Page 1 P-660W-Tx v2 ADSL Router over POTS/ISDN User’s Guide Version 3.40 06/2008 Edition 2 DEFAULT LOGIN IP Address http://192.168.1.1 Password 1234 www.zyxel.com...
Page 3: About This User's Guide
Help us help you. Send all User’s Guide-related comments, questions or suggestions for improvement to the following address, or use e-mail instead. Thank you! The Technical Writing Team, ZyXEL Communications Corp., 6 Innovation Road II, Science-Based Industrial Park, Hsinchu, 300, Taiwan. E-mail: techwriters@zyxel.com.tw P-660W-Tx v2 User’s Guide...
Page 4 Graphics in this book may differ slightly from the product due to differences in operating systems, operating system versions, or if you installed updated firmware/software for your device. Every effort has been made to ensure that the information in this manual is accurate. P-660W-Tx v2 User’s Guide...
Page 5: Document Conventions
• The P-660W-T1 v2 and the P-660W-T3 v2 may be referred to as the “ZyXEL Device”, the “P-660W-Tx v2”, the “device”, the “system” or the “product” in this User’s Guide. • Product labels, screen names, field labels and field choices are all in bold font.
Page 6: Table 1 Common Icons
Document Conventions Table 1 Common Icons ZyXEL Device Computer Notebook Server Printer Telephone Switch Router Internet Cloud Firewall Modem Wireless Signal Television DSLAM P-660W-Tx v2 User’s Guide...
Page 7: Safety Warnings
Only use the included antenna(s). • If you wall mount your device, make sure that no electrical lines, gas or water pipes will be damaged. This product is recyclable. Dispose of it properly. P-660W-Tx v2 User’s Guide...
Page 8 Safety Warnings P-660W-Tx v2 User’s Guide...
Page 9: Table Of Contents
Universal Plug-and-Play (UPnP) ..................... 139 Logs Screens ........................... 151 Media Bandwidth Management Advanced Setup ..............157 Maintenance ......................... 169 Maintenance ..........................171 Troubleshooting and Specifications .................. 185 Troubleshooting ........................187 Product Specifications ......................193 Appendices and Index ......................199 P-660W-Tx v2 User’s Guide...
Page 10 Contents Overview P-660W-Tx v2 User’s Guide...
Page 11: Table Of Contents
2.1.3 Navigating the Web Configurator ................32 2.2 Change Login Password ....................35 Part II: Setup Wizard ................37 Chapter 3 Connection Setup Wizard ...................... 39 3.1 Introduction .......................... 39 3.1.1 Internet Access Wizard Setup ..................39 P-660W-Tx v2 User’s Guide...
Page 12 6.3.4 WPA/WPA2 ........................ 70 6.4 The MAC Filter Screen ..................... 73 6.5 The WDS Screen ......................... 74 6.6 Wireless LAN Technical Reference ..................76 6.6.1 Wireless Network Overview ..................76 6.6.2 Wireless Security Overview ..................77 P-660W-Tx v2 User’s Guide...
Page 13 8.3.3 How NAT Works ......................99 8.3.4 NAT Application ......................100 8.3.5 NAT Mapping Types ....................100 8.3.6 SUA (Single User Account) Versus NAT ..............101 8.3.7 SUA Server ......................102 Chapter 9 Dynamic DNS Setup ......................105 P-660W-Tx v2 User’s Guide...
Page 14 12.1.3 Before You Begin ....................131 12.2 The Main Content Filter Screen ..................131 12.3 The Keyword Screen ...................... 132 12.4 The Schedule Screen ..................... 133 12.5 The Trusted Screen ......................134 Chapter 13 Remote Management Configuration ................... 135 P-660W-Tx v2 User’s Guide...
Page 15 16.4 The Summary Screen ..................... 160 16.4.1 Scheduler ....................... 160 16.4.2 Maximize Bandwidth Usage ................... 160 16.4.3 Configuring the Summary Screen ................162 16.5 The Class Setup Screen ....................163 16.5.1 Bandwidth Classes and Filters ................164 P-660W-Tx v2 User’s Guide...
Page 16 18.2 ZyXEL Device Access and Login ..................188 18.3 Internet Access ........................ 189 18.4 Reset the ZyXEL Device to Its Factory Defaults .............. 190 18.5 Wireless Router/AP Troubleshooting ................191 Chapter 19 Product Specifications ......................193 19.1 General ZyXEL Device Specifications ................193 P-660W-Tx v2 User’s Guide...
Page 17 Part VI: Appendices and Index ............199 Appendix A Pop-up Windows, JavaScripts and Java Permissions ........201 Appendix B Wireless LANs ....................209 Appendix C Common Services .................... 223 Appendix D Legal Information ....................227 Appendix E Customer Support..................... 233 Index............................239 P-660W-Tx v2 User’s Guide...
Page 18 Table of Contents P-660W-Tx v2 User’s Guide...
Page 19: List Of Figures
Figure 34 Example of Traffic Shaping ....................90 Figure 35 Traffic Redirect Example ......................91 Figure 36 Traffic Redirect LAN Setup ..................... 91 Figure 37 NAT Mode ..........................94 Figure 38 Edit SUA/NAT Server Set ....................... 95 P-660W-Tx v2 User’s Guide...
Page 20 Figure 77 Internet Connection Status ....................147 Figure 78 Network Connections ......................148 Figure 79 Network Connections: My Network Places ................149 Figure 80 Network Connections: My Network Places: Properties: Example ........149 Figure 81 Log Settings ......................... 152 P-660W-Tx v2 User’s Guide...
Page 21 Figure 115 Peer-to-Peer Communication in an Ad-hoc Network ............209 Figure 116 Basic Service Set ....................... 210 Figure 117 Infrastructure WLAN ......................211 Figure 118 RTS/CTS ..........................212 Figure 119 WPA(2) with RADIUS Application Example ................ 219 Figure 120 WPA(2)-PSK Authentication ....................220 P-660W-Tx v2 User’s Guide...
Page 22 List of Figures P-660W-Tx v2 User’s Guide...
Page 23: List Of Tables
Table 33 NAT Mapping Types ......................101 Table 34 Services and Port Numbers ....................102 Table 35 Dynamic DNS ........................106 Table 36 Time and Date ........................108 Table 37 Firewall > Firewall Functions ....................115 Table 38 Firewall: Default Policy ......................116 P-660W-Tx v2 User’s Guide...
Page 24 Table 76 IEEE 802.11g ........................213 Table 77 Wireless Security Levels ....................... 214 Table 78 Comparison of EAP Authentication Types ................217 Table 79 Wireless Security Relational Matrix ..................220 Table 80 Commonly Used Services ..................... 223 P-660W-Tx v2 User’s Guide...
Page 25: Introduction
Introduction Introducing the ZyXEL Device (27) Introducing the Web Configurator (31)
Page 27: Introducing The Zyxel Device
Connect your computer(s) to the ZyXEL Device. The ZyXEL Device uses the phone line to provide high-speed Internet access to the computer(s). You can continue to use the phone line for regular phone calls as well. See the Quick Start Guide for instructions on making these connections. P-660W-Tx v2 User’s Guide...
Page 28: Ways To Manage The Zyxel Device
Table 2 Front Panel LEDs COLOR STATUS DESCRIPTION POWER Green The ZyXEL Device is receiving power and functioning properly. Blinking The ZyXEL Device is rebooting or performing diagnostics. The system is not ready or has malfunctioned. P-660W-Tx v2 User’s Guide...
Page 29 The DSL link is down. INTERNET Green The ZyXEL Device has a successful connection to the Internet. Blinking There is data traffic on the ZyXEL Device’s Internet connection. The ZyXEL Device has no connection with the Internet. P-660W-Tx v2 User’s Guide...
Page 30 Chapter 1 Introducing the ZyXEL Device P-660W-Tx v2 User’s Guide...
Page 31: Introducing The Web Configurator
5 A window displays as shown.The Password field already contains the default password “1234”. Click Login to proceed to a screen asking you to change your password or click Cancel to revert to the default password. P-660W-Tx v2 User’s Guide...
Page 32: Resetting The Zyxel Device
When the POWER LED begins to blink, the defaults have been restored and the ZyXEL Device restarts. 2.1.3 Navigating the Web Configurator The following summarizes how to navigate the web configurator from the Site Map screen. P-660W-Tx v2 User’s Guide...
Page 33: Figure 4 Web Configurator: Site Map Screen
