Quick Start Guide
Page 6
...Windows XP or Windows Server 2003, make sure you have previously saved a setup key on the P-662HW-D and all OTIST-equipped wireless clients within three minutes in the User's Guide for more information, see Wireless LAN in the Adapter screen. The Setup Key is connected ...Internet Explorer (in the wizard. P-662HW-D Series Quick Start Guide 7 Click INTERNET / WIRELESS SETUP. Do not change default settings if your wireless clients support WPA and OTIST. For more information. 2 If you to the ETHERNET port, follow these steps. 6 OTIST ZyXEL's One-Touch Intelligent Security Technology ...
...Windows XP or Windows Server 2003, make sure you have previously saved a setup key on the P-662HW-D and all OTIST-equipped wireless clients within three minutes in the User's Guide for more information, see Wireless LAN in the Adapter screen. The Setup Key is connected ...Internet Explorer (in the wizard. P-662HW-D Series Quick Start Guide 7 Click INTERNET / WIRELESS SETUP. Do not change default settings if your wireless clients support WPA and OTIST. For more information. 2 If you to the ETHERNET port, follow these steps. 6 OTIST ZyXEL's One-Touch Intelligent Security Technology ...
User Guide
Page 3
... should have at least a basic knowledge of individual screens and supplementary information. About This User's Guide About This User's Guide Intended Audience This manual is intended for improvement to the following address, or use the web configurator to configure the ZyXEL Device. • Supporting Disk Refer to the included CD for support documents. •...
... should have at least a basic knowledge of individual screens and supplementary information. About This User's Guide About This User's Guide Intended Audience This manual is intended for improvement to the following address, or use the web configurator to configure the ZyXEL Device. • Supporting Disk Refer to the included CD for support documents. •...
User Guide
Page 12
...Chapter 3 Wizard Setup for Internet Access 59 3.1 Introduction ...59 3.2 Internet Access Wizard Setup 59 3.2.1 Automatic Detection 61 3.2.2 Manual Configuration 61 3.3 Wireless Connection Wizard Setup 66 3.3.1 Automatically assign a WPA key 69 3.3.2 Manually assign a WPA-PSK key 69 3.3.3 Manually assign a WEP key 69 Chapter 4 Bandwidth Management Wizard 73 4.1 Introduction ...73 4.2 Predefined Media Bandwidth Management ... 5.7 Traffic Redirect ...94 5.8 Configuring WAN Backup 94 5.9 WAN Backup Advanced Screen 96 5.10 Dial Backup Modem Setup 99 12 P-662H/HW-D Series User's Guide
...Chapter 3 Wizard Setup for Internet Access 59 3.1 Introduction ...59 3.2 Internet Access Wizard Setup 59 3.2.1 Automatic Detection 61 3.2.2 Manual Configuration 61 3.3 Wireless Connection Wizard Setup 66 3.3.1 Automatically assign a WPA key 69 3.3.2 Manually assign a WPA-PSK key 69 3.3.3 Manually assign a WEP key 69 Chapter 4 Bandwidth Management Wizard 73 4.1 Introduction ...73 4.2 Predefined Media Bandwidth Management ... 5.7 Traffic Redirect ...94 5.8 Configuring WAN Backup 94 5.9 WAN Backup Advanced Screen 96 5.10 Dial Backup Modem Setup 99 12 P-662H/HW-D Series User's Guide
User Guide
Page 17
