User Guide
Page 9
... Screens ...35 Tutorials ...41 Technical Reference ...77 Internet and Wireless Setup Wizard...79 WAN Setup ...93 LAN Setup ...109 Wireless LAN ...123 Network Address Translation (NAT) ...151 Firewall ...163 Filters ...181 Certificate ...189 Static Route ...193 Port Binding ...199 802.1Q/1P ...203 Quality of Service (QoS) ...209 Dynamic DNS Setup...
... Screens ...35 Tutorials ...41 Technical Reference ...77 Internet and Wireless Setup Wizard...79 WAN Setup ...93 LAN Setup ...109 Wireless LAN ...123 Network Address Translation (NAT) ...151 Firewall ...163 Filters ...181 Certificate ...189 Static Route ...193 Port Binding ...199 802.1Q/1P ...203 Quality of Service (QoS) ...209 Dynamic DNS Setup...
User Guide
Page 12
...a Secure Wireless Network 45 4.4.1 Configuring the Wireless Network Settings 45 4.4.2 Using WPS ...46 4.4.3 Connecting Wirelessly to your ZyXEL Device 50 4.5 Configuring the MAC Address Filter for Restricting Wireless Internet Access 52 4.6 Multiple Public and Private IP Address Mappings 54 4.6.1 Full... Feature NAT + Many-to-Many No Overload Mapping 55 4.6.2 Full Feature NAT + One-to-One Mapping 57 4.7 Setting Up NAT Forwarding for a Game Server 58 4.7.1 Port Forwarding ...58 4.8 Configuring Firewall Rules...
...a Secure Wireless Network 45 4.4.1 Configuring the Wireless Network Settings 45 4.4.2 Using WPS ...46 4.4.3 Connecting Wirelessly to your ZyXEL Device 50 4.5 Configuring the MAC Address Filter for Restricting Wireless Internet Access 52 4.6 Multiple Public and Private IP Address Mappings 54 4.6.1 Full... Feature NAT + Many-to-Many No Overload Mapping 55 4.6.2 Full Feature NAT + One-to-One Mapping 57 4.7 Setting Up NAT Forwarding for a Game Server 58 4.7.1 Port Forwarding ...58 4.8 Configuring Firewall Rules...
User Guide
Page 13
... ...104 6.4.1 Encapsulation ...104 6.4.2 Multiplexing ...105 6.4.3 VPI and VCI ...106 6.4.4 IP Address Assignment ...106 6.4.5 Nailed-Up Connection (PPP 106 6.4.6 NAT ...107 6.5 Traffic Shaping ...107 6.5.1 ATM Traffic Classes ...108 Chapter 7 LAN Setup ...109 7.1 Overview ...109 7.1.1 What You Can Do in the... 7.5.1 Configuring the LAN IP Alias Screen 115 7.6 The IPv6 Screen ...116 7.7 LAN Technical Reference ...119 7.7.1 LANs, WANs and the ZyXEL Device 119 7.7.2 DHCP Setup ...119 7.7.3 DNS Server Addresses ...119 7.7.4 LAN TCP/IP ...120 7.7.5 RIP Setup ...121 7.7.6 Multicast ...121 ADSL...
... ...104 6.4.1 Encapsulation ...104 6.4.2 Multiplexing ...105 6.4.3 VPI and VCI ...106 6.4.4 IP Address Assignment ...106 6.4.5 Nailed-Up Connection (PPP 106 6.4.6 NAT ...107 6.5 Traffic Shaping ...107 6.5.1 ATM Traffic Classes ...108 Chapter 7 LAN Setup ...109 7.1 Overview ...109 7.1.1 What You Can Do in the... 7.5.1 Configuring the LAN IP Alias Screen 115 7.6 The IPv6 Screen ...116 7.7 LAN Technical Reference ...119 7.7.1 LANs, WANs and the ZyXEL Device 119 7.7.2 DHCP Setup ...119 7.7.3 DNS Server Addresses ...119 7.7.4 LAN TCP/IP ...120 7.7.5 RIP Setup ...121 7.7.6 Multicast ...121 ADSL...
