Zyxel-communications P-660H-T Series Manual de usuario

P-660H-T SeriesADSL2+ 4-port Security GatewayP-660HW-T Series802.11g Wireless ADSL2+ 4-port Security GatewayUser’s GuideVersion 3.402/2006

P-660H/HW-T Series User’ Guide9 Customer Support

P-660H/HW-T Series User’ Guide99 Chapter 6 WAN SetupFigure 35 Traffic Redirect ExampleThe following network topology allows you to avoid triangle ro

P-660H/HW-T Series User’ GuideChapter 6 WAN Setup 100Figure 37 WAN BackupThe following table describes the fields in this screen. Table 23 WAN Ba

P-660H/HW-T Series User’ Guide101 Chapter 6 WAN SetupTimeout Type the number of seconds (3 recommended) for your Prestige to wait for a ping response

P-660H/HW-T Series User’ GuideChapter 7 Network Address Translation (NAT) Screens 102CHAPTER 7Network Address Translation(NAT) ScreensThis chapter dis

P-660H/HW-T Series User’ Guide103 Chapter 7 Network Address Translation (NAT) Screens7.1.2 What NAT DoesIn the simplest form, NAT changes the source

P-660H/HW-T Series User’ GuideChapter 7 Network Address Translation (NAT) Screens 104Figure 38 How NAT Works7.1.4 NAT ApplicationThe following figu

P-660H/HW-T Series User’ Guide105 Chapter 7 Network Address Translation (NAT) Screens7.1.5 NAT Mapping TypesNAT supports five types of IP/port mappin

P-660H/HW-T Series User’ GuideChapter 7 Network Address Translation (NAT) Screens 1067.2 SUA (Single User Account) Versus NATSUA (Single User Account

P-660H/HW-T Series User’ Guide107 Chapter 7 Network Address Translation (NAT) Screens7.3.3 Configuring Servers Behind SUA (Example)Let's say you

P-660H/HW-T Series User’ GuideChapter 7 Network Address Translation (NAT) Screens 108Figure 41 NAT ModeThe following table describes the labels in t

P-660H/HW-T Series User’ GuideTable of Contents 10Table of ContentsCopyright ...

P-660H/HW-T Series User’ Guide109 Chapter 7 Network Address Translation (NAT) ScreensFigure 42 Edit SUA/NAT Server SetThe following table describes

P-660H/HW-T Series User’ GuideChapter 7 Network Address Translation (NAT) Screens 1107.6 Configuring Address Mapping Rules Ordering your rules is imp

P-660H/HW-T Series User’ Guide111 Chapter 7 Network Address Translation (NAT) Screens7.7 Editing an Address Mapping Rule To edit an address mapping r

P-660H/HW-T Series User’ GuideChapter 7 Network Address Translation (NAT) Screens 112Figure 44 Edit Address Mapping Rule The following table descri

P-660H/HW-T Series User’ Guide113 Chapter 7 Network Address Translation (NAT) ScreensCancel Click Cancel to return to the previously saved settings.De

P-660H/HW-T Series User’ GuideChapter 8 Dynamic DNS Setup 114CHAPTER 8Dynamic DNS SetupThis chapter discusses how to configure your Prestige to use Dy

P-660H/HW-T Series User’ Guide115 Chapter 8 Dynamic DNS SetupFigure 45 Dynamic DNSThe following table describes the fields in this screen. Table 31

P-660H/HW-T Series User’ GuideChapter 9 Time and Date 116CHAPTER 9Time and DateThis screen is not available on all models. Use this screen to configur

P-660H/HW-T Series User’ Guide117 Chapter 9 Time and Date Table 32 Time and DateLABEL DESCRIPTIONTime ServerUse Protocol when BootupSelect the time

P-660H/HW-T Series User’ GuideChapter 10 Firewalls 118CHAPTER 10FirewallsThis chapter gives some background information on firewalls and introduces th

P-660H/HW-T Series User’ Guide11 Table of ContentsChapter 3Wizard Setup for Internet Access...

P-660H/HW-T Series User’ Guide119 Chapter 10 Firewalls10.2.2 Application-level FirewallsApplication-level firewalls restrict access by serving as pro

P-660H/HW-T Series User’ GuideChapter 10 Firewalls 120• The LAN (Local Area Network) port attaches to a network of computers, which needs security fro

P-660H/HW-T Series User’ Guide121 Chapter 10 Firewalls10.4.2 Types of DoS AttacksThere are four types of DoS attacks: 1 Those that exploit bugs in a

P-660H/HW-T Series User’ GuideChapter 10 Firewalls 122Figure 48 Three-Way HandshakeUnder normal circumstances, the application that initiates a sess

P-660H/HW-T Series User’ Guide123 Chapter 10 Firewalls(ICMP) echo request packets (pings). Since the destination IP address of each packet is the broa

P-660H/HW-T Series User’ GuideChapter 10 Firewalls 124All SMTP commands are illegal except for those displayed in the following tables. 10.4.2.3 Trac

P-660H/HW-T Series User’ Guide125 Chapter 10 FirewallsFigure 51 Stateful InspectionThe previous figure shows the Prestige’s default firewall rules i

P-660H/HW-T Series User’ GuideChapter 10 Firewalls 126temporary entries might be modified, in order to permit only packets that are valid for the curr

P-660H/HW-T Series User’ Guide127 Chapter 10 FirewallsWhen the Prestige receives any subsequent packet (from the Internet or from the LAN), its connec

P-660H/HW-T Series User’ GuideChapter 10 Firewalls 128• Limit who can telnet into your router. • Don't enable any local service (such as SNMP or

P-660H/HW-T Series User’ GuideTable of Contents 125.8 Configuring Local User Authentication ...

P-660H/HW-T Series User’ Guide129 Chapter 10 Firewalls• Always shred confidential information, particularly about your computer, before throwing it aw

P-660H/HW-T Series User’ GuideChapter 10 Firewalls 130• A range of source and destination IP addresses as well as port numbers can be specified within

P-660H/HW-T Series User’ Guide131 Chapter 10 Firewalls

P-660H/HW-T Series User’ GuideChapter 11 Firewall Configuration 132CHAPTER 11Firewall ConfigurationThis chapter shows you how to enable and configure

P-660H/HW-T Series User’ Guide133 Chapter 11 Firewall ConfigurationNote: If you configure firewall rules without a good understanding of how they work

P-660H/HW-T Series User’ GuideChapter 11 Firewall Configuration 1344 Does a rule that allows Internet users access to resources on the LAN create a se

P-660H/HW-T Series User’ Guide135 Chapter 11 Firewall ConfigurationThe default rule for WAN to LAN traffic blocks all incoming connections (WAN to LAN

P-660H/HW-T Series User’ GuideChapter 11 Firewall Configuration 13611.6 Rule Summary Note: The ordering of your rules is very important as rules are

P-660H/HW-T Series User’ Guide137 Chapter 11 Firewall ConfigurationFigure 53 Firewall: Rule Summary The following table describes the labels in this

P-660H/HW-T Series User’ GuideChapter 11 Firewall Configuration 13811.6.1 Configuring Firewall Rules Refer to Section 10.1 on page 118 for more inf

P-660H/HW-T Series User’ Guide13 Table of Contents7.4 Selecting the NAT Mode ...

P-660H/HW-T Series User’ Guide139 Chapter 11 Firewall ConfigurationFigure 54 Firewall: Edit RuleThe following table describes the labels in this scr

P-660H/HW-T Series User’ GuideChapter 11 Firewall Configuration 140Table 39 Firewall: Edit RuleLABEL DESCRIPTIONActive Select this option to enable

P-660H/HW-T Series User’ Guide141 Chapter 11 Firewall Configuration11.7 Customized Services Configure customized services and port numbers not predef

P-660H/HW-T Series User’ GuideChapter 11 Firewall Configuration 142Refer to Section 10.1 on page 118 for more information. Figure 56 Firewall: Confi

P-660H/HW-T Series User’ Guide143 Chapter 11 Firewall ConfigurationFigure 57 Firewall Example: Rule Summary3 In the Rule Summary screen, type the in

P-660H/HW-T Series User’ GuideChapter 11 Firewall Configuration 144Figure 58 Firewall Example: Edit Rule: Destination Address 7 In the Edit Rule scr

P-660H/HW-T Series User’ Guide145 Chapter 11 Firewall ConfigurationFigure 60 Firewall Example: Edit Rule: Select Customized ServicesNote: Custom por

P-660H/HW-T Series User’ GuideChapter 11 Firewall Configuration 146Rule 2 allows a “My Service” connection from the WAN to IP addresses 10.0.0.10 thro

P-660H/HW-T Series User’ Guide147 Chapter 11 Firewall ConfigurationCU-SEEME(TCP/UDP:7648, 24032) A popular videoconferencing solution from White Pines

P-660H/HW-T Series User’ GuideChapter 11 Firewall Configuration 14811.11 Anti-Probing If an outside user attempts to probe an unsupported port on yo

P-660H/HW-T Series User’ GuideTable of Contents 14Chapter 11Firewall Configuration ...

