Quick Start Guide
Page 6
... allow pop-up windows, JavaScript and Java permission or set the Internet security level to automatically configure the SSID and WPA-PSK on wireless clients, click Start in the User's Guide. Note: If you enable OTIST but select Disable wireless security using Internet Explorer in Windows XP or Windows Server 2003, make sure you cannot access the Internet when your P662HW-D tries to the factory defaults. If you cannot access the web configurator using the wireless wizard, the P- 662HW-D will replace the WEP key with a WPA...
... allow pop-up windows, JavaScript and Java permission or set the Internet security level to automatically configure the SSID and WPA-PSK on wireless clients, click Start in the User's Guide. Note: If you enable OTIST but select Disable wireless security using Internet Explorer in Windows XP or Windows Server 2003, make sure you cannot access the Internet when your P662HW-D tries to the factory defaults. If you cannot access the web configurator using the wireless wizard, the P- 662HW-D will replace the WEP key with a WPA...
User Guide
Page 19
....1 Introducing Universal Plug and Play 303 22.1.1 How do I know if I'm using UPnP 303 22.1.2 NAT Traversal ...303 22.1.3 Cautions with UPnP 303 22.2 UPnP and ZyXEL ...304 22.2.1 Configuring UPnP 304 22.3 Installing UPnP in Windows Example 305 22.4 Using UPnP in Windows XP Example 308 Part V: Maintenance, Troubleshooting and Specifications 315 Chapter 23 System ...317 23.1 General Setup and System Name 317 23.1.1 System Configuration 317 P-662H/HW-D Series User's Guide 19
....1 Introducing Universal Plug and Play 303 22.1.1 How do I know if I'm using UPnP 303 22.1.2 NAT Traversal ...303 22.1.3 Cautions with UPnP 303 22.2 UPnP and ZyXEL ...304 22.2.1 Configuring UPnP 304 22.3 Installing UPnP in Windows Example 305 22.4 Using UPnP in Windows XP Example 308 Part V: Maintenance, Troubleshooting and Specifications 315 Chapter 23 System ...317 23.1 General Setup and System Name 317 23.1.1 System Configuration 317 P-662H/HW-D Series User's Guide 19
User Guide
Page 23
... List of Figures Figure 1 ZyXEL Device Internet Access Application 40 Figure 2 ZyXEL Device LAN-to-LAN Application Example 40 Figure 3 Firewall Application ...41 Figure 4 P-662H Front Panel ...41 Figure 5 P-662HW Front Panel ...41 Figure 6 Password Screen ...44 Figure 7 Change Password at Login ...45 Figure 8 Replace Factory Default Certificate 45 Figure 9 Select a Mode ...46 Figure 10 Web Configurator: Main Screen 47 Figure 11 Status Screen ...51 Figure 12 Status: Any IP Table ...53 Figure 13 Status: WLAN Status...
... List of Figures Figure 1 ZyXEL Device Internet Access Application 40 Figure 2 ZyXEL Device LAN-to-LAN Application Example 40 Figure 3 Firewall Application ...41 Figure 4 P-662H Front Panel ...41 Figure 5 P-662HW Front Panel ...41 Figure 6 Password Screen ...44 Figure 7 Change Password at Login ...45 Figure 8 Replace Factory Default Certificate 45 Figure 9 Select a Mode ...46 Figure 10 Web Configurator: Main Screen 47 Figure 11 Status Screen ...51 Figure 12 Status: Any IP Table ...53 Figure 13 Status: WLAN Status...
User Guide
Page 42
... link is not ready or has failed. Refer to a management computer and someone is connected to the Quick Start Guide for information on hardware connections. 42 P-662H/HW-D Series User's Guide Blinking The ZyXEL Device is no traffic detected. Off The system is not receiving power or there is sending/receiving data through a dial-up modem or ISDN TA. Off The DSL line is attempting to authenticate. Blinking The DSL is down. Red...
... link is not ready or has failed. Refer to a management computer and someone is connected to the Quick Start Guide for information on hardware connections. 42 P-662H/HW-D Series User's Guide Blinking The ZyXEL Device is no traffic detected. Off The system is not receiving power or there is sending/receiving data through a dial-up modem or ISDN TA. Off The DSL line is attempting to authenticate. Blinking The DSL is down. Red...
User Guide
Page 48
...firewall and the direction of the individual and applications. Client List Use this screen to enable NAT. DMZ DMZ Use this screen to view current DHCP client information and to always assign an IP address to configure the wireless LAN settings and WLAN authentication/security settings. NAT General Use this screen to configure ISP parameters, WAN IP address assignment, DNS servers and other advanced properties. WAN Internet Access Setup This screen allows you to prioritize wireless traffic according to configure servers behind the ZyXEL Device. WAN Backup Setup...
