Quick Start Guide
Page 6
Do not change default settings if your DSL connection. 8 Follow the directions in for more information, see Wireless LAN in the RESET button for one to detect your ISP did not provide them. OTIST ZyXEL's One-Touch Intelligent Security Technology (OTIST) feature allows you enable OTIST but select Disable wireless security using the wireless wizard, the P- 662HW-D will replace the WEP key with a WPA-PSK. The Setup Key is connected to the ETHERNET port, follow these steps. 6 Note: If...
Do not change default settings if your DSL connection. 8 Follow the directions in for more information, see Wireless LAN in the RESET button for one to detect your ISP did not provide them. OTIST ZyXEL's One-Touch Intelligent Security Technology (OTIST) feature allows you enable OTIST but select Disable wireless security using the wireless wizard, the P- 662HW-D will replace the WEP key with a WPA-PSK. The Setup Key is connected to the ETHERNET port, follow these steps. 6 Note: If...
User Guide
Page 19
... (UPnP 303 22.1 Introducing Universal Plug and Play 303 22.1.1 How do I know if I'm using UPnP 303 22.1.2 NAT Traversal ...303 22.1.3 Cautions with UPnP 303 22.2 UPnP and ZyXEL ...304 22.2.1 Configuring UPnP 304 22.3 Installing UPnP in Windows Example 305 22.4 Using UPnP in Windows XP Example 308 Part V: Maintenance, Troubleshooting and Specifications 315 Chapter 23 System ...317 23.1 General Setup and System Name 317 23.1.1 System Configuration 317 P-662H/HW-D Series User's Guide...
... (UPnP 303 22.1 Introducing Universal Plug and Play 303 22.1.1 How do I know if I'm using UPnP 303 22.1.2 NAT Traversal ...303 22.1.3 Cautions with UPnP 303 22.2 UPnP and ZyXEL ...304 22.2.1 Configuring UPnP 304 22.3 Installing UPnP in Windows Example 305 22.4 Using UPnP in Windows XP Example 308 Part V: Maintenance, Troubleshooting and Specifications 315 Chapter 23 System ...317 23.1 General Setup and System Name 317 23.1.1 System Configuration 317 P-662H/HW-D Series User's Guide...
User Guide
Page 23
... List of Figures Figure 1 ZyXEL Device Internet Access Application 40 Figure 2 ZyXEL Device LAN-to-LAN Application Example 40 Figure 3 Firewall Application ...41 Figure 4 P-662H Front Panel ...41 Figure 5 P-662HW Front Panel ...41 Figure 6 Password Screen ...44 Figure 7 Change Password at Login ...45 Figure 8 Replace Factory Default Certificate 45 Figure 9 Select a Mode ...46 Figure 10 Web Configurator: Main Screen 47 Figure 11 Status Screen ...51 Figure 12 Status: Any IP Table ...53 Figure 13 Status: WLAN Status...
... List of Figures Figure 1 ZyXEL Device Internet Access Application 40 Figure 2 ZyXEL Device LAN-to-LAN Application Example 40 Figure 3 Firewall Application ...41 Figure 4 P-662H Front Panel ...41 Figure 5 P-662HW Front Panel ...41 Figure 6 Password Screen ...44 Figure 7 Change Password at Login ...45 Figure 8 Replace Factory Default Certificate 45 Figure 9 Select a Mode ...46 Figure 10 Web Configurator: Main Screen 47 Figure 11 Status Screen ...51 Figure 12 Status: Any IP Table ...53 Figure 13 Status: WLAN Status...
User Guide
Page 42
... set to CON, the CON/AUX port is connected to AUX and the CON/AUX port is connected with the ZyXEL Device. Refer to authenticate. Off The system is not receiving power or there is sending/receiving data. Off The DSL line is sending/receiving data through the wireless LAN. Blinking The ZyXEL Device is down. Red On The ZyXEL Device failed to the Quick Start Guide for information on hardware connections. 42 P-662H/HW-D Series User's Guide...
... set to CON, the CON/AUX port is connected to AUX and the CON/AUX port is connected with the ZyXEL Device. Refer to authenticate. Off The system is not receiving power or there is sending/receiving data. Off The DSL line is sending/receiving data through the wireless LAN. Blinking The ZyXEL Device is down. Red On The ZyXEL Device failed to the Quick Start Guide for information on hardware connections. 42 P-662H/HW-D Series User's Guide...
User Guide
Page 48
.... WAN Internet Access Setup This screen allows you to prioritize wireless traffic according to the delivery requirements of the firewall rules, and allows you to configure your LAN interface into subnets. Use this screen to configure IP address ranges for DoS attacks. 48 P-662H/HW-D Series User's Guide WAN Backup Setup Use this screen to configure servers behind the ZyXEL Device. QoS WMM QoS allows you to access the summary statistics tables. Port Forwarding Use this screen to configure ISP parameters, WAN IP address assignment, DNS servers and...