... Groups 235 16.12.3 Perfect Forward Secrecy (PFS 235 16.13 Configuring Advanced IKE Settings 235 16.14 Manual Key Setup ...238 16.14.1 Security Parameter Index (SPI 238 16.15 Configuring Manual Key 238 16.16 Viewing SA Monitor ...241 16.17 Configuring Global Setting 242 16.18 Telecommuter VPN/IPSec... 17.1 Certificates Overview ...247 17.1.1 Advantages of Certificates 248 17.2 Self-signed Certificates ...248 17.3 Configuration Summary 248 17.4 My Certificates ...248 P-662H/HW-D Series User's Guide 17
... Groups 235 16.12.3 Perfect Forward Secrecy (PFS 235 16.13 Configuring Advanced IKE Settings 235 16.14 Manual Key Setup ...238 16.14.1 Security Parameter Index (SPI 238 16.15 Configuring Manual Key 238 16.16 Viewing SA Monitor ...241 16.17 Configuring Global Setting 242 16.18 Telecommuter VPN/IPSec... 17.1 Certificates Overview ...247 17.1.1 Advantages of Certificates 248 17.2 Self-signed Certificates ...248 17.3 Configuration Summary 248 17.4 My Certificates ...248 P-662H/HW-D Series User's Guide 17
User Guide
Page 23
... List of Figures Figure 1 ZyXEL Device Internet Access Application 40 Figure 2 ZyXEL Device LAN-to-LAN Application Example 40 Figure 3 Firewall Application ...41 Figure 4 P-662H Front Panel ...41 Figure 5 P-662HW Front Panel ...41 Figure ... Auto Detection: No DSL Connection 60 Figure 21 Auto Detection: Failed ...61 Figure 22 Auto-Detection: PPPoE ...61 Figure 23 Internet Access Wizard Setup: ISP Parameters 62 Figure 24 Internet ... 1 67 Figure 32 Wireless LAN Setup Wizard 2 68 Figure 33 Manually assign a WPA key 69 Figure 34 Manually assign a WEP key 70 Figure 35 Wireless LAN Setup 3 ...70...
... List of Figures Figure 1 ZyXEL Device Internet Access Application 40 Figure 2 ZyXEL Device LAN-to-LAN Application Example 40 Figure 3 Firewall Application ...41 Figure 4 P-662H Front Panel ...41 Figure 5 P-662HW Front Panel ...41 Figure ... Auto Detection: No DSL Connection 60 Figure 21 Auto Detection: Failed ...61 Figure 22 Auto-Detection: PPPoE ...61 Figure 23 Internet Access Wizard Setup: ISP Parameters 62 Figure 24 Internet ... 1 67 Figure 32 Wireless LAN Setup Wizard 2 68 Figure 33 Manually assign a WPA key 69 Figure 34 Manually assign a WEP key 70 Figure 35 Wireless LAN Setup 3 ...70...
User Guide
Page 26
... 132 Edit VPN Policies ...229 Figure 133 Two Phases to Set Up the IPSec SA 233 Figure 134 Advanced VPN Policies ...236 Figure 135 VPN: Manual Key ...239 Figure 136 VPN: SA Monitor ...242 Figure 137 VPN: Global Setting ...242 Figure 138 Telecommuters Sharing One VPN Rule Example 243 Figure 139... Figure 165 Telnet Configuration on a TCP/IP Network 294 Figure 166 Remote Management: Telnet 294 Figure 167 Remote Management: FTP 295 26 P-662H/HW-D Series User's Guide
... 132 Edit VPN Policies ...229 Figure 133 Two Phases to Set Up the IPSec SA 233 Figure 134 Advanced VPN Policies ...236 Figure 135 VPN: Manual Key ...239 Figure 136 VPN: SA Monitor ...242 Figure 137 VPN: Global Setting ...242 Figure 138 Telecommuters Sharing One VPN Rule Example 243 Figure 139... Figure 165 Telnet Configuration on a TCP/IP Network 294 Figure 166 Remote Management: Telnet 294 Figure 167 Remote Management: FTP 295 26 P-662H/HW-D Series User's Guide
User Guide
Page 31
... 13 Internet Connection with PPPoA 65 Table 14 Wireless LAN Setup Wizard 1 67 Table 15 Wireless LAN Setup Wizard 2 68 Table 16 Manually assign a WPA key ...69 Table 17 Manually assign a WEP key 70 Table 18 Media Bandwidth Management Setup: Services 73 Table 19 Bandwidth Management Wizard: General Information 75 Table 20... Wireless Terms ...116 Table 36 Wireless LAN: General ...118 Table 37 Wireless No Security ...119 Table 38 Wireless: Static WEP Encryption 120 P-662H/HW-D Series User's Guide 31
