Gebruiksaanwijzing /service van het product P-870HW-I van de fabrikant ZyXEL Communications
Ga naar pagina of 438
P-870HW -I Series 802.1 1g Wireless VDSL2 4-port Gateway User ’ s Guide V ersion 3.50 8/2006 Edition 1.
.
P-870HW-I1 User’s Guide Copyright 3 Copyright Copyright © 2006 by ZyXEL Communications Corpo ration. The contents of this publication may not be reprod uced in any part or as a whole, tr anscribed,.
P-870HW-I1 User’s Guide 4 Certifications Certifications Federal Communications Commissi on (FCC) Interference St atement The device complies with Part 15 of FCC rules. Operation is subject to the following two conditions: • This device may not cause harmful interference.
P-870HW-I1 User’s Guide Certifications 5 第十二條 經型式 認證合格之低功率射頻電機，非經 許可，公司、商號或使用 者均不得擅自變更頻率、加大功率或變更.
P-870HW-I1 User’s Guide 6 Safety Warnings Safety W arnings For your safety , be sure to read and fo llow all warning notices and instructions. • Do NOT use this product near water , for exam ple, in a wet basement o r near a swimming pool. • Do NOT expose your device to dampness, dust or corrosive liquids.
P-870HW-I1 User’s Guide Safety Warnings 7 This product is recyclable . Dispose of it properly ..
P-870HW-I1 User’s Guide 8 ZyXEL Limited Warranty ZyXEL Limited W arranty ZyXEL warrants to the original en d user (purchaser) that this product is free from any defects in materials or workmansh ip for a period of up to tw o years from the date of purchase .
P-870HW-I1 User’s Guide Customer Support 9 Customer Support Please have the following information r eady when you contact customer support. • Product model and serial number . • W arranty Information. • Date that you received your de vice. • Brief description of the problem and the steps yo u took to solve i t.
P-870HW-I1 User’s Guide 10 Customer Suppo rt +” is the (prefix) number you enter to make an interna tional telephone call. NORWAY support@zyxel.no +47-22-80-61-80 www .zyxel.no ZyXEL Communications A/S Nils Hansens vei 13 0667 Oslo Norway sales@zyxel.
P-870HW-I1 User’s Guide Table of Contents 11 T able of Content s Copyright .................................................. .......................................... ...................... 3 Certifications ........................................
P-870HW-I1 User’s Guide 12 Table of Contents 3.2 Welcome Screen .................... ............. ................ ............. ................ ............. .....56 3.3 System Inf ormation Screen .......................... ............. ........
P-870HW-I1 User’s Guide Table of Contents 13 Chapter 6 Wireless LAN ................................................................. ......................................... 93 6.1 Wireless Network Overview ...................... ............. ...
P-870HW-I1 User’s Guide 14 Table of Contents 8.1.4 LAN IP Alias .. ................ ............. ............. ................ ............. ............ ....... 128 8.2 LAN IP Screen ............................. ............. ............. .....
P-870HW-I1 User’s Guide Table of Contents 15 1 1.3 Guidelines for Enhancing Security wi th Y our Firewall ....................... ............. 153 1 1.3.1 Security In G eneral ........... ....... ... ................ ............. ................ .
P-870HW-I1 User’s Guide 16 Table of Contents Chapter 15 Bandwid th MGMT .......................... ........................................... ............................ 197 15.1 Bandwidth Management Overview ..... .......... ............ ........
P-870HW-I1 User’s Guide Table of Contents 17 Chapter 18 System ............ .................................................... ........................................... ....... 229 18.1 General Setup .. .......... ............. ................ .
P-870HW-I1 User’s Guide 18 Table of Contents 24.3 IP Alias Setup .......... ............. ................ ................ ............. ................ ............. 262 24.4 Wireless LAN Set up ................... ................ ............. .
P-870HW-I1 User’s Guide Table of Contents 19 30.6 Applying a Filter ........................... .... ............. ............ ................. ............ .......300 30.6.1 Applying LAN Filter s ................ ............. ............ ......
P-870HW-I1 User’s Guide 20 Table of Contents 35.4.7 Uploading Firmware F ile Via Console Port .... ................ ................ ....... 329 35.4.8 Example Xmodem Firmware Upload Using HyperT erminal ..... ............. 330 35.4.9 Uploading Configurat ion File Via Console Port .
P-870HW-I1 User’s Guide Table of Contents 21 Appendix B Setting up Your Computer’s IP Address ............................................................ 365 Windows 95/98/Me ........ ................ ................ ............. ..............
P-870HW-I1 User’s Guide 22 Table of Contents Example Internal SPTGEN Menus ......... ....... .......... ............ ................. ............ ...... 418 Appendix I Services .......... .................................................... ......
P-870HW-I1 User’s Guide List of Figure s 23 List of Figures Figure 1 Applications: Protecte d Internet Access .................. ................ ................ ............. 43 Figure 2 Applications: Management Server ................. ..........
P-870HW-I1 User’s Guide 24 List of Figures Figure 39 S tatus .............. ............. ............. ................ ............. ................ ............. ............ .... 85 Figure 40 S tatus > BW MGMT Monitor .............. ........
P-870HW-I1 User’s Guide List of Figure s 25 Figure 82 Ideal Firewall Setup .. ............ ................. ............. ............ ................. ............ ....... 151 Figure 83 “T riangle Route” Problem ................ .............
P-870HW-I1 User’s Guide 26 List of Figures Figure 125 Add/Remove Progra ms: Windows Setup: Communication ..................... .......... 219 Figure 126 Add/Remove Progra ms: Windows Setup: Communication: Components ..... ... 220 Figure 127 Network Connections .
P-870HW-I1 User’s Guide List of Figure s 27 Figure 168 Menu 1 1.1.5: Traf fi c Redirect Setup ..... ............. ................ ............. ................ ... 274 Figure 169 Menu 12: IP S tatic Route Setup ........................ ...........
P-870HW-I1 User’s Guide 28 List of Figures Figure 21 1 Menu 24.6: Restore C onfiguration ... ....................... ............. ................ ............. 325 Figure 212 Menu 24.7: System Maintenance - Upload Firmware .................... ...
P-870HW-I1 User’s Guide List of Figure s 29 Figure 254 Macintosh OS X: Network ................ ................. ................ ............. ................ ... 374 Figure 255 Red Hat 9.0: KDE: Network Configur ation: D evices .................
P-870HW-I1 User’s Guide 30 List of Figures.
P-870HW-I1 User’s Guide List of Tables 31 List of T ables T able 1 LEDs ..................... ............. ............. ................ ............. ................ ............. ........ ..... 44 T able 2 Web Configurator: Navigation Panel and Icons .
P-870HW-I1 User’s Guide 32 List of Tables T able 39 Network > Wireless LAN > General > 802.1x + Dynamic WEP .......................... 102 T able 40 Network > Wireless LAN > General > 802.1x + S tatic WEP ... ................ .....
P-870HW-I1 User’s Guide List of Tables 33 T able 82 Security > C ertificates > Trusted Remote Hosts > Edit ............................. .......... 188 T able 83 Security > C ertificates > Directory Servers ...... ................ ...
P-870HW-I1 User’s Guide 34 List of Tables T able 125 Menu 1 1.1.4: Remote Node Filter ......... ............. ............ ................. ............ ....... 273 T able 126 Menu 1 1.1.5: T raffic Redirect Setup ..... ............. ..............
P-870HW-I1 User’s Guide List of Tables 35 T able 168 Dev ice S pecif ications .. ................ ................ ............. ................ ................ .......... 363 T able 169 Net BIOS Filter Default Set tings ..................... ....
P-870HW-I1 User’s Guide 36 List of Tables.
P-870HW-I1 User’s Guide Preface 37 Preface Congratulations on you r purchase of the P-87 0HW -I1 (“ZyXEL Device“) VDSL router with built-in IEEE 802.1 1g wireless capability . This ZyXEL Device also has a 4-port hub that allows you to connect up to 4 computers to the ZyXEL Device without purchasing a switch/ hub.
P-870HW-I1 User’s Guide 38 Preface User Guide Feedback Help us help you. E-mail all User Guide-related comments, questions or suggestions for improvement to techwriters@zyxel.com.tw or send regular mail to The T echnical W riting T eam, ZyXEL Communications Corp.
P-870HW-I1 User’s Guide Chapter 1 Getting To Know Your ZyXEL Device 39 C HAPTER 1 Getting T o Know Y our ZyXEL Device This chapter describes the key features and applications of your ZyXEL Device . 1.1 Introducing the ZyXEL Device Y our ZyXEL Device is a VDSL router that provid es super high-spe ed Internet access through a telephone line.
P-870HW-I1 User’s Guide 40 Chapter 1 Getting To Kn ow Your ZyXEL Device TR-069 Compliance TR-069 is a protocol that de fines how your ZyXEL Device can be managed via a management server such as ZyXEL ’ s V antage CNM Acce ss. The management server can securely manage and update configuration changes in ZyXEL Devices.
P-870HW-I1 User’s Guide Chapter 1 Getting To Know Your ZyXEL Device 41 Media Bandwid t h Management ZyXEL ’ s Media Bandwidth Management allows yo u to specify bandwidt h classes based on an application and/or subnet. Y ou can allocate specific amounts of bandwidth capacity (bandwidth budgets) to dif ferent bandwidth classes.
P-870HW-I1 User’s Guide 42 Chapter 1 Getting To Kn ow Your ZyXEL Device Note: The ZyXEL Device may be prone to RF (Radio Frequency) interference from other 2.4 GHz devices such as micr owave ovens, wireless p hones, Bluetooth enabled devices, and other wireless LANs.
P-870HW-I1 User’s Guide Chapter 1 Getting To Know Your ZyXEL Device 43 Figure 1 Applications: Protected Internet Access 1.3.2 Manage ment Server Y our ZyXEL Device can be managed via a management server such as ZyXEL ’ s V antage CNM Access. The management server can secure ly manage and update configuration changes for you.
P-870HW-I1 User’s Guide 44 Chapter 1 Getting To Kn ow Your ZyXEL Device The following table describes the LEDs. 1.5 Splitters and Microfilters This section describes how to connect VDSL splitters and micr ofilters. See your Quick Start Guide for details on other hardware connections.
P-870HW-I1 User’s Guide Chapter 1 Getting To Know Your ZyXEL Device 45 Figure 4 Connecting a POTS S plitter 1 Connect the side labeled “Phone” to your telephone. 2 Connect the side labeled “Mo dem” or “DSL” to your ZyXEL Devic e. 3 Connect the side labeled “Lin e” to the telephone wall jack.
P-870HW-I1 User’s Guide 46 Chapter 1 Getting To Kn ow Your ZyXEL Device.
P-870HW-I1 User’s Guide Chapter 2 Introducing the Web Configur ator 47 C HAPTER 2 Introducing the W eb Configurator This chapter describes how to access and navigate the web configurator .
P-870HW-I1 User’s Guide 48 Chapter 2 Introducing the Web Configurator Figure 6 Login Screen 3 The Password field may already contain the defa ult password 1234 .
P-870HW-I1 User’s Guide Chapter 2 Introducing the Web Configur ator 49 Figure 8 Login: Replace Certificate Screen 5 Follow the directions in this screen. If you click Ignor e , this screen appears the next time you log in. Afterwards, th e following screen appears.
P-870HW-I1 User’s Guide 50 Chapter 2 Introducing the Web Configurator Figure 10 Main Screen Note: Click the icon (located in the upper right corner of most screens) to view embedded help. The panel on the left side is the navigation panel. Y ou can use this panel to open various screens in the web confi gurator .
P-870HW-I1 User’s Guide Chapter 2 Introducing the Web Configur ator 51 Wireless LAN General Use this screen to configure basic wireless settings and wireless security .
P-870HW-I1 User’s Guide 52 Chapter 2 Introducing the Web Configurator Certificates My Certificates Use this screen to add, modify , or remove the ZyXEL Device’s current certificates. T rusted CAs Use this scre en to add, modi fy , or remove certificates for other computers.
P-870HW-I1 User’s Guide Chapter 2 Introducing the Web Configur ator 53 2.4 Resetting the ZyXEL Device Reset the ZyXEL Device in the following situations: • Y ou forgot your password. • Y ou cannot access the device using th e web c onfigurator or SMT .
P-870HW-I1 User’s Guide 54 Chapter 2 Introducing the Web Configurator.
P-870HW-I1 User’s Guide Chapter 3 Connection Wizard 55 C HAPTER 3 Connection W izard This chapter provides informa tion on the W izard Setup scree ns for wireless settings and Internet access in the web configurator . 3.1 Main Wizard Screen Use this screen to select wh ich wizard you want to run.
P-870HW-I1 User’s Guide 56 Chapter 3 Connection Wizard 3.2 W elcome Screen Use this screen to look at a preview of the Connection W izard . Figure 12 Connection Wizard: W elcome The following table describes the labels in this screen. 3.3 System Information Screen Use this screen to set up the system name and domain name for y our ZyXEL Device.
P-870HW-I1 User’s Guide Chapter 3 Connection Wizard 57 Figure 13 Connection Wizard: System Informatio n The following table describes the labels in this screen. 3.4 Wireless LAN Screen Use this screen to set up the basic settings for your wireless network.
P-870HW-I1 User’s Guide 58 Chapter 3 Connection Wizard Figure 14 Connection Wizard: Wire less LAN The following table describes the labels in this screen. Table 6 Connection Wizard: Wireless LAN LABEL DESCRIPTION Name(SSID) The Service Set IDentity (SSID) is the na me of the wireless network.
P-870HW-I1 User’s Guide Chapter 3 Connection Wizard 59 3.5 Wireless Security Screens The next screens depend o n which type of Security you select in the previous screen. 3.5.1 Wireless Security: None Use this screen to enable OTIST for your wireless network.
P-870HW-I1 User’s Guide 60 Chapter 3 Connection Wizard Figure 16 Connection Wizard: Wireless Secu rity : Basic Security Screen 1 The following table describes the labels in this screen. 3.5.3 Wireless Security: Basic Security Screen 2 Use this screen to enable OTIST for your wireless network.
P-870HW-I1 User’s Guide Chapter 3 Connection Wizard 61 Figure 17 Connection Wizard: Wireless Secu rity : Basic Security Screen 2 The following table describes the labels in this screen. 3.5.4 Wireless Security: Auto Use this screen to enable OTIST for your wireless network.