P-660H/HW-T Series User’ Guide149 Chapter 11 Firewall ConfigurationFigure 62 Firewall: Anti ProbingThe following table describes the labels in this

P-660H/HW-T Series User’ GuideChapter 11 Firewall Configuration 15011.12.1 Threshold ValuesTune these parameters when something is not working and af

P-660H/HW-T Series User’ Guide151 Chapter 11 Firewall ConfigurationWhenever the number of half-open sessions with the same destination host address ri

P-660H/HW-T Series User’ GuideChapter 11 Firewall Configuration 152Table 44 Firewall: ThresholdLABEL DESCRIPTION DEFAULT VALUESDenial of Service Thr

P-660H/HW-T Series User’ Guide153 Chapter 11 Firewall ConfigurationDeny new connection request forSelect this radio button and specify for how long th

P-660H/HW-T Series User’ GuideChapter 12 Content Filtering 154CHAPTER 12Content FilteringThis chapter covers how to configure content filtering.12.1

P-660H/HW-T Series User’ Guide155 Chapter 12 Content Filtering12.3 Configuring Keyword Blocking Use this screen to block sites containing certain ke

P-660H/HW-T Series User’ GuideChapter 12 Content Filtering 15612.4 Configuring the Schedule To set the days and times for the Prestige to perform co

P-660H/HW-T Series User’ Guide157 Chapter 12 Content FilteringFigure 67 Content Filter: TrustedThe following table describes the labels in this scre

P-660H/HW-T Series User’ GuideChapter 13 Remote Management Configuration 158CHAPTER 13Remote ManagementConfigurationThis chapter provides information

P-660H/HW-T Series User’ Guide15 Table of Contents13.2 Telnet ...

P-660H/HW-T Series User’ Guide159 Chapter 13 Remote Management Configuration• A filter in SMT menu 3.1 (LAN) or in menu 11.5 (WAN) is applied to block

P-660H/HW-T Series User’ GuideChapter 13 Remote Management Configuration 16013.3 FTPYou can upload and download Prestige firmware and configuration f

P-660H/HW-T Series User’ Guide161 Chapter 13 Remote Management Configuration

P-660H/HW-T Series User’ GuideChapter 14 Universal Plug-and-Play (UPnP) 162CHAPTER 14Universal Plug-and-Play (UPnP)This chapter introduces the UPnP fe

P-660H/HW-T Series User’ Guide163 Chapter 14 Universal Plug-and-Play (UPnP)14.1.3 Cautions with UPnPThe automated nature of NAT traversal application

P-660H/HW-T Series User’ GuideChapter 14 Universal Plug-and-Play (UPnP) 16414.3 Installing UPnP in Windows ExampleThis section shows how to install U

P-660H/HW-T Series User’ Guide165 Chapter 14 Universal Plug-and-Play (UPnP)Figure 71 Add/Remove Programs: Windows Setup: Communication 3 In the Comm

P-660H/HW-T Series User’ GuideChapter 14 Universal Plug-and-Play (UPnP) 166Installing UPnP in Windows XPFollow the steps below to install the UPnP in

P-660H/HW-T Series User’ Guide167 Chapter 14 Universal Plug-and-Play (UPnP)Figure 74 Windows Optional Networking Components Wizard5 In the Networkin

P-660H/HW-T Series User’ GuideChapter 14 Universal Plug-and-Play (UPnP) 168Figure 75 Networking Services6 Click OK to go back to the Windows Optiona

P-660H/HW-T Series User’ GuideTable of Contents 1616.9 Configuring Summary ...

P-660H/HW-T Series User’ Guide169 Chapter 14 Universal Plug-and-Play (UPnP)Figure 76 Network Connections3 In the Internet Connection Properties wind

P-660H/HW-T Series User’ GuideChapter 14 Universal Plug-and-Play (UPnP) 170Figure 77 Internet Connection Properties 4 You may edit or delete the por

P-660H/HW-T Series User’ Guide171 Chapter 14 Universal Plug-and-Play (UPnP)Figure 78 Internet Connection Properties: Advanced SettingsFigure 79 In

P-660H/HW-T Series User’ GuideChapter 14 Universal Plug-and-Play (UPnP) 172Figure 80 System Tray Icon7 Double-click on the icon to display your curr

P-660H/HW-T Series User’ Guide173 Chapter 14 Universal Plug-and-Play (UPnP)Figure 82 Network Connections4 An icon with the description for each UPnP

P-660H/HW-T Series User’ GuideChapter 14 Universal Plug-and-Play (UPnP) 174Figure 83 Network Connections: My Network Places6 Right-click on the icon

P-660H/HW-T Series User’ Guide175 Chapter 14 Universal Plug-and-Play (UPnP)

P-660H/HW-T Series User’ GuideChapter 15 Logs Screens 176CHAPTER 15Logs ScreensThis chapter contains information about configuring general log setting

P-660H/HW-T Series User’ Guide177 Chapter 15 Logs ScreensFigure 85 Log SettingsThe following table describes the fields in this screen.Table 51 Lo

P-660H/HW-T Series User’ GuideChapter 15 Logs Screens 17815.3 Displaying the Logs Click Logs and then View Log to open the View Logs screen. Use the

P-660H/HW-T Series User’ Guide17 Table of ContentsChapter 21Menu 3 LAN Setup ...

P-660H/HW-T Series User’ Guide179 Chapter 15 Logs ScreensFigure 86 View LogsThe following table describes the fields in this screen. 15.4 SMTP Er

P-660H/HW-T Series User’ GuideChapter 15 Logs Screens 18015.4.1 Example E-mail LogAn "End of Log" message displays for each mail in which a

P-660H/HW-T Series User’ Guide181 Chapter 15 Logs Screens

P-660H/HW-T Series User’ GuideChapter 16 Media Bandwidth Management Advanced Setup 182CHAPTER 16Media Bandwidth ManagementAdvanced SetupThis chapter d

P-660H/HW-T Series User’ Guide183 Chapter 16 Media Bandwidth Management Advanced Setupbandwidth filter. You can configure up to one bandwidth filter p

P-660H/HW-T Series User’ GuideChapter 16 Media Bandwidth Management Advanced Setup 184Figure 89 Subnet-based Bandwidth Management Example16.4.3 App

P-660H/HW-T Series User’ Guide185 Chapter 16 Media Bandwidth Management Advanced Setup16.5 SchedulerThe scheduler divides up an interface’s bandwidth

P-660H/HW-T Series User’ GuideChapter 16 Media Bandwidth Management Advanced Setup 18616.6.2 Maximize Bandwidth Usage ExampleHere is an example of a

P-660H/HW-T Series User’ Guide187 Chapter 16 Media Bandwidth Management Advanced SetupFigure 92 Maximize Bandwidth Usage Example16.7 Bandwidth Borr

P-660H/HW-T Series User’ GuideChapter 16 Media Bandwidth Management Advanced Setup 1884 The Prestige assigns any remaining unbudgeted bandwidth to tra

P-660H/HW-T Series User’ GuideTable of Contents 1825.2 Configuration ...

P-660H/HW-T Series User’ Guide189 Chapter 16 Media Bandwidth Management Advanced SetupFigure 94 Media Bandwidth Management: SummaryThe following tab

P-660H/HW-T Series User’ GuideChapter 16 Media Bandwidth Management Advanced Setup 19016.10 Configuring Class Setup The class setup screen displays

P-660H/HW-T Series User’ Guide191 Chapter 16 Media Bandwidth Management Advanced SetupTo add a child class, click Media Bandwidth Management, then Cla

P-660H/HW-T Series User’ GuideChapter 16 Media Bandwidth Management Advanced Setup 192Active Select the check box to have the Prestige use this bandwi

P-660H/HW-T Series User’ Guide193 Chapter 16 Media Bandwidth Management Advanced Setup16.10.2 Media Bandwidth Management Statistics Use the Media Ba

P-660H/HW-T Series User’ GuideChapter 16 Media Bandwidth Management Advanced Setup 19416.11 Bandwidth Monitor To view the Prestige’s bandwidth usag

P-660H/HW-T Series User’ Guide195 Chapter 16 Media Bandwidth Management Advanced Setup

P-660H/HW-T Series User’ GuideChapter 17 Maintenance 196CHAPTER 17MaintenanceThis chapter displays system information such as ZyNOS firmware, port IP

P-660H/HW-T Series User’ Guide197 Chapter 17 MaintenanceFigure 99 System StatusThe following table describes the fields in this screen. Table 62 S

P-660H/HW-T Series User’ GuideChapter 17 Maintenance 19817.2.1 System Statistics Click Show Statistics in the System Status screen to open the follow

P-660H/HW-T Series User’ Guide19 Table of Contents29.7 Applying Filters and Factory Defaults ...

P-660H/HW-T Series User’ Guide199 Chapter 17 MaintenanceFigure 100 System Status: Show StatisticsThe following table describes the fields in this sc

P-660H/HW-T Series User’ GuideChapter 17 Maintenance 20017.3 DHCP Table Screen DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allo

P-660H/HW-T Series User’ Guide201 Chapter 17 Maintenance17.4 Any IP Table Screen Click Maintenance, Any IP. The Any IP table shows current read-only

P-660H/HW-T Series User’ GuideChapter 17 Maintenance 202Figure 103 Association ListThe following table describes the fields in this screen. 17.6 D

P-660H/HW-T Series User’ Guide203 Chapter 17 MaintenanceFigure 104 Diagnostic: GeneralThe following table describes the fields in this screen. 17.6.

