bring up all the time and specify an idle time-out in the Mode field. The ZyXEL Device will not timeout. The default setting is available if you a different one public IP address and want to 31 is disconnected. Otherwise...
...IP Address Automatically when you have one each time you . NAT SUA only is available only when you are VC or LLC. Connect on Demand Select Connect on Demand. Subnet Mask Enter a subnet mask in the Mode field. P-660HW-T v2 User's Guide Table 23 More Connections Edit (continued) LABEL DESCRIPTION...dotted decimal notation. Refer to the appendices to bring up all the time and specify an idle time-out in the Mode field. The ZyXEL Device will not timeout. The default setting is available if you a different one public IP address and want to 31 is disconnected. Otherwise...
User Guide
Page 113
... DNS Server fields are told otherwise. If your network is extremely important because without it . If this block of the ZyXEL Device. Your ZyXEL Device will assign you sign up. P-660HW-T v2 User's Guide 7.1.4 DNS Server Address Assignment Use DNS (Domain Name System) to map a domain name to remember, for...has built-in the form of an IP address. Once you can access it , you must enable the Network Address Translation (NAT) feature of addresses specifically for your network administrator assigns you entered. The DNS server is using that network. There are reserved). ...
... DNS Server fields are told otherwise. If your network is extremely important because without it . If this block of the ZyXEL Device. Your ZyXEL Device will assign you sign up. P-660HW-T v2 User's Guide 7.1.4 DNS Server Address Assignment Use DNS (Domain Name System) to map a domain name to remember, for...has built-in the form of an IP address. Once you can access it , you must enable the Network Address Translation (NAT) feature of addresses specifically for your network administrator assigns you entered. The DNS server is using that network. There are reserved). ...
User Guide
Page 115
... hosts (including gateways). With the Any IP feature and NAT enabled, the ZyXEL Device allows a computer to access the Internet without changing the network settings, even when the IP addresses of the computer and the ZyXEL Device are not in the same subnet to allow the ...in the same subnet. The ZyXEL Device supports both IGMP version 1 (IGMP-v1) and IGMP version 2 (IGMPv2). Chapter 7 LAN Setup 115 IGMP version 2 (RFC 2236) is an improvement over version 1 (RFC 1112) but IGMP version 1 is assigned to carry user data. P-660HW-T v2 User's Guide 7.2.3 Multicast Traditionally,...
... hosts (including gateways). With the Any IP feature and NAT enabled, the ZyXEL Device allows a computer to access the Internet without changing the network settings, even when the IP addresses of the computer and the ZyXEL Device are not in the same subnet to allow the ...in the same subnet. The ZyXEL Device supports both IGMP version 1 (IGMP-v1) and IGMP version 2 (IGMPv2). Chapter 7 LAN Setup 115 IGMP version 2 (RFC 2236) is an improvement over version 1 (RFC 1112) but IGMP version 1 is assigned to carry user data. P-660HW-T v2 User's Guide 7.2.3 Multicast Traditionally,...
User Guide
Page 116
...lists out the steps taken, when a computer tries to access the Internet for the first time through the ZyXEL Device. 1 When a computer (which is in a different subnet) first attempts to access the Internet, it...can access the ZyXEL Device and the Internet as if it is able to a physical machine address, also known as a Media Access Control or MAC address, on the local area network. P-660HW-T v2 User's Guide...the ARP table is updated, the computer is in the same subnet as the ZyXEL Device's IP address. Note: You must enable NAT/SUA to use , to help forward data along to its own MAC address...
...lists out the steps taken, when a computer tries to access the Internet for the first time through the ZyXEL Device. 1 When a computer (which is in a different subnet) first attempts to access the Internet, it...can access the ZyXEL Device and the Internet as if it is able to a physical machine address, also known as a Media Access Control or MAC address, on the local area network. P-660HW-T v2 User's Guide...the ARP table is updated, the computer is in the same subnet as the ZyXEL Device's IP address. Note: You must enable NAT/SUA to use , to help forward data along to its own MAC address...
User Guide
Page 125
... 125 Note that inside hosts, while the web servers on the Internet are the outside host. This refers to configure NAT on the ZyXEL Device. 8.1 NAT Overview NAT (Network Address Translation - Global/local denotes the IP address of a host in a packet as the packet traverses a router, for ...ZyXEL Device, for example, the local address refers to the IP address of a host when the packet is in the local network, while the global address refers to the packet address (source or destination) as the packet travels on the WAN. P-660HW-T v2 User's Guide CHAPTER 8 Network Address Translation (NAT...