... 13 Internet Connection with PPPoA 65 Table 14 Wireless LAN Setup Wizard 1 67 Table 15 Wireless LAN Setup Wizard 2 68 Table 16 Manually assign a WPA key ...69 Table 17 Manually assign a WEP key 70 Table 18 Media Bandwidth Management Setup: Services 73 Table 19 Bandwidth Management Wizard: General Information 75 Table 20... Wireless Terms ...116 Table 36 Wireless LAN: General ...118 Table 37 Wireless No Security ...119 Table 38 Wireless: Static WEP Encryption 120 P-662H/HW-D Series User's Guide 31
User Guide
Page 33
... Table 92 Mismatching ID Type and Content Configuration Example 228 Table 93 Edit VPN Policies ...230 Table 94 Advanced VPN Policies ...236 Table 95 VPN: Manual Key ...239 Table 96 VPN: SA Monitor ...242 Table 97 VPN: Global Setting ...243 Table 98 Telecommuters Sharing One VPN Rule Example 244 Table 99... Bandwidth Management Rule Configuration 284 Table 122 Dynamic DNS ...288 Table 123 Remote Management: WWW 293 Table 124 Remote Management: Telnet 295 P-662H/HW-D Series User's Guide 33
... Table 92 Mismatching ID Type and Content Configuration Example 228 Table 93 Edit VPN Policies ...230 Table 94 Advanced VPN Policies ...236 Table 95 VPN: Manual Key ...239 Table 96 VPN: SA Monitor ...242 Table 97 VPN: Global Setting ...243 Table 98 Telecommuters Sharing One VPN Rule Example 244 Table 99... Bandwidth Management Rule Configuration 284 Table 122 Dynamic DNS ...288 Table 123 Remote Management: WWW 293 Table 124 Remote Management: Telnet 295 P-662H/HW-D Series User's Guide 33
User Guide
Page 60
... the following screen appears (see Figure 21 on page 61), click Next and refer to Section 3.2.2 on page 61 on page 60), check your hardware connections and click Restart the Internet/ Wireless Setup Wizard to have the ZyXEL Device detect your ISP uses PPPoE or PPPoA, go ... a connection type and the following screen appears (see Figure 20 on how to configure the system for Internet access manually. 60 P-662H/HW-D Series User's Guide Chapter 3 Wizard Setup for Internet Access 2 Click INTERNET/WIRELESS SETUP to configure the ZyXEL Device for Internet access and wireless connection.
... the following screen appears (see Figure 21 on page 61), click Next and refer to Section 3.2.2 on page 61 on page 60), check your hardware connections and click Restart the Internet/ Wireless Setup Wizard to have the ZyXEL Device detect your ISP uses PPPoE or PPPoA, go ... a connection type and the following screen appears (see Figure 20 on how to configure the system for Internet access manually. 60 P-662H/HW-D Series User's Guide Chapter 3 Wizard Setup for Internet Access 2 Click INTERNET/WIRELESS SETUP to configure the ZyXEL Device for Internet access and wireless connection.
User Guide
Page 61
P-662H/HW-D Series User's Guide 61 If not given, leave the fields set to enter your Internet account information. Figure 21 Auto Detection: Failed Chapter 3 Wizard Setup for wireless connection wizard ..., a screen displays prompting you by your DSL connection type, enter the Internet access information given to you to the default. Figure 22 Auto-Detection: PPPoE 3.2.2 Manual Configuration 1 If the ZyXEL Device fails to detect your ISP exactly in the wizard screen.
