User Guide
Page 35
...(W)(L)-DxA Series User's Guide Preface Congratulations on getting started. • Web Configurator Online Help Embedded web help you to type one predefined choices. • Screen titles and labels are enclosed in Bold Arial font. Not all User Guide-related comments, questions or suggestions for support documents. • Quick Start Guide The Quick Start Guide is designed to install and configure. It contains connection information and instructions on your ZyXEL Device. User Guide Feedback Help us help for...
...(W)(L)-DxA Series User's Guide Preface Congratulations on getting started. • Web Configurator Online Help Embedded web help you to type one predefined choices. • Screen titles and labels are enclosed in Bold Arial font. Not all User Guide-related comments, questions or suggestions for support documents. • Quick Start Guide The Quick Start Guide is designed to install and configure. It contains connection information and instructions on your ZyXEL Device. User Guide Feedback Help us help for...
User Guide
Page 39
... incoming traffic from the WAN to your device's configuration via an autoprovisioning server. The firewall supports TCP/UDP inspection, DoS detection and prevention, real time alerts, reports and logs. You can receive incoming PSTN phone calls even while someone else is making calls. Chapter 1 Getting To Know the ZyXEL Device 39 P-2602H(W)(L)-DxA Series User's Guide PSTN Line ("L" models only) You can connect a PSTN line to the LAN is blocked unless it...
... incoming traffic from the WAN to your device's configuration via an autoprovisioning server. The firewall supports TCP/UDP inspection, DoS detection and prevention, real time alerts, reports and logs. You can receive incoming PSTN phone calls even while someone else is making calls. Chapter 1 Getting To Know the ZyXEL Device 39 P-2602H(W)(L)-DxA Series User's Guide PSTN Line ("L" models only) You can connect a PSTN line to the LAN is blocked unless it...
User Guide
Page 51
... blink, the defaults have been restored and the device restarts. You can also use the 2.1.2.1 Using The Reset Button 1 Make sure the POWER LED is on . To turn the wireless LAN off or vice versa. ("W" models only) To activate OTIST in again. The WLAN LED should change from on to off or on (not blinking). 2 Do one second and release it. P-2602H(W)(L)-DxA Series User's Guide Note: For security reasons, the ZyXEL Device automatically logs...
... blink, the defaults have been restored and the device restarts. You can also use the 2.1.2.1 Using The Reset Button 1 Make sure the POWER LED is on . To turn the wireless LAN off or vice versa. ("W" models only) To activate OTIST in again. The WLAN LED should change from on to off or on (not blinking). 2 Do one second and release it. P-2602H(W)(L)-DxA Series User's Guide Note: For security reasons, the ZyXEL Device automatically logs...
User Guide
Page 53
... set up help screens. Wizards: Click this screen to configure LAN TCP/IP settings, enable Any IP and other advanced properties. Internet Connection Use this screen to configure network address translation mapping rules. IP Use this screen to assign your ZyXEL Device's Voice over IP settings. Table 6 Navigation Panel Summary LINK Status Network WAN LAN Wireless LAN ("W" models only) NAT VoIP SIP TAB FUNCTION This screen contains administrative and system-related information. General Use this screen to configure ISP parameters, WAN IP address assignment, DNS servers...
... set up help screens. Wizards: Click this screen to configure LAN TCP/IP settings, enable Any IP and other advanced properties. Internet Connection Use this screen to configure network address translation mapping rules. IP Use this screen to assign your ZyXEL Device's Voice over IP settings. Table 6 Navigation Panel Summary LINK Status Network WAN LAN Wireless LAN ("W" models only) NAT VoIP SIP TAB FUNCTION This screen contains administrative and system-related information. General Use this screen to configure ISP parameters, WAN IP address assignment, DNS servers...
User Guide
Page 54
... keywords in specific directions. Use this screen to configure bandwidth management on an interface. Use this screen to configure IP static routes to configure speed dial for services that you call often. Use this screen to block access to drop sessions that you have not made available. Use this screen to set the days and times for a dynamic IP address. 54 Chapter 2 Introducing the Web Configurator This screen shows a summary of users on network traffic going...
... keywords in specific directions. Use this screen to configure bandwidth management on an interface. Use this screen to configure IP static routes to configure speed dial for services that you call often. Use this screen to block access to drop sessions that you have not made available. Use this screen to set the days and times for a dynamic IP address. 54 Chapter 2 Introducing the Web Configurator This screen shows a summary of users on network traffic going...
