ZyXEL Communications P-334U User Manual

802.11a/g wireless router
Hide thumbs Also See for P-334U:
Table of Contents

Advertisement

Quick Links

P-334U/P-335U
802.11a/g Wireless Router
User's Guide
Version 3.60
Edition 1
5/2006

Advertisement

Table of Contents
loading

Summary of Contents for ZyXEL Communications P-334U

  • Page 1 P-334U/P-335U 802.11a/g Wireless Router User’s Guide Version 3.60 Edition 1 5/2006...
  • Page 3: Copyright

    ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation. All rights reserved.
  • Page 4: Certifications

    P-334U/P-335U User’s Guide Certifications Federal Communications Commission (FCC) Interference Statement This device complies with Part 15 of FCC rules. Operation is subject to the following two conditions: • This device may not cause harmful interference. • This device must accept any interference received, including interference that may cause undesired operations.
  • Page 5: Safety Warnings

    P-334U/P-335U User’s Guide Safety Warnings For your safety, be sure to read and follow all warning notices and instructions. • To reduce the risk of fire, use only No. 26 AWG (American Wire Gauge) or larger telecommunication line cord. • Do NOT open the device or unit. Opening or removing covers can expose you to dangerous high voltage points or other risks.
  • Page 6: Zyxel Limited Warranty

    P-334U/P-335U User’s Guide ZyXEL Limited Warranty ZyXEL warrants to the original end user (purchaser) that this product is free from any defects in materials or workmanship for a period of up to two years from the date of purchase. During...
  • Page 7: Customer Support

    P-334U/P-335U User’s Guide Customer Support Please have the following information ready when you contact customer support. • Product model and serial number. • Warranty Information. • Date that you received your device. • Brief description of the problem and the steps you took to solve it.
  • Page 8 P-334U/P-335U User’s Guide METHOD SUPPORT E-MAIL TELEPHONE WEB SITE REGULAR MAIL SALES E-MAIL FTP SITE LOCATION info@pl.zyxel.com +48 (22) 333 8250 www.pl.zyxel.com ZyXEL Communications ul. Okrzei 1A POLAND +48 (22) 333 8251 03-715 Warszawa Poland http://zyxel.ru/support +7-095-542-89-29 www.zyxel.ru ZyXEL Russia Ostrovityanova 37a Str.
  • Page 9: Table Of Contents

    P-334U/P-335U User’s Guide Table of Contents Copyright ........................3 Certifications ......................4 Safety Warnings ....................... 5 ZyXEL Limited Warranty..................6 Customer Support....................7 Table of Contents ..................... 9 Preface ........................27 Chapter 1 Getting to Know Your ZyXEL Device..............29 1.1 ZyXEL Device Overview ..................29...
  • Page 10 P-334U/P-335U User’s Guide 2.4.7 Summary: Wireless Station Status ............50 Chapter 3 Connection Wizard....................53 3.1 Wizard Setup ......................53 3.2 Connection Wizard: STEP 1: System Information ..........54 3.2.1 System Name ...................54 3.2.2 Domain Name ...................55 3.3 Connection Wizard: STEP 2: Wireless LAN ............55 3.3.1 Basic(WEP) Security .................57...
  • Page 11 P-334U/P-335U User’s Guide 4.4.2 Starting OTIST ..................84 4.4.3 Notes on OTIST ..................84 4.5 MAC Filter ......................85 4.6 Wireless LAN Advanced Screen ................87 Chapter 5 Wireless Tutorial..................... 89 5.1 Example Parameters ..................89 5.2 Configuring the AP .....................89 5.3 Configuring the Wireless Client ................91 5.3.1 Connecting to a Wireless LAN ..............92...
  • Page 12 P-334U/P-335U User’s Guide Chapter 9 Network Address Translation (NAT) ..............119 9.1 NAT Overview ....................119 9.2 Using NAT ......................119 9.2.1 Port Forwarding: Services and Port Numbers ........119 9.2.2 Configuring Servers Behind Port Forwarding (Example) ......120 9.3 General NAT Screen ..................120 9.4 NAT Application Screen...
  • Page 13 P-334U/P-335U User’s Guide Chapter 13 Trend Micro Home Network Security (TMSS) ............ 143 13.1 Trend Micro Home Network Security Overview ..........143 13.2 Installing the Trend Micro Dashboard ............144 13.2.1 Installing the Trend Micro Dashboard: Troubleshooting ......145 13.3 Activating Your Free Services ................146 13.3.1 Registering a Trend Micro Customer Account ........147...
  • Page 14 P-334U/P-335U User’s Guide Chapter 16 Remote Management Screens ................183 16.1 Remote Management Overview ..............183 16.1.1 Remote Management Limitations ............183 16.1.2 Remote Management and NAT ............184 16.1.3 System Timeout ...................184 16.2 WWW Screen ....................184 16.3 Telnet ......................185 16.4 Telnet Screen ....................186 16.5 FTP Screen ....................186...
  • Page 15 P-334U/P-335U User’s Guide Chapter 20 System ........................215 20.1 System Overview ...................215 20.2 System General Screen ................215 20.3 Time Setting Screen ..................216 Chapter 21 Logs........................219 21.1 View Log .......................219 21.2 Log Settings ....................220 Chapter 22 Tools ........................223 22.1 Firmware Upload Screen ................223 22.2 Configuration Screen ..................224...
  • Page 16 P-334U/P-335U User’s Guide Appendix D Wireless LANs ...................... 275 Appendix E Log Descriptions....................289 Appendix F Services ........................ 305 Appendix G Internal SPTGEN ....................309 Appendix H Triangle Route ...................... 325 Table of Contents...
  • Page 17 Figure 1 Secure Internet Access via Cable, DSL or Wireless Modem ........ 34 Figure 2 WLAN Application Example .................. 35 Figure 3 Print Server Application ..................35 Figure 4 Front Panel (P-334U) .................... 36 Figure 5 Front Panel (P-335U) .................... 36 Figure 6 Change Password Screen ..................40 Figure 7 Web Configurator Status Screen ................
  • Page 18 P-334U/P-335U User’s Guide Figure 37 Wireless: WPA/WPA2 ..................80 Figure 38 OTIST ......................... 82 Figure 39 Example Wireless Client OTIST Screen ............. 83 Figure 40 Security Key ......................84 Figure 41 OTIST in Progress (AP) ..................84 Figure 42 OTIST in Progress (Client) .................. 84 Figure 43 No AP with OTIST Found ...................
  • Page 19 P-334U/P-335U User’s Guide Figure 80 Content Filter: Filter .................... 138 Figure 81 Content Filter: Schedule ..................139 Figure 82 TMSS First Time Access ..................144 Figure 83 Security Warning Message Box ................144 Figure 84 Trend Micro Dashboard) ..................145 Figure 85 Dashboard Service Summary Screen ..............
  • Page 20 P-334U/P-335U User’s Guide Figure 123 Network Print Server Setup Wizard: Summary ..........204 Figure 124 Network Print Server Setup Wizard: Installation Complete ....... 204 Figure 125 Add Printer Help ....................205 Figure 126 Add Printer Wizard: Welcome ................205 Figure 127 Add Printer Wizard: Local or Network Printer ........... 206 Figure 128 Add Printer Wizard: Select the Printer Port ............
  • Page 21 P-334U/P-335U User’s Guide Figure 166 Security Setting ActiveX Controls ..............244 Figure 167 WIndows 95/98/Me: Network: Configuration ............. 252 Figure 168 Windows 95/98/Me: TCP/IP Properties: IP Address ......... 253 Figure 169 Windows 95/98/Me: TCP/IP Properties: DNS Configuration ......254 Figure 170 Windows XP: Start Menu .................. 255 Figure 171 Windows XP: Control Panel ................
  • Page 22 P-334U/P-335U User’s Guide...
  • Page 23 P-334U/P-335U User’s Guide List of Tables Table 1 Front Panel LEDs ....................36 Table 2 Status Screen Icon Key ..................41 Table 3 Web Configurator Status Screen ................42 Table 4 Screens Summary ....................43 Table 5 Summary: DHCP Table ..................46 Table 6 Summary: Packet Statistics ...................
  • Page 24 P-334U/P-335U User’s Guide Table 37 LAN IP ......................... 111 Table 38 LAN IP Alias ......................112 Table 39 Advanced LAN ..................... 112 Table 40 DHCP Server General ..................115 Table 41 DHCP Server Advanced ..................117 Table 42 Client List ......................118 Table 43 NAT General ......................
  • Page 25 P-334U/P-335U User’s Guide Table 80 Maintenance Restore Configuration ..............225 Table 81 Config Mode: Advanced Screens ................ 229 Table 82 Troubleshooting Starting Up Your ZyXEL Device ..........231 Table 83 Troubleshooting the LAN ..................231 Table 84 Troubleshooting the WAN ..................232 Table 85 Troubleshooting Accessing the ZyXEL Device ............
  • Page 26 P-334U/P-335U User’s Guide Table 123 IKE Logs ......................295 Table 124 PKI Logs ......................298 Table 125 Certificate Path Verification Failure Reason Codes ........... 299 Table 126 802.1X Logs ...................... 300 Table 127 ACL Setting Notes ..................... 301 Table 128 ICMP Notes ....................... 301 Table 129 Syslog Logs .......................
  • Page 27: Preface

    P-334U/P-335U User’s Guide Preface Congratulations on your purchase of the P-334U or P-335U 802.11a/g Wireless Router. This manual is designed to guide you through the configuration of your P-334U or P-335U for its various applications. About This User's Guide This User’s Guide is designed to guide you through the configuration of your ZyXEL Device using the web configurator.
  • Page 28 P-334U/P-335U User’s Guide • The P-334U or P-335U series may be referred to as the “ZyXEL Device” in this User’s Guide. Graphics Icons Key ZyXEL Device Computer Notebook computer Server DSLAM Firewall Modem Switch Router Wireless Signal Preface...
  • Page 29: Getting To Know Your Zyxel Device

    This chapter introduces the main features and applications of the ZyXEL Device. 1.1 ZyXEL Device Overview The P-334U or P-335U is the ideal secure wireless firewall router for all data passing between the Internet and LAN’s. You can configure firewall, Trend Micro Security Services (TMSS) and/or content filtering for secure Internet access.
  • Page 30: Non-Physical Features

    P-334U/P-335U User’s Guide Auto-crossover 10/100 Mbps Ethernet Interface(s) These interfaces automatically adjust to either a crossover or straight-through Ethernet cable. 4-Port Switch A combination of switch and router makes your ZyXEL Device a cost-effective and viable network solution. You can add up to four computers to the ZyXEL Device without the cost of a hub.
  • Page 31 P-334U/P-335U User’s Guide Trend Micro Security Services TMSS (Trend Micro Security Services) identifies vulnerabilities and protects computers and networks that have Internet connections. TMSS is enabled by default on the ZyXEL Device but you must register at the TMSS web page. After you register, you can configure TMSS using the ZyXEL Device web configurator.
  • Page 32: Dynamic Dns Support

    P-334U/P-335U User’s Guide Dynamic DNS Support With Dynamic DNS (Domain Name System) support, you can have a static hostname alias for a dynamic IP address, allowing the host to be more easily accessible from various locations on the Internet. You must register for this service with a Dynamic DNS service provider.
  • Page 33: Wireless Features

    P-334U/P-335U User’s Guide Logging and Tracing • Built-in message logging and packet tracing. • Unix syslog facility support. • Firewall logs. • Content filtering logs. Upgrade ZyXEL Device Firmware via LAN The firmware of the ZyXEL Device can be upgraded via the LAN (refer to the Maintenance- Tools-Firmware screen).
  • Page 34: Applications For The Zyxel Device

    P-334U/P-335U User’s Guide Wireless LAN MAC Address Filtering Your Prestige can check the MAC addresses of wireless stations against a list of allowed or denied MAC addresses. WEP Encryption WEP (Wired Equivalent Privacy) encrypts data frames before transmitting over the wireless network to help keep network communications private.
  • Page 35: Wireless Lan Application

    P-334U/P-335U User’s Guide 1.3.2 Wireless LAN Application Add a wireless LAN to your existing network without expensive network cables. Wireless stations can move freely anywhere in the coverage area and use resources on the wired network. Figure 2 WLAN Application Example 1.3.3 Print Server Application...
  • Page 36: Front Panel Leds

    P-334U/P-335U User’s Guide 1.3.4 Front Panel LEDs Figure 4 Front Panel (P-334U) Figure 5 Front Panel (P-335U) The following table describes the LEDs. Table 1 Front Panel LEDs COLOR STATUS DESCRIPTION Green The ZyXEL Device is receiving power and functioning properly.
  • Page 37 P-334U/P-335U User’s Guide Table 1 Front Panel LEDs (continued) COLOR STATUS DESCRIPTION Green The ZyXEL Device has a successful 10Mb WAN connection. Blinking The ZyXEL Device is sending/receiving data. Amber The ZyXEL Device has a successful 100Mb Ethernet connection. Blinking The ZyXEL Device is sending/receiving data.
  • Page 38 P-334U/P-335U User’s Guide Chapter 1 Getting to Know Your ZyXEL Device...
  • Page 39: Introducing The Web Configurator

    P-334U/P-335U User’s Guide H A P T E R Introducing the Web Configurator This chapter describes how to access the ZyXEL Device web configurator and provides an overview of its screens. 2.1 Web Configurator Overview The web configurator is an HTML-based management interface that allows easy ZyXEL Device setup and management via Internet browser.
  • Page 40: Resetting The Zyxel Device

    ZyXEL Device restarts. 2.4 Navigating the Web Configurator We use the P-334U web screens in this guide as an example. Screens vary slightly for different ZyXEL Device models. The following summarizes how to navigate the web configurator from the Status screen.
  • Page 41: Figure 7 Web Configurator Status Screen

    P-334U/P-335U User’s Guide Figure 7 Web Configurator Status Screen The following table describes the icons shown in the Status screen. Table 2 Status Screen Icon Key ICON DESCRIPTION Select a language from the drop-down list box to have the web configurator display in that language.
  • Page 42: Table 3 Web Configurator Status Screen

