User Guide
Page 12
... Server 58 4.7.1 Port Forwarding ...58 4.8 Configuring Firewall Rules to Allow a Specified Service 60 4.9 Configuring Static Route for Routing to Another Network 63 4.10 Port BindingConfiguration ...65 4.10.1 Configuring ATM QoS for Multiple WAN Connections 65 4.10.2 Configuring Port Binding ...67 4.11 Configuring QoS to Prioritize Traffic 68 4.12 Access the ZyXEL Device from the...
... Server 58 4.7.1 Port Forwarding ...58 4.8 Configuring Firewall Rules to Allow a Specified Service 60 4.9 Configuring Static Route for Routing to Another Network 63 4.10 Port BindingConfiguration ...65 4.10.1 Configuring ATM QoS for Multiple WAN Connections 65 4.10.2 Configuring Port Binding ...67 4.11 Configuring QoS to Prioritize Traffic 68 4.12 Access the ZyXEL Device from the...
User Guide
Page 14
... Can Do in the NAT Screens 151 9.1.2 What You Need To Know About NAT 151 9.2 The NAT General Setup Screen ...152 9.3 The Port Forwarding Screen ...153 9.3.1 Configuring the Port Forwarding Screen 154 9.3.2 The Port Forwarding Rule Edit Screen 155 9.4 The Address Mapping Screen ...156 9.4.1 The Address Mapping Rule Edit Screen 157 9.5 The ALG Screen ...158 9.6 NAT...
... Can Do in the NAT Screens 151 9.1.2 What You Need To Know About NAT 151 9.2 The NAT General Setup Screen ...152 9.3 The Port Forwarding Screen ...153 9.3.1 Configuring the Port Forwarding Screen 154 9.3.2 The Port Forwarding Rule Edit Screen 155 9.4 The Address Mapping Screen ...156 9.4.1 The Address Mapping Rule Edit Screen 157 9.5 The ALG Screen ...158 9.6 NAT...
User Guide
Page 32
...packets that do not match any of the firewall rules. IPv6/MAC Filter Use this screen to configure the IPv6 settings on the ZyXEL device's LAN interface. Network WAN Internet Connection Use this screen to configure ISP parameters, WAN IP address assignment, and other advanced properties...Chapter 2 The Web Configurator 2.2.2 Navigation Panel Use the menu items on the navigation panel to open sessions). Port Forwarding Use this screen to set the thresholds that the ZyXEL Device uses to determine when to start dropping sessions that do not become fully established (half-open screens to...
...packets that do not match any of the firewall rules. IPv6/MAC Filter Use this screen to configure the IPv6 settings on the ZyXEL device's LAN interface. Network WAN Internet Connection Use this screen to configure ISP parameters, WAN IP address assignment, and other advanced properties...Chapter 2 The Web Configurator 2.2.2 Navigation Panel Use the menu items on the navigation panel to open sessions). Port Forwarding Use this screen to set the thresholds that the ZyXEL Device uses to determine when to start dropping sessions that do not become fully established (half-open screens to...
User Guide
Page 58
... players on the Internet (like A in the figure below) to communicate with the Doom server, Thomas can use port forwarding. Chapter 4 Tutorials • Rule 2 (This maps the public IP address 172.16.1.254 to the private IP address 192.168.1.3) Type: One-to-... Click Apply on each of 192.168.1.34. 58 ADSL Router Series User's Guide Tutorial: NAT Port Forwarding Setup D=192.168.1.34 LAN port 666 WAN A 4.7.1 Port Forwarding Thomas needs to configure the port settings and IP address on a computer behind the ZyXEL Device. In order for a Game Server Thomas manages a Doom server on the...
... players on the Internet (like A in the figure below) to communicate with the Doom server, Thomas can use port forwarding. Chapter 4 Tutorials • Rule 2 (This maps the public IP address 172.16.1.254 to the private IP address 192.168.1.3) Type: One-to-... Click Apply on each of 192.168.1.34. 58 ADSL Router Series User's Guide Tutorial: NAT Port Forwarding Setup D=192.168.1.34 LAN port 666 WAN A 4.7.1 Port Forwarding Thomas needs to configure the port settings and IP address on a computer behind the ZyXEL Device. In order for a Game Server Thomas manages a Doom server on the...
