User Guide
Page 9
... Tutorials ...27 Introducing the Web Configurator 51 Technical Reference ...57 Status Screens ...59 WAN Setup ...73 LAN Setup ...103 Wireless LAN ...115 Network Address Translation (NAT 147 MAC Filter ...159 Firewall ...163 Certificate ...169 Static Route ...181 Policy Forwarding ...185 DNS Route ...189 RIP ...191 Quality of Service (QoS) ...193 Dynamic... (UPnP 227 Parental Control ...241 Interface Group ...245 Captive Portal ...251 System Settings ...253 Logs ...259 Tools ...263 Diagnostic ...269 Troubleshooting ...275 Product Specifications ...281 P-870HN-5xb User's Guide 9
... Tutorials ...27 Introducing the Web Configurator 51 Technical Reference ...57 Status Screens ...59 WAN Setup ...73 LAN Setup ...103 Wireless LAN ...115 Network Address Translation (NAT 147 MAC Filter ...159 Firewall ...163 Certificate ...169 Static Route ...181 Policy Forwarding ...185 DNS Route ...189 RIP ...191 Quality of Service (QoS) ...193 Dynamic... (UPnP 227 Parental Control ...241 Interface Group ...245 Captive Portal ...251 System Settings ...253 Logs ...259 Tools ...263 Diagnostic ...269 Troubleshooting ...275 Product Specifications ...281 P-870HN-5xb User's Guide 9
User Guide
Page 13
... ...135 7.10.1 Wireless Network Overview 135 7.10.2 Additional Wireless Terms 136 7.10.3 Wireless Security Overview 136 7.10.4 WiFi Protected Setup 139 Chapter 8 Network Address Translation (NAT 147 8.1 Overview ...147 8.1.1 What You Can Do in this Chapter 147 8.2 What You Need to Know ...147 8.3 The Port Forwarding Screen 148 8.3.1 The Port Forwarding... 8.4 The Trigger Port Screen ...151 8.4.1 Trigger Port Configuration 154 8.5 The DMZ Host Screen ...156 8.6 The ALG Screen ...156 8.7 Technical Reference ...157 Chapter 9 MAC Filter ...159 P-870HN-5xb User's Guide 13
... ...135 7.10.1 Wireless Network Overview 135 7.10.2 Additional Wireless Terms 136 7.10.3 Wireless Security Overview 136 7.10.4 WiFi Protected Setup 139 Chapter 8 Network Address Translation (NAT 147 8.1 Overview ...147 8.1.1 What You Can Do in this Chapter 147 8.2 What You Need to Know ...147 8.3 The Port Forwarding Screen 148 8.3.1 The Port Forwarding... 8.4 The Trigger Port Screen ...151 8.4.1 Trigger Port Configuration 154 8.5 The DMZ Host Screen ...156 8.6 The ALG Screen ...156 8.7 Technical Reference ...157 Chapter 9 MAC Filter ...159 P-870HN-5xb User's Guide 13
User Guide
Page 54
... points. Wireless LAN General Use this screen to configure the wireless LAN settings, WLAN authentication/security settings and MAC filtering rules. NAT Port The NAT screens are not specified in the Port Forwarding screen. Use this screen to configure a default server which receives packets from ports ... to open screens to set up Wireless Distribution System links to its destination and/or source MAC address in bridge mode. 54 P-870HN-5xb User's Guide Advanced Setup Use this screen to configure the advanced wireless LAN settings. WPS Station Use this screen to specify ...
... points. Wireless LAN General Use this screen to configure the wireless LAN settings, WLAN authentication/security settings and MAC filtering rules. NAT Port The NAT screens are not specified in the Port Forwarding screen. Use this screen to configure a default server which receives packets from ports ... to open screens to set up Wireless Distribution System links to its destination and/or source MAC address in bridge mode. 54 P-870HN-5xb User's Guide Advanced Setup Use this screen to configure the advanced wireless LAN settings. WPS Station Use this screen to specify ...
