ZyXEL Communications 662HW Series User Manual

Prestige 662h/hw series, User’s guide

Text mode
Original mode

Prestige 662H/HW Series

ADSL 2+ 4-Port Security Gateway

User’s Guide

Version 3.40

November 2004

This manual is related to the following products:

662H Series

Table of contents

Document Outline

User’s Guide
Copyright
Federal Communications Commission (FCC) Interference Statement
ZyXEL Limited Warranty
Customer Support
Table of Contents
List of Figures
List of Tables
Preface
Introduction to DSL
Getting To Know Your Prestige
- 1.1 Introducing the Prestige
Introducing the Web Configurator
- 2.1 Web Configurator Overview
Wizard Setup for Internet Access
- 3.1 Introduction
- 3.2 Internet Access Wizard Setup: First Screen
- 3.3 IP Address and Subnet Mask
- 3.4 Internet Access Wizard Setup: Second Screen
  - 3.4.1 DHCP Setup
    - 3.4.1.1 IP Pool Setup
  - 3.4.2 Internet Access Wizard Setup: Third Screen
- 3.5 Internet Access Wizard Setup: Connection Test
  - 3.5.1 Test Your Internet Connection
Wizard Setup for Media Bandwidth Management
- 4.1 Introduction
  - 4.1.1 Predefined Media Bandwidth Management Services
- 4.2 Media Bandwidth Management Setup 1
- 4.3 Media Bandwidth Mgnt. Wizard Setup: Second Screen
- 4.4 Media Bandwidth Mgnt. Wizard Setup: Finish
Password Setup
- 5.1 Password Overview
  - 5.1.1 Configuring Password
LAN Setup
- 6.1 LAN Overview
  - 6.1.1 LANs, WANs and the Prestige
- 6.2 DNS Server Address
- 6.3 DNS Server Address Assignment
- 6.4 LAN TCP/IP
- 6.5 Any IP
  - 6.5.1 How Any IP Works
- 6.6 Configuring LAN
- 6.7 Configuring Static DHCP
DMZ
- 7.1 Introduction
- 7.2 Configuring DMZ
Wireless LAN Setup
- 8.1 Introduction
- 8.2 Levels of Security
- 8.3 Data Encryption with WEP
- 8.4 Configuring Wireless LAN
- 8.5 Configuring MAC Filter
- 8.6 Network Authentication
  - 8.6.1 EAP
    - 8.6.1.1 RADIUS
    - 8.6.1.2 Types of RADIUS Messages
  - 8.6.2 EAP Authentication Overview
- 8.7 Introduction to WPA
  - 8.7.1 User Authentication
  - 8.7.2 Encryption
- 8.8 WPA-PSK Application Example
- 8.9 WPA with RADIUS Application Example
- 8.10 Security Parameters Summary
- 8.11 Wireless Client WPA Supplicants
- 8.12 Configuring 802.1x and WPA
- 8.13 Configuring Local User Authentication
- 8.14 Configuring RADIUS
WAN Setup
- 9.1 WAN Overview
- 9.2 Metric
- 9.3 PPPoE Encapsulation
- 9.4 Traffic Shaping
- 9.5 Zero Configuration Internet Access
- 9.6 Configuring WAN Setup
- 9.7 Traffic Redirect
- 9.8 Configuring WAN Backup
- 9.9 Configuring Advanced WAN Backup
- 9.10 AT Command Strings
- 9.11 DTR Signal
- 9.12 Response Strings
- 9.13 Configuring Advanced Modem Setup
Network Address Translation (NAT) Screens
- 10.1 NAT Overview
- 10.2 SUA (Single User Account) Versus NAT
- 10.3 SUA Server
- 10.4 Selecting the NAT Mode
- 10.5 Configuring SUA Server
- 10.6 Configuring Address Mapping
- 10.7 Editing an Address Mapping Rule
Dynamic DNS Setup
- 11.1 Dynamic DNS
  - 11.1.1 DYNDNS Wildcard
- 11.2 Configuring Dynamic DNS
Time and Date
- 12.1 Configuring Time and Date
Firewalls
- 13.1 Firewall Overview
- 13.2 Types of Firewalls
- 13.3 Introduction to ZyXEL’s Firewall
  - 13.3.1 Denial of Service Attacks
