P-334U/P-335U User’s Guide Certifications Federal Communications Commission (FCC) Interference Statement This device complies with Part 15 of FCC rules. Operation is subject to the following two conditions: • This device may not cause harmful interference. • This device must accept any interference received, including interference that may cause undesired operations.
P-334U/P-335U User’s Guide Safety Warnings For your safety, be sure to read and follow all warning notices and instructions. • To reduce the risk of fire, use only No. 26 AWG (American Wire Gauge) or larger telecommunication line cord. • Do NOT open the device or unit. Opening or removing covers can expose you to dangerous high voltage points or other risks.
P-334U/P-335U User’s Guide ZyXEL Limited Warranty ZyXEL warrants to the original end user (purchaser) that this product is free from any defects in materials or workmanship for a period of up to two years from the date of purchase. During...
P-334U/P-335U User’s Guide Customer Support Please have the following information ready when you contact customer support. • Product model and serial number. • Warranty Information. • Date that you received your device. • Brief description of the problem and the steps you took to solve it.
Page 8
P-334U/P-335U User’s Guide METHOD SUPPORT E-MAIL TELEPHONE WEB SITE REGULAR MAIL SALES E-MAIL FTP SITE LOCATION info@pl.zyxel.com +48 (22) 333 8250 www.pl.zyxel.com ZyXEL Communications ul. Okrzei 1A POLAND +48 (22) 333 8251 03-715 Warszawa Poland http://zyxel.ru/support +7-095-542-89-29 www.zyxel.ru ZyXEL Russia Ostrovityanova 37a Str.
Page 23
P-334U/P-335U User’s Guide List of Tables Table 1 Front Panel LEDs ....................36 Table 2 Status Screen Icon Key ..................41 Table 3 Web Configurator Status Screen ................42 Table 4 Screens Summary ....................43 Table 5 Summary: DHCP Table ..................46 Table 6 Summary: Packet Statistics ...................
Page 24
P-334U/P-335U User’s Guide Table 37 LAN IP ......................... 111 Table 38 LAN IP Alias ......................112 Table 39 Advanced LAN ..................... 112 Table 40 DHCP Server General ..................115 Table 41 DHCP Server Advanced ..................117 Table 42 Client List ......................118 Table 43 NAT General ......................
Page 25
P-334U/P-335U User’s Guide Table 80 Maintenance Restore Configuration ..............225 Table 81 Config Mode: Advanced Screens ................ 229 Table 82 Troubleshooting Starting Up Your ZyXEL Device ..........231 Table 83 Troubleshooting the LAN ..................231 Table 84 Troubleshooting the WAN ..................232 Table 85 Troubleshooting Accessing the ZyXEL Device ............
P-334U/P-335U User’s Guide Preface Congratulations on your purchase of the P-334U or P-335U 802.11a/g Wireless Router. This manual is designed to guide you through the configuration of your P-334U or P-335U for its various applications. About This User's Guide This User’s Guide is designed to guide you through the configuration of your ZyXEL Device using the web configurator.
Page 28
P-334U/P-335U User’s Guide • The P-334U or P-335U series may be referred to as the “ZyXEL Device” in this User’s Guide. Graphics Icons Key ZyXEL Device Computer Notebook computer Server DSLAM Firewall Modem Switch Router Wireless Signal Preface...
This chapter introduces the main features and applications of the ZyXEL Device. 1.1 ZyXEL Device Overview The P-334U or P-335U is the ideal secure wireless firewall router for all data passing between the Internet and LAN’s. You can configure firewall, Trend Micro Security Services (TMSS) and/or content filtering for secure Internet access.
P-334U/P-335U User’s Guide Auto-crossover 10/100 Mbps Ethernet Interface(s) These interfaces automatically adjust to either a crossover or straight-through Ethernet cable. 4-Port Switch A combination of switch and router makes your ZyXEL Device a cost-effective and viable network solution. You can add up to four computers to the ZyXEL Device without the cost of a hub.
Page 31
P-334U/P-335U User’s Guide Trend Micro Security Services TMSS (Trend Micro Security Services) identifies vulnerabilities and protects computers and networks that have Internet connections. TMSS is enabled by default on the ZyXEL Device but you must register at the TMSS web page. After you register, you can configure TMSS using the ZyXEL Device web configurator.
P-334U/P-335U User’s Guide Dynamic DNS Support With Dynamic DNS (Domain Name System) support, you can have a static hostname alias for a dynamic IP address, allowing the host to be more easily accessible from various locations on the Internet. You must register for this service with a Dynamic DNS service provider.
P-334U/P-335U User’s Guide Logging and Tracing • Built-in message logging and packet tracing. • Unix syslog facility support. • Firewall logs. • Content filtering logs. Upgrade ZyXEL Device Firmware via LAN The firmware of the ZyXEL Device can be upgraded via the LAN (refer to the Maintenance- Tools-Firmware screen).
P-334U/P-335U User’s Guide Wireless LAN MAC Address Filtering Your Prestige can check the MAC addresses of wireless stations against a list of allowed or denied MAC addresses. WEP Encryption WEP (Wired Equivalent Privacy) encrypts data frames before transmitting over the wireless network to help keep network communications private.
P-334U/P-335U User’s Guide 1.3.2 Wireless LAN Application Add a wireless LAN to your existing network without expensive network cables. Wireless stations can move freely anywhere in the coverage area and use resources on the wired network. Figure 2 WLAN Application Example 1.3.3 Print Server Application...
P-334U/P-335U User’s Guide 1.3.4 Front Panel LEDs Figure 4 Front Panel (P-334U) Figure 5 Front Panel (P-335U) The following table describes the LEDs. Table 1 Front Panel LEDs COLOR STATUS DESCRIPTION Green The ZyXEL Device is receiving power and functioning properly.
Page 37
P-334U/P-335U User’s Guide Table 1 Front Panel LEDs (continued) COLOR STATUS DESCRIPTION Green The ZyXEL Device has a successful 10Mb WAN connection. Blinking The ZyXEL Device is sending/receiving data. Amber The ZyXEL Device has a successful 100Mb Ethernet connection. Blinking The ZyXEL Device is sending/receiving data.
Page 38
P-334U/P-335U User’s Guide Chapter 1 Getting to Know Your ZyXEL Device...
P-334U/P-335U User’s Guide H A P T E R Introducing the Web Configurator This chapter describes how to access the ZyXEL Device web configurator and provides an overview of its screens. 2.1 Web Configurator Overview The web configurator is an HTML-based management interface that allows easy ZyXEL Device setup and management via Internet browser.
ZyXEL Device restarts. 2.4 Navigating the Web Configurator We use the P-334U web screens in this guide as an example. Screens vary slightly for different ZyXEL Device models. The following summarizes how to navigate the web configurator from the Status screen.
P-334U/P-335U User’s Guide Figure 7 Web Configurator Status Screen The following table describes the icons shown in the Status screen. Table 2 Status Screen Icon Key ICON DESCRIPTION Select a language from the drop-down list box to have the web configurator display in that language.
P-334U/P-335U User’s Guide The following table describes the labels shown in the Status screen. Table 3 Web Configurator Status Screen LABEL DESCRIPTION Device Information System Name This is the System Name you enter in the Maintenance > System > General screen.
P-334U/P-335U User’s Guide Table 3 Web Configurator Status Screen LABEL DESCRIPTION - TMSS This shows whether TMSS is active or not. - UPnP This shows whether UPnP is active or not. - Configuration Mode This shows whether the advanced screens of each feature are turned on (Advanced) or not (Basic).
Page 44
P-334U/P-335U User’s Guide Table 4 Screens Summary LINK FUNCTION Wireless LAN General Use this screen to configure wireless LAN. OTIST This screen allows you to assign wireless clients the ZyXEL Device’s wireless security settings. MAC Filter Use the MAC filter screen to configure the ZyXEL Device to block access to devices or block the devices from accessing the ZyXEL Device.
P-334U/P-335U User’s Guide Table 4 Screens Summary LINK FUNCTION Bandwidth General Use this screen to enable bandwidth management. MGMT Advanced Use this screen to set the upstrem bandwidth and edit a bandwidth management rule. Monitor Use this screen to view the ZyXEL Device’s bandwidth usage and allotments.
P-334U/P-335U User’s Guide Figure 8 Summary: BW MGMT Monitor 2.4.3 Summary: DHCP Table DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individual clients to obtain TCP/IP configuration at start-up from a server. You can configure the ZyXEL Device as a DHCP server or disable it.
P-334U/P-335U User’s Guide Table 5 Summary: DHCP Table (continued) LABEL DESCRIPTION MAC Address This field shows the MAC address of the computer with the name in the Host Name field. Every Ethernet device has a unique MAC (Media Access Control) address. The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters, for example, 00:A0:C5:00:00:02.
P-334U/P-335U User’s Guide Table 6 Summary: Packet Statistics LABEL DESCRIPTION Rx B/s This displays the reception speed in bytes per second on this port. Up Time This is the total amount of time the line has been up. System Up Time This is the total time the ZyXEL Device has been on.
P-334U/P-335U User’s Guide Figure 11 Summary: Parental Control Statistics The following table describes the labels in this screen. Table 7 Summary: Parental Control Statistics LABEL DESCRIPTION Control Mode This displays the current parental control mode (General Control or Per-User Control).
P-334U/P-335U User’s Guide 2.4.6 Summary: Port Isolation Click the Port Isolation (Details...) hyperlink in the Status screen to view the port isolation status and settings on each port. Figure 12 Summary: Port Isolation The following table describes the labels in this screen.
P-334U/P-335U User’s Guide Figure 13 Summary: Wireless Association List The following table describes the labels in this screen. Table 9 Summary: Wireless Association List LABEL DESCRIPTION This is the index number of an associated wireless station. MAC Address This field displays the MAC address of an associated wireless station.
Page 52
P-334U/P-335U User’s Guide Chapter 2 Introducing the Web Configurator...
P-334U/P-335U User’s Guide H A P T E R Connection Wizard This chapter provides information on the Wizard setup screens in the web configurator. 3.1 Wizard Setup The web configurator’s Wizard setup helps you configure your device to access the Internet.
P-334U/P-335U User’s Guide Figure 15 Select a Language 4 Read the on-screen information and click Next. Figure 16 Welcome to the Connection Wizard 3.2 Connection Wizard: STEP 1: System Information System Information contains administrative and system-related information. 3.2.1 System Name System Name is for identification purposes.
P-334U/P-335U User’s Guide 3.2.2 Domain Name The Domain Name entry is what is propagated to the DHCP clients on the LAN. If you leave this blank, the domain name obtained by DHCP from the ISP is used. While you must enter the host name (System Name) on each individual computer, the domain name can be assigned from the ZyXEL Device via DHCP.