User Guide
Page 80
...shows you need to configure a WAN connection with PPPoE or IPoE. The pppx name (where x starts from 0 and is not valid. To use NAT, firewall or IGMP proxy in this screen to traffic sent through this connection. 0 and 35 or 0 and 1 are the default VPI and VCI numbers...Figure 33 Internet Connection The following table describes the labels in the Device, you the configured WAN services (connections) on transmission rate. 80 P-870HN-5xb User's Guide The number after the underscore (_) represents the index number of connections over the same PVC or the VLAN ID number assigned...
...shows you need to configure a WAN connection with PPPoE or IPoE. The pppx name (where x starts from 0 and is not valid. To use NAT, firewall or IGMP proxy in this screen to traffic sent through this connection. 0 and 35 or 0 and 1 are the default VPI and VCI numbers...Figure 33 Internet Connection The following table describes the labels in the Device, you the configured WAN services (connections) on transmission rate. 80 P-870HN-5xb User's Guide The number after the underscore (_) represents the index number of connections over the same PVC or the VLAN ID number assigned...
User Guide
Page 81
This displays N/A when the interface used by the connection is not available when the connection uses the bridging service. NAT is in the WAN Service screen to traffic sent through this connection. IGMP This shows whether IGMP (Internet Group Multicast... shows the index number of each connection. Figure 34 WAN Configuration: WAN Interface P-870HN-5xb User's Guide 81 IGMP is not available when the connection uses the bridging service. NAT This shows whether NAT is no priority level assigned. Chapter 5 WAN Setup Table 13 Internet Connection LABEL ...
This displays N/A when the interface used by the connection is not available when the connection uses the bridging service. NAT is in the WAN Service screen to traffic sent through this connection. IGMP This shows whether IGMP (Internet Group Multicast... shows the index number of each connection. Figure 34 WAN Configuration: WAN Interface P-870HN-5xb User's Guide 81 IGMP is not available when the connection uses the bridging service. NAT This shows whether NAT is no priority level assigned. Chapter 5 WAN Setup Table 13 Internet Connection LABEL ...
User Guide
Page 85
...time and specify an idle time-out in the IPv4 Address field that display. Select Assign Public IP to LAN PCs by your ISP. P-870HN-5xb User's Guide 85 CHAP is readily available on this connection. Your Device accepts MSCHAP only. Select this connection. Then enter the static ...Get IPv6 Address From DHCPv6 Server Select this if your ISP provided a range of the CHAP. Your Device accepts CHAP only. Enable NAT Enable Fullcone NAT Enable Firewall Dial on Demand. Select how the WAN interface is available only when you select Dial on Demand Inactivity Timeout WAN IP ...
...time and specify an idle time-out in the IPv4 Address field that display. Select Assign Public IP to LAN PCs by your ISP. P-870HN-5xb User's Guide 85 CHAP is readily available on this connection. Your Device accepts MSCHAP only. Select this connection. Then enter the static ...Get IPv6 Address From DHCPv6 Server Select this if your ISP provided a range of the CHAP. Your Device accepts CHAP only. Enable NAT Enable Fullcone NAT Enable Firewall Dial on Demand. Select how the WAN interface is available only when you select Dial on Demand Inactivity Timeout WAN IP ...
User Guide
Page 86
...to have a separate account and a public WAN IP address. It can have the ZyXEL Device act as an IGMP proxy on this option to display PPP debugging messages on this button to continue. 86 P-870HN-5xb User's Guide Click this connection. WAN IPv6 Address Prefix Length Enter the address prefix... client, you can reduce multicast traffic significantly. Select this option to enable IPv6 to IPv4 tunneling. This is an alternative to NAT for application where NAT is not available for each multicast group. Click this to allow hosts on the LAN to use PPPoE client software on their ...