Use this screen to configure your traffic redirect properties and WAN backup settings. Use this screen to configure the NAT mode. Dynamic DNS Use this screen to set up dynamic DNS. Time and Date Use this screen to change your ZyXEL Device’s time and date. P-660W-Tx v2 User’s Guide...
Page 34 ZyXEL Device general connection. DSL Line These screens display information to help you identify problems with the DSL line. Firmware Use this screen to upload firmware to your ZyXEL Device LOGOUT Click Logout to exit the web configurator. P-660W-Tx v2 User’s Guide...
Page 35: Change Login Password
Type the new password in this field. Retype to Confirm Type the new password again in this field. Apply Click Apply to save your changes back to the ZyXEL Device. Cancel Click Cancel to begin configuring this screen afresh. P-660W-Tx v2 User’s Guide...
Page 36 Chapter 2 Introducing the Web Configurator P-660W-Tx v2 User’s Guide...
Page 37: Setup Wizard
Setup Wizard Connection Setup Wizard (39) Media Bandwidth Management Wizard (47)
Page 39: Connection Setup Wizard
ISP (Internet Service Provider). Note: See the advanced menu chapters for background information on these fields. 3.1.1 Internet Access Wizard Setup 1 In the Site Map screen click Connection Setup to display the first wizard screen. P-660W-Tx v2 User’s Guide...
Page 40: Figure 6 Internet Access Wizard Setup: Isp Parameters
Click on the protocol link to see the next wizard screen for that protocol. 2 The next wizard screen varies depending on what mode and encapsulation type you use. All screens shown are with routing mode. Configure the fields and click Next to continue. P-660W-Tx v2 User’s Guide...
Page 41: Figure 7 Internet Connection With Pppoe
Select None, SUA Only or Full Feature from the drop-down list box. Refer to the NAT Address chapter for more details. Translation Back Click Back to go back to the first wizard screen. Next Click Next to continue to the next wizard screen. P-660W-Tx v2 User’s Guide...
Page 42: Figure 8 Internet Connection With Rfc 1483
Static IP Address and type your ISP assigned IP address in the IP Address text box below. Subnet Mask Enter a subnet mask in dotted decimal notation. Refer to the appendices to calculate a subnet mask If you are implementing subnetting. P-660W-Tx v2 User’s Guide...
Page 43: Figure 10 Internet Connection With Pppoa
Connection on Demand with 0 as the idle time-out, which means the Internet session will not timeout. Select Nailed-Up Connection when you want your connection up all the time. The ZyXEL Device will try to bring up the connection automatically if it is disconnected. P-660W-Tx v2 User’s Guide...
Page 44: Figure 11 Internet Access Wizard Setup: Third Screen
Figure 11 Internet Access Wizard Setup: Third Screen If you want to change your ZyXEL Device LAN settings, click Change LAN Configuration to display the screen as shown next. Figure 12 Internet Access Wizard Setup: LAN Configuration P-660W-Tx v2 User’s Guide...
Page 45: Figure 13 Internet Access Wizard Setup: Connection Tests
ZyXEL Device features. If you cannot access the Internet, open the web configurator again to confirm that the Internet settings you configured in the Wizard Setup are correct. P-660W-Tx v2 User’s Guide...
Page 46 Chapter 3 Connection Setup Wizard P-660W-Tx v2 User’s Guide...
Page 47: Media Bandwidth Management Wizard
ZyXEL Device. Chapter 16 on page 157 for background information on Media Bandwidth Management. 4.1.1 Media Bandwidth Management Wizard 1 In the Site Map screen click Media Bandwidth Management Wizard to display the first wizard screen. P-660W-Tx v2 User’s Guide...
Page 48: Figure 14 Mbm Wizard: Media Bandwidth Management
If you do not use a service, it is not necessary to set a priority for that service. Next Click Next to continue with the Wizard. 2 Configure levels of priority for the services you have selected in the next screen. P-660W-Tx v2 User’s Guide...
Page 49: Figure 15 Mbm Wizard: Media Bandwidth Management
Select Others for applications to which you do not want to apply QoS. Back Click Back to return to the previous screen. Finish Click Finish to save your settings and return to the main menu. P-660W-Tx v2 User’s Guide...
Page 50 Chapter 4 Media Bandwidth Management Wizard P-660W-Tx v2 User’s Guide...
Page 51: Advanced Setup
Advanced Setup LAN Setup (53) Wireless LAN (63) WAN Setup (81) Network Address Translation (NAT) Screens (93) Dynamic DNS Setup (105) Time and Date (107) Firewall Configuration (109) Content Filtering (131) Remote Management Configuration (135) Universal Plug-and-Play (UPnP) (139) Logs Screens (151) Media Bandwidth Management Advanced Setup (157)
Page 53: Lan Setup
These networking devices are also known as hosts. Subnet Mask Subnet masks determine the maximum number of possible hosts on a network. You can also use subnet masks to divide one network into multiple sub-networks. P-660W-Tx v2 User’s Guide...
Page 54: Before You Begin
Find out the MAC addresses of your network devices if you intend to add them to the Static DHCP screen. 5.2 The LAN Setup Screen Click LAN > LAN Setup to open the LAN Setup screen. P-660W-Tx v2 User’s Guide...
Page 55: Figure 16 Lan Setup
DHCP clients along with the IP address and the subnet mask. Secondary DNS As above. Server Remote DHCP If Relay is selected in the DHCP field above then enter the IP address of the Server actual remote DHCP server here. TCP/IP P-660W-Tx v2 User’s Guide...
Page 56: The Static Dhcp Screen
Click Apply to save your changes back to the ZyXEL Device. Cancel Click Cancel to begin configuring this screen afresh. 5.3 The Static DHCP Screen Click LAN > Static DHCP to open the Static DHCP screen. P-660W-Tx v2 User’s Guide...
Page 57: Lan Technical Reference
The actual physical connection determines whether the ZyXEL Device ports are LAN or WAN ports. There are two separate IP networks, one inside the LAN network and the other outside the WAN network as shown next. P-660W-Tx v2 User’s Guide...
Page 58: Dhcp Setup
• The ZyXEL Device acts as a DNS proxy when the Primary and Secondary DNS Server fields are left blank in the LAN Setup screen. 5.4.4 LAN TCP/IP The ZyXEL Device has built-in DHCP server capability that assigns IP addresses and DNS servers to systems that support DHCP client capability. P-660W-Tx v2 User’s Guide...
Page 59 Regardless of your particular situation, do not create an arbitrary IP address; always follow the guidelines above. For more information on address assignment, please refer to RFC 1597, Address Allocation for Private Internets and RFC 1466, Guidelines for Management of IP Address Space. P-660W-Tx v2 User’s Guide...
Page 60: Rip Setup
After that, the ZyXEL Device periodically updates this information. IP multicasting can be enabled/disabled on the ZyXEL Device LAN and/or WAN interfaces in the web configurator (LAN; WAN). Select None to disable IP multicasting on these interfaces. P-660W-Tx v2 User’s Guide...
Page 61: Any Ip
Media Access Control or MAC address, on the local area network. IP routing table is defined on IP Ethernet devices (the ZyXEL Device) to decide which hop to use, to help forward data along to its specified destination. P-660W-Tx v2 User’s Guide...
Page 62 IP routing table so it can properly forward packets intended for the computer. After all the routing information is updated, the computer can access the ZyXEL Device and the Internet as if it is in the same subnet as the ZyXEL Device. P-660W-Tx v2 User’s Guide...
Page 63: Wireless Lan
However, wireless networking is different from that of most traditional radio communications in that there a number of wireless networking standards available with different methods of data encryption. P-660W-Tx v2 User’s Guide...
Page 64: Before You Start
MAC filter, ensure that you know precisely what you want to do. If you do not want to configure advanced options, leave them alone. 6.2 The Main Wireless LAN Screen Click Wireless LAN in the navigation panel to display the main Wireless LAN screen. P-660W-Tx v2 User’s Guide...
Page 65: The Wireless Screen
If you do not enable any wireless security on your ZyXEL Device, your network is accessible to any wireless networking device that is within range. 6.3 The Wireless Screen Click Advanced Setup > Wireless LAN > Wireless to open the Wireless screen. P-660W-Tx v2 User’s Guide...
Page 66: Figure 21 Wireless Lan > Wireless