P-660H/HW-T Series User’ GuideChapter 17 Maintenance 204Figure 105 Diagnostic: DSL LineThe following table describes the fields in this screen. Tab

P-660H/HW-T Series User’ Guide205 Chapter 17 Maintenance17.7 Firmware Upgrade Find firmware at www.zyxel.com in a file that (usually) uses the system

P-660H/HW-T Series User’ GuideChapter 17 Maintenance 206The Prestige automatically restarts in this time causing a temporary network disconnect. In so

P-660H/HW-T Series User’ Guide207 Chapter 17 Maintenance

P-660H/HW-T Series User’ GuideChapter 18 Introducing the SMT 208CHAPTER 18Introducing the SMTThis chapter explains how to access and navigate the Syst

P-660H/HW-T Series User’ GuideTable of Contents 2033.3 Restore Configuration ...

P-660H/HW-T Series User’ Guide209 Chapter 18 Introducing the SMTFigure 109 Login Screen 18.1.3 Prestige SMT Menus OverviewThe following table gives

P-660H/HW-T Series User’ GuideChapter 18 Introducing the SMT 21018.2 Navigating the SMT InterfaceThe SMT (System Management Terminal) is the interfac

P-660H/HW-T Series User’ Guide211 Chapter 18 Introducing the SMTAfter you enter the password, the SMT displays the main menu, as shown next.18.2.1 Sy

P-660H/HW-T Series User’ GuideChapter 18 Introducing the SMT 21218.3 Changing the System PasswordChange the Prestige default password by following th

P-660H/HW-T Series User’ Guide213 Chapter 18 Introducing the SMTNote: Note that as you type a password, the screen displays an “*” for each character

P-660H/HW-T Series User’ GuideChapter 19 Menu 1 General Setup 214CHAPTER 19Menu 1 General SetupMenu 1 - General Setup contains administrative and syst

P-660H/HW-T Series User’ Guide215 Chapter 19 Menu 1 General SetupFigure 111 Menu 1 General SetupFill in the required fields. Refer to the table show

P-660H/HW-T Series User’ GuideChapter 19 Menu 1 General Setup 216Figure 112 Menu 1.1 Configure Dynamic DNS Follow the instructions in the next table

P-660H/HW-T Series User’ Guide217 Chapter 19 Menu 1 General Setup

P-660H/HW-T Series User’ GuideChapter 20 Menu 2 WAN Backup Setup 218CHAPTER 20Menu 2 WAN Backup SetupThis chapter describes how to configure traffic r

P-660H/HW-T Series User’ Guide21 Table of ContentsChapter 38Troubleshooting ...

P-660H/HW-T Series User’ Guide219 Chapter 20 Menu 2 WAN Backup Setup20.2.1 Traffic Redirect SetupConfigure parameters that determine when the Prestig

P-660H/HW-T Series User’ GuideChapter 20 Menu 2 WAN Backup Setup 220Metric This field sets this route's priority among the routes the Prestige us

P-660H/HW-T Series User’ Guide221 Chapter 20 Menu 2 WAN Backup Setup

P-660H/HW-T Series User’ GuideChapter 21 Menu 3 LAN Setup 222CHAPTER 21Menu 3 LAN SetupThis chapter covers how to configure your wired Local Area Netw

P-660H/HW-T Series User’ Guide223 Chapter 21 Menu 3 LAN Setup21.2 Protocol Dependent Ethernet SetupDepending on the protocols for your applications,

P-660H/HW-T Series User’ GuideChapter 21 Menu 3 LAN Setup 224Follow the instructions in the following table on how to configure the DHCP fields. Fo

P-660H/HW-T Series User’ Guide225 Chapter 21 Menu 3 LAN Setup

P-660H/HW-T Series User’ GuideChapter 22 Wireless LAN Setup 226CHAPTER 22Wireless LAN SetupThis chapter covers how to configure wireless LAN settings

P-660H/HW-T Series User’ Guide227 Chapter 22 Wireless LAN Setup22.2.1 Wireless LAN MAC Address FilterThe next layer of security is MAC address filter

P-660H/HW-T Series User’ GuideChapter 22 Wireless LAN Setup 228Figure 119 Menu 3.5.1 WLAN MAC Address FilteringThe following table describes the fie

P-660H/HW-T Series User’ GuideTable of Contents 22Command Syntax...

P-660H/HW-T Series User’ Guide229 Chapter 22 Wireless LAN Setup

P-660H/HW-T Series User’ GuideChapter 23 Internet Access 230CHAPTER 23Internet AccessThis chapter shows you how to configure the LAN and WAN of your P

P-660H/HW-T Series User’ Guide231 Chapter 23 Internet AccessFigure 120 IP Alias Network ExampleUse menu 3.2.1 to configure IP Alias on your Prestige

P-660H/HW-T Series User’ GuideChapter 23 Internet Access 232Figure 122 Menu 3.2.1 IP Alias SetupFollow the instructions in the following table to co

P-660H/HW-T Series User’ Guide233 Chapter 23 Internet AccessFigure 123 Menu 1 General Setup23.6 Internet Access ConfigurationMenu 4 allows you to e

P-660H/HW-T Series User’ GuideChapter 23 Internet Access 234.If all your settings are correct your Prestige should connect automatically to the Intern

P-660H/HW-T Series User’ Guide235 Chapter 23 Internet Access

P-660H/HW-T Series User’ GuideChapter 24 Remote Node Configuration 236CHAPTER 24Remote Node ConfigurationThis chapter covers remote node configuration

P-660H/HW-T Series User’ Guide237 Chapter 24 Remote Node ConfigurationFigure 125 Menu 11 Remote Node Setup24.2.2 Encapsulation and Multiplexing Sce

P-660H/HW-T Series User’ GuideChapter 24 Remote Node Configuration 238Figure 126 Menu 11.1 Remote Node Profile In Menu 11.1 – Remote Node Profile, f

P-660H/HW-T Series User’ Guide23 Table of ContentsLog Command Example...

P-660H/HW-T Series User’ Guide239 Chapter 24 Remote Node Configuration24.2.3 Outgoing Authentication ProtocolFor obvious reasons, you should employ t

P-660H/HW-T Series User’ GuideChapter 24 Remote Node Configuration 24024.3 Remote Node Network Layer OptionsFor the TCP/IP parameters, perform the fo

P-660H/HW-T Series User’ Guide241 Chapter 24 Remote Node Configuration24.3.1 My WAN Addr Sample IP AddressesThe following figure uses sample IP addre

P-660H/HW-T Series User’ GuideChapter 24 Remote Node Configuration 242Figure 128 Sample IP Addresses for a TCP/IP LAN-to-LAN Connection24.4 Remote

P-660H/HW-T Series User’ Guide243 Chapter 24 Remote Node ConfigurationFigure 130 Menu 11.5 Remote Node Filter (PPPoA or PPPoE Encapsulation) 24.5 E

P-660H/HW-T Series User’ GuideChapter 24 Remote Node Configuration 244Figure 132 Menu 11.6 for LLC-based Multiplexing or PPP EncapsulationIn this ca

P-660H/HW-T Series User’ Guide245 Chapter 24 Remote Node ConfigurationFigure 134 Menu 11.8 Advance Setup OptionsThe following table describes the fi

P-660H/HW-T Series User’ GuideChapter 25 Static Route Setup 246CHAPTER 25Static Route SetupThis chapter shows how to setup IP static routes.25.1 IP S

P-660H/HW-T Series User’ Guide247 Chapter 25 Static Route SetupFigure 136 Menu 12 Static Route SetupFrom menu 12, select 1 to open Menu 12.1 — IP St

P-660H/HW-T Series User’ GuideChapter 25 Static Route Setup 248The following table describes the fields for Menu 12.1.1 – Edit IP Static Route Setup.T

P-660H/HW-T Series User’ GuideList of Figures 24List of FiguresFigure 1 Protected Internet Access Applications ...

P-660H/HW-T Series User’ Guide249 Chapter 25 Static Route Setup

P-660H/HW-T Series User’ GuideChapter 26 Bridging Setup 250CHAPTER 26Bridging SetupThis chapter shows you how to configure the bridging parameters of

P-660H/HW-T Series User’ Guide251 Chapter 26 Bridging SetupFigure 139 Menu 11.1 Remote Node Profile3 Move the cursor to the Edit IP/Bridge field, th

P-660H/HW-T Series User’ GuideChapter 26 Bridging Setup 25226.2.2 Bridge Static Route SetupSimilar to network layer static routes, a bridging static

P-660H/HW-T Series User’ Guide253 Chapter 26 Bridging Setup

P-660H/HW-T Series User’ GuideChapter 27 Network Address Translation (NAT) 254CHAPTER 27Network Address Translation(NAT)This chapter discusses how to

P-660H/HW-T Series User’ Guide255 Chapter 27 Network Address Translation (NAT)Figure 142 Menu 4 Applying NAT for Internet AccessThe following figure

P-660H/HW-T Series User’ GuideChapter 27 Network Address Translation (NAT) 25627.3 NAT SetupUse the address mapping sets menus and submenus to create

P-660H/HW-T Series User’ Guide257 Chapter 27 Network Address Translation (NAT)Figure 145 Menu 15.1 Address Mapping Sets27.3.1.1 SUA Address Mapping

P-660H/HW-T Series User’ GuideChapter 27 Network Address Translation (NAT) 25827.3.1.2 User-Defined Address Mapping SetsNow let’s look at option 1 in

P-660H/HW-T Series User’ Guide25 List of FiguresFigure 39 NAT Application With IP Alias ...