P-870HW-I1 User’s Guide 62 Chapter 3 Connection Wizard Figure 18 Connection Wizard: Wireless Security: Auto The following table describes the labels in this screen. 3.5.5 Wireless Security: Exte nd (WP A-PSK) Security Screen 1 Use this screen to set up the WP A pre -shared key for your wireless network.
P-870HW-I1 User’s Guide Chapter 3 Connection Wizard 63 Figure 19 Connection Wizard: Wireless Security: Extend (WP A-PSK ) Se curity Scre en 1 The following table describes the labels in this screen. 3.5.6 Wireless Security: Exte nd (WP A-PSK) Security Screen 2 Use this screen to enable OTIST for your wireless network.
P-870HW-I1 User’s Guide 64 Chapter 3 Connection Wizard Figure 20 Connection Wizard: Wireless Security: Extend (WP A-PSK ) Se curity Scre en 2 The following table describes the labels in this screen. 3.5.7 Wireless Security: Extend (WP A2-PSK) Security Screen 1 Use this screen to set up the WP A2 pr e-shared key for your wireless network.
P-870HW-I1 User’s Guide Chapter 3 Connection Wizard 65 Figure 21 Connection Wizard: Wireless Security: Extend (WP A 2-PSK) Security Screen 1 The following table describes the labels in this screen.
P-870HW-I1 User’s Guide 66 Chapter 3 Connection Wizard 3.5.8 Wireless Security: Extend (WP A2-PSK) Security Screen 2 Figure 22 Connection Wizard: Wireless Security: Extend (WP A 2-PSK) Security Screen 2 The following table describes the labels in this screen.
P-870HW-I1 User’s Guide Chapter 3 Connection Wizard 67 Figure 23 Connection Wizard: Inter net Connection: Auto-Detection 3.7 ISP Parameters Screen Use these screens to set up you r Internet connection. The screen depends on which type of Connection T ype your Internet connection uses.
P-870HW-I1 User’s Guide 68 Chapter 3 Connection Wizard Figure 24 Connection Wizard: ISP Par ameters: Ethernet The following table describes the labels in this screen. 3.7.2 ISP Parameters: PPPoE Screen Use this screen to set up a P PPoE connection t o the Internet.
P-870HW-I1 User’s Guide Chapter 3 Connection Wizard 69 Figure 25 Connection Wizard: ISP Parameters: PPPoE The following table describes the labels in this screen. 3.8 IP Address T ype Screen Use this screen to specify what type of IP address your ISP provides.
P-870HW-I1 User’s Guide 70 Chapter 3 Connection Wizard Figure 26 Connection Wizard: IP Add ress T ype The following table describes the labels in this screen. 3.9 St atic IP Address Settings Screen Use these screens to set up a static IP ad dress. The screen depends on which type of Connection T ype your Internet connection uses.
P-870HW-I1 User’s Guide Chapter 3 Connection Wizard 71 Figure 27 Connection Wizard: S tatic IP Address: Ethernet The following table describes the labels in this screen. 3.9.2 ISP Parameters: PPPoE Screen Use this screen to set up a P PPoE connection t o the Internet.
P-870HW-I1 User’s Guide 72 Chapter 3 Connection Wizard Figure 28 Connection Wizard: ISP Parameters: PPPoE The following table describes the labels in this screen. 3.10 MAC Address Screen Use this screen to specify which MAC address the ZyXEL Device should use.
P-870HW-I1 User’s Guide Chapter 3 Connection Wizard 73 Figure 29 Connection Wizard: MAC Address The following table describes the labels in this screen. Table 20 Connection Wizard: MAC Addr ess LABEL DESCRIPTION Fa ct ory d efa ul t Select this, unless you have spoofed (cl oned) your computer ’s MAC address before.
P-870HW-I1 User’s Guide 74 Chapter 3 Connection Wizard 3.1 1 Internet Configuration Screen Figure 30 Connection Wizard: Inter net Configuration The following table describes the labels in this screen. 3.12 Auto-Detection Screen If you enabled OTIST , wait while your ZyXEL Device starts OTIST .
P-870HW-I1 User’s Guide Chapter 3 Connection Wizard 75 Figure 31 Connection Wizard: OTIST : S tart 3.13 Congratulations Screen Use this screen to finish the Connection W izard . Figure 32 Connection Wizard: Cong ratulations The following table describes the labels in this screen.
P-870HW-I1 User’s Guide 76 Chapter 3 Connection Wizard.
P-870HW-I1 User’s Guide Chapter 4 Bandwidth Management Wiza rd 77 C HAPTER 4 Bandwid th Management Wizard This chapter provides informa tion o n the W izard Setup screens for bandwidth management.
P-870HW-I1 User’s Guide 78 Chapter 4 Bandwidth Man agement Wizard Figure 33 Main Wizard Screen The following table describes the labels in this screen.
P-870HW-I1 User’s Guide Chapter 4 Bandwidth Management Wiza rd 79 Figure 34 BWM Wizard: Welcome The following table describes the labels in this screen. 4.3 General Information Screen Use this screen to activate ba ndwidth management an d to set the amount of band width you want to allocate for each interface on the ZyXEL Device.
P-870HW-I1 User’s Guide 80 Chapter 4 Bandwidth Man agement Wizard Figure 35 BWM Wizard: General In formation The following table describes the labels in this screen. Table 25 BWM Wizard: General In formation LABEL DESCRIPTION Active Select this to enable bandwidth management.
P-870HW-I1 User’s Guide Chapter 4 Bandwidth Management Wiza rd 81 4.4 Services Setup Screen Use this screen to select the applications to which you want to allocate bandwidth. Y ou can use the applications you do not select, as well as on es that do not appear on this list, but they have lower priority .
P-870HW-I1 User’s Guide 82 Chapter 4 Bandwidth Man agement Wizard The following table describes the labels in this screen. 4.5 Priority Setup Screen Use this screen to set the priority of the appl ications you selected in the previous screen.
P-870HW-I1 User’s Guide Chapter 4 Bandwidth Management Wiza rd 83 Figure 37 BWM Wizard: Priority Setup The following table describes the labels in this screen.
P-870HW-I1 User’s Guide 84 Chapter 4 Bandwidth Man agement Wizard Figure 38 BWM Wizard: Congratulati ons The following table describes the labels in this screen. Table 28 BWM Wizard: Congratulat ions LABEL DESCRIPTION Finish Click this to close the wizard.
P-870HW-I1 User’s Guide Chapter 5 Status Screen 85 C HAPTER 5 S t atus Screen This chapter introduces the St a t u s screen and the summary screens you can open from it. 5.1 St atus Screen T o open this screen, click St a t u s . This screen also appears when you log in and select Go to Advanced setup .
P-870HW-I1 User’s Guide 86 Chapter 5 Status Screen The following table describes the labels shown in the St a t u s screen. Table 29 Status LABEL DESCRIPTION Refresh Interval Select a number of seco.
P-870HW-I1 User’s Guide Chapter 5 Status Screen 87 5.1.1 St atus: BW MGMT Monitor Use this screen to view the band width usage b ased on the rules you configure for the LAN, W AN and WLAN. T o access this screen, click St a t u s , and then click (Details.
P-870HW-I1 User’s Guide 88 Chapter 5 Status Screen Figure 40 S tatus > BW MGMT Monitor 5.1.2 St atus: DHCP T able T o access this sc reen, click St a t u s , and then click (Details.
P-870HW-I1 User’s Guide Chapter 5 Status Screen 89 Figure 41 S tatus > DHCP T able Each field is described in the following table. 5.1.3 St atus: Packet S t atistics Use this screen to view the port status, packet-s pecific statistics, and system up time.
P-870HW-I1 User’s Guide 90 Chapter 5 Status Screen The following table describes the fields in this screen. 5.1.4 St atus: WLAN St ation St atus Use this screen to view the wireless stations that are currently associated to the ZyXEL Device. T o access this sc reen, click St a t u s , and then click (Details.
P-870HW-I1 User’s Guide Chapter 5 Status Screen 91 The following table describes the labels in this screen. Table 32 S tatus > WLAN S tation S tatus LABEL DESCRIPTION # This field is a sequential value. It is not associated with a specific entry .
P-870HW-I1 User’s Guide 92 Chapter 5 Status Screen.
P-870HW-I1 User’s Guide Chapter 6 Wireless LAN 93 C HAPTER 6 W ireless LAN This chapter discusses how to configure the wire less network settings in your ZyXEL Device. 6.1 Wireless Network Overview The following figure provides an example o f a wireless n etwork.
P-870HW-I1 User’s Guide 94 Chapter 6 Wireless LAN • Every wireless client in the same wirel ess network must use security compatible with the AP . Security stops unauthorized devices from using the wireless network. It can also protect the information that is sent in the wireless network.
P-870HW-I1 User’s Guide Chapter 6 Wireless LAN 95 For wireless networks, there are two typical plac es to store the user names and passwords for each user . • In the AP: this feature is called a local user database or a local database. • In a RADIUS server: this is a server u sed in businesses mo re than in homes.
P-870HW-I1 User’s Guide 96 Chapter 6 Wireless LAN Note: It is recommended that wireless networks u se WP A-PSK , WP A , or stronger encryption. IEEE 802.1x and W EP encryption are better than none at all, bu t it is still possible for unauthori zed devices t o figure out the original informat ion pretty quickly .
P-870HW-I1 User’s Guide Chapter 6 Wireless LAN 97 T o open this screen, click Network > W ireless LAN . Figure 45 Network > Wireless LAN > General The following table describes the general wireless LAN labels in this screen.
P-870HW-I1 User’s Guide 98 Chapter 6 Wireless LAN Figure 46 Network > Wireless LAN > General > N o Security The following table describes the labels in this screen. 6.4.2 General Wireless LAN Screen: S t atic WEP Use this screen to enable and configure WEP en cryption in your wireless network.
P-870HW-I1 User’s Guide Chapter 6 Wireless LAN 99 The following table describes the labels in this screen. 6.4.3 General Wirele ss LAN Screen: WP A-PSK Use this sc reen to enab le and config ure WP A- PSK encryptio n in your wireless network. T o open this screen, click Network > Wir eless LAN , and set Security Mode to WP A-PSK .
P-870HW-I1 User’s Guide 100 Chapter 6 Wireless LAN 6.4.4 General Wire less LAN Screen: WP A Use this screen to enable and configure WP A encryption in your wireless network. T o open this screen, click Network > Wir eless LAN , and set Se curity Mode to WP A .
P-870HW-I1 User’s Guide Chapter 6 Wireless LAN 101 The following table describes the labels in this screen. 6.4.5 General Wire less LAN Screen: 802. 1x + Dynamic WEP Use this sc reen to enab le and config ure I EEE 802.1x authenticatio n and dynamic WEP encryption in your wireless networ k.
P-870HW-I1 User’s Guide 102 Chapter 6 Wireless LAN Figure 50 Network > Wireless LAN > General > 802.1x + Dynamic WEP The following table describes the labels in this screen. Table 39 Network > Wireless LAN > Genera l > 802.1x + Dynamic WEP LABEL DESCRIPTION Security Mode Select 802 .
P-870HW-I1 User’s Guide Chapter 6 Wireless LAN 103 6.4.6 General Wire less LAN Screen: 802. 1x + S t atic WEP Use this screen to enable and configure IEEE 802.1x authentication an d static WEP encryption in your wireless network. T o open this screen, click Network > Wir eless LAN , and set Security Mode to 802.
P-870HW-I1 User’s Guide 104 Chapter 6 Wireless LAN The following table describes the labels in this screen. 6.4.7 General Wireless LAN Screen: 802.1x + No WEP Use this scr een to enab le and configure IEEE 802.1x authentication without WEP encryption in your wireless network.
P-870HW-I1 User’s Guide Chapter 6 Wireless LAN 105 Figure 52 Network > Wireless LAN > General > 802.1x + No WEP The following table describes the labels in this screen. Table 41 Network > Wireless LAN > Gene ral > 802.1x + No WEP LABEL DESCRIPTION Security Mode Select 802 .
P-870HW-I1 User’s Guide 106 Chapter 6 Wireless LAN 6.4.8 General Wirele ss LAN Screen: WP A2-PSK Use this scr een to enab le and configure WP A2- PSK encryption in your wireless network. T o open this screen, click Network > Wir eless LAN , and set Security Mode to WP A2-PSK .
P-870HW-I1 User’s Guide Chapter 6 Wireless LAN 107 6.4.9 General Wire less LAN Screen: WP A2 Use this sc reen to enab le and config ure WP A2 en cryption in your wireless network. T o open this screen, click Network > Wir eless LAN , and set Se curity Mode to WP A2 .
P-870HW-I1 User’s Guide 108 Chapter 6 Wireless LAN The following table describes the labels in this screen. 6.5 OTIST Screen Use this screen to set up and start OTIST on th e ZyXEL Device in your wireless network. T o open this screen, click Network > Wir eless LAN > OTIST .
P-870HW-I1 User’s Guide Chapter 6 Wireless LAN 109 Figure 55 Network > Wireless LAN > OTIST The following table describes the labels in this screen. Before you click St a r t , you shou ld enable OTIST on all the OTIST -enabled wireless clients in the wireless network.
P-870HW-I1 User’s Guide 110 Chapter 6 Wireless LAN Figure 56 Example: Wireless Client OTIST Screen T o start OTIST in the wireless client, click St a r t in this screen. Note: Y ou must click Star t in the ZyXEL Device and in the wireless client(s) within three minutes of each other .
P-870HW-I1 User’s Guide Chapter 6 Wireless LAN 111 Figure 59 OTIST : In Progress on the Wireless Client These screens close when the tra nsfer is complete. 6.5.1 Notes on OTIST 1 If you enable OTIST in a wireless client, you see this screen each time you start the utility .
P-870HW-I1 User’s Guide 112 Chapter 6 Wireless LAN Figure 61 Network > Wireless LAN > MAC Filter The following table describes the labels in this menu. Table 45 Network > Wireless LAN > MAC Filter LABEL DESCRIPTION Active Select this to enable MAC address filtering.
P-870HW-I1 User’s Guide Chapter 6 Wireless LAN 113 6.7 Advanced Wireless LAN Screen Use this screen to enable and configure roamin g and other advanced wireless settings in your wireless network. T o open this screen, click Network > Wir eless LAN > Advanced .
