ZyXEL Communications P-660HW-D Series manual

P-660HW-D Series

802.11g Wireless ADSL 2+ 4-port Gateway

User’s Guide

Version 3.40

Edition 1

3/2006

Contents

User’s Guide Page Copyright Disclaimer Trademarks Federal Communications Commission (FCC) Interference Statement FCC Caution IMPORTANT NOTE: FCC Radiation Exposure Statement Certifications Safety Warnings ZyXEL Limited Warranty Note Customer Support Page Page Table of Contents Bandwidth Management Wizard Wireless LAN Network Address Translation (NAT) Screens Firewall Configuration Content Filtering Static Route Bandwidth Management Remote Management Configuration Universal Plug-and-Play(UPnP) System Logs Diagnostic Troubleshooting Appendix A Appendix C Appendix D Appendix E Appendix F Appendix G PPPoE Appendix J Splitters and Microfilters Appendix K Appendix L List of Figures Page Page Figure 166 Red Hat 9.0: KDE: Network Configuration: Activate Page Page List of Tables Page Page Page Preface About This User's Guide Syntax Conventions Related Documentation User Guide Feedback Graphics Icons Key Getting To Know Your P-660HW 1.1 Introducing the P-660HW-D 1.2 Features High Speed Internet Access Zero Configuration Internet Access Any IP Firewall Universal Plug and Play (UPnP) PPPoE (RFC2516) Network Address Translation (NAT) Dynamic DNS Support DHCP Housing 4-portSwitch Wireless LAN Wi-FiProtected Access WPA2 1.3 Applications for the ZyXEL device 1.4 Front Panel LEDs 1.5 Hardware Connection Page Introducing the Web Configurator 2.1 Web Configurator Overview 2.2 Accessing the Web Configurator Login Ignore Go to Wizard setup Go to Advanced setup Status 2.3 Resetting the ZyXEL device 2.4Navigating the Web Configurator Page Page 2.4.2 Status Screen Page Page 2.4.3 Status: Any IP Table Any IP Table 2.4.4 Status: WLAN Status WLAN Status 2.4.5 Status: Bandwidth Status Bandwidth Status 2.4.6 Status: Packet Statistics Packet Statistics Poll Interval(s) Page 2.4.7 Changing Login Password Maintenance > System Wizard Setup for Internet Access 3.1 Introduction 3.2Internet Access Wizard Setup Restart the Internet/ Wireless Setup Wizard 3.2.1Automatic Detection 3.2.2Manual Configuration Page Page Page Back to Username and Password setup 3.3 Wireless Connection Wizard Setup Page Page Disable wireless security Manually assign a WEP key 3.3.1Manually assign a WPA-PSKkey Manually assign a key Pre- Shared Key 3.3.2 Manually assign a WEP key Manually assign a WEP key Finish Page Bandwidth Management Wizard 4.1 Introduction 4.2 Predefined Media Bandwidth Management Services 4.3Bandwidth Management Wizard Setup Page Page Page Page Page Page WAN Setup 5.1 WAN Overview 5.1.1.1 ENET ENCAP 5.1.1.2 PPP over Ethernet 5.1.1.3 PPPoA 5.1.1.4RFC 5.1.2.1 VC-basedMultiplexing 5.1.2.2 LLC-basedMultiplexing 5.1.3.1 Scenario 1: One VC, Multiple Protocols 5.1.3.2 Scenario 2: One VC, One Protocol (IP) 5.1.3.3 Scenario 3: Multiple VCs 5.1.5.1 IP Assignment with PPPoA or PPPoE Encapsulation 5.1.5.2 IP Assignment with RFC 1483 Encapsulation 5.2 Metric 5.3 Traffic Shaping 5.3.1.1 Constant Bit Rate (CBR) 5.3.1.2 Variable Bit Rate (VBR) 5.3.1.3 Unspecified Bit Rate (UBR) 5.4 Zero Configuration Internet Access 5.5Internet Connection Page 5.5.1 Configuring Advanced Internet Connection Setup Internet Connection 5.6 Configuring More Connections 5.6.1 More Connections Edit More Connections Page Page 5.6.2 Configuring More Connections Advanced Setup More Connections Edit 5.7 Traffic Redirect 5.8 Configuring WAN Backup Page Page LAN Setup 6.1 LAN Overview 6.1.1LANs, WANs and the ZyXEL device 6.1.2.1 IP Pool Setup 6.2LAN TCP/IP 6.2.1.1 Private IP Addresses 6.2.3 Multicast IGMP-v1 IGMP WAN None 6.2.4.1 How Any IP Works 