User Guide
Page 14
...Distribution System (WDS 143 8.8.8 WiFi Protected Setup (WPS 143 Chapter 9 Network Address Translation (NAT 151 9.1 Overview ...151 9.1.1 What You Can Do in the NAT Screens 151 9.1.2 What You Need To Know About NAT 151 9.2 The NAT General Setup Screen ...152 9.3 The Port Forwarding Screen ...153 9.3.1 Configuring the Port Forwarding ...Edit Screen 155 9.4 The Address Mapping Screen ...156 9.4.1 The Address Mapping Rule Edit Screen 157 9.5 The ALG Screen ...158 9.6 NAT Technical Reference ...159 9.6.1 NAT Definitions ...159 9.6.2 What NAT Does ...160 14 ADSL Router Series User's Guide
...Distribution System (WDS 143 8.8.8 WiFi Protected Setup (WPS 143 Chapter 9 Network Address Translation (NAT 151 9.1 Overview ...151 9.1.1 What You Can Do in the NAT Screens 151 9.1.2 What You Need To Know About NAT 151 9.2 The NAT General Setup Screen ...152 9.3 The Port Forwarding Screen ...153 9.3.1 Configuring the Port Forwarding ...Edit Screen 155 9.4 The Address Mapping Screen ...156 9.4.1 The Address Mapping Rule Edit Screen 157 9.5 The ALG Screen ...158 9.6 NAT Technical Reference ...159 9.6.1 NAT Definitions ...159 9.6.2 What NAT Does ...160 14 ADSL Router Series User's Guide
User Guide
Page 15
Table of Contents 9.6.3 How NAT Works ...160 9.6.4 NAT Application ...161 9.6.5 NAT Mapping Types ...161 Chapter 10 Firewall ...163 10.1 Overview ...163 10.1.1 What You Can Do in the Firewall Screens 163 10.1.2 What You Need to ...
Table of Contents 9.6.3 How NAT Works ...160 9.6.4 NAT Application ...161 9.6.5 NAT Mapping Types ...161 Chapter 10 Firewall ...163 10.1 Overview ...163 10.1.1 What You Can Do in the Firewall Screens 163 10.1.2 What You Need to ...
User Guide
Page 23
... Router series includes the P-660HN-TxA, P-660HN-Tx, P-660N-TxA, P-660HN-T1H, P660HNU-Tx and P-660HU-Tx (x stands for everyday management of the ZyXEL Device using a (supported) web browser. • Command Line Interface. The ZyXEL Device is also a complete security solution with ease of the... Network) or T-ISDN (UR-2). This is an auto-configuration server used to remotely configure your ZyXEL Device's specific model. By integrating DSL and NAT, you are mostly used to manage the ZyXEL Device. • Web Configurator. The "N" models support 802.11n wireless connection mode. •...
... Router series includes the P-660HN-TxA, P-660HN-Tx, P-660N-TxA, P-660HN-T1H, P660HNU-Tx and P-660HU-Tx (x stands for everyday management of the ZyXEL Device using a (supported) web browser. • Command Line Interface. The ZyXEL Device is also a complete security solution with ease of the... Network) or T-ISDN (UR-2). This is an auto-configuration server used to remotely configure your ZyXEL Device's specific model. By integrating DSL and NAT, you are mostly used to manage the ZyXEL Device. • Web Configurator. The "N" models support 802.11n wireless connection mode. •...
User Guide
Page 32
... IPv6/MAC filtering rules for incoming or outgoing traffic. Table 2 Navigation Panel Summary LINK TAB FUNCTION Status This screen shows the ZyXEL Device's general device and network status information. Client List Use this screen to configure LAN TCP/IP settings, and other advanced properties...screen to view current DHCP client information and to assign specific IP addresses to enable NAT. NAT General Use this screen to set the default action that the firewall takes on the ZyXEL device's LAN interface. LAN IP Use this screen to individual MAC addresses (and host...
... IPv6/MAC filtering rules for incoming or outgoing traffic. Table 2 Navigation Panel Summary LINK TAB FUNCTION Status This screen shows the ZyXEL Device's general device and network status information. Client List Use this screen to configure LAN TCP/IP settings, and other advanced properties...screen to view current DHCP client information and to assign specific IP addresses to enable NAT. NAT General Use this screen to set the default action that the firewall takes on the ZyXEL device's LAN interface. LAN IP Use this screen to individual MAC addresses (and host...
User Guide
Page 41
... Address Filter for Restricting Wireless Internet Access, see page 52 • Multiple Public and Private IP Address Mappings, see page 54 • Setting Up NAT Forwarding for a Game Server, see page 58 • Configuring Firewall Rules to Allow a Specified Service, see page 60 • Configuring Static Route ...modem provided by your ISP. 3 Connect one end of a DSL cable to the DSL port of Ethernet cable to an Ethernet port on the ZyXEL Device's hardware connection. 2 Connect one end of your Internet connection using the web configurator. Refer to the Quick Start Guide for the POWER ...