Select the check box to change the default value and enter a value between 256 and 2432. Apply Click Apply to save your changes. Reset Click Reset to reload the previous configuration for this screen. See the rest of this chapter for information on the other labels in this screen. P-660W-Tx v2 User’s Guide...
Page 67: No Security
Both the wireless stations and the access points must use the same WEP key. Your ZyXEL Device allows you to configure up to four 64-bit, 128-bit or 256-bit WEP keys but only one key can be enabled at any one time. P-660W-Tx v2 User’s Guide...
Page 68: Figure 23 Wireless: Static Wep
At the time of writing, you cannot use passphrase to generate 256-bit WEP keys. Generate After you enter the passphrase, click Generate to have the ZyXEL Device generate a WEP key automatically. The key displays in the WEP Key field. P-660W-Tx v2 User’s Guide...
Page 69: Wpa-Psk/Wpa2-Psk
Click Cancel to begin configuring this screen afresh. 6.3.3 WPA-PSK/WPA2-PSK Click Advanced Setup > Wireless LAN > Wireless to display the Wireless screen. Select WPA-PSK or WPA2-PSK from the Security Mode list. Figure 24 Wireless: WPA-PSK/ P-660W-Tx v2 User’s Guide...
Page 70: Wpa/Wpa2
Click Apply to save your changes back to the ZyXEL Device. Reset Click Reset to reload the previous configuration for this screen. 6.3.4 WPA/WPA2 Click Advanced Setup > Wireless LAN > Wireless to display the Wireless screen. Select WPA or WPA2 from the Security Mode list. P-660W-Tx v2 User’s Guide...
Page 71: Figure 25 Wireless: Wpa/Wpa2
Enter a time interval between 10 and 9999 seconds. The default time interval is 1800 seconds (30 minutes). Note: If wireless station authentication is done using a RADIUS server, the reauthentication timer on the RADIUS server has priority. P-660W-Tx v2 User’s Guide...
Page 72 LAN and you change the ZyXEL Device’s ESSID or security settings (see Table 23 on page 79), you will lose your wireless connection when you click Apply to confirm. You must then change the wireless settings of your computer to match the ZyXEL Device’s new settings. P-660W-Tx v2 User’s Guide...
Page 73: The Mac Filter Screen
Be careful not to list your computer’s MAC address and set the Action field to Deny Association when managing the ZyXEL Device via a wireless connection. This would lock you out. Figure 26 Wireless LAN > MAC Filter P-660W-Tx v2 User’s Guide...
Page 74: The Wds Screen
Figure 27 Connecting Wireless Networks Using WDS Use this screen to set up WDS between your ZyXEL Device and another AP. WDS security is independent of the security settings between the ZyXEL Device and any wireless clients. P-660W-Tx v2 User’s Guide...
Page 75: Figure 28 Wireless Lan > Wds
Type a PSK (Pre-Shared Key) in this field from 8~63 characters long (A~Z, a~z,0~9). Back Click Back to return to the Wireless LAN menu screen. Apply Click Apply to save your changes back to the ZyXEL Device. Cancel Click Cancel to cancel your changes. P-660W-Tx v2 User’s Guide...
Page 76: Wireless Lan Technical Reference
(such as the printer) or with the Internet. Your ZyXEL Device is the AP. Every wireless network must follow these basic guidelines. • Every wireless client in the same wireless network must use the same SSID. P-660W-Tx v2 User’s Guide...
Page 77: Wireless Security Overview
Because of the damage that can be done by a malicious attacker, it’s not just people who have sensitive information on their network who should use security. Everybody who uses any wireless network should ensure that effective security is in place. P-660W-Tx v2 User’s Guide...
Page 78: Mac Address Filter
Some wireless devices, such as scanners, can detect wireless networks but cannot use wireless networks. These kinds of wireless devices might not have MAC addresses. Hexadecimal characters are 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, A, B, C, D, E, and F. P-660W-Tx v2 User’s Guide...
Page 79: Table 23 Types Of Encryption For Each Type Of Authentication
It is not possible to use WPA-PSK, WPA or stronger encryption with a local user database. In this case, it is better to set up stronger encryption with no authentication than to set up weaker encryption with the local user database. P-660W-Tx v2 User’s Guide...
Page 80: Signal Problems
The process of verifying whether a wireless device is allowed to use the wireless network. Fragmentation A small fragmentation threshold is recommended for busy networks, while a Threshold larger threshold provides faster performance if the network is not very busy. P-660W-Tx v2 User’s Guide...
Page 81: Wan Setup
ISP (Internet Service Provider). If your ISP offers a dial-up Internet connection using PPPoE (PPP over Ethernet) or PPPoA, they should also provide a username and password (and service name) for user authentication. P-660W-Tx v2 User’s Guide...
Page 82: Before You Begin
Click this link to go to the screen where you can configure WAN backup connections (traffic redirect and dial backup). 7.3 The WAN Setup Screen To change your ZyXEL Device’s WAN remote node settings, click WAN and WAN Setup. The screen differs by the encapsulation. P-660W-Tx v2 User’s Guide...
Page 83: Figure 32 Wan Setup (Pppoe)
Chapter 7 WAN Setup Figure 32 WAN Setup (PPPoE) P-660W-Tx v2 User’s Guide...
Page 84: Table 26 Wan Setup
ISP assigns you a different one each time you connect to the Internet. Select Obtain an IP Address Automatically if you have a dynamic IP address; otherwise select Static IP Address and type your ISP assigned IP address in the IP Address field below. P-660W-Tx v2 User’s Guide...
Page 85 ISP gave you it. Otherwise leave it at its default setting. Back Click Back to return to the previous screen. Apply Click Apply to save the changes. Cancel Click Cancel to begin configuring this screen afresh. P-660W-Tx v2 User’s Guide...
Page 86: The Wan Backup Screen
Type the number of times (2 recommended) that your ZyXEL Device may ping the IP addresses configured in the Check WAN IP Address field without getting a response before switching to a WAN backup connection (or a different WAN backup connection). P-660W-Tx v2 User’s Guide...
Page 87: Wan Technical Reference
7.5 WAN Technical Reference This section provides some technical background information about the topics covered in this chapter. 7.5.1 Encapsulation Be sure to use the encapsulation method required by your ISP. The ZyXEL Device supports the following methods. P-660W-Tx v2 User’s Guide...
Page 88: Multiplexing
ATM virtual circuit (VC-based multiplexing). Please refer to the RFC for more detailed information. 7.5.2 Multiplexing There are two conventions to identify what protocols the virtual circuit (VC) is carrying. Be sure to use the multiplexing method required by your ISP. P-660W-Tx v2 User’s Guide...
Page 89: Vpi And Vci
The second is that the ZyXEL Device will try to bring up the connection when turned on and whenever the connection is down. A nailed-up connection can be very expensive for obvious reasons. P-660W-Tx v2 User’s Guide...
Page 90: Traffic Shaping
(such as an Internet account user name and password) is required or the ZyXEL Device cannot connect to the ISP, you will be redirected to web screen(s) for information input or troubleshooting. Zero configuration for Internet access is disabled when • the ZyXEL Device is in bridge mode P-660W-Tx v2 User’s Guide...
Page 91: Traffic Redirect
LAN in one subnet (Subnet 1 in the following figure) and the backup gateway in another subnet (Subnet 2). Configure filters that allow packets from the protected LAN (Subnet 1) to the backup gateway (Subnet 2). Figure 36 Traffic Redirect LAN Setup P-660W-Tx v2 User’s Guide...
Page 92: Metric
For example, if the normal route has a metric of "1" and the traffic-redirect route has a metric of "2", then the normal route acts as the primary default route. If the normal route fails to connect to the Internet, the ZyXEL Device tries the traffic-redirect route next. P-660W-Tx v2 User’s Guide...
Page 93: Network Address Translation (Nat) Screens
(the inside local address) to another (the inside global address) before forwarding the packet to the WAN side. When the response comes back, NAT translates the destination address (the inside global address) back to the inside local address before forwarding it to the original inside host. P-660W-Tx v2 User’s Guide...
Page 94: The Nat Mode Screen
Server Set screen. Edit Details Click this link to go to the NAT - Edit SUA/NAT Server Set screen. Full Feature Select this radio button if you have multiple public WAN IP addresses for your ZyXEL Device. P-660W-Tx v2 User’s Guide...