    P-334U/P-335U User’s Guide The following table describes the labels shown in the Status screen. Table 3 Web Configurator Status Screen LABEL DESCRIPTION Device Information System Name This is the System Name you enter in the Maintenance > System > General screen.
  • Page 43: Navigation Panel

    P-334U/P-335U User’s Guide Table 3 Web Configurator Status Screen LABEL DESCRIPTION - TMSS This shows whether TMSS is active or not. - UPnP This shows whether UPnP is active or not. - Configuration Mode This shows whether the advanced screens of each feature are turned on (Advanced) or not (Basic).
  • Page 44 P-334U/P-335U User’s Guide Table 4 Screens Summary LINK FUNCTION Wireless LAN General Use this screen to configure wireless LAN. OTIST This screen allows you to assign wireless clients the ZyXEL Device’s wireless security settings. MAC Filter Use the MAC filter screen to configure the ZyXEL Device to block access to devices or block the devices from accessing the ZyXEL Device.
  • Page 45: Summary: Bandwidth Management Monitor

    P-334U/P-335U User’s Guide Table 4 Screens Summary LINK FUNCTION Bandwidth General Use this screen to enable bandwidth management. MGMT Advanced Use this screen to set the upstrem bandwidth and edit a bandwidth management rule. Monitor Use this screen to view the ZyXEL Device’s bandwidth usage and allotments.
  • Page 46: Summary: Dhcp Table

    P-334U/P-335U User’s Guide Figure 8 Summary: BW MGMT Monitor 2.4.3 Summary: DHCP Table DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individual clients to obtain TCP/IP configuration at start-up from a server. You can configure the ZyXEL Device as a DHCP server or disable it.
  • Page 47: Summary: Packet Statistics

    P-334U/P-335U User’s Guide Table 5 Summary: DHCP Table (continued) LABEL DESCRIPTION MAC Address This field shows the MAC address of the computer with the name in the Host Name field. Every Ethernet device has a unique MAC (Media Access Control) address. The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters, for example, 00:A0:C5:00:00:02.
  • Page 48: Summary: Parental Controls Statistics

    P-334U/P-335U User’s Guide Table 6 Summary: Packet Statistics LABEL DESCRIPTION Rx B/s This displays the reception speed in bytes per second on this port. Up Time This is the total amount of time the line has been up. System Up Time This is the total time the ZyXEL Device has been on.
  • Page 49: Figure 11 Summary: Parental Control Statistics

    P-334U/P-335U User’s Guide Figure 11 Summary: Parental Control Statistics The following table describes the labels in this screen. Table 7 Summary: Parental Control Statistics LABEL DESCRIPTION Control Mode This displays the current parental control mode (General Control or Per-User Control).
  • Page 50: Summary: Port Isolation

    P-334U/P-335U User’s Guide 2.4.6 Summary: Port Isolation Click the Port Isolation (Details...) hyperlink in the Status screen to view the port isolation status and settings on each port. Figure 12 Summary: Port Isolation The following table describes the labels in this screen.
  • Page 51: Figure 13 Summary: Wireless Association List

    P-334U/P-335U User’s Guide Figure 13 Summary: Wireless Association List The following table describes the labels in this screen. Table 9 Summary: Wireless Association List LABEL DESCRIPTION This is the index number of an associated wireless station. MAC Address This field displays the MAC address of an associated wireless station.
  • Page 52 P-334U/P-335U User’s Guide Chapter 2 Introducing the Web Configurator...
  • Page 53: Chapter 3 Connection Wizard

    P-334U/P-335U User’s Guide H A P T E R Connection Wizard This chapter provides information on the Wizard setup screens in the web configurator. 3.1 Wizard Setup The web configurator’s Wizard setup helps you configure your device to access the Internet.
  • Page 54: Connection Wizard: Step 1: System Information

    P-334U/P-335U User’s Guide Figure 15 Select a Language 4 Read the on-screen information and click Next. Figure 16 Welcome to the Connection Wizard 3.2 Connection Wizard: STEP 1: System Information System Information contains administrative and system-related information. 3.2.1 System Name System Name is for identification purposes.
  • Page 55: Domain Name

    P-334U/P-335U User’s Guide 3.2.2 Domain Name The Domain Name entry is what is propagated to the DHCP clients on the LAN. If you leave this blank, the domain name obtained by DHCP from the ISP is used. While you must enter the host name (System Name) on each individual computer, the domain name can be assigned from the ZyXEL Device via DHCP.
  • Page 56: Figure 18 Wizard Step 2: Wireless Lan

    P-334U/P-335U User’s Guide Figure 18 Wizard Step 2: Wireless LAN The following table describes the labels in this screen. Table 11 Wizard Step 2: Wireless LAN LABEL DESCRIPTION Name(SSID) Enter a descriptive name (up to 32 printable 7-bit ASCII characters) for the wireless LAN.
  • Page 57: Basic(Wep) Security

    P-334U/P-335U User’s Guide 3.3.1 Basic(WEP) Security Choose Basic(WEP) to setup WEP Encryption parameters. Figure 19 Wizard Step 2: Basic(WEP) Security The following table describes the labels in this screen. Table 12 Wizard Step 2: Basic(WEP) Security LABEL DESCRIPTION Passphrase Type a Passphrase (up to 32 printable characters) and click Generate. The ZyXEL Device automatically generates a WEP key.
  • Page 58: Extend(Wpa-Psk Or Wpa2-Psk) Security

    P-334U/P-335U User’s Guide Table 12 Wizard Step 2: Basic(WEP) Security LABEL DESCRIPTION Key 1 to Key 4 The WEP keys are used to encrypt data. Both the ZyXEL Device and the wireless stations must use the same WEP key for data transmission.
  • Page 59: Otist

    P-334U/P-335U User’s Guide 3.3.3 OTIST The following screen allows you to enable ZyXEL Device One-Touch Intelligent Security Technology (OTIST). One-Touch Intelligent Security Technology (OTIST) allows your ZyXEL Device to assign wireless clients the ZyXEL Device’s SSID and static WEP or WPA- PSK encryption settings.
  • Page 60: Connection Wizard: Step 3: Internet Configuration

    P-334U/P-335U User’s Guide 3.4 Connection Wizard: STEP 3: Internet Configuration The ZyXEL Device offers three Internet connection types. They are Ethernet, PPP over Ethernet or PPTP. The wizard attempts to detect which WAN connection type you are using. If the wizard does not detect a connection type, you must select one from the drop-down list box.
  • Page 61: Pppoe Connection

    P-334U/P-335U User’s Guide Figure 23 Wizard Step 3: Ethernet Connection 3.4.2 PPPoE Connection Point-to-Point Protocol over Ethernet (PPPoE) functions as a dial-up connection. PPPoE is an IETF (Internet Engineering Task Force) standard specifying how a host personal computer interacts with a broadband modem (for example DSL, cable, wireless, etc.) to achieve access to high-speed data networks.
  • Page 62: Pptp Connection

    P-334U/P-335U User’s Guide Figure 24 Wizard Step 3: PPPoE Connection The following table describes the labels in this screen. Table 16 Wizard Step 3: PPPoE Connection LABEL DESCRIPTION ISP Parameter for Internet Access Connection Type Select the PPP over Ethernet option for a dial-up connection.
  • Page 63: Figure 25 Wizard Step 3: Pptp Connection

    P-334U/P-335U User’s Guide Figure 25 Wizard Step 3: PPTP Connection The following table describes the fields in this screen Table 17 Wizard Step 3: PPTP Connection LABEL DESCRIPTION ISP Parameters for Internet Access Connection Type Select PPTP from the drop-down list box. To configure a PPTP client, you must configure the User Name and Password fields for a PPP connection and the PPTP parameters for a PPTP connection.
  • Page 64: Your Ip Address

    P-334U/P-335U User’s Guide 3.4.4 Your IP Address The following wizard screen allows you to assign a fixed IP address or give the ZyXEL Device an automatically assigned IP address depending on your ISP. Figure 26 Wizard Step 3: Your IP Address...
  • Page 65: Ip Address And Subnet Mask

    P-334U/P-335U User’s Guide You can obtain your IP address from the IANA, from an ISP or have it assigned by a private network. If you belong to a small organization and your Internet access is through an ISP, the ISP can provide you with the Internet addresses for your local networks. On the other hand, if you are part of a much larger organization, you should consult your network administrator for the appropriate IP addresses.
  • Page 66: Wan Ip And Dns Server Address Assignment

    P-334U/P-335U User’s Guide 1 The ISP tells you the DNS server addresses, usually in the form of an information sheet, when you sign up. If your ISP gives you DNS server addresses, enter them in the DNS Server fields in the Wizard and/or WAN > Internet Connection screen.
  • Page 67: Wan Mac Address

    P-334U/P-335U User’s Guide Table 20 Wizard Step 3: WAN IP and DNS Server Addresses LABEL DESCRIPTION First DNS Server Enter the DNS server's IP address in the fields provided. Second DNS Server If you do not configure a system DNS server, you must use IP addresses when configuring DDNS and the time server.
  • Page 68: Connection Wizard: Step 4: Bandwidth Management

    P-334U/P-335U User’s Guide The following table describes the fields in this screen. Table 22 Wizard Step 3: WAN MAC Address LABEL DESCRIPTION Factory Default Select Factory Default to use the factory assigned default MAC address. Clone the Select this option and enter the IP address of the computer on the LAN whose computer’s MAC...
  • Page 69: Connection Wizard Complete

    P-334U/P-335U User’s Guide Table 23 Wizard Step 4: Bandwidth Management LABEL DESCRIPTION Next Click Next to continue. Exit Click Exit to close the wizard screen without saving. 3.6 Connection Wizard Complete Click Apply to save your configuration. Figure 30 Connection Wizard Save Follow the on-screen instructions and click Finish to complete the wizard setup.
  • Page 70 P-334U/P-335U User’s Guide Chapter 3 Connection Wizard...
  • Page 71: Chapter 4 Wireless Lan

    P-334U/P-335U User’s Guide H A P T E R Wireless LAN This chapter discusses how to configure the wireless network settings in your ZyXEL Device. See the appendices for more detailed information about wireless networks. 4.1 Wireless Network Overview The following figure provides an example of a wireless network.
  • Page 72: Wireless Security Overview

    P-334U/P-335U User’s Guide • Every wireless client in the same wireless network must use security compatible with the Security stops unauthorized devices from using the wireless network. It can also protect the information that is sent in the wireless network.
  • Page 73: Encryption

    P-334U/P-335U User’s Guide For wireless networks, there are two typical places to store the user names and passwords for each user. • In the AP: this feature is called a local user database or a local database. • In a RADIUS server: this is a server used in businesses more than in homes.
  • Page 74: One-Touch Intelligent Security Technology (Otist)

    P-334U/P-335U User’s Guide Note: It is recommended that wireless networks use WPA-PSK, WPA, or stronger encryption. IEEE 802.1x and WEP encryption are better than none at all, but it is still possible for unauthorized devices to figure out the original information pretty quickly.
  • Page 75: No Security

    P-334U/P-335U User’s Guide Figure 33 Wireless General The following table describes the general wireless LAN labels in this screen. Table 25 Wireless General LABEL DESCRIPTION Enable Click the check box to activate wireless LAN. Wireless LAN Name(SSID) (Service Set IDentity) The SSID identifies the Service Set with which a wireless station is associated.
  • Page 76: Wep Encryption

    P-334U/P-335U User’s Guide Note: If you do not enable any wireless security on your ZyXEL Device, your network is accessible to any wireless networking device that is within range. Figure 34 Wireless: No Security The following table describes the labels in this screen.
  • Page 77: Figure 35 Wireless: Static Wep Encryption

    P-334U/P-335U User’s Guide Figure 35 Wireless: Static WEP Encryption The following table describes the wireless LAN security labels in this screen. Table 27 Wireless: Static WEP Encryption LABEL DESCRIPTION Passphrase Enter a passphrase (password phrase) of up to 32 printable characters and click Generate.
  • Page 78: Wpa-Psk/Wpa2-Psk

    P-334U/P-335U User’s Guide Table 27 Wireless: Static WEP Encryption LABEL DESCRIPTION Key 1 to Key 4 The WEP keys are used to encrypt data. Both the ZyXEL Device and the wireless stations must use the same WEP key for data transmission.
  • Page 79: Wpa/Wpa2

    P-334U/P-335U User’s Guide The following table describes the labels in this screen. Table 28 Wireless: WPA-PSK/WPA2-PSK LABEL DESCRIPTION WPA Compatible This check box is available only when you select WPA2-PSK or WPA2 in the Security Mode field. Select the check box to have both WPA2 and WPA wireless clients be able to communicate with the ZyXEL Device even when the ZyXEL Device is using WPA2- PSK or WPA2.
  • Page 80: Figure 37 Wireless: Wpa/Wpa2

    P-334U/P-335U User’s Guide Figure 37 Wireless: WPA/WPA2 The following table describes the labels in this screen. Table 29 Wireless: WPA/WPA2 LABEL DESCRIPTION WPA Compatible This check box is available only when you select WPA2-PSK or WPA2 in the Security Mode field.
  • Page 81: Otist

    P-334U/P-335U User’s Guide Table 29 Wireless: WPA/WPA2 LABEL DESCRIPTION Group Key Update The Group Key Update Timer is the rate at which the AP (if using WPA-PSK/ Timer WPA2-PSK key management) or RADIUS server (if using WPA/WPA2 key management) sends a new group key out to all clients. The re-keying process is the WPA/WPA2 equivalent of automatically changing the WEP key for an AP and all stations in a WLAN on a periodic basis.
  • Page 82: Enabling Otist

    P-334U/P-335U User’s Guide 4.4.1 Enabling OTIST You must enable OTIST on both the AP and wireless client before you start transferring settings. Note: The AP and wireless client(s) MUST use the same Setup key. 4.4.1.1 AP You can enable OTIST using the OTIST button or the web configurator.
  • Page 83: Wireless Client