User Guide
Page 59
...for this example. 2 The screen should look as the Start and End port. This is 192.168.1.34 for more information). 1 Click Network > NAT > Port Forwarding and in the table. The ZyXEL Device forwards port 666 traffic to Thomas' Doom server. ADSL Router Series User's Guide 59... Enter the IP address of the Doom server. EXAMPLE 3 The port forwarding settings you configured appear in the Service Name...
...for this example. 2 The screen should look as the Start and End port. This is 192.168.1.34 for more information). 1 Click Network > NAT > Port Forwarding and in the table. The ZyXEL Device forwards port 666 traffic to Thomas' Doom server. ADSL Router Series User's Guide 59... Enter the IP address of the Doom server. EXAMPLE 3 The port forwarding settings you configured appear in the Service Name...
User Guide
Page 60
However, if you are running a server or other service, you may need to allow traffic from WAN to LAN if it matches a specified port number. Click Apply to save your settings. Tutorial: Advanced > QoS 60 ADSL Router Series User's Guide The following tutorial will block traffic originating from the WAN (1). Chapter 4 Tutorials 4.8 Configuring Firewall Rules to Allow a Specified Service By default the firewall will show how to allow access from the WAN (2). Tutorial: NAT Port Forwarding Setup LAN WAN A 2 1 1 Click Security > Firewall and select Custom.
However, if you are running a server or other service, you may need to allow traffic from WAN to LAN if it matches a specified port number. Click Apply to save your settings. Tutorial: Advanced > QoS 60 ADSL Router Series User's Guide The following tutorial will block traffic originating from the WAN (1). Chapter 4 Tutorials 4.8 Configuring Firewall Rules to Allow a Specified Service By default the firewall will show how to allow access from the WAN (2). Tutorial: NAT Port Forwarding Setup LAN WAN A 2 1 1 Click Security > Firewall and select Custom.
User Guide
Page 103
...Idle Timeout field when you have one public IP address and want to use NAT. Back Apply Advanced Setup Click this to save your ZyXEL Device's advanced WAN settings. Click the Advanced Setup button in the Max Idle Timeout field. Click this to return to the previous ... you want the connection up the connection automatically if it is enabled, enter the secondary DNS server IPv6 address for the ZyXEL Device. Click Edit Detail to go to the Port Forwarding screen to disable NAT. Chapter 6 WAN Setup Table 19 Network > WAN > More Connections: Edit (continued) LABEL DESCRIPTION ...
...Idle Timeout field when you have one public IP address and want to use NAT. Back Apply Advanced Setup Click this to save your ZyXEL Device's advanced WAN settings. Click the Advanced Setup button in the Max Idle Timeout field. Click this to return to the previous ... you want the connection up the connection automatically if it is enabled, enter the secondary DNS server IPv6 address for the ZyXEL Device. Click Edit Detail to go to the Port Forwarding screen to disable NAT. Chapter 6 WAN Setup Table 19 Network > WAN > More Connections: Edit (continued) LABEL DESCRIPTION ...
User Guide
Page 151
... in the ZyXEL Device. 9.1.2 What You Need To Know About NAT Inside/Outside Inside/outside denotes where a host is traveling in the NAT Screens • Use the NAT General Setup screen (Section 9.2 on page 152) to configure the NAT setup settings. • Use the Port Forwarding screen (Section... 9.3 on page 153) to configure forward incoming service requests to the server(s) on your local network. • Use the Address Mapping screen (Section 9.4 on page...
... in the ZyXEL Device. 9.1.2 What You Need To Know About NAT Inside/Outside Inside/outside denotes where a host is traveling in the NAT Screens • Use the NAT General Setup screen (Section 9.2 on page 152) to configure the NAT setup settings. • Use the Port Forwarding screen (Section... 9.3 on page 153) to configure forward incoming service requests to the server(s) on your local network. • Use the Address Mapping screen (Section 9.4 on page...