P-660H/HW-T Series User’ Guide259 Chapter 27 Network Address Translation (NAT)27.3.1.3 Ordering Your RulesOrdering your rules is important because th

P-660H/HW-T Series User’ GuideChapter 27 Network Address Translation (NAT) 260The following table explains the fields in this menu.27.4 Configuring a

P-660H/HW-T Series User’ Guide261 Chapter 27 Network Address Translation (NAT)Figure 150 Menu 15.2.1 NAT Server Setup4 Enter a port number in an unu

P-660H/HW-T Series User’ GuideChapter 27 Network Address Translation (NAT) 26227.5.1 Example 1: Internet Access OnlyIn the following Internet access

P-660H/HW-T Series User’ Guide263 Chapter 27 Network Address Translation (NAT)Figure 154 NAT Example 2In this case, you do exactly as above (use the

P-660H/HW-T Series User’ GuideChapter 27 Network Address Translation (NAT) 264Map the other outgoing LAN traffic to IGA3 (Many : 1 mapping).You also m

P-660H/HW-T Series User’ Guide265 Chapter 27 Network Address Translation (NAT)Figure 157 Example 3: Menu 11.3The following figures show how to confi

P-660H/HW-T Series User’ GuideChapter 27 Network Address Translation (NAT) 266Figure 159 Example 3: Final Menu 15.1.1Now configure the IGA3 to map t

P-660H/HW-T Series User’ Guide267 Chapter 27 Network Address Translation (NAT)27.5.4 Example 4: NAT Unfriendly Application ProgramsSome applications

P-660H/HW-T Series User’ GuideChapter 27 Network Address Translation (NAT) 268Figure 163 Example 4: Menu 15.1.1 Address Mapping RulesMenu 15.1.1 - A

P-660H/HW-T Series User’ GuideList of Figures 26Figure 82 Network Connections ...

P-660H/HW-T Series User’ Guide269 Chapter 27 Network Address Translation (NAT)

P-660H/HW-T Series User’ GuideChapter 28 Enabling the Firewall 270CHAPTER 28Enabling the FirewallThis chapter shows you how to get started with the Pr

P-660H/HW-T Series User’ Guide271 Chapter 28 Enabling the FirewallFigure 164 Menu 21.2 Firewall SetupUse the web configurator or the command interpr

P-660H/HW-T Series User’ GuideChapter 29 Filter Configuration 272CHAPTER 29Filter ConfigurationThis chapter shows you how to create and apply filters.

P-660H/HW-T Series User’ Guide273 Chapter 29 Filter ConfigurationFigure 166 Filter Rule ProcessYou can apply up to four filter sets to a particular

P-660H/HW-T Series User’ GuideChapter 29 Filter Configuration 27429.2 Configuring a Filter Set for the Prestige To configure a filter set, follow the

P-660H/HW-T Series User’ Guide275 Chapter 29 Filter ConfigurationFigure 169 NetBIOS_LAN Filter Rules Summary Figure 170 IGMP Filter Rules Summary

P-660H/HW-T Series User’ GuideChapter 29 Filter Configuration 276The protocol dependent filter rules abbreviation are listed as follows:29.4 Configur

P-660H/HW-T Series User’ Guide277 Chapter 29 Filter Configuration29.4.1 TCP/IP Filter RuleThis section shows you how to configure a TCP/IP filter rul

P-660H/HW-T Series User’ GuideChapter 29 Filter Configuration 278The following figure illustrates the logic flow of an IP filter.Port # Type the desti

P-660H/HW-T Series User’ Guide27 List of FiguresFigure 125 Menu 11 Remote Node Setup ...

P-660H/HW-T Series User’ Guide279 Chapter 29 Filter ConfigurationFigure 172 Executing an IP Filter29.4.2 Generic Filter RuleThis section shows you

P-660H/HW-T Series User’ GuideChapter 29 Filter Configuration 280For generic rules, the Prestige treats a packet as a byte stream as opposed to an IP

P-660H/HW-T Series User’ Guide281 Chapter 29 Filter Configuration29.5 Filter Types and NAT There are two classes of filter rules, Generic Filter Devi

P-660H/HW-T Series User’ GuideChapter 29 Filter Configuration 282Figure 175 Sample Telnet Filter1 Enter 1 in the menu 21 to display Menu 21.1 — Filt

P-660H/HW-T Series User’ Guide283 Chapter 29 Filter Configuration2 Go to the Edit Filter Sets field, press [SPACE BAR] to choose Ye s and press [ENTER

P-660H/HW-T Series User’ GuideChapter 29 Filter Configuration 28429.7.1 Ethernet TrafficYou seldom need to filter Ethernet traffic; however, the filt

P-660H/HW-T Series User’ Guide285 Chapter 29 Filter Configuration

P-660H/HW-T Series User’ GuideChapter 30 SNMP Configuration 286CHAPTER 30SNMP ConfigurationThis chapter explains SNMP Configuration menu 22.30.1 Abou

P-660H/HW-T Series User’ Guide287 Chapter 30 SNMP ConfigurationThe managed devices contain object variables/managed objects that define each piece of

P-660H/HW-T Series User’ GuideChapter 30 SNMP Configuration 288Figure 181 Menu 22 SNMP ConfigurationThe following table describes the SNMP configura

P-660H/HW-T Series User’ GuideList of Figures 28Figure 168 NetBIOS_WAN Filter Rules Summary ...

P-660H/HW-T Series User’ Guide289 Chapter 30 SNMP ConfigurationThe port number is its interface index under the interface group.5 authenticationFailur

P-660H/HW-T Series User’ GuideChapter 31 System Security 290CHAPTER 31System SecurityThis chapter describes how to configure the system security on th

P-660H/HW-T Series User’ Guide291 Chapter 31 System SecurityFigure 183 Menu 23.2 System Security: RADIUS ServerThe following table describes the fie

P-660H/HW-T Series User’ GuideChapter 31 System Security 29231.1.3 IEEE 802.1xThe IEEE 802.1x standards outline enhanced security methods for both th

P-660H/HW-T Series User’ Guide293 Chapter 31 System SecurityTable 103 Menu 23.4 System Security: IEEE 802.1xFIELD DESCRIPTIONWireless Port ControlPr

P-660H/HW-T Series User’ GuideChapter 31 System Security 294Once you enable user authentication, you need to specify an external RADIUS server or crea

P-660H/HW-T Series User’ Guide295 Chapter 31 System SecurityFigure 186 Menu 14 Dial-in User Setup2 Type a number and press [ENTER] to edit the user

P-660H/HW-T Series User’ GuideChapter 32 System Information and Diagnosis 296CHAPTER 32System Information andDiagnosisThis chapter covers the informat

P-660H/HW-T Series User’ Guide297 Chapter 32 System Information and DiagnosisThe following table describes the fields present in Menu 24.1 — System Ma

P-660H/HW-T Series User’ GuideChapter 32 System Information and Diagnosis 29832.3 System InformationTo get to the System Information:1 Enter 24 to di

P-660H/HW-T Series User’ GuideCopyright 2CopyrightCopyright © 2006 by ZyXEL Communications Corporation.The contents of this publication may not be rep

P-660H/HW-T Series User’ Guide29 List of FiguresFigure 211 Menu 24.11 Remote Management Control ...

P-660H/HW-T Series User’ Guide299 Chapter 32 System Information and DiagnosisFigure 191 Menu 24.2.1 System Maintenance: InformationThe following tab

P-660H/HW-T Series User’ GuideChapter 32 System Information and Diagnosis 300Figure 192 Menu 24.2.2 System Maintenance : Change Console Port SpeedOn

P-660H/HW-T Series User’ Guide301 Chapter 32 System Information and DiagnosisFigure 194 Sample Error and Information Messages32.4.2 Syslog and Acco

P-660H/HW-T Series User’ GuideChapter 32 System Information and Diagnosis 302Figure 196 Syslog Example1 - CDRSdcmdSyslogSend ( SYSLOG_CDR, SYSLOG_IN

P-660H/HW-T Series User’ Guide303 Chapter 32 System Information and Diagnosis32.5 DiagnosticThe diagnostic facility allows you to test the different

P-660H/HW-T Series User’ GuideChapter 32 System Information and Diagnosis 304The following table describes the diagnostic tests available in menu 24.4

P-660H/HW-T Series User’ Guide305 Chapter 32 System Information and Diagnosis

P-660H/HW-T Series User’ GuideChapter 33 Firmware and Configuration File Maintenance 306CHAPTER 33Firmware and Configuration FileMaintenanceThis chapt

P-660H/HW-T Series User’ Guide307 Chapter 33 Firmware and Configuration File MaintenanceThe following table is a summary. Please note that the interna

P-660H/HW-T Series User’ GuideChapter 33 Firmware and Configuration File Maintenance 308Figure 198 Telnet in Menu 24.533.2.2 Using the FTP Command

P-660H/HW-T Series User’ GuideList of Figures 30Figure 254 Red Hat 9.0: Static IP Address Setting in ifconfig-eth0 ...