    P-334U/P-335U User’s Guide The following table describes the labels in this screen. Table 30 OTIST LABEL DESCRIPTION Setup Key Type an OTIST Setup Key of exactly eight ASCII characters in length. The default OTIST setup key is "01234567". Note: If you change the OTIST setup key here, you must also make the same change on the wireless client(s).
  • Page 84: Starting Otist

    P-334U/P-335U User’s Guide 4.4.2 Starting OTIST Note: You must press the OTIST button or click Start in the AP OTIST web configurator screen and in the wireless client(s) Adapter screen all within three minutes (at the time of writing). You can start OTIST in the wireless clients and AP in any order but they must all be within range and have OTIST enabled.
  • Page 85: Mac Filter

    P-334U/P-335U User’s Guide Figure 44 Start OTIST? 2 If an OTIST-enabled wireless client loses its wireless connection for more than ten seconds, it will search for an OTIST-enabled AP for up to one minute. (If you manually have the wireless client search for an OTIST-enabled AP, there is no timeout; click Cancel in the OTIST progress screen to stop the search.)
  • Page 86: Figure 45 Mac Address Filter

    P-334U/P-335U User’s Guide Figure 45 MAC Address Filter The following table describes the labels in this menu. Table 31 MAC Address Filter LABEL DESCRIPTION Active Select Yes from the drop down list box to enable MAC address filtering. Filter Action Define the filter action for the list of MAC addresses in the MAC Address table.
  • Page 87: Wireless Lan Advanced Screen

    P-334U/P-335U User’s Guide 4.6 Wireless LAN Advanced Screen Click Network > Wireless LAN > Advanced. The screen appears as shown. Figure 46 Advanced The following table describes the labels in this screen. Table 32 Advanced LABEL DESCRIPTION Wireless Advanced Setup RTS/CTS Enter a value between 0 and 2432.
  • Page 88 P-334U/P-335U User’s Guide Table 32 Advanced LABEL DESCRIPTION Apply Click Apply to save your changes back to the ZyXEL Device. Reset Click Reset to reload the previous configuration for this screen. Chapter 4 Wireless LAN...
  • Page 89: Chapter 5 Wireless Tutorial

    An access point (AP) or wireless router is referred to as “AP” and a computer with a wireless network card or USB/PCI adapter is referred to as “wireless client” here. We use the P-334U web screens and M-302 utility screens as an example. The screens may vary slightly for different models.
  • Page 90: Figure 47 Ap: Wireless Lan > General

    P-334U/P-335U User’s Guide Figure 47 AP: Wireless LAN > General 3 Make sure the Enable Wireless LAN check box is selected. 4 Enter SSID_Example3 as the SSID, select a channel or select Auto Channel Selection to have the AP choose a channel which is not used by another AP and display the channel number in the field below after you click Apply.
  • Page 91: Configuring The Wireless Client

    P-334U/P-335U User’s Guide Figure 48 AP: Status 7 Click the WLAN Station Status hyperlink in the AP’s Status screen. You can see if any wireless client has connected to the AP. Figure 49 AP: Status: WLAN Station Status 5.3 Configuring the Wireless Client This section describes how to connect the wireless client to a network.
  • Page 92: Connecting To A Wireless Lan

    P-334U/P-335U User’s Guide 5.3.1 Connecting to a Wireless LAN The following sections show you how to join a wireless network using the ZyXEL utility, as in the following diagram. The wireless client is labeled C and the access point is labeled AP.
  • Page 93: Figure 50 Zyxel Utility: Security Settings

    P-334U/P-335U User’s Guide 3 When you try to connect to an AP with security configured, a window will pop up prompting you to specify the security settings. Enter the pre-shared key and leave the encryption type at the default setting.
  • Page 94: Creating And Using A Profile

    P-334U/P-335U User’s Guide Figure 52 ZyXEL Utility: Link Info 6 Open your Internet browser and enter http://www.zyxel.com or the URL of any other web site in the address bar. If you are able to access the web site, your wireless connection is successfully configured.
  • Page 95: Figure 54 Zyxel Utility: Add New Profile

    P-334U/P-335U User’s Guide you want to search again. You can also configure your profile for a wireless network that is not in the list. Figure 54 ZyXEL Utility: Add New Profile 3 Give the profile a descriptive name (of up to 32 printable ASCII characters). Select Infrastructure and either manually enter or select the AP's SSID in the Scan Info table and click Select.
  • Page 96: Figure 57 Profile: Wireless Protocol Settings

    P-334U/P-335U User’s Guide 6 In the next screen, leave both boxes checked. Figure 57 Profile: Wireless Protocol Settings. 7 Verify the profile settings in the read-only screen. Click Save to save and go to the next screen. Figure 58 Profile: Confirm Save 8 Click Activate Now to use the new profile immediately.
  • Page 97 P-334U/P-335U User’s Guide 10Open your Internet browser, enter http://www.zyxel.com or the URL of any other web site in the address bar and press ENTER. If you are able to access the web site, your new profile is successfully configured. 11If you cannot access the Internet go back to the Profile screen, select the profile you are using and click Edit.
  • Page 98 P-334U/P-335U User’s Guide Chapter 5 Wireless Tutorial...
  • Page 99: Chapter 6 Wan

    P-334U/P-335U User’s Guide H A P T E R This chapter describes how to configure WAN settings. 6.1 WAN Overview See the chapter about the connection wizard for more information on the fields in the WAN screens. 6.2 WAN MAC Address The MAC address screen allows users to configure the WAN port's MAC address by either using the factory default or cloning the MAC address from a computer on your LAN.
  • Page 100: Figure 60 Ethernet Encapsulation

    P-334U/P-335U User’s Guide Figure 60 Ethernet Encapsulation The following table describes the labels in this screen. Table 33 Ethernet Encapsulation LABEL DESCRIPTION Encapsulation You must choose the Ethernet option when the WAN port is used as a regular Ethernet. Service Type...
  • Page 101: Pppoe Encapsulation

    P-334U/P-335U User’s Guide Table 33 Ethernet Encapsulation LABEL DESCRIPTION Get automatically Select this option If your ISP did not assign you a fixed IP address. This is the from ISP default selection. Use Fixed IP Select this option If the ISP assigned a fixed IP address.
  • Page 102: Figure 61 Pppoe Encapsulation

    P-334U/P-335U User’s Guide Operationally, PPPoE saves significant effort for both you and the ISP or carrier, as it requires no specific configuration of the broadband modem at the customer site. By implementing PPPoE directly on the ZyXEL Device (rather than individual computers), the computers on the LAN do not need PPPoE software installed, since the ZyXEL Device does that part of the task.
  • Page 103: Table 34 Pppoe Encapsulation

    P-334U/P-335U User’s Guide The following table describes the labels in this screen. Table 34 PPPoE Encapsulation LABEL DESCRIPTION ISP Parameters for Internet Access Encapsulation The PPP over Ethernet choice is for a dial-up connection using PPPoE. The ZyXEL Device supports PPPoE (Point-to-Point Protocol over Ethernet). PPPoE is an IETF Draft standard (RFC 2516) specifying how a personal computer (PC) interacts with a broadband modem (i.e.
  • Page 104: Pptp Encapsulation

    P-334U/P-335U User’s Guide Table 34 PPPoE Encapsulation LABEL DESCRIPTION First DNS Server Select From ISP if your ISP dynamically assigns DNS server information (and the ZyXEL Device's WAN IP address). The field to the right displays the (read-only) Second DNS DNS server IP address that the ISP assigns.
  • Page 105: Figure 62 Pptp Encapsulation

    P-334U/P-335U User’s Guide Figure 62 PPTP Encapsulation The following table describes the labels in this screen. Table 35 PPTP Encapsulation LABEL DESCRIPTION ISP Parameters for Internet Access Encapsulation Point-to-Point Tunneling Protocol (PPTP) is a network protocol that enables secure transfer of data from a remote client to a private server, creating a Virtual Private Network (VPN) using TCP/IP-based networks.
  • Page 106 P-334U/P-335U User’s Guide Table 35 PPTP Encapsulation LABEL DESCRIPTION Password Type the password associated with the User Name above. Retype to Confirm Type your password again to make sure that you have entered is correctly. Nailed-up Connection Select Nailed-Up Connection if you do not want the connection to time out.
  • Page 107: Advanced Wan Screen

    P-334U/P-335U User’s Guide Table 35 PPTP Encapsulation LABEL DESCRIPTION First DNS Server Select From ISP if your ISP dynamically assigns DNS server information (and the ZyXEL Device's WAN IP address). The field to the right displays the (read- Second DNS Server only) DNS server IP address that the ISP assigns.
  • Page 108: Table 36 Advanced

    P-334U/P-335U User’s Guide The following table describes the labels in this screen. Table 36 Advanced LABEL DESCRIPTION Multicast Setup Multicast Select IGMP V-1 or IGMP V-2 or None. IGMP (Internet Group Multicast Protocol) is a network-layer protocol used to establish membership in a Multicast group - it is not used to carry user data.
  • Page 109: Chapter 7 Lan

    P-334U/P-335U User’s Guide H A P T E R This chapter describes how to configure LAN settings. 7.1 LAN Overview Local Area Network (LAN) is a shared communication system to which many computers are attached. The LAN screens can help you configure a LAN DHCP server, manage IP addresses, and partition your physical network into logical networks.
  • Page 110: Ip Address And Subnet Mask

    P-334U/P-335U User’s Guide 7.2.2 IP Address and Subnet Mask Refer to the IP Address and Subnet Mask section in the Connection Wizard chapter for this information. 7.2.3 Multicast Traditionally, IP packets are transmitted in one of either two ways - Unicast (1 sender - 1 recipient) or Broadcast (1 sender - everybody on the network).
  • Page 111: Lan Ip Alias

    P-334U/P-335U User’s Guide The following table describes the labels in this screen. Table 37 LAN IP LABEL DESCRIPTION LAN TCP/IP IP Address Type the IP address of your ZyXEL Device in dotted decimal notation 192.168.1.1 (factory default). IP Subnet Mask The subnet mask specifies the network number portion of an IP address.
  • Page 112: Advanced Lan Screen

    P-334U/P-335U User’s Guide The following table describes the labels in this screen. Table 38 LAN IP Alias LABEL DESCRIPTION IP Alias 1,2 Select the check box to configure another LAN network for the ZyXEL Device. IP Address Enter the IP address of your ZyXEL Device in dotted decimal notation.
  • Page 113 P-334U/P-335U User’s Guide Table 39 Advanced LAN LABEL DESCRIPTION Allow between LAN Select this check box to forward NetBIOS packets from the LAN to the WAN and WAN and from the WAN to the LAN. If your firewall is enabled with the default policy set to block WAN to LAN traffic, you also need to enable the default WAN to LAN firewall rule that forwards NetBIOS traffic.
  • Page 114 P-334U/P-335U User’s Guide Chapter 7 LAN...
  • Page 115: Chapter 8 Dhcp Server

    P-334U/P-335U User’s Guide H A P T E R DHCP Server 8.1 DHCP DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individual clients to obtain TCP/IP configuration at start-up from a server. You can configure the ZyXEL Device as a DHCP server or disable it.
  • Page 116: Dhcp Server Advanced Screen

    P-334U/P-335U User’s Guide Table 40 DHCP Server General LABEL DESCRIPTION Apply Click Apply to save your changes back to the ZyXEL Device. Reset Click Reset to begin configuring this screen afresh. 8.3 DHCP Server Advanced Screen This screen allows you to assign IP addresses on the LAN to specific individual computers based on their MAC addresses.
  • Page 117: Client List Screen

    P-334U/P-335U User’s Guide The following table describes the labels in this screen. Table 41 DHCP Server Advanced LABEL DESCRIPTION This is the index number of the static IP table entry (row). MAC Address Type the MAC address (with colons) of a computer on your LAN.
  • Page 118: Figure 69 Client List

    P-334U/P-335U User’s Guide Figure 69 Client List The following table describes the labels in this screen. Table 42 Client List LABEL DESCRIPTION This is the index number of the host computer. IP Address This field displays the IP address relative to the # field listed above.
  • Page 119: Network Address Translation (Nat)

    P-334U/P-335U User’s Guide H A P T E R Network Address Translation (NAT) This chapter discusses how to configure NAT on the ZyXEL Device. 9.1 NAT Overview NAT (Network Address Translation - NAT, RFC 1631) is the translation of the IP address of a host in a packet.
  • Page 120: Configuring Servers Behind Port Forwarding (Example)

    P-334U/P-335U User’s Guide 9.2.2 Configuring Servers Behind Port Forwarding (Example) Let's say you want to assign ports 21-25 to one FTP, Telnet and SMTP server (A in the example), port 80 to another (B in the example) and assign a default server IP address of 192.168.1.35 to a third (C in the example).
  • Page 121: Nat Application Screen

    P-334U/P-335U User’s Guide The following table describes the labels in this screen. Table 43 NAT General LABEL DESCRIPTION Network Address Network Address Translation (NAT) allows the translation of an Internet protocol Translation address used within one network (for example a private IP address used in a local network) to a different IP address known within another network (for example a public IP address used on the Internet).
  • Page 122: Figure 72 Nat Application

    P-334U/P-335U User’s Guide Figure 72 NAT Application The following table describes the labels in this screen. Table 44 NAT Application LABEL DESCRIPTION Game List Update A game list includes the pre-defined service name(s) and port number(s). You can edit and upload it to the ZyXEL Device to replace the existing entries in the second field next to Service Name.
  • Page 123: Game List Example

    P-334U/P-335U User’s Guide Table 44 NAT Application (continued) LABEL DESCRIPTION Service Name Type a name (of up to 31 printable characters) to identify this rule in the first field next to Service Name. Otherwise, select a predefined service in the second field next to Service Name.
  • Page 124: Trigger Port Forwarding