P-662H/HW-D Series User's Guide 61 If not given, leave the fields set to enter your Internet account information. Figure 21 Auto Detection: Failed Chapter 3 Wizard Setup for wireless connection wizard ..., a screen displays prompting you by your DSL connection type, enter the Internet access information given to you to the default. Figure 22 Auto-Detection: PPPoE 3.2.2 Manual Configuration 1 If the ZyXEL Device fails to detect your ISP exactly in the wizard screen.
User Guide
Page 68
.... Choose this field on page 69 for more information. Select Manually assign a WEP key to display the previous screen. Security Select Automatically assign a WPA key to allow the ZyXEL Device to access the network. If you selected Enable OTIST. ...Name(SSID) Enter a descriptive name (up to close the wizard screen without saving. See Section 3.3.3 on the ZyXEL Device, make sure all wireless stations use by IEEE 802.11b/g wireless devices is not already in use the same...in the field (if available) and click Next. 68 P-662H/HW-D Series User's Guide Fill in this screen.
.... Choose this field on page 69 for more information. Select Manually assign a WEP key to display the previous screen. Security Select Automatically assign a WPA key to allow the ZyXEL Device to access the network. If you selected Enable OTIST. ...Name(SSID) Enter a descriptive name (up to close the wizard screen without saving. See Section 3.3.3 on the ZyXEL Device, make sure all wireless stations use by IEEE 802.11b/g wireless devices is not already in use the same...in the field (if available) and click Next. 68 P-662H/HW-D Series User's Guide Fill in this screen.
User Guide
Page 69
... LABEL DESCRIPTION Pre-Shared Key Type from 8 to display the previous screen. P-662H/HW-D Series User's Guide 69 Back Click Back to 63 case-sensitive ASCII characters. Figure 33 Manually assign a WPA key The following table describes the labels in the Wireless LAN setup screen to do... setup WEP Encryption parameters. Chapter 3 Wizard Setup for Internet Access 3.3.1 Automatically assign a WPA key Choose Manually assign a WPA key in the Wireless LAN setup screen to allow the ZyXEL Device to configure a PSK key for you based on the previous Wireless LAN setup screen. This key...
... LABEL DESCRIPTION Pre-Shared Key Type from 8 to display the previous screen. P-662H/HW-D Series User's Guide 69 Back Click Back to 63 case-sensitive ASCII characters. Figure 33 Manually assign a WPA key The following table describes the labels in the Wireless LAN setup screen to do... setup WEP Encryption parameters. Chapter 3 Wizard Setup for Internet Access 3.3.1 Automatically assign a WPA key Choose Manually assign a WPA key in the Wireless LAN setup screen to allow the ZyXEL Device to configure a PSK key for you based on the previous Wireless LAN setup screen. This key...
User Guide
Page 70
...5 Click Apply to encrypt data. Chapter 3 Wizard Setup for data transmission. Table 17 Manually assign a WEP key LABEL DESCRIPTION Key The WEP keys are used to save the wizard setup. 70 P-662H/HW-D Series User's Guide Figure 35 Wireless LAN Setup 3 6 Use the read-only summary table to ...whether what you have configured is correct. Back Click Back to the next screen. Both the ZyXEL Device and the wireless stations must use the same WEP key for Internet Access Figure 34 Manually assign a WEP key The following table describes the labels in this screen. Enter any 5, ...
...5 Click Apply to encrypt data. Chapter 3 Wizard Setup for data transmission. Table 17 Manually assign a WEP key LABEL DESCRIPTION Key The WEP keys are used to save the wizard setup. 70 P-662H/HW-D Series User's Guide Figure 35 Wireless LAN Setup 3 6 Use the read-only summary table to ...whether what you have configured is correct. Back Click Back to the next screen. Both the ZyXEL Device and the wireless stations must use the same WEP key for Internet Access Figure 34 Manually assign a WEP key The following table describes the labels in this screen. Enter any 5, ...