... Address Filter for Restricting Wireless Internet Access, see page 52 • Multiple Public and Private IP Address Mappings, see page 54 • Setting Up NAT Forwarding for a Game Server, see page 58 • Configuring Firewall Rules to Allow a Specified Service, see page 60 • Configuring Static Route ...modem provided by your ISP. 3 Connect one end of a DSL cable to the DSL port of Ethernet cable to an Ethernet port on the ZyXEL Device's hardware connection. 2 Connect one end of your Internet connection using the web configurator. Refer to the Quick Start Guide for the POWER ...
User Guide
Page 55
.... Chapter 4 Tutorials This tutorial uses the following example settings: Table 4 IP Settings in this Tutorial DEVICE / COMPUTER IP ADDRESS The ZyXEL Device's WAN 172.16.1.253 (IP-1) The ZyXEL Device's LAN A B C 172.16.1.254 (IP-2) 192.168.1.1 192.168.1.2 192.168.1.3 a.b.c.d To do this, you can... use either of the following settings: • Full Feature NAT with many-to-many no overload mapping • Full Feature NAT with one-to-one mapping 4.6.1 Full Feature NAT + ...
.... Chapter 4 Tutorials This tutorial uses the following example settings: Table 4 IP Settings in this Tutorial DEVICE / COMPUTER IP ADDRESS The ZyXEL Device's WAN 172.16.1.253 (IP-1) The ZyXEL Device's LAN A B C 172.16.1.254 (IP-2) 192.168.1.1 192.168.1.2 192.168.1.3 a.b.c.d To do this, you can... use either of the following settings: • Full Feature NAT with many-to-many no overload mapping • Full Feature NAT with one-to-one mapping 4.6.1 Full Feature NAT + ...
User Guide
Page 56
EXAMPLE 4 Configure the rule using the following settings: • Type: Many-to-Many No Overload • Local IP addresses: 192.168.1.2 ~ 192.168.1.3 • Global IP addresses: 172.16.1.253 ~ 172.16.1.254 Then click Apply. 56 ADSL Router Series User's Guide Click Apply. EXAMPLE 3 Click the Address Mapping tab, and then click the Edit icon on a new rule. Chapter 4 Tutorials 2 Select Active Network Address Translation(NAT) and Full Feature in the General screen.
EXAMPLE 4 Configure the rule using the following settings: • Type: Many-to-Many No Overload • Local IP addresses: 192.168.1.2 ~ 192.168.1.3 • Global IP addresses: 172.16.1.253 ~ 172.16.1.254 Then click Apply. 56 ADSL Router Series User's Guide Click Apply. EXAMPLE 3 Click the Address Mapping tab, and then click the Edit icon on a new rule. Chapter 4 Tutorials 2 Select Active Network Address Translation(NAT) and Full Feature in the General screen.
User Guide
Page 57
... the private IP address 192.168.1.2) Type: One-to -One Mapping Use this setting: 1 Click Network > NAT. 2 Select Active Network Address Translation(NAT) and Full Feature in the General screen. Click Apply. Chapter 4 Tutorials 4.6.2 Full Feature NAT + One-to -One Local Start IP: 192.168.1.2 Global Start IP: 172.16.1.253 ADSL Router...
... the private IP address 192.168.1.2) Type: One-to -One Mapping Use this setting: 1 Click Network > NAT. 2 Select Active Network Address Translation(NAT) and Full Feature in the General screen. Click Apply. Chapter 4 Tutorials 4.6.2 Full Feature NAT + One-to -One Local Start IP: 192.168.1.2 Global Start IP: 172.16.1.253 ADSL Router...
User Guide
Page 58
... Traffic should be forwarded to port 666 of the Doom server computer which has an IP address of the screens. 4.7 Setting Up NAT Forwarding for players on the Internet (like A in the figure below) to configure the port settings and IP address on a computer behind the... ZyXEL Device. In order for a Game Server Thomas manages a Doom server on the ZyXEL Device. Tutorial: NAT Port Forwarding Setup D=192.168.1.34 LAN port 666 WAN A 4.7.1 Port Forwarding Thomas needs to communicate with...
... Traffic should be forwarded to port 666 of the Doom server computer which has an IP address of the screens. 4.7 Setting Up NAT Forwarding for players on the Internet (like A in the figure below) to configure the port settings and IP address on a computer behind the... ZyXEL Device. In order for a Game Server Thomas manages a Doom server on the ZyXEL Device. Tutorial: NAT Port Forwarding Setup D=192.168.1.34 LAN port 666 WAN A 4.7.1 Port Forwarding Thomas needs to communicate with...