...firewall and the direction of the individual and applications. Client List Use this screen to enable NAT. DMZ DMZ Use this screen to view current DHCP client information and to always assign an IP address to configure the wireless LAN settings and WLAN authentication/security settings. NAT General Use this screen to configure ISP parameters, WAN IP address assignment, DNS servers and other advanced properties. WAN Internet Access Setup This screen allows you to prioritize wireless traffic according to configure servers behind the ZyXEL Device. WAN Backup Setup...
User Guide
Page 49
... Web Configurator Table 2 Web Configurator Screens Summary (continued) LINK/ICON SUB-LINK FUNCTION Content Filter Keyword Use this screen to configure a list of addresses of directory servers (that contain lists of valid and revoked certificates). VPN Setup Use this screen to enable bandwidth management on the ZyXEL Device. Monitor Use this screen to exclude a range of users on your license key information and update the status of each VPN tunnel. Trusted Use this screen to configure IP static routes. Register Registration Use...
... Web Configurator Table 2 Web Configurator Screens Summary (continued) LINK/ICON SUB-LINK FUNCTION Content Filter Keyword Use this screen to configure a list of addresses of directory servers (that contain lists of valid and revoked certificates). VPN Setup Use this screen to enable bandwidth management on the ZyXEL Device. Monitor Use this screen to exclude a range of users on your license key information and update the status of each VPN tunnel. Trusted Use this screen to configure IP static routes. Register Registration Use...
User Guide
Page 52
... (wireless devices currently associating with the ZyXEL Device. Interface Status Interface This displays the ZyXEL Device port types. WLAN Status This screen displays the MAC address(es) of the wireless stations that is not used to red when the maximum is up or connected) if you 're using Ethernet encapsulation and Down (line is down ), Up (line is up or connected), Idle (line (ppp) idle), Dial (starting to view a list of IP addresses and MAC addresses of the ZyXEL Device's heap memory...
... (wireless devices currently associating with the ZyXEL Device. Interface Status Interface This displays the ZyXEL Device port types. WLAN Status This screen displays the MAC address(es) of the wireless stations that is not used to red when the maximum is up or connected) if you 're using Ethernet encapsulation and Down (line is down ), Up (line is up or connected), Idle (line (ppp) idle), Dial (starting to view a list of IP addresses and MAC addresses of the ZyXEL Device's heap memory...
User Guide
Page 105
... to use a static private IP address in the same subnet to allow the computer to a computer using either a dynamic IP address or a static IP address that , the ZyXEL Device periodically updates this information. Figure 54 Any IP Example The Any IP feature does not apply to access the Internet (through the ZyXEL Device). WAN). In cases where your computer is in another network, you may need to manually configure the network settings of a computer and the ZyXEL Device to be enabled/disabled...
... to use a static private IP address in the same subnet to allow the computer to a computer using either a dynamic IP address or a static IP address that , the ZyXEL Device periodically updates this information. Figure 54 Any IP Example The Any IP feature does not apply to access the Internet (through the ZyXEL Device). WAN). In cases where your computer is in another network, you may need to manually configure the network settings of a computer and the ZyXEL Device to be enabled/disabled...
User Guide
Page 158
... allows it to the Internet. Firewalls, of one Ethernet LAN port, which physically separate the network into two areas. • The DSL/ISDN port connects to the Internet. • The LAN (Local Area Network) port attaches to a network of computers, which may be if the router needed to Internet services such as a secure gateway for more effectively than they may lack the granular application level access control or caching that some proxies support. The ZyXEL Device has...
... allows it to the Internet. Firewalls, of one Ethernet LAN port, which physically separate the network into two areas. • The DSL/ISDN port connects to the Internet. • The LAN (Local Area Network) port attaches to a network of computers, which may be if the router needed to Internet services such as a secure gateway for more effectively than they may lack the granular application level access control or caching that some proxies support. The ZyXEL Device has...
User Guide
Page 165
... "data connections" which includes connection information such as sequence numbers). At this point, the remote server will be allowed. For instance, any connection information (such as IP addresses, TCP ports, sequence numbers, etc. A user on the LAN opens a control connection to achieve this . In order to a server on the LAN will allow incoming timestamp replies. You can be used for ICMP, except that originates on the Internet and requests a file. P-662H/HW-D Series User's Guide 165...
... "data connections" which includes connection information such as sequence numbers). At this point, the remote server will be allowed. For instance, any connection information (such as IP addresses, TCP ports, sequence numbers, etc. A user on the LAN opens a control connection to achieve this . In order to a server on the LAN will allow incoming timestamp replies. You can be used for ICMP, except that originates on the Internet and requests a file. P-662H/HW-D Series User's Guide 165...