6.3 Configuring LAN IP Page 6.4 DHCP Setup 6.5 LAN Client List 6.6 LAN IP Alias IP Alias Page Page Wireless LAN 7.1 Wireless Network Overview 7.2Wireless Security Overview 7.2.3 User Authentication 7.2.4 Encryption Static WEP 7.3 Wireless Performance Overview 7.4 General Wireless LAN Screen 7.4.1 No Security No Security 7.4.2 WEP Encryption Network > Wireless LAN 7.4.3 WPA-PSK/WPA2-PSK 7.4.4 WPA/WPA2 Wireless LAN Page 7.4.5 Wireless LAN Advanced Setup Figure 61 Advanced 7.5 OTIST 7.5.1.1 AP RESET Figure 62 OTIST Wireless LAN > General Yes 7.5.1.2 Wireless Client 7.5.3Notes on OTIST 7.6 MAC Filter 7.7 WMM QoS 7.7.2 WMM QoS Priorities 7.7.3 Services Page 7.8 QoS Screen Page 7.8.2 Application Priority Configuration Modify Page Network Address Translation (NAT) Screens 8.1 NAT Overview 8.1.2 What NAT Does 8.1.3 How NAT Works 8.1.4 NAT Application 8.1.5 NAT Mapping Types One to One Many to One SUA Only 8.2 SUA (Single User Account) Versus NAT 8.3NAT General Setup 8.4 Port Forwarding 8.4.1 Default Server IP Address 8.4.2 Port Forwarding: Services and Port Numbers 8.4.3 Configuring Servers Behind Port Forwarding (Example) 8.5 Configuring Port Forwarding 8.5.1 Port Forwarding Rule Edit 8.6 Address Mapping Page 8.6.1 Address Mapping Rule Edit Address Mapping Page Firewalls 9.1 Firewall Overview 9.2 Types of Firewalls 9.3 Introduction to ZyXEL’s Firewall 9.4 Denial of Service 9.4.2 Types of DoS Attacks Ping of Death Teardrop SYN Flood LAND SYN Attack LAND Attack brute-force 9.4.2.1 ICMP Vulnerability 9.4.2.2 Illegal Commands (NetBIOS and SMTP) 9.4.2.3 Traceroute 9.5 Stateful Inspection 9.5.1 Stateful Inspection Process Firewall General 9.5.2Stateful Inspection and the ZyXEL device 9.5.3 TCP Security 9.5.4 UDP/ICMP Security 9.6Guidelines for Enhancing Security with Your Firewall 9.7Packet Filtering Vs Firewall 9.7.1.1When To Use Filtering 9.7.2.1When To Use The Firewall Firewall Configuration 10.1 Access Methods 10.2 Firewall Policies Overview 10.3 Rule Logic Overview 10.3.3.1 Action 10.3.3.2 Service 10.3.3.3 Source Address 10.3.3.4 Destination Address 10.4 Connection Direction 10.5 General Firewall Policy 10.6 Firewall Rules Summary Page 10.6.1 Configuring Firewall Rules Page Page 10.6.2 Customized Services Edit Customized Services 10.7 Example Firewall Rule Customized Service Customized Services Config Any Destination Address Delete Services Rules Page 10.8 Predefined Services Page 10.9 Anti-Probing 10.10 DoS Thresholds 10.10.2.1 TCP Maximum Incomplete and Blocking Time 10.10.3 Configuring Firewall Thresholds Firewall Threshold Page Page Content Filtering 11.1 Content Filtering Overview 11.2 Configuring Keyword Blocking 11.3 Configuring the Schedule 11.4 Configuring Trusted Computers Page Static Route 12.1 Static Route 12.2 Configuring Static Route 12.2.1 Static Route Edit Edit Page Page Bandwidth Management 13.1 Bandwidth Management Overview 13.2Application-basedBandwidth Management 13.3 Subnet-basedBandwidth Management 13.4 Application and Subnet-basedBandwidth Management 13.5 Scheduler 13.6 Maximize Bandwidth Usage 13.6.2.1 Priority-basedAllotment of Unused and Unbudgeted Bandwidth 13.6.2.2Fairness-basedAllotment of Unused and Unbudgeted Bandwidth 13.7 Over Allotment of Bandwidth 13.8 Configuring Summary 13.9 Bandwidth Management Rule Setup Page 13.9.1 Rule Configuration User Defined Service Rule Setup Page 13.10 Bandwidth Monitor Page Dynamic DNS Setup 14.1 Dynamic DNS Overview 14.2 Configuring Dynamic DNS Figure 108 Dynamic DNS Page Page Remote Management Configuration 15.1 Remote Management Overview 15.2 WWW 15.3 Telnet 15.4 Configuring Telnet 15.5 Configuring FTP 15.6 SNMP 15.6.1Supported MIBs 15.6.2 SNMP Traps 15.6.3 Configuring