    P-334U/P-335U User’s Guide Figure 73 Game List Example version=1 1;name=Battlefield 1942;port=14567,22000,23000-23009,27900,28900 2;name=Call of Duty;port=28960 3;name=Civilization IV;port=2056 4;name=Diablo I and II;port=6112-6119,4000 5;name=Doom 3;port=27666 6;name=F.E.A.R;port=27888 7;name=Final Fantasy XI;port=25,80,110,443,50000-65535 8;name=Guild Wars;port=6112,80 9;name=Half Life;port=6003,7002,27005,27010,27011,27015 10;name=Jedi Knight III: Jedi Academy;port=28060-28062,28070-28081 11;name=Need for Speed: Hot Pursuit 2;port=1230,8511- 8512,27900,28900,61200-61230 12;name=Neverwinter Nights;port=5120-5300,6500,27900,28900...
  • Page 125: Trigger Port Forwarding Example

    P-334U/P-335U User’s Guide 9.5.1 Trigger Port Forwarding Example The following is an example of trigger port forwarding. Figure 74 Trigger Port Forwarding Process: Example 1 Jane requests a file from the Real Audio server (port 7070). 2 Port 7070 is a “trigger” port and causes the ZyXEL Device to record Jane’s computer IP address.
  • Page 126: Figure 75 Nat Advanced

    P-334U/P-335U User’s Guide Figure 75 NAT Advanced The following table describes the labels in this screen. Table 45 NAT Advanced LABEL DESCRIPTION Max NAT/Firewall Type a number ranging from 1 to 2048 to limit the number of NAT/firewall sessions Session Per User that a host can create.
  • Page 127 P-334U/P-335U User’s Guide Table 45 NAT Advanced LABEL DESCRIPTION Incoming Incoming is a port (or a range of ports) that a server on the WAN uses when it sends out a particular service. The ZyXEL Device forwards the traffic with this port (or range of ports) to the client computer on the LAN that requested the service.
  • Page 128 P-334U/P-335U User’s Guide Chapter 9 Network Address Translation (NAT)
  • Page 129: Chapter 10 Dynamic Dns

    P-334U/P-335U User’s Guide H A P T E R Dynamic DNS 10.1 Dynamic DNS Introduction Dynamic DNS allows you to update your current dynamic IP address with one or many dynamic DNS services so that anyone can contact you (in NetMeeting, CU-SeeMe, etc.). You can also access your FTP server or Web site on your own computer using a domain name (for instance myhost.dhs.org, where myhost is a name of your choice) that will never change...
  • Page 130: Figure 76 Dynamic Dns

    P-334U/P-335U User’s Guide Figure 76 Dynamic DNS The following table describes the labels in this screen. Table 46 Dynamic DNS LABEL DESCRIPTION Enable Dynamic DNS Select this check box to use dynamic DNS. Service Provider Select the name of your Dynamic DNS service provider.
  • Page 131: Chapter 11 Firewall

    P-334U/P-335U User’s Guide H A P T E R Firewall This chapter gives some background information on firewalls and explains how to get started with the ZyXEL Device firewall. 11.1 Introduction to Firewall 11.1.1 What is a Firewall? Originally, the term firewall referred to a construction technique designed to prevent the spread of fire from one room to another.
  • Page 132: Guidelines For Enhancing Security With Your Firewall

    P-334U/P-335U User’s Guide The ZyXEL Device is installed between the LAN and a broadband modem connecting to the Internet. This allows it to act as a secure gateway for all data passing between the Internet and the LAN. The ZyXEL Device has one Ethernet WAN port and four Ethernet LAN ports, which are used to physically separate the network into two areas.The WAN (Wide Area Network) port...
  • Page 133: Services Screen

    P-334U/P-335U User’s Guide The following table describes the labels in this screen. Table 47 Firewall General LABEL DESCRIPTION Enable Firewall Select this check box to activate the firewall. The ZyXEL Device performs access control and protects against Denial of Service (DoS) attacks when the firewall is activated.
  • Page 134: Figure 78 Services

    P-334U/P-335U User’s Guide Figure 78 Services The following table describes the labels in this screen. Table 48 Firewall Services LABEL DESCRIPTION ICMP Internet Control Message Protocol is a message control and error-reporting protocol between a host server and a gateway to the Internet. ICMP uses Internet Protocol (IP) datagrams, but the messages are processed by the TCP/IP software and directly apparent to the application user.
  • Page 135 P-334U/P-335U User’s Guide Table 48 Firewall Services LABEL DESCRIPTION Do not respond to Select this option to prevent hackers from finding the ZyXEL Device by probing for requests for unused ports. If you select this option, the ZyXEL Device will not respond to port...
  • Page 136 P-334U/P-335U User’s Guide Chapter 11 Firewall...
  • Page 137: Chapter 12 Content Filtering

    P-334U/P-335U User’s Guide H A P T E R Content Filtering This chapter provides a brief overview of content filtering using the embedded web GUI. 12.1 Introduction to Content Filtering Internet content filtering allows you to create and enforce Internet access policies tailored to their needs.
  • Page 138: Figure 80 Content Filter: Filter

    P-334U/P-335U User’s Guide Figure 80 Content Filter: Filter The following table describes the labels in this screen. Table 49 Content Filter: Filter LABEL DESCRIPTION Trusted Computer To enable this feature, type an IP address of any one of the computers in your IP Address network that you want to have as a trusted computer.
  • Page 139: Schedule

    P-334U/P-335U User’s Guide Table 49 Content Filter: Filter LABEL DESCRIPTION Keyword Type a keyword in this field. You may use any character (up to 64 characters). Wildcards are not allowed. You can also enter a numerical IP address. Keyword List This list displays the keywords already added.
  • Page 140: Customizing Keyword Blocking Url Checking

    P-334U/P-335U User’s Guide The following table describes the labels in this screen. Table 50 Content Filter: Schedule LABEL DESCRIPTION Day to Block Select check boxes for the days that you want the ZyXEL Device to perform content filtering. Select the Everyday check box to have content filtering turned on all days of the week.
  • Page 141: File Name Url Checking

    P-334U/P-335U User’s Guide 12.6.3 File Name URL Checking Filename URL checking has the ZyXEL Device check all of the characters in the URL. For example, filename URL checking searches for keywords within the URL www.zyxel.com.tw/news/pressroom.php. Use the ip urlfilter customize actionFlags 8 [disable | enable] command to extend (or not extend) the keyword blocking search to include the URL's complete filename.
  • Page 142 P-334U/P-335U User’s Guide Chapter 12 Content Filtering...
  • Page 143: Trend Micro Home Network Security (Tmss)

    P-334U/P-335U User’s Guide H A P T E R Trend Micro Home Network Security (TMSS) This chapter provides instructions for installing and configuring Trend Micro Home Network Security, also known as “TMSS”. It includes the following sections: • Installing the Trend Micro Dashboard on page 144 •...
  • Page 144: Installing The Trend Micro Dashboard

    P-334U/P-335U User’s Guide 13.2 Installing the Trend Micro Dashboard Note: The Trend Micro dashboard requires Microsoft Internet Explorer version 5.5 or later. If you are using a non-Microsoft browser or an earlier version of Internet Explorer, please install Internet Explorer 5.5 or later before continuing.
  • Page 145: Installing The Trend Micro Dashboard: Troubleshooting

    P-334U/P-335U User’s Guide 4 After a few seconds, the Trend Micro dashboard appears (Figure 84). Note: If the dashboard screen does not appear, please refer to Section 13.2.1 on page 145. Figure 84 Trend Micro Dashboard) To start the Trend Micro dashboard in future, click Trend Micro Security Services in the Start menu or the icon in your browser’s toolbar.
  • Page 146: Activating Your Free Services

    P-334U/P-335U User’s Guide 3 Choose the following settings: Table 51 Internet Explorer Default Security Settings SETTING CHOOSE Download signed ActiveX controls Prompt Script ActiveX control marked safe for scripting Enable Run ActiveX controls and plug-ins Enable Java permissions High safety...
  • Page 147: Registering A Trend Micro Customer Account

    P-334U/P-335U User’s Guide 13.3.1 Registering a Trend Micro Customer Account To register a Trend Micro customer account: 1 Start the dashboard by clicking Trend Micro Security Services in the Start menu or the icon in your browser’s toolbar. The dashboard’s home screen appears...
  • Page 148: Figure 86 3 Steps Screen

    P-334U/P-335U User’s Guide Figure 86 3 Steps Screen 4 Click Next. The account registration screen appears (Figure 87 on page 148). Figure 87 Account Registration Screen Chapter 13 Trend Micro Home Network Security (TMSS)
  • Page 149: Installing Trend Micro Internet Security

    P-334U/P-335U User’s Guide 5 On the account registration screen, type your name, email address, and other required information, and then click Next. The Check Information screen appears. Note: If you already have a Trend Micro customer account, type your user ID and password, click Log in Now, and then click Next.
  • Page 150: Figure 88 Download Now Screen

    P-334U/P-335U User’s Guide Figure 88 Download Now Screen 4 Click Start Download & Install. A file download message box opens. 5 Click Run or Open, and then wait while Setup downloads the installation files. If a second message box opens asking “Do you want to run this software?”, click Run. After downloading the files, the Location to Save Files screen appears.
  • Page 151: Figure 89 Registration Information Screen

    P-334U/P-335U User’s Guide 8 Type your name, Trend Micro Internet Security serial number, and organization (optional). Click Next. The Installation Location screen appears. Note: When you activated your customer account, Trend Micro sent you an email message containing your Trend Micro Internet Security serial number.
  • Page 152: Registering Trend Micro Internet Security

    P-334U/P-335U User’s Guide Note: Use the same serial number each time you install Trend Micro Internet Security. You can install the program on up to ten computers using this serial number. 13.3.3 Registering Trend Micro Internet Security After installing Internet Security, register your software to get free updates to scanning components during the trial period, and free use of Parental Controls for one year.
  • Page 153: Tmss Settings

    P-334U/P-335U User’s Guide The Account Confirmed screen shows your Trend Micro Internet Security serial number and the expiration date of your trial subscription. To purchase an annual subscription now, click Upgrade Now. 13.4 TMSS Settings This section describes the following Trend Micro Home Network Security (TMSS) configuration screens: •...
  • Page 154: Exception List Screen

    P-334U/P-335U User’s Guide The following table describes the settings on this screen. Table 52 TMSS General Screen LABEL DESCRIPTION Enable Trend Micro Select this check box to enable Trend Micro Home Network Security on Security Services your ZyXEL Device. Enable Parental Controls Select this check box to enable this feature on your ZyXEL Device.
  • Page 155: Figure 92 Tmss: Exception List

    P-334U/P-335U User’s Guide Figure 92 TMSS: Exception List The following table describes the settings on this screen. Table 53 TMSS: Exception List LABEL DESCRIPTION Exclude computer(s) from displaying Trend Micro Home Network Security Services Computer(s) that will This box lists the ZyXEL Device LAN computers that will automatically display display Trend Micro the Trend Micro dashboard at the interval selected on the General screen.
  • Page 156: Virus Protection Screen

    P-334U/P-335U User’s Guide Table 53 TMSS: Exception List LABEL DESCRIPTION Include specified Select this radio button to enable Parental Controls only on the computers with address ranges in IP addresses listed in the Selected IP Addresses list box. the Parental Control enforcement.
  • Page 157: Parental Control Screen

    P-334U/P-335U User’s Guide Table 54 TMSS: Virus Protection LABEL DESCRIPTION IP Address This field displays the IP address of a TMSS client computer or the ZyXEL Device. Computer Name This field displays the host name of a TMSS client computer or the ZyXEL Device system name.
  • Page 158: Parents Override Password

    P-334U/P-335U User’s Guide 13.4.4.2 Parents Override Password This password allows mature users to view blocked web pages. You can also use it on the Trend Micro dashboard's Parental Controls screen to override Parental Controls for a specified period. In per-user control mode, select Parents as the user name to have full access to restricted web content.
  • Page 159: Figure 95 Parental Control Screen: Per-User Control Mode

    P-334U/P-335U User’s Guide Figure 95 Parental Control Screen: Per-User Control Mode The following table describes the labels on this screen. Table 55 Settings: Parental Control Screen LABEL DESCRIPTION Restrict Web Features Select the check boxes to restrict web features. When you download a page containing a restricted feature, that part of the web page will appear blank or grayed out.
  • Page 160: Configuring An Access Profile In General Control Mode

    P-334U/P-335U User’s Guide Table 55 Settings: Parental Control Screen LABEL DESCRIPTION Parents Override This password allows users to bypass Parental Control. Enter a password Password between four and 32 printable characters. Spaces are not allowed. Confirmed Password To change the override password, type the new password in the Parents Override Password field, retype it in the Confirmed Password field, and then click Apply.
  • Page 161: Configuring A Schedule

    P-334U/P-335U User’s Guide 3 Click Edit Category. In the Profile list box, choose the pre-defined access profile that will apply to all users. To create a custom profile, choose Custom and then select the check boxes for the categories you want to block. (For additional choices, click more categories).
  • Page 162: Configuring The User List In Per-User Mode

    P-334U/P-335U User’s Guide Figure 97 General Mode: Edit Schedule 13.4.7 Configuring the User List in Per-User Mode The User List in per-user control mode shows each user’s name and access profile. Active users (green light bulb) can access the websites permitted by their access profiles. Inactive users (gray light bulb) cannot log in and cannot access the Internet.
  • Page 163: Content Blocking Categories

    P-334U/P-335U User’s Guide Figure 98 Per-User Control Mode: Edit User List 13.4.8 Content Blocking Categories Trend Micro has defined twelve categories of potentially offensive websites. The following table summarizes the blocking criteria for each category. Table 56 Content Blocking Categories...
  • Page 164: Port Isolation

    P-334U/P-335U User’s Guide Table 56 Content Blocking Categories CATEGORY DESCRIPTION Gambling Sites at which users can place bets or participate in betting pools (including lotteries) online. Also includes sites that provide information, assistance, recommendations, or training on placing bets or participating in games of chance.
  • Page 165: Figure 99 Port Isolation Example