User Guide
Page 166
... rooms" or IRC sessions, be careful with Your Firewall • Change the default password via a web page unless the web site uses secure connections. Good network administration takes into your router. • Don't enable any local service (such as passwords, credit card information, etc., without encrypting the information first. • Never submit sensitive information via CLI (Command Line Interpreter) or the web configurator. • Limit who can telnet into account what...
... rooms" or IRC sessions, be careful with Your Firewall • Change the default password via a web page unless the web site uses secure connections. Good network administration takes into your router. • Don't enable any local service (such as passwords, credit card information, etc., without encrypting the information first. • Never submit sensitive information via CLI (Command Line Interpreter) or the web configurator. • Limit who can telnet into account what...
User Guide
Page 200
... IP port number that defines the service. (Note that the ZyXEL Device supports. See Appendix F on commonly used services. 13.2.3 Configuring Web Site Filters Use this screen to enable content filtering and to the name of services that can be more information on page 423 for a user group. A screen displays as shown next. Figure 115 Content Access Control: General: Web Site Filter 200 P-662H/HW-D Series User's Guide Chapter 13 Content Access Control...
... IP port number that defines the service. (Note that the ZyXEL Device supports. See Appendix F on commonly used services. 13.2.3 Configuring Web Site Filters Use this screen to enable content filtering and to the name of services that can be more information on page 423 for a user group. A screen displays as shown next. Figure 115 Content Access Control: General: Web Site Filter 200 P-662H/HW-D Series User's Guide Chapter 13 Content Access Control...
User Guide
Page 230
... a (static) IP address on the LAN behind your ZyXEL Device. A DNS server allows clients on the VPN to the remote IPSec router behind your ZyXEL Device. 230 P-662H/HW-D Series User's Guide You can have more protection so it is a useful option for this additional DNS server to the remote IPSec router's configured remote IP addresses. Select either Yes or No from the drop-down list box. The remote IPSec router must be static and correspond to the ZyXEL Device's DHCP clients that services the VPN, type its IP address...
... a (static) IP address on the LAN behind your ZyXEL Device. A DNS server allows clients on the VPN to the remote IPSec router behind your ZyXEL Device. 230 P-662H/HW-D Series User's Guide You can have more protection so it is a useful option for this additional DNS server to the remote IPSec router's configured remote IP addresses. Select either Yes or No from the drop-down list box. The remote IPSec router must be static and correspond to the ZyXEL Device's DHCP clients that services the VPN, type its IP address...
User Guide
Page 241
... ESP if you 're making the VPN connection. Use Refresh to display and manage active VPN connections. A Security Association (SA) is configured as shown. Chapter 16 VPN Screens Table 95 VPN: Manual Key (continued) LABEL DESCRIPTION My IP Address Enter the WAN IP address of your changes back to set up the VPN tunnel. Encapsulation Key With DES, type a unique key 8 characters long. The VPN tunnel has to a specific VPN tunnel. P-662H/HW-D Series User's Guide 241 Select MD5 for...
... ESP if you 're making the VPN connection. Use Refresh to display and manage active VPN connections. A Security Association (SA) is configured as shown. Chapter 16 VPN Screens Table 95 VPN: Manual Key (continued) LABEL DESCRIPTION My IP Address Enter the WAN IP address of your changes back to set up the VPN tunnel. Encapsulation Key With DES, type a unique key 8 characters long. The VPN tunnel has to a specific VPN tunnel. P-662H/HW-D Series User's Guide 241 Select MD5 for...
User Guide
Page 299
... to probe an unsupported port on your ZyXEL Device's DNS settings, click Advanced > Remote MGMT > DNS. P-662H/HW-D Series User's Guide 299 This keeps outsiders from discovering your ZyXEL Device's security settings, click Advanced > Remote MGMT > ICMP. Table 128 Remote Management: DNS LABEL DESCRIPTION Port The DNS service port number is automatically returned. Cancel Click Cancel to know the ZyXEL Device exists. Refer to its corresponding IP address and vice versa. Figure 170 Remote Management: DNS The following table describes...
... to probe an unsupported port on your ZyXEL Device's DNS settings, click Advanced > Remote MGMT > DNS. P-662H/HW-D Series User's Guide 299 This keeps outsiders from discovering your ZyXEL Device's security settings, click Advanced > Remote MGMT > ICMP. Table 128 Remote Management: DNS LABEL DESCRIPTION Port The DNS service port number is automatically returned. Cancel Click Cancel to know the ZyXEL Device exists. Refer to its corresponding IP address and vice versa. Figure 170 Remote Management: DNS The following table describes...
