Quick Start Guide
Page 6
...-D Series Quick Start Guide 7 Click INTERNET / WIRELESS SETUP. Wait while your P662HW-D tries to the factory defaults. Do not change default settings if your DSL connection. 8 Follow the directions in Windows XP or Windows Server 2003, make sure you enable OTIST but select Disable wireless security using the wireless wizard, the P662HW-D will reset the P-662HW-D to detect your ISP did not provide them. To enable OTIST on the P-662HW-D, hold the RESET button in Internet Explorer, click Tools > Internet...
...-D Series Quick Start Guide 7 Click INTERNET / WIRELESS SETUP. Wait while your P662HW-D tries to the factory defaults. Do not change default settings if your DSL connection. 8 Follow the directions in Windows XP or Windows Server 2003, make sure you enable OTIST but select Disable wireless security using the wireless wizard, the P662HW-D will reset the P-662HW-D to detect your ISP did not provide them. To enable OTIST on the P-662HW-D, hold the RESET button in Internet Explorer, click Tools > Internet...
User Guide
Page 19
... (UPnP 303 22.1 Introducing Universal Plug and Play 303 22.1.1 How do I know if I'm using UPnP 303 22.1.2 NAT Traversal ...303 22.1.3 Cautions with UPnP 303 22.2 UPnP and ZyXEL ...304 22.2.1 Configuring UPnP 304 22.3 Installing UPnP in Windows Example 305 22.4 Using UPnP in Windows XP Example 308 Part V: Maintenance, Troubleshooting and Specifications 315 Chapter 23 System ...317 23.1 General Setup and System Name 317 23.1.1 System Configuration 317 P-662H/HW-D Series User's Guide...
... (UPnP 303 22.1 Introducing Universal Plug and Play 303 22.1.1 How do I know if I'm using UPnP 303 22.1.2 NAT Traversal ...303 22.1.3 Cautions with UPnP 303 22.2 UPnP and ZyXEL ...304 22.2.1 Configuring UPnP 304 22.3 Installing UPnP in Windows Example 305 22.4 Using UPnP in Windows XP Example 308 Part V: Maintenance, Troubleshooting and Specifications 315 Chapter 23 System ...317 23.1 General Setup and System Name 317 23.1.1 System Configuration 317 P-662H/HW-D Series User's Guide...
User Guide
Page 23
... List of Figures Figure 1 ZyXEL Device Internet Access Application 40 Figure 2 ZyXEL Device LAN-to-LAN Application Example 40 Figure 3 Firewall Application ...41 Figure 4 P-662H Front Panel ...41 Figure 5 P-662HW Front Panel ...41 Figure 6 Password Screen ...44 Figure 7 Change Password at Login ...45 Figure 8 Replace Factory Default Certificate 45 Figure 9 Select a Mode ...46 Figure 10 Web Configurator: Main Screen 47 Figure 11 Status Screen ...51 Figure 12 Status: Any IP Table ...53 Figure 13 Status: WLAN Status...
... List of Figures Figure 1 ZyXEL Device Internet Access Application 40 Figure 2 ZyXEL Device LAN-to-LAN Application Example 40 Figure 3 Firewall Application ...41 Figure 4 P-662H Front Panel ...41 Figure 5 P-662HW Front Panel ...41 Figure 6 Password Screen ...44 Figure 7 Change Password at Login ...45 Figure 8 Replace Factory Default Certificate 45 Figure 9 Select a Mode ...46 Figure 10 Web Configurator: Main Screen 47 Figure 11 Status Screen ...51 Figure 12 Status: Any IP Table ...53 Figure 13 Status: WLAN Status...
User Guide
Page 42
... wireless LAN. Red On The ZyXEL Device failed to the Quick Start Guide for information on hardware connections. 42 P-662H/HW-D Series User's Guide Blinking The CON/AUX switch is set to CON, the CON/AUX port is connected to synchronize with no DSL connection. Green On 662HW only) The ZyXEL Device is ready, but is down. Off The DSL line is not sending/receiving data through a dial-up modem. Refer to authenticate. None Off The wireless LAN is connected...