P-870HW-I1 User’s Guide 114 Chapter 6 Wireless LAN.
P-870HW-I1 User’s Guide Chapter 6 Wireless LAN 115.
P-870HW-I1 User’s Guide 116 Chapter 6 Wireless LAN.
P-870HW-I1 User’s Guide Chapter 6 Wireless LAN 117.
P-870HW-I1 User’s Guide 118 Chapter 6 Wireless LAN.
P-870HW-I1 User’s Guide Chapter 7 WAN 119 C HAPTER 7 WA N This chapter describes how to configure outs ide connections to another network or the Internet. 7.1 W AN Overview 7.1.1 Nailed-Up Connection (PPP) A nailed-up connection is a dial-u p line where the connectio n is always up regardless of tra ffic demand.
P-870HW-I1 User’s Guide 120 Chapter 7 WAN 7.2 Internet Connection Screens This screen depends on the Encapsulation your ISP uses. 7.2.1 Internet Connection Screen: Ethernet Use this screen to set up an Et hernet co nnection to the Internet.
P-870HW-I1 User’s Guide Chapter 7 WAN 121 7.2.2 Internet Connection Scre en: PPP over Ethernet (PPPoE) Use this screen to set up a PPP over Ethernet (PPPoE) connection to the Internet. T o open this screen, click Network > W AN > Internet Connection , and set the Encapsulation to PPP over Ethernet .
P-870HW-I1 User’s Guide 122 Chapter 7 WAN The following table describes the labels in this screen. Table 48 Network > WAN > Internet Conn ection > PPP ov er Etherne t LABEL DESCRIPTION ISP Parameters for Internet Access Encapsulation Select PPP over Ethernet .
P-870HW-I1 User’s Guide Chapter 7 WAN 123 7.3 Advanced W AN Screen Use this screen to edit the advanced settings for your Internet co nnection. T o open this screen, click Network > W AN > Advanced . Figure 65 Network > W AN > Advanced The following table describes the labels in this screen.
P-870HW-I1 User’s Guide 124 Chapter 7 WAN 7.4 T raffic Redirect Screen Use this screen to specify a backup gateway in case the default gatewa y ( your ISP) is not available. (If you do not have a backup gateway , do not use this screen.) T o access this screen, click Network > W AN > T raffic Redirect .
P-870HW-I1 User’s Guide Chapter 7 WAN 125 Figure 66 Networ k > W AN > T raf fic Re direct The following table describes the labels in this screen. Table 50 Networ k > W AN > T raf fic Re direct LABEL DESCRIPTION Active Select this to set up a backup gateway in case the default gateway is not available.
P-870HW-I1 User’s Guide 126 Chapter 7 WAN.
P-870HW-I1 User’s Guide Chapter 8 LAN 127 C HAPTER 8 LAN This chapter describes how to conf igure settings for the LAN port. 8.1 LAN Overview A Local Area Network (LAN) is a shared comm unication system to which many computers are attached.
P-870HW-I1 User’s Guide 128 Chapter 8 LAN The V ersion field controls the format and the broadc asting method of the RIP packets that the ZyXEL Device sends (it recognizes both formats when receiving). RIP-1 is universally supported; but RIP-2 carries m ore information.
P-870HW-I1 User’s Guide Chapter 8 LAN 129 Figure 67 Example: IP Alias 8.2 LAN IP Screen Use this screen to set up the IP address and su bnet mask of your LAN port. T o open this screen, click Network > LAN > IP . Figure 68 Network > LAN > IP The following table describes the fields in this screen.
P-870HW-I1 User’s Guide 130 Chapter 8 LAN Figure 69 Network > LAN > IP Alias The following table describes the fields in this screen. Table 52 Network > LAN > IP Alias LABEL DESCRIPTION IP Alias 1 IP Alias 1 Select this to add the specif ied subnet to the LAN port.
P-870HW-I1 User’s Guide Chapter 8 LAN 131 8.4 Advanced LAN Screen Use this screen to edit advanced settings, such as RIP and multicas t, on the LAN port.
P-870HW-I1 User’s Guide 132 Chapter 8 LAN The following table describes the fields in this screen. Table 53 Network > LAN > Advanced LABEL DESCRIPTION RIP & Multicast Setup RIP Direction RIP (Routing Information Protocol) allows a ro uter to exchange routing information with other routers.
P-870HW-I1 User’s Guide Chapter 9 DHCP Server 133 C HAPTER 9 DHCP Server This chapter describes how to configure the DHCP server for the LAN and WLAN ports.
P-870HW-I1 User’s Guide 134 Chapter 9 DHCP Server • DNS servers - The ZyXEL Device provides IP addresses for up to three DNS servers that provide DNS services for DHCP clients. Y ou can specify each IP address manually (for example, a company’ s own DNS server), or yo u can refer to the DNS servers the ZyXEL Device received from the ISP .
P-870HW-I1 User’s Guide Chapter 9 DHCP Server 135 9.3 St atic DHCP Screen Use this screen to assign static IP address to specific computers. T o open this screen, click Network > DHCP Server > S tatic DHC P . Figure 72 Network > DHCP Server > S tatic DHCP The following table describes the labels in this screen.
P-870HW-I1 User’s Guide 136 Chapter 9 DHCP Server 9.4 Client List Screen Use this screen to look at the current list of DHCP clients. It is empty if the DHCP server is disabled. T o open this screen, click Network > DHCP Server > Client List .
P-870HW-I1 User’s Guide Chapter 10 NAT 137 C HAPTER 10 NA T Use these screens to configure port forwarding , trigger ports, and other NA T rules for the ZyXEL Device. See Append ix D on page 381 for more background information about NA T . 10.1 NA T Overview 10.
P-870HW-I1 User’s Guide 138 Chapter 10 NAT 10.1.2 T rigger Port Forwarding Some services use a dedicated range of ports on the client side and a dedica ted range of ports on the server side.
P-870HW-I1 User’s Guide Chapter 10 NAT 139 10.1.2.2 T wo Point s T o Remember About T rigger Ports 1 T rigger events only happen on data that is going coming from insi de the ZyXEL Device and going to the outside.
P-870HW-I1 User’s Guide 140 Chapter 10 NAT 10.3 Port Forwarding Screen Use this screen to look at the current port-fo rwarding rules in the ZyXEL Device, and to enable, disable, activate, and de activate each one. Y ou can also set up a default server to handle ports not covere d by rules.
P-870HW-I1 User’s Guide Chapter 10 NAT 141 10.3.1 Port Forwarding Edit Screen Use this screen to activate, deactiv ate, and edit each port-forwarding rule in the ZyXEL Device. T o open this screen, click an Edit icon in Network > NA T > Port Forwarding .
P-870HW-I1 User’s Guide 142 Chapter 10 NAT 10.4 T rigger Port Screen Use this screen to maintain port-triggering rule s in the ZyXEL Device. T o open this screen , click Network > NA T > T rigger Port . Figure 79 Network > NA T > T rigger Port The following table describes the fields in this screen.
P-870HW-I1 User’s Guide Chapter 10 NAT 143 10.5 Address Mapping Screen Use this screen to edit other NA T rules for your ZyXEL Device. T o open this screen, click Network > NA T > Address Mapping .
P-870HW-I1 User’s Guide 144 Chapter 10 NAT The following table describes the fields in this screen. 10.5.1 Address Mapping Edit Screen Use this screen to activate, deactivate, and edit each address mapping rule in the ZyXEL Device. T o open this screen, click an Edit icon in Network > NA T > Address Mappin g .
P-870HW-I1 User’s Guide Chapter 10 NAT 145 The following table describes th e fields in this screen. Table 63 Network > NA T > Addres s Mapping > Edit LABEL DESCRIPTION Ty p e Choose the port ma pping type from one of the follow ing. • One-to-One : One-to-One mode maps one local IP address to o ne global IP address.
P-870HW-I1 User’s Guide 146 Chapter 10 NAT.
P-870HW-I1 User’s Guide Chapter 11 Firewalls 147 C HAPTER 11 Firewalls This chapter gives some back ground information on firewa lls and introduces the ZyXEL Device firewall. 1 1.1 Firewall Overview Originally , the term firewall referred to a construction techni que designed to prevent the spread of fire from one room to another .
P-870HW-I1 User’s Guide 148 Chapter 11 Firewalls • The DSL port connects to the Internet. • The LAN (Local Area Network) ports attach to a network of computers, which needs security from the outside world. These computer s will have access to Internet services such as e-mail, FTP , and the W orld W ide W e b.
P-870HW-I1 User’s Guide Chapter 11 Firewalls 149 • Restrict use of certain protocols, such as T elnet, to authoriz ed users on the LAN. These custom rules work by comparing the Sour ce IP address, Destination IP address and IP protocol type of network traf fic to rules set by the administrator .
P-870HW-I1 User’s Guide 150 Chapter 11 Firewalls In general, services are consist of two parts. First, each service has one or two IP protocol types (for example, TCP , UDP , or TCP/UDP). Second, each service has one or more port numbers. T ogether, these part s define the service.
P-870HW-I1 User’s Guide Chapter 11 Firewalls 151 When the number of existing half-ope n sessions rises above a threshold ( max-incomplete high ), the ZyXEL Device starts deleting half-o pen sessions as required to accommodate new connection requests.
P-870HW-I1 User’s Guide 152 Chapter 11 Firewalls 1 1.2.1 The “T riangle Route” Problem A traffic route is a path for sending or receiv ing data packets between two Ethernet devices. Y ou may have more than one connection to the Internet (through on e or more ISPs).
P-870HW-I1 User’s Guide Chapter 11 Firewalls 153 3 The reply from the W AN goes to the ZyXEL Device. 4 The ZyXEL Device then sends it to th e computer on the LAN in Subnet 1. Figure 84 IP Alias 1 1.3 Guidelines for Enhancing Security with Y our Firewall • Change the default password via CLI (Command Line Interpreter) or web config urator .
P-870HW-I1 User’s Guide 154 Chapter 11 Firewalls • Never e-mail sensitive information such as passwords, credit card information, etc., without encrypting the information first. • Never submit sensitive information via a web page unless the web site use s secure connections.
P-870HW-I1 User’s Guide Chapter 11 Firewalls 155 The following table describes the labels in this screen. 1 1.5 Firewall Rules Screen Note: The ordering of your rule s is very import ant as rules are applie d in turn. Use this screen to activate the fi rewall and to set the default rule s for each direction.
P-870HW-I1 User’s Guide 156 Chapter 11 Firewalls Figure 86 Security > Firewall > Rules The following table describes the labels in this screen.
P-870HW-I1 User’s Guide Chapter 11 Firewalls 157 1 1.5.1 Firewall Rule Edit Screen Use this screen to create a new firewall rule or to edit an existing one. T o open this screen, click Add or click an Edit icon in Security > Firewall > Rules .
P-870HW-I1 User’s Guide 158 Chapter 11 Firewalls Figure 87 Security > Firewall > Rules > Edit.
P-870HW-I1 User’s Guide Chapter 11 Firewalls 159 The following table describes the labels in this screen. Table 66 Security > Firewall > Rules > Edit LABEL DESCRIPTION Active Select this option to ena ble this firewall rule.
P-870HW-I1 User’s Guide 160 Chapter 11 Firewalls 1 1.5.2 Customized Services Screen Use this screen to create or edit customized ser vices for firewall rules. Customized services and port numbers are not predefined by the ZyXEL Device. See Appendix I on page 4 31 for examples of services.
P-870HW-I1 User’s Guide Chapter 11 Firewalls 161 Figure 89 Security > Firewall > Rules > Edit > Edit Customized Services > Edit The following table describes the labels in this screen. 1 1.6 Anti-Probing Screen Use this screen to control the way the ZyXEL Device resp onds to ping requests and to requests for unsupported services.
P-870HW-I1 User’s Guide 162 Chapter 11 Firewalls Figure 90 Security > Firewall > Anti Probing The following table describes the labels in this screen. 1 1.7 Firewall Threshold Screen Use this screen to set various DoS thresholds and the maximum number of half-open se ssions.
P-870HW-I1 User’s Guide Chapter 11 Firewalls 163 Figure 91 Security > Fire wall > Thresh old The following table describes the labels in this screen.
P-870HW-I1 User’s Guide 164 Chapter 11 Firewalls Deny New Connection Request for Select this radio button and specify for how long the ZyXEL Device should bl ock new connection requests when TCP Maximum Incomplete is reached. Enter the length of blocking time in minutes (betwe en 1 and 256).
P-870HW-I1 User’s Guide Chapter 12 Content Filter 165 C HAPTER 12 Content Filter Use these screens to c reate and enforce policies th at restrict access to the Internet ba sed on content. 12.1 Content Filtering Overview Internet content filtering allows you to create and enforce Internet access policies tailored to their needs.
P-870HW-I1 User’s Guide 166 Chapter 12 Content Filter Figure 92 Security > Cont en t Filter > Filter Each field is described in the following table.
P-870HW-I1 User’s Guide Chapter 12 Content Filter 167 12.2.2 Content Filter Schedule Screen Use this screen to set up the sc hedule when content filtering is effective. T o access this screen, click Security > Content Filter > Schedule . Figure 93 Security > Cont ent Filter > Schedule Each field is described in the following table.
P-870HW-I1 User’s Guide 168 Chapter 12 Content Filter.
P-870HW-I1 User’s Guide Chapter 13 Certificates 169 C HAPTER 13 Certificates This chapter explains how to use ce rtificates with your ZyXEL Device. 13.1 Certificates Overview The ZyXEL Device can use certificates (also ca lled digital IDs) to authen ticate users and to let users authenticate the ZyX EL Device.
P-870HW-I1 User’s Guide 170 Chapter 13 Certificates Certification authorities maintain directory ser vers with databases of valid and revoked certificates. A directory of certificates that have been revoked before the scheduled exp iration is called a CRL (Certificate Revocation List ).
P-870HW-I1 User’s Guide Chapter 13 Certificates 171 Figure 94 Security > Certificates > My Certificates The following table describes the labels in this screen.
P-870HW-I1 User’s Guide 172 Chapter 13 Certificates 13.3 Import My Certificate Screen Use this screen to save an existing certificate to the ZyXEL Device.
P-870HW-I1 User’s Guide Chapter 13 Certificates 173 Figure 95 Security > Certificates > My Certificates > Import The following table describes the labels in this screen.