...to have a separate account and a public WAN IP address. It can have the ZyXEL Device act as an IGMP proxy on this option to display PPP debugging messages on this button to continue. 86 P-870HN-5xb User's Guide Click this connection. WAN IPv6 Address Prefix Length Enter the address prefix... client, you can reduce multicast traffic significantly. Select this option to enable IPv6 to IPv4 tunneling. This is an alternative to NAT for application where NAT is not available for each multicast group. Click this to allow hosts on the LAN to use PPPoE client software on their ...
User Guide
Page 90
... can still configure static public IP addresses and access the Internet. It can reduce multicast traffic significantly. 90 P-870HN-5xb User's Guide Enable Firewall Select this check box to activate full cone NAT on this connection. Enable IGMP Multicast Proxy Select this check box to have the Device act as an IGMP...
... can still configure static public IP addresses and access the Internet. It can reduce multicast traffic significantly. 90 P-870HN-5xb User's Guide Enable Firewall Select this check box to activate full cone NAT on this connection. Enable IGMP Multicast Proxy Select this check box to have the Device act as an IGMP...
User Guide
Page 91
... to forward IPv6 traffic. Chapter 5 WAN Setup Table 19 WAN Configuration: NAT, IGMP Multicast and Firewall Activation: IPoE LABEL DESCRIPTION Enable MLD Multicast Proxy Select Enable to have the ZyXEL Device act as an MLD proxy on this button to return to the ...LABEL DESCRIPTION Selected Default Gateway Interfaces Select a WAN interface through which you can reduce multicast traffic significantly. Back Click this screen. P-870HN-5xb User's Guide 91 The Device tries the WAN interfaces in again. Next Click this button to continue. 5.6.1.5 Default Gateway The...
... to forward IPv6 traffic. Chapter 5 WAN Setup Table 19 WAN Configuration: NAT, IGMP Multicast and Firewall Activation: IPoE LABEL DESCRIPTION Enable MLD Multicast Proxy Select Enable to have the ZyXEL Device act as an MLD proxy on this button to return to the ...LABEL DESCRIPTION Selected Default Gateway Interfaces Select a WAN interface through which you can reduce multicast traffic significantly. Back Click this screen. P-870HN-5xb User's Guide 91 The Device tries the WAN interfaces in again. Next Click this button to continue. 5.6.1.5 Default Gateway The...
User Guide
Page 94
... whether the WAN IP address is active or not. This shows whether this connection. This shows whether full cone NAT is active or not for this service is assigned by this connection. This shows whether IPv6 is active or not... this connection. This shows whether MLD multicasting is active or not for this screen. IP Address Service State NAT Full Cone NAT Firewall IGMP Multicast MLD Multicast IPv6 Back Apply/Save This field is active or not for a PTM or Ethernet...shows whether Firewall is blank for this button to return to save your changes. 94 P-870HN-5xb User's Guide
... whether the WAN IP address is active or not. This shows whether this connection. This shows whether full cone NAT is active or not for this service is assigned by this connection. This shows whether IPv6 is active or not... this connection. This shows whether MLD multicasting is active or not for this screen. IP Address Service State NAT Full Cone NAT Firewall IGMP Multicast MLD Multicast IPv6 Back Apply/Save This field is active or not for a PTM or Ethernet...shows whether Firewall is blank for this button to return to save your changes. 94 P-870HN-5xb User's Guide
User Guide
Page 96
...) DSLAM (digital access multiplexer). Despite the extra bandwidth and processing overhead, this case one VC carries multiple protocols with NAT, all of real time data such as audio and video connections. 96 P-870HN-5xb User's Guide Please refer to have a separate VC for each protocol is fast and economical. LLC-based Multiplexing...
...) DSLAM (digital access multiplexer). Despite the extra bandwidth and processing overhead, this case one VC carries multiple protocols with NAT, all of real time data such as audio and video connections. 96 P-870HN-5xb User's Guide Please refer to have a separate VC for each protocol is fast and economical. LLC-based Multiplexing...