Page 95: Configuring Sua Server Set
Click NAT, select SUA Only and click Edit Details to open the following screen. Section 8.3.7 on page 102 for more information. See Table 34 on page 102 for port numbers commonly used for particular services. Figure 38 Edit SUA/NAT Server Set P-660W-Tx v2 User’s Guide...
Page 96: Configuring Address Mapping Rules
4, rules 5 to 7 will be pushed up by 1 rule, so old rules 5, 6 and 7 become new rules 4, 5 and 6. Click NAT, select Full Feature and click Edit Details to open the following screen. Use this screen to change your ZyXEL Device’s address mapping settings. Figure 39 Address Mapping Rules P-660W-Tx v2 User’s Guide...
Page 97: Editing An Address Mapping Rule
8.2.3 Editing an Address Mapping Rule Use this screen to edit an address mapping rule. Click the rule’s link in the NAT Address Mapping Rules screen to display the screen shown next. Figure 40 Edit Address Mapping Rule P-660W-Tx v2 User’s Guide...
Page 98: Nat Technical Reference
IP address of a host when the packet is in the local network, while the global address refers to the IP address of the host when the same packet is traveling in the WAN side. P-660W-Tx v2 User’s Guide...
Page 99: What Nat Does
Many-to-One and Many-to-Many Overload NAT mapping) in each packet and then forwards it to the Internet. The ZyXEL Device keeps track of the original addresses and port numbers so incoming reply packets can have their original values restored. The following figure illustrates this. P-660W-Tx v2 User’s Guide...
Page 100: Nat Application
LANs using IP Alias) behind the ZyXEL Device can communicate with three distinct WAN networks. More examples follow at the end of this chapter. Figure 42 NAT Application With IP Alias 8.3.5 NAT Mapping Types NAT supports five types of IP/port mapping. They are: P-660W-Tx v2 User’s Guide...
Page 101: Sua (Single User Account) Versus Nat
Table 33 on page 101. • Choose SUA Only if you have just one public WAN IP address for your ZyXEL Device. • Choose Full Feature if you have multiple public WAN IP addresses for your ZyXEL Device. P-660W-Tx v2 User’s Guide...
Page 102: Sua Server
80 to another (B in the example) and assign a default server IP address of 192.168.1.35 to a third (C in the example). You assign the LAN IP addresses and the ISP assigns the WAN IP address. The NAT network appears as a single host on the Internet. P-660W-Tx v2 User’s Guide...
Page 103: Figure 43 Multiple Servers Behind Nat Example
Chapter 8 Network Address Translation (NAT) Screens IP address assigned by ISP. Figure 43 Multiple Servers Behind NAT Example P-660W-Tx v2 User’s Guide...
Page 104 Chapter 8 Network Address Translation (NAT) Screens P-660W-Tx v2 User’s Guide...
Page 105: Dynamic Dns Setup
If you have a private WAN IP address, then you cannot use Dynamic DNS. 9.2 The Dynamic DNS Screen To change your ZyXEL Device’s DDNS, click Dynamic DNS. The screen appears as shown. P-660W-Tx v2 User’s Guide...
Page 106: Figure 44 Dynamic Dns
Type the password assigned to you. Enable Wildcard Select the check box to enable DYNDNS Wildcard. Apply Click Apply to save your changes back to the ZyXEL Device. Cancel Click Cancel to begin configuring this screen afresh. P-660W-Tx v2 User’s Guide...
Page 107: Time And Date
To change your ZyXEL Device’s time and date, click Time And Date. The screen appears as shown. Use this screen to configure the ZyXEL Device’s time based on your local time zone. Figure 45 Time and Date P-660W-Tx v2 User’s Guide...
Page 108: Table 36 Time And Date
When you select None in the Use Protocol when Bootup field, enter the new time in this field and then click Apply. Apply Click Apply to save your changes back to the ZyXEL Device. Cancel Click Cancel to begin configuring this screen afresh. P-660W-Tx v2 User’s Guide...
Page 109: Firewall Configuration
122) to set up anti-probing protection for your ZyXEL Device. • Use the Threshold screen (Section 11.6 on page 123) to specify the TCP Maximum Incomplete threshold and the action taken when the threshold is reached. P-660W-Tx v2 User’s Guide...
Page 110: What You Need To Know About Firewall
The following Internet firewall rule example allows a hypothetical “My Service” connection from the Internet. 1 Click Firewall in the navigation panel and click Rule Summary. 2 Select WAN to LAN in the Packet Direction field. P-660W-Tx v2 User’s Guide...
Page 111: Figure 47 Firewall Example: Rule Summary
4 Click Insert to display the firewall rule configuration screen. 5 Select Any in the Destination Address box and then click Delete. 6 Configure the destination address screen as follows and click Add. Figure 48 Firewall Example: Edit Rule: Destination Address P-660W-Tx v2 User’s Guide...
Page 112: Figure 49 Edit Custom Port Example
Figure 49 Edit Custom Port Example 9 In the Edit Rule screen, use the Add>> and Remove buttons between Available Services and Selected Services list boxes to configure it as follows. Click Apply when you are done. P-660W-Tx v2 User’s Guide...
Page 113: Figure 50 Firewall Example: Edit Rule: Select Customized Services
Chapter 11 Firewall Configuration Figure 50 Firewall Example: Edit Rule: Select Customized Services P-660W-Tx v2 User’s Guide...
Page 114: The Main Firewall Screen
Rule 2 allows a “My Service” connection from the WAN to IP addresses 10.0.0.10 through 10.0.0.15 on the LAN. Figure 51 Firewall Example: Rule Summary: My Service 11.2 The Main Firewall Screen Click Firewall to display the main Firewall screen. P-660W-Tx v2 User’s Guide...
Page 115: The Default Policy Screen
11.3 The Default Policy Screen Click Firewall and then Default Policy to display the following screen. Activate the firewall by selecting the Firewall Enabled check box as seen in the following screen. Figure 53 Firewall: Default Policy P-660W-Tx v2 User’s Guide...
Page 116: The Rule Summary Screen
The ordering of your rules is very important as rules are applied in turn. Click on Firewall, then Rule Summary to bring up the following screen. This screen is a summary of the existing rules. Note the order in which the rules are listed. P-660W-Tx v2 User’s Guide...
Page 117: Figure 54 Firewall: Rule Summary
Please note that a blank service type is equivalent to Any. See Section 11.4.2 on page 121 for more information. Action This is the specified action for that rule, either Block or Forward. Note that Block means the firewall silently discards the packet. P-660W-Tx v2 User’s Guide...
Page 118: Configuring Firewall Rules
For example, if you type “6”, your new rule becomes number 6 and the previous rule 6 (if there is one) becomes rule 7. 2 Click Insert to display this screen and refer to the following table for information on the labels. P-660W-Tx v2 User’s Guide...
Page 119: Figure 55 Firewall: Edit Rule
LABEL DESCRIPTION Active Select this option to enable this firewall rule. Action for Matched Use the radio button to select whether to discard (Block) or allow the passage Packet of (Forward) packets that match this rule. P-660W-Tx v2 User’s Guide...
Page 120 Click Apply to save your customized settings and exit this screen. Cancel Click Cancel to exit this screen without saving. Delete Click Delete to remove this firewall rule and return to the Firewall Rule Summary screen. P-660W-Tx v2 User’s Guide...
Page 121: Predefined Services
This shows the IP protocol (TCP, UDP or TCP/UDP) that defines your customized service. Port This is the port number or range that defines your customized service. Back Click Back to return the Firewall Edit Rule screen. P-660W-Tx v2 User’s Guide...
Page 122: Configuring A Customized Service
Click Cancel to return to the previously saved settings. Delete Click Delete to delete the current rule. 11.5 The Anti-Probing Screen Click Firewall in the navigation panel and click Anti Probing to display the screen as shown. P-660W-Tx v2 User’s Guide...
Page 123: The Threshold Screen
The ZyXEL Device also sends alerts whenever TCP Maximum Incomplete is exceeded. The global values specified for the threshold and timeout apply to all TCP connections. Click Firewall, and Threshold to bring up the next screen. P-660W-Tx v2 User’s Guide...
Page 124: Figure 59 Firewall: Threshold
80 existing half-open sessions. Incomplete Low sessions that causes the firewall to stop deleting half-open sessions. The ZyXEL Device continues to delete half-open requests as necessary, until the number of existing half-open sessions drops below this number. P-660W-Tx v2 User’s Guide...