User Guide
Page 55
...(W)(L)-DxA Series User's Guide Table 6 Navigation Panel Summary LINK TAB Remote MGMT WWW Telnet FTP SNMP DNS ICMP UPnP Maintenance System General General Logs Time Setting View Log Log Settings Tools Firmware Configuration Restart Diagnostic General DSL Line FUNCTION Use this screen to configure through which interface(s) and from which IP address(es) users can use Telnet to manage the ZyXEL Device. Use this screen to configure through which interface(s) and from which IP address(es) users can send DNS queries to backup and restore your device. Use this...
...(W)(L)-DxA Series User's Guide Table 6 Navigation Panel Summary LINK TAB Remote MGMT WWW Telnet FTP SNMP DNS ICMP UPnP Maintenance System General General Logs Time Setting View Log Log Settings Tools Firmware Configuration Restart Diagnostic General DSL Line FUNCTION Use this screen to configure through which interface(s) and from which IP address(es) users can use Telnet to manage the ZyXEL Device. Use this screen to configure through which interface(s) and from which IP address(es) users can send DNS queries to backup and restore your device. Use this...
User Guide
Page 58
... (username, password and/or service name) exactly as provided to skip your ISP. If you would like to you still cannot connect, click Manually configure your connection type. a The following screen displays if a PPPoE or PPPoA connection is not detected. Check your hardware connections and click Restart the Internet/Wireless Setup Wizard to return to detect your DSL connection and your Internet connection. P-2602H(W)(L)-DxA Series User's Guide Figure 12 Wizard Welcome 3 Your ZyXEL device attempts...
... (username, password and/or service name) exactly as provided to skip your ISP. If you would like to you still cannot connect, click Manually configure your connection type. a The following screen displays if a PPPoE or PPPoA connection is not detected. Check your hardware connections and click Restart the Internet/Wireless Setup Wizard to return to detect your DSL connection and your Internet connection. P-2602H(W)(L)-DxA Series User's Guide Figure 12 Wizard Welcome 3 Your ZyXEL device attempts...
User Guide
Page 84
... you can change it . DSL Firmware This field displays the current version of the ZyXEL Device in the wireless LAN. 84 Chapter 6 Status Screens The ZyXEL Device acts as a surrogate DHCP server and relays DHCP requests and responses between the remote server and the clients. Security This displays the type of the default gateway, if applicable. P-2602H(W)(L)-DxA Series User's Guide Each field is providing to the LAN. DHCP This field displays what DHCP services the ZyXEL Device is described...
... you can change it . DSL Firmware This field displays the current version of the ZyXEL Device in the wireless LAN. 84 Chapter 6 Status Screens The ZyXEL Device acts as a surrogate DHCP server and relays DHCP requests and responses between the remote server and the clients. Security This displays the type of the default gateway, if applicable. P-2602H(W)(L)-DxA Series User's Guide Each field is providing to the LAN. DHCP This field displays what DHCP services the ZyXEL Device is described...
User Guide
Page 85
P-2602H(W)(L)-DxA Series User's Guide Table 21 Status Screen LABEL DESCRIPTION Security Firewall Content Filter System Status System Uptime Current Date/ Time System Mode CPU Usage Memory Usage Interface Status Interface Status Rate Summary Client List AnyIP Table WLAN Status This displays whether or not the ZyXEL Device's firewall is using the interface. This field displays how long the ZyXEL Device has been running at full load, and the throughput is up . The ZyXEL Device starts up...
P-2602H(W)(L)-DxA Series User's Guide Table 21 Status Screen LABEL DESCRIPTION Security Firewall Content Filter System Status System Uptime Current Date/ Time System Mode CPU Usage Memory Usage Interface Status Interface Status Rate Summary Client List AnyIP Table WLAN Status This displays whether or not the ZyXEL Device's firewall is using the interface. This field displays how long the ZyXEL Device has been running at full load, and the throughput is up . The ZyXEL Device starts up...
User Guide
Page 98
..." traffic typical on page 93 for Internet access is disabled when • the ZyXEL Device is used for bursty data transfers. P-2602H(W)(L)-DxA Series User's Guide The VBR-nRT (non real-time Variable Bit Rate) type is in bridge mode • you set the ZyXEL Device to web screen(s) for information input or troubleshooting. An example of an VBR-nRT connection would be redirected to use a static (fixed) WAN IP address. 7.5 Internet Access Setup To change your ZyXEL Device's WAN remote node settings, click Network > WAN > Internet Access Setup. PCR...
..." traffic typical on page 93 for Internet access is disabled when • the ZyXEL Device is used for bursty data transfers. P-2602H(W)(L)-DxA Series User's Guide The VBR-nRT (non real-time Variable Bit Rate) type is in bridge mode • you set the ZyXEL Device to web screen(s) for information input or troubleshooting. An example of an VBR-nRT connection would be redirected to use a static (fixed) WAN IP address. 7.5 Internet Access Setup To change your ZyXEL Device's WAN remote node settings, click Network > WAN > Internet Access Setup. PCR...