User Guide
Page 89
... the screen as shown next. Select UBR (Unspecified Bit Rate) for applications that can be Size sent at which must manually configure the ZyXEL Device for bursty traffic and bandwidth sharing with other applications. Select VBR-nRT (Variable Bit Rate-non Real Time) or VBR... necessary configuration changes. Click Cancel to begin configuring this screen afresh. 5.6 Configuring More Connections Use this feature. P-662H/HW-D Series User's Guide 89 PPPoE passthrough is an alternative to NAT for voice or data traffic. Chapter 5 WAN Setup Table 22 Advanced Internet Connection...
... the screen as shown next. Select UBR (Unspecified Bit Rate) for applications that can be Size sent at which must manually configure the ZyXEL Device for bursty traffic and bandwidth sharing with other applications. Select VBR-nRT (Variable Bit Rate-non Real Time) or VBR... necessary configuration changes. Click Cancel to begin configuring this screen afresh. 5.6 Configuring More Connections Use this feature. P-662H/HW-D Series User's Guide 89 PPPoE passthrough is an alternative to NAT for voice or data traffic. Chapter 5 WAN Setup Table 22 Advanced Internet Connection...
User Guide
Page 97
...# before the phone number for this remote node. Available speeds are : CHAP/PAP - Consult the manual of your dial backup port for outgoing calls. Figure 51 WAN Backup Advanced Setup Chapter 5 WAN Setup...The following table describes the labels in this remote node. TCP/IP Options P-662H/HW-D Series User's Guide 97 If the primary phone number is busy or does not answer, your WAN device ...display the Advanced Modem Setup screen and edit the details of your ZyXEL Device dials the secondary phone number if available. Options are : 9600, 19200, 38400, 57600,...
...# before the phone number for this remote node. Available speeds are : CHAP/PAP - Consult the manual of your dial backup port for outgoing calls. Figure 51 WAN Backup Advanced Setup Chapter 5 WAN Setup...The following table describes the labels in this remote node. TCP/IP Options P-662H/HW-D Series User's Guide 97 If the primary phone number is busy or does not answer, your WAN device ...display the Advanced Modem Setup screen and edit the details of your ZyXEL Device dials the secondary phone number if available. Options are : 9600, 19200, 38400, 57600,...
User Guide
Page 102
...IPCP and relays the response back to the computer. There are two ways that an ISP disseminates the DNS server addresses. 102 P-662H/HW-D Series User's Guide Chapter 6 LAN Setup 6.1.2 DHCP Setup DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individual clients to obtain TCP/...information sheet, when s/he signs up. If the Primary and Secondary DNS Server fields in the form of a computer before you must be manually configured. 6.1.2.1 IP Pool Setup The ZyXEL Device is for the clients. The DNS server is the DNS server. When a computer sends a DNS query to the...
...IPCP and relays the response back to the computer. There are two ways that an ISP disseminates the DNS server addresses. 102 P-662H/HW-D Series User's Guide Chapter 6 LAN Setup 6.1.2 DHCP Setup DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individual clients to obtain TCP/...information sheet, when s/he signs up. If the Primary and Secondary DNS Server fields in the form of a computer before you must be manually configured. 6.1.2.1 IP Pool Setup The ZyXEL Device is for the clients. The DNS server is the DNS server. When a computer sends a DNS query to the...
User Guide
Page 105
.... IP multicasting can still use the computer to gather group membership. P-662H/HW-D Series User's Guide 105 All hosts must set the IP addresses and the subnet masks of the computer and the ZyXEL Device are not in the same subnet. WAN). Select None to disable IP multicasting on... required to use a static IP address in another network, you may need to manually configure the network settings of the computer and the ZyXEL Device are not in the same subnet. In a residential house where a ZyXEL Device is installed, you can simply connect the computer to the permanent group of ...