P-660H/HW-T Series User’ Guide309 Chapter 33 Firmware and Configuration File MaintenanceFigure 199 FTP Session Example33.2.4 GUI-based FTP ClientsT

P-660H/HW-T Series User’ GuideChapter 33 Firmware and Configuration File Maintenance 31033.2.6 Backup Configuration Using TFTPThe Prestige supports t

P-660H/HW-T Series User’ Guide311 Chapter 33 Firmware and Configuration File MaintenanceRefer to Section 33.2.5 on page 309 to read about configuratio

P-660H/HW-T Series User’ GuideChapter 33 Firmware and Configuration File Maintenance 312Figure 200 Telnet into Menu 24.61 Launch the FTP client on y

P-660H/HW-T Series User’ Guide313 Chapter 33 Firmware and Configuration File Maintenance33.4 Uploading Firmware and Configuration FilesThis section s

P-660H/HW-T Series User’ GuideChapter 33 Firmware and Configuration File Maintenance 314Figure 203 Telnet Into Menu 24.7.2 System Maintenance To upl

P-660H/HW-T Series User’ Guide315 Chapter 33 Firmware and Configuration File Maintenance33.4.4 FTP Session Example of Firmware File UploadFigure 204

P-660H/HW-T Series User’ GuideChapter 33 Firmware and Configuration File Maintenance 31633.4.6 TFTP Upload Command ExampleThe following is an example

P-660H/HW-T Series User’ Guide317 Chapter 33 Firmware and Configuration File Maintenance

P-660H/HW-T Series User’ GuideChapter 34 System Maintenance 318CHAPTER 34System MaintenanceThis chapter leads you through SMT menus 24.8 to 24.10.34.1

P-660H/HW-T Series User’ Guide31 List of Figures

P-660H/HW-T Series User’ Guide319 Chapter 34 System Maintenance34.2 Call Control SupportCall Control Support is only applicable when Encapsulation is

P-660H/HW-T Series User’ GuideChapter 34 System Maintenance 320Figure 208 Menu 24.9.1 System Maintenance: Budget ManagementThe total budget is the t

P-660H/HW-T Series User’ Guide321 Chapter 34 System MaintenanceFigure 209 Menu 24 System MaintenanceThen enter 10 to go to Menu 24.10 System Mainten

P-660H/HW-T Series User’ GuideChapter 34 System Maintenance 32234.3.1 Resetting the Time• The Prestige resets the time in three instances:• On leavin

P-660H/HW-T Series User’ Guide323 Chapter 34 System Maintenance

P-660H/HW-T Series User’ GuideChapter 35 Remote Management 324CHAPTER 35Remote ManagementThis chapter covers remote management (SMT menu 24.11).35.1

P-660H/HW-T Series User’ Guide325 Chapter 35 Remote ManagementFigure 211 Menu 24.11 Remote Management ControlThe following table describes the field

P-660H/HW-T Series User’ GuideChapter 35 Remote Management 32635.3 Remote Management and NATWhen NAT is enabled:• Use the Prestige’s WAN IP address w

P-660H/HW-T Series User’ Guide327 Chapter 35 Remote Management

P-660H/HW-T Series User’ GuideChapter 36 IP Policy Routing 328CHAPTER 36IP Policy RoutingThis chapter covers setting and applying policies used for IP

P-660H/HW-T Series User’ GuideList of Tables 32List of TablesTable 1 ADSL Standards ...

P-660H/HW-T Series User’ Guide329 Chapter 36 IP Policy Routing• routing the packet to a different gateway (and hence the outgoing interface).• setting

P-660H/HW-T Series User’ GuideChapter 36 IP Policy Routing 330Figure 213 Menu 25.1 IP Routing Policy SetupType a number from 1 to 6 to display Menu

P-660H/HW-T Series User’ Guide331 Chapter 36 IP Policy RoutingFigure 214 Menu 25.1.1 IP Routing PolicyThe following table describes the fields in th

P-660H/HW-T Series User’ GuideChapter 36 IP Policy Routing 33236.5 Applying an IP PolicyThis section shows you where to apply the IP policies after y

P-660H/HW-T Series User’ Guide333 Chapter 36 IP Policy RoutingFigure 215 Menu 3.2 TCP/IP and DHCP Ethernet SetupGo to menu 11.3 (shown next) and typ

P-660H/HW-T Series User’ GuideChapter 36 IP Policy Routing 334Route 1 represents the default IP route and route 2 represents the configured IP route.F

P-660H/HW-T Series User’ Guide335 Chapter 36 IP Policy RoutingFigure 218 IP Routing Policy Example1 Check Menu 25.1 — IP Routing Policy Setup to see

P-660H/HW-T Series User’ GuideChapter 36 IP Policy Routing 336Figure 219 IP Routing Policy Example4 Check Menu 25.1 — IP Routing Policy Setup to see

P-660H/HW-T Series User’ Guide337 Chapter 36 IP Policy Routing

P-660H/HW-T Series User’ GuideChapter 37 Call Scheduling 338CHAPTER 37Call SchedulingCall scheduling (applicable for PPPoA or PPPoE encapsulation only

P-660H/HW-T Series User’ Guide33 List of TablesTable 39 Firewall: Edit Rule ...

P-660H/HW-T Series User’ Guide339 Chapter 37 Call Scheduling To setup a schedule set, select the schedule set you want to setup from menu 26 (1-12) an

P-660H/HW-T Series User’ GuideChapter 37 Call Scheduling 340Once your schedule sets are configured, you must then apply them to the desired remote nod

P-660H/HW-T Series User’ Guide341 Chapter 37 Call Scheduling

P-660H/HW-T Series User’ GuideChapter 38 Troubleshooting 342CHAPTER 38TroubleshootingThis chapter covers potential problems and the corresponding reme

P-660H/HW-T Series User’ Guide343 Chapter 38 Troubleshooting38.3 Problems with the WANTable 120 Troubleshooting the WANPROBLEM CORRECTIVE ACTIONThe

P-660H/HW-T Series User’ GuideChapter 38 Troubleshooting 34438.4 Problems Accessing the Prestige38.4.1 Pop-up Windows, JavaScripts and Java Permissi

P-660H/HW-T Series User’ Guide345 Chapter 38 TroubleshootingFigure 224 Pop-up BlockerYou can also check if pop-up blocking is disabled in the Pop-up

P-660H/HW-T Series User’ GuideChapter 38 Troubleshooting 346Figure 226 Internet Options3 Type the IP address of your device (the web page that you d

P-660H/HW-T Series User’ Guide347 Chapter 38 TroubleshootingFigure 227 Pop-up Blocker Settings5 Click Close to return to the Privacy screen. 6 Click

P-660H/HW-T Series User’ GuideChapter 38 Troubleshooting 348Figure 228 Internet Options 2 Click the Custom Level... button. 3 Scroll down to Scripti

P-660H/HW-T Series User’ GuideList of Tables 34Table 82 Menu 3.2.1 IP Alias Setup ...

P-660H/HW-T Series User’ Guide349 Chapter 38 TroubleshootingFigure 229 Security Settings - Java Scripting38.4.1.3 Java Permissions1 From Internet E

P-660H/HW-T Series User’ GuideChapter 38 Troubleshooting 350Figure 230 Security Settings - Java 38.4.1.3.1 JAVA (Sun)1 From Internet Explorer, clic

P-660H/HW-T Series User’ Guide351 Chapter 38 TroubleshootingFigure 231 Java (Sun)38.4.2 ActiveX Controls in Internet ExplorerIf ActiveX is disabled

P-660H/HW-T Series User’ GuideChapter 38 Troubleshooting 352Figure 232 Internet Options Security3 Scroll down to ActiveX controls and plug-ins.4 Und

P-660H/HW-T Series User’ Guide353 Chapter 38 TroubleshootingFigure 233 Security Setting ActiveX Controls

P-660H/HW-T Series User’ GuideAppendix A 354Appendix A Product SpecificationsSee also the Introduction chapter for a general overview of the key featu

P-660H/HW-T Series User’ Guide355 Appendix ATable 123 FirmwareADSL Standards Multi-Mode standard (ANSI T1.413,Issue 2; G.dmt(G.992.1); G.lite(G992.2

P-660H/HW-T Series User’ GuideAppendix A 356Firewall Stateful Packet Inspection.Prevent Denial of Service attacks such as Ping of Death, SYN Flood, LA

P-660H/HW-T Series User’ Guide357 Appendix A

P-660H/HW-T Series User’ GuideAppendix B 358APPENDIX BWall-mounting InstructionsDo the following to hang your Prestige on a wall.Note: See the product

P-660H/HW-T Series User’ Guide35 List of TablesTable 125 Allowed IP Address Range By Class ...

P-660H/HW-T Series User’ Guide359 Appendix B

P-660H/HW-T Series User’ GuideAppendix C 360Appendix CSetting up Your Computer’s IP AddressAll computers must have a 10M or 100M Ethernet adapter card

P-660H/HW-T Series User’ Guide361 Appendix CFigure 235 WIndows 95/98/Me: Network: ConfigurationInstalling ComponentsThe Network window Configuration

P-660H/HW-T Series User’ GuideAppendix C 3623 Select Microsoft from the list of manufacturers.4 Select Client for Microsoft Networks from the list of

P-660H/HW-T Series User’ Guide363 Appendix CFigure 237 Windows 95/98/Me: TCP/IP Properties: DNS Configuration4 Click the Gateway tab.• If you do not

P-660H/HW-T Series User’ GuideAppendix C 364Figure 238 Windows XP: Start Menu2 In the Control Panel, double-click Network Connections (Network and D

P-660H/HW-T Series User’ Guide365 Appendix CFigure 240 Windows XP: Control Panel: Network Connections: Properties4 Select Internet Protocol (TCP/IP)

P-660H/HW-T Series User’ GuideAppendix C 366• Click Advanced.Figure 242 Windows XP: Internet Protocol (TCP/IP) Properties6 If you do not know your

P-660H/HW-T Series User’ Guide367 Appendix CFigure 243 Windows XP: Advanced TCP/IP Properties7 In the Internet Protocol TCP/IP Properties window (th

P-660H/HW-T Series User’ GuideAppendix C 368Figure 244 Windows XP: Internet Protocol (TCP/IP) Properties8 Click OK to close the Internet Protocol (T

P-660H/HW-T Series User’ GuideList of Tables 36Table 168 Menu 15 SUA Server Setup (SMT Menu 15) ...