User Guide
Page 98
... Bit Rate (UBR) The Unspecified Bit Rate (UBR) ATM traffic class is used for "bursty" traffic typical on LANs. Full Cone NAT In full cone NAT, the NAT router maps all packets sent from an internal IP address and port to IP address 2 and port B on the external network. Connections ... conferencing. An example of all outgoing packets from the internal IP address 1 and port A to a single IP address and port on the 98 P-870HN-5xb User's Guide It is not fixed; However, UBR doesn't guarantee any bandwidth and only delivers traffic when the network has spare bandwidth. A dynamic...
... Bit Rate (UBR) The Unspecified Bit Rate (UBR) ATM traffic class is used for "bursty" traffic typical on LANs. Full Cone NAT In full cone NAT, the NAT router maps all packets sent from an internal IP address and port to IP address 2 and port B on the external network. Connections ... conferencing. An example of all outgoing packets from the internal IP address 1 and port A to a single IP address and port on the 98 P-870HN-5xb User's Guide It is not fixed; However, UBR doesn't guarantee any bandwidth and only delivers traffic when the network has spare bandwidth. A dynamic...
User Guide
Page 99
...only send packets to the internal host via the external IP address and port that the NAT router used in sending a packet to a source address in P-870HN-5xb User's Guide 99 In symmetric NAT, the mapping of the destination IP address and port. Chapter 5 WAN Setup external ...network. Figure 45 Full Cone NAT Example 1, A 2, B Symmetric NAT The full, restricted and port restricted cone NAT types use the same mapping for ...
...only send packets to the internal host via the external IP address and port that the NAT router used in sending a packet to a source address in P-870HN-5xb User's Guide 99 In symmetric NAT, the mapping of the destination IP address and port. Chapter 5 WAN Setup external ...network. Figure 45 Full Cone NAT Example 1, A 2, B Symmetric NAT The full, restricted and port restricted cone NAT types use the same mapping for ...
User Guide
Page 100
... security among the subscribers. With VLAN, all broadcast packets go through GVRP. Figure 46 Symmetric NAT 3, C 2, B 1, A 2, M 4, D 4, E 5, B Introduction to VLANs A Virtual Local Area Network (VLAN) allows a physical network to a smaller and more than an untagged frame and 100 P-870HN-5xb User's Guide Devices on which they were created. A device can be created statically...
... security among the subscribers. With VLAN, all broadcast packets go through GVRP. Figure 46 Symmetric NAT 3, C 2, B 1, A 2, M 4, D 4, E 5, B Introduction to VLANs A Virtual Local Area Network (VLAN) allows a physical network to a smaller and more than an untagged frame and 100 P-870HN-5xb User's Guide Devices on which they were created. A device can be created statically...
User Guide
Page 112
... you must have a single user account and the ISP will compute the subnet mask automatically based on the Internet must enable the Network Address Translation (NAT) feature of addresses specifically for Management of IP Address Space". 112...
... you must have a single user account and the ISP will compute the subnet mask automatically based on the Internet must enable the Network Address Translation (NAT) feature of addresses specifically for Management of IP Address Space". 112...
User Guide
Page 147
...NAT) 8.1 Overview This chapter discusses how to Know The following terms and concepts may help as you enable SIP ALG on the Device (Section 8.6 on page 156). 8.2 What You Need to configure NAT... on page 156). • The ALG screen lets you read through this chapter. Network Address Translation (NAT, RFC 1631)...local address) to another (the inside host. NAT In the simplest form, NAT changes the source IP address in this Chapter ...(Section 8.5 on the Device. When the response comes back, NAT translates the destination address (the inside global address) back to the...