... wireless LAN. Red On The ZyXEL Device failed to the Quick Start Guide for information on hardware connections. 42 P-662H/HW-D Series User's Guide Blinking The CON/AUX switch is set to CON, the CON/AUX port is connected to synchronize with no DSL connection. Green On 662HW only) The ZyXEL Device is ready, but is down. Off The DSL line is not sending/receiving data through a dial-up modem. Refer to authenticate. None Off The wireless LAN is connected...
User Guide
Page 48
... of the firewall rules, and allows you to configure your LAN interface into subnets. Threshold Use this screen to configure ISP parameters, WAN IP address assignment, DNS servers and other advanced properties. WAN Backup Setup Use this screen to create and enable a DMZ port. DHCP Setup Use this screen to configure the threshold for servers behind the ZyXEL Device. This screen allows you to prioritize wireless traffic according to the delivery requirements of network traffic to which to configure additional WAN connections. Network Remote Node Use this...
... of the firewall rules, and allows you to configure your LAN interface into subnets. Threshold Use this screen to configure ISP parameters, WAN IP address assignment, DNS servers and other advanced properties. WAN Backup Setup Use this screen to create and enable a DMZ port. DHCP Setup Use this screen to configure the threshold for servers behind the ZyXEL Device. This screen allows you to prioritize wireless traffic according to the delivery requirements of network traffic to which to configure additional WAN connections. Network Remote Node Use this...
User Guide
Page 49
... update your ZyXEL Device. Hosts Directory Servers Use this screen to configure each VPN tunnel. Monitor Use this screen to view the ZyXEL Device's bandwidth usage and allotments. Trusted-external Use this screen to configure web sites excluded from Content Website Access Control settings. Register Registration Use this screen to register with myZyXEL.com and activate services on the ZyXEL Device. Rule Setup Use this screen to define a bandwidth rule. P-662H/HW-D Series User's Guide 49 Trusted Device Use...
... update your ZyXEL Device. Hosts Directory Servers Use this screen to configure each VPN tunnel. Monitor Use this screen to view the ZyXEL Device's bandwidth usage and allotments. Trusted-external Use this screen to configure web sites excluded from Content Website Access Control settings. Register Registration Use this screen to register with myZyXEL.com and activate services on the ZyXEL Device. Rule Setup Use this screen to define a bandwidth rule. P-662H/HW-D Series User's Guide 49 Trusted Device Use...
User Guide
Page 52
... encapsulation. The DMZ 1 port only displays if DMZ is activated. Security Firewall This displays whether or not the ZyXEL Device's firewall is enabled. Interface Status Interface This displays the ZyXEL Device port types. Content Access Control This displays whether or not the ZyXEL Device's content access control is the LAN port IP address. WLAN Status This screen displays the MAC address(es) of the ZyXEL Device's heap memory is being approached. Chapter 2 Introducing the Web Configurator Table 3 Status Screen LABEL DESCRIPTION IP Address This is...
... encapsulation. The DMZ 1 port only displays if DMZ is activated. Security Firewall This displays whether or not the ZyXEL Device's firewall is enabled. Interface Status Interface This displays the ZyXEL Device port types. Content Access Control This displays whether or not the ZyXEL Device's content access control is the LAN port IP address. WLAN Status This screen displays the MAC address(es) of the ZyXEL Device's heap memory is being approached. Chapter 2 Introducing the Web Configurator Table 3 Status Screen LABEL DESCRIPTION IP Address This is...
User Guide
Page 105
... to disable IP multicasting on the ZyXEL Device LAN and/or WAN interfaces in the same subnet. P-662H/HW-D Series User's Guide 105 The address 224.0.0.1 is used by IP multicast computers. WAN). With the Any IP feature and NAT enabled, the ZyXEL Device allows a computer to access the Internet without changing the network settings, even when the IP addresses of a computer and the ZyXEL Device to be enabled/disabled on these interfaces. 6.2.4 Any IP Traditionally, you can simply connect the computer to the ZyXEL Device and access the Internet. The...