P-334U/P-335U User’s Guide Figure 18 Wizard Step 2: Wireless LAN The following table describes the labels in this screen. Table 11 Wizard Step 2: Wireless LAN LABEL DESCRIPTION Name(SSID) Enter a descriptive name (up to 32 printable 7-bit ASCII characters) for the wireless LAN.
P-334U/P-335U User’s Guide 3.3.1 Basic(WEP) Security Choose Basic(WEP) to setup WEP Encryption parameters. Figure 19 Wizard Step 2: Basic(WEP) Security The following table describes the labels in this screen. Table 12 Wizard Step 2: Basic(WEP) Security LABEL DESCRIPTION Passphrase Type a Passphrase (up to 32 printable characters) and click Generate. The ZyXEL Device automatically generates a WEP key.
P-334U/P-335U User’s Guide Table 12 Wizard Step 2: Basic(WEP) Security LABEL DESCRIPTION Key 1 to Key 4 The WEP keys are used to encrypt data. Both the ZyXEL Device and the wireless stations must use the same WEP key for data transmission.
P-334U/P-335U User’s Guide 3.3.3 OTIST The following screen allows you to enable ZyXEL Device One-Touch Intelligent Security Technology (OTIST). One-Touch Intelligent Security Technology (OTIST) allows your ZyXEL Device to assign wireless clients the ZyXEL Device’s SSID and static WEP or WPA- PSK encryption settings.
P-334U/P-335U User’s Guide 3.4 Connection Wizard: STEP 3: Internet Configuration The ZyXEL Device offers three Internet connection types. They are Ethernet, PPP over Ethernet or PPTP. The wizard attempts to detect which WAN connection type you are using. If the wizard does not detect a connection type, you must select one from the drop-down list box.
P-334U/P-335U User’s Guide Figure 23 Wizard Step 3: Ethernet Connection 3.4.2 PPPoE Connection Point-to-Point Protocol over Ethernet (PPPoE) functions as a dial-up connection. PPPoE is an IETF (Internet Engineering Task Force) standard specifying how a host personal computer interacts with a broadband modem (for example DSL, cable, wireless, etc.) to achieve access to high-speed data networks.
P-334U/P-335U User’s Guide Figure 24 Wizard Step 3: PPPoE Connection The following table describes the labels in this screen. Table 16 Wizard Step 3: PPPoE Connection LABEL DESCRIPTION ISP Parameter for Internet Access Connection Type Select the PPP over Ethernet option for a dial-up connection.
P-334U/P-335U User’s Guide Figure 25 Wizard Step 3: PPTP Connection The following table describes the fields in this screen Table 17 Wizard Step 3: PPTP Connection LABEL DESCRIPTION ISP Parameters for Internet Access Connection Type Select PPTP from the drop-down list box. To configure a PPTP client, you must configure the User Name and Password fields for a PPP connection and the PPTP parameters for a PPTP connection.
P-334U/P-335U User’s Guide 3.4.4 Your IP Address The following wizard screen allows you to assign a fixed IP address or give the ZyXEL Device an automatically assigned IP address depending on your ISP. Figure 26 Wizard Step 3: Your IP Address...
P-334U/P-335U User’s Guide You can obtain your IP address from the IANA, from an ISP or have it assigned by a private network. If you belong to a small organization and your Internet access is through an ISP, the ISP can provide you with the Internet addresses for your local networks. On the other hand, if you are part of a much larger organization, you should consult your network administrator for the appropriate IP addresses.
P-334U/P-335U User’s Guide 1 The ISP tells you the DNS server addresses, usually in the form of an information sheet, when you sign up. If your ISP gives you DNS server addresses, enter them in the DNS Server fields in the Wizard and/or WAN > Internet Connection screen.
P-334U/P-335U User’s Guide Table 20 Wizard Step 3: WAN IP and DNS Server Addresses LABEL DESCRIPTION First DNS Server Enter the DNS server's IP address in the fields provided. Second DNS Server If you do not configure a system DNS server, you must use IP addresses when configuring DDNS and the time server.
P-334U/P-335U User’s Guide The following table describes the fields in this screen. Table 22 Wizard Step 3: WAN MAC Address LABEL DESCRIPTION Factory Default Select Factory Default to use the factory assigned default MAC address. Clone the Select this option and enter the IP address of the computer on the LAN whose computer’s MAC...
P-334U/P-335U User’s Guide Table 23 Wizard Step 4: Bandwidth Management LABEL DESCRIPTION Next Click Next to continue. Exit Click Exit to close the wizard screen without saving. 3.6 Connection Wizard Complete Click Apply to save your configuration. Figure 30 Connection Wizard Save Follow the on-screen instructions and click Finish to complete the wizard setup.
P-334U/P-335U User’s Guide H A P T E R Wireless LAN This chapter discusses how to configure the wireless network settings in your ZyXEL Device. See the appendices for more detailed information about wireless networks. 4.1 Wireless Network Overview The following figure provides an example of a wireless network.
P-334U/P-335U User’s Guide • Every wireless client in the same wireless network must use security compatible with the Security stops unauthorized devices from using the wireless network. It can also protect the information that is sent in the wireless network.
P-334U/P-335U User’s Guide For wireless networks, there are two typical places to store the user names and passwords for each user. • In the AP: this feature is called a local user database or a local database. • In a RADIUS server: this is a server used in businesses more than in homes.
P-334U/P-335U User’s Guide Note: It is recommended that wireless networks use WPA-PSK, WPA, or stronger encryption. IEEE 802.1x and WEP encryption are better than none at all, but it is still possible for unauthorized devices to figure out the original information pretty quickly.
P-334U/P-335U User’s Guide Figure 33 Wireless General The following table describes the general wireless LAN labels in this screen. Table 25 Wireless General LABEL DESCRIPTION Enable Click the check box to activate wireless LAN. Wireless LAN Name(SSID) (Service Set IDentity) The SSID identifies the Service Set with which a wireless station is associated.
P-334U/P-335U User’s Guide Note: If you do not enable any wireless security on your ZyXEL Device, your network is accessible to any wireless networking device that is within range. Figure 34 Wireless: No Security The following table describes the labels in this screen.
P-334U/P-335U User’s Guide Figure 35 Wireless: Static WEP Encryption The following table describes the wireless LAN security labels in this screen. Table 27 Wireless: Static WEP Encryption LABEL DESCRIPTION Passphrase Enter a passphrase (password phrase) of up to 32 printable characters and click Generate.
P-334U/P-335U User’s Guide Table 27 Wireless: Static WEP Encryption LABEL DESCRIPTION Key 1 to Key 4 The WEP keys are used to encrypt data. Both the ZyXEL Device and the wireless stations must use the same WEP key for data transmission.
P-334U/P-335U User’s Guide The following table describes the labels in this screen. Table 28 Wireless: WPA-PSK/WPA2-PSK LABEL DESCRIPTION WPA Compatible This check box is available only when you select WPA2-PSK or WPA2 in the Security Mode field. Select the check box to have both WPA2 and WPA wireless clients be able to communicate with the ZyXEL Device even when the ZyXEL Device is using WPA2- PSK or WPA2.
P-334U/P-335U User’s Guide Figure 37 Wireless: WPA/WPA2 The following table describes the labels in this screen. Table 29 Wireless: WPA/WPA2 LABEL DESCRIPTION WPA Compatible This check box is available only when you select WPA2-PSK or WPA2 in the Security Mode field.
P-334U/P-335U User’s Guide Table 29 Wireless: WPA/WPA2 LABEL DESCRIPTION Group Key Update The Group Key Update Timer is the rate at which the AP (if using WPA-PSK/ Timer WPA2-PSK key management) or RADIUS server (if using WPA/WPA2 key management) sends a new group key out to all clients. The re-keying process is the WPA/WPA2 equivalent of automatically changing the WEP key for an AP and all stations in a WLAN on a periodic basis.
P-334U/P-335U User’s Guide 4.4.1 Enabling OTIST You must enable OTIST on both the AP and wireless client before you start transferring settings. Note: The AP and wireless client(s) MUST use the same Setup key. 4.4.1.1 AP You can enable OTIST using the OTIST button or the web configurator.
P-334U/P-335U User’s Guide The following table describes the labels in this screen. Table 30 OTIST LABEL DESCRIPTION Setup Key Type an OTIST Setup Key of exactly eight ASCII characters in length. The default OTIST setup key is "01234567". Note: If you change the OTIST setup key here, you must also make the same change on the wireless client(s).
P-334U/P-335U User’s Guide 4.4.2 Starting OTIST Note: You must press the OTIST button or click Start in the AP OTIST web configurator screen and in the wireless client(s) Adapter screen all within three minutes (at the time of writing). You can start OTIST in the wireless clients and AP in any order but they must all be within range and have OTIST enabled.
P-334U/P-335U User’s Guide Figure 44 Start OTIST? 2 If an OTIST-enabled wireless client loses its wireless connection for more than ten seconds, it will search for an OTIST-enabled AP for up to one minute. (If you manually have the wireless client search for an OTIST-enabled AP, there is no timeout; click Cancel in the OTIST progress screen to stop the search.)
P-334U/P-335U User’s Guide Figure 45 MAC Address Filter The following table describes the labels in this menu. Table 31 MAC Address Filter LABEL DESCRIPTION Active Select Yes from the drop down list box to enable MAC address filtering. Filter Action Define the filter action for the list of MAC addresses in the MAC Address table.
P-334U/P-335U User’s Guide 4.6 Wireless LAN Advanced Screen Click Network > Wireless LAN > Advanced. The screen appears as shown. Figure 46 Advanced The following table describes the labels in this screen. Table 32 Advanced LABEL DESCRIPTION Wireless Advanced Setup RTS/CTS Enter a value between 0 and 2432.
Page 88
P-334U/P-335U User’s Guide Table 32 Advanced LABEL DESCRIPTION Apply Click Apply to save your changes back to the ZyXEL Device. Reset Click Reset to reload the previous configuration for this screen. Chapter 4 Wireless LAN...
An access point (AP) or wireless router is referred to as “AP” and a computer with a wireless network card or USB/PCI adapter is referred to as “wireless client” here. We use the P-334U web screens and M-302 utility screens as an example. The screens may vary slightly for different models.
P-334U/P-335U User’s Guide Figure 47 AP: Wireless LAN > General 3 Make sure the Enable Wireless LAN check box is selected. 4 Enter SSID_Example3 as the SSID, select a channel or select Auto Channel Selection to have the AP choose a channel which is not used by another AP and display the channel number in the field below after you click Apply.
P-334U/P-335U User’s Guide Figure 48 AP: Status 7 Click the WLAN Station Status hyperlink in the AP’s Status screen. You can see if any wireless client has connected to the AP. Figure 49 AP: Status: WLAN Station Status 5.3 Configuring the Wireless Client This section describes how to connect the wireless client to a network.