.... WAN Internet Access Setup This screen allows you to prioritize wireless traffic according to the delivery requirements of the firewall rules, and allows you to configure your LAN interface into subnets. Use this screen to configure IP address ranges for DoS attacks. 48 P-662H/HW-D Series User's Guide WAN Backup Setup Use this screen to configure servers behind the ZyXEL Device. QoS WMM QoS allows you to access the summary statistics tables. Port Forwarding Use this screen to configure ISP parameters, WAN IP address assignment, DNS servers and...
User Guide
Page 49
... or certification requests and import the ZyXEL Device's CAsigned certificates. P-662H/HW-D Series User's Guide 49 Advanced Static Route Use this screen to configure IP static routes. Online Status Use this screen to configure a list of addresses of directory servers (that contain lists of the services you subscribe to set up dynamic DNS. Hosts Directory Servers Use this screen to define a bandwidth rule. Rule Setup Use this screen to . Schedule Use this screen to view information about users accessing the Internet.
... or certification requests and import the ZyXEL Device's CAsigned certificates. P-662H/HW-D Series User's Guide 49 Advanced Static Route Use this screen to configure IP static routes. Online Status Use this screen to configure a list of addresses of directory servers (that contain lists of the services you subscribe to set up dynamic DNS. Hosts Directory Servers Use this screen to define a bandwidth rule. Rule Setup Use this screen to . Schedule Use this screen to view information about users accessing the Internet.
User Guide
Page 52
... red when the maximum is activated. WLAN Information (wireless devices only) SSID This is the LAN port IP subnet mask. CPU Usage This number shows how many kilobytes of the ZyXEL Device's heap memory is in use . The bar turns from green to identify the ZyXEL Device in use . Server, Relay or None. Channel This is activated. WEP This displays the status of the ZyXEL Device's heap memory is in the wireless LAN. Content Access Control...
... red when the maximum is activated. WLAN Information (wireless devices only) SSID This is the LAN port IP subnet mask. CPU Usage This number shows how many kilobytes of the ZyXEL Device's heap memory is in use . The bar turns from green to identify the ZyXEL Device in use . Server, Relay or None. Channel This is activated. WEP This displays the status of the ZyXEL Device's heap memory is in the wireless LAN. Content Access Control...
User Guide
Page 105
... disable IP multicasting on the ZyXEL Device LAN and/or WAN interfaces in order to use the computer to access the Internet (through the ZyXEL Device). In a residential house where a ZyXEL Device is installed, you must join the 224.0.0.1 group in the web configurator (LAN; P-662H/HW-D Series User's Guide 105 WAN). With the Any IP feature and NAT enabled, the ZyXEL Device allows a computer to access the Internet via the ZyXEL Device. In cases where your computer is required to use a dynamic or static (fixed) IP address...
... disable IP multicasting on the ZyXEL Device LAN and/or WAN interfaces in order to use the computer to access the Internet (through the ZyXEL Device). In a residential house where a ZyXEL Device is installed, you must join the 224.0.0.1 group in the web configurator (LAN; P-662H/HW-D Series User's Guide 105 WAN). With the Any IP feature and NAT enabled, the ZyXEL Device allows a computer to access the Internet via the ZyXEL Device. In cases where your computer is required to use a dynamic or static (fixed) IP address...
User Guide
Page 126
..., OTIST will not replace the WPA-PSK. Click Start to encrypt the wireless security data using the setup key and have the ZyXEL Device set the wireless station to complete. Note: You can also start OTIST on the wireless client(s). Yes! checkbox in WPA-PSK security mode. The process takes three minutes to use that WPA- Note: If you change on the wireless station at the same time. Note: If you...
..., OTIST will not replace the WPA-PSK. Click Start to encrypt the wireless security data using the setup key and have the ZyXEL Device set the wireless station to complete. Note: You can also start OTIST on the wireless client(s). Yes! checkbox in WPA-PSK security mode. The process takes three minutes to use that WPA- Note: If you change on the wireless station at the same time. Note: If you...
User Guide
Page 158
... be logged more information on IP address and protocol. The ZyXEL Device has one DSL/ISDN port and one type or another, have access to Internet services such as e-mail, FTP, and the World Wide Web. This allows it to be important to the security of computers, which may lack the granular application level access control or caching that some proxies support. Firewalls, of one Ethernet LAN port, which physically separate the network...
... be logged more information on IP address and protocol. The ZyXEL Device has one DSL/ISDN port and one type or another, have access to Internet services such as e-mail, FTP, and the World Wide Web. This allows it to be important to the security of computers, which may lack the granular application level access control or caching that some proxies support. Firewalls, of one Ethernet LAN port, which physically separate the network...