P-870HW-I1 User’s Guide 174 Chapter 13 Certificates Figure 96 Security > Certificates > My Certificates > Create The following table describes the labels in this screen.
P-870HW-I1 User’s Guide Chapter 13 Certificates 175 After you click Apply , the following screen appears. Key Length Select a number from the drop-down list box to determine how many bits the key should use (512 to 2048). The longer the key , the more secure it is.
P-870HW-I1 User’s Guide 176 Chapter 13 Certificates Figure 97 Security > Certificates > My Cert ificates > Create > In Progress W ait while the ZyXEL Device generates the se lf-signed certificate or certification request. Afterwards, the following screen should appear .
P-870HW-I1 User’s Guide Chapter 13 Certificates 177 Figure 99 Security > Certificates > My Certificates > Edit The following table describes the labels in this screen. Table 76 Security > Certificates > My Certificates > Edit LABEL DESCRIPTION Name This field displays the identifying name of this certificate.
P-870HW-I1 User’s Guide 178 Chapter 13 Certificates Refresh Click this to di splay the certification path. Certificate Informati ons These read-only fields disp lay detailed information about the certificate. T ype This field displ ays general information about the certificat e.
P-870HW-I1 User’s Guide Chapter 13 Certificates 179 13.6 T rusted CAs Screen Use this screen to look at certificates from cer tification authorities that the ZyXEL Device trusts. The ZyXEL Device accepts any valid certif icate signed by these certification authorities as being trustworthy so that you do not need to import such certificates .
P-870HW-I1 User’s Guide 180 Chapter 13 Certificates Figure 100 Security > Certif icates > Trusted CAs The following table describes the labels in this screen.
P-870HW-I1 User’s Guide Chapter 13 Certificates 181 13.7 Import T rusted CA Screen Use this screen to add the certificate of a trus ted certification authority to the ZyXEL Device. T o open this screen, click Import in Security > Certificates > T rusted CAs .
P-870HW-I1 User’s Guide 182 Chapter 13 Certificates Figure 102 Security > Certif icates > Trusted CAs > Edit The following table describes the labels in this screen. Table 79 Security > Certificates > T rusted CAs > Edit LABEL DESCRIPTION Name This field displays the iden tifying name of this certificate.
P-870HW-I1 User’s Guide Chapter 13 Certificates 183 Refresh Click this to disp lay the certification path. Certificate Informati on These read-only fields display detail ed informa tion about the certificate. T ype This field displays general information about the certificate.
P-870HW-I1 User’s Guide 184 Chapter 13 Certificates 13.9 T rusted Remote Host s Screen Use this screen to look at the certificates of peers that you trust but which are not signed by one of the trusted ce rtific ation authorities (on the Security > Certificates > T rusted CAs screen).
P-870HW-I1 User’s Guide Chapter 13 Certificates 185 Figure 103 Security > Certificates > Trusted Remote Hosts The following table describes the labels in this screen.
P-870HW-I1 User’s Guide 186 Chapter 13 Certificates 13.10 V erifying a T rusted Remote Host’ s Certificate Self-signed certificates only have the signatu re of the host itself. Y ou should be very careful about importing (and thereby trusting) a remote host’ s self-signed certificate.
P-870HW-I1 User’s Guide Chapter 13 Certificates 187 Figure 105 Security > Certificates > Tr usted Remote Host > Import The following table describes the labels in this screen.
P-870HW-I1 User’s Guide 188 Chapter 13 Certificates Figure 106 Security > Certificates > Trusted Remote Hosts > Edit The following table describes the labels in this screen. Table 82 Security > Certificates > T rusted Remote Hosts > Edit LABEL DESCRIPTION Name This field disp lays the identifyin g name of this certificate.
P-870HW-I1 User’s Guide Chapter 13 Certificates 189 V ersion This field displays the X.509 versi on number . Serial Number This fi eld displays the certificate’s ident ification number given by the devi ce that created the certificate.
P-870HW-I1 User’s Guide 190 Chapter 13 Certificates 13.13 Directory Servers Screen Use this screen to look at the current list of di rectory servers, which the ZyXEL Device checks if the certificate does not list a server or if the listed server is not available.
P-870HW-I1 User’s Guide Chapter 13 Certificates 191 13.14 Edit Directory Server Screen Use this screen to create or edit a director y server the ZyXEL Device should use if the certificate does not list a server or if the listed serv er is not available .
P-870HW-I1 User’s Guide 192 Chapter 13 Certificates Apply Click this to save your changes to the Z yXEL Device. Cancel Click this to return to the previous screen without saving any changes. a. At the time of writing, LDAP is the only choice of directory se rver access protocol.
P-870HW-I1 User’s Guide Chapter 14 Static Rout e 193 C HAPTER 14 S t atic Route Use these screens to configure static routes in the ZyXEL Device. 14.1 S t atic Route Overview Each remote node specifies only the network to which the gateway is di rectly connected, and the ZyXEL Device has no know ledge of the network s beyond.
P-870HW-I1 User’s Guide 194 Chapter 14 Static Route Figure 1 10 Management > S tatic Rout e > IP S tatic Route Each field is described in the following table. 14.2.1 Edit IP S t atic Route Screen Use this screen to edit a static route in the ZyXEL Device.
P-870HW-I1 User’s Guide Chapter 14 Static Rout e 195 Figure 1 1 1 Management > S tatic Route > IP S ta tic Route > Edit Each field is described in the following table. Table 86 Management > Static Route > IP Static Route > Edit LABEL DESCRIPTION Route Name Enter the na me of the st atic ro ute.
P-870HW-I1 User’s Guide 196 Chapter 14 Static Route.
P-870HW-I1 User’s Guide Chapter 15 Bandwidth MGMT 197 C HAPTER 15 Bandwid th MGMT This chapter explains how to configure ba ndwidth management in your ZyXEL Device. 15.1 Bandwid th Management Overview ZyXEL ’ s Bandwidth Management allows you to speci fy bandwidth management rules based on application.
P-870HW-I1 User’s Guide 198 Chapter 15 Bandwidth MGMT 15.1.3 Example: Unused and Unbudgeted Bandwid th The following table sh ows the priorities of appl ications and the amount of bandwidth that each application gets. Suppose that all of the applications exce pt for administration need more bandwi dth.
P-870HW-I1 User’s Guide Chapter 15 Bandwidth MGMT 199 15.1.5 Over Allotment of Bandw id th Y ou can set the bandwidth management speed fo r an interface higher than the interface’ s actual transmission speed. Higher priority traf fi c gets to use up to its allocated bandwidth, even if it takes up all of the interface’ s ava ilable bandwidth.
P-870HW-I1 User’s Guide 200 Chapter 15 Bandwidth MGMT Figure 1 12 Management > Bandwid th MGMT > Configuration.
P-870HW-I1 User’s Guide Chapter 15 Bandwidth MGMT 201 See App endix I on page 431 for examples of services. The fo llowing table describes the labels in this screen. Table 90 Management > Bandwid th MGMT > Configuration LABEL DESCRIPTION Active Select this to enable bandwidth management.
P-870HW-I1 User’s Guide 202 Chapter 15 Bandwidth MGMT 15.3 Edit Bandwid th Management Rule Screen Use this screen to create or edit band width manage ment rules. T o open this screen, click an Edit icon in Management > Bandwidth MGMT > Configuration .
P-870HW-I1 User’s Guide Chapter 15 Bandwidth MGMT 203 See App endix I on page 431 for examples of services. The fo llowing table describes the labels in this screen.
P-870HW-I1 User’s Guide 204 Chapter 15 Bandwidth MGMT 15.4 Bandwid th Monitor Use this screen to view the ZyXEL Device’ s ba ndwidth usage and allotm ents. T o open this screen, click Management > Bandwidth MGMT > Monitor . Figure 1 14 Management > Bandwid th MGMT > Monitor Source Port Enter the port number of the so urce.
P-870HW-I1 User’s Guide Chapter 16 Rem ote MGMT 205 C HAPTER 16 Remote MGMT Use these screens to c ontrol which computer s can us e which services to access the ZyXEL Device on each interface.
P-870HW-I1 User’s Guide 206 Chapter 16 Remote MGM T 16.1.2 Remote Management and NA T When NA T is enabled: • Use the ZyXEL Device’ s W AN IP address when configuring from the W AN. • Use the ZyXEL Device’ s LAN IP address when configuring from the LAN.
P-870HW-I1 User’s Guide Chapter 16 Rem ote MGMT 207 An SNMP managed network consis ts of two main types of comp onent: agen ts and a man ager . An agent is a management software module that resi des in a managed device (the ZyXEL Device).
P-870HW-I1 User’s Guide 208 Chapter 16 Remote MGM T Some traps include an SNMP in terface index. The following ta ble maps the SNMP interface indexes to the ZyXEL Device’ s physical ports. 16.2 WWW Screen Use this screen to control HTTP access to your ZyXEL Device.
P-870HW-I1 User’s Guide Chapter 16 Rem ote MGMT 209 Figure 1 16 Management > Remote MGMT > WWW Each field is described in the following table. Table 95 Management > Remote MGMT > WWW LABEL DESCRIPTION HTTPS Server Certificate Select the certifi cate the ZyXEL Device provides to clients using this servi ce.
P-870HW-I1 User’s Guide 210 Chapter 16 Remote MGM T 16.3 T elnet Screen Use this screen to control T elnet access to you r ZyXEL Device. T o open this screen, click Management > Remote MGMT > T elnet . Figure 1 17 Management > Remote MGMT > T elnet Each field is described in the following table.
P-870HW-I1 User’s Guide Chapter 16 Rem ote MGMT 211 Figure 1 18 Management > Remote MGMT > FTP Each field is described in the following table. 16.5 SNMP Screen Use this screen to control SNMP with your ZyXEL Device. T o open this scre en, click Management > Remote MGMT > SNMP .
P-870HW-I1 User’s Guide 212 Chapter 16 Remote MGM T Figure 1 19 Management > Remote MGMT > SNMP Each field is described in the following table. Table 98 Management > Remote MGMT > SNMP LABEL DESCRIPTION SNMP Configuration Get Community Enter the password for incoming Get requests and GetNext requests from the management station.
P-870HW-I1 User’s Guide Chapter 16 Rem ote MGMT 213 16.6 DNS Screen Use this screen to control DNS access to your ZyXEL Device. T o open this screen, click Management > Remote MGMT > DNS . Figure 120 Management > Remo te MGMT > DNS Each field is described in the following table.
P-870HW-I1 User’s Guide 214 Chapter 16 Remote MGM T Each field is described in the following table. 16.8 SSH Screen Use this screen to control SSH access to your ZyXEL Device.
P-870HW-I1 User’s Guide Chapter 16 Rem ote MGMT 215 Each field is described in the following table. 16.9 TR-069 TR-069 is a protocol that de fines how your ZyXEL Device can be managed via a management server such as ZyXEL ’ s V antage CNM Access.
P-870HW-I1 User’s Guide 216 Chapter 16 Remote MGM T The following table gi ves a description of TR-069 commands. Table 102 TR-069 Comman ds Root Command or Subdirectory Comma nd Description wan tr069 All TR-069 related commands mu st be preceded by wan tr069 .
P-870HW-I1 User’s Guide Chapter 17 UPnP 217 C HAPTER 17 UPnP This chapter introduces the Univer sal Plug-and-Play (UPnP) feature. 17.1 Introducing Universal Plug and Play Universal Plug and Play (UPnP) is a distributed, open networking standard that uses TCP/IP for simple peer-to-peer network connectiv ity between devices.
P-870HW-I1 User’s Guide 218 Chapter 17 UPnP When a UPnP device joins a network, it announ ces its presence with a multicast mess age. For security reasons, the ZyXEL Device allows multicast messages on the LAN only . All UPnP-enabled devices may communicate freely with eac h other without additional configuration.
P-870HW-I1 User’s Guide Chapter 17 UPnP 219 17.4 Inst alling UPnP in Windows Example This section shows ho w to install UPnP in W indows Me and W indows XP . Inst alling UPnP in Windows Me Follow the steps below to inst all the UPnP in W indows Me. 1 Click St a r t and Contro l Panel .
P-870HW-I1 User’s Guide 220 Chapter 17 UPnP Figure 126 Add/Remove Programs: Wind ows Setup: Communication: Component s 4 Click OK to go back to the Add/Remove Programs Pr operties window and click Next . 5 Restart the computer when prompted. Inst alling UPnP in Windows XP Follow the steps below to install the UPnP in Windows XP .
P-870HW-I1 User’s Guide Chapter 17 UPnP 221 Figure 128 Windows Optiona l Networking Component s Wizard 5 In the Networking Services window , select the Universal Plug and Play check box.
P-870HW-I1 User’s Guide 222 Chapter 17 UPnP 6 Click OK to go back to the W indows Optional Networking Component Wizard window and click Next . 17.5 Using UPnP in Windows XP Example This section shows yo u how to use the UPnP feature in W indows XP .
P-870HW-I1 User’s Guide Chapter 17 UPnP 223 Figure 131 Internet Connection Properties 4 Y ou may edit or delete the port mappings o r click Add to manually add port mappings.
P-870HW-I1 User’s Guide 224 Chapter 17 UPnP Figure 132 Internet Connection Properties: Adva nced Settings Figure 133 Internet Connection Proper ties: Adva nced Settings: Add 5 When the UP nP-enabled device is disconn ected from your computer , all port mappings will be deleted automatically .
P-870HW-I1 User’s Guide Chapter 17 UPnP 225 Figure 134 System T ray Icon 7 Double-click on the icon to display yo ur curr ent Internet co nnection sta tus.
P-870HW-I1 User’s Guide 226 Chapter 17 UPnP Figure 136 Network Connections 4 An icon with the description for e ach UPnP-enabled device disp lays under Local Network . 5 Right-click on the icon for your ZyXEL Device an d select Invoke . The web configurator login screen displays.
P-870HW-I1 User’s Guide Chapter 17 UPnP 227 Figure 137 Network Connections: My Network Places 6 Right-click on the icon for your ZyXEL Device and select Pr operties .
P-870HW-I1 User’s Guide 228 Chapter 17 UPnP.
P-870HW-I1 User’s Guide Chapter 18 System 229 C HAPTER 18 System Use this screen to configure the ZyXEL Device’ s time and date settings. 18.1 General Setup 18.1.1 General Setup and System Name General Setup contains administrative and system-related information.