P-334U/P-335U User’s Guide 5.3.1 Connecting to a Wireless LAN The following sections show you how to join a wireless network using the ZyXEL utility, as in the following diagram. The wireless client is labeled C and the access point is labeled AP.
P-334U/P-335U User’s Guide 3 When you try to connect to an AP with security configured, a window will pop up prompting you to specify the security settings. Enter the pre-shared key and leave the encryption type at the default setting.
P-334U/P-335U User’s Guide Figure 52 ZyXEL Utility: Link Info 6 Open your Internet browser and enter http://www.zyxel.com or the URL of any other web site in the address bar. If you are able to access the web site, your wireless connection is successfully configured.
P-334U/P-335U User’s Guide you want to search again. You can also configure your profile for a wireless network that is not in the list. Figure 54 ZyXEL Utility: Add New Profile 3 Give the profile a descriptive name (of up to 32 printable ASCII characters). Select Infrastructure and either manually enter or select the AP's SSID in the Scan Info table and click Select.
P-334U/P-335U User’s Guide 6 In the next screen, leave both boxes checked. Figure 57 Profile: Wireless Protocol Settings. 7 Verify the profile settings in the read-only screen. Click Save to save and go to the next screen. Figure 58 Profile: Confirm Save 8 Click Activate Now to use the new profile immediately.
Page 97
P-334U/P-335U User’s Guide 10Open your Internet browser, enter http://www.zyxel.com or the URL of any other web site in the address bar and press ENTER. If you are able to access the web site, your new profile is successfully configured. 11If you cannot access the Internet go back to the Profile screen, select the profile you are using and click Edit.
P-334U/P-335U User’s Guide H A P T E R This chapter describes how to configure WAN settings. 6.1 WAN Overview See the chapter about the connection wizard for more information on the fields in the WAN screens. 6.2 WAN MAC Address The MAC address screen allows users to configure the WAN port's MAC address by either using the factory default or cloning the MAC address from a computer on your LAN.
P-334U/P-335U User’s Guide Figure 60 Ethernet Encapsulation The following table describes the labels in this screen. Table 33 Ethernet Encapsulation LABEL DESCRIPTION Encapsulation You must choose the Ethernet option when the WAN port is used as a regular Ethernet. Service Type...
P-334U/P-335U User’s Guide Table 33 Ethernet Encapsulation LABEL DESCRIPTION Get automatically Select this option If your ISP did not assign you a fixed IP address. This is the from ISP default selection. Use Fixed IP Select this option If the ISP assigned a fixed IP address.
P-334U/P-335U User’s Guide Operationally, PPPoE saves significant effort for both you and the ISP or carrier, as it requires no specific configuration of the broadband modem at the customer site. By implementing PPPoE directly on the ZyXEL Device (rather than individual computers), the computers on the LAN do not need PPPoE software installed, since the ZyXEL Device does that part of the task.
P-334U/P-335U User’s Guide The following table describes the labels in this screen. Table 34 PPPoE Encapsulation LABEL DESCRIPTION ISP Parameters for Internet Access Encapsulation The PPP over Ethernet choice is for a dial-up connection using PPPoE. The ZyXEL Device supports PPPoE (Point-to-Point Protocol over Ethernet). PPPoE is an IETF Draft standard (RFC 2516) specifying how a personal computer (PC) interacts with a broadband modem (i.e.
P-334U/P-335U User’s Guide Table 34 PPPoE Encapsulation LABEL DESCRIPTION First DNS Server Select From ISP if your ISP dynamically assigns DNS server information (and the ZyXEL Device's WAN IP address). The field to the right displays the (read-only) Second DNS DNS server IP address that the ISP assigns.
P-334U/P-335U User’s Guide Figure 62 PPTP Encapsulation The following table describes the labels in this screen. Table 35 PPTP Encapsulation LABEL DESCRIPTION ISP Parameters for Internet Access Encapsulation Point-to-Point Tunneling Protocol (PPTP) is a network protocol that enables secure transfer of data from a remote client to a private server, creating a Virtual Private Network (VPN) using TCP/IP-based networks.
Page 106
P-334U/P-335U User’s Guide Table 35 PPTP Encapsulation LABEL DESCRIPTION Password Type the password associated with the User Name above. Retype to Confirm Type your password again to make sure that you have entered is correctly. Nailed-up Connection Select Nailed-Up Connection if you do not want the connection to time out.
P-334U/P-335U User’s Guide Table 35 PPTP Encapsulation LABEL DESCRIPTION First DNS Server Select From ISP if your ISP dynamically assigns DNS server information (and the ZyXEL Device's WAN IP address). The field to the right displays the (read- Second DNS Server only) DNS server IP address that the ISP assigns.
P-334U/P-335U User’s Guide The following table describes the labels in this screen. Table 36 Advanced LABEL DESCRIPTION Multicast Setup Multicast Select IGMP V-1 or IGMP V-2 or None. IGMP (Internet Group Multicast Protocol) is a network-layer protocol used to establish membership in a Multicast group - it is not used to carry user data.
P-334U/P-335U User’s Guide H A P T E R This chapter describes how to configure LAN settings. 7.1 LAN Overview Local Area Network (LAN) is a shared communication system to which many computers are attached. The LAN screens can help you configure a LAN DHCP server, manage IP addresses, and partition your physical network into logical networks.
P-334U/P-335U User’s Guide 7.2.2 IP Address and Subnet Mask Refer to the IP Address and Subnet Mask section in the Connection Wizard chapter for this information. 7.2.3 Multicast Traditionally, IP packets are transmitted in one of either two ways - Unicast (1 sender - 1 recipient) or Broadcast (1 sender - everybody on the network).
P-334U/P-335U User’s Guide The following table describes the labels in this screen. Table 37 LAN IP LABEL DESCRIPTION LAN TCP/IP IP Address Type the IP address of your ZyXEL Device in dotted decimal notation 192.168.1.1 (factory default). IP Subnet Mask The subnet mask specifies the network number portion of an IP address.
P-334U/P-335U User’s Guide The following table describes the labels in this screen. Table 38 LAN IP Alias LABEL DESCRIPTION IP Alias 1,2 Select the check box to configure another LAN network for the ZyXEL Device. IP Address Enter the IP address of your ZyXEL Device in dotted decimal notation.
Page 113
P-334U/P-335U User’s Guide Table 39 Advanced LAN LABEL DESCRIPTION Allow between LAN Select this check box to forward NetBIOS packets from the LAN to the WAN and WAN and from the WAN to the LAN. If your firewall is enabled with the default policy set to block WAN to LAN traffic, you also need to enable the default WAN to LAN firewall rule that forwards NetBIOS traffic.
P-334U/P-335U User’s Guide H A P T E R DHCP Server 8.1 DHCP DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individual clients to obtain TCP/IP configuration at start-up from a server. You can configure the ZyXEL Device as a DHCP server or disable it.
P-334U/P-335U User’s Guide Table 40 DHCP Server General LABEL DESCRIPTION Apply Click Apply to save your changes back to the ZyXEL Device. Reset Click Reset to begin configuring this screen afresh. 8.3 DHCP Server Advanced Screen This screen allows you to assign IP addresses on the LAN to specific individual computers based on their MAC addresses.
P-334U/P-335U User’s Guide The following table describes the labels in this screen. Table 41 DHCP Server Advanced LABEL DESCRIPTION This is the index number of the static IP table entry (row). MAC Address Type the MAC address (with colons) of a computer on your LAN.
P-334U/P-335U User’s Guide Figure 69 Client List The following table describes the labels in this screen. Table 42 Client List LABEL DESCRIPTION This is the index number of the host computer. IP Address This field displays the IP address relative to the # field listed above.
P-334U/P-335U User’s Guide H A P T E R Network Address Translation (NAT) This chapter discusses how to configure NAT on the ZyXEL Device. 9.1 NAT Overview NAT (Network Address Translation - NAT, RFC 1631) is the translation of the IP address of a host in a packet.
P-334U/P-335U User’s Guide 9.2.2 Configuring Servers Behind Port Forwarding (Example) Let's say you want to assign ports 21-25 to one FTP, Telnet and SMTP server (A in the example), port 80 to another (B in the example) and assign a default server IP address of 192.168.1.35 to a third (C in the example).
P-334U/P-335U User’s Guide The following table describes the labels in this screen. Table 43 NAT General LABEL DESCRIPTION Network Address Network Address Translation (NAT) allows the translation of an Internet protocol Translation address used within one network (for example a private IP address used in a local network) to a different IP address known within another network (for example a public IP address used on the Internet).
P-334U/P-335U User’s Guide Figure 72 NAT Application The following table describes the labels in this screen. Table 44 NAT Application LABEL DESCRIPTION Game List Update A game list includes the pre-defined service name(s) and port number(s). You can edit and upload it to the ZyXEL Device to replace the existing entries in the second field next to Service Name.
P-334U/P-335U User’s Guide Table 44 NAT Application (continued) LABEL DESCRIPTION Service Name Type a name (of up to 31 printable characters) to identify this rule in the first field next to Service Name. Otherwise, select a predefined service in the second field next to Service Name.
P-334U/P-335U User’s Guide Figure 73 Game List Example version=1 1;name=Battlefield 1942;port=14567,22000,23000-23009,27900,28900 2;name=Call of Duty;port=28960 3;name=Civilization IV;port=2056 4;name=Diablo I and II;port=6112-6119,4000 5;name=Doom 3;port=27666 6;name=F.E.A.R;port=27888 7;name=Final Fantasy XI;port=25,80,110,443,50000-65535 8;name=Guild Wars;port=6112,80 9;name=Half Life;port=6003,7002,27005,27010,27011,27015 10;name=Jedi Knight III: Jedi Academy;port=28060-28062,28070-28081 11;name=Need for Speed: Hot Pursuit 2;port=1230,8511- 8512,27900,28900,61200-61230 12;name=Neverwinter Nights;port=5120-5300,6500,27900,28900...
P-334U/P-335U User’s Guide 9.5.1 Trigger Port Forwarding Example The following is an example of trigger port forwarding. Figure 74 Trigger Port Forwarding Process: Example 1 Jane requests a file from the Real Audio server (port 7070). 2 Port 7070 is a “trigger” port and causes the ZyXEL Device to record Jane’s computer IP address.
P-334U/P-335U User’s Guide Figure 75 NAT Advanced The following table describes the labels in this screen. Table 45 NAT Advanced LABEL DESCRIPTION Max NAT/Firewall Type a number ranging from 1 to 2048 to limit the number of NAT/firewall sessions Session Per User that a host can create.
Page 127
P-334U/P-335U User’s Guide Table 45 NAT Advanced LABEL DESCRIPTION Incoming Incoming is a port (or a range of ports) that a server on the WAN uses when it sends out a particular service. The ZyXEL Device forwards the traffic with this port (or range of ports) to the client computer on the LAN that requested the service.