Page 125: Firewall Configuration Technical Reference
11.7.1 Firewall Policies Overview Firewall rules are grouped based on the direction of travel of packets to which they apply: • LAN to LAN/ Router • WAN to LAN • LAN to WAN • WAN to WAN/ Router P-660W-Tx v2 User’s Guide...
Page 126: Rule Logic Overview
These custom rules work by comparing the Source IP address, Destination IP address and IP protocol type of network traffic to rules set by the administrator. Your customized rules take precedence and override the ZyXEL Device’s default rules. 11.7.2 Rule Logic Overview Study these points carefully before configuring rules. P-660W-Tx v2 User’s Guide...
Page 127: Destination Address
What is the connection’s source address; is it on the LAN, WAN? Is it a single IP, a range of IPs or a subnet? Destination Address What is the connection’s destination address; is it on the LAN, WAN? Is it a single IP, a range of IPs or a subnet? P-660W-Tx v2 User’s Guide...
Page 128: Connection Direction
• Type of traffic for certain servers. If your network is slower than average for any of these factors (especially if you have servers that are slow or handle many tasks and are often busy), then the default values should be reduced. P-660W-Tx v2 User’s Guide...
Page 129 • If the Blocking Time timeout is greater than 0, then the ZyXEL Device blocks all new connection requests to the host giving the server time to handle the present connections. The ZyXEL Device continues to block all new connection requests until the Blocking Time expires. P-660W-Tx v2 User’s Guide...
Page 130 Chapter 11 Firewall Configuration P-660W-Tx v2 User’s Guide...
Page 131: Content Filtering
To use the Trusted screen, you need the IP addresses of devices on your network. See Section 12.5 on page 134 for more information. 12.2 The Main Content Filter Screen Click Content Filter to display the main Content Filtering screen. P-660W-Tx v2 User’s Guide...
Page 132: The Keyword Screen
URL http://www.website.com/bad.html, even if it is not included in the Filter List. To have your ZyXEL Device block Web sites containing keywords in their URLs, click Content Filter and Keyword. The screen appears as shown. Figure 61 Content Filter: Keyword P-660W-Tx v2 User’s Guide...
Page 133: The Schedule Screen
Time of Day to Use the 24 hour format to configure which time of the day (or select the All day check Block: box) you want the content filtering to be active. P-660W-Tx v2 User’s Guide...
Page 134: The Trusted Screen
Back Click Back to return to the previous screen. Apply Click Apply to save your changes back to the ZyXEL Device. Cancel Click Cancel to return to the previously saved settings. P-660W-Tx v2 User’s Guide...
Page 135: Remote Management Configuration
You may manage your ZyXEL Device from a remote location via: • Internet (WAN only) • ALL (LAN and WAN) • LAN only, • Neither (Disable). To disable remote management of a service, select Disable in the corresponding Access Status field. P-660W-Tx v2 User’s Guide...
Page 136: What You Can Do In The Remote Management Screen
Secured Client The default 0.0.0.0 allows any client to use this service to remotely manage the ZyXEL Device. Type an IP address to restrict access to a client with a matching IP address. P-660W-Tx v2 User’s Guide...
Page 137: Remote Management Configuration Technical Reference
• A firewall rule is not created. 13.3.2 Remote Management and NAT When NAT is enabled: • Use the ZyXEL Device’s WAN IP address when configuring from the WAN. • Use the ZyXEL Device’s LAN IP address when configuring from the LAN. P-660W-Tx v2 User’s Guide...
Page 138: System Timeout
There is a default system management idle timeout of five minutes (three hundred seconds). The ZyXEL Device automatically logs you out if the management session remains idle for longer than this timeout period. The management session does not time out when a statistics screen is polling. P-660W-Tx v2 User’s Guide...
Page 139: Universal Plug-And-Play (Upnp)
Finding Out More Section 14.5 on page 150 for technical background information on UPnP. 14.2 The UPnP Screen From the Site Map in the main menu, click UPnP under Advanced Setup to display the screen shown next. P-660W-Tx v2 User’s Guide...
Page 140: Installing Upnp In Windows Example
Follow the steps below to install the UPnP in Windows Me. 1 Click Start and Control Panel. Double-click Add/Remove Programs. 2 Click on the Windows Setup tab and select Communication in the Components selection box. Click Details. P-660W-Tx v2 User’s Guide...
Page 141: Figure 67 Add/Remove Programs: Windows Setup: Communication
3 In the Communications window, select the Universal Plug and Play check box in the Components selection box. Figure 68 Add/Remove Programs: Windows Setup: Communication: Components 4 Click OK to go back to the Add/Remove Programs Properties window and click Next. 5 Restart the computer when prompted. P-660W-Tx v2 User’s Guide...
Page 142: Figure 69 Network Connections
4 The Windows Optional Networking Components Wizard window displays. Select Networking Service in the Components selection box and click Details. Figure 70 Windows Optional Networking Components Wizard 5 In the Networking Services window, select the Universal Plug and Play check box. P-660W-Tx v2 User’s Guide...
Page 143: Using Upnp In Windows Xp Example
Make sure the computer is connected to a LAN port of the ZyXEL Device. Turn on your computer and the ZyXEL Device. Auto-discover Your UPnP-enabled Network Device 1 Click Start and Control Panel. Double-click Network Connections. An icon displays under Internet Gateway. 2 Right-click the icon and select Properties. P-660W-Tx v2 User’s Guide...
Page 144: Figure 72 Network Connections
Chapter 14 Universal Plug-and-Play (UPnP) Figure 72 Network Connections 3 In the Internet Connection Properties window, click Settings to see the port mappings there were automatically created. P-660W-Tx v2 User’s Guide...
Page 145: Figure 73 Internet Connection Properties
Chapter 14 Universal Plug-and-Play (UPnP) Figure 73 Internet Connection Properties 4 You may edit or delete the port mappings or click Add to manually add port mappings. P-660W-Tx v2 User’s Guide...
Page 146: Figure 74 Internet Connection Properties: Advanced Settings
5 When the UPnP-enabled device is disconnected from your computer, all port mappings will be deleted automatically. 6 Select Show icon in notification area when connected option and click OK. An icon displays in the system tray. P-660W-Tx v2 User’s Guide...
Page 147: Figure 76 System Tray Icon
IP address of the ZyXEL Device first. This comes helpful if you do not know the IP address of the ZyXEL Device. Follow the steps below to access the web configurator. 1 Click Start and then Control Panel. 2 Double-click Network Connections. 3 Select My Network Places under Other Places. P-660W-Tx v2 User’s Guide...
Page 148: Figure 78 Network Connections
Figure 78 Network Connections 4 An icon with the description for each UPnP-enabled device displays under Local Network. 5 Right-click on the icon for your ZyXEL Device and select Invoke. The web configurator login screen displays. P-660W-Tx v2 User’s Guide...
Page 149: Figure 79 Network Connections: My Network Places
Figure 79 Network Connections: My Network Places 6 Right-click on the icon for your ZyXEL Device and select Properties. A properties window displays with basic information about the ZyXEL Device. Figure 80 Network Connections: My Network Places: Properties: Example P-660W-Tx v2 User’s Guide...
Page 150: Upnp Technical Reference
Windows Messenger 4.6 and 4.7 while Windows Messenger 5.0 and Xbox are still being tested. UPnP broadcasts are only allowed on the LAN. See later sections for examples of installing UPnP in Windows XP and Windows Me as well as an example of using UPnP in Windows. P-660W-Tx v2 User’s Guide...
Page 151: Logs Screens
ZyXEL Device is to send the logs and which logs and/or immediate alerts the ZyXEL Device is to record. To change your ZyXEL Device’s log settings, click Logs, then the Log Settings. The screen appears as shown. P-660W-Tx v2 User’s Guide...
Page 152: Figure 81 Log Settings
If this field is left blank, logs and alert messages will not be sent via e-mail. Mail Subject Type a title that you want to be in the subject line of the log e-mail message that the ZyXEL Device sends. P-660W-Tx v2 User’s Guide...
Page 153: The View Logs Screen