User Guide
Page 165
.... P-662H/HW-D Series User's Guide 165 In general terms, they are used to pass through the firewall. This can use the web configurator's Custom Ports feature to pass through attacking machines. 10.5.5 Upper Layer Protocols Some higher layer protocols (such as FTP and RealAudio) utilize multiple network connections simultaneously. A packet is only allowed to do not themselves contain any connection information (such as IP addresses, TCP ports, sequence numbers, etc. Specifically, it...
.... P-662H/HW-D Series User's Guide 165 In general terms, they are used to pass through the firewall. This can use the web configurator's Custom Ports feature to pass through attacking machines. 10.5.5 Upper Layer Protocols Some higher layer protocols (such as FTP and RealAudio) utilize multiple network connections simultaneously. A packet is only allowed to do not themselves contain any connection information (such as IP addresses, TCP ports, sequence numbers, etc. Specifically, it...
User Guide
Page 166
... creative ways to misuse the enabled services to access the firewall or the network. • For local services that you reveal to people outside your browser (Internet Explorer 3.02 or better or Netscape 3.0 or better). Protect by configuring the services to communicate only with other system networking information to strangers. 166 P-662H/HW-D Series User's Guide If a web site uses a secure connection, it as passwords, credit card information, etc., without encrypting...
... creative ways to misuse the enabled services to access the firewall or the network. • For local services that you reveal to people outside your browser (Internet Explorer 3.02 or better or Netscape 3.0 or better). Protect by configuring the services to communicate only with other system networking information to strangers. 166 P-662H/HW-D Series User's Guide If a web site uses a secure connection, it as passwords, credit card information, etc., without encrypting...
User Guide
Page 200
... on commonly used services. 13.2.3 Configuring Web Site Filters Use this screen to enable content filtering and to configure URL keyword blocking for a user group. For example, look at the default configuration labeled "(DNS)". (UDP/TCP:53) means UDP port 53 and TCP port 53. Figure 115 Content Access Control: General: Web Site Filter 200 P-662H/HW-D Series User's Guide The second field indicates the IP port number that defines the service. (Note that the ZyXEL Device supports. A screen...
... on commonly used services. 13.2.3 Configuring Web Site Filters Use this screen to enable content filtering and to configure URL keyword blocking for a user group. For example, look at the default configuration labeled "(DNS)". (UDP/TCP:53) means UDP port 53 and TCP port 53. Figure 115 Content Access Control: General: Web Site Filter 200 P-662H/HW-D Series User's Guide The second field indicates the IP port number that defines the service. (Note that the ZyXEL Device supports. A screen...
User Guide
Page 230
... keep alive enabled in order for troubleshooting if you have to forward UDP port 500 packets to the remote IPSec router's configured remote IP addresses. The remote IPSec router must be static and correspond to the remote IPSec router behind your ZyXEL Device. 230 P-662H/HW-D Series User's Guide Select this feature to identify this VPN policy. You may use any time. Negotiation Mode Select Main or Aggressive from the drop-down list box. Local Local Address Type IP Address Start Local IP addresses must...
... keep alive enabled in order for troubleshooting if you have to forward UDP port 500 packets to the remote IPSec router's configured remote IP addresses. The remote IPSec router must be static and correspond to the remote IPSec router behind your ZyXEL Device. 230 P-662H/HW-D Series User's Guide Select this feature to identify this VPN policy. You may use any time. Negotiation Mode Select Main or Aggressive from the drop-down list box. Local Local Address Type IP Address Start Local IP addresses must...
User Guide
Page 241
.... A Security Association (SA) is used , including spaces, but trailing spaces are truncated. This screen is a variation on WAN for the VPN tunnel when using dial backup or the LAN IP address when using traffic redirect. Chapter 16 VPN Screens Table 95 VPN: Manual Key (continued) LABEL DESCRIPTION My IP Address Enter the WAN IP address of your changes back to open the SA Monitor screen as 0.0.0.0: The ZyXEL Device uses the current ZyXEL Device WAN IP address (static or dynamic) to a specific VPN...
.... A Security Association (SA) is used , including spaces, but trailing spaces are truncated. This screen is a variation on WAN for the VPN tunnel when using dial backup or the LAN IP address when using traffic redirect. Chapter 16 VPN Screens Table 95 VPN: Manual Key (continued) LABEL DESCRIPTION My IP Address Enter the WAN IP address of your changes back to open the SA Monitor screen as 0.0.0.0: The ZyXEL Device uses the current ZyXEL Device WAN IP address (static or dynamic) to a specific VPN...
User Guide
Page 299
... change your customized settings and exit this screen. Table 128 Remote Management: DNS LABEL DESCRIPTION Port The DNS service port number is allowed to send DNS queries to save your ZyXEL Device's security settings, click Advanced > Remote MGMT > ICMP. Select All to the ZyXEL Device. Your ZyXEL Device supports anti-probing, which a computer may send DNS queries to allow the computer with the IP address that is 53 and cannot be changed here. P-662H/HW-D Series User's Guide 299 Use this screen. Secured Client IP A secured client...