P-660H/HW-T Series User’ Guide369 Appendix CFigure 245 Macintosh OS 8/9: Apple Menu2 Select Ethernet built-in from the Connect via list.Figure 246

P-660H/HW-T Series User’ GuideAppendix C 3704 For statically assigned settings, do the following:•From the Configure box, select Manually.• Type your

P-660H/HW-T Series User’ Guide371 Appendix CFigure 248 Macintosh OS X: Network4 For statically assigned settings, do the following:•From the Configu

P-660H/HW-T Series User’ GuideAppendix C 372Note: Make sure you are logged in as the root administrator. Using the K Desktop Environment (KDE)Follow t

P-660H/HW-T Series User’ Guide373 Appendix C• If you have a dynamic IP address click Automatically obtain IP address settings with and select dhcp fro

P-660H/HW-T Series User’ GuideAppendix C 3741 Assuming that you have only one network card on the computer, locate the ifconfig-eth0 configuration fil

P-660H/HW-T Series User’ Guide375 Appendix CFigure 256 Red Hat 9.0: Restart Ethernet Card Verifying SettingsEnter ifconfig in a terminal screen to

P-660H/HW-T Series User’ GuideAppendix D 376Appendix DIP SubnettingIP Addressing Routers “route” based on the network number. The router that delivers

P-660H/HW-T Series User’ Guide377 Appendix DSince the first octet of a class “A” IP address must contain a “0”, the first octet of a class “A” address

P-660H/HW-T Series User’ GuideAppendix D 378Since the mask is always a continuous number of ones beginning from the left, followed by a continuous num

P-660H/HW-T Series User’ Guide37 List of Tables

P-660H/HW-T Series User’ Guide379 Appendix DNote: In the following charts, shaded/bolded last octet bit values indicate host ID bits “borrowed” to for

P-660H/HW-T Series User’ GuideAppendix D 380Example: Four Subnets The above example illustrated using a 25-bit subnet mask to divide a class “C” addre

P-660H/HW-T Series User’ Guide381 Appendix DExample Eight SubnetsSimilarly use a 27-bit mask to create 8 subnets (001, 010, 011, 100, 101, 110). The f

P-660H/HW-T Series User’ GuideAppendix D 382Subnetting With Class A and Class B Networks. For class “A” and class “B” addresses the subnet mask also d

P-660H/HW-T Series User’ Guide383 Appendix D

P-660H/HW-T Series User’ GuideAppendix E 384Appendix EBoot CommandsThe BootModule AT commands execute from within the router’s bootup software, when d

P-660H/HW-T Series User’ Guide385 Appendix EFigure 259 Boot Module CommandsAT just answer OKATHE print helpATBAx change

P-660H/HW-T Series User’ GuideAppendix F 386Appendix FCommand InterpreterThe following describes how to use the command interpreter. Enter 24 in the m

P-660H/HW-T Series User’ Guide387 Appendix F

P-660H/HW-T Series User’ GuideAppendix G 388Appendix GFirewall CommandsThe following describes the firewall commands. Table 138 Firewall CommandsFUN

P-660H/HW-T Series User’ GuidePreface 38PrefaceCongratulations on your purchase of the P-660H/HW-T series ADSL 2+ gateway. P-660HW comes with a built-

P-660H/HW-T Series User’ Guide389 Appendix Gconfig edit firewall e-mail return-addr <e-mail address>This command sets the source e-mail address

P-660H/HW-T Series User’ GuideAppendix G 390config edit firewall attack minute-low <0-255>This command sets the threshold of half-open sessions

P-660H/HW-T Series User’ Guide391 Appendix GConfig edit firewall set <set #> log <yes | no>This command sets whether or not the Prestige c

P-660H/HW-T Series User’ GuideAppendix G 392config edit firewall set <set #> rule <rule #> destaddr-range <start ip address> <end

P-660H/HW-T Series User’ Guide393 Appendix G

P-660H/HW-T Series User’ GuideAppendix H 394Appendix HNetBIOS Filter CommandsThe following describes the NetBIOS packet filter commands.IntroductionNe

P-660H/HW-T Series User’ Guide395 Appendix HThe filter types and their default settings are as follows.NetBIOS Filter ConfigurationSyntax:sys filter n

P-660H/HW-T Series User’ GuideAppendix H 396sys filter netbios config 3 onThis command blocks IPSec NetBIOS packets.sys filter netbios config 4 offThi

P-660H/HW-T Series User’ Guide397 Appendix H

P-660H/HW-T Series User’ GuideAppendix I 398Appendix ISplitters and MicrofiltersThis appendix tells you how to install a POTS splitter or a telephone

P-660H/HW-T Series User’ Guide3 Federal Communications Commission (FCC) Interference StatementFederal CommunicationsCommission (FCC) InterferenceState

P-660H/HW-T Series User’ Guide39 PrefaceEmbedded web help for descriptions of individual screens and supplementary information.• ZyXEL Glossary and We

P-660H/HW-T Series User’ Guide399 Appendix I1 Connect a phone cable from the wall jack to the single jack end of the Y- Connector.2 Connect a cable fr

P-660H/HW-T Series User’ GuideAppendix I 400

P-660H/HW-T Series User’ Guide401 Appendix I

P-660H/HW-T Series User’ GuideAppendix J 402Appendix JPPPoEPPPoE in ActionAn ADSL modem bridges a PPP session over Ethernet (PPP over Ethernet, RFC 25

P-660H/HW-T Series User’ Guide403 Appendix JFigure 263 Single-Computer per Router Hardware ConfigurationHow PPPoE WorksThe PPPoE driver makes the Et

P-660H/HW-T Series User’ GuideAppendix K 404Appendix KWireless LANsWireless LAN TopologiesThis section discusses ad-hoc and infrastructure wireless LA

P-660H/HW-T Series User’ Guide405 Appendix KFigure 266 Basic Service SetESSAn Extended Service Set (ESS) consists of a series of overlapping BSSs, e

P-660H/HW-T Series User’ GuideAppendix K 406Figure 267 Infrastructure WLANChannelA channel is the radio frequency(ies) used by IEEE 802.11a/b/g wire

P-660H/HW-T Series User’ Guide407 Appendix KFigure 268 RTS/CTSWhen station A sends data to the AP, it might not know that the station B is already

P-660H/HW-T Series User’ GuideAppendix K 408A large Fragmentation Threshold is recommended for networks not prone to interference while you should set

P-660H/HW-T Series User’ GuideIntroduction to DSL 40Introduction to DSLDSL (Digital Subscriber Line) technology enhances the data capacity of the exis

P-660H/HW-T Series User’ Guide409 Appendix KIEEE 802.1xIn June 2001, the IEEE 802.1x standard was designed to extend the features of IEEE 802.11 to su

P-660H/HW-T Series User’ GuideAppendix K 410• Access-ChallengeSent by a RADIUS server requesting more information in order to allow access. The access

P-660H/HW-T Series User’ Guide411 Appendix KEAP-TLS (Transport Layer Security)With EAP-TLS, digital certifications are needed by both the server and t

P-660H/HW-T Series User’ GuideAppendix K 412For added security, certificate-based authentications (EAP-TLS, EAP-TTLS and PEAP) use dynamic keys for da

P-660H/HW-T Series User’ Guide413 Appendix KThe Message Integrity Check (MIC) is designed to prevent an attacker from capturing data packets, altering

P-660H/HW-T Series User’ GuideAppendix L 414Appendix LLog DescriptionsThis appendix provides descriptions of example log messages. Table 143 System

P-660H/HW-T Series User’ Guide415 Appendix L Configuration Change: PC = 0x%x, Task ID = 0x%xThe router is saving configuration changes.Successful SSH

P-660H/HW-T Series User’ GuideAppendix L 416 Table 146 TCP Reset LogsLOG MESSAGE DESCRIPTIONUnder SYN flood attack, sent TCP RSTThe router sent a T

P-660H/HW-T Series User’ Guide417 Appendix L Table 148 ICMP LogsLOG MESSAGE DESCRIPTIONFirewall default policy: ICMP <Packet Direction>, <

P-660H/HW-T Series User’ GuideAppendix L 418 ppp:LCP Closing The PPP connection’s Link Control Protocol stage is closing.ppp:IPCP Closing The PPP con

P-660H/HW-T Series User’ Guide41 Introduction to DSL

P-660H/HW-T Series User’ Guide419 Appendix L Connecting to content filter server failThe connection to the external content filtering server failed.Li

P-660H/HW-T Series User’ GuideAppendix L 420 Table 154 IPSec LogsLOG MESSAGE DESCRIPTIONDiscard REPLAY packet The router received and discarded a p