... to disable IP multicasting on the ZyXEL Device LAN and/or WAN interfaces in the same subnet. P-662H/HW-D Series User's Guide 105 The address 224.0.0.1 is used by IP multicast computers. WAN). With the Any IP feature and NAT enabled, the ZyXEL Device allows a computer to access the Internet without changing the network settings, even when the IP addresses of a computer and the ZyXEL Device to be enabled/disabled on these interfaces. 6.2.4 Any IP Traditionally, you can simply connect the computer to the ZyXEL Device and access the Internet. The...
User Guide
Page 158
... router need only allow a remote host to internal hosts: Information hiding prevents the names of your network. The ZyXEL Device also has packet filtering capabilities. Since they can evaluate network packets for external servers. Application-level gateways have a number of general advantages over the default mode of permitting application traffic directly to use programs written for specific Internet services, such as HTTP, FTP and telnet, they use a specific service. 158 P-662H/HW-D Series User's Guide These firewalls generally...
... router need only allow a remote host to internal hosts: Information hiding prevents the names of your network. The ZyXEL Device also has packet filtering capabilities. Since they can evaluate network packets for external servers. Application-level gateways have a number of general advantages over the default mode of permitting application traffic directly to use programs written for specific Internet services, such as HTTP, FTP and telnet, they use a specific service. 158 P-662H/HW-D Series User's Guide These firewalls generally...
User Guide
Page 165
... period of the security policy (as IP addresses, TCP ports, sequence numbers, etc. Specifically, only outgoing echoes will allow incoming echo replies, outgoing address mask requests will allow incoming timestamp replies. Consider the FTP protocol. For FTP to work properly, this connection must be allowed back in this point, the remote server will allow incoming address mask replies, and outgoing timestamp requests will open a data connection from the Internet. This can be...
... period of the security policy (as IP addresses, TCP ports, sequence numbers, etc. Specifically, only outgoing echoes will allow incoming echo replies, outgoing address mask requests will allow incoming timestamp replies. Consider the FTP protocol. For FTP to work properly, this connection must be allowed back in this point, the remote server will allow incoming address mask replies, and outgoing timestamp requests will open a data connection from the Internet. This can be...
User Guide
Page 166
.... If a web site uses a secure connection, it as SNMP or NTP) that are enabled, protect against attacks. The best defense against IP spoofing by looking for a small "key" icon on " connections and are those with any local service (such as a Trojan horse with specific peers, and protect by configuring rules to block packets for hackers to strangers. 166 P-662H/HW-D Series User's Guide Many older versions of security and...
.... If a web site uses a secure connection, it as SNMP or NTP) that are enabled, protect against attacks. The best defense against IP spoofing by looking for a small "key" icon on " connections and are those with any local service (such as a Trojan horse with specific peers, and protect by configuring rules to block packets for hackers to strangers. 166 P-662H/HW-D Series User's Guide Many older versions of security and...
User Guide
Page 200
... service, two fields appear in the Content Access Control: General screen. A screen displays as shown next. For example, look at the default configuration labeled "(DNS)". (UDP/TCP:53) means UDP port 53 and TCP port 53. Next to configure URL keyword blocking for more than one IP protocol type. Click Edit under Web Browsing in brackets. Figure 115 Content Access Control: General: Web Site Filter 200 P-662H/HW-D Series User's Guide...
... service, two fields appear in the Content Access Control: General screen. A screen displays as shown next. For example, look at the default configuration labeled "(DNS)". (UDP/TCP:53) means UDP port 53 and TCP port 53. Next to configure URL keyword blocking for more than one IP protocol type. Click Edit under Web Browsing in brackets. Figure 115 Content Access Control: General: Web Site Filter 200 P-662H/HW-D Series User's Guide...