P-334U/P-335U User’s Guide H A P T E R Dynamic DNS 10.1 Dynamic DNS Introduction Dynamic DNS allows you to update your current dynamic IP address with one or many dynamic DNS services so that anyone can contact you (in NetMeeting, CU-SeeMe, etc.). You can also access your FTP server or Web site on your own computer using a domain name (for instance myhost.dhs.org, where myhost is a name of your choice) that will never change...
P-334U/P-335U User’s Guide Figure 76 Dynamic DNS The following table describes the labels in this screen. Table 46 Dynamic DNS LABEL DESCRIPTION Enable Dynamic DNS Select this check box to use dynamic DNS. Service Provider Select the name of your Dynamic DNS service provider.
P-334U/P-335U User’s Guide H A P T E R Firewall This chapter gives some background information on firewalls and explains how to get started with the ZyXEL Device firewall. 11.1 Introduction to Firewall 11.1.1 What is a Firewall? Originally, the term firewall referred to a construction technique designed to prevent the spread of fire from one room to another.
P-334U/P-335U User’s Guide The ZyXEL Device is installed between the LAN and a broadband modem connecting to the Internet. This allows it to act as a secure gateway for all data passing between the Internet and the LAN. The ZyXEL Device has one Ethernet WAN port and four Ethernet LAN ports, which are used to physically separate the network into two areas.The WAN (Wide Area Network) port...
P-334U/P-335U User’s Guide The following table describes the labels in this screen. Table 47 Firewall General LABEL DESCRIPTION Enable Firewall Select this check box to activate the firewall. The ZyXEL Device performs access control and protects against Denial of Service (DoS) attacks when the firewall is activated.
P-334U/P-335U User’s Guide Figure 78 Services The following table describes the labels in this screen. Table 48 Firewall Services LABEL DESCRIPTION ICMP Internet Control Message Protocol is a message control and error-reporting protocol between a host server and a gateway to the Internet. ICMP uses Internet Protocol (IP) datagrams, but the messages are processed by the TCP/IP software and directly apparent to the application user.
Page 135
P-334U/P-335U User’s Guide Table 48 Firewall Services LABEL DESCRIPTION Do not respond to Select this option to prevent hackers from finding the ZyXEL Device by probing for requests for unused ports. If you select this option, the ZyXEL Device will not respond to port...
P-334U/P-335U User’s Guide H A P T E R Content Filtering This chapter provides a brief overview of content filtering using the embedded web GUI. 12.1 Introduction to Content Filtering Internet content filtering allows you to create and enforce Internet access policies tailored to their needs.
P-334U/P-335U User’s Guide Figure 80 Content Filter: Filter The following table describes the labels in this screen. Table 49 Content Filter: Filter LABEL DESCRIPTION Trusted Computer To enable this feature, type an IP address of any one of the computers in your IP Address network that you want to have as a trusted computer.
P-334U/P-335U User’s Guide Table 49 Content Filter: Filter LABEL DESCRIPTION Keyword Type a keyword in this field. You may use any character (up to 64 characters). Wildcards are not allowed. You can also enter a numerical IP address. Keyword List This list displays the keywords already added.
P-334U/P-335U User’s Guide The following table describes the labels in this screen. Table 50 Content Filter: Schedule LABEL DESCRIPTION Day to Block Select check boxes for the days that you want the ZyXEL Device to perform content filtering. Select the Everyday check box to have content filtering turned on all days of the week.
P-334U/P-335U User’s Guide 12.6.3 File Name URL Checking Filename URL checking has the ZyXEL Device check all of the characters in the URL. For example, filename URL checking searches for keywords within the URL www.zyxel.com.tw/news/pressroom.php. Use the ip urlfilter customize actionFlags 8 [disable | enable] command to extend (or not extend) the keyword blocking search to include the URL's complete filename.
P-334U/P-335U User’s Guide H A P T E R Trend Micro Home Network Security (TMSS) This chapter provides instructions for installing and configuring Trend Micro Home Network Security, also known as “TMSS”. It includes the following sections: • Installing the Trend Micro Dashboard on page 144 •...
P-334U/P-335U User’s Guide 13.2 Installing the Trend Micro Dashboard Note: The Trend Micro dashboard requires Microsoft Internet Explorer version 5.5 or later. If you are using a non-Microsoft browser or an earlier version of Internet Explorer, please install Internet Explorer 5.5 or later before continuing.
P-334U/P-335U User’s Guide 4 After a few seconds, the Trend Micro dashboard appears (Figure 84). Note: If the dashboard screen does not appear, please refer to Section 13.2.1 on page 145. Figure 84 Trend Micro Dashboard) To start the Trend Micro dashboard in future, click Trend Micro Security Services in the Start menu or the icon in your browser’s toolbar.
P-334U/P-335U User’s Guide 3 Choose the following settings: Table 51 Internet Explorer Default Security Settings SETTING CHOOSE Download signed ActiveX controls Prompt Script ActiveX control marked safe for scripting Enable Run ActiveX controls and plug-ins Enable Java permissions High safety...
P-334U/P-335U User’s Guide 13.3.1 Registering a Trend Micro Customer Account To register a Trend Micro customer account: 1 Start the dashboard by clicking Trend Micro Security Services in the Start menu or the icon in your browser’s toolbar. The dashboard’s home screen appears...
P-334U/P-335U User’s Guide 5 On the account registration screen, type your name, email address, and other required information, and then click Next. The Check Information screen appears. Note: If you already have a Trend Micro customer account, type your user ID and password, click Log in Now, and then click Next.
P-334U/P-335U User’s Guide Figure 88 Download Now Screen 4 Click Start Download & Install. A file download message box opens. 5 Click Run or Open, and then wait while Setup downloads the installation files. If a second message box opens asking “Do you want to run this software?”, click Run. After downloading the files, the Location to Save Files screen appears.
P-334U/P-335U User’s Guide 8 Type your name, Trend Micro Internet Security serial number, and organization (optional). Click Next. The Installation Location screen appears. Note: When you activated your customer account, Trend Micro sent you an email message containing your Trend Micro Internet Security serial number.
P-334U/P-335U User’s Guide Note: Use the same serial number each time you install Trend Micro Internet Security. You can install the program on up to ten computers using this serial number. 13.3.3 Registering Trend Micro Internet Security After installing Internet Security, register your software to get free updates to scanning components during the trial period, and free use of Parental Controls for one year.
P-334U/P-335U User’s Guide The Account Confirmed screen shows your Trend Micro Internet Security serial number and the expiration date of your trial subscription. To purchase an annual subscription now, click Upgrade Now. 13.4 TMSS Settings This section describes the following Trend Micro Home Network Security (TMSS) configuration screens: •...
P-334U/P-335U User’s Guide The following table describes the settings on this screen. Table 52 TMSS General Screen LABEL DESCRIPTION Enable Trend Micro Select this check box to enable Trend Micro Home Network Security on Security Services your ZyXEL Device. Enable Parental Controls Select this check box to enable this feature on your ZyXEL Device.
P-334U/P-335U User’s Guide Figure 92 TMSS: Exception List The following table describes the settings on this screen. Table 53 TMSS: Exception List LABEL DESCRIPTION Exclude computer(s) from displaying Trend Micro Home Network Security Services Computer(s) that will This box lists the ZyXEL Device LAN computers that will automatically display display Trend Micro the Trend Micro dashboard at the interval selected on the General screen.
P-334U/P-335U User’s Guide Table 53 TMSS: Exception List LABEL DESCRIPTION Include specified Select this radio button to enable Parental Controls only on the computers with address ranges in IP addresses listed in the Selected IP Addresses list box. the Parental Control enforcement.
P-334U/P-335U User’s Guide Table 54 TMSS: Virus Protection LABEL DESCRIPTION IP Address This field displays the IP address of a TMSS client computer or the ZyXEL Device. Computer Name This field displays the host name of a TMSS client computer or the ZyXEL Device system name.
P-334U/P-335U User’s Guide 13.4.4.2 Parents Override Password This password allows mature users to view blocked web pages. You can also use it on the Trend Micro dashboard's Parental Controls screen to override Parental Controls for a specified period. In per-user control mode, select Parents as the user name to have full access to restricted web content.
P-334U/P-335U User’s Guide Figure 95 Parental Control Screen: Per-User Control Mode The following table describes the labels on this screen. Table 55 Settings: Parental Control Screen LABEL DESCRIPTION Restrict Web Features Select the check boxes to restrict web features. When you download a page containing a restricted feature, that part of the web page will appear blank or grayed out.
P-334U/P-335U User’s Guide Table 55 Settings: Parental Control Screen LABEL DESCRIPTION Parents Override This password allows users to bypass Parental Control. Enter a password Password between four and 32 printable characters. Spaces are not allowed. Confirmed Password To change the override password, type the new password in the Parents Override Password field, retype it in the Confirmed Password field, and then click Apply.
P-334U/P-335U User’s Guide 3 Click Edit Category. In the Profile list box, choose the pre-defined access profile that will apply to all users. To create a custom profile, choose Custom and then select the check boxes for the categories you want to block. (For additional choices, click more categories).
P-334U/P-335U User’s Guide Figure 97 General Mode: Edit Schedule 13.4.7 Configuring the User List in Per-User Mode The User List in per-user control mode shows each user’s name and access profile. Active users (green light bulb) can access the websites permitted by their access profiles. Inactive users (gray light bulb) cannot log in and cannot access the Internet.
P-334U/P-335U User’s Guide Figure 98 Per-User Control Mode: Edit User List 13.4.8 Content Blocking Categories Trend Micro has defined twelve categories of potentially offensive websites. The following table summarizes the blocking criteria for each category. Table 56 Content Blocking Categories...
P-334U/P-335U User’s Guide Table 56 Content Blocking Categories CATEGORY DESCRIPTION Gambling Sites at which users can place bets or participate in betting pools (including lotteries) online. Also includes sites that provide information, assistance, recommendations, or training on placing bets or participating in games of chance.
P-334U/P-335U User’s Guide Figure 99 Port Isolation Example Click Security > TMSS > Port Isolation to display the screen as shown next. Figure 100 Port Isolation The following table describes the labels on this screen. Table 57 Port Isolation LABEL...
Page 166
P-334U/P-335U User’s Guide Table 57 Port Isolation LABEL DESCRIPTION Bypass Port Isolation Select the check box(es) of the interface(s) that are exempt from port isolation. Apply Click Apply to save the settings. Reset Click Reset to begin configuring this screen afresh.
P-334U/P-335U User’s Guide H A P T E R Static Route Screens This chapter shows you how to configure static routes for your ZyXEL Device. 14.1 Static Route Overview Each remote node specifies only the network to which the gateway is directly connected, and the ZyXEL Device has no knowledge of the networks beyond.