Section 15.2 on page 151). Entries in red indicate alerts. The log wraps around and deletes the old entries after it fills. Click a column heading to sort the entries. A triangle indicates ascending or descending sort order. P-660W-Tx v2 User’s Guide...
Page 154: Email Log Example
An "End of Log" message displays for each mail in which a complete log has been sent. The following is an example of a log sent by e-mail. • You may edit the subject title. • "End of Log" message shows that a complete log has been sent. P-660W-Tx v2 User’s Guide...
Page 155: Figure 83 E-Mail Log Example
|<1,02> 127|Apr 7 00 |From:192.168.1.131 To:192.168.1.255 |match |forward | 10:05:17 |UDP src port:00520 dest port:00520 |<1,02> 128|Apr 7 00 |From:192.168.1.1 To:192.168.1.255 |match |forward | 10:05:30 |UDP src port:00520 dest port:00520 |<1,02> End of Firewall Log P-660W-Tx v2 User’s Guide...
Page 156 Chapter 15 Logs Screens P-660W-Tx v2 User’s Guide...
Page 157: Media Bandwidth Management Advanced Setup
Bandwidth Borrowing Bandwidth borrowing allows a child-class to borrow unused bandwidth from its parent class, whereas maximize bandwidth usage allows bandwidth classes to borrow any unused or unbudgeted bandwidth on the whole interface. P-660W-Tx v2 User’s Guide...
Page 158: What You Can Do In The Media Bandwidth Management Screens
(VoIP, Web, FTP, E-mail and Video) is allotted 128kbps. Figure 84 Application-based Bandwidth Management Example Subnet-based Bandwidth Management Example The following example uses bandwidth classes based solely on LAN subnets. Each bandwidth class (Subnet A and Subnet B) is allotted 320kbps. P-660W-Tx v2 User’s Guide...
Page 159: The Main Media Bandwidth Management Screen
64 kbps Video 64 kbps 64 kbps Figure 86 Application and Subnet-based Bandwidth Management Example 16.3 The Main Media Bandwidth Management Screen Click Media Bandwidth Management to display the main Media Bandwidth Management screen as shown. P-660W-Tx v2 User’s Guide...
Page 160: The Summary Screen
Section 16.4 on page 160) allows the ZyXEL Device to divide up any available bandwidth on the interface (including unallocated bandwidth and any allocated bandwidth that a class is not using) among the bandwidth classes that require more bandwidth. P-660W-Tx v2 User’s Guide...
Page 161 The ZyXEL Device gives priority to bandwidth classes of higher priority and treats bandwidth classes of the same level equally. 4 The ZyXEL Device assigns any remaining unbudgeted bandwidth to traffic that does not match any of the bandwidth classes. P-660W-Tx v2 User’s Guide...
Page 162: Configuring The Summary Screen
16.4.3 Configuring the Summary Screen Click Media Bandwidth Management > Summary to open the screen as shown next. Enable bandwidth management on an interface and set the maximum allowed bandwidth for that interface. P-660W-Tx v2 User’s Guide...
Page 163: The Class Setup Screen
Click Apply to save your settings back to the ZyXEL Device. Cancel Click Cancel to begin configuring this screen afresh. 16.5 The Class Setup Screen Use the Class Setup screen to configure bandwidth classes and child-classes. P-660W-Tx v2 User’s Guide...
Page 164: Bandwidth Classes And Filters
Select an interface from the drop-down list box for which you wish to set up classes. Back Click Back to go to the main Media Bandwidth Management screen. Add Child-Class Click Add Child-class to add a sub-class. Edit Click Edit to configure the selected class. You cannot edit the root class. P-660W-Tx v2 User’s Guide...
Page 165: Media Bandwidth Management Class Configuration
20 kbps and 20000 kbps for an individual class. Priority Enter a number between 0 and 7 to set the priority of this class. The higher the number, the higher the priority. The default setting is 3. P-660W-Tx v2 User’s Guide...
Page 166 17 for UDP. A blank protocol ID means any protocol number. Back Click Back to go to the main Media Bandwidth Management screen. Apply Click Apply to save your changes back to the ZyXEL Device. Cancel Click Cancel to begin configuring this screen afresh. P-660W-Tx v2 User’s Guide...
Page 167: Media Bandwidth Management Statistics
Clear Counter Click Clear Counter to clear all of the bandwidth management statistics. 16.6 The Monitor Screen To view the ZyXEL Device’s bandwidth usage and allotments, click Media Bandwidth Management, then Monitor. The screen appears as shown. P-660W-Tx v2 User’s Guide...
Page 168: Figure 92 Media Bandwidth Management: Monitor
This field displays the amount of bandwidth allocated to the class. Current Usage (kbps) This field displays the amount of bandwidth that each class is using. Back Click Back to go to the main Media Bandwidth Management screen. Refresh Click Refresh to update the page. P-660W-Tx v2 User’s Guide...
Page 169: Maintenance
Maintenance Maintenance (171)
Page 171: Maintenance
ZyXEL Device. 17.2 System Status Screen Click System Status under Maintenance to open the following screen, where you can use to monitor your ZyXEL Device. Note that these fields are READ-ONLY and only for diagnostic purposes. P-660W-Tx v2 User’s Guide...
Page 172: Figure 93 System Status
This is the name of your ZyXEL Device. It is for identification purposes. ZyNOS Firmware This is the ZyNOS firmware version and the date created. ZyNOS is ZyXEL's Version proprietary Network Operating System design. DSL FW Version This is the DSL firmware version associated with your ZyXEL Device. P-660W-Tx v2 User’s Guide...
Page 173: System Statistics
Click Show Statistics in the System Status screen to open the following screen. Read-only information here includes port status and packet specific statistics. Also provided are "system up time" and "poll interval(s)". The Poll Interval(s) field is configurable. P-660W-Tx v2 User’s Guide...
Page 174: Figure 94 System Status: Show Statistics
Up Time This field displays the elapsed time this port has been up. Collisions This is the number of collisions on this port. Poll Interval(s) Type the time interval for the browser to refresh system statistics. P-660W-Tx v2 User’s Guide...
Page 175: Dhcp Table Screen
This field displays the MAC (Media Access Control) address of the computer with the Address displayed host name. Every Ethernet device has a unique MAC address. The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters, for example, 00:A0:C5:00:00:02. P-660W-Tx v2 User’s Guide...
Page 176: Any Ip Table Screen
The read-only screen displays information about the ZyXEL Device’s wireless LAN. 17.5.1 Association List This screen displays the MAC address(es) of the wireless stations that are currently logged in to the network. Click Wireless LAN and then Association List to open the screen shown next. P-660W-Tx v2 User’s Guide...
Page 177: Diagnostic Screens
Click Refresh to renew the information in the table. 17.6 Diagnostic Screens These read-only screens display information to help you identify problems with the ZyXEL Device. 17.6.1 General Diagnostic Click Diagnostic and then General to open the screen shown next. P-660W-Tx v2 User’s Guide...
Page 178: Dsl Line Diagnostic
Click OK to proceed. Back Click this button to go back to the main Diagnostic screen. 17.6.2 DSL Line Diagnostic Click Diagnostic and then DSL Line to open the screen shown next. P-660W-Tx v2 User’s Guide...
Page 179: Figure 99 Diagnostic: Dsl Line
Upstream Noise Click this button to display the upstream noise margin. Margin Downstream Click this button to display the downstream noise margin. Noise Margin Back Click this button to go back to the main Diagnostic screen. P-660W-Tx v2 User’s Guide...
Page 180: Firmware Screen
After you see the Firmware Upload in Process screen, wait two minutes before logging into the ZyXEL Device again. The ZyXEL Device automatically restarts in this time causing a temporary network disconnect. In some operating systems, you may see the following icon on your desktop. P-660W-Tx v2 User’s Guide...
Page 181: Ftp Command Line Examples
ZyXEL Device configurations, system-related data (including the default password), the error log and the trace log. Firmware *.bin This is the generic name for the ZyNOS firmware on the ZyXEL Device. Example FTP Commands ftp> put firmware.bin ras P-660W-Tx v2 User’s Guide...
Page 182: Ftp Command Line Procedure
Normal. The server requires a unique User ID and Password to login. Transfer Type Transfer files in either ASCII (plain text format) or in binary mode. Configuration and firmware files should be transferred in binary mode. P-660W-Tx v2 User’s Guide...
Page 183: Ftp Restrictions