    P-334U/P-335U User’s Guide Figure 99 Port Isolation Example Click Security > TMSS > Port Isolation to display the screen as shown next. Figure 100 Port Isolation The following table describes the labels on this screen. Table 57 Port Isolation LABEL...
  • Page 166 P-334U/P-335U User’s Guide Table 57 Port Isolation LABEL DESCRIPTION Bypass Port Isolation Select the check box(es) of the interface(s) that are exempt from port isolation. Apply Click Apply to save the settings. Reset Click Reset to begin configuring this screen afresh.
  • Page 167: Chapter 14 Static Route Screens

    P-334U/P-335U User’s Guide H A P T E R Static Route Screens This chapter shows you how to configure static routes for your ZyXEL Device. 14.1 Static Route Overview Each remote node specifies only the network to which the gateway is directly connected, and the ZyXEL Device has no knowledge of the networks beyond.
  • Page 168: Ip Static Route Screen

    P-334U/P-335U User’s Guide 14.2 IP Static Route Screen Click Management > Static Route to open the IP Static Route screen. The following screen displays. Figure 102 IP Static Route The following table describes the labels in this screen. Table 58 IP Static Route...
  • Page 169: Static Route Setup Screen

    P-334U/P-335U User’s Guide 14.2.1 Static Route Setup Screen To edit a static route, click the edit icon under Modify. The following screen displays. Fill in the required information for each static route. Figure 103 Static Route Setup The following table describes the labels in this screen.
  • Page 170 P-334U/P-335U User’s Guide Chapter 14 Static Route Screens...
  • Page 171: Chapter 15 Bandwidth Management

    P-334U/P-335U User’s Guide H A P T E R Bandwidth Management This chapter contains information about configuring bandwidth management, editing rules and viewing the ZyXEL Device’s bandwidth management logs. 15.1 Bandwidth Management Overview ZyXEL’s Bandwidth Management allows you to specify bandwidth management rules based on an application and/or subnet.
  • Page 172: Subnet-Based Bandwidth Management

    P-334U/P-335U User’s Guide 15.3 Subnet-based Bandwidth Management You can create bandwidth classes based on subnets. The following figure shows LAN subnets. You could configure one bandwidth class for subnet A and another for subnet B. Figure 104 Subnet-based Bandwidth Management Example 15.4 Application and Subnet-based Bandwidth Management...
  • Page 173: Bandwidth Management Priorities

    P-334U/P-335U User’s Guide 15.5 Bandwidth Management Priorities The following table describes the priorities that you can apply to traffic that the ZyXEL Device forwards out through an interface. Table 61 Bandwidth Management Priorities PRIORITY LEVELS: TRAFFIC WITH A HIGHER PRIORITY GETS THROUGH FASTER WHILE TRAFFIC WITH A LOWER PRIORITY IS DROPPED IF THE NETWORK IS CONGESTED.
  • Page 174: Services And Port Numbers

    P-334U/P-335U User’s Guide Table 62 Media Bandwidth Management Setup: Services (continued) SERVICE DESCRIPTION MSN Webcam MSN messenger allows you to chat online and send instant messages. If you use MSN messenger and also have a webcam, you can send your image/photo in real-...
  • Page 175 P-334U/P-335U User’s Guide Table 63 Commonly Used Services SERVICE DESCRIPTION IPSEC_TUNNEL(ESP:0) The IPSEC ESP (Encapsulation Security Protocol) tunneling protocol uses this service. IRC(TCP/UDP:6667) This is another popular Internet chat program. MSN Messenger(TCP:1863) Microsoft Networks’ messenger service uses this protocol. MULTICAST(IGMP:0) Internet Group Multicast Protocol is used when sending packets to a specific group of hosts.
  • Page 176: Default Bandwidth Management Classes And Priorities

    P-334U/P-335U User’s Guide Table 63 Commonly Used Services SERVICE DESCRIPTION TELNET(TCP:23) Telnet is the login and terminal emulation protocol common on the Internet and in UNIX environments. It operates over TCP/IP networks. Its primary function is to allow users to log into remote host systems.
  • Page 177: Bandwidth Management General Configuration

    P-334U/P-335U User’s Guide 15.8 Bandwidth Management General Configuration Click Management > Bandwidth MGMT to open the bandwidth management General screen. Figure 105 Bandwidth Management: General The following table describes the labels in this screen. Table 65 Bandwidth Management: General LABEL...
  • Page 178: Bandwidth Management Advanced Configuration

    P-334U/P-335U User’s Guide 15.9 Bandwidth Management Advanced Configuration Click Management > Bandwidth MGMT > Advanced to open the bandwidth management Advanced screen. Figure 106 Bandwidth Management: Advanced Chapter 15 Bandwidth Management...
  • Page 179: Table 66 Bandwidth Management: Advanced

    P-334U/P-335U User’s Guide The following table describes the labels in this screen. Table 66 Bandwidth Management: Advanced LABEL DESCRIPTION Upstream Enter the amount of bandwidth in kbps (2 to 100,000) that you want to allocate for Bandwidth (kbps) traffic. 20 kbps to 20,000 kbps is recommended.
  • Page 180: Rule Configuration With The Pre-Defined Service

    P-334U/P-335U User’s Guide 15.9.1 Rule Configuration with the Pre-defined Service To edit a bandwidth management rule for the pre-defined service in the ZyXEL Device, click the Edit icon in the Application List table of the Advanced screen. The following screen displays.
  • Page 181: Rule Configuration With The User-Defined Service

    P-334U/P-335U User’s Guide 15.9.2 Rule Configuration with the User-defined Service In addition to the pre-defined services, if you want to edit a bandwidth management rule for other applications and/or subnets, click the Edit icon in the User-defined Service table of the Advanced screen.
  • Page 182: Bandwidth Management Monitor

    P-334U/P-335U User’s Guide 15.10 Bandwidth Management Monitor Click Management > Bandwidth MGMT > Monitor to open the bandwidth management Monitor screen. View the bandwidth usage of the WAN configured bandwidth rules. This is also shown as bandwidth usage over the bandwidth budget for each rule. The gray section of the bar represents the percentage of unused bandwidth and the blue color represents the percentage of bandwidth in use.
  • Page 183: Remote Management Screens

    P-334U/P-335U User’s Guide H A P T E R Remote Management Screens This chapter provides information on the Remote Management screens. 16.1 Remote Management Overview Remote management allows you to determine which services/protocols can access which ZyXEL Device interface (if any) from which computers.
  • Page 184: Remote Management And Nat

    P-334U/P-335U User’s Guide 3 There is already another remote management session with an equal or higher priority running. You may only have one remote management session running at one time. 4 There is a firewall rule that blocks it. 16.1.2 Remote Management and NAT When NAT is enabled: •...
  • Page 185: Telnet

    P-334U/P-335U User’s Guide Table 69 WWW Remote Management LABEL DESCRIPTION Secured Client IP A secured client is a “trusted” computer that is allowed to communicate with the Address ZyXEL Device using this service. Select All to allow any computer to access the ZyXEL Device using this service.
  • Page 186: Telnet Screen

    P-334U/P-335U User’s Guide 16.4 Telnet Screen To change your ZyXEL Device’s Telnet settings, click Management > Remote MGMT > Telnet. The following screen displays. Figure 112 Telnet Remote Management The following table describes the labels in this screen. Table 70 Telnet Remote Management...
  • Page 187: Dns Screen

    P-334U/P-335U User’s Guide To change your ZyXEL Device’s FTP settings, click Management > Remote MGMT > FTP. The screen appears as shown. Figure 113 FTP Remote Management The following table describes the labels in this screen. Table 71 FTP Remote Management...
  • Page 188: Figure 114 Dns Remote Management

    P-334U/P-335U User’s Guide To change your ZyXEL Device’s DNS settings, click Management > Remote MGMT > DNS. The screen appears as shown. Figure 114 DNS Remote Management The following table describes the labels in this screen. Table 72 DNS Remote Management...
  • Page 189: Chapter 17 Upnp

    P-334U/P-335U User’s Guide H A P T E R UP N P This chapter introduces the Universal Plug and Play feature. 17.1 Universal Plug and Play Overview Universal Plug and Play (UPnP) is a distributed, open networking standard that uses TCP/IP for simple peer-to-peer network connectivity between devices.
  • Page 190: Upnp And Zyxel

    P-334U/P-335U User’s Guide All UPnP-enabled devices may communicate freely with each other without additional configuration. Disable UPnP if this is not your intention. 17.2 UPnP and ZyXEL ZyXEL has achieved UPnP certification from the Universal Plug and Play Forum Creates UPnP™...
  • Page 191: Installing Upnp In Windows Example

    P-334U/P-335U User’s Guide The following table describes the labels in this screen. Table 73 Configuring UPnP LABEL DESCRIPTION Enable the Universal Select this checkbox to activate UPnP. Be aware that anyone could use a Plug and Play (UPnP) UPnP application to open the web configurator's login screen without entering...
  • Page 192: Installing Upnp In Windows Xp

    P-334U/P-335U User’s Guide 1 Click Start and Control Panel. Double- click Add/Remove Programs. 2 Click on the Windows Setup tab and select Communication in the Components selection box. Click Details. 3 In the Communications window, select the Universal Plug and Play check box in the Components selection box.
  • Page 193: Using Upnp In Windows Xp Example

    P-334U/P-335U User’s Guide 4 Select Networking Service in the Components selection box and click Details. 5 In the Networking Services window, select the Universal Plug and Play check box. 6 Click OK to go back to the Windows Optional Networking Component Wizard window and click Next.
  • Page 194: Web Configurator Easy Access

    P-334U/P-335U User’s Guide 3 In the Internet Connection Properties window, click Settings to see the port mappings that were automatically created. 4 You may edit or delete the port mappings or click Add to manually add port mappings. Note: When the UPnP-enabled device is disconnected from your computer, all port mappings will be deleted automatically.
  • Page 195: Web Configurator Easy Access

    P-334U/P-335U User’s Guide 1 Click Start and then Control Panel. 2 Double-click Network Connections. 3 Select My Network Places under Other Places. 4 An icon with the description for each UPnP-enabled device displays under Local Network. 5 Right-click the icon for your ZyXEL device and select Invoke.
  • Page 196 P-334U/P-335U User’s Guide 1 Click Start and then Control Panel. 2 Double-click Network Connections. 3 Select My Network Places under Other Places. 4 An icon with the description for each UPnP-enabled device displays under Local Network. 5 Right-click the icon for your ZyXEL device and select Invoke.
  • Page 197: Chapter 18 Print Server

    P-334U/P-335U User’s Guide H A P T E R Print Server This chapter discusses how to configure the print server on the ZyXEL Device. 18.1 Print Server Overview A print server is a device or software that provides users on a network with shared access to one or more printers.
  • Page 198: Print Server Screen

    P-334U/P-335U User’s Guide 18.3 Print Server Screen Click the Print Server link under Management to display the Print Server screen. Figure 116 Configuring Print Server The following table describes the labels in this screen. Table 74 Configuring Print Server LABEL...
  • Page 199: Print Server Driver Setup

    P-334U/P-335U User’s Guide H A P T E R Print Server Driver Setup This chapter shows you how to set up a print server driver for a Windows or Macintosh computer. 19.1 Installation Requirements To install the print server driver you will need the following requirements •...
  • Page 200: Print Server Driver Setup Wizard

    P-334U/P-335U User’s Guide 3 You can either • use the Setup Wizard for Windows NT/2000/XP to install the print monitor and open the setup wizard automatically • use the Setup Wizard for Windows 98/ME/NT/2000/XP to install the print monitor in a specified file location and open the setup wizard (by running the PSWizard.exe file in the...
  • Page 201: Figure 119 Network Print Server Setup Wizard: Welcome

    P-334U/P-335U User’s Guide 1 The Welcome screen displays. Click Next to continue. Figure 119 Network Print Server Setup Wizard: Welcome 2 The Select A Print Server screen displays. The wizard automatically detects whether or not a print server is connected to your computer. Make sure that your ZyXEL Device is correctly connected and a compatible USB printer is connected to the ZyXEL Device.
  • Page 202: Figure 121 Network Print Server Setup Wizard: Change Settings

    P-334U/P-335U User’s Guide 3 The Change Settings screen displays. If you want to change your print server’s IP address, select Yes, I want to change settings, leave the Password field blank and click Next. The print server’s IP address is the ZyXEL Device’s IP address. Since the wizard detects your print server’s IP address automatically, it’s recommended that you select...
  • Page 203: Figure 122 Network Print Server Setup Wizard: Select A Printer

    P-334U/P-335U User’s Guide 4 Select the USB printer that is connected to the ZyXEL Device if you have added it on your computer already and click Next. If your printer is not listed, click Add New Printer and see Section 19.2.2 on page 205 for how to add a printer on your computer.
  • Page 204: Figure 123 Network Print Server Setup Wizard: Summary

    P-334U/P-335U User’s Guide 5 A Summary screen displays. Check your settings and click Next to continue. Figure 123 Network Print Server Setup Wizard: Summary 6 Click Finish to save and close your Network Print Server Setup Wizard. Your print server driver setup is complete.
  • Page 205: Adding A New Printer

    P-334U/P-335U User’s Guide 19.2.2 Adding a New Printer 1 Click Add New Printer in the Network Print Server Setup Wizard: Select A Printer screen (see Figure 122 on page 203). A help dialog box pops up to guide you through the adding printer process.
  • Page 206: Figure 127 Add Printer Wizard: Local Or Network Printer

    P-334U/P-335U User’s Guide 3 Select Local printer and click Next. Figure 127 Add Printer Wizard: Local or Network Printer 4 Select an LPT (Line Printing Terminal) port (a parallel port) as the computer interface for the USB printer. Figure 128 Add Printer Wizard: Select the Printer Port...
  • Page 207: Figure 129 Add Printer Wizard: Printer Driver

    P-334U/P-335U User’s Guide 5 Select the make of the printer that you want to connect to the print server in the Manufacturers list of printers. 6 Select the printer model from the list of Printers. 7 If your printer is not displayed in the list of Printers, you can insert the printer driver installation CD/disk or download the driver file to your computer, click Have Disk…...
  • Page 208: Figure 131 Add Printer Wizard: Name Your Printer