P-334U/P-335U User’s Guide 14.2 IP Static Route Screen Click Management > Static Route to open the IP Static Route screen. The following screen displays. Figure 102 IP Static Route The following table describes the labels in this screen. Table 58 IP Static Route...
P-334U/P-335U User’s Guide 14.2.1 Static Route Setup Screen To edit a static route, click the edit icon under Modify. The following screen displays. Fill in the required information for each static route. Figure 103 Static Route Setup The following table describes the labels in this screen.
P-334U/P-335U User’s Guide H A P T E R Bandwidth Management This chapter contains information about configuring bandwidth management, editing rules and viewing the ZyXEL Device’s bandwidth management logs. 15.1 Bandwidth Management Overview ZyXEL’s Bandwidth Management allows you to specify bandwidth management rules based on an application and/or subnet.
P-334U/P-335U User’s Guide 15.3 Subnet-based Bandwidth Management You can create bandwidth classes based on subnets. The following figure shows LAN subnets. You could configure one bandwidth class for subnet A and another for subnet B. Figure 104 Subnet-based Bandwidth Management Example 15.4 Application and Subnet-based Bandwidth Management...
P-334U/P-335U User’s Guide 15.5 Bandwidth Management Priorities The following table describes the priorities that you can apply to traffic that the ZyXEL Device forwards out through an interface. Table 61 Bandwidth Management Priorities PRIORITY LEVELS: TRAFFIC WITH A HIGHER PRIORITY GETS THROUGH FASTER WHILE TRAFFIC WITH A LOWER PRIORITY IS DROPPED IF THE NETWORK IS CONGESTED.
P-334U/P-335U User’s Guide Table 62 Media Bandwidth Management Setup: Services (continued) SERVICE DESCRIPTION MSN Webcam MSN messenger allows you to chat online and send instant messages. If you use MSN messenger and also have a webcam, you can send your image/photo in real-...
Page 175
P-334U/P-335U User’s Guide Table 63 Commonly Used Services SERVICE DESCRIPTION IPSEC_TUNNEL(ESP:0) The IPSEC ESP (Encapsulation Security Protocol) tunneling protocol uses this service. IRC(TCP/UDP:6667) This is another popular Internet chat program. MSN Messenger(TCP:1863) Microsoft Networks’ messenger service uses this protocol. MULTICAST(IGMP:0) Internet Group Multicast Protocol is used when sending packets to a specific group of hosts.
P-334U/P-335U User’s Guide Table 63 Commonly Used Services SERVICE DESCRIPTION TELNET(TCP:23) Telnet is the login and terminal emulation protocol common on the Internet and in UNIX environments. It operates over TCP/IP networks. Its primary function is to allow users to log into remote host systems.
P-334U/P-335U User’s Guide 15.8 Bandwidth Management General Configuration Click Management > Bandwidth MGMT to open the bandwidth management General screen. Figure 105 Bandwidth Management: General The following table describes the labels in this screen. Table 65 Bandwidth Management: General LABEL...
P-334U/P-335U User’s Guide The following table describes the labels in this screen. Table 66 Bandwidth Management: Advanced LABEL DESCRIPTION Upstream Enter the amount of bandwidth in kbps (2 to 100,000) that you want to allocate for Bandwidth (kbps) traffic. 20 kbps to 20,000 kbps is recommended.
P-334U/P-335U User’s Guide 15.9.1 Rule Configuration with the Pre-defined Service To edit a bandwidth management rule for the pre-defined service in the ZyXEL Device, click the Edit icon in the Application List table of the Advanced screen. The following screen displays.
P-334U/P-335U User’s Guide 15.9.2 Rule Configuration with the User-defined Service In addition to the pre-defined services, if you want to edit a bandwidth management rule for other applications and/or subnets, click the Edit icon in the User-defined Service table of the Advanced screen.
P-334U/P-335U User’s Guide 15.10 Bandwidth Management Monitor Click Management > Bandwidth MGMT > Monitor to open the bandwidth management Monitor screen. View the bandwidth usage of the WAN configured bandwidth rules. This is also shown as bandwidth usage over the bandwidth budget for each rule. The gray section of the bar represents the percentage of unused bandwidth and the blue color represents the percentage of bandwidth in use.
P-334U/P-335U User’s Guide H A P T E R Remote Management Screens This chapter provides information on the Remote Management screens. 16.1 Remote Management Overview Remote management allows you to determine which services/protocols can access which ZyXEL Device interface (if any) from which computers.
P-334U/P-335U User’s Guide 3 There is already another remote management session with an equal or higher priority running. You may only have one remote management session running at one time. 4 There is a firewall rule that blocks it. 16.1.2 Remote Management and NAT When NAT is enabled: •...
P-334U/P-335U User’s Guide Table 69 WWW Remote Management LABEL DESCRIPTION Secured Client IP A secured client is a “trusted” computer that is allowed to communicate with the Address ZyXEL Device using this service. Select All to allow any computer to access the ZyXEL Device using this service.
P-334U/P-335U User’s Guide 16.4 Telnet Screen To change your ZyXEL Device’s Telnet settings, click Management > Remote MGMT > Telnet. The following screen displays. Figure 112 Telnet Remote Management The following table describes the labels in this screen. Table 70 Telnet Remote Management...
P-334U/P-335U User’s Guide To change your ZyXEL Device’s FTP settings, click Management > Remote MGMT > FTP. The screen appears as shown. Figure 113 FTP Remote Management The following table describes the labels in this screen. Table 71 FTP Remote Management...
P-334U/P-335U User’s Guide To change your ZyXEL Device’s DNS settings, click Management > Remote MGMT > DNS. The screen appears as shown. Figure 114 DNS Remote Management The following table describes the labels in this screen. Table 72 DNS Remote Management...
P-334U/P-335U User’s Guide H A P T E R UP N P This chapter introduces the Universal Plug and Play feature. 17.1 Universal Plug and Play Overview Universal Plug and Play (UPnP) is a distributed, open networking standard that uses TCP/IP for simple peer-to-peer network connectivity between devices.
P-334U/P-335U User’s Guide All UPnP-enabled devices may communicate freely with each other without additional configuration. Disable UPnP if this is not your intention. 17.2 UPnP and ZyXEL ZyXEL has achieved UPnP certification from the Universal Plug and Play Forum Creates UPnP™...
P-334U/P-335U User’s Guide The following table describes the labels in this screen. Table 73 Configuring UPnP LABEL DESCRIPTION Enable the Universal Select this checkbox to activate UPnP. Be aware that anyone could use a Plug and Play (UPnP) UPnP application to open the web configurator's login screen without entering...
P-334U/P-335U User’s Guide 1 Click Start and Control Panel. Double- click Add/Remove Programs. 2 Click on the Windows Setup tab and select Communication in the Components selection box. Click Details. 3 In the Communications window, select the Universal Plug and Play check box in the Components selection box.
P-334U/P-335U User’s Guide 4 Select Networking Service in the Components selection box and click Details. 5 In the Networking Services window, select the Universal Plug and Play check box. 6 Click OK to go back to the Windows Optional Networking Component Wizard window and click Next.
P-334U/P-335U User’s Guide 3 In the Internet Connection Properties window, click Settings to see the port mappings that were automatically created. 4 You may edit or delete the port mappings or click Add to manually add port mappings. Note: When the UPnP-enabled device is disconnected from your computer, all port mappings will be deleted automatically.
P-334U/P-335U User’s Guide 1 Click Start and then Control Panel. 2 Double-click Network Connections. 3 Select My Network Places under Other Places. 4 An icon with the description for each UPnP-enabled device displays under Local Network. 5 Right-click the icon for your ZyXEL device and select Invoke.
Page 196
P-334U/P-335U User’s Guide 1 Click Start and then Control Panel. 2 Double-click Network Connections. 3 Select My Network Places under Other Places. 4 An icon with the description for each UPnP-enabled device displays under Local Network. 5 Right-click the icon for your ZyXEL device and select Invoke.
P-334U/P-335U User’s Guide H A P T E R Print Server This chapter discusses how to configure the print server on the ZyXEL Device. 18.1 Print Server Overview A print server is a device or software that provides users on a network with shared access to one or more printers.
P-334U/P-335U User’s Guide 18.3 Print Server Screen Click the Print Server link under Management to display the Print Server screen. Figure 116 Configuring Print Server The following table describes the labels in this screen. Table 74 Configuring Print Server LABEL...
P-334U/P-335U User’s Guide H A P T E R Print Server Driver Setup This chapter shows you how to set up a print server driver for a Windows or Macintosh computer. 19.1 Installation Requirements To install the print server driver you will need the following requirements •...
P-334U/P-335U User’s Guide 3 You can either • use the Setup Wizard for Windows NT/2000/XP to install the print monitor and open the setup wizard automatically • use the Setup Wizard for Windows 98/ME/NT/2000/XP to install the print monitor in a specified file location and open the setup wizard (by running the PSWizard.exe file in the...
P-334U/P-335U User’s Guide 1 The Welcome screen displays. Click Next to continue. Figure 119 Network Print Server Setup Wizard: Welcome 2 The Select A Print Server screen displays. The wizard automatically detects whether or not a print server is connected to your computer. Make sure that your ZyXEL Device is correctly connected and a compatible USB printer is connected to the ZyXEL Device.
P-334U/P-335U User’s Guide 3 The Change Settings screen displays. If you want to change your print server’s IP address, select Yes, I want to change settings, leave the Password field blank and click Next. The print server’s IP address is the ZyXEL Device’s IP address. Since the wizard detects your print server’s IP address automatically, it’s recommended that you select...
P-334U/P-335U User’s Guide 4 Select the USB printer that is connected to the ZyXEL Device if you have added it on your computer already and click Next. If your printer is not listed, click Add New Printer and see Section 19.2.2 on page 205 for how to add a printer on your computer.
P-334U/P-335U User’s Guide 5 A Summary screen displays. Check your settings and click Next to continue. Figure 123 Network Print Server Setup Wizard: Summary 6 Click Finish to save and close your Network Print Server Setup Wizard. Your print server driver setup is complete.
P-334U/P-335U User’s Guide 19.2.2 Adding a New Printer 1 Click Add New Printer in the Network Print Server Setup Wizard: Select A Printer screen (see Figure 122 on page 203). A help dialog box pops up to guide you through the adding printer process.
P-334U/P-335U User’s Guide 3 Select Local printer and click Next. Figure 127 Add Printer Wizard: Local or Network Printer 4 Select an LPT (Line Printing Terminal) port (a parallel port) as the computer interface for the USB printer. Figure 128 Add Printer Wizard: Select the Printer Port...