User Guide
Page 111
... multicast routers group. it is set to use a static IP address in another network, you may need to manually configure the network settings of all directly connected networks to access the Internet via the ZyXEL Device. WAN). IGMP (Internet Group Multicast Protocol) is still in wide use a dynamic or static (fixed) IP address, you want to gather group membership. The ZyXEL Device supports both IGMP version 1 (IGMP-v1) and IGMP version 2 (IGMPv2). At start up, the ZyXEL Device queries all IP hosts (including gateways). IGMP version...
... multicast routers group. it is set to use a static IP address in another network, you may need to manually configure the network settings of all directly connected networks to access the Internet via the ZyXEL Device. WAN). IGMP (Internet Group Multicast Protocol) is still in wide use a dynamic or static (fixed) IP address, you want to gather group membership. The ZyXEL Device supports both IGMP version 1 (IGMP-v1) and IGMP version 2 (IGMPv2). At start up, the ZyXEL Device queries all IP hosts (including gateways). IGMP version...
User Guide
Page 189
... LAN). 13.5.4 UDP/ICMP Security UDP and ICMP do not have matching IP and UDP information will create a cache entry. Chapter 13 Firewalls 189 Below is a response to a connection which includes connection information such as sequence numbers). A packet is only allowed to pass through the firewall. P-2602H(W)(L)-DxA Series User's Guide • Allow certain types of traffic from the Internet to specific hosts on the LAN. • Allow access to a Web server...
... LAN). 13.5.4 UDP/ICMP Security UDP and ICMP do not have matching IP and UDP information will create a cache entry. Chapter 13 Firewalls 189 Below is a response to a connection which includes connection information such as sequence numbers). A packet is only allowed to pass through the firewall. P-2602H(W)(L)-DxA Series User's Guide • Allow certain types of traffic from the Internet to specific hosts on the LAN. • Allow access to a Web server...
User Guide
Page 190
... router. • Don't enable any local service (such as FTP and RealAudio) utilize multiple network connections simultaneously. Any protocol that the ZyXEL Device is active. • Keep the firewall in , since the PORT command contains address and port information, which are never allowed in a secured (locked) room. 13.6.1 Security In General You can cause security breaches. Protect by configuring the services to communicate only with Your Firewall • Change the default password. • Limit who can use . Specifically...
... router. • Don't enable any local service (such as FTP and RealAudio) utilize multiple network connections simultaneously. Any protocol that the ZyXEL Device is active. • Keep the firewall in , since the PORT command contains address and port information, which are never allowed in a secured (locked) room. 13.6.1 Security In General You can cause security breaches. Protect by configuring the services to communicate only with Your Firewall • Change the default password. • Limit who can use . Specifically...
User Guide
Page 233
... the Secure Gateway Address field (refer to the Secure Gateway Address field description). It is not used on the peer ID type. For example, in this field to 0.0.0.0 if the remote IPSec router has a dynamic WAN IP address (the Key Management field must precede a hexadecimal key with which to share it blank, the ZyXEL Device will use the DNS or E-mail ID type in the Secure Gateway Address field and the LAN's full IP address range as the local IP address, then...
... the Secure Gateway Address field (refer to the Secure Gateway Address field description). It is not used on the peer ID type. For example, in this field to 0.0.0.0 if the remote IPSec router has a dynamic WAN IP address (the Key Management field must precede a hexadecimal key with which to share it blank, the ZyXEL Device will use the DNS or E-mail ID type in the Secure Gateway Address field and the LAN's full IP address range as the local IP address, then...
User Guide
Page 242
... this IP address changes. Select NULL to open the SA Monitor screen as 0.0.0.0: The ZyXEL Device uses the current ZyXEL Device WAN IP address (static or dynamic) to set up a tunnel without encryption. Authentication Key Type a unique authentication key to be used to encrypt and decrypt the message or to generate and verify a message authentication code. With 3DES, type a unique key 24 (only with which can be used by AH. P-2602H(W)(L)-DxA Series User's Guide Table 89 VPN: Manual Key (continued...
... this IP address changes. Select NULL to open the SA Monitor screen as 0.0.0.0: The ZyXEL Device uses the current ZyXEL Device WAN IP address (static or dynamic) to set up a tunnel without encryption. Authentication Key Type a unique authentication key to be used to encrypt and decrypt the message or to generate and verify a message authentication code. With 3DES, type a unique key 24 (only with which can be used by AH. P-2602H(W)(L)-DxA Series User's Guide Table 89 VPN: Manual Key (continued...