    P-334U/P-335U User’s Guide 10 Type a name to identify the printer and then click Next to continue. Figure 131 Add Printer Wizard: Name Your Printer 11 The ZyXEL Device is a print server itself and you do not need to have your computer act as a print server by sharing the printer with other users in the same network;...
  • Page 209: Macintosh Os X

    P-334U/P-335U User’s Guide 12 Select Yes and then click the Next button if you want to print a test page. A pop-up screen displays to ask if the test page printed correctly. Otherwise select No and then click Next to continue.
  • Page 210: Figure 135 Macintosh Hd

    P-334U/P-335U User’s Guide 2 On your desktop, double-click the Macintosh HD icon to open the Macintosh HD window. Figure 135 Macintosh HD 3 Double-click the Applications folder. Macintosh HD folder Figure 136 4 Double-click the Utilities folder. Figure 137 Applications Folder 5 Double-click the Print Center icon.
  • Page 211: Figure 139 Printer List Folder

    P-334U/P-335U User’s Guide 6 Click the Add icon at the top of the screen. Figure 139 Printer List Folder 7 Set up your printer in the Printer List configuration screen. Select IP Printing from the drop-down list box. 8 In the Printer’s Address field, type the IP address of your ZyXEL Device.
  • Page 212: Figure 141 Printer Model

    P-334U/P-335U User’s Guide 12 Click Add to select a printer model, save and close the Printer List configuration screen. Figure 141 Printer Model 13 The Name LP1 on 192.168.1.1 displays in the Printer List field. The default printer Name displays in bold type.
  • Page 213 P-334U/P-335U User’s Guide Chapter 19 Print Server Driver Setup...
  • Page 214 P-334U/P-335U User’s Guide Chapter 19 Print Server Driver Setup...
  • Page 215: Chapter 20 System

    P-334U/P-335U User’s Guide H A P T E R System This chapter provides information on the System screens. 20.1 System Overview See the chapter about wizard setup for more information on the next few screens. 20.2 System General Screen Click Maintenance > System. The following screen displays.
  • Page 216: Time Setting Screen

    P-334U/P-335U User’s Guide The following table describes the labels in this screen. Table 75 System General LABEL DESCRIPTION System Name System Name is a unique name to identify the ZyXEL Device in an Ethernet network. It is recommended you enter your computer’s “Computer name” in this field (see the chapter about wizard setup for how to find your computer’s name).
  • Page 217: Figure 144 Time Setting

    P-334U/P-335U User’s Guide Figure 144 Time Setting The following table describes the labels in this screen. Table 76 Time Setting LABEL DESCRIPTION Current Time and Date Current Time This field displays the time of your ZyXEL Device. Each time you reload this page, the ZyXEL Device synchronizes the time with the time server.
  • Page 218 P-334U/P-335U User’s Guide Table 76 Time Setting LABEL DESCRIPTION New Date This field displays the last updated date from the time server or the last date configured manually. (yyyy/mm/dd) When you set Time and Date Setup to Manual, enter the new date in this field and then click Apply.
  • Page 219: Chapter 21 Logs

    P-334U/P-335U User’s Guide H A P T E R Logs This chapter contains information about configuring general log settings and viewing the ZyXEL Device’s logs. Refer to the appendices for example log message explanations. 21.1 View Log The web configurator allows you to look at all of the ZyXEL Device’s logs in one location.
  • Page 220: Log Settings

    P-334U/P-335U User’s Guide The following table describes the labels in this screen. Table 77 View Logs LABEL DESCRIPTION Display The categories that you select in the Log Settings page (see Section 21.2 on page 220) display in the drop-down list box.
  • Page 221: Figure 146 Log Settings

    P-334U/P-335U User’s Guide Figure 146 Log Settings The following table describes the labels in this screen. Table 78 Log Settings LABEL DESCRIPTION E-mail Log Settings Mail Server Enter the server name or the IP address of the mail server for the e-mail addresses specified below.
  • Page 222 P-334U/P-335U User’s Guide Table 78 Log Settings LABEL DESCRIPTION Send Log To The ZyXEL Device sends logs to the e-mail address specified in this field. If this field is left blank, the ZyXEL Device does not send logs via e-mail.
  • Page 223: Chapter 22 Tools

    P-334U/P-335U User’s Guide H A P T E R Tools This chapter shows you how to upload a new firmware, upload or save backup configuration files and restart the ZyXEL Device. 22.1 Firmware Upload Screen Find firmware at www.zyxel.com in a file that (usually) uses the system model name with a "*.bin"...
  • Page 224: Configuration Screen

    P-334U/P-335U User’s Guide After you see the Firmware Upload In Process screen, wait two minutes before logging into the ZyXEL Device again. Figure 148 Upload Warning The ZyXEL Device automatically restarts in this time causing a temporary network disconnect. In some operating systems, you may see the following icon on your desktop.
  • Page 225: Backup Configuration

    P-334U/P-335U User’s Guide Click Maintenance > Tools > Configuration. Information related to factory defaults, backup configuration, and restoring configuration appears as shown next. Figure 151 Configuration 22.2.1 Backup Configuration Backup configuration allows you to back up (save) the ZyXEL Device’s current configuration to a file on your computer.
  • Page 226: Back To Factory Defaults

    P-334U/P-335U User’s Guide Figure 152 Configuration Restore Successful The ZyXEL Device automatically restarts in this time causing a temporary network disconnect. In some operating systems, you may see the following icon on your desktop. Figure 153 Temporarily Disconnected If you uploaded the default configuration file you may need to change the IP address of your computer to be in the same subnet as that of the default ZyXEL Device IP address (192.168.1.1).
  • Page 227: Restart Screen

    P-334U/P-335U User’s Guide 22.3 Restart Screen System restart allows you to reboot the ZyXEL Device without turning the power off. Click Maintenance > Tools > Restart. Click Restart to have the ZyXEL Device reboot. This does not affect the ZyXEL Device's configuration.
  • Page 228 P-334U/P-335U User’s Guide Chapter 22 Tools...
  • Page 229: Chapter 23 Configuration Mode

    P-334U/P-335U User’s Guide H A P T E R Configuration Mode Click Maintenance > Config Mode to open the following screen. This screen allows you to hide or display the advanced screens of some feaures or the advanced features, such as MAC filter or static route.
  • Page 230 P-334U/P-335U User’s Guide Table 81 Config Mode: Advanced Screens CATEGORY LINK Management Static Route IP Static Route Bandwidth MGMT Advanced Monitor Remote MGMT Telnet Maintenance Logs Log Settings Chapter 23 Configuration Mode...
  • Page 231: Chapter 24 Troubleshooting

    P-334U/P-335U User’s Guide H A P T E R Troubleshooting This chapter covers potential problems and the corresponding remedies. 24.1 Problems Starting Up the ZyXEL Device Table 82 Troubleshooting Starting Up Your ZyXEL Device PROBLEM CORRECTIVE ACTION None of the Make sure that the ZyXEL Device’s power adaptor is connected to the ZyXEL Device...
  • Page 232: Problems With The Wan

    P-334U/P-335U User’s Guide 24.3 Problems with the WAN Table 84 Troubleshooting the WAN PROBLEM CORRECTIVE ACTION The WAN LED is Check the connections between the ZyXEL Device WAN port and the cable/DSL off. modem or ethernet jack. Check whether your cable/DSL device requires a crossover or straight-through cable.
  • Page 233: Problems Accessing The Zyxel Device

    P-334U/P-335U User’s Guide 24.4 Problems Accessing the ZyXEL Device Table 85 Troubleshooting Accessing the ZyXEL Device PROBLEM CORRECTIVE ACTION I cannot The username is “admin”. The default password is “1234”. The Password and access the Username fields are case-sensitive. Make sure that you enter the correct password ZyXEL Device.
  • Page 234: Table 87 Troubleshooting The Password

    P-334U/P-335U User’s Guide Table 86 Troubleshooting Restricted Web Pages and Keyword Blocking PROBLEM CORRECTIVE ACTION Parental Restart the device to clear the cache. Control is The content filter server may be unavailable. The View Logs screen can display configured content filtering log messages. See the Log Descriptions appendix for a list of possible correctly, but I log messages.
  • Page 235: Pop-Up Windows, Javascripts And Java Permissions

    P-334U/P-335U User’s Guide Problems with the Print Server Table 89 Troubleshooting the Print Server PROBLEM CORRECTIVE ACTION Cannot print Verify that the printer uses USB 1.1 or 1.0 by checking your printer's anything using the specifications. USB printer Make sure the USB printer is powered on and can work properly.
  • Page 236: Figure 158 Internet Options

    P-334U/P-335U User’s Guide You can also check if pop-up blocking is disabled in the Pop-up Blocker section in the Privacy tab. 1 In Internet Explorer, select Tools, Internet Options, Privacy. 2 Clear the Block pop-ups check box in the Pop-up Blocker section of the screen. This disables any web pop-up blockers you may have enabled.
  • Page 237: Figure 159 Internet Options

    P-334U/P-335U User’s Guide Figure 159 Internet Options 3 Type the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”. For example, http://192.168.1.1. 4 Click Add to move the IP address to the list of Allowed sites.
  • Page 238: Javascripts

    P-334U/P-335U User’s Guide Figure 160 Pop-up Blocker Settings 5 Click Close to return to the Privacy screen. 6 Click Apply to save this setting. 24.5.1.2 JavaScripts If pages of the web configurator do not display properly in Internet Explorer, check that JavaScripts are allowed.
  • Page 239: Figure 161 Internet Options

    P-334U/P-335U User’s Guide Figure 161 Internet Options 2 Click the Custom Level... button. 3 Scroll down to Scripting. 4 Under Active scripting make sure that Enable is selected (the default). 5 Under Scripting of Java applets make sure that Enable is selected (the default).
  • Page 240: Java Permissions

    P-334U/P-335U User’s Guide Figure 162 Security Settings - Java Scripting 24.5.1.3 Java Permissions 1 From Internet Explorer, click Tools, Internet Options and then the Security tab. 2 Click the Custom Level... button. 3 Scroll down to Microsoft VM. 4 Under Java permissions make sure that a safety level is selected.
  • Page 241: Figure 163 Security Settings - Java

    P-334U/P-335U User’s Guide Figure 163 Security Settings - Java 24.5.1.3.1 JAVA (Sun) 1 From Internet Explorer, click Tools, Internet Options and then the Advanced tab. 2 Make sure that Use Java 2 for <applet> under Java (Sun) is selected. 3 Click OK to close the window.
  • Page 242: Activex Controls In Internet Explorer

    P-334U/P-335U User’s Guide Figure 164 Java (Sun) 24.5.2 ActiveX Controls in Internet Explorer If ActiveX is disabled, you will not be able to download ActiveX controls or to use Trend Micro Security Serivces. Make sure that ActiveX controls are allowed in Internet Explorer.
  • Page 243: Figure 165 Internet Options Security

    P-334U/P-335U User’s Guide Figure 165 Internet Options Security 3 Scroll down to ActiveX controls and plug-ins. 4 Under Download signed ActiveX controls select the Prompt radio button. 5 Under Run ActiveX controls and plug-ins make sure the Enable radio button is selected.
  • Page 244: Figure 166 Security Setting Activex Controls

    P-334U/P-335U User’s Guide Figure 166 Security Setting ActiveX Controls Chapter 24 Troubleshooting...
  • Page 245: Print Server Specifications

    P-334U/P-335U User’s Guide P P E N D I X Print Server Specifications This appendix provides details on the print server interface and system requirements. Table 90 Print Server Interface PRINT SERVER INTERFACE USB 1.1 (full speed) - compliant port, 1.5Mbps (low speed) and 12Mbps (full speed) data transmission rates.
  • Page 246: Table 92 Compatible Usb Printers

    P-334U/P-335U User’s Guide ZyXEL Device Print Server Compatible USB Printers The following is a list of USB printer models compatible with the ZyXEL Device print server. Table 92 Compatible USB Printers BRAND MODEL TYPE REMARK BJ F9000 CANON Inkjet i2355...
  • Page 247 P-334U/P-335U User’s Guide Table 92 Compatible USB Printers BRAND MODEL TYPE REMARK MP-130 CANON Aculaser C1900 EPSON Color Laser EPL-6100 EPSON Laser Disable bi-directional support on printer. Stylus C20 EPSON Inkjet Disable bi-directional support on printer. Stylus C20SX EPSON Inkjet Disable bi-directional support on printer.
  • Page 248 P-334U/P-335U User’s Guide Table 92 Compatible USB Printers BRAND MODEL TYPE REMARK DeskJet 5550 Inkjet DeskJet 810C Inkjet DeskJet 845C Inkjet DeskJet 920C Inkjet Deskjet 1180c Inkjet DeskJet 930C Inkjet LaserJet 1200 Laser Disable bi-directional support on printer. LaserJet 1220 Laser Disable bi-directional support on printer.
  • Page 249 P-334U/P-335U User’s Guide Table 92 Compatible USB Printers BRAND MODEL TYPE REMARK FS-1920 KYOCERA Laser KONICA PagePro 1350W Laser MINOLTA C750 LEXMARK Color Laser E210 LEXMARK Laser E322 LEXMARK Laser T420 LEXMARK Laser T620 LEXMARK Laser W812 LEXMARK Laser LEXMARK...
  • Page 250 P-334U/P-335U User’s Guide Appendix A Print Server Specifications...
  • Page 251: Setting Up Your Computer's Ip Address

    P-334U/P-335U User’s Guide P P E N D I X Setting up Your Computer’s IP Address All computers must have a 10M or 100M Ethernet adapter card and TCP/IP installed. Windows 95/98/Me/NT/2000/XP, Macintosh OS 7 and later operating systems and all versions of UNIX/LINUX include the software components you need to install and use TCP/ IP on your computer.
  • Page 252: Figure 167 Windows 95/98/Me: Network: Configuration