P-334U/P-335U User’s Guide 5 Select the make of the printer that you want to connect to the print server in the Manufacturers list of printers. 6 Select the printer model from the list of Printers. 7 If your printer is not displayed in the list of Printers, you can insert the printer driver installation CD/disk or download the driver file to your computer, click Have Disk…...
P-334U/P-335U User’s Guide 10 Type a name to identify the printer and then click Next to continue. Figure 131 Add Printer Wizard: Name Your Printer 11 The ZyXEL Device is a print server itself and you do not need to have your computer act as a print server by sharing the printer with other users in the same network;...
P-334U/P-335U User’s Guide 12 Select Yes and then click the Next button if you want to print a test page. A pop-up screen displays to ask if the test page printed correctly. Otherwise select No and then click Next to continue.
P-334U/P-335U User’s Guide 2 On your desktop, double-click the Macintosh HD icon to open the Macintosh HD window. Figure 135 Macintosh HD 3 Double-click the Applications folder. Macintosh HD folder Figure 136 4 Double-click the Utilities folder. Figure 137 Applications Folder 5 Double-click the Print Center icon.
P-334U/P-335U User’s Guide 6 Click the Add icon at the top of the screen. Figure 139 Printer List Folder 7 Set up your printer in the Printer List configuration screen. Select IP Printing from the drop-down list box. 8 In the Printer’s Address field, type the IP address of your ZyXEL Device.
P-334U/P-335U User’s Guide 12 Click Add to select a printer model, save and close the Printer List configuration screen. Figure 141 Printer Model 13 The Name LP1 on 192.168.1.1 displays in the Printer List field. The default printer Name displays in bold type.
P-334U/P-335U User’s Guide H A P T E R System This chapter provides information on the System screens. 20.1 System Overview See the chapter about wizard setup for more information on the next few screens. 20.2 System General Screen Click Maintenance > System. The following screen displays.
P-334U/P-335U User’s Guide The following table describes the labels in this screen. Table 75 System General LABEL DESCRIPTION System Name System Name is a unique name to identify the ZyXEL Device in an Ethernet network. It is recommended you enter your computer’s “Computer name” in this field (see the chapter about wizard setup for how to find your computer’s name).
P-334U/P-335U User’s Guide Figure 144 Time Setting The following table describes the labels in this screen. Table 76 Time Setting LABEL DESCRIPTION Current Time and Date Current Time This field displays the time of your ZyXEL Device. Each time you reload this page, the ZyXEL Device synchronizes the time with the time server.
Page 218
P-334U/P-335U User’s Guide Table 76 Time Setting LABEL DESCRIPTION New Date This field displays the last updated date from the time server or the last date configured manually. (yyyy/mm/dd) When you set Time and Date Setup to Manual, enter the new date in this field and then click Apply.
P-334U/P-335U User’s Guide H A P T E R Logs This chapter contains information about configuring general log settings and viewing the ZyXEL Device’s logs. Refer to the appendices for example log message explanations. 21.1 View Log The web configurator allows you to look at all of the ZyXEL Device’s logs in one location.
P-334U/P-335U User’s Guide The following table describes the labels in this screen. Table 77 View Logs LABEL DESCRIPTION Display The categories that you select in the Log Settings page (see Section 21.2 on page 220) display in the drop-down list box.
P-334U/P-335U User’s Guide Figure 146 Log Settings The following table describes the labels in this screen. Table 78 Log Settings LABEL DESCRIPTION E-mail Log Settings Mail Server Enter the server name or the IP address of the mail server for the e-mail addresses specified below.
Page 222
P-334U/P-335U User’s Guide Table 78 Log Settings LABEL DESCRIPTION Send Log To The ZyXEL Device sends logs to the e-mail address specified in this field. If this field is left blank, the ZyXEL Device does not send logs via e-mail.
P-334U/P-335U User’s Guide H A P T E R Tools This chapter shows you how to upload a new firmware, upload or save backup configuration files and restart the ZyXEL Device. 22.1 Firmware Upload Screen Find firmware at www.zyxel.com in a file that (usually) uses the system model name with a "*.bin"...
P-334U/P-335U User’s Guide After you see the Firmware Upload In Process screen, wait two minutes before logging into the ZyXEL Device again. Figure 148 Upload Warning The ZyXEL Device automatically restarts in this time causing a temporary network disconnect. In some operating systems, you may see the following icon on your desktop.
P-334U/P-335U User’s Guide Click Maintenance > Tools > Configuration. Information related to factory defaults, backup configuration, and restoring configuration appears as shown next. Figure 151 Configuration 22.2.1 Backup Configuration Backup configuration allows you to back up (save) the ZyXEL Device’s current configuration to a file on your computer.
P-334U/P-335U User’s Guide Figure 152 Configuration Restore Successful The ZyXEL Device automatically restarts in this time causing a temporary network disconnect. In some operating systems, you may see the following icon on your desktop. Figure 153 Temporarily Disconnected If you uploaded the default configuration file you may need to change the IP address of your computer to be in the same subnet as that of the default ZyXEL Device IP address (192.168.1.1).
P-334U/P-335U User’s Guide 22.3 Restart Screen System restart allows you to reboot the ZyXEL Device without turning the power off. Click Maintenance > Tools > Restart. Click Restart to have the ZyXEL Device reboot. This does not affect the ZyXEL Device's configuration.
P-334U/P-335U User’s Guide H A P T E R Configuration Mode Click Maintenance > Config Mode to open the following screen. This screen allows you to hide or display the advanced screens of some feaures or the advanced features, such as MAC filter or static route.
P-334U/P-335U User’s Guide H A P T E R Troubleshooting This chapter covers potential problems and the corresponding remedies. 24.1 Problems Starting Up the ZyXEL Device Table 82 Troubleshooting Starting Up Your ZyXEL Device PROBLEM CORRECTIVE ACTION None of the Make sure that the ZyXEL Device’s power adaptor is connected to the ZyXEL Device...
P-334U/P-335U User’s Guide 24.3 Problems with the WAN Table 84 Troubleshooting the WAN PROBLEM CORRECTIVE ACTION The WAN LED is Check the connections between the ZyXEL Device WAN port and the cable/DSL off. modem or ethernet jack. Check whether your cable/DSL device requires a crossover or straight-through cable.
P-334U/P-335U User’s Guide 24.4 Problems Accessing the ZyXEL Device Table 85 Troubleshooting Accessing the ZyXEL Device PROBLEM CORRECTIVE ACTION I cannot The username is “admin”. The default password is “1234”. The Password and access the Username fields are case-sensitive. Make sure that you enter the correct password ZyXEL Device.
P-334U/P-335U User’s Guide Table 86 Troubleshooting Restricted Web Pages and Keyword Blocking PROBLEM CORRECTIVE ACTION Parental Restart the device to clear the cache. Control is The content filter server may be unavailable. The View Logs screen can display configured content filtering log messages. See the Log Descriptions appendix for a list of possible correctly, but I log messages.
P-334U/P-335U User’s Guide Problems with the Print Server Table 89 Troubleshooting the Print Server PROBLEM CORRECTIVE ACTION Cannot print Verify that the printer uses USB 1.1 or 1.0 by checking your printer's anything using the specifications. USB printer Make sure the USB printer is powered on and can work properly.
P-334U/P-335U User’s Guide You can also check if pop-up blocking is disabled in the Pop-up Blocker section in the Privacy tab. 1 In Internet Explorer, select Tools, Internet Options, Privacy. 2 Clear the Block pop-ups check box in the Pop-up Blocker section of the screen. This disables any web pop-up blockers you may have enabled.
P-334U/P-335U User’s Guide Figure 159 Internet Options 3 Type the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”. For example, http://192.168.1.1. 4 Click Add to move the IP address to the list of Allowed sites.
P-334U/P-335U User’s Guide Figure 160 Pop-up Blocker Settings 5 Click Close to return to the Privacy screen. 6 Click Apply to save this setting. 24.5.1.2 JavaScripts If pages of the web configurator do not display properly in Internet Explorer, check that JavaScripts are allowed.
P-334U/P-335U User’s Guide Figure 161 Internet Options 2 Click the Custom Level... button. 3 Scroll down to Scripting. 4 Under Active scripting make sure that Enable is selected (the default). 5 Under Scripting of Java applets make sure that Enable is selected (the default).
P-334U/P-335U User’s Guide Figure 162 Security Settings - Java Scripting 24.5.1.3 Java Permissions 1 From Internet Explorer, click Tools, Internet Options and then the Security tab. 2 Click the Custom Level... button. 3 Scroll down to Microsoft VM. 4 Under Java permissions make sure that a safety level is selected.
P-334U/P-335U User’s Guide Figure 163 Security Settings - Java 24.5.1.3.1 JAVA (Sun) 1 From Internet Explorer, click Tools, Internet Options and then the Advanced tab. 2 Make sure that Use Java 2 for <applet> under Java (Sun) is selected. 3 Click OK to close the window.
P-334U/P-335U User’s Guide Figure 164 Java (Sun) 24.5.2 ActiveX Controls in Internet Explorer If ActiveX is disabled, you will not be able to download ActiveX controls or to use Trend Micro Security Serivces. Make sure that ActiveX controls are allowed in Internet Explorer.
P-334U/P-335U User’s Guide Figure 165 Internet Options Security 3 Scroll down to ActiveX controls and plug-ins. 4 Under Download signed ActiveX controls select the Prompt radio button. 5 Under Run ActiveX controls and plug-ins make sure the Enable radio button is selected.
P-334U/P-335U User’s Guide P P E N D I X Print Server Specifications This appendix provides details on the print server interface and system requirements. Table 90 Print Server Interface PRINT SERVER INTERFACE USB 1.1 (full speed) - compliant port, 1.5Mbps (low speed) and 12Mbps (full speed) data transmission rates.
P-334U/P-335U User’s Guide ZyXEL Device Print Server Compatible USB Printers The following is a list of USB printer models compatible with the ZyXEL Device print server. Table 92 Compatible USB Printers BRAND MODEL TYPE REMARK BJ F9000 CANON Inkjet i2355...
Page 247
P-334U/P-335U User’s Guide Table 92 Compatible USB Printers BRAND MODEL TYPE REMARK MP-130 CANON Aculaser C1900 EPSON Color Laser EPL-6100 EPSON Laser Disable bi-directional support on printer. Stylus C20 EPSON Inkjet Disable bi-directional support on printer. Stylus C20SX EPSON Inkjet Disable bi-directional support on printer.
Page 248
P-334U/P-335U User’s Guide Table 92 Compatible USB Printers BRAND MODEL TYPE REMARK DeskJet 5550 Inkjet DeskJet 810C Inkjet DeskJet 845C Inkjet DeskJet 920C Inkjet Deskjet 1180c Inkjet DeskJet 930C Inkjet LaserJet 1200 Laser Disable bi-directional support on printer. LaserJet 1220 Laser Disable bi-directional support on printer.