P-660H/HW-T Series User’ Guide421 Appendix LCannot resolve Secure Gateway Addr for rule <%d>The router couldn’t resolve the IP address from the

P-660H/HW-T Series User’ GuideAppendix L 422XAUTH fail! Username: <Username>The router was not able to use extended authentication to authentica

P-660H/HW-T Series User’ Guide423 Appendix L Rule [%d] phase 2 mismatch The listed rule’s IKE phase 2 did not match between the router and the peer.Ru

P-660H/HW-T Series User’ GuideAppendix L 424 Rcvd data <size> too large! Max size allowed: <max size>The router received directory data th

P-660H/HW-T Series User’ Guide425 Appendix L 26 Database method failed.27 Path was not verified.28 Maximum path length reached.Table 158 802.1X Logs

P-660H/HW-T Series User’ GuideAppendix L 426 Table 159 ACL Setting NotesPACKET DIRECTION DIRECTION DESCRIPTION(L to W) LAN to WAN ACL set for packet

P-660H/HW-T Series User’ Guide427 Appendix L The following table shows RFC-2408 ISAKMP payload types that the log displays. Please refer to the RFC fo

P-660H/HW-T Series User’ GuideAppendix L 428Log CommandsGo to the command interpreter interface. Configuring What You Want the Prestige to Log1 Use th

P-660H/HW-T Series User’ GuideChapter 1 Getting To Know Your Prestige 42CHAPTER 1Getting To Know Your PrestigeThis chapter describes the key features

P-660H/HW-T Series User’ Guide429 Appendix LUse 0 to not record logs for that category, 1 to record only logs for that category, 2 to record only aler

P-660H/HW-T Series User’ GuideAppendix M 430APPENDIX MInternal SPTGENInternal SPTGEN OverviewInternal SPTGEN (System Parameter Table Generator) is a c

P-660H/HW-T Series User’ Guide431 Appendix MSome parameters are dependent on others. For example, if you disable the Configured field in menu 1 (see F

P-660H/HW-T Series User’ GuideAppendix M 432Figure 274 Internal SPTGEN FTP Download ExampleNote: You can rename your “rom-t” file when you save it

P-660H/HW-T Series User’ Guide433 Appendix MThe following are Internal SPTGEN screens associated with the SMT screens of your Prestige.PVA Parameter V

P-660H/HW-T Series User’ GuideAppendix M 434FIN FN PVA INPUT30200001 = DHCP <0(None) | 1(Server) | 2(Relay)>= 030200002 = Client IP Pool Starti

P-660H/HW-T Series User’ Guide435 Appendix M30201008 = IP Alias #1 Incoming protocol filters Set 3 = 25630201009 = IP Alias #1 Incoming protocol filte

P-660H/HW-T Series User’ GuideAppendix M 43630500004 = RTS Threshold <0 ~ 2432> = 243230500005 = FRAG. Threshold <256 ~ 2432> = 2432305

P-660H/HW-T Series User’ Guide437 Appendix M40000002 = Active <0(No) | 1(Yes)> = 140000003 = ISP's Name = ChangeMe40000004 = Encapsulatio

P-660H/HW-T Series User’ GuideAppendix M 43840000032= RIP Version <0(Rip-1) | 1(Rip-2B) |2(Rip-2M)> = 040000033= Nailed-up Connection <0(No

P-660H/HW-T Series User’ Guide43 Chapter 1 Getting To Know Your PrestigeNote: See the product specifications in the appendix for detailed features and

P-660H/HW-T Series User’ Guide439 Appendix M/ Menu 12.1.4 IP Static Route Setup (SMT Menu 12.1.4)FIN FN PVA INPUT120104001 = IP Static Route set #4, N

P-660H/HW-T Series User’ GuideAppendix M 440120107006 = IP Static Route set #7, Metric = 0120107007 = IP Static Route set #7, Private <0(No) |1(Ye

P-660H/HW-T Series User’ Guide441 Appendix M120111004 = IP Static Route set #11, Destination IP subnetmask = 0120111005 = IP Static Route set #11, Gat

P-660H/HW-T Series User’ GuideAppendix M 442120115002 = IP Static Route set #15, Active <0(No) |1(Yes)> = 0120115003 = IP Static Route set #15

P-660H/HW-T Series User’ Guide443 Appendix M150000014 = SUA Server #4 Port Start = 0150000015 = SUA Server #4 Port End = 0150000016 = SUA Server #4

P-660H/HW-T Series User’ GuideAppendix M 444150000048 = SUA Server #11 Protocol <0(All)|6(TCP)|17(UDP)> = 0150000049 = SUA Server #11 Port Start

P-660H/HW-T Series User’ Guide445 Appendix M/ Menu 21.1.1.2 set #1, rule #2 (SMT Menu 21.1.1.2)FIN FN PVA INPUT210102001 = IP Filter Set 1,Rule 2 Type

P-660H/HW-T Series User’ GuideAppendix M 446210103013 = IP Filter Set 1,Rule 3 Act Match <1(check next)|2(forward)|3(drop) = 3210103014 = IP Filter

P-660H/HW-T Series User’ Guide447 Appendix M210105009 = IP Filter Set 1,Rule 5 Src Subnet Mask = 0210105010 = IP Filter Set 1,Rule 5 Src Port = 0210

P-660H/HW-T Series User’ GuideAppendix M 448/ Menu 21.1.2.1 Filter set #2, rule #1 (SMT Menu 21.1.2.1)FIN FN PVA INPUT210201001 = IP Filter Set 2, Rul

P-660H/HW-T Series User’ GuideChapter 1 Getting To Know Your Prestige 44Universal Plug and Play (UPnP)Using the standard TCP/IP protocol, the Prestige

P-660H/HW-T Series User’ Guide449 Appendix M210202009 = IP Filter Set 2, Rule 2 Src Subnet Mask = 0210202010 = IP Filter Set 2,Rule 2 Src Port = 0210

P-660H/HW-T Series User’ GuideAppendix M 450210204002 = IP Filter Set 2, Rule 4 Active <0(No)|1(Yes)> = 1210204003 = IP Filter Set 2, Rule 4 Pro

P-660H/HW-T Series User’ Guide451 Appendix M210205011 = IP Filter Set 2, Rule 5 Src Port Comp<0(none)|1(equal)|2(not equal)|3(less)|4(greater)>

P-660H/HW-T Series User’ GuideAppendix M 452Table 171 Menu 23 System Menus (SMT Menu 23)*/ Menu 23.1 System Password Setup (SMT Menu 23.1)FIN FN PVA

P-660H/HW-T Series User’ Guide453 Appendix MCommand ExamplesThe following are example Internal SPTGEN screens associated with the Prestige’s command i

P-660H/HW-T Series User’ GuideAppendix M 454FIN FN PVA INPUT990000001 = ADSL OPMD <0(etsi)|1(normal)|2(gdmt)|3(multimode)>= 3Table 173 Comman

P-660H/HW-T Series User’ Guide455 Appendix M

P-660H/HW-T Series User’ GuideIndex 456IndexNumerics110V AC 5230V AC 5AAbnormal Working Conditions 6AC 5Access methods 270Accessories 5Acts of God 6Ad

P-660H/HW-T Series User’ Guide457 IndexPrecedence 338Precedence Example 338CBR (Continuous Bit Rate) 97CDR 302CDR (Call Detail Record) 301Certificate

P-660H/HW-T Series User’ GuideIndex 458Dynamic WEP key exchange 82dynamic WEP key exchange 293DYNDNS Wildcard 114EEAP 70EAP Authentication 410EAP auth

P-660H/HW-T Series User’ Guide45 Chapter 1 Getting To Know Your PrestigePacket FiltersThe Prestige's packet filtering functions allows added netw

P-660H/HW-T Series User’ Guide459 IndexGGas Pipes 5Gateway 248Gateway Node 252General Setup 214Generic filter 281Germany, Contact Information 7God, ac

P-660H/HW-T Series User’ GuideIndex 460Key management protocol 293LLabor 6LAN 297LAN Setup 62, 90LAN TCP/IP 64LAN to WAN Rules 134LAND 121, 122Legal R

P-660H/HW-T Series User’ Guide461 IndexOOne-Minute High 150Opening 5Operating Condition 6Operating frequency 227Out-dated Warranty 6Outlet 3PPacketErr

P-660H/HW-T Series User’ GuideIndex 462RADIUS 409Configuring 87Shared Secret Key 410RADIUS Message Types 409RADIUS Messages 409RADIUS server 290RAS 29

P-660H/HW-T Series User’ Guide463 IndexShock, Electric 5SMT Menu Overview 209SMTP 107SMTP Error Messages 179Smurf 122, 123SNMP 107Community 288Configu

P-660H/HW-T Series User’ GuideIndex 464Traffic shaping 93Translation 2Transmission Rates 43TV Technician 3Type of Service 328, 330, 331, 332UUBR (Unsp

P-660H/HW-T Series User’ Guide465 IndexXXMODEM protocol 307ZZero Configuration Internet Access 43Zero configuration Internet access 94ZyNOS 2, 307ZyNO

P-660H/HW-T Series User’ GuideChapter 1 Getting To Know Your Prestige 461.3 Applications for the PrestigeHere are some example uses for which the Pre

P-660H/HW-T Series User’ Guide47 Chapter 1 Getting To Know Your PrestigeFigure 3 P-660H-T FrontPanel LEDs P-660HW-T FrontPanel LEDs The following