- 13.4 Denial of Service
  - 13.4.1 Basics
  - 13.4.2 Types of DoS Attacks
- 13.5 Stateful Inspection
- 13.6 Guidelines for Enhancing Security with Your Firewall
  - 13.6.1 Security In General
- 13.7 Packet Filtering Vs Firewall
  - 13.7.1 Packet Filtering:
    - 13.7.1.1 When To Use Filtering
  - 13.7.2 Firewall
    - 13.7.2.1 When To Use The Firewall
Firewall Configuration
- 14.1 Access Methods
- 14.2 Firewall Policies Overview
- 14.3 Rule Logic Overview
- 14.4 Connection Direction Example
- 14.5 Configuring Basic Firewall Settings
- 14.6 Rule Summary
  - 14.6.1 Configuring Firewall Rules
- 14.7 Customized Services
- 14.8 Creating/Editing A Customized Service
- 14.9 Example Firewall Rule
- 14.10 Predefined Services
- 14.11 Anti-Probing
- 14.12 Configuring Attack Alert
  - 14.12.1 Threshold Values
  - 14.12.2 Half-Open Sessions
    - 14.12.2.1 TCP Maximum Incomplete and Blocking Time
Content Filtering
- 15.1 Content Filtering Overview
- 15.2 Configuring Keyword Blocking
- 15.3 Configuring the Schedule
- 15.4 Configuring Trusted Computers
Content Access Control
- 16.1 Content Access Control Overview
  - 16.1.1 Content Access Control WLAN Application
  - 16.1.2 Configuration Steps
- 16.2 Activating CAC and Create User Groups
- 16.3 User Account Setup
- 16.4 User Online Status
- 16.5 Content Access Control Logins
  - 16.5.1 User Login
  - 16.5.2 Administrator Login
Anti-Virus Packet Scan
- 17.1 Overview
  - 17.1.1 Types of Computer Viruses
- 17.2 Signature-Based Virus Scan
  - 17.2.1 Computer Virus Infection and Prevention
- 17.3 Introduction to the Prestige Anti-virus Packet Scan
  - 17.3.1 How the Prestige Virus Scan Works
  - 17.3.2 Limitations of the Prestige Packet Scan
- 17.4 Anti-virus Packet Scan Configuration
- 17.5 Registration and Online Update
  - 17.5.1 Updating the Anti Virus Packet Scan
Introduction to IPSec
- 18.1 VPN Overview
- 18.2 IPSec Architecture
  - 18.2.1 IPSec Algorithms
  - 18.2.2 Key Management
- 18.3 Encapsulation
  - 18.3.1 Transport Mode
  - 18.3.2 Tunnel Mode
- 18.4 IPSec and NAT
VPN Screens
- 19.1 VPN/IPSec Overview
- 19.2 IPSec Algorithms
  - 19.2.1 AH (Authentication Header) Protocol
  - 19.2.2 ESP (Encapsulating Security Payload) Protocol
- 19.3 My IP Address
- 19.4 Secure Gateway Address
  - 19.4.1 Dynamic Secure Gateway Address
- 19.5 VPN Summary Screen
- 19.6 Keep Alive
- 19.7 NAT Traversal
  - 19.7.1 NAT Traversal Configuration
  - 19.7.2 Remote DNS Server
- 19.8 ID Type and Content
  - 19.8.1 ID Type and Content Examples
- 19.9 Pre-Shared Key
- 19.10 Editing VPN Policies
- 19.11 IKE Phases
- 19.12 Configuring Advanced IKE Settings
- 19.13 Manual Key Setup
  - 19.13.1 Security Parameter Index (SPI)
- 19.14 Configuring Manual Key
- 19.15 Viewing SA Monitor
- 19.16 Configuring Global Setting
- 19.17 Telecommuter VPN/IPSec Examples
  - 19.17.1 Telecommuters Sharing One VPN Rule Example
  - 19.17.2 Telecommuters Using Unique VPN Rules Example
- 19.18 VPN and Remote Management
Remote Management Configuration
- 20.1 Remote Management Overview
- 20.2 Telnet
- 20.3 FTP
- 20.4 Web
- 20.5 Configuring Remote Management
Universal Plug-and-Play (UPnP)
- 21.1 Introducing Universal Plug and Play