P-334U/P-335U User’s Guide P P E N D I X Setting up Your Computer’s IP Address All computers must have a 10M or 100M Ethernet adapter card and TCP/IP installed. Windows 95/98/Me/NT/2000/XP, Macintosh OS 7 and later operating systems and all versions of UNIX/LINUX include the software components you need to install and use TCP/ IP on your computer.
P-334U/P-335U User’s Guide Figure 167 WIndows 95/98/Me: Network: Configuration Installing Components The Network window Configuration tab displays a list of installed components. You need a network adapter, the TCP/IP protocol and Client for Microsoft Networks. If you need the adapter: 1 In the Network window, click Add.
P-334U/P-335U User’s Guide 3 Select Microsoft from the list of manufacturers. 4 Select Client for Microsoft Networks from the list of network clients and then click 5 Restart your computer so the changes you made take effect. Configuring 1 In the Network window Configuration tab, select your network adapter's TCP/IP entry and click Properties 2 Click the IP Address tab.
P-334U/P-335U User’s Guide Figure 169 Windows 95/98/Me: TCP/IP Properties: DNS Configuration 4 Click the Gateway tab. • If you do not know your gateway’s IP address, remove previously installed gateways. • If you have a gateway IP address, type it in the New gateway field and click Add.
P-334U/P-335U User’s Guide Figure 170 Windows XP: Start Menu 2 In the Control Panel, double-click Network Connections (Network and Dial-up Connections in Windows 2000/NT). Figure 171 Windows XP: Control Panel 3 Right-click Local Area Connection and then click Properties. Appendix B Setting up Your Computer’s IP Address...
P-334U/P-335U User’s Guide Figure 172 Windows XP: Control Panel: Network Connections: Properties 4 Select Internet Protocol (TCP/IP) (under the General tab in Win XP) and then click Properties. Figure 173 Windows XP: Local Area Connection Properties 5 The Internet Protocol TCP/IP Properties window opens (the General tab in Windows XP).
P-334U/P-335U User’s Guide • If you have a static IP address click Use the following IP Address and fill in the IP address, Subnet mask, and Default gateway fields. • Click Advanced. Figure 174 Windows XP: Internet Protocol (TCP/IP) Properties 6 If you do not know your gateway's IP address, remove any previously installed gateways in the IP Settings tab and click OK.
P-334U/P-335U User’s Guide Figure 175 Windows XP: Advanced TCP/IP Properties 7 In the Internet Protocol TCP/IP Properties window (the General tab in Windows XP): • Click Obtain DNS server address automatically if you do not know your DNS server IP address(es).
P-334U/P-335U User’s Guide Figure 176 Windows XP: Internet Protocol (TCP/IP) Properties 8 Click OK to close the Internet Protocol (TCP/IP) Properties window. 9 Click Close (OK in Windows 2000/NT) to close the Local Area Connection Properties window. 10 Close the Network Connections window (Network and Dial-up Connections in Windows 2000/NT).
P-334U/P-335U User’s Guide Figure 177 Macintosh OS 8/9: Apple Menu 2 Select Ethernet built-in from the Connect via list. Figure 178 Macintosh OS 8/9: TCP/IP 3 For dynamically assigned settings, select Using DHCP Server from the Configure: list. Appendix B Setting up Your Computer’s IP Address...
P-334U/P-335U User’s Guide 4 For statically assigned settings, do the following: • From the Configure box, select Manually. • Type your IP address in the IP Address box. • Type your subnet mask in the Subnet mask box. • Type the IP address of your ZyXEL Device in the Router address box.
P-334U/P-335U User’s Guide Figure 180 Macintosh OS X: Network 4 For statically assigned settings, do the following: • From the Configure box, select Manually. • Type your IP address in the IP Address box. • Type your subnet mask in the Subnet mask box.
P-334U/P-335U User’s Guide Note: Make sure you are logged in as the root administrator. Using the K Desktop Environment (KDE) Follow the steps below to configure your computer IP address using the KDE. 1 Click the Red Hat button (located on the bottom left corner), select System Setting and click Network.
P-334U/P-335U User’s Guide • If you have a dynamic IP address click Automatically obtain IP address settings with and select dhcp from the drop down list. • If you have a static IP address click Statically set IP Addresses and fill in the Address, Subnet mask, and Default Gateway Address fields.
P-334U/P-335U User’s Guide 1 Assuming that you have only one network card on the computer, locate the ifconfig- configuration file (where is the name of the Ethernet card). Open the eth0 eth0 configuration file with any plain text editor. •...
P-334U/P-335U User’s Guide Figure 188 Red Hat 9.0: Restart Ethernet Card [root@localhost init.d]# network restart Shutting down interface eth0: [OK] Shutting down loopback interface: [OK] Setting network parameters: [OK] Bringing up loopback interface: [OK] Bringing up interface eth0: [OK] Verifying Settings Enter in a terminal screen to check your TCP/IP properties.
P-334U/P-335U User’s Guide P P E N D I X IP Subnetting IP Addressing Routers “route” based on the network number. The router that delivers the data packet to the correct destination host uses the host ID. IP Classes An IP address is made up of four octets (eight bits), written in dotted decimal notation, for example, 192.168.1.1.
P-334U/P-335U User’s Guide Since the first octet of a class “A” IP address must contain a “0”, the first octet of a class “A” address can have a value of 0 to 127. Similarly the first octet of a class “B” must begin with “10”, therefore the first octet of a class “B”...
P-334U/P-335U User’s Guide Since the mask is always a continuous number of ones beginning from the left, followed by a continuous number of zeros for the remainder of the 32 bit mask, you can simply specify the number of ones instead of writing the value of each octet. This is usually specified by writing a “/”...
P-334U/P-335U User’s Guide Note: In the following charts, shaded/bolded last octet bit values indicate host ID bits “borrowed” to form network ID bits. The number of “borrowed” host ID bits determines the number of subnets you can have. The remaining number of host ID bits (after “borrowing”) determines the number of hosts you can have...
P-334U/P-335U User’s Guide Example: Four Subnets The above example illustrated using a 25-bit subnet mask to divide a class “C” address space into two subnets. Similarly to divide a class “C” address into four subnets, you need to “borrow” two host ID bits to give four possible combinations of 00, 01, 10 and 11. The subnet mask is 26 bits (11111111.11111111.11111111.11000000) or 255.255.255.192.
P-334U/P-335U User’s Guide Subnetting With Class A and Class B Networks. For class “A” and class “B” addresses the subnet mask also determines which bits are part of the network number and which are part of the host ID. A class “B” address has two host ID octets available for subnetting and a class “A” address has...
Page 274
P-334U/P-335U User’s Guide Appendix C IP Subnetting...
P-334U/P-335U User’s Guide P P E N D I X Wireless LANs Wireless LAN Topologies This section discusses ad-hoc and infrastructure wireless LAN topologies. Ad-hoc Wireless LAN Configuration The simplest WLAN configuration is an independent (Ad-hoc) WLAN that connects a set of computers with wireless adapters (A, B, C).
P-334U/P-335U User’s Guide Figure 191 Basic Service Set An Extended Service Set (ESS) consists of a series of overlapping BSSs, each containing an access point, with each access point connected together by a wired network. This wired connection between APs is called a Distribution System (DS).
P-334U/P-335U User’s Guide Figure 192 Infrastructure WLAN Channel A channel is the radio frequency(ies) used by IEEE 802.11a/b/g wireless devices. Channels available depend on your geographical area. You may have a choice of channels (for your region) so you should use a different channel than an adjacent AP (access point) to reduce interference.
P-334U/P-335U User’s Guide Figure 193 RTS/CTS When station A sends data to the AP, it might not know that the station B is already using the channel. If these two stations send data at the same time, collisions may occur when both sets of data arrive at the AP at the same time, resulting in a loss of messages for both stations.
P-334U/P-335U User’s Guide A large Fragmentation Threshold is recommended for networks not prone to interference while you should set a smaller threshold for busy networks or networks that are prone to interference. If the Fragmentation Threshold value is smaller than the RTS/CTS value (see previously) you set then the RTS (Request To Send)/CTS (Clear to Send) handshake will never occur as data frames will be fragmented before they reach RTS/CTS size.
P-334U/P-335U User’s Guide Wireless Security Overview Wireless security is vital to your network to protect wireless communication between wireless clients, access points and the wired network. Wireless security methods available on the Prestige are data encryption, wireless client authentication, restricting access by device MAC address and hiding the Prestige identity.
P-334U/P-335U User’s Guide • Authentication Determines the identity of the users. • Authorization Determines the network services available to authenticated users once they are connected to the network. • Accounting Keeps track of the client’s network activity. RADIUS is a simple package exchange in which your AP acts as a message relay between the wireless client and the network RADIUS server.
P-334U/P-335U User’s Guide Types of Authentication This section discusses some popular authentication types: EAP-MD5, EAP-TLS, EAP- TTLS, PEAP and LEAP. The type of authentication you use depends on the RADIUS server or the AP. Consult your network administrator for more information.
P-334U/P-335U User’s Guide LEAP LEAP (Lightweight Extensible Authentication Protocol) is a Cisco implementation of IEEE 802.1x. Dynamic WEP Key Exchange The AP maps a unique key that is generated with the RADIUS server. This key expires when the wireless connection times out, disconnects or reauthentication times out. A new WEP key is generated each time reauthentication is performed.
Page 284
P-334U/P-335U User’s Guide If both an AP and the wireless clients support WPA2 and you have an external RADIUS server, use WPA2 for stronger data encryption. If you don't have an external RADIUS server, you should use WPA2-PSK (WPA2-Pre-Shared Key) that only requires a single (identical) password entered into each access point, wireless gateway and wireless client.
P-334U/P-335U User’s Guide User Authentication WPA and WPA2 apply IEEE 802.1x and Extensible Authentication Protocol (EAP) to authenticate wireless clients using an external RADIUS database. WPA2 reduces the number of key exchange messages from six to four (CCMP 4-way handshake) and shortens the time required to connect to a network.
P-334U/P-335U User’s Guide Figure 194 WPA(2) with RADIUS Application Example WPA(2)-PSK Application Example A WPA(2)-PSK application looks as follows. 1 First enter identical passwords into the AP and all wireless clients. The Pre-Shared Key (PSK) must consist of between 8 and 63 ASCII characters or 64 hexadecimal characters (including spaces and symbols).
P-334U/P-335U User’s Guide Security Parameters Summary Refer to this table to see what other security parameters you should configure for each Authentication Method/ key management protocol type. MAC address filters are not dependent on how you configure these security features.
Page 288
P-334U/P-335U User’s Guide Appendix D Wireless LANs...