P-660H/HW-T Series User’ GuideChapter 2 Introducing the Web Configurator 48CHAPTER 2Introducing the WebConfiguratorThis chapter describes how to acces

P-660H/HW-T Series User’ GuideFederal Communications Commission (FCC) Interference Statement 4This transmitter must not be co-located or operating in

P-660H/HW-T Series User’ Guide49 Chapter 2 Introducing the Web ConfiguratorFigure 4 Password Screen6 It is highly recommended you change the default

P-660H/HW-T Series User’ GuideChapter 2 Introducing the Web Configurator 502.1.3 Navigating the Web ConfiguratorThe following summarizes how to navig

P-660H/HW-T Series User’ Guide51 Chapter 2 Introducing the Web ConfiguratorWireless LAN(P-660HW only)Wireless Use this screen to configure the wireles

P-660H/HW-T Series User’ GuideChapter 2 Introducing the Web Configurator 522.2 Change Login Password It is highly recommended that you periodically c

P-660H/HW-T Series User’ Guide53 Chapter 2 Introducing the Web Configurator Table 4 PasswordLABEL DESCRIPTIONOld Password Type the default password

P-660H/HW-T Series User’ GuideChapter 3 Wizard Setup for Internet Access 54CHAPTER 3Wizard Setup for Internet AccessThis chapter provides information

P-660H/HW-T Series User’ Guide55 Chapter 3 Wizard Setup for Internet Access2 The next wizard screen varies depending on what mode and encapsulation ty

P-660H/HW-T Series User’ GuideChapter 3 Wizard Setup for Internet Access 56Figure 10 Internet Connection with RFC 1483The following table describes

P-660H/HW-T Series User’ Guide57 Chapter 3 Wizard Setup for Internet AccessFigure 11 Internet Connection with ENET ENCAPThe following table describe

P-660H/HW-T Series User’ GuideChapter 3 Wizard Setup for Internet Access 58Figure 12 Internet Connection with PPPoAThe following table describes the

P-660H/HW-T Series User’ Guide5 Safety WarningsSafety WarningsFor your safety, be sure to read and follow all warning notices and instructions.• To re

P-660H/HW-T Series User’ Guide59 Chapter 3 Wizard Setup for Internet Access3 Verify the settings in the screen shown next. To change the LAN informati

P-660H/HW-T Series User’ GuideChapter 3 Wizard Setup for Internet Access 60The following table describes the fields in this screen.4 The Prestige auto

P-660H/HW-T Series User’ Guide61 Chapter 3 Wizard Setup for Internet Access

P-660H/HW-T Series User’ GuideChapter 4 LAN Setup 62CHAPTER 4LAN SetupThis chapter describes how to configure LAN settings.4.1 LAN Overview A Local A

P-660H/HW-T Series User’ Guide63 Chapter 4 LAN Setup4.1.2 DHCP SetupDHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individu

P-660H/HW-T Series User’ GuideChapter 4 LAN Setup 64There are two ways that an ISP disseminates the DNS server addresses. • The ISP tells you the DNS

P-660H/HW-T Series User’ Guide65 Chapter 4 LAN Setup4.2.1.1 Private IP AddressesEvery machine on the Internet must have a unique address. If your net

P-660H/HW-T Series User’ GuideChapter 4 LAN Setup 664.2.3 MulticastTraditionally, IP packets are transmitted in one of either two ways - Unicast (1 s

P-660H/HW-T Series User’ Guide67 Chapter 4 LAN SetupFigure 17 Any IP ExampleThe Any IP feature does not apply to a computer using either a dynamic I

P-660H/HW-T Series User’ GuideChapter 4 LAN Setup 684.3 Configuring LAN Click LAN to open the LAN Setup screen. See Section 4.1 on page 62 for backgr

P-660H/HW-T Series User’ GuideZyXEL Limited Warranty 6ZyXEL Limited WarrantyZyXEL warrants to the original end user (purchaser) that this product is f

P-660H/HW-T Series User’ Guide69 Chapter 4 LAN SetupSize of Client IP PoolThis field specifies the size or count of the IP address pool.Primary DNS Se

P-660H/HW-T Series User’ GuideChapter 5 Wireless LAN 70CHAPTER 5Wireless LANThis chapter discusses how to configure the Wireless LAN screens for P-660

P-660H/HW-T Series User’ Guide71 Chapter 5 Wireless LAN• Use RADIUS authentication if you have a RADIUS server. See the appendices for information on

P-660H/HW-T Series User’ GuideChapter 5 Wireless LAN 72Figure 19 Wireless LANThe following table describes the links in this screen. The following f

P-660H/HW-T Series User’ Guide73 Chapter 5 Wireless LANFigure 20 Wireless Security MethodsNote: You must enable the same wireless security settings

P-660H/HW-T Series User’ GuideChapter 5 Wireless LAN 74Figure 21 Wireless ScreenThe following table describes the labels in this screen.Table 13 W

P-660H/HW-T Series User’ Guide75 Chapter 5 Wireless LANNote: If you are configuring the Prestige from a computer connected to the wireless LAN and you

P-660H/HW-T Series User’ GuideChapter 5 Wireless LAN 76Note: Be careful not to list your computer’s MAC address and set the Action field to Deny Assoc

P-660H/HW-T Series User’ Guide77 Chapter 5 Wireless LAN5.6 Introduction to WPA Wi-Fi Protected Access (WPA) is a subset of the IEEE 802.11i standard

P-660H/HW-T Series User’ GuideChapter 5 Wireless LAN 78Figure 23 WPA - PSK Authentication5.6.2 WPA with RADIUS Application ExampleYou need the IP a

P-660H/HW-T Series User’ Guide7 Customer SupportCustomer SupportPlease have the following information ready when you contact customer support.• Produc

P-660H/HW-T Series User’ Guide79 Chapter 5 Wireless LANFigure 24 WPA with RADIUS Application Example25.6.3 Wireless Client WPA Supplicants A wirele

P-660H/HW-T Series User’ GuideChapter 5 Wireless LAN 805.7.1 No Access Allowed or Authentication Select No Access Allowed or No Authentication Requir

P-660H/HW-T Series User’ Guide81 Chapter 5 Wireless LAN• A computer with an IEEE 802.11 a/b/g wireless LAN adapter and equipped with a web browser (wi

P-660H/HW-T Series User’ GuideChapter 5 Wireless LAN 82Note: Once you enable user authentication, you need to specify an external RADIUS server or cre

P-660H/HW-T Series User’ Guide83 Chapter 5 Wireless LANSee Section 5.6 on page 77 for more information.Figure 28 Wireless LAN: 802.1x/WPA: WPAThe fo

P-660H/HW-T Series User’ GuideChapter 5 Wireless LAN 845.7.4 Authentication Required: WPA-PSKSelect Authentication Required in the Wireless Port Cont

P-660H/HW-T Series User’ Guide85 Chapter 5 Wireless LAN5.8 Configuring Local User Authentication By storing user profiles locally, your Prestige is

P-660H/HW-T Series User’ GuideChapter 5 Wireless LAN 86Figure 30 Local User DatabaseThe following table describes the fields in this screen. Table 1

P-660H/HW-T Series User’ Guide87 Chapter 5 Wireless LAN5.9 Configuring RADIUS To set up your Prestige’s RADIUS server settings, click WIRELESS LAN, R

P-660H/HW-T Series User’ GuideChapter 5 Wireless LAN 88Port Number The default port of the RADIUS server for accounting is 1813. You need not change t

P-660H/HW-T Series User’ GuideCustomer Support [email protected] +48-22-5286603 www.pl.zyxel.com ZyXEL Communicationsul.Emilli Plater 5300-113

P-660H/HW-T Series User’ Guide89 Chapter 5 Wireless LAN

P-660H/HW-T Series User’ GuideChapter 6 WAN Setup 90CHAPTER 6WAN SetupThis chapter describes how to configure WAN settings.6.1 WAN Overview A WAN (Wi

P-660H/HW-T Series User’ Guide91 Chapter 6 WAN Setup6.1.1.4 RFC 1483RFC 1483 describes two methods for Multiprotocol Encapsulation over ATM Adaptatio

P-660H/HW-T Series User’ GuideChapter 6 WAN Setup 926.1.4.2 IP Assignment with RFC 1483 EncapsulationIn this case the IP Address Assignment must be s

P-660H/HW-T Series User’ Guide93 Chapter 6 WAN SetupFor example, if the normal route has a metric of "1" and the traffic-redirect route has

P-660H/HW-T Series User’ GuideChapter 6 WAN Setup 94Peak Cell Rate (PCR) is the maximum rate at which the sender can send cells. This parameter may be

P-660H/HW-T Series User’ Guide95 Chapter 6 WAN Setup6.6 The Main WAN Screen Click WAN in the navigation panel to display the man WA N screen. See S

P-660H/HW-T Series User’ GuideChapter 6 WAN Setup 96Figure 34 WAN Setup (PPPoE)The following table describes the fields in this screen. Table 22

P-660H/HW-T Series User’ Guide97 Chapter 6 WAN SetupEncapsulation Select the method of encapsulation used by your ISP from the drop-down list box. Cho

P-660H/HW-T Series User’ GuideChapter 6 WAN Setup 986.8 Traffic Redirect Traffic redirect forwards traffic to a backup gateway when the Prestige can