User Guide
Page 59
...for this example. 2 The screen should look as the Start and End port. Configure the screen with IP address 192.168.1.34. The ZyXEL Device forwards port 666 traffic to Thomas' Doom server. Chapter 4 Tutorials Thomas may set up the port settings by configuring the port settings ... Service Name Start/End Port/s Server IP Address Doom_Server Enter 666 as follows. This is 192.168.1.34 for more information). 1 Click Network > NAT > Port Forwarding and in the table. EXAMPLE 3 The port forwarding settings you configured appear in the Service Name field select User Define. Click Apply...
...for this example. 2 The screen should look as the Start and End port. Configure the screen with IP address 192.168.1.34. The ZyXEL Device forwards port 666 traffic to Thomas' Doom server. Chapter 4 Tutorials Thomas may set up the port settings by configuring the port settings ... Service Name Start/End Port/s Server IP Address Doom_Server Enter 666 as follows. This is 192.168.1.34 for more information). 1 Click Network > NAT > Port Forwarding and in the table. EXAMPLE 3 The port forwarding settings you configured appear in the Service Name field select User Define. Click Apply...
User Guide
Page 60
The following tutorial will block traffic originating from the WAN (1). Tutorial: Advanced > QoS 60 ADSL Router Series User's Guide Click Apply to save your settings. However, if you are running a server or other service, you may need to allow traffic from the WAN (2). Chapter 4 Tutorials 4.8 Configuring Firewall Rules to Allow a Specified Service By default the firewall will show how to allow access from WAN to LAN if it matches a specified port number. Tutorial: NAT Port Forwarding Setup LAN WAN A 2 1 1 Click Security > Firewall and select Custom.
The following tutorial will block traffic originating from the WAN (1). Tutorial: Advanced > QoS 60 ADSL Router Series User's Guide Click Apply to save your settings. However, if you are running a server or other service, you may need to allow traffic from the WAN (2). Chapter 4 Tutorials 4.8 Configuring Firewall Rules to Allow a Specified Service By default the firewall will show how to allow access from WAN to LAN if it matches a specified port number. Tutorial: NAT Port Forwarding Setup LAN WAN A 2 1 1 Click Security > Firewall and select Custom.
User Guide
Page 82
...account. Leave the defaults in any fields for more than one IP address only and you cannot use Firewall, DHCP server and NAT on what you select Routing in the wizard screen exactly as your service provider gave it to you. Encapsulation Select the encapsulation...ISP Parameters The following table describes the fields in the Mode field. Chapter 5 Internet and Wireless Setup Wizard 5.2.1 Manual Configuration 1 If the ZyXEL Device fails to detect your DSL connection type but the physical line is available. VPI (Virtual Path Identifier) and VCI (Virtual Channel Identifier) ...
...account. Leave the defaults in any fields for more than one IP address only and you cannot use Firewall, DHCP server and NAT on what you select Routing in the wizard screen exactly as your service provider gave it to you. Encapsulation Select the encapsulation...ISP Parameters The following table describes the fields in the Mode field. Chapter 5 Internet and Wireless Setup Wizard 5.2.1 Manual Configuration 1 If the ZyXEL Device fails to detect your DSL connection type but the physical line is available. VPI (Virtual Path Identifier) and VCI (Virtual Channel Identifier) ...
User Guide
Page 96
... from the drop-down list box. Select the method of encapsulation used by your ISP. If you cannot use Firewall, DHCP server and NAT on the ZyXEL Device. CHAP - Virtual Circuit ID VPI VCI PAP - VPI (Virtual Path Identifier) and VCI (Virtual Channel Identifier) define a virtual circuit...an authentication protocol for the VCI is more information. Chapter 6 WAN Setup The following table describes the labels in this remote node. Your ZyXEL Device accepts either CHAP or PAP when requested by your ISP. General Mode Encapsulation Available options are : AUTO - CHAP is 32 to 65535...
... from the drop-down list box. Select the method of encapsulation used by your ISP. If you cannot use Firewall, DHCP server and NAT on the ZyXEL Device. CHAP - Virtual Circuit ID VPI VCI PAP - VPI (Virtual Path Identifier) and VCI (Virtual Channel Identifier) define a virtual circuit...an authentication protocol for the VCI is more information. Chapter 6 WAN Setup The following table describes the labels in this remote node. Your ZyXEL Device accepts either CHAP or PAP when requested by your ISP. General Mode Encapsulation Available options are : AUTO - CHAP is 32 to 65535...