P-870HW-I1 User’s Guide 230 Chapter 18 Syst em 18.1.2.1 DYNDNS Wildcard Enabling the wi ldcard feature for your host causes *.y ourhost.dyndns.or g to be aliased to the same IP address as yourho st.dyndns.or g. This feature is useful if you want to be able to use, for example, www .
P-870HW-I1 User’s Guide Chapter 18 System 231 18.3 Dynamic DNS Screen Use this screen to set up and maintain dynamic DNS on your ZyXEL Device. T o open this screen, click Maintenance > System > Dynamic DNS . Domain Name Enter the domai n name (if you know it) here.
P-870HW-I1 User’s Guide 232 Chapter 18 Syst em Figure 140 Maintenance > System > Dynamic DNS The following table describes the fields in this screen. Table 105 Maintenance > System > Dynamic DNS LABEL DESCRIPTION Dynamic DNS Setup Enable Dynamic DNS Select this to use dynamic DNS.
P-870HW-I1 User’s Guide Chapter 18 System 233 18.4 T ime Setting Screen Use this screen to change the current ti me and time settings on your ZyXEL Device.
P-870HW-I1 User’s Guide 234 Chapter 18 Syst em The following table describes the fields in this screen. Table 106 Maintenance > System > T ime Setting LABEL DESCRIPTION Current T ime and Date Current T ime This field displays the ti me of your ZyXE L Device.
P-870HW-I1 User’s Guide Chapter 18 System 235 S tart Date Configure the day and time w hen Daylight Saving T ime starts if you selected Enable Daylight Saving . The o'clock field uses the 24 hour format. Here are a couple of examples: Daylight Saving Time st arts in most parts of the United S tates on the first Sunday of April.
P-870HW-I1 User’s Guide 236 Chapter 18 Syst em.
P-870HW-I1 User’s Guide Chapter 19 Logs 237 C HAPTER 19 Logs This chapter contains inform ation about configuring genera l log settings and viewing the ZyXEL Device’ s logs.
P-870HW-I1 User’s Guide 238 Chapter 19 Logs Log entries in red indicate aler ts. The log wraps around and delete s the old entries after it fills up. Click a column heading to so rt the entries. A triangle indicates ascending or descending sort order .
P-870HW-I1 User’s Guide Chapter 19 Logs 239 Figure 143 Maintenance > Logs > Log Settings The following table describes the fields in this screen. Table 108 Log Settings LABEL DESCRIPTION E-mail Log Settings Mail Server En ter the server name or the IP address of the mail server for the e-mail addresses specified below .
P-870HW-I1 User’s Guide 240 Chapter 19 Logs Send Log T o The ZyXEL Device sends log s to the e-mail addre ss specified in this field. If this fie ld is left blank, the ZyXEL Device does not send logs via e-mail.
P-870HW-I1 User’s Guide Chapter 20 Tools 241 C HAPTER 20 To o l s This chapter upload new firmware, manag e configuration and restart your ZyXEL Device. 20.1 Firmware Upgrade Find firmware at www .zyxel.com in a file that (usually) uses the system model name with a.
P-870HW-I1 User’s Guide 242 Chapter 20 Tools Figure 145 Upload Firmware: In Progress W ait two minutes before logging into the ZyXEL Device again. The ZyXEL Device automatically restarts in this time, which causes a temporary network disconnect. In some operating systems, you may see th e following icon on your desktop.
P-870HW-I1 User’s Guide Chapter 20 Tools 243 Figure 148 Maintenance > T ools > Co nfiguration The following table describes each field in the screen. Note: Do not turn of f the ZyXEL Device while configu ration file upload is in progress After you click Upload , the following screen appears.
P-870HW-I1 User’s Guide 244 Chapter 20 Tools Figure 149 Restore Configuration: Successfu l W ait one minute before logging into the ZyXEL Device again. The ZyXE L Device automatically restarts in this time, which causes a temporary network disconnect.
P-870HW-I1 User’s Guide Chapter 20 Tools 245 Figure 152 Restar t Screen Click Restart to have the ZyXEL Device reboot..
P-870HW-I1 User’s Guide 246 Chapter 20 Tools.
P-870HW-I1 User’s Guide Chapter 21 Intro ducing the SMT 247 C HAPTER 21 Introducing the SMT The System Management T erminal (SMT) provides a text-based, menu-driven console to manage the ZyXEL Device. This chapter describ es how to access the SMT and then provides an overview of its menus.
P-870HW-I1 User’s Guide 248 Chapter 21 In troducing the SM T Figure 154 SMT Main Menu Note: There is an inactivity timeout, and the default value is five minutes. If there is no activity for longer than five minutes, your ZyXEL Device will automa tically log you out.
P-870HW-I1 User’s Guide Chapter 21 Intro ducing the SMT 249 3.2 TCP/IP and DHCP Ethernet Setup Use this menu to set up the LAN IP address and to configure th e ZyXEL Device’ s DHCP server . The DHCP server assigns IP addresses and provides DNS server information to other computers on the LAN or WLAN.
P-870HW-I1 User’s Guide 250 Chapter 21 In troducing the SM T 21.1 Filter Set Configuration Use this menu to look at the filter set s in the ZyXEL Device. 21.1.x Filter Rules Summary Use this menu to look at the rules for each filter set. 21.1.x.y TCP/IP Filter Rule Use this menu to configure the rules for each filter set.
P-870HW-I1 User’s Guide Chapter 21 Intro ducing the SMT 251 21.3 Navigating the SMT Interface Several operations that you should be fam iliar with before you a ttempt to modify the configuration are listed in the table below . 24.8 Command Interpreter Mode Use this menu to use CI commands.
P-870HW-I1 User’s Guide 252 Chapter 21 In troducing the SM T Entering information T ype in or press [SP ACE BAR], then press [ENTER]. Y ou need to fill in two types of fi elds. The first requires you to type in the appropriate information. The second allows you to cycle through the available choi ces by pressing [SP ACE BAR].
P-870HW-I1 User’s Guide Chapter 22 General Setup 253 C HAPTER 22 General Setup Use this menu to set up the system name, domain name, DNS servers, and dynamic DNS. 22.1 General Setup Use this menu to set up the system name, domain name, and DNS servers.
P-870HW-I1 User’s Guide 254 Chapter 22 General Setup 22.2 Configure Dynamic DNS Use this menu to configure your d ynamic DNS account settings. See Chapter 18 on page 229 for background information. T o open this menu, select Ye s in Edit Dynamic DNS in menu 1.
P-870HW-I1 User’s Guide Chapter 22 General Setup 255 22.3 Configure Dynamic DNS Use this menu to configure your dynamic DNS domain name settings. See Ch apter 18 on page 229 for background information. T o open this menu, sele ct Ye s in Edit Host in menu 1.
P-870HW-I1 User’s Guide 256 Chapter 22 General Setup.
P-870HW-I1 User’s Guide Chapter 23 WAN Setup 257 C HAPTER 23 W AN Setup Use this menu to configure the W AN MAC address. See Chapter 7 on page 1 19 for background information. T o open this menu, enter 2 in the main menu. Figure 158 Menu 2: W AN Setup The following table describes the labels in this menu.
P-870HW-I1 User’s Guide 258 Chapter 23 WAN Setup.
P-870HW-I1 User’s Guide Chapter 24 LAN Setup 259 C HAPTER 24 LAN Setup Use this menu to set up the LAN IP address, DHCP server , additional subnets, and input and output filter sets for the LAN port. Y ou can also use this menu to configure the wireless network.
P-870HW-I1 User’s Guide 260 Chapter 24 LAN Setup 24.2 TCP/IP and DHCP Ethernet Setup Use this menu to set up the LAN IP addre ss and to configure the ZyXEL Device’ s DHCP server . The DHCP server assigns IP addresses a nd provides DNS server information to other computers on the LAN or WLAN.
P-870HW-I1 User’s Guide Chapter 24 LAN Setup 261 First DNS Server Second DNS Server Third DNS Server Press [SP ACE BAR] to select From ISP , User Defined or None and press [ENTER]. These fields are not avai lable on all models. Select From ISP if your ISP dynamically assigns DNS server information.
P-870HW-I1 User’s Guide 262 Chapter 24 LAN Setup 24.3 IP Alias Setup Use this menu to partition your LA N interface into subnets. See Chapter 8 on page 127 and Chapter 30 on page 287 for background information. T o open this me nu, select Ye s in Edit IP Alias in menu 3.
P-870HW-I1 User’s Guide Chapter 24 LAN Setup 263 24.4 Wireless LAN Setup Use this menu to configure basic wirele ss settings and wireless security . See Chapter 6 on page 93 for background information. T o open this menu, enter 5 in menu 3. Outgoing p rotocol filters Enter up to fou r filter sets.
P-870HW-I1 User’s Guide 264 Chapter 24 LAN Setup Figure 162 Menu 3.5: Wireless LAN Setup The ESSID in the SMT is the same as the SSID in the web configurator .
P-870HW-I1 User’s Guide Chapter 24 LAN Setup 265 24.5 WLAN MAC Address Filter Use this menu to block or allow other devices to access the ZyXEL Device. See Chapter 6 on page 93 for background information. T o open this menu, select Ye s in Edit MAC Address Filter in menu 3.
P-870HW-I1 User’s Guide 266 Chapter 24 LAN Setup.
P-870HW-I1 User’s Guide Chapter 25 In ternet Access Setup 267 C HAPTER 25 Internet Access Setup Use this menu to set up your Internet co nnection. See Chapter 7 o n page 1 19 and Chapter 10 on page 137 for background information. T o open this menu, enter 4 in the main menu.
P-870HW-I1 User’s Guide 268 Chapter 25 Interne t Access Setup Gateway IP Address This field is not available if your ISP uses PPPoE encaps ulation. Enter the IP address of the gateway provided by your ISP . Network Address T ranslation Select None if you do not want to use port forwarding, trigg er ports, or NA T .
P-870HW-I1 User’s Guide Chapter 26 Remot e Node Setup 269 C HAPTER 26 Remote Node Setup Use this menu to set up your Internet connection, input and ou tput filter sets for the W AN port, advanced features for the W AN port, or a backup gateway . 26.
P-870HW-I1 User’s Guide 270 Chapter 26 Remo te Node Setup 26.2 Remote Node Network Layer Options Use this menu to set up the W AN IP address and advanced features for the W AN port. See Chapter 7 on page 1 19 and Chapter 10 on page 137 for background information.
P-870HW-I1 User’s Guide Chapter 26 Remot e Node Setup 271 Figure 166 Menu 1 1.1.2: Remote Node Network Layer Op tions The following table describes the labels in this menu.
P-870HW-I1 User’s Guide 272 Chapter 26 Remo te Node Setup 26.3 Remote Node Filter Use this menu to specify input and ou tput filter sets for the W AN port. See Chapter 30 on page 287 for background information. T o open this menu, sele ct Ye s in Edit Fil ter Sets in menu 11 .
P-870HW-I1 User’s Guide Chapter 26 Remot e Node Setup 273 Figure 167 Menu 1 1.1.4: Remote Node Filter The following table describes the labels in this menu. 26.4 T raffic Redirect Setup Use this menu to set up a backup router , if you have one, in case the ZyXEL Device cannot access the Internet.
P-870HW-I1 User’s Guide 274 Chapter 26 Remo te Node Setup Figure 168 Menu 1 1.1.5: T raf fic Redirect Setup The following table describes the labels in this menu. Menu 11.1.5 - Traffic Redirect Setup Active= No Configuration: Backup Gateway IP Address= 0.
P-870HW-I1 User’s Guide Chapter 27 Sta tic Routing Setup 275 C HAPTER 27 S t atic Routing Setup Use this menu to look at and confi gure IP static routes. 27.1 IP S t atic Route Setup Use this menu to look at IP static routes. See Chapter 14 on page 19 3 for background information.
P-870HW-I1 User’s Guide 276 Chapter 27 Static Routing Setup 27.2 Edit IP S t atic Route Use this menu to configure IP static routes. See Chapter 14 on page 193 for ba ckground information. T o open this menu, en ter an IP static route number in Enter selection number in menu 12.
P-870HW-I1 User’s Guide Chapter 28 Dial-in User Setup 277 C HAPTER 28 Dial-in User Setup Use this menu to look at and confi gure local user profiles on the ZyXEL Device. 28.1 Dial-in User Setup Use this menu to look at local user profiles on the ZyXEL Device.
P-870HW-I1 User’s Guide 278 Chapter 28 Dial-in User Setup Figure 172 Menu 14.1: Edit Dial-in User The following table describes the labels in this menu.
P-870HW-I1 User’s Guide Chapter 29 NAT Setup 279 C HAPTER 29 NA T Setup Use this menu to configure addr ess mapping, port forwarding, and trigger ports. 29.1 Address Mapping Set s Use this menu to select which address ma pping set you want to configure.
P-870HW-I1 User’s Guide 280 Chapter 29 NAT Setup Figure 174 Menu 15.1.1: Address Mappin g Rules The following table describes the labels in this menu.
P-870HW-I1 User’s Guide Chapter 29 NAT Setup 281 29.3 Address Mapping Rule Use this menu to configure network ad dress translation ma pping rules. See Chapter 10 on page 137 for background information. T o open this menu, select one of the address mapping rules in menu 15.
P-870HW-I1 User’s Guide 282 Chapter 29 NAT Setup The following table describes the labels in this menu. 29.4 NA T Server Setup Use this menu to look at servers for which you have configu red port forwarding rul es. See Chapter 10 on page 137 for background information.
P-870HW-I1 User’s Guide Chapter 29 NAT Setup 283 Figure 176 Menu 15.2: NA T Server Setup The following table describes the labels in this menu. 29.5 NA T Server Configuration Use this menu to configure port fo rwarding ru les for servers behind the ZyXEL Device.
P-870HW-I1 User’s Guide 284 Chapter 29 NAT Setup Figure 177 Menu 15.2.1: NA T Server Con figuration The following table describes the labels in this menu. 29.6 T rigger Port Setup Use this menu to change your ZyXEL Device’ s port triggering settings.
P-870HW-I1 User’s Guide Chapter 29 NAT Setup 285 Figure 178 Menu 15.3: T rigger Port Setup The following table describes the labels in this menu. Menu 15.3 - Trigger Port Setup I ncoming Trigger Rule Name Start P ort End Port Start Port End Port ------------------------------- --------------------------------- ------ 1.