... change your customized settings and exit this screen. Table 128 Remote Management: DNS LABEL DESCRIPTION Port The DNS service port number is allowed to send DNS queries to save your ZyXEL Device's security settings, click Advanced > Remote MGMT > ICMP. Select All to the ZyXEL Device. Your ZyXEL Device supports anti-probing, which a computer may send DNS queries to allow the computer with the IP address that is 53 and cannot be changed here. P-662H/HW-D Series User's Guide 299 Use this screen. Secured Client IP A secured client...
User Guide
Page 337
... 142 Troubleshooting the LAN PROBLEM CORRECTIVE ACTION The LAN LEDs Check your Ethernet cable connections (refer to an appropriate power source. Make sure that the IP address and the subnet mask of the LEDs turn on when I cannot access the ZyXEL Device from the LAN. Check for details). do not turn on the same subnet. If Any IP is disabled, make sure that the ZyXEL Device's power adaptor is working properly. In this case, you may have a hardware problem. P-662H/HW-D Series User's Guide...
... 142 Troubleshooting the LAN PROBLEM CORRECTIVE ACTION The LAN LEDs Check your Ethernet cable connections (refer to an appropriate power source. Make sure that the IP address and the subnet mask of the LEDs turn on when I cannot access the ZyXEL Device from the LAN. Check for details). do not turn on the same subnet. If Any IP is disabled, make sure that the ZyXEL Device's power adaptor is working properly. In this case, you may have a hardware problem. P-662H/HW-D Series User's Guide...
User Guide
Page 338
.... Make sure that bridge mode is "1234". Reset your ADSL line to the chapter on remote management for instructions on . Chapter 27 Troubleshooting 27.3 Problems with the WAN Table 143 Troubleshooting the WAN PROBLEM CORRECTIVE ACTION The DSL LED is not a Telnet session running. I cannot access the Internet. Refer to reinitialize your WAN settings. For details, refer to the network. Make sure you . The Internet connection disconnects. The default user password is "user" and admin password is turned on checking your computer's IP address...
.... Make sure that bridge mode is "1234". Reset your ADSL line to the chapter on remote management for instructions on . Chapter 27 Troubleshooting 27.3 Problems with the WAN Table 143 Troubleshooting the WAN PROBLEM CORRECTIVE ACTION The DSL LED is not a Telnet session running. I cannot access the Internet. Refer to reinitialize your WAN settings. For details, refer to the network. Make sure you . The Internet connection disconnects. The default user password is "user" and admin password is turned on checking your computer's IP address...
User Guide
Page 349
... your ZyXEL Device to forward IP traffic when you specify. PPTP under NAT/SUA. VPN passthrough Port Forwarding If you to control Internet access on your network must have its own unique IP address. The ZyXEL Device supports 20 IPSec tunnels. CAC Content Access Controls allow you have a server (mail or web server for example) on your network. 2048 NAT sessions Multimedia application. Use NAT to -site lines. Zero Configuration Internet Access Once you will be accessed from content filtering. Content Filter The ZyXEL Device blocks or allows access to web...
... your ZyXEL Device to forward IP traffic when you specify. PPTP under NAT/SUA. VPN passthrough Port Forwarding If you to control Internet access on your network must have its own unique IP address. The ZyXEL Device supports 20 IPSec tunnels. CAC Content Access Controls allow you have a server (mail or web server for example) on your network. 2048 NAT sessions Multimedia application. Use NAT to -site lines. Zero Configuration Internet Access Once you will be accessed from content filtering. Content Filter The ZyXEL Device blocks or allows access to web...
User Guide
Page 356
.... 356 P-662H/HW-D Series User's Guide If you need TCP/IP: 1 In the Network window, click Add. 2 Select Protocol and then click Add. 3 Select Microsoft from the list of manufacturers. 4 Select TCP/IP from the list of manufacturers. 4 Select Client for Microsoft Networks. Appendix A Setting up Your Computer's IP Address Figure 216 WIndows 95/98/Me: Network: Configuration Installing Components The Network window Configuration tab displays a list of network clients and then click OK. 5 Restart your network adapter and then...
.... 356 P-662H/HW-D Series User's Guide If you need TCP/IP: 1 In the Network window, click Add. 2 Select Protocol and then click Add. 3 Select Microsoft from the list of manufacturers. 4 Select TCP/IP from the list of manufacturers. 4 Select Client for Microsoft Networks. Appendix A Setting up Your Computer's IP Address Figure 216 WIndows 95/98/Me: Network: Configuration Installing Components The Network window Configuration tab displays a list of network clients and then click OK. 5 Restart your network adapter and then...