• FTP service is disabled in the Service Access Control screen. • The IP address(es) in the Remote Management screen does not match the client IP address. If it does not match, the ZyXEL Device will disconnect the FTP session immediately. P-660W-Tx v2 User’s Guide...
Page 184 Chapter 17 Maintenance P-660W-Tx v2 User’s Guide...
Page 185: Troubleshooting And Specifications
Troubleshooting and Specifications Troubleshooting (187) Product Specifications (193)
Page 187: Troubleshooting
2 Check the hardware connections. See the Quick Start Guide and Section 18.1 on page 187. 3 Inspect your cables for damage. Contact the vendor to replace any damaged cables. 4 Turn the ZyXEL Device off and on. 5 If the problem continues, contact the vendor. P-660W-Tx v2 User’s Guide...
Page 188: Zyxel Device Access And Login
ZyXEL Device. See Section 18.1 on page 187. 5 Reset the ZyXEL Device to its factory defaults, and try to access the ZyXEL Device with the default IP address. See Section 18.1 on page 187. P-660W-Tx v2 User’s Guide...
Page 189: Internet Access
FTP to upload new firmware. See the troubleshooting suggestions for I cannot see or access the Login screen in the web configurator. Ignore the suggestions about your browser. 18.3 Internet Access I cannot access the Internet. P-660W-Tx v2 User’s Guide...
Page 190: Reset The Zyxel Device To Its Factory Defaults
If you reset the ZyXEL Device, you lose all of the changes you have made. The ZyXEL Device re-loads its default settings, and the password resets to 1234. You have to make all of your changes again. P-660W-Tx v2 User’s Guide...
Page 191: Wireless Router/Ap Troubleshooting
6 Make sure traffic between the WLAN and the LAN is not blocked by the firewall on the ZyXEL Device. 7 Make sure you allow the ZyXEL Device to be remotely accessed through the WLAN interface. Check your remote management settings. P-660W-Tx v2 User’s Guide...
Page 192 Chapter 18 Troubleshooting P-660W-Tx v2 User’s Guide...
Page 193: Product Specifications
Temperature: 0º C ~ 50º C Humidity: 20% ~ 95% RH Storage Environment Temperature: -20º C ~ 60º C Humidity: 10% ~ 90% RH Distance between the 125 mm centers of the holes (for wall mounting) on the ZyXEL Device’s back. P-660W-Tx v2 User’s Guide...
Page 194: Table 73 Firmware Specifications
Internet. DHCP (Dynamic Host Use this feature to have the ZyXEL Device assign IP addresses, an IP Configuration Protocol) default gateway and DNS servers to computers on your network. P-660W-Tx v2 User’s Guide...
Page 195: Table 74 Standards Supported
ZyXEL Device. The following list, which is not exhaustive, illustrates the standards supported in the ZyXEL Device. Table 74 Standards Supported STANDARD DESCRIPTION RFC 867 Daytime Protocol RFC 868 Time Protocol. RFC 1058 RIP-1 (Routing Information Protocol) P-660W-Tx v2 User’s Guide...
Page 196 ITU-T G.993.2 (VDSL2) ITU standard that defines VDSL2. Microsoft PPTP MS PPTP (Microsoft's implementation of Point to Point Tunneling Protocol) MBM v2 Media Bandwidth Management v2 RFC 2383 ST2+ over ATM Protocol Specification - UNI 3.1 Version P-660W-Tx v2 User’s Guide...
Page 197: Wall-Mounting Instructions
5 Align the holes on the back of the ZyXEL Device with the screws on the wall. Hang the ZyXEL Device on the screws. Figure 103 Wall-mounting Example The following are dimensions of an M4 tap screw and masonry plug used for wall mounting. All measurements are in millimeters (mm). P-660W-Tx v2 User’s Guide...
Page 198: Power Adaptor Specifications
AC Power Adaptor Model MU12-2050200-A1 Input Power 100~240 Volts AC / 50~60Hz/0.25A Output Power 5 Volts DC / 2A Power Consumption 10 W Safety Standards UL (UL 1950), CSA (CSA 22.2) CE mark, EN60950 (2001) T-Mark C-tick, QAS P-660W-Tx v2 User’s Guide...
Page 199: Appendices And Index
Appendices and Index Pop-up Windows, JavaScripts and Java Permissions (201) Wireless LANs (209) Common Services (223) Legal Information (227) Customer Support (233) Index (239)
Page 201: Appendix A Pop-Up Windows, Javascripts And Java Permissions
1 In Internet Explorer, select Tools, Pop-up Blocker and then select Turn Off Pop-up Blocker. Figure 105 Pop-up Blocker You can also check if pop-up blocking is disabled in the Pop-up Blocker section in the Privacy tab. 1 In Internet Explorer, select Tools, Internet Options, Privacy. P-660W-Tx v2 User’s Guide...
Page 202: Figure 106 Internet Options: Privacy
Alternatively, if you only want to allow pop-up windows from your device, see the following steps. 1 In Internet Explorer, select Tools, Internet Options and then the Privacy tab. 2 Select Settings…to open the Pop-up Blocker Settings screen. P-660W-Tx v2 User’s Guide...
Page 203: Figure 107 Internet Options: Privacy
3 Type the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”. For example, http://192.168.167.1. 4 Click Add to move the IP address to the list of Allowed sites. Figure 108 Pop-up Blocker Settings P-660W-Tx v2 User’s Guide...
Page 204: Figure 109 Internet Options: Security
3 Scroll down to Scripting. 4 Under Active scripting make sure that Enable is selected (the default). 5 Under Scripting of Java applets make sure that Enable is selected (the default). 6 Click OK to close the window. P-660W-Tx v2 User’s Guide...
Page 205: Figure 110 Security Settings - Java Scripting
2 Click the Custom Level... button. 3 Scroll down to Microsoft VM. 4 Under Java permissions make sure that a safety level is selected. 5 Click OK to close the window. Figure 111 Security Settings - Java P-660W-Tx v2 User’s Guide...
Page 206: Figure 112 Java (Sun)
Figure 112 Java (Sun) Mozilla Firefox Mozilla Firefox 2.0 screens are used here. Screens for other versions may vary. You can enable Java, Javascripts and pop-ups in one screen. Click Tools, then click Options in the screen that appears. P-660W-Tx v2 User’s Guide...
Page 207: Figure 113 Mozilla Firefox: Tools > Options
Appendix A Pop-up Windows, JavaScripts and Java Permissions Figure 113 Mozilla Firefox: Tools > Options Click Content.to show the screen below. Select the check boxes as shown in the following screen. Figure 114 Mozilla Firefox Content Security P-660W-Tx v2 User’s Guide...
Page 208 Appendix A Pop-up Windows, JavaScripts and Java Permissions P-660W-Tx v2 User’s Guide...
Page 209: Appendix B Wireless Lans
A and B can access the wired network and communicate with each other. When Intra-BSS is disabled, wireless client A and B can still access the wired network but cannot communicate with each other. P-660W-Tx v2 User’s Guide...
Page 210: Figure 116 Basic Service Set
An ESSID (ESS IDentification) uniquely identifies each ESS. All access points and their associated wireless clients within the same ESS must have the same ESSID in order to communicate. P-660W-Tx v2 User’s Guide...
Page 211: Figure 117 Infrastructure Wlan
(AP) or wireless gateway, but out-of-range of each other, so they cannot "hear" each other, that is they do not know if the channel is currently being used. Therefore, they are considered hidden from each other. P-660W-Tx v2 User’s Guide...
Page 212: Figure 118 Rts/Cts
AP will fragment the packet into smaller data frames. A large Fragmentation Threshold is recommended for networks not prone to interference while you should set a smaller threshold for busy networks or networks that are prone to interference. P-660W-Tx v2 User’s Guide...
Page 213: Table 76 Ieee 802.11G
5.5 / 11 CCK (Complementary Code Keying) 6/9/12/18/24/36/48/54 OFDM (Orthogonal Frequency Division Multiplexing) Wireless Security Overview Wireless security is vital to your network to protect wireless communication between wireless clients, access points and the wired network. P-660W-Tx v2 User’s Guide...
Page 214: Table 77 Wireless Security Levels
RADIUS is based on a client-server model that supports authentication, authorization and accounting. The access point is the client and the server is the RADIUS server. The RADIUS server handles the following tasks: • Authentication Determines the identity of the users. • Authorization P-660W-Tx v2 User’s Guide...
Page 215: Types Of Radius Messages
EAP to interact with an EAP-compatible RADIUS server, an access point helps a wireless station and a RADIUS server perform authentication. The type of authentication you use depends on the RADIUS server and an intermediary AP(s) that supports IEEE 802.1x. . P-660W-Tx v2 User’s Guide...