P-870HW-I1 User’s Guide 286 Chapter 29 NAT Setup.
P-870HW-I1 User’s Guide Chapter 30 Filter Setup 287 C HAPTER 30 Filter Setup This chapter shows you how to create and apply filters. 30.1 Introduction to Filters Y our ZyXEL Device uses filters to decide whether to allow passage of a da ta packet and/or to make a call.
P-870HW-I1 User’s Guide 288 Chapter 30 Filter Setup 30.1.1 The Filter Stru cture of the ZyXEL Device A filter set consists of one or more filter rules. Usually , you would group related rules, e.g., all the rules for NetBIOS, into a single set and give it a descriptive name .
P-870HW-I1 User’s Guide Chapter 30 Filter Setup 289 Figure 180 Filter Rule Process Y ou can apply up to four filter sets to a particular port to block multiple types of packets. W ith each filter set having up to six rules, you can have a maximum of 24 rules active for a single port.
P-870HW-I1 User’s Guide 290 Chapter 30 Filter Setup Figure 181 Menu 21: Filter and Firewa ll Setup 2 Enter 1 to bring up the following menu. Figure 182 Menu 21.1: Filter Set Configuration Select the filter set you wish to configure (1-12) and press [ENTER] .
P-870HW-I1 User’s Guide Chapter 30 Filter Setup 291 Figure 183 Menu 21.1.1: Filter Rules Summary This screen shows the summary of the existing rules in the filter set. The followi ng tables contain a brief description of the abbr eviations used in the previous menus.
P-870HW-I1 User’s Guide 292 Chapter 30 Filter Setup Refer to the next section for inform ation on configurin g the filter rules. 30.2.1 Configuring a Filter Rule T o configure a filter rule, type its number in Menu 21.1.1 - Filter Rules Summary an d press [ENTER] to open menu 21.
P-870HW-I1 User’s Guide Chapter 30 Filter Setup 293 Figure 184 Menu 21.1.1.1 TCP/IP Filter Rule. The following table describes how to co nfigure your TCP/IP filter rule.
P-870HW-I1 User’s Guide 294 Chapter 30 Filter Setup The following figure illustrates th e logic flow of an IP filter . Port # Comp Press [SP ACE BAR] and then [ENTER] to select the comparison to apply to the destination port in the packet against the value given in Destination: Port # .
P-870HW-I1 User’s Guide Chapter 30 Filter Setup 295 Figure 185 Executing an IP Filter 30.2.3 Configuring a Generic Filter Rule This section shows you how to configure a gen eri c filter rule. The purpose of generic rules is to allow you to filter non-IP packets.
P-870HW-I1 User’s Guide 296 Chapter 30 Filter Setup For generic rules, the ZyXEL Device treats a pack et as a byte stream as oppos ed to an IP or IPX packet. Y o u specify the portion of the packet to check with the Offset (from 0) and the Length fields, both in bytes.
P-870HW-I1 User’s Guide Chapter 30 Filter Setup 297 30.3 Example Filter Let’ s look at an example to block outside us ers from accessing the ZyXEL Device via telne t. Table 140 Generic Filter Ru le Menu Fields FIELD DESCRIPTION OPTIONS Filter # This i s the filter set, filter rule coordinates, i.
P-870HW-I1 User’s Guide 298 Chapter 30 Filter Setup Figure 187 T elnet Filter Exam ple 1 Enter 21 from the main menu to open Menu 21 - Filter and Firewall Setup . 2 Enter 1 to open Menu 21.1 - Filter Set Configuration . 3 Enter the index of the f ilter set you wish to conf igure (say 3) and press [ENTER] .
P-870HW-I1 User’s Guide Chapter 30 Filter Setup 299 •T h e Port # for the telnet service (TCP protocol) is 23. See RFC 1060 for port numbers of well-known services. • Select Equal from the Port # Comp field as you are looking for packets going to port 23 only .
P-870HW-I1 User’s Guide 300 Chapter 30 Filter Setup 30.4 Filter T ypes and NA T There are two classes of filter rules, Generic Filter (Device) rules and protocol filter ( TCP/ IP ) rules. Generic filter rules act on the raw data from/to LAN and W AN.
P-870HW-I1 User’s Guide Chapter 30 Filter Setup 301 Figure 191 Filtering LAN T raffic 30.6.2 Applying Re mote Node Filters Go to menu 1 1.5 (shown be low – note that call filter set s are only present for PPPoE encapsulation) and enter the numb er(s) of the filter set(s) as appropriate.
P-870HW-I1 User’s Guide 302 Chapter 30 Filter Setup Figure 193 Menu 1 1.1: Remote Node Profile The following table describes the labels in this menu.
P-870HW-I1 User’s Guide Chapter 30 Filter Setup 303 Nailed-Up Connectio n Select this if you want the ZyXEL Device to automatically connect to your ISP when it is turned on and to remain connected all the time. Th is is not recommended if you pay for your Internet con nected based on the amoun t of time you are connected.
P-870HW-I1 User’s Guide 304 Chapter 30 Filter Setup.
P-870HW-I1 User’s Guide Chapter 31 Firewall Setup 305 C HAPTER 31 Firewall Setup Use this menu to activate or deactivate the firewall. See Chapter 1 1 on page 1 47 for background information. T o open this menu, enter 2 in menu 21. Figure 194 Menu 21.
P-870HW-I1 User’s Guide 306 Chapter 31 Firewall Setup.
P-870HW-I1 User’s Guide Chapter 32 SNMP Configuration 307 C HAPTER 32 SNMP Configuration Use this menu to configure your Z yXEL Devi ce’ s settings for Simple Network Management Protocol (SNMP) management. See Chapter 16 on page 205 for background information.
P-870HW-I1 User’s Guide 308 Chapter 32 SNMP Configuration.
P-870HW-I1 User’s Guide Chapter 33 System Security 309 C HAPTER 33 System Security Use this menu to configure the administ rator password and to configure wireless authentication for the ZyXEL Device. 33.1 Change Password Use this menu to change the ad ministrator password for the ZyXEL Device.
P-870HW-I1 User’s Guide 310 Chapter 33 Syst em Security Figure 197 Menu 23.2: System Security - RADIUS Server The following table describes the labels in this menu. 33.3 IEEE802.1x Use this menu to configure I EEE 802.1x wireless authenticatio n for the ZyXEL Device.
P-870HW-I1 User’s Guide Chapter 33 System Security 311 Figure 198 Menu 23.4: System Security - IEEE802.1x The following table describes the labels in this menu.
P-870HW-I1 User’s Guide 312 Chapter 33 Syst em Security PSK This field is en abled if the Ke y Management Protoco l is WP A-PSK or WP A2- PSK . T ype a pre-shared key from 8 to 63 ASCII characters (includ ing spaces and symbols). The key is case-sensitive.
P-870HW-I1 User’s Guide Chapter 34 System Maintenance 24.1 - 24.4 313 C HAPTER 34 System Maintenance 24.1 - 24.4 This chapter covers menus 24.1 th rough 24.4. Use these menus to get a variety of system information and to perfo rm system diagnostics.
P-870HW-I1 User’s Guide 314 Chapter 34 System Maintenance 24.1 - 24.4 34.2 Information Use this menu to look at basic device information and LAN interface settings. See Chapter 5 on page 85 for background information. T o open this menu, enter 1 in menu 24.
P-870HW-I1 User’s Guide Chapter 34 System Maintenance 24.1 - 24.4 315 Figure 200 Menu 24.2.1: System Main tenance - Information The following table describes the labels in this menu. 34.3 Change Console Port S peed Note: The console port is intern al and reserved for technician use only .
P-870HW-I1 User’s Guide 316 Chapter 34 System Maintenance 24.1 - 24.4 Figure 201 Menu 24.2.2: System Maintenan ce - Change Console Port S peed The following table describes the labels in this menu. 34.4 Syslog Logging Use this menu to configure the ZyXEL Device to send log messages to a syslog server .
P-870HW-I1 User’s Guide Chapter 34 System Maintenance 24.1 - 24.4 317 34.5 Call-T riggering Packet Use this menu to look at information about the p acket that triggered a dial-out call. The packet is displayed in an easy-to-read format. T o open this menu, en ter 4 in menu 24.
P-870HW-I1 User’s Guide 318 Chapter 34 System Maintenance 24.1 - 24.4 Figure 204 Menu 24.4: System Maintenan ce - Diagnostic The following table describes the labels in this menu. Menu 24.4 - Syste m Maintenance - Diagnostic TCP/IP 1. Ping Host 2. WAN DHCP Re lease 3.
P-870HW-I1 User’s Guide Chapter 35 System Maintenance 24.5 - 24.7 319 C HAPTER 35 System Maintenance 24.5 - 24.7 This chapter covers menus 24.5 th rough 24.7. Use these menus to backup and restore your configuration file, as well as upload new firmware and configuration files.
P-870HW-I1 User’s Guide 320 Chapter 35 System Maintenance 24.5 - 24.7 The following table is a summary . Please note that the internal filename refe rs to the filename on the ZyXEL Device and the ex.
P-870HW-I1 User’s Guide Chapter 35 System Maintenance 24.5 - 24.7 321 Figure 205 Menu 24.5: Ba ckup Configuration 35.2.2 Using the FTP command from the DOS Prompt 1 Launch the FTP client on your computer . 2 Enter “open” and the IP add ress of your ZyXEL Device.
P-870HW-I1 User’s Guide 322 Chapter 35 System Maintenance 24.5 - 24.7 Figure 206 FTP Session Example The following table describes some of the co mmands that you may see in third party FTP clients.
P-870HW-I1 User’s Guide Chapter 35 System Maintenance 24.5 - 24.7 323 3 Enter command “sys stdio 0” to disable th e SMT timeout, so the TF TP transfer will not be interrupted. Enter comman d “sys stdio 5” to restore the five-minute SMT timeout (default) when the file transfer is complete.
P-870HW-I1 User’s Guide 324 Chapter 35 System Maintenance 24.5 - 24.7 1 Display menu 24.5 and enter “y” at the following screen. Figure 207 System Maintenance: Backup Configuration 2 The following screen indicates that the Xmodem download has started.
P-870HW-I1 User’s Guide Chapter 35 System Maintenance 24.5 - 24.7 325 35.3.1 Restore Using FTP For details about backup usin g (T)FTP please refer to earlier sections on FTP and TFTP file upload in this chapter . Figure 21 1 Menu 24.6: Restore Config uration 35.
P-870HW-I1 User’s Guide 326 Chapter 35 System Maintenance 24.5 - 24.7 35.4.1 Firmware Upload FTP is the preferred method for uploading the firm ware and configuration.
P-870HW-I1 User’s Guide Chapter 35 System Maintenance 24.5 - 24.7 327 Figure 214 Menu 24.7.2: System Maintenan ce - Upload System Configuration File T o transfer the firmware and the conf iguration file, follo w these exam ples: 35.4.3 Using the FTP command from the DOS Prompt Exampl e 1 Launch the FTP client on your computer .
P-870HW-I1 User’s Guide 328 Chapter 35 System Maintenance 24.5 - 24.7 Figure 215 FTP Session Example More commands that you may find in third party FTP clients are listed earlier in this chapter .
P-870HW-I1 User’s Guide Chapter 35 System Maintenance 24.5 - 24.7 329 TFTP [-i] host put firmware.bin ras where “i” specifies binary image transfer mode (u se this mode when tran sferring binary files), “host” is the ZyXEL Device’ s IP address, “put” transfers the file so urc e on the computer (firmware.
P-870HW-I1 User’s Guide 330 Chapter 35 System Maintenance 24.5 - 24.7 35.4.8 Example Xmodem Firmwa re Upload Using HyperT erminal Click T ransfer , then Send File to display the following screen. Figure 217 Example Xmodem Upload After the firmware upload process has comp leted, the ZyXEL Device will automatically restart.
P-870HW-I1 User’s Guide Chapter 35 System Maintenance 24.5 - 24.7 331 Figure 218 Menu 24.7.2 as seen using the Co nsole Port 2 After the "Starting Xmodem upload" message appears, activate the Xmode m protocol on your computer . Follow the procedure as sh own previously for the HyperT ermina l program.
P-870HW-I1 User’s Guide 332 Chapter 35 System Maintenance 24.5 - 24.7.
P-870HW-I1 User’s Guide Chapter 36 System Maintenance 24.8 - 24.11 333 C HAPTER 36 System Maintenance 24.8 - 24.1 1 This chapter covers menus 24.8 th rough 24.
P-870HW-I1 User’s Guide 334 Chapter 36 System Ma intenance 24.8 - 24.11 Figure 221 Menu 24.9.1: Budget Ma nagement The following table describes the labels in this menu. 36.3 Call History This menu is only applicable your In ternet connection uses PPPoE encapsulation.
P-870HW-I1 User’s Guide Chapter 36 System Maintenance 24.8 - 24.11 335 Figure 222 Menu 24.9.2: Call History The following table describes the labels in this menu. 36.4 T ime and Date Setting Use this menu to change your ZyXEL Device’ s time and date.
P-870HW-I1 User’s Guide 336 Chapter 36 System Ma intenance 24.8 - 24.11 Figure 223 Menu 24.10: T ime and Date Setting The following table describes the labels in this menu.
P-870HW-I1 User’s Guide Chapter 36 System Maintenance 24.8 - 24.11 337 36.5 Remote Management Control Use this screen to configure through which interface(s) and from which IP address(es) users can use various protocols to manage the ZyXEL Device. See Chapter 16 on page 205 for background informatio n.
P-870HW-I1 User’s Guide 338 Chapter 36 System Ma intenance 24.8 - 24.11 Figure 224 Menu 24.1 1: Remote Management Contr ol The following table describes the labels in this menu. Menu 24.11 - Re mote Management Control TELNET Server: Port = 23 Access = ALL Secure Clien t IP = 0.
P-870HW-I1 User’s Guide Chapter 37 IP Routin g Policy Setup 339 C HAPTER 37 IP Routing Policy Setup Use this menu to look at and confi gure policy routes. 37.1 Policy Route T raditionally , routing is based on the destinatio n address only and the ZyXEL Device takes the shortest path to forward a packet.