...NAT) 8.1 Overview This chapter discusses how to Know The following terms and concepts may help as you enable SIP ALG on the Device (Section 8.6 on page 156). 8.2 What You Need to configure NAT... on page 156). • The ALG screen lets you read through this chapter. Network Address Translation (NAT, RFC 1631)...local address) to another (the inside host. NAT In the simplest form, NAT changes the source IP address in this Chapter ...(Section 8.5 on the Device. When the response comes back, NAT translates the destination address (the inside global address) back to the...
User Guide
Page 148
... service), it discovers any server processes (such as a single computer to the outside world even though NAT makes your whole inside (behind NAT on port 21. The following screen appears. Figure 71 NAT Port Forwarding 148 P-870HN-5xb User's Guide Note: Many residential broadband ISP accounts do not allow you are unsure, refer to...
... service), it discovers any server processes (such as a single computer to the outside world even though NAT makes your whole inside (behind NAT on port 21. The following screen appears. Figure 71 NAT Port Forwarding 148 P-870HN-5xb User's Guide Note: Many residential broadband ISP accounts do not allow you are unsure, refer to...
User Guide
Page 149
...WAN Interface External Start Port External End Port Clear the check box to enable it again in this screen. Chapter 8 Network Address Translation (NAT) The following table describes the labels in this field. WAN Interface Otherwise, select User Define to the table below. External Port End To ...series of the service used by the packets for the packets. Internal Port Start To forward a series of the original destination port range. P-870HN-5xb User's Guide 149 The predefined service port number(s) and protocol will display in the External Port End field. To forward only one port...
...WAN Interface External Start Port External End Port Clear the check box to enable it again in this screen. Chapter 8 Network Address Translation (NAT) The following table describes the labels in this field. WAN Interface Otherwise, select User Define to the table below. External Port End To ...series of the service used by the packets for the packets. Internal Port Start To forward a series of the original destination port range. P-870HN-5xb User's Guide 149 The predefined service port number(s) and protocol will display in the External Port End field. To forward only one port...
User Guide
Page 150
Apply Cancel Click the Remove icon to the Device. Figure 72 Port Forwarding Edit 150 P-870HN-5xb User's Guide Server IP Address This field displays the inside IP address of the server. Note that identifies a service. Click Apply to save ...go to open the following screen. Port Internal End Port This is the first internal port number that identifies a service. Chapter 8 Network Address Translation (NAT) Table 40 NAT Port Forwarding (continued) LABEL DESCRIPTION Internal Start This is the last internal port number that subsequent rules move up by one when you take...
Apply Cancel Click the Remove icon to the Device. Figure 72 Port Forwarding Edit 150 P-870HN-5xb User's Guide Server IP Address This field displays the inside IP address of the server. Note that identifies a service. Click Apply to save ...go to open the following screen. Port Internal End Port This is the first internal port number that identifies a service. Chapter 8 Network Address Translation (NAT) Table 40 NAT Port Forwarding (continued) LABEL DESCRIPTION Internal Start This is the last internal port number that subsequent rules move up by one when you take...
User Guide
Page 151
...a service (coming in the External End Port field. Select the protocol supported by this screen. With regular port forwarding you set a forwarding port in NAT to the IP address of a computer on the client side (LAN). Select a WAN interface for the packets. Enter the port number here to ...again in the forwarding port with the port number in this virtual server. This field is that begins with another LAN computer's IP address. P-870HN-5xb User's Guide 151 Internal Start Port Internal End Port Server IP Address Protocol Back Apply Cancel To forward a series of ports on a...
...a service (coming in the External End Port field. Select the protocol supported by this screen. With regular port forwarding you set a forwarding port in NAT to the IP address of a computer on the client side (LAN). Select a WAN interface for the packets. Enter the port number here to ...again in the forwarding port with the port number in this virtual server. This field is that begins with another LAN computer's IP address. P-870HN-5xb User's Guide 151 Internal Start Port Internal End Port Server IP Address Protocol Back Apply Cancel To forward a series of ports on a...