User Guide
Page 103
... Setup screen and edit more details of the default gateway If Static IP Address is enabled, enter the primary DNS server IPv6 address for the ZyXEL Device. Click this screen to edit a server mapping set. Back Apply Advanced Setup Click this to the previous screen without saving. IPv6 DNS Server2 ...when you want your changes. Specify an idle time-out in the Max Idle Timeout field. Select SUA Only if you don't want to disable NAT. Click this to return to save your connection up all the time and specify an idle time-out in the Max Idle Timeout field when...
... Setup screen and edit more details of the default gateway If Static IP Address is enabled, enter the primary DNS server IPv6 address for the ZyXEL Device. Click this screen to edit a server mapping set. Back Apply Advanced Setup Click this to the previous screen without saving. IPv6 DNS Server2 ...when you want your changes. Specify an idle time-out in the Max Idle Timeout field. Select SUA Only if you don't want to disable NAT. Click this to return to save your connection up all the time and specify an idle time-out in the Max Idle Timeout field when...
User Guide
Page 105
...is for Point to the Internet Service Provider's (ISP) DSLAM (Digital Subscriber Line (DSL) Access Multiplexer). By implementing PPPoE directly on the ZyXEL Device (rather than individual computers), the computers on RFC1483 and sends it through an ATM PVC (Permanent Virtual Circuit) to Point Protocol over ...ENCAP requires that they can get this information from your ISP. The ZyXEL Device encapsulates the PPP session based on the LAN do not need PPPoE software installed, since the ZyXEL Device does that works with NAT, all of the broadband modem at the customer site. Refer to let...
...is for Point to the Internet Service Provider's (ISP) DSLAM (Digital Subscriber Line (DSL) Access Multiplexer). By implementing PPPoE directly on the ZyXEL Device (rather than individual computers), the computers on RFC1483 and sends it through an ATM PVC (Permanent Virtual Circuit) to Point Protocol over ...ENCAP requires that they can get this information from your ISP. The ZyXEL Device encapsulates the PPP session based on the LAN do not need PPPoE software installed, since the ZyXEL Device does that works with NAT, all of the broadband modem at the customer site. Refer to let...
User Guide
Page 107
... (up connection unless your upstream line rate. This parameter may not be sent at the PCR. Sustained Cell Rate (SCR) is of no concern. 6.4.6 NAT NAT (Network Address Translation - Maximum Burst Size (MBS) is the maximum number of cells that correlates to the SCR again. Chapter 6 WAN Setup Do not ... traffic source. If the PCR, SCR or MBS is important for example, the source address of real time data such as audio and video connections. NAT, RFC 1631) is the translation of the IP address of a host in a packet, for transmission of an outgoing packet, used within one network to ...
... (up connection unless your upstream line rate. This parameter may not be sent at the PCR. Sustained Cell Rate (SCR) is of no concern. 6.4.6 NAT NAT (Network Address Translation - Maximum Burst Size (MBS) is the maximum number of cells that correlates to the SCR again. Chapter 6 WAN Setup Do not ... traffic source. If the PCR, SCR or MBS is important for example, the source address of real time data such as audio and video connections. NAT, RFC 1631) is the translation of the IP address of a host in a packet, for transmission of an outgoing packet, used within one network to ...
User Guide
Page 120
... problems. However, the Internet Assigned Numbers Authority (IANA) has reserved the following three blocks of the DHCP setup under all circumstances. Your ZyXEL Device will assign you select 192.168.1.0 as the network number; Private IP Addresses Every machine on a LAN share one common network number...the connection is recommended that you select a network number from 192.168.1.1 to do computers on the Internet must enable the Network Address Translation (NAT) feature of addresses specifically for private networks: • 10.0.0.0 - 10.255.255.255 • 172.16.0.0 - 172.31.255.255...
... problems. However, the Internet Assigned Numbers Authority (IANA) has reserved the following three blocks of the DHCP setup under all circumstances. Your ZyXEL Device will assign you select 192.168.1.0 as the network number; Private IP Addresses Every machine on a LAN share one common network number...the connection is recommended that you select a network number from 192.168.1.1 to do computers on the Internet must enable the Network Address Translation (NAT) feature of addresses specifically for private networks: • 10.0.0.0 - 10.255.255.255 • 172.16.0.0 - 172.31.255.255...