- 21.2 UPnP and ZyXEL
  - 21.2.1 Configuring UPnP
- 21.3 Installing UPnP in Windows Example
- 21.4 Using UPnP in Windows XP Example
Logs Screens
- 22.1 Logs Overview
  - 22.1.1 Alerts and Logs
- 22.2 Configuring Log Settings
- 22.3 Displaying the Logs
- 22.4 SMTP Error Messages
  - 22.4.1 Example E-mail Log
Media Bandwidth Management Advanced Setup
- 23.1 Bandwidth Management Advanced Setup Overview
- 23.2 Bandwidth Classes and Filters
- 23.3 Proportional Bandwidth Allocation
- 23.4 Bandwidth Management Usage Examples
- 23.5 Scheduler
  - 23.5.1 Priority-based Scheduler
  - 23.5.2 Fairness-based Scheduler
- 23.6 Maximize Bandwidth Usage
  - 23.6.1 Reserving Bandwidth for Non-Bandwidth Class Traffic
  - 23.6.2 Maximize Bandwidth Usage Example
- 23.7 Bandwidth Borrowing
  - 23.7.1 Bandwidth Borrowing Example
  - 23.7.2 Maximize Bandwidth Usage With Bandwidth Borrowing
- 23.8 Configuring Summary
- 23.9 Configuring Class Setup
  - 23.9.1 Media Bandwidth Management Class Configuration
  - 23.9.2 Media Bandwidth Management Statistics
- 23.10 Bandwidth Monitor
Maintenance
- 24.1 Maintenance Overview
- 24.2 System Status Screen
  - 24.2.1 System Statistics
- 24.3 DHCP Table Screen
- 24.4 Any IP Table Screen
- 24.5 Wireless Screen
  - 24.5.1 Association List
- 24.6 Diagnostic Screens
  - 24.6.1 Diagnostic General Screen
  - 24.6.2 Diagnostic DSL Line Screen
- 24.7 Firmware Screen
Introducing the SMT
- 25.1 SMT Introduction
- 25.2 Navigating the SMT Interface
  - 25.2.1 System Management Terminal Interface Summary
- 25.3 Changing the System Password
Menu 1 General Setup
- 26.1 General Setup
- 26.2 Procedure To Configure Menu 1
  - 26.2.1 Procedure to Configure Dynamic DNS
Menu 2 WAN Backup Setup
- 27.1 Introduction to WAN Backup Setup
- 27.2 Configuring Dial Backup in Menu 2
  - 27.2.1 Traffic Redirect Setup
- 27.3 Configuring Dial Backup Setup
- 27.4 Advanced Dial Backup Setup
Menu 3 LAN Setup
- 28.1 LAN Setup
  - 28.1.1 General Ethernet Setup
- 28.2 Protocol Dependent Ethernet Setup
- 28.3 CP/IP Ethernet Setup and DHCP
Wireless LAN Setup
- 29.1 Wireless LAN Overview
- 29.2 Wireless LAN Setup
  - 29.2.1 Wireless LAN MAC Address Filter
Internet Access
- 30.1 Internet Access Overview
- 30.2 IP Policies
- 30.3 IP Alias
- 30.4 IP Alias Setup
- 30.5 Route IP Setup
- 30.6 Internet Access Configuration
Remote Node Configuration
- 31.1 Remote Node Setup Overview
- 31.2 Remote Node Setup
- 31.3 Remote Node Network Layer Options
  - 31.3.1 My WAN Addr Sample IP Addresses
- 31.4 Remote Node Filter
- 31.5 Editing ATM Layer Options
Static Route Setup
- 32.1 IP Static Route Overview
- 32.2 Configuration
Bridging Setup
- 33.1 Bridging in General
- 33.2 Bridge Ethernet Setup
  - 33.2.1 Remote Node Bridging Setup
  - 33.2.2 Bridge Static Route Setup
Network Address Translation (NAT)
- 34.1 Using NAT
  - 34.1.1 SUA (Single User Account) Versus NAT
- 34.2 Applying NAT
- 34.3 NAT Setup
  - 34.3.1 Address Mapping Sets
- 34.4 Configuring a Server behind NAT
- 34.5 General NAT Examples
Enabling the Firewall
- 35.1 Remote Management and the Firewall
- 35.2 Access Methods
- 35.3 Enabling the Firewall
Filter Configuration
- 36.1 About Filtering