Page 216 However, PEAP only supports EAP methods, such as EAP-MD5, EAP-MSCHAPv2 and EAP-GTC (EAP-Generic Token Card), for client authentication. EAP-GTC is implemented only by Cisco. LEAP LEAP (Lightweight Extensible Authentication Protocol) is a Cisco implementation of IEEE 802.1x. P-660W-Tx v2 User’s Guide...
Page 217: Table 78 Comparison Of Eap Authentication Types
If the AP or the wireless clients do not support WPA2, just use WPA or WPA-PSK depending on whether you have an external RADIUS server or not. Select WEP only when the AP and/or wireless clients do not support WPA or WPA2. WEP is less secure than WPA or WPA2. P-660W-Tx v2 User’s Guide...
Page 218: User Authentication
AP and does not need to go with the authentication process again. Pre-authentication enables fast roaming by allowing the wireless client (already connecting to an AP) to perform IEEE 802.1x authentication with another AP before connecting to it. P-660W-Tx v2 User’s Guide...
Page 219: Wireless Client Wpa Supplicants
(PSK) must consist of between 8 and 63 ASCII characters or 64 hexadecimal characters (including spaces and symbols). 2 The AP checks each wireless client's password and allows it to join the network only if the password matches. P-660W-Tx v2 User’s Guide...
Page 220: Figure 120 Wpa(2)-Psk Authentication
Enable without Dynamic WEP Key Open Enable with Dynamic WEP Key Enable without Dynamic WEP Key Disable Shared Enable with Dynamic WEP Key Enable without Dynamic WEP Key Disable TKIP/AES Enable WPA-PSK TKIP/AES Disable WPA2 TKIP/AES Enable WPA2-PSK TKIP/AES Disable P-660W-Tx v2 User’s Guide...
Page 221: Antenna Characteristics
The angle of the beam determines the width of the coverage pattern. Angles typically range from 20 degrees (very directional) to 120 degrees (less directional). Directional antennas are ideal for hallways and outdoor point-to-point applications. P-660W-Tx v2 User’s Guide...
Page 222: Positioning Antennas
For a single AP application, place omni-directional antennas as close to the center of the coverage area as possible. For directional antennas, point the antenna in the direction of the desired coverage area. P-660W-Tx v2 User’s Guide...
Page 223: Appendix C Common Services
IP numbers. User-Defined The IPSEC ESP (Encapsulation Security (IPSEC_TUNNEL) Protocol) tunneling protocol uses this service. FINGER Finger is a UNIX or Internet related command that can be used to find out if a user is logged on. P-660W-Tx v2 User’s Guide...
Page 224 This is the data channel. RCMD Remote Command Service. REAL_AUDIO 7070 A streaming audio service that enables real time sound over the web. REXEC Remote Execution Daemon. RLOGIN Remote Login. RTELNET Remote Telnet. P-660W-Tx v2 User’s Guide...
Page 225 TFTP Trivial File Transfer Protocol is an Internet file transfer protocol similar to FTP, but uses the UDP (User Datagram Protocol) rather than TCP (Transmission Control Protocol). VDOLIVE 7000 Another videoconferencing solution. P-660W-Tx v2 User’s Guide...
Page 226 Appendix C Common Services P-660W-Tx v2 User’s Guide...
Page 228 GBIC slots or laser products, such as fiber-optic transceiver and GPON products) PRODUIT CONFORME SELON 21 CFR 1040.10 ET 1040.11. (for products with mini- GBIC slots or laser products, such as fiber-optic transceiver and GPON products) P-660W-Tx v2 User’s Guide...
Page 229 (For USB wireless adapters or CardBus cards. The SAR value may differ by model: check before adding this statement.) • This equipment has been SAR-evaluated for use in laptops (notebooks) with side slot configuration. (for Wireless USB adapters and wireless PCMCIA cards) P-660W-Tx v2 User’s Guide...
Page 230 This device has been designed for the WLAN 5 GHz network throughout the EC region and Switzerland, with restrictions in France. (for IEEE 802.11a wireless devices) This Class B digital apparatus complies with Canadian ICES-003. Cet appareil numérique de la classe B est conforme à la norme NMB-003 du Canada. P-660W-Tx v2 User’s Guide...
Page 231: Zyxel Limited Warranty
To obtain the services of this warranty, contact your vendor. You may also refer to the warranty policy for the region in which you bought the device at http://www.zyxel.com/web/ support_warranty_info.php. Registration Register your product online to receive e-mail notices of firmware upgrades and information at www.zyxel.com. P-660W-Tx v2 User’s Guide...
Page 232 Appendix D Legal Information P-660W-Tx v2 User’s Guide...
Page 233: Appendix E Customer Support
• Sales E-mail: sales@zyxel.com.tw • Telephone: +886-3-578-3942 • Fax: +886-3-578-2439 • Web: www.zyxel.com • Regular Mail: ZyXEL Communications Corp., 6 Innovation Road II, Science Park, Hsinchu 300, Taiwan China - ZyXEL Communications (Beijing) Corp. • Support E-mail: cso.zycn@zyxel.cn • Sales E-mail: sales@zyxel.cn •...
Page 234 Czech Republic • E-mail: info@cz.zyxel.com • Telephone: +420-241-091-350 • Fax: +420-241-091-359 • Web: www.zyxel.cz • Regular Mail: ZyXEL Communications, Czech s.r.o., Modranská 621, 143 01 Praha 4 - Modrany, Ceská Republika Denmark • Support E-mail: support@zyxel.dk • Sales E-mail: sales@zyxel.dk •...
Page 235 Tokyo 141-0022, Japan Kazakhstan • Support: http://zyxel.kz/support • Sales E-mail: sales@zyxel.kz • Telephone: +7-3272-590-698 • Fax: +7-3272-590-689 • Web: www.zyxel.kz • Regular Mail: ZyXEL Kazakhstan, 43 Dostyk Ave., Office 414, Dostyk Business Centre, 050010 Almaty, Republic of Kazakhstan P-660W-Tx v2 User’s Guide...
Page 236 • Support Telephone: +1-800-978-7222 • Sales E-mail: sales@zyxel.com • Sales Telephone: +1-714-632-0882 • Fax: +1-714-632-0858 • Web: www.zyxel.com • Regular Mail: ZyXEL Communications Inc., 1130 N. Miller St., Anaheim, CA 92806- 2001, U.S.A. Norway • Support E-mail: support@zyxel.no • Sales E-mail: sales@zyxel.no •...
Page 237 • Support E-mail: support@zyxel.es • Sales E-mail: sales@zyxel.es • Telephone: +34-902-195-420 • Fax: +34-913-005-345 • Web: www.zyxel.es • Regular Mail: ZyXEL Communications, Arte, 21 5ª planta, 28033 Madrid, Spain Sweden • Support E-mail: support@zyxel.se • Sales E-mail: sales@zyxel.se • Telephone: +46-31-744-7700 •...
Page 238 • Sales E-mail: sales@zyxel.co.uk • Telephone: +44-1344-303044, 0845 122 0301 (UK only) • Fax: +44-1344-303034 • Web: www.zyxel.co.uk • Regular Mail: ZyXEL Communications UK Ltd., 11 The Courtyard, Eastern Road, Bracknell, Berkshire RG12 2XB, United Kingdom (UK) P-660W-Tx v2 User’s Guide...
Page 239: Index
DSL line summary wizard dimensions Basic Service Set, see BSS blocking time domain name Domain Name System, see DNS DSL line, reset dynamic DNS Dynamic Host Configuration Protocol, see DHCP P-660W-Tx v2 User’s Guide...
Page 240 110, 122 configuration customized services key fields, rule configuration configuration policies predefined services rules checklist example, setup LAN to WAN LAN setup logic LAN to WAN rules security ramifications summary LEDs P-660W-Tx v2 User’s Guide...
Page 241 135, 136 application limitations mapping types mode system timeout traversal Request To Send, see RTS Network Address Translation, see NAT reset network management RFC 1483 NNTP RFC 1631 directions 56, 60 P-660W-Tx v2 User’s Guide...
Page 242 Sustained Cell Rate, see SCR backup option configuration TCP maximum incomplete 123, 125, 129 encapsulation temperature WAN to LAN rules Temporal Key Integrity Protocol, see TKIP 65, 74 threshold values activation max-incomplete high web configurator max-incomplete low P-660W-Tx v2 User’s Guide...
Page 243 70, 217 user authentication vs WPA2-PSK wireless client supplicant with RADIUS application example WPA2-PSK 69, 217, 218 application example WPA-PSK 69, 217, 218 application example zero configuration 85, 90 ZyNOS ZyXEL Network Operating System, see ZyNOS P-660W-Tx v2 User’s Guide...
Page 244 Index P-660W-Tx v2 User’s Guide...

This manual is also suitable for:

P-660w-tx v2 P-660w-t1 v2 P-660w-t3 v2

ZyXEL Communications P-660W-Tx User Manual

Chapter 1 Introducing the Zyxel Device

Chapter 2 Introducing the Web Configurator

Chapter 3 Connection Setup Wizard

Chapter 4 Media Bandwidth Management Wizard

Chapter 5 LAN Setup

Chapter 6 Wireless LAN

Chapter 7 WAN Setup

Chapter 8 Network Address Translation (NAT) Screens

Chapter 9 Dynamic DNS Setup

Chapter 10 Time and Date

Chapter 11 Firewall Configuration

Chapter 12 Content Filtering

Chapter 13

Chapter 14 Universal Plug-And-Play (Upnp)

Chapter 15 Logs Screens

Quick Links

Troubleshooting

Need help?

Questions and answers

Related Manuals for ZyXEL Communications P-660W-Tx

Summary of Contents for ZyXEL Communications P-660W-Tx