SNMP SNMP 15.7 Configuring DNS 15.8 Configuring ICMP Page Universal Plug-and-Play(UPnP) 16.1 Introducing Universal Plug and Play 16.2 UPnP and ZyXEL 16.3 Installing UPnP in Windows Example Communications Universal Plug and Play Add/Remove Programs Properties 16.3.2 Installing UPnP in Windows XP 1Click start and Control Panel 2Double-click Network Connections Network Connections Optional Networking Components … 16.4Using UPnP in Windows XP Example Page Page 16.4.2 Web Configurator Easy Access 1Click Start and then Control Panel 3Select My Network Places under Other Places Local Network Invoke Page Page System 17.1 General Setup Page 17.2 Time Setting Page Page Page Logs 18.1 Logs Overview 18.2 Viewing the Logs 18.3 Configuring Log Settings Access Control Page 18.3.1 Example E-mailLog Page Tools 19.1 Firmware Upgrade Firmware Upload in Progress Return 19.2 Configuration Screen 19.2.2 Restore Configuration 19.3 Restart Page Diagnostic 20.1 General Diagnostic 20.2 DSL Line Diagnostic Troubleshooting 21.1 Problems Starting Up the ZyXEL device 21.2 Problems with the LAN 21.3 Problems with the WAN 21.4 Problems Accessing the ZyXEL device Page Product Specifications Specification Tables Table 101 Firmware Page Page About ADSL Introduction to DSL ADSL Overview Advantages of ADSL Page Wall-mountingInstructions Page Setting up Your Computer’s IP Address Windows 95/98/Me Installing Components Protocol Microsoft manufacturers Client Configuring Obtain an IP address automatically Specify an IP address Subnet Mask Disable DNS Windows 2000/NT/XP 3Right-click Local Area Connection and then click Properties Internet Protocol (TCP/IP) •Click Advanced IP Settings TCP/IP Address IP address Subnet mask Use the following DNS server addresses Preferred DNS server Alternate DNS server Macintosh OS 8/9 2Select Ethernet built-in from the Connect via list Using DHCP Server Configure: Macintosh OS Linux Using the K Desktop Environment (KDE) System Setting Ethernet Device General Automatically obtain IP address settings with dhcp Using Configuration Files dhcp static 21.4.1 Verifying Settings IP Subnetting IP Addressing IP Classes Subnet Masks Subnetting Example: Two Subnets Page Example: Four Subnets Example Eight Subnets Subnetting With Class A and Class B Networks Page Command Interpreter Accessing the CLI Command Syntax Command Usage Page Firewall Commands Page Page Page Page Page NetBIOS Filter Commands Introduction Display NetBIOS Filter Settings NetBIOS Filter Configuration PPPoE PPPoE in Action Benefits of PPPoE Traditional Dial-upScenario How PPPoE Works ZyXEL device as a PPPoE Client Splitters and Microfilters Connecting a POTS Splitter Telephone Microfilters Page ZyXEL device With ISDN Page Log Descriptions Page Page Table 123 ICMP Logs Table 124 CDR Logs Table 125 PPP Logs Table 126 UPnP Logs Page Table 129 IPSec Logs Table 130 IKE Logs Page Page Table 131 PKI Logs Page Page Page Page Log Commands Log Command Example Wireless LANs Wireless LAN Topologies ESS Channel RTS/CTS Fragmentation Threshold Preamble Type IEEE 802.11g Wireless LAN IEEE RADIUS Types of Authentication Dynamic WEP Key Exchange WPA and WPA2 User Authentication Wireless Client WPA Supplicants WPA(2) with RADIUS Application Example 21.4.2 WPA(2)-PSKApplication Example Security Parameters Summary Page Internet Explorer Pop-upBlockers Enable pop-upBlockers with Exceptions 2Select Settings…to open the Pop-upBlocker Settings screen Allowed sites JavaScripts Custom Level Scripting Active scripting Scripting of Java applets Java Permissions Microsoft VM Java permissions JAVA (Sun) 2make sure that Use Java 2 for <applet> under Java (Sun) is selected Figure 193 Java (Sun) Index