User Guide
Page 337
... error persists, you should contact your vendor. 27.2 Problems with the LAN Table 142 Troubleshooting the LAN PROBLEM CORRECTIVE ACTION The LAN LEDs Check your Ethernet cable connections (refer to an appropriate power source. Make sure that the ZyXEL Device and the power source are on the same subnet. do not turn on . If Any IP is disabled, make sure that the ZyXEL Device's power adaptor is working properly. P-662H/HW-D Series User's Guide 337 Make sure that the IP address...
... error persists, you should contact your vendor. 27.2 Problems with the LAN Table 142 Troubleshooting the LAN PROBLEM CORRECTIVE ACTION The LAN LEDs Check your Ethernet cable connections (refer to an appropriate power source. Make sure that the ZyXEL Device and the power source are on the same subnet. do not turn on . If Any IP is disabled, make sure that the ZyXEL Device's power adaptor is working properly. P-662H/HW-D Series User's Guide 337 Make sure that the IP address...
User Guide
Page 338
... time-out setting. The ISP provides the WAN IP address after authenticating you will need to the chapter on remote management for instructions on page 81. The Internet connection disconnects. Contact your LAN connection. Make sure that pop-up for LAN access. Use the ZyXEL Device's LAN IP address when configuring from the LAN. Refer to upload the default configuration file. The username and password apply to the instructions on page 336. Make sure the ZyXEL Device is Check the telephone wire and connections between the ZyXEL Device DSL port...
... time-out setting. The ISP provides the WAN IP address after authenticating you will need to the chapter on remote management for instructions on page 81. The Internet connection disconnects. Contact your LAN connection. Make sure that pop-up for LAN access. Use the ZyXEL Device's LAN IP address when configuring from the LAN. Refer to upload the default configuration file. The username and password apply to the instructions on page 336. Make sure the ZyXEL Device is Check the telephone wire and connections between the ZyXEL Device DSL port...
User Guide
Page 349
... ISP and makes the necessary configuration changes. IPSec passthrough SIP ALG passthrough. CAC Content Access Controls allow you configure the TCP/IP parameters manually. 16 IP and 4 Bridge Traffic Redirect Traffic redirect forwards WAN traffic to a backup gateway when the ZyXEL Device cannot connect to the Internet, thus acting as SYN flooding and Ping of Service) attacks such as an auxiliary if your network. 2048 NAT sessions Multimedia application. Public servers (Web, FTP, etc.) attached to the DMZ port are...
... ISP and makes the necessary configuration changes. IPSec passthrough SIP ALG passthrough. CAC Content Access Controls allow you configure the TCP/IP parameters manually. 16 IP and 4 Bridge Traffic Redirect Traffic redirect forwards WAN traffic to a backup gateway when the ZyXEL Device cannot connect to the Internet, thus acting as SYN flooding and Ping of Service) attacks such as an auxiliary if your network. 2048 NAT sessions Multimedia application. Public servers (Web, FTP, etc.) attached to the DMZ port are...
User Guide
Page 350
.../or IEEE 802.11g wireless clients to connect to -Point Tunneling Protocol (PPTP) enables secure transfer of the ZyXEL Device's configuration. The ZyXEL wireless adapters must register for troubleshooting. These dates and times are within transmission range. IP Multicast IP multicast is used to a specific group of the computer and the ZyXEL Device are not in logs. You can also set the time manually. The ZyXEL Device supports versions 1 and 2 of IGMP (Internet Group Management Protocol) used to send traffic to join multicast groups (see RFC 2236...
.../or IEEE 802.11g wireless clients to connect to -Point Tunneling Protocol (PPTP) enables secure transfer of the ZyXEL Device's configuration. The ZyXEL wireless adapters must register for troubleshooting. These dates and times are within transmission range. IP Multicast IP multicast is used to a specific group of the computer and the ZyXEL Device are not in logs. You can also set the time manually. The ZyXEL Device supports versions 1 and 2 of IGMP (Internet Group Management Protocol) used to send traffic to join multicast groups (see RFC 2236...
User Guide
Page 356
.../HW-D Series User's Guide If you need TCP/IP: 1 In the Network window, click Add. 2 Select Protocol and then click Add. 3 Select Microsoft from the list of manufacturers. 4 Select TCP/IP from the list of network clients and then click OK. 5 Restart your computer so the changes you need a network adapter, the TCP/IP protocol and Client for Microsoft Networks from the list of installed components. Appendix A Setting up Your Computer's IP Address Figure 216 WIndows 95...
.../HW-D Series User's Guide If you need TCP/IP: 1 In the Network window, click Add. 2 Select Protocol and then click Add. 3 Select Microsoft from the list of manufacturers. 4 Select TCP/IP from the list of network clients and then click OK. 5 Restart your computer so the changes you need a network adapter, the TCP/IP protocol and Client for Microsoft Networks from the list of installed components. Appendix A Setting up Your Computer's IP Address Figure 216 WIndows 95...