    P-334U/P-335U User’s Guide Figure 167 WIndows 95/98/Me: Network: Configuration Installing Components The Network window Configuration tab displays a list of installed components. You need a network adapter, the TCP/IP protocol and Client for Microsoft Networks. If you need the adapter: 1 In the Network window, click Add.
  • Page 253: Figure 168 Windows 95/98/Me: Tcp/Ip Properties: Ip Address

    P-334U/P-335U User’s Guide 3 Select Microsoft from the list of manufacturers. 4 Select Client for Microsoft Networks from the list of network clients and then click 5 Restart your computer so the changes you made take effect. Configuring 1 In the Network window Configuration tab, select your network adapter's TCP/IP entry and click Properties 2 Click the IP Address tab.
  • Page 254: Figure 169 Windows 95/98/Me: Tcp/Ip Properties: Dns Configuration

    P-334U/P-335U User’s Guide Figure 169 Windows 95/98/Me: TCP/IP Properties: DNS Configuration 4 Click the Gateway tab. • If you do not know your gateway’s IP address, remove previously installed gateways. • If you have a gateway IP address, type it in the New gateway field and click Add.
  • Page 255: Figure 170 Windows Xp: Start Menu

    P-334U/P-335U User’s Guide Figure 170 Windows XP: Start Menu 2 In the Control Panel, double-click Network Connections (Network and Dial-up Connections in Windows 2000/NT). Figure 171 Windows XP: Control Panel 3 Right-click Local Area Connection and then click Properties. Appendix B Setting up Your Computer’s IP Address...
  • Page 256: Figure 172 Windows Xp: Control Panel: Network Connections: Properties

    P-334U/P-335U User’s Guide Figure 172 Windows XP: Control Panel: Network Connections: Properties 4 Select Internet Protocol (TCP/IP) (under the General tab in Win XP) and then click Properties. Figure 173 Windows XP: Local Area Connection Properties 5 The Internet Protocol TCP/IP Properties window opens (the General tab in Windows XP).
  • Page 257: Figure 174 Windows Xp: Internet Protocol (Tcp/Ip) Properties

    P-334U/P-335U User’s Guide • If you have a static IP address click Use the following IP Address and fill in the IP address, Subnet mask, and Default gateway fields. • Click Advanced. Figure 174 Windows XP: Internet Protocol (TCP/IP) Properties 6 If you do not know your gateway's IP address, remove any previously installed gateways in the IP Settings tab and click OK.
  • Page 258: Figure 175 Windows Xp: Advanced Tcp/Ip Properties

    P-334U/P-335U User’s Guide Figure 175 Windows XP: Advanced TCP/IP Properties 7 In the Internet Protocol TCP/IP Properties window (the General tab in Windows XP): • Click Obtain DNS server address automatically if you do not know your DNS server IP address(es).
  • Page 259: Figure 176 Windows Xp: Internet Protocol (Tcp/Ip) Properties

    P-334U/P-335U User’s Guide Figure 176 Windows XP: Internet Protocol (TCP/IP) Properties 8 Click OK to close the Internet Protocol (TCP/IP) Properties window. 9 Click Close (OK in Windows 2000/NT) to close the Local Area Connection Properties window. 10 Close the Network Connections window (Network and Dial-up Connections in Windows 2000/NT).
  • Page 260: Figure 177 Macintosh Os 8/9: Apple Menu

    P-334U/P-335U User’s Guide Figure 177 Macintosh OS 8/9: Apple Menu 2 Select Ethernet built-in from the Connect via list. Figure 178 Macintosh OS 8/9: TCP/IP 3 For dynamically assigned settings, select Using DHCP Server from the Configure: list. Appendix B Setting up Your Computer’s IP Address...
  • Page 261: Figure 179 Macintosh Os X: Apple Menu

    P-334U/P-335U User’s Guide 4 For statically assigned settings, do the following: • From the Configure box, select Manually. • Type your IP address in the IP Address box. • Type your subnet mask in the Subnet mask box. • Type the IP address of your ZyXEL Device in the Router address box.
  • Page 262: Figure 180 Macintosh Os X: Network

    P-334U/P-335U User’s Guide Figure 180 Macintosh OS X: Network 4 For statically assigned settings, do the following: • From the Configure box, select Manually. • Type your IP address in the IP Address box. • Type your subnet mask in the Subnet mask box.
  • Page 263: Figure 181 Red Hat 9.0: Kde: Network Configuration: Devices

    P-334U/P-335U User’s Guide Note: Make sure you are logged in as the root administrator. Using the K Desktop Environment (KDE) Follow the steps below to configure your computer IP address using the KDE. 1 Click the Red Hat button (located on the bottom left corner), select System Setting and click Network.
  • Page 264: Figure 183 Red Hat 9.0: Kde: Network Configuration: Dns

    P-334U/P-335U User’s Guide • If you have a dynamic IP address click Automatically obtain IP address settings with and select dhcp from the drop down list. • If you have a static IP address click Statically set IP Addresses and fill in the Address, Subnet mask, and Default Gateway Address fields.
  • Page 265: Figure 185 Red Hat 9.0: Dynamic Ip Address Setting In Ifconfig-Eth0

    P-334U/P-335U User’s Guide 1 Assuming that you have only one network card on the computer, locate the ifconfig- configuration file (where is the name of the Ethernet card). Open the eth0 eth0 configuration file with any plain text editor. •...
  • Page 266: Figure 188 Red Hat 9.0: Restart Ethernet Card

    P-334U/P-335U User’s Guide Figure 188 Red Hat 9.0: Restart Ethernet Card [root@localhost init.d]# network restart Shutting down interface eth0: [OK] Shutting down loopback interface: [OK] Setting network parameters: [OK] Bringing up loopback interface: [OK] Bringing up interface eth0: [OK] Verifying Settings Enter in a terminal screen to check your TCP/IP properties.
  • Page 267: Appendix Cip Subnetting

    P-334U/P-335U User’s Guide P P E N D I X IP Subnetting IP Addressing Routers “route” based on the network number. The router that delivers the data packet to the correct destination host uses the host ID. IP Classes An IP address is made up of four octets (eight bits), written in dotted decimal notation, for example, 192.168.1.1.
  • Page 268: Table 94 Allowed Ip Address Range By Class

    P-334U/P-335U User’s Guide Since the first octet of a class “A” IP address must contain a “0”, the first octet of a class “A” address can have a value of 0 to 127. Similarly the first octet of a class “B” must begin with “10”, therefore the first octet of a class “B”...
  • Page 269: Table 96 Alternative Subnet Mask Notation

    P-334U/P-335U User’s Guide Since the mask is always a continuous number of ones beginning from the left, followed by a continuous number of zeros for the remainder of the 32 bit mask, you can simply specify the number of ones instead of writing the value of each octet. This is usually specified by writing a “/”...
  • Page 270: Table 98 Subnet 1

    P-334U/P-335U User’s Guide Note: In the following charts, shaded/bolded last octet bit values indicate host ID bits “borrowed” to form network ID bits. The number of “borrowed” host ID bits determines the number of subnets you can have. The remaining number of host ID bits (after “borrowing”) determines the number of hosts you can have...
  • Page 271: Table 100 Subnet 1

    P-334U/P-335U User’s Guide Example: Four Subnets The above example illustrated using a 25-bit subnet mask to divide a class “C” address space into two subnets. Similarly to divide a class “C” address into four subnets, you need to “borrow” two host ID bits to give four possible combinations of 00, 01, 10 and 11. The subnet mask is 26 bits (11111111.11111111.11111111.11000000) or 255.255.255.192.
  • Page 272: Table 103 Subnet 4

    P-334U/P-335U User’s Guide Table 103 Subnet 4 IP/SUBNET MASK NETWORK NUMBER LAST OCTET BIT VALUE IP Address 192.168.1. IP Address (Binary) 11000000.10101000.00000001. 11000000 Subnet Mask (Binary) 11111111.11111111.11111111. 11000000 Subnet Address: Lowest Host ID: 192.168.1.193 192.168.1.192 Broadcast Address: Highest Host ID: 192.168.1.254 192.168.1.255...
  • Page 273: Table 106 Class B Subnet Planning

    P-334U/P-335U User’s Guide Subnetting With Class A and Class B Networks. For class “A” and class “B” addresses the subnet mask also determines which bits are part of the network number and which are part of the host ID. A class “B” address has two host ID octets available for subnetting and a class “A” address has...
  • Page 274 P-334U/P-335U User’s Guide Appendix C IP Subnetting...
  • Page 275: Wireless Lans

    P-334U/P-335U User’s Guide P P E N D I X Wireless LANs Wireless LAN Topologies This section discusses ad-hoc and infrastructure wireless LAN topologies. Ad-hoc Wireless LAN Configuration The simplest WLAN configuration is an independent (Ad-hoc) WLAN that connects a set of computers with wireless adapters (A, B, C).
  • Page 276: Figure 191 Basic Service Set

    P-334U/P-335U User’s Guide Figure 191 Basic Service Set An Extended Service Set (ESS) consists of a series of overlapping BSSs, each containing an access point, with each access point connected together by a wired network. This wired connection between APs is called a Distribution System (DS).
  • Page 277: Figure 192 Infrastructure Wlan

    P-334U/P-335U User’s Guide Figure 192 Infrastructure WLAN Channel A channel is the radio frequency(ies) used by IEEE 802.11a/b/g wireless devices. Channels available depend on your geographical area. You may have a choice of channels (for your region) so you should use a different channel than an adjacent AP (access point) to reduce interference.
  • Page 278: Figure 193 Rts/Cts

    P-334U/P-335U User’s Guide Figure 193 RTS/CTS When station A sends data to the AP, it might not know that the station B is already using the channel. If these two stations send data at the same time, collisions may occur when both sets of data arrive at the AP at the same time, resulting in a loss of messages for both stations.
  • Page 279: Table 107 Ieee 802.11G

    P-334U/P-335U User’s Guide A large Fragmentation Threshold is recommended for networks not prone to interference while you should set a smaller threshold for busy networks or networks that are prone to interference. If the Fragmentation Threshold value is smaller than the RTS/CTS value (see previously) you set then the RTS (Request To Send)/CTS (Clear to Send) handshake will never occur as data frames will be fragmented before they reach RTS/CTS size.
  • Page 280: Table 108 Wireless Security Levels

    P-334U/P-335U User’s Guide Wireless Security Overview Wireless security is vital to your network to protect wireless communication between wireless clients, access points and the wired network. Wireless security methods available on the Prestige are data encryption, wireless client authentication, restricting access by device MAC address and hiding the Prestige identity.
  • Page 281: Types Of Radius Messages

    P-334U/P-335U User’s Guide • Authentication Determines the identity of the users. • Authorization Determines the network services available to authenticated users once they are connected to the network. • Accounting Keeps track of the client’s network activity. RADIUS is a simple package exchange in which your AP acts as a message relay between the wireless client and the network RADIUS server.
  • Page 282: Types Of Authentication

    P-334U/P-335U User’s Guide Types of Authentication This section discusses some popular authentication types: EAP-MD5, EAP-TLS, EAP- TTLS, PEAP and LEAP. The type of authentication you use depends on the RADIUS server or the AP. Consult your network administrator for more information.
  • Page 283: Table 109 Comparison Of Eap Authentication Types

    P-334U/P-335U User’s Guide LEAP LEAP (Lightweight Extensible Authentication Protocol) is a Cisco implementation of IEEE 802.1x. Dynamic WEP Key Exchange The AP maps a unique key that is generated with the RADIUS server. This key expires when the wireless connection times out, disconnects or reauthentication times out. A new WEP key is generated each time reauthentication is performed.
  • Page 284 P-334U/P-335U User’s Guide If both an AP and the wireless clients support WPA2 and you have an external RADIUS server, use WPA2 for stronger data encryption. If you don't have an external RADIUS server, you should use WPA2-PSK (WPA2-Pre-Shared Key) that only requires a single (identical) password entered into each access point, wireless gateway and wireless client.
  • Page 285: Wireless Client Wpa Supplicants

    P-334U/P-335U User’s Guide User Authentication WPA and WPA2 apply IEEE 802.1x and Extensible Authentication Protocol (EAP) to authenticate wireless clients using an external RADIUS database. WPA2 reduces the number of key exchange messages from six to four (CCMP 4-way handshake) and shortens the time required to connect to a network.
  • Page 286: Figure 194 Wpa(2) With Radius Application Example

    P-334U/P-335U User’s Guide Figure 194 WPA(2) with RADIUS Application Example WPA(2)-PSK Application Example A WPA(2)-PSK application looks as follows. 1 First enter identical passwords into the AP and all wireless clients. The Pre-Shared Key (PSK) must consist of between 8 and 63 ASCII characters or 64 hexadecimal characters (including spaces and symbols).
  • Page 287: Table 110 Wireless Security Relational Matrix

    P-334U/P-335U User’s Guide Security Parameters Summary Refer to this table to see what other security parameters you should configure for each Authentication Method/ key management protocol type. MAC address filters are not dependent on how you configure these security features.
  • Page 288 P-334U/P-335U User’s Guide Appendix D Wireless LANs...
  • Page 289: Table 111 System Maintenance Logs

    P-334U/P-335U User’s Guide P P E N D I X Log Descriptions This appendix provides descriptions of example log messages. Table 111 System Maintenance Logs LOG MESSAGE DESCRIPTION The router has adjusted its time based on information from the Time calibration is time server.
  • Page 290: Table 112 System Error Logs

    P-334U/P-335U User’s Guide Table 111 System Maintenance Logs (continued) LOG MESSAGE DESCRIPTION Someone has logged on to the router's web configurator Successful HTTPS login interface using HTTPS protocol. Someone has failed to log on to the router's web configurator HTTPS login failed interface using HTTPS protocol.
  • Page 291: Table 114 Tcp Reset Logs

    P-334U/P-335U User’s Guide Table 114 TCP Reset Logs LOG MESSAGE DESCRIPTION The router sent a TCP reset packet when a host was under a SYN Under SYN flood attack, flood attack (the TCP incomplete count is per destination host.) sent TCP RST...
  • Page 292: Table 116 Icmp Logs