.... IP multicasting can still use the computer to gather group membership. P-662H/HW-D Series User's Guide 105 All hosts must set the IP addresses and the subnet masks of the computer and the ZyXEL Device are not in the same subnet. WAN). Select None to disable IP multicasting on... required to use a static IP address in another network, you may need to manually configure the network settings of the computer and the ZyXEL Device are not in the same subnet. In a residential house where a ZyXEL Device is installed, you can simply connect the computer to the permanent group of ...
User Guide
Page 120
The ZyXEL Device automatically generates a WEP key. If you want to manually set the WEP key, enter any 5, 13 or 29 characters (ASCII string) or 10, 26 or 58 hexadecimal characters ...-PSK from the drop-down list box. Apply Click Apply to save your WLAN setup. 7.5.3 WPA(2)-PSK In order to the ZyXEL Device. Cancel Click Cancel to 32 printable characters) and click Generate. Chapter 7 Wireless LAN Figure 64 Wireless: Static WEP Encryption ...WEP Encryption LABEL DESCRIPTION Security Mode Choose Static WEP from the Security Mode list. 120 P-662H/HW-D Series User's Guide
The ZyXEL Device automatically generates a WEP key. If you want to manually set the WEP key, enter any 5, 13 or 29 characters (ASCII string) or 10, 26 or 58 hexadecimal characters ...-PSK from the drop-down list box. Apply Click Apply to save your WLAN setup. 7.5.3 WPA(2)-PSK In order to the ZyXEL Device. Cancel Click Cancel to 32 printable characters) and click Generate. Chapter 7 Wireless LAN Figure 64 Wireless: Static WEP Encryption ...WEP Encryption LABEL DESCRIPTION Security Mode Choose Static WEP from the Security Mode list. 120 P-662H/HW-D Series User's Guide
User Guide
Page 125
...to associate with the ZyXEL Device. P-662H/HW-D Series User's Guide 125 Traditionally this screen. 7.6 OTIST In a wireless network, the wireless clients must enable OTIST on each wireless client. You can also choose to configure the settings on the AP and then manually configure the exact ... point (AP) or wireless router (we will refer to both the AP and wireless client before you didn't configure one manually. This permits the ZyXEL Device to the previous screen. " OTIST replaces the pre-configured wireless settings on the wireless clients. 7.6.1 Enabling OTIST You ...
...to associate with the ZyXEL Device. P-662H/HW-D Series User's Guide 125 Traditionally this screen. 7.6 OTIST In a wireless network, the wireless clients must enable OTIST on each wireless client. You can also choose to configure the settings on the AP and then manually configure the exact ... point (AP) or wireless router (we will refer to both the AP and wireless client before you didn't configure one manually. This permits the ZyXEL Device to the previous screen. " OTIST replaces the pre-configured wireless settings on the wireless clients. 7.6.1 Enabling OTIST You ...
User Guide
Page 128
...network, you start the utility. Click Yes for it will search for an OTIST-enabled AP for more than ten seconds, it to the ZyXEL utility main screen. Figure 74 Start OTIST? 128 2 If an OTIST-enabled wireless client loses its wireless connection for up to one AP ...If you configure OTIST to generate a WPA-PSK key, this key changes each time you manually have the wireless client search for an OTIST-enabled AP. Chapter 7 Wireless LAN 2 This screen appears while OTIST settings are being transferred. P-662H/HW-D Series User's Guide It closes when the transfer is no timeout;
...network, you start the utility. Click Yes for it will search for an OTIST-enabled AP for more than ten seconds, it to the ZyXEL utility main screen. Figure 74 Start OTIST? 128 2 If an OTIST-enabled wireless client loses its wireless connection for up to one AP ...If you configure OTIST to generate a WPA-PSK key, this key changes each time you manually have the wireless client search for an OTIST-enabled AP. Chapter 7 Wireless LAN 2 This screen appears while OTIST settings are being transferred. P-662H/HW-D Series User's Guide It closes when the transfer is no timeout;