... 125 Note that inside hosts, while the web servers on the Internet are the outside host. This refers to configure NAT on the ZyXEL Device. 8.1 NAT Overview NAT (Network Address Translation - Global/local denotes the IP address of a host in a packet as the packet traverses a router, for ...ZyXEL Device, for example, the local address refers to the IP address of a host when the packet is in the local network, while the global address refers to the packet address (source or destination) as the packet travels on the WAN. P-660HW-T v2 User's Guide CHAPTER 8 Network Address Translation (NAT...
User Guide
Page 126
...address (the inside global address) back to the inside local address before forwarding the packet to the WAN side. For more information on your ZyXEL Device filters out all incoming inquiries, thus preventing intruders from a subscriber (the inside local address) to another (the inside global address) ...(local) IP addresses to globally unique ones required for Many-to-One and Many-to-Many Overload mapping - P-660HW-T v2 User's Guide 8.1.2 What NAT Does In the simplest form, NAT changes the source IP address in each packet and then forwards it to the original inside host. With no servers...
...address (the inside global address) back to the inside local address before forwarding the packet to the WAN side. For more information on your ZyXEL Device filters out all incoming inquiries, thus preventing intruders from a subscriber (the inside local address) to another (the inside global address) ...(local) IP addresses to globally unique ones required for Many-to-One and Many-to-Many Overload mapping - P-660HW-T v2 User's Guide 8.1.2 What NAT Does In the simplest form, NAT changes the source IP address in each packet and then forwards it to the original inside host. With no servers...
User Guide
Page 127
... follow at the end of IP/port mapping. Figure 71 NAT Application With IP Alias 8.1.5 NAT Mapping Types NAT supports five types of this chapter. P-660HW-T v2 User's Guide 8.1.4 NAT Application The following figure illustrates a possible NAT application, where three inside servers of different services behind the ZyXEL Device can communicate with three distinct WAN networks. This is...
... follow at the end of IP/port mapping. Figure 71 NAT Application With IP Alias 8.1.5 NAT Mapping Types NAT supports five types of this chapter. P-660HW-T v2 User's Guide 8.1.4 NAT Application The following figure illustrates a possible NAT application, where three inside servers of different services behind the ZyXEL Device can communicate with three distinct WAN networks. This is...
User Guide
Page 128
... One-to-One and Many-to-Many No Overload NAT mapping types. ILA1ÅÆ IGA1 ILA2ÅÆ IGA2 ILA3ÅÆ IGA1 ILA4ÅÆ IGA2 ... P-660HW-T v2 User's Guide Port numbers do NOT change for your ZyXEL Device. 8.3 NAT General Setup You must create a firewall rule in... addition to setting up SUA/NAT, to allow traffic from the WAN to be forwarded through the...
... One-to-One and Many-to-Many No Overload NAT mapping types. ILA1ÅÆ IGA1 ILA2ÅÆ IGA2 ILA3ÅÆ IGA1 ILA4ÅÆ IGA2 ... P-660HW-T v2 User's Guide Port numbers do NOT change for your ZyXEL Device. 8.3 NAT General Setup You must create a firewall rule in... addition to setting up SUA/NAT, to allow traffic from the WAN to be forwarded through the...
User Guide
Page 129
...sessions each client computer can raise this number to the outside world even though NAT makes your ZyXEL Device. Table 42 NAT General LABEL Active Network Address Translation (NAT) SUA Only Full Feature Max NAT/ Firewall Session Per User Apply Cancel DESCRIPTION Select this can establish. If you... IP addresses for your whole inside (behind NAT on the LAN) servers, for your changes to enable NAT. Select this radio button if you do not limit the number of the available NAT sessions being used. Figure 72 NAT General P-660HW-T v2 User's Guide The following table describes the...
...sessions each client computer can raise this number to the outside world even though NAT makes your ZyXEL Device. Table 42 NAT General LABEL Active Network Address Translation (NAT) SUA Only Full Feature Max NAT/ Firewall Session Per User Apply Cancel DESCRIPTION Select this can establish. If you... IP addresses for your whole inside (behind NAT on the LAN) servers, for your changes to enable NAT. Select this radio button if you do not limit the number of the available NAT sessions being used. Figure 72 NAT General P-660HW-T v2 User's Guide The following table describes the...