User Guide
Page 230
... IP address. Multiple SAs connecting through a secure gateway must also enable NAT traversal, and the NAT routers have the ZyXEL Device automatically reinitiate the SA after the SA lifetime times out, even if there is no traffic. The ZyXEL Device assigns this additional DNS server to the remote IPSec router's configured remote IP addresses. The remote IPSec router must be static and correspond to the ZyXEL Device's DHCP clients that services the VPN, type its IP address here. When the Local Address Type field is configured to Range, enter the beginning (static) IP address...
... IP address. Multiple SAs connecting through a secure gateway must also enable NAT traversal, and the NAT routers have the ZyXEL Device automatically reinitiate the SA after the SA lifetime times out, even if there is no traffic. The ZyXEL Device assigns this additional DNS server to the remote IPSec router's configured remote IP addresses. The remote IPSec router must be static and correspond to the ZyXEL Device's DHCP clients that services the VPN, type its IP address here. When the Local Address Type field is configured to Range, enter the beginning (static) IP address...
User Guide
Page 241
... Algorithm) are truncated. Authentication Key Type a unique authentication key to the ZyXEL Device. Apply Click Apply to save your ZyXEL Device. P-662H/HW-D Series User's Guide 241 Select MD5 for minimal security and SHA-1 for the VPN tunnel when using dial backup or the LAN IP address when using traffic redirect. If the WAN connection goes down list box. A Security Association (SA) is the group of security settings related to 31 characters) of the IPSec router with ESP) characters...
... Algorithm) are truncated. Authentication Key Type a unique authentication key to the ZyXEL Device. Apply Click Apply to save your ZyXEL Device. P-662H/HW-D Series User's Guide 241 Select MD5 for minimal security and SHA-1 for the VPN tunnel when using dial backup or the LAN IP address when using traffic redirect. If the WAN connection goes down list box. A Security Association (SA) is the group of security settings related to 31 characters) of the IPSec router with ESP) characters...
User Guide
Page 299
... screen. Table 128 Remote Management: DNS LABEL DESCRIPTION Port The DNS service port number is automatically returned. Secured Client IP A secured client is a "trusted" computer that you specify to send DNS queries to know the ZyXEL Device exists. Apply Click Apply to the ZyXEL Device. P-662H/HW-D Series User's Guide 299 The screen appears as shown. Your ZyXEL Device supports anti-probing, which prevents the ICMP response packet from discovering your customized settings and exit this...
... screen. Table 128 Remote Management: DNS LABEL DESCRIPTION Port The DNS service port number is automatically returned. Secured Client IP A secured client is a "trusted" computer that you specify to send DNS queries to know the ZyXEL Device exists. Apply Click Apply to the ZyXEL Device. P-662H/HW-D Series User's Guide 299 The screen appears as shown. Your ZyXEL Device supports anti-probing, which prevents the ICMP response packet from discovering your customized settings and exit this...
User Guide
Page 337
... working properly. If the error persists, you should contact your vendor. 27.2 Problems with the LAN Table 142 Troubleshooting the LAN PROBLEM CORRECTIVE ACTION The LAN LEDs Check your computer's Ethernet Card is connected to the ZyXEL Device and plugged in to the Quick Start Guide for faulty Ethernet cables. Turn the ZyXEL Device off and on . Make sure your Ethernet cable connections (refer to an appropriate power source. do not turn on . P-662H/HW-D Series User's Guide 337 Make sure that the IP address...
... working properly. If the error persists, you should contact your vendor. 27.2 Problems with the LAN Table 142 Troubleshooting the LAN PROBLEM CORRECTIVE ACTION The LAN LEDs Check your computer's Ethernet Card is connected to the ZyXEL Device and plugged in to the Quick Start Guide for faulty Ethernet cables. Turn the ZyXEL Device off and on . Make sure your Ethernet cable connections (refer to an appropriate power source. do not turn on . P-662H/HW-D Series User's Guide 337 Make sure that the IP address...