    P-334U/P-335U User’s Guide Table 116 ICMP Logs LOG MESSAGE DESCRIPTION ICMP access matched the default policy and was blocked Firewall default policy: ICMP or forwarded according to the user's setting. For type and <Packet Direction>, <type:%d>, code details, see Table 128 on page 301.
  • Page 293: Table 119 Upnp Logs

    P-334U/P-335U User’s Guide Table 118 PPP Logs (continued) LOG MESSAGE DESCRIPTION The PPP connection’s Link Control Protocol stage is closing. ppp:LCP Closing The PPP connection’s Internet Protocol Control Protocol stage is closing. ppp:IPCP Closing Table 119 UPnP Logs LOG MESSAGE DESCRIPTION UPnP packets can pass through the firewall.
  • Page 294: Table 121 Attack Logs

    P-334U/P-335U User’s Guide Table 120 Content Filtering Logs (continued) LOG MESSAGE DESCRIPTION The connection to the external content filtering server failed. Connecting to content filter server fail License key is invalid The external content filtering license key is invalid. Table 121 Attack Logs...
  • Page 295: Table 122 Ipsec Logs

    P-334U/P-335U User’s Guide Table 122 IPSec Logs LOG MESSAGE DESCRIPTION The router received and discarded a packet with an incorrect Discard REPLAY packet sequence number. The router received a packet that has been altered. A third party may Inbound packet have altered or tampered with the packet.
  • Page 296 P-334U/P-335U User’s Guide Table 123 IKE Logs (continued) LOG MESSAGE DESCRIPTION The router couldn’t resolve the IP address from the domain Cannot resolve Secure Gateway name that was used for the secure gateway address. Addr for rule <%d> The displayed ID information did not match between the two Peer ID: <peer id>...
  • Page 297 P-334U/P-335U User’s Guide Table 123 IKE Logs (continued) LOG MESSAGE DESCRIPTION The router was not able to use extended authentication to XAUTH fail! Username: authenticate the listed username. <Username> The listed rule’s IKE phase 1 negotiation mode did not match Rule[%d] Phase 1 negotiation between the router and the peer.
  • Page 298: Table 124 Pki Logs

    P-334U/P-335U User’s Guide Table 123 IKE Logs (continued) LOG MESSAGE DESCRIPTION The listed rule’s IKE phase 2 did not match between the router Rule [%d] phase 2 mismatch and the peer. The listed rule’s IKE phase 2 key lengths (with the AES...
  • Page 299: Table 125 Certificate Path Verification Failure Reason Codes

    P-334U/P-335U User’s Guide Table 124 PKI Logs (continued) LOG MESSAGE DESCRIPTION The router received directory data that was too large (the size is listed) Rcvd data <size> too from the LDAP server whose address and port are recorded in the large! Max size Source field.
  • Page 300: Table 126 802.1X Logs

    P-334U/P-335U User’s Guide Table 125 Certificate Path Verification Failure Reason Codes (continued) CODE DESCRIPTION Database method failed. Path was not verified. Maximum path length reached. Table 126 802.1X Logs LOG MESSAGE DESCRIPTION A user was authenticated by the local user database.
  • Page 301: Table 127 Acl Setting Notes

    P-334U/P-335U User’s Guide Table 127 ACL Setting Notes PACKET DIRECTION DIRECTION DESCRIPTION (L to W) LAN to WAN ACL set for packets traveling from the LAN to the WAN. (W to L) WAN to LAN ACL set for packets traveling from the WAN to the LAN.
  • Page 302: Table 129 Syslog Logs

    P-334U/P-335U User’s Guide Table 128 ICMP Notes (continued) TYPE CODE DESCRIPTION Time Exceeded Time to live exceeded in transit Fragment reassembly time exceeded Parameter Problem Pointer indicates the error Timestamp Timestamp request message Timestamp Reply Timestamp reply message Information Request...
  • Page 303: Figure 196 Displaying Log Categories Example

    ZyXEL Device is to record. 2 Use sys logs category to view a list of the log categories. Figure 196 Displaying Log Categories Example Copyright (c) 1994 - 2004 ZyXEL Communications Corp. ras>? Valid commands are: exit...
  • Page 304: Displaying Logs

    P-334U/P-335U User’s Guide Use 0 to not record logs for that category, 1 to record only logs for that category, 2 to record only alerts for that category, and 3 to record both logs and alerts for that category. Not every parameter is available with every category.
  • Page 305: Table 131 Examples Of Services

    P-334U/P-335U User’s Guide P P E N D I X Services The following table lists some commonly-used services and their associated protocols and port numbers. • Name: This is a short, descriptive name for the service. You can use this one or create a different one, if you like.
  • Page 306 P-334U/P-335U User’s Guide Table 131 Examples of Services (continued) NAME PROTOCOL PORT(S) DESCRIPTION HTTP Hyper Text Transfer Protocol - a client/ server protocol for the world wide web. HTTPS HTTPS is a secured http session often used in e-commerce. ICMP...
  • Page 307 P-334U/P-335U User’s Guide Table 131 Examples of Services (continued) NAME PROTOCOL PORT(S) DESCRIPTION RCMD Remote Command Service. REAL_AUDIO 7070 A streaming audio service that enables real time sound over the web. REXEC Remote Execution Daemon. RLOGIN Remote Login. ROADRUNNER TCP/UDP...
  • Page 308 P-334U/P-335U User’s Guide Appendix F Services...
  • Page 309: Appendix G Internal Sptgen

    P-334U/P-335U User’s Guide P P E N D I X Internal SPTGEN This appendix introduces Internal SPTGEN. All menus shown in this appendix are example menus meant to show SPTGEN usage. Actual menus for your product may differ. Internal SPTGEN Overview Internal SPTGEN (System Parameter Table Generator) is a configuration text file useful for efficient configuration of multiple Prestiges.
  • Page 310: Figure 199 Invalid Parameter Entered: Command Line Example

    P-334U/P-335U User’s Guide Internal SPTGEN File Modification - Important Points to Remember Each parameter you enter must be preceded by one “=”sign and one space. Some parameters are dependent on others. For example, if you disable the Configured field in...
  • Page 311: Figure 201 Internal Sptgen Ftp Download Example

    P-334U/P-335U User’s Guide Figure 201 Internal SPTGEN FTP Download Example c:\ftp 192.168.1.1 220 PPP FTP version 1.0 ready at Sat Jan 1 03:22:12 2000 User (192.168.1.1:(none)): 331 Enter PASS command Password: 230 Logged in ftp>bin 200 Type I OK ftp> get rom-t ftp>bye...
  • Page 312: Table 132 Abbreviations Used In The Example Internal Sptgen Screens Table

    P-334U/P-335U User’s Guide Example Internal SPTGEN Menus This section provides example Internal SPTGEN menus. Table 132 Abbreviations Used in the Example Internal SPTGEN Screens Table ABBREVIATION MEANING Field Identification Number Field Name Parameter Values Allowed INPUT An example of what you may enter Applies to the Prestige.
  • Page 313 P-334U/P-335U User’s Guide Table 134 Menu 3 30100012 = Output protocol filters Set 4 = 256 30100013 = Output device filters Set 1 = 256 30100014 = Output device filters Set 2 = 256 30100015 = Output device filters Set 3...
  • Page 314 P-334U/P-335U User’s Guide Table 134 Menu 3 30201005 = Version <0(Rip-1) | 1(Rip-2B) |2(Rip-2M)> 30201006 = IP Alias #1 Incoming protocol filters = 256 Set 1 30201007 = IP Alias #1 Incoming protocol filters = 256 Set 2 30201008 =...
  • Page 315 P-334U/P-335U User’s Guide Table 134 Menu 3 INPUT 30500001 = ESSID Wireless 30500002 = Hide ESSID <0(No) | 1(Yes)> 30500003 = Channel ID <1|2|3|4|5|6|7 |8|9|10|11|12| 13> 30500004 = RTS Threshold <0 ~ 2432> = 2432 30500005 = FRAG. Threshold <256 ~ 2432>...
  • Page 316: Table 135 Menu 4 Internet Access Setup

    P-334U/P-335U User’s Guide Table 135 Menu 4 Internet Access Setup / Menu 4 Internet Access Setup INPUT 40000000 = Configured <0(No) | 1(Yes)> 40000001 = <0(No) | 1(Yes)> 40000002 = Active <0(No) | 1(Yes)> 40000003 = ISP's Name = ChangeMe...
  • Page 317: Table 136 Menu 12

    P-334U/P-335U User’s Guide Table 135 Menu 4 Internet Access Setup (continued) 40000027 = ATM QoS Type <0(CBR) | (1 (UBR)> 40000028 = Peak Cell Rate (PCR) 40000029 = Sustain Cell Rate (SCR) 40000030 = Maximum Burst Size(MBS) 40000031= RIP Direction <0(None) |...
  • Page 318: Table 137 Menu 15 Sua Server Setup

    P-334U/P-335U User’s Guide Table 137 Menu 15 SUA Server Setup / Menu 15 SUA Server Setup INPUT 150000001 = SUA Server IP address for default = 0.0.0.0 port 150000002 = SUA Server #2 Active <0(No) | 1(Yes)> 150000003 = SUA Server #2 Protocol <0(All)|6(TCP)|17(U...
  • Page 319: Table 138 Menu 21.1 Filter Set #1

    P-334U/P-335U User’s Guide Table 137 Menu 15 SUA Server Setup (continued) 150000031 = SUA Server #7 Local IP address = 0.0.0.0 150000032 = SUA Server #8 Active <0(No) | 1(Yes)> 150000033 = SUA Server #8 Protocol <0(All)|6(TCP)|17(U DP)> 150000034 =...
  • Page 320 P-334U/P-335U User’s Guide Table 138 Menu 21.1 Filter Set #1 (continued) 210101002 = IP Filter Set 1,Rule 1 Active <0(No)|1(Yes)> 210101003 = IP Filter Set 1,Rule 1 Protocol 210101004 = IP Filter Set 1,Rule 1 Dest IP address = 0.0.0.0...
  • Page 321: Table 139 Menu 21.1 Filer Set #2

    P-334U/P-335U User’s Guide Table 138 Menu 21.1 Filter Set #1 (continued) 210102013 = IP Filter Set 1,Rule 2 Act Match <1(check next)|2(forward)| 3(drop)> 210102014 = IP Filter Set 1,Rule 2 Act Not Match <1(check next)|2(forward)| 3(drop)> Table 139 Menu 21.1 Filer Set #2, / Menu 21.1 filter set #2,...
  • Page 322: Table 140 Menu 23 System Menus

    P-334U/P-335U User’s Guide Table 139 Menu 21.1 Filer Set #2, (continued) 210202001 = IP Filter Set 2, Rule 2 Type <0(none)|2(TCP/IP)> = 2 210202002 = IP Filter Set 2, Rule 2 Active <0(No)|1(Yes)> 210202003 = IP Filter Set 2, Rule 2 Protocol...
  • Page 323: Table 141 Menu 24.11 Remote Management Control

    P-334U/P-335U User’s Guide Table 140 Menu 23 System Menus (continued) 230200005 = Authentication Server Shared Secret 111111111111 111111111111 1111 230200006 = Accounting Server Configured <0(No) | 1(Yes)> 230200007 = Accounting Server Active <0(No) | 1(Yes)> 230200008 = Accounting Server IP Address 192.168.1.44...
  • Page 324: Table 142 Command Examples

    P-334U/P-335U User’s Guide Table 141 Menu 24.11 Remote Management Control (continued) 241100002 = TELNET Server Access <0(all)|1(none)|2(L an)|3(Wan)> 241100003 = TELNET Server Secured IP address = 0.0.0.0 241100004 = FTP Server Port = 21 241100005 = FTP Server Access <0(all)|1(none)|2(L an)|3(Wan)>...
  • Page 325: Appendix H Triangle Route

    P-334U/P-335U User’s Guide P P E N D I X Triangle Route The Ideal Setup When the firewall is on, your Prestige acts as a secure gateway between your LAN and the Internet. In an ideal network topology, all incoming and outgoing network traffic passes through the Prestige to protect your LAN against attacks.
  • Page 326: Figure 204 "Triangle Route" Problem

    P-334U/P-335U User’s Guide Figure 204 “Triangle Route” Problem The “Triangle Route” Solutions This section presents you two solutions to the “triangle route” problem. IP Aliasing IP alias allows you to partition your network into logical sections over the same Ethernet interface.
  • Page 327 P-334U/P-335U User’s Guide Index access point Default access point. See also AP. DHCP 46, 109, 115, 129 ActiveX 138, 159 DHCP Table Summary Advanced Encryption Standard DHCP_client list Alternative Subnet Mask Notation Disclaimer AP (access point) Dynamic DNS AP. See also access point.
  • Page 328 P-334U/P-335U User’s Guide General wireless LAN screen MAC address MAC address filter MAC Address Filter Action MAC Address Filtering MAC Filter Message Integrity Check (MIC) Hidden node Metric hide SSID Multicast 108, 110, 112 Host Host IDs Server Sets IBSS Navigation Panel IEEE 802.11g...
  • Page 329 P-334U/P-335U User’s Guide RADIUS server Time Zone Registered Trademark Registered Trademark Trademark Owners Related Documentation Trademarks Remote Management and NAT Translation Remote Management Limitations Triangle Reproduction Triangle Route Solutions Restore Trigger Port Forwarding Process Restrict Web Features 138, 159 RF (Radio Frequency)
  • Page 330 P-334U/P-335U User’s Guide basic guidelines wireless networks channel encryption MAC address filter security SSID Wireless security wireless security WLAN Interference Security parameters WPA compatible WPA2 WPA2-Pre-Shared Key WPA2-PSK WPA-PSK Written Permission ZyNOS ZyXEL Communications Corporation ZyXEL Limited Warranty Note ZyXEL Network Operating System...

This manual is also suitable for:

P-335u

Table of Contents