User Guide
Page 292
...(W)(L)-DxA Series User's Guide Table 114 System Time Setting (continued) LABEL New Time (hh:mm:ss) New Date (yyyy/mm/dd) Get from Time Server Time Protocol Time Server Address Time Zone Setup Time Zone Daylight Saving Start Date DESCRIPTION This field displays the last updated time from the time server you specified below. Daytime (RFC 867) format is the format. This will set their clocks ahead of normal local time by...
...(W)(L)-DxA Series User's Guide Table 114 System Time Setting (continued) LABEL New Time (hh:mm:ss) New Date (yyyy/mm/dd) Get from Time Server Time Protocol Time Server Address Time Zone Setup Time Zone Daylight Saving Start Date DESCRIPTION This field displays the last updated time from the time server you specified below. Daytime (RFC 867) format is the format. This will set their clocks ahead of normal local time by...
User Guide
Page 302
... a firewall rule to allow access from the WAN). 2 You have disabled Telnet service in menu 24.11. 3 You have applied a filter in menu 3.1 (LAN) or in menu 11.5 (WAN) to block Telnet service. 4 The IP you entered in the Secured Client IP field in this screen to upload firmware to your (T)FTP client does not allow you to the filename not on page 311 for later use. P-2602H(W)(L)-DxA Series User's Guide...
... a firewall rule to allow access from the WAN). 2 You have disabled Telnet service in menu 24.11. 3 You have applied a filter in menu 3.1 (LAN) or in menu 11.5 (WAN) to block Telnet service. 4 The IP you entered in the Secured Client IP field in this screen to upload firmware to your (T)FTP client does not allow you to the filename not on page 311 for later use. P-2602H(W)(L)-DxA Series User's Guide...
User Guide
Page 319
... the lights turn on when I cannot access the ZyXEL Device from the LAN. If the error persists, you should contact your vendor. 27.2 Problems with the LAN Table 126 Troubleshooting the LAN PROBLEM CORRECTIVE ACTION The ETHERNET lights do not turn on the ZyXEL Device. If Any IP is disabled, make sure that the ZyXEL Device's power adaptor is working properly. Chapter 27 Troubleshooting 319 Check for details). Check your Ethernet cable connections (refer to an appropriate power source. P-2602H(W)(L)-DxA Series User's Guide...
... the lights turn on when I cannot access the ZyXEL Device from the LAN. If the error persists, you should contact your vendor. 27.2 Problems with the LAN Table 126 Troubleshooting the LAN PROBLEM CORRECTIVE ACTION The ETHERNET lights do not turn on the ZyXEL Device. If Any IP is disabled, make sure that the ZyXEL Device's power adaptor is working properly. Chapter 27 Troubleshooting 319 Check for details). Check your Ethernet cable connections (refer to an appropriate power source. P-2602H(W)(L)-DxA Series User's Guide...
User Guide
Page 320
... red.) The ISP provides the WAN IP address after authenticating you have entered the correct Service Type, User Name and Password (be through , make sure that you . Authentication may be sure to the DSLAM. Refer to the network. If you entered the correct user name and password. P-2602H(W)(L)-DxA Series User's Guide 27.3 Problems with the WAN Table 127 Troubleshooting the WAN PROBLEM CORRECTIVE ACTION The DSL light is turned on page 315. Make sure that bridge mode...
... red.) The ISP provides the WAN IP address after authenticating you have entered the correct Service Type, User Name and Password (be through , make sure that you . Authentication may be sure to the DSLAM. Refer to the network. If you entered the correct user name and password. P-2602H(W)(L)-DxA Series User's Guide 27.3 Problems with the WAN Table 127 Troubleshooting the WAN PROBLEM CORRECTIVE ACTION The DSL light is turned on page 315. Make sure that bridge mode...
User Guide
Page 321
... instructions on the same subnet for details. Chapter 27 Troubleshooting 321 P-2602H(W)(L)-DxA Series User's Guide 27.4 Problems Accessing the ZyXEL Device Table 128 Troubleshooting Accessing Your Device PROBLEM CORRECTIVE ACTION I cannot The username is "1234". and username using the proper casing. Refer to for scenarios when remote management may also need to clear your computer from the WAN. The Password and access the Username fields are allowed. Refer to open the Internet Options screen. The default password...
... instructions on the same subnet for details. Chapter 27 Troubleshooting 321 P-2602H(W)(L)-DxA Series User's Guide 27.4 Problems Accessing the ZyXEL Device Table 128 Troubleshooting Accessing Your Device PROBLEM CORRECTIVE ACTION I cannot The username is "1234". and username using the proper casing. Refer to for scenarios when remote management may also need to clear your computer from the WAN. The Password and access the Username fields are allowed. Refer to open the Internet Options screen. The default password...