P-870HW-I1 User’s Guide 340 Chapter 37 IP Routing Policy Setup IPPR follows the existing packet filtering fac ility of RAS in style and in implementation. 37.4 IP Routing Policy Summary Use this menu to look at polic y ro utes. T o open this menu , enter 25 in t he main menu.
P-870HW-I1 User’s Guide Chapter 37 IP Routin g Policy Setup 341 37.5 IP Routing Policy Setup Use this menu to configure policy ro utes. T o open this menu, select Ed it and enter the appropriate r ule number in menu 25 . Figure 226 Menu 25.1: IP Routing Policy Setup The following table describes the labels in this menu.
P-870HW-I1 User’s Guide 342 Chapter 37 IP Routing Policy Setup 37.6 IP Routing Policy Setup Use this menu to specify the ports from which traf fic comes to which the policy routes apply . T o open this menu, select Ye s in Edit policy to packets received fr om in menu 25.
P-870HW-I1 User’s Guide Chapter 37 IP Routin g Policy Setup 343 Figure 227 Menu 25.1.1: IP Routing Policy Setup The following table describes the labels in this menu.
P-870HW-I1 User’s Guide 344 Chapter 37 IP Routing Policy Setup 1 Create a rule in Menu 25.1 - IP Routing Policy Setup as shown next. Figure 229 IP Routing Policy Example 1 2 Select Ye s in the LAN field in menu 25.1.1 to apply the policy to packets received on the LAN port.
P-870HW-I1 User’s Guide Chapter 37 IP Routin g Policy Setup 345 Figure 230 IP Routing Policy Example 2 5 Select Ye s in the LAN field in menu 25.1.1 to apply th e policy to packets received on the LAN port. 6 Check Menu 25 - IP Routing Policy Summary to see if the rule is added correctly .
P-870HW-I1 User’s Guide 346 Chapter 37 IP Routing Policy Setup.
P-870HW-I1 User’s Guide Chapter 38 Schedule Setup 347 C HAPTER 38 Schedule Setup Use this menu to look at and confi gure the schedule sets in the ZyXEL Device.
P-870HW-I1 User’s Guide 348 Chapter 38 Schedule Setup Figure 231 Menu 26: Sche dule Setup The following table describes the labels in this menu. 38.3 Schedule Set Setup This menu is only a pplicable if your Internet connec tion uses PPPoE encapsulation.
P-870HW-I1 User’s Guide Chapter 38 Schedule Setup 349 Figure 232 Menu 26.1: Sche dule Set Setup The following table describes the labels in this menu.
P-870HW-I1 User’s Guide 350 Chapter 38 Schedule Setup Duration Enter the maximum length of time this connection is allowed in hour-minute format. Action Forced On means that the connection is maintained whethe r or not there is a demand call on the line and will persist for the time period specified in the Duration field.
P-870HW-I1 User’s Guide Chapter 39 Troubleshooting 351 C HAPTER 39 T roubleshooting This chapter covers potential proble ms and the corresponding remedies. 39.1 Problems St arting Up the ZyXEL Device The following table identifies some remedies if you have problems starting up the ZyXE L Device.
P-870HW-I1 User’s Guide 352 Chapter 39 Troublesh ooting 39.3 Problems with the W AN The following table identifies some remedies if you have problems with the Internet connection. Table 166 Troubleshooting the WAN PROBLEM CORRECTIVE ACTION The DSL light is off.
P-870HW-I1 User’s Guide Chapter 39 Troubleshooting 353 39.4 Problems Accessi ng the ZyXEL Device The following table identifies some remedies if you have problems accessing the ZyXEL Device.
P-870HW-I1 User’s Guide 354 Chapter 39 Troublesh ooting Figure 233 Pop-up Blocker Y ou can also check if po p-up blocking is disable d in the Pop-up Blocker section in the Privacy tab. 1 In Internet Explorer , select To o l s , Internet Options , Privacy .
P-870HW-I1 User’s Guide Chapter 39 Troubleshooting 355 Figure 235 Internet Options 3 T ype the IP address of your device (the web page that you do not want to have blocke d) with the prefix “http://”. For example, http://192.168.1.1. 4 Click Add to move the IP address to the list of Allowed sites .
P-870HW-I1 User’s Guide 356 Chapter 39 Troublesh ooting Figure 236 Pop-up Blocker Settings 5 Click Close to return to the Privacy screen. 6 Click Apply to save this setting. 39.4.1.2 JavaScript s If pages of the web configura tor do not display properly in Internet Explorer, check that JavaScripts are allowed.
P-870HW-I1 User’s Guide Chapter 39 Troubleshooting 357 Figure 237 Internet Options 2 Click the Custom Level... button. 3 Scroll down to Scripting . 4 Under Active scripting make sure that Enable is selected (the default). 5 Under Scripting of Java applets make sure that Enable is sele cted (the default).
P-870HW-I1 User’s Guide 358 Chapter 39 Troublesh ooting Figure 238 Security Settings - Java Scripting 39.4.1.3 Java Permissions 1 From Internet Explorer , click To o l s , I nternet Options and then the Security tab. 2 Click the Custom Level... button.
P-870HW-I1 User’s Guide Chapter 39 Troubleshooting 359 Figure 239 Security Settings - Java 39.4.1.3.1 JA V A (Sun) 1 From Internet Explorer , click To o l s , I nternet Options and then the Advance d tab. 2 Make sure that Use Java 2 for <applet> under Java (Sun) is selected.
P-870HW-I1 User’s Guide 360 Chapter 39 Troublesh ooting Figure 240 Java (Sun) 39.4.2 ActiveX Controls in Internet Explorer If ActiveX is disabled, you will not be able to download ActiveX cont rols or to use T rend Micro Security Services. Make sure that ActiveX controls are allowed in Internet Explorer .
P-870HW-I1 User’s Guide Chapter 39 Troubleshooting 361 Figure 241 Internet Options Security 3 Scroll down to ActiveX controls and plug-ins . 4 Under Download signed ActiveX controls select the Prompt radio button. 5 Under Run ActiveX controls and plug-ins make sure the Enable radio button is selected.
P-870HW-I1 User’s Guide 362 Chapter 39 Troublesh ooting Figure 242 Security Setting ActiveX Controls.
P-870HW-I1 User’s Guide Appendix A Product Specifications 363 Appendix A Product S pecifications The values are accurate at the time of writing. Table 168 Device Specifications Default IP Address 192.
P-870HW-I1 User’s Guide 364 Appendix A Product Specifications.
P-870HW-I1 User’s Guide 365 Appendix B Setting up You r Computer’s IP Ad dress Appendix B Setting up Y our Computer ’ s IP Address All computers must have a 10M or 100M Et hernet adapter card and TCP/IP installed.
P-870HW-I1 User’s Guide Appendix B Setting up Your Computer’s IP Addr ess 36 6 Figure 243 Windows 95/98/Me : Netw ork: Configuration Inst alling Components The Network window Configuration tab displays a list of installed components. Y ou need a network adapter , the TCP/IP protocol and Client for Microso ft Networks.
P-870HW-I1 User’s Guide 367 Appendix B Setting up You r Computer’s IP Ad dress 3 Select Microsoft from the list of manufacturers. 4 Select Client for Microsoft Networks from the list of network clients and then click OK . 5 Restart your computer so the changes you made take ef fect.
P-870HW-I1 User’s Guide Appendix B Setting up Your Computer’s IP Addr ess 36 8 Figure 245 Windows 95/98/Me : TCP/IP Pr operties: DNS Configuration 4 Click the Gateway tab. • If you do not know your g ateway’ s IP address, remove previou sly installed gateways.
P-870HW-I1 User’s Guide 369 Appendix B Setting up You r Computer’s IP Ad dress Figure 246 Windows XP: S tart Menu 2 In the Control Panel , double-click Network Connections ( Network and Dial-up Connections in W i ndows 2000/NT). Figure 247 Windows XP: Control Panel 3 Right-click Local Area Connection and then click Pr oper ties .
P-870HW-I1 User’s Guide Appendix B Setting up Your Computer’s IP Addr ess 37 0 Figure 248 Windows XP: Control Panel: Network Connections: Pro perties 4 Select Internet Protocol (TCP/IP) (under the Genera l tab in W in XP) and then click Properties .
P-870HW-I1 User’s Guide 371 Appendix B Setting up You r Computer’s IP Ad dress • Click Advanced . Figure 250 Windows XP: Internet Protocol (TCP/IP) Propert ies 6 If you do not know your gateway's IP address, remove any previously installed gateways in the IP Settings tab and click OK .
P-870HW-I1 User’s Guide Appendix B Setting up Your Computer’s IP Addr ess 37 2 Figure 251 Windows XP: Advanced TCP/IP Properties 7 In the Internet Protocol TCP/IP Properties window (the General tab in Windows XP): • Click Obtain DNS server address automatically if you do not know your DNS server IP address(es).
P-870HW-I1 User’s Guide 373 Appendix B Setting up You r Computer’s IP Ad dress Figure 252 Windows XP: Internet Protocol (TCP/IP) Propert ies 8 Click OK to close the Internet Protocol (TCP/IP) Pr operties window . 9 Click Close ( OK in W indows 2000/NT) to close the Local Area Connection Properties window .
P-870HW-I1 User’s Guide Appendix B Setting up Your Computer’s IP Addr ess 37 4 Figure 253 Macintosh O S X: App le Menu 2 Click Network i n the icon bar . • Select Automatic from the Location list. • Select Built-in Ethernet from the Show list.
P-870HW-I1 User’s Guide 375 Appendix B Setting up You r Computer’s IP Ad dress 6 Restart your computer (if prompted). V erifying Settings Check your TCP/IP properties in the Network window . Linux This section shows you how to configure your computer’ s TCP/IP settings in Red Hat Linux 9.
P-870HW-I1 User’s Guide Appendix B Setting up Your Computer’s IP Addr ess 37 6 Figure 256 Red Hat 9.0: KDE: Ethern et Device: General • If you have a dy namic IP address, clic k Automatically obtain IP address settings with and select dhcp from the drop down list.
P-870HW-I1 User’s Guide 377 Appendix B Setting up You r Computer’s IP Ad dress Figure 258 Red Hat 9.0: KDE: Network Con figuration: Activate 7 After the network card restart pro cess is complete, make sure the St a t u s is Active in the Network Configuration screen.
P-870HW-I1 User’s Guide Appendix B Setting up Your Computer’s IP Addr ess 37 8 Figure 260 Red Hat 9.0: S tatic IP Addres s Setting in ifconfig-eth0 2 If you know your DNS server IP address(es) , enter the DNS server information in the resolv.conf file in the /etc directory .
P-870HW-I1 User’s Guide Appendix C NetBIOS Filter Commands 379 Appendix C NetBIOS Filter Commands The following describes the Ne tBIOS packet filter commands. Introduction NetBIOS (Network Basic Input/Output System ) are TCP or UDP broadcast packets that enable a computer to connect to and communicate with a LAN.
P-870HW-I1 User’s Guide 380 Appendix C NetBIOS Filter Commands The filter types and their defa ult settings are as follows. NetBIOS Filter Configuration Syntax:sys filter netbios config <ty pe>.
P-870HW-I1 User’s Guide Appendix D NA T 381 A PPENDIX D NA T NA T Overview NA T (Network Address Translation - NA T , RFC 1631) is the translation of the IP address of a host in a packet. For example, the source address of an outg oing packet, used within one network is changed to a different IP address known within another network.
P-870HW-I1 User’s Guide 382 Appendix D NAT What NA T Does In the simplest form, NA T changes the sour ce IP address in a packet received from a subscriber (the inside local address) to anothe r (the inside global address) before forwarding the packet to the W AN side.
P-870HW-I1 User’s Guide Appendix D NA T 383 NA T Application The following figure illustrates a possible NA T application, wher e three inside LANs (logical LANs using IP Alias) behind the ZyXEL Devi ce can communicate with three distinct W AN networks.
P-870HW-I1 User’s Guide 384 Appendix D NAT Note: Port numbers do not change for One-to-One and Many One-to-One NA T mapping types. The following table summarizes these types. NA T T ypes This section discusses the following NA T types th at may be implemented on a router in front of the ZyXEL Device.
P-870HW-I1 User’s Guide Appendix D NA T 385 The following table summarizes how these NA T ty pes handle outgoin g and incoming pack ets. Read the following sections fo r more details and examples. The exampl es in these NA T type sections describe NA T translatio n between internal (private) and external (public) IP addresses.
P-870HW-I1 User’s Guide 386 Appendix D NAT Figure 266 Full Cone NA T Example Restricted Cone NA T As in full cone NA T , a restricted cone NA T rou ter maps all outg oing packet s from an intern al IP address and port to a single IP address and port on the external network.
P-870HW-I1 User’s Guide Appendix D NA T 387 Figure 267 Restricted Cone NA T Example Port Restricted Cone NA T As in full cone NA T , a port restricted cone NA T router maps all outgoing packets from an internal IP address and port to a single IP ad dress and port on the ex ternal network.
P-870HW-I1 User’s Guide 388 Appendix D NAT Figure 268 Port Restricted Cone NA T Example Symmetric NA T The full, restricted and port re stricted cone NA T types use the same mapping for an outgoing packet’ s source address regardless of the des tination IP address and port.
P-870HW-I1 User’s Guide Appendix D NA T 389 Figure 269 Symmetric NA T SUA (Single User Account) V ersus NA T SUA (Single User Account) is a ZyNOS implemen tation of a subset of NA T that supports two types of mapping, Many-to-One and Server .
P-870HW-I1 User’s Guide 390 Appendix D NAT.
P-870HW-I1 User’s Guide Appendix E Firewall Commands 391 Appendix E Firewall Commands The following describes the firewall commands. Table 173 Firewall Commands FUNCTION COMMAND DESCRIPTION Firewall Se tUp config edit firewall active <yes | no> This command turns the firewall on or off.
P-870HW-I1 User’s Guide 392 Appendix E Fi rewall Commands config edit firewall e-mail return-addr <e-mail address> This command sets the source e-mail add ress of the firewall e-mails. config edit firewall e-mail email-to <e-mail address> This command sets the e-mail address to which the fire wall e-mails ar e sent.
P-870HW-I1 User’s Guide Appendix E Firewall Commands 393 config edit firewall attack minute-low <0-255> This command sets the threshold of half-open sessions where the ZyXEL Device stop s deleting half-opened sessions.