P-334U/P-335U User’s Guide P P E N D I X Log Descriptions This appendix provides descriptions of example log messages. Table 111 System Maintenance Logs LOG MESSAGE DESCRIPTION The router has adjusted its time based on information from the Time calibration is time server.
P-334U/P-335U User’s Guide Table 111 System Maintenance Logs (continued) LOG MESSAGE DESCRIPTION Someone has logged on to the router's web configurator Successful HTTPS login interface using HTTPS protocol. Someone has failed to log on to the router's web configurator HTTPS login failed interface using HTTPS protocol.
P-334U/P-335U User’s Guide Table 114 TCP Reset Logs LOG MESSAGE DESCRIPTION The router sent a TCP reset packet when a host was under a SYN Under SYN flood attack, flood attack (the TCP incomplete count is per destination host.) sent TCP RST...
P-334U/P-335U User’s Guide Table 116 ICMP Logs LOG MESSAGE DESCRIPTION ICMP access matched the default policy and was blocked Firewall default policy: ICMP or forwarded according to the user's setting. For type and <Packet Direction>, <type:%d>, code details, see Table 128 on page 301.
P-334U/P-335U User’s Guide Table 118 PPP Logs (continued) LOG MESSAGE DESCRIPTION The PPP connection’s Link Control Protocol stage is closing. ppp:LCP Closing The PPP connection’s Internet Protocol Control Protocol stage is closing. ppp:IPCP Closing Table 119 UPnP Logs LOG MESSAGE DESCRIPTION UPnP packets can pass through the firewall.
P-334U/P-335U User’s Guide Table 120 Content Filtering Logs (continued) LOG MESSAGE DESCRIPTION The connection to the external content filtering server failed. Connecting to content filter server fail License key is invalid The external content filtering license key is invalid. Table 121 Attack Logs...
P-334U/P-335U User’s Guide Table 122 IPSec Logs LOG MESSAGE DESCRIPTION The router received and discarded a packet with an incorrect Discard REPLAY packet sequence number. The router received a packet that has been altered. A third party may Inbound packet have altered or tampered with the packet.
Page 296
P-334U/P-335U User’s Guide Table 123 IKE Logs (continued) LOG MESSAGE DESCRIPTION The router couldn’t resolve the IP address from the domain Cannot resolve Secure Gateway name that was used for the secure gateway address. Addr for rule <%d> The displayed ID information did not match between the two Peer ID: <peer id>...
Page 297
P-334U/P-335U User’s Guide Table 123 IKE Logs (continued) LOG MESSAGE DESCRIPTION The router was not able to use extended authentication to XAUTH fail! Username: authenticate the listed username. <Username> The listed rule’s IKE phase 1 negotiation mode did not match Rule[%d] Phase 1 negotiation between the router and the peer.
P-334U/P-335U User’s Guide Table 123 IKE Logs (continued) LOG MESSAGE DESCRIPTION The listed rule’s IKE phase 2 did not match between the router Rule [%d] phase 2 mismatch and the peer. The listed rule’s IKE phase 2 key lengths (with the AES...
P-334U/P-335U User’s Guide Table 124 PKI Logs (continued) LOG MESSAGE DESCRIPTION The router received directory data that was too large (the size is listed) Rcvd data <size> too from the LDAP server whose address and port are recorded in the large! Max size Source field.
P-334U/P-335U User’s Guide Table 125 Certificate Path Verification Failure Reason Codes (continued) CODE DESCRIPTION Database method failed. Path was not verified. Maximum path length reached. Table 126 802.1X Logs LOG MESSAGE DESCRIPTION A user was authenticated by the local user database.
P-334U/P-335U User’s Guide Table 127 ACL Setting Notes PACKET DIRECTION DIRECTION DESCRIPTION (L to W) LAN to WAN ACL set for packets traveling from the LAN to the WAN. (W to L) WAN to LAN ACL set for packets traveling from the WAN to the LAN.
P-334U/P-335U User’s Guide Table 128 ICMP Notes (continued) TYPE CODE DESCRIPTION Time Exceeded Time to live exceeded in transit Fragment reassembly time exceeded Parameter Problem Pointer indicates the error Timestamp Timestamp request message Timestamp Reply Timestamp reply message Information Request...
ZyXEL Device is to record. 2 Use sys logs category to view a list of the log categories. Figure 196 Displaying Log Categories Example Copyright (c) 1994 - 2004 ZyXEL Communications Corp. ras>? Valid commands are: exit...
P-334U/P-335U User’s Guide Use 0 to not record logs for that category, 1 to record only logs for that category, 2 to record only alerts for that category, and 3 to record both logs and alerts for that category. Not every parameter is available with every category.
P-334U/P-335U User’s Guide P P E N D I X Services The following table lists some commonly-used services and their associated protocols and port numbers. • Name: This is a short, descriptive name for the service. You can use this one or create a different one, if you like.
Page 306
P-334U/P-335U User’s Guide Table 131 Examples of Services (continued) NAME PROTOCOL PORT(S) DESCRIPTION HTTP Hyper Text Transfer Protocol - a client/ server protocol for the world wide web. HTTPS HTTPS is a secured http session often used in e-commerce. ICMP...
Page 307
P-334U/P-335U User’s Guide Table 131 Examples of Services (continued) NAME PROTOCOL PORT(S) DESCRIPTION RCMD Remote Command Service. REAL_AUDIO 7070 A streaming audio service that enables real time sound over the web. REXEC Remote Execution Daemon. RLOGIN Remote Login. ROADRUNNER TCP/UDP...
Page 308
P-334U/P-335U User’s Guide Appendix F Services...
P-334U/P-335U User’s Guide P P E N D I X Internal SPTGEN This appendix introduces Internal SPTGEN. All menus shown in this appendix are example menus meant to show SPTGEN usage. Actual menus for your product may differ. Internal SPTGEN Overview Internal SPTGEN (System Parameter Table Generator) is a configuration text file useful for efficient configuration of multiple Prestiges.
P-334U/P-335U User’s Guide Internal SPTGEN File Modification - Important Points to Remember Each parameter you enter must be preceded by one “=”sign and one space. Some parameters are dependent on others. For example, if you disable the Configured field in...
P-334U/P-335U User’s Guide Figure 201 Internal SPTGEN FTP Download Example c:\ftp 192.168.1.1 220 PPP FTP version 1.0 ready at Sat Jan 1 03:22:12 2000 User (192.168.1.1:(none)): 331 Enter PASS command Password: 230 Logged in ftp>bin 200 Type I OK ftp> get rom-t ftp>bye...
P-334U/P-335U User’s Guide Example Internal SPTGEN Menus This section provides example Internal SPTGEN menus. Table 132 Abbreviations Used in the Example Internal SPTGEN Screens Table ABBREVIATION MEANING Field Identification Number Field Name Parameter Values Allowed INPUT An example of what you may enter Applies to the Prestige.
Page 313
P-334U/P-335U User’s Guide Table 134 Menu 3 30100012 = Output protocol filters Set 4 = 256 30100013 = Output device filters Set 1 = 256 30100014 = Output device filters Set 2 = 256 30100015 = Output device filters Set 3...
Page 314
P-334U/P-335U User’s Guide Table 134 Menu 3 30201005 = Version <0(Rip-1) | 1(Rip-2B) |2(Rip-2M)> 30201006 = IP Alias #1 Incoming protocol filters = 256 Set 1 30201007 = IP Alias #1 Incoming protocol filters = 256 Set 2 30201008 =...
P-334U/P-335U User’s Guide Table 137 Menu 15 SUA Server Setup / Menu 15 SUA Server Setup INPUT 150000001 = SUA Server IP address for default = 0.0.0.0 port 150000002 = SUA Server #2 Active <0(No) | 1(Yes)> 150000003 = SUA Server #2 Protocol <0(All)|6(TCP)|17(U...
P-334U/P-335U User’s Guide Table 137 Menu 15 SUA Server Setup (continued) 150000031 = SUA Server #7 Local IP address = 0.0.0.0 150000032 = SUA Server #8 Active <0(No) | 1(Yes)> 150000033 = SUA Server #8 Protocol <0(All)|6(TCP)|17(U DP)> 150000034 =...
Page 320
P-334U/P-335U User’s Guide Table 138 Menu 21.1 Filter Set #1 (continued) 210101002 = IP Filter Set 1,Rule 1 Active <0(No)|1(Yes)> 210101003 = IP Filter Set 1,Rule 1 Protocol 210101004 = IP Filter Set 1,Rule 1 Dest IP address = 0.0.0.0...
P-334U/P-335U User’s Guide Table 138 Menu 21.1 Filter Set #1 (continued) 210102013 = IP Filter Set 1,Rule 2 Act Match <1(check next)|2(forward)| 3(drop)> 210102014 = IP Filter Set 1,Rule 2 Act Not Match <1(check next)|2(forward)| 3(drop)> Table 139 Menu 21.1 Filer Set #2, / Menu 21.1 filter set #2,...
P-334U/P-335U User’s Guide Table 139 Menu 21.1 Filer Set #2, (continued) 210202001 = IP Filter Set 2, Rule 2 Type <0(none)|2(TCP/IP)> = 2 210202002 = IP Filter Set 2, Rule 2 Active <0(No)|1(Yes)> 210202003 = IP Filter Set 2, Rule 2 Protocol...
P-334U/P-335U User’s Guide P P E N D I X Triangle Route The Ideal Setup When the firewall is on, your Prestige acts as a secure gateway between your LAN and the Internet. In an ideal network topology, all incoming and outgoing network traffic passes through the Prestige to protect your LAN against attacks.
P-334U/P-335U User’s Guide Figure 204 “Triangle Route” Problem The “Triangle Route” Solutions This section presents you two solutions to the “triangle route” problem. IP Aliasing IP alias allows you to partition your network into logical sections over the same Ethernet interface.
Page 327
P-334U/P-335U User’s Guide Index access point Default access point. See also AP. DHCP 46, 109, 115, 129 ActiveX 138, 159 DHCP Table Summary Advanced Encryption Standard DHCP_client list Alternative Subnet Mask Notation Disclaimer AP (access point) Dynamic DNS AP. See also access point.
Page 328
P-334U/P-335U User’s Guide General wireless LAN screen MAC address MAC address filter MAC Address Filter Action MAC Address Filtering MAC Filter Message Integrity Check (MIC) Hidden node Metric hide SSID Multicast 108, 110, 112 Host Host IDs Server Sets IBSS Navigation Panel IEEE 802.11g...
Page 329
P-334U/P-335U User’s Guide RADIUS server Time Zone Registered Trademark Registered Trademark Trademark Owners Related Documentation Trademarks Remote Management and NAT Translation Remote Management Limitations Triangle Reproduction Triangle Route Solutions Restore Trigger Port Forwarding Process Restrict Web Features 138, 159 RF (Radio Frequency)