User Guide
Page 338
... and password, the MAC address or the host name. Your computer's and the ZyXEL Device's IP addresses must match it up windows, JavaScripts and Java permissions are allowed. 338 P-662H/HW-D Series User's Guide If you . Make sure that pop-up for LAN access. Check the schedule rules. If you will need to upload the default configuration file. Use the ZyXEL Device's WAN IP address when configuring from the LAN. If you use PPPoA or PPPoE encapsulation, check the idle time-out setting. Reset...
... and password, the MAC address or the host name. Your computer's and the ZyXEL Device's IP addresses must match it up windows, JavaScripts and Java permissions are allowed. 338 P-662H/HW-D Series User's Guide If you . Make sure that pop-up for LAN access. Check the schedule rules. If you will need to upload the default configuration file. Use the ZyXEL Device's WAN IP address when configuring from the LAN. If you use PPPoA or PPPoE encapsulation, check the idle time-out setting. Reset...
User Guide
Page 349
...Static routes tell the ZyXEL Device how to forward IP traffic when you configure the TCP/IP parameters manually. 16 IP and 4 Bridge Traffic Redirect Traffic redirect forwards WAN traffic to a backup gateway when the ZyXEL Device cannot connect to web screen(s) for information input or troubleshooting. Public servers (Web, FTP, etc.) attached to the DMZ port are visible to web sites with other IPSec-based VPN products. You can function as a virtual DeMilitarized Zone (DMZ) port. Chapter 28 Product Specifications Table 146 Firmware Specifications (continued) Network...
...Static routes tell the ZyXEL Device how to forward IP traffic when you configure the TCP/IP parameters manually. 16 IP and 4 Bridge Traffic Redirect Traffic redirect forwards WAN traffic to a backup gateway when the ZyXEL Device cannot connect to web screen(s) for information input or troubleshooting. Public servers (Web, FTP, etc.) attached to the DMZ port are visible to web sites with other IPSec-based VPN products. You can function as a virtual DeMilitarized Zone (DMZ) port. Chapter 28 Product Specifications Table 146 Firmware Specifications (continued) Network...
User Guide
Page 350
... a Virtual Private Network (VPN). Logging and Tracing Use packet tracing and logs for example, with a Dynamic DNS service provider. The ZyXEL Device supports one PPTP connection at a time. Universal Plug and Play A UPnP-enabled device can dynamically join a network, obtain an IP address (UPnP) and convey its ESSID and security settings (WEP or WPA-PSK) to protect your ZyXEL Device. Configuration Backup & Make a copy of the computer and the ZyXEL Device are not in logs. IP Multicast IP multicast is used to other wireless LANs. PPPoE PPPoE mimics a dial-up Internet access...
... a Virtual Private Network (VPN). Logging and Tracing Use packet tracing and logs for example, with a Dynamic DNS service provider. The ZyXEL Device supports one PPTP connection at a time. Universal Plug and Play A UPnP-enabled device can dynamically join a network, obtain an IP address (UPnP) and convey its ESSID and security settings (WEP or WPA-PSK) to protect your ZyXEL Device. Configuration Backup & Make a copy of the computer and the ZyXEL Device are not in logs. IP Multicast IP multicast is used to other wireless LANs. PPPoE PPPoE mimics a dial-up Internet access...
User Guide
Page 356
... Networks. Appendix A Setting up Your Computer's IP Address Figure 216 WIndows 95/98/Me: Network: Configuration Installing Components The Network window Configuration tab displays a list of network protocols and then click OK. If you need Client for Microsoft Networks: 1 Click Add. 2 Select Client and then click Add. 3 Select Microsoft from the list of network clients and then click OK. 5 Restart your network adapter and then click OK. If you made take effect. 356 P-662H/HW-D Series User's Guide...
... Networks. Appendix A Setting up Your Computer's IP Address Figure 216 WIndows 95/98/Me: Network: Configuration Installing Components The Network window Configuration tab displays a list of network protocols and then click OK. If you need Client for Microsoft Networks: 1 Click Add. 2 Select Client and then click Add. 3 Select Microsoft from the list of network clients and then click OK. 5 Restart your network adapter and then click OK. If you made take effect. 356 P-662H/HW-D Series User's Guide...