  - 36.1.1 The Filter Structure of the Prestige
- 36.2 Configuring a Filter Set for the Prestige
- 36.3 Filter Rules Summary Menus
- 36.4 Configuring a Filter Rule
  - 36.4.1 TCP/IP Filter Rule
  - 36.4.2 Generic Filter Rule
- 36.5 Filter Types and NAT
- 36.6 Example Filter
- 36.7 Applying Filters and Factory Defaults
  - 36.7.1 Ethernet Traffic
  - 36.7.2 Remote Node Filters
SNMP Configuration
- 37.1 About SNMP
- 37.2 Supported MIBs
- 37.3 SNMP Configuration
- 37.4 SNMP Traps
System Security
- 38.1 System Security
- 38.2 Creating User Accounts on the Prestige
System Information and Diagnosis
- 39.1 Overview
- 39.2 System Status
- 39.3 System Information
  - 39.3.1 System Information
  - 39.3.2 Console Port Speed
- 39.4 Log and Trace
  - 39.4.1 Viewing Error Log
  - 39.4.2 Syslog and Accounting
- 39.5 Diagnostic
Firmware and Configuration File Maintenance
- 40.1 Filename Conventions
- 40.2 Backup Configuration
- 40.3 Restore Configuration
- 40.4 Uploading Firmware and Configuration Files
System Maintenance
- 41.1 Command Interpreter Mode
- 41.2 Call Control Support
  - 41.2.1 Budget Management
- 41.3 Time and Date Setting
  - 41.3.1 Resetting the Time
Remote Management
- 42.1 Remote Management Overview
- 42.2 Remote Management
  - 42.2.1 Remote Management Setup
  - 42.2.2 Remote Management Limitations
- 42.3 Remote Management and NAT
- 42.4 System Timeout
IP Policy Routing
- 43.1 IP Policy Routing Overview
- 43.2 Benefits of IP Policy Routing
- 43.3 Routing Policy
- 43.4 IP Routing Policy Setup
- 43.5 Applying an IP Policy
  - 43.5.1 Ethernet IP Policies
- 43.6 IP Policy Routing Example
Call Scheduling
- 44.1 Introduction
VPN/IPSec Setup
- 45.1 VPN/IPSec Overview
- 45.2 IPSec Summary Screen
- 45.3 IPSec Setup
- 45.4 IKE Setup
- 45.5 Manual Setup
  - 45.5.1 Active Protocol
  - 45.5.2 Security Parameter Index (SPI)
SA Monitor
- 46.1 SA Monitor Overview
- 46.2 Using SA Monitor
Internal SPTGEN
- 47.1 Internal SPTGEN Overview
- 47.2 The Configuration Text File Format
  - 47.2.1 Internal SPTGEN File Modification - Important Points to Remember
- 47.3 Internal SPTGEN FTP Download Example
- 47.4 Internal SPTGEN FTP Upload Example
Troubleshooting
- 48.1 Problems Starting Up the Prestige
- 48.2 Problems with the LAN LED
- 48.3 Problems with the DSL LED
- 48.4 Problems with the LAN Interface
- 48.5 Problems with the WAN Interface
- 48.6 Problems with Internet Access
- 48.7 Problems with the Password
- 48.8 Problems with the Web Configurator
- 48.9 Problems with Remote Management
Cable Pin Assignments
Splitters and Microfilters
Setting up Your Computer’s IP Address
IP Subnetting
PPPoE
Virtual Circuit Topology
Wireless LAN and IEEE 802.11
Wireless LAN With IEEE 802.1x
Types of EAP Authentication
Antenna Selection and Positioning Recommendation
myZyXEL.com
Windows 98/Me Requirements for Anti- Virus Packet Scan Message Display
Example Internal SPTGEN Screens
Command Interpreter
Firewall Commands
- Sys Firewall Commands
NetBIOS Filter Commands
Brute-Force Password Guessing Protection
Boot Commands
Log Descriptions
Index
- A
- B
- C
- D
- E
- F
- G
- H
- I
- K
- L
- M
- N
- O
- P
- Q
- R
- S
- T
- U
- V
- W
- X
- Z