P-870HW-I1 User’s Guide 394 Appendix E Fi rewall Commands Config edit firewall set <set #> log <yes | no> This command sets whether or not the ZyXEL Device creates logs for packets that match the firewall’s default rule set.
P-870HW-I1 User’s Guide Appendix E Firewall Commands 395 config edit firewall set <set #> rule <rule #> destaddr- subnet <ip address> <subnet mask> This command sets a rule to have the ZyXEL Device check for traf fic with a p articular subnet destination (def ined by IP address and subnet mask).
P-870HW-I1 User’s Guide 396 Appendix E Fi rewall Commands.
P-870HW-I1 User’s Guide Appendix F Log Descriptions 397 Appendix F Log Descriptions This appendix provides descrip tions of example log messages. Table 174 System Maintenance Logs LOG MESSAGE DESCRIPTION Time calibration is successful The router has adjusted its time based on informati on from the time server .
P-870HW-I1 User’s Guide 398 Appendix F Log De scriptions Successful HTTPS login Someone has logged on to the router's web configu rator interface using HTTPS protocol. HTTPS login failed Someo ne has failed to log on to the router's web config urator interface using HTTPS protocol.
P-870HW-I1 User’s Guide Appendix F Log Descriptions 399 Table 177 TCP Reset Lo gs LOG MESSAGE DESCRIPTION Under SYN flood attack, sent TCP RST The router sent a TCP reset packet when a host was u nder a SYN flood attack (the TCP incomplete count is per desti nation host.
P-870HW-I1 User’s Guide 400 Appendix F Log De scriptions Table 179 ICMP Logs LOG MESSAGE DESCRIPTION Firewall default policy: ICMP <Packet Direction>, <type:%d>, <code:%d> ICMP access matched the default policy and was blocked or forwarded according to the user's setting.
P-870HW-I1 User’s Guide Appendix F Log Descriptions 401 ppp:LCP Closing The PPP connection’s Link Control Protocol stage is closing. ppp:IPCP Closing Th e PPP connection’s Internet Protocol Control Protocol stage is closing. Table 182 UPnP Logs LOG MESSAGE DESCRIPTION UPnP pass through Firewall UPnP packets can pa ss through the firewall.
P-870HW-I1 User’s Guide 402 Appendix F Log De scriptions Connecting to content filter server fail The connection to the external content fi ltering server failed.
P-870HW-I1 User’s Guide Appendix F Log Descriptions 403 Table 185 IPSec Logs LOG MESSAGE DESCRIPTION Discard REPLAY packet The router re ceived and discarded a packet with an incorrect sequence number . Inbound packet authentication failed The router received a packet that has been altered.
P-870HW-I1 User’s Guide 404 Appendix F Log De scriptions Cannot resolve Secure Gateway Addr for rule <%d> The router couldn’t resolve t he IP address from the domain name that was used for the secure gateway address.
P-870HW-I1 User’s Guide Appendix F Log Descriptions 405 XAUTH fail! Username: <Username> The router was not able to use extended authentication to authenticate the listed username. Rule[%d] Phase 1 negotiation mode mismatch The listed rule’s IKE phase 1 negotiation mode did not ma tch between the router and the peer .
P-870HW-I1 User’s Guide 406 Appendix F Log De scriptions Rule [%d] phase 2 mismatch The l isted rule’s IKE phase 2 di d not ma tch betwe en the router and the peer . Rule [%d] Phase 2 key length mismatch The listed rule’s IKE phase 2 key lengths (with the AES encryption algorithm) di d not match between the router and the peer .
P-870HW-I1 User’s Guide Appendix F Log Descriptions 407 Rcvd data <size> too large! Max size allowed: <max size> The router received dire ctory data that was too large (the size is listed) from the LDAP server whose address and port are recorded in the Source field.
P-870HW-I1 User’s Guide 408 Appendix F Log De scriptions 26 Database method failed. 27 Path was not verified. 28 Maximum path length reached. Table 189 802.1X Logs LOG MESSAGE DESCRIPTION Local User Database accepts user. A user was authenticated by the local user database.
P-870HW-I1 User’s Guide Appendix F Log Descriptions 409 Table 190 ACL Setting Notes P ACKET DIRECTION DIRECTION DESCRIPTION (L to W) LAN to WAN ACL set for packets traveling from the LAN to the W AN. (W to L) WAN to LAN ACL set for packets traveling from the W AN to the LAN.
P-870HW-I1 User’s Guide 410 Appendix F Log De scriptions The following table shows RFC-2408 ISAKMP payload types that the log displays. Please refer to the RFC for detailed information on each type.
P-870HW-I1 User’s Guide Appendix F Log Descriptions 411 Log Commands Go to the command in terpreter interface. Configuring What Y ou W ant the ZyXEL Device to Log 1 Use the sys logs load command to load the log setting buffer that allows you to configure which logs the ZyXEL Device is to record.
P-870HW-I1 User’s Guide 412 Appendix F Log De scriptions • Use the sys logs display [log category] comm and to show the logs in an individ ual ZyXEL Device log category . • Use the sys logs clear command to erase all of the ZyXEL Device’ s logs.
P-870HW-I1 User’s Guide Appendix G B oot Comm ands 413 Appendix G Boot Commands The BootModule A T comman ds execute from wi thin the router ’ s bootup software, when debug mode is selected before the main router firmware is start ed.
P-870HW-I1 User’s Guide 414 Appendix G Boo t Commands Figure 273 Boot Module Commands AT just answer OK ATHE print help ATBAx change baud rate. 1:38.
P-870HW-I1 User’s Guide Appendix H Inte rnal SPTGEN 415 A PPENDIX H Internal SPTGEN This appendix introduces Internal SP TGEN. A ll menus shown in this appendix are example menus meant to show SP TGEN usag e. Actual menus for your produc t may differ .
P-870HW-I1 User’s Guide 416 Appendix H Internal SPTG EN Internal SPTGEN File Modification - Import ant Point s to Remember Each paramete r you enter must be pr eceded by one “=”sign and one spac e.
P-870HW-I1 User’s Guide Appendix H Inte rnal SPTGEN 417 Figure 277 Internal SPTGEN FTP Download Example Note: Y ou can rename your “ rom-t ” file when you save it to your computer but it must be named “ rom-t ” when you uplo ad it to your ZyXEL De vice.
P-870HW-I1 User’s Guide 418 Appendix H Internal SPTG EN Example Internal SPTGEN Menus This section provides example Internal SP TGEN menus. Table 194 Abbreviations Used in the Example Internal SPT G.
P-870HW-I1 User’s Guide Appendix H Inte rnal SPTGEN 419 30100012 = Outp ut protocol filters Set 4 = 256 30100013 = Outp ut device filters Set 1 = 256 30100014 = Outp ut device filters Set 2 = 256 30100015 = Outp ut device filters Set 3 = 256 30100016 = Outp ut device filters Set 4 = 256 / Menu 3.
P-870HW-I1 User’s Guide 420 Appendix H Internal SPTG EN 30201005 = Versio n <0(Rip-1) | 1(Rip-2B) |2(Rip-2M)> = 0 30201006 = IP Ali as #1 Incoming protocol filters Set 1 = 256 30201007 = IP Al.
P-870HW-I1 User’s Guide Appendix H Inte rnal SPTGEN 421 FIN FN PVA INPUT 30500001 = ESSI D Wireless 30500002 = Hide ESSID <0(No) | 1(Yes)> = 0 30500003 = Chan nel ID <1|2|3|4|5|6|7 |8|9|10|11|12| 13> = 1 30500004 = RTS Threshold <0 ~ 2432> = 2432 30500005 = FRAG .
P-870HW-I1 User’s Guide 422 Appendix H Internal SPTG EN Table 197 Menu 4 Internet Access Setup / Menu 4 Internet Access Setup FIN FN PVA INPUT 40000000 = Config ured <0(No) | 1(Yes)> = 1 40000.
P-870HW-I1 User’s Guide Appendix H Inte rnal SPTGEN 423 40000027 = ATM QoS Type <0(CBR) | (1 (UBR)> = 1 40000028 = Peak Cell Rate (PCR) = 0 40000029 = Sust ain Cell Rate (SCR) = 0 40000030 = M.
P-870HW-I1 User’s Guide 424 Appendix H Internal SPTG EN Table 199 Menu 15 SUA Server Setup / Menu 15 SUA Server Setup FIN FN PVA INPUT 150000001 = SUA Server IP address for default port = 0.
P-870HW-I1 User’s Guide Appendix H Inte rnal SPTGEN 425 150000031 = SUA Server #7 Local IP address = 0.0.0.0 150000032 = SUA Server #8 Active <0(No) | 1(Yes)> = 0 150000033 = SUA Server #8 Pro.
P-870HW-I1 User’s Guide 426 Appendix H Internal SPTG EN 210101002 = IP Filter Set 1,Rule 1 Ac tive <0(No)|1(Yes)> = 1 210101003 = IP Filter Set 1,Rule 1 Pr otocol = 6 210101004 = IP Filter Set 1,Rule 1 Dest IP address = 0.
P-870HW-I1 User’s Guide Appendix H Inte rnal SPTGEN 427 210102013 = IP Filter Set 1,Rule 2 Act Match <1(check next)|2(forward)| 3(drop)> = 3 210102014 = IP Filter Set 1,Rule 2 Act Not Match <1(check next)|2(forward)| 3(drop)> = 1 Table 200 Menu 21.
P-870HW-I1 User’s Guide 428 Appendix H Internal SPTG EN 210202001 = IP Filter Set 2, Rule 2 T ype <0(none)|2(TC P/IP)> = 2 210202002 = IP Filter Set 2, Rule 2 A ctive <0(No)|1(Yes)> = 1 210202003 = IP Filter Set 2, Rule 2 P rotocol = 6 210202004 = IP Filter Set 2, Rule 2 D est IP address = 0.
P-870HW-I1 User’s Guide Appendix H Inte rnal SPTGEN 429 230200005 = Authentication Server Sh ared Secret = 111111111111 111 111111111111 1111 230200006 = Accounting Server Config ured <0(No) | 1(Yes)> = 1 230200007 = Accounting Server Active <0(No) | 1(Yes)> = 1 230200008 = Accounting Server IP Add ress = 192.
P-870HW-I1 User’s Guide 430 Appendix H Internal SPTG EN 241100002 = TELNET Server Access <0(all)|1(none)|2(L an)|3(Wan)> = 0 241100003 = TELNET Server Secured IP address = 0.0.0.0 241100004 = FTP Server Port = 21 241100005 = FTP Server Access <0(all)|1(none)|2(L an)|3(Wan)> = 0 241100006 = FTP Server Secured IP add ress = 0.
P-870HW-I1 User’s Guide Appendix I Se rvices 431 Appendix I Services The following table l ists some commonly-used se rvices and their associated protocols and port numbers. • Name : This is a short, descrip tive name for the service. Y ou can use this one or create a different one, if you like.
P-870HW-I1 User’s Guide 432 Appendix I Services HTTPS TCP 443 HTTPS is a secured http session often used in e-commerce. ICMP User-Defined 1 Internet Control Message Protocol is often used for diagnostic purposes. ICQ UDP 4000 This is a popular Internet cha t program.
P-870HW-I1 User’s Guide Appendix I Se rvices 433 REAL_AUDIO TCP 7070 A streaming audio service that enab les real time sound over the we b. REXEC TCP 514 Remote Execution Daemon. RLOGIN TCP 513 Remote Login. ROADRUNNER TCP/UDP 1026 This is an ISP that provides services mainly for cable modems.
P-870HW-I1 User’s Guide 434 Appendix I Services.
P-870HW-I1 User’s Guide Index 435 Index A access point. See AP . AP 93 B backup 320 bandwidth management 41 , 197 bandwidth manager class configuration 202 bandwidth manager monitor 204 blocking tim.
P-870HW-I1 User’s Guide 436 Index guidelines for enhancing securi ty 153 introduction 147 policies 148 rule checklist 149 rule logic 149 rule security ramifications 149 services 149 firewall setu p .
P-870HW-I1 User’s Guide Index 437 mapping types 383 outside 381 port forwarding 137 server sets 137 symmetric 388 what NA T does 382 NA T mapping 383 many one-to-one 383 many-to-many overload 383 many-to-one 383 server 383 NA T setup 279 NA T traversal 217 NA T types 389 Network Address T ranslation.
P-870HW-I1 User’s Guide 438 Index SNMPv1 206 SNMPv2 206 source-based routing 339 splitters 44 SPTGEN 415 FTP upload exampl e 417 points to remember 416 text file 415 SSID 93 , 94 hide 94 SSID securi.
Een belangrijk punt na aankoop van elk apparaat ZyXEL Communications P-870HW-I (of zelfs voordat je het koopt) is om de handleiding te lezen. Dit moeten wij doen vanwege een paar simpele redenen:
Als u nog geen ZyXEL Communications P-870HW-I heb gekocht dan nu is een goed moment om kennis te maken met de basisgegevens van het product. Eerst kijk dan naar de eerste pagina\'s van de handleiding, die je hierboven vindt. Je moet daar de belangrijkste technische gegevens ZyXEL Communications P-870HW-I vinden. Op dit manier kan je controleren of het apparaat aan jouw behoeften voldoet. Op de volgende pagina's van de handleiding ZyXEL Communications P-870HW-I leer je over alle kenmerken van het product en krijg je informatie over de werking. De informatie die je over ZyXEL Communications P-870HW-I krijgt, zal je zeker helpen om een besluit over de aankoop te nemen.
In een situatie waarin je al een beziter van ZyXEL Communications P-870HW-I bent, maar toch heb je de instructies niet gelezen, moet je het doen voor de hierboven beschreven redenen. Je zult dan weten of je goed de alle beschikbare functies heb gebruikt, en of je fouten heb gemaakt die het leven van de ZyXEL Communications P-870HW-I kunnen verkorten.
Maar de belangrijkste taak van de handleiding is om de gebruiker bij het oplossen van problemen te helpen met ZyXEL Communications P-870HW-I . Bijna altijd, zal je daar het vinden Troubleshooting met de meest voorkomende storingen en defecten #MANUAl# samen met de instructies over hun opplosinge. Zelfs als je zelf niet kan om het probleem op te lossen, zal de instructie je de weg wijzen naar verdere andere procedure, bijv. door contact met de klantenservice of het dichtstbijzijnde servicecentrum.