User Guide
Page 152
... > NAT > General LABEL DESCRIPTION Active Network Select this radio button if you can make visible to the outside world. Chapter 9 Network Address Translation (NAT) Port Forwarding A port forwarding set is a list of inside network appear as a single computer to the outside world even though NAT makes your ZyXEL Device. 152 ADSL Router Series User's Guide
... > NAT > General LABEL DESCRIPTION Active Network Select this radio button if you can make visible to the outside world. Chapter 9 Network Address Translation (NAT) Port Forwarding A port forwarding set is a list of inside network appear as a single computer to the outside world even though NAT makes your ZyXEL Device. 152 ADSL Router Series User's Guide
User Guide
Page 153
... able to the server(s) on your network has a small number of NAT sessions they need to establish NAT sessions. Configuring Servers Behind Port Forwarding (Example) Let's say you do not limit the number of NAT sessions a single client can establish. If your local network. Apply... of the desired server. If you can establish through the ZyXEL Device. In this screen to forward incoming service requests to access the Internet. The most often used . Please refer to your previously saved settings. 9.3 The Port Forwarding Screen Use this case, no single client is not degraded...
... able to the server(s) on your network has a small number of NAT sessions they need to establish NAT sessions. Configuring Servers Behind Port Forwarding (Example) Let's say you do not limit the number of NAT sessions a single client can establish. If your local network. Apply... of the desired server. If you can establish through the ZyXEL Device. In this screen to forward incoming service requests to access the Internet. The most often used . Please refer to your previously saved settings. 9.3 The Port Forwarding Screen Use this case, no single client is not degraded...
User Guide
Page 154
... rule index number (read-only). 154 ADSL Router Series User's Guide Figure 63 Network > NAT > Port Forwarding The following screen. Server IP Address Enter the IP address of the server for particular services. A default...ZyXEL Device discards all packets received for specified services, NAT supports a default server. Figure 62 Multiple Servers Behind NAT Example A=192.168.1.33 LAN WAN B=192.168.1.34 192.168.1.1 C=192.168.1.35 D=192.168.1.36 IP Address assigned by ISP 9.3.1 Configuring the Port Forwarding Screen Click Network > NAT > Port Forwarding to the servers for ports...
... rule index number (read-only). 154 ADSL Router Series User's Guide Figure 63 Network > NAT > Port Forwarding The following screen. Server IP Address Enter the IP address of the server for particular services. A default...ZyXEL Device discards all packets received for specified services, NAT supports a default server. Figure 62 Multiple Servers Behind NAT Example A=192.168.1.33 LAN WAN B=192.168.1.34 192.168.1.1 C=192.168.1.35 D=192.168.1.36 IP Address assigned by ISP 9.3.1 Configuring the Port Forwarding Screen Click Network > NAT > Port Forwarding to the servers for ports...
User Guide
Page 155
... the check box to delete an existing port forwarding rule. This is active or not. Start Port Enter a port number in the End Port field. To forward a series of ports, enter the start /end port number that subsequent address mapping rules move up by one port, enter the port number again in the Port Forwarding screen to disable the rule. Click the...
... the check box to delete an existing port forwarding rule. This is active or not. Start Port Enter a port number in the End Port field. To forward a series of ports, enter the start /end port number that subsequent address mapping rules move up by one port, enter the port number again in the Port Forwarding screen to disable the rule. Click the...
User Guide
Page 156
...ZyXEL Device's address mapping settings, click Network > NAT > Address Mapping to 6 in your rules is available only when you want the incoming ports translated, the device automatically calculates the last port of the server here. To forward only one port, enter the port number again in the Start Port field above . Server IP Address Port Translation Start / End Port...IP address of the translated port range. Chapter 9 Network Address Translation (NAT) Table 43 Network > NAT > Port Forwarding: Edit (continued) LABEL DESCRIPTION End Port Enter a port number in this field. ...
...ZyXEL Device's address mapping settings, click Network > NAT > Address Mapping to 6 in your rules is available only when you want the incoming ports translated, the device automatically calculates the last port of the server here. To forward only one port, enter the port number again in the Start Port field above . Server IP Address Port Translation Start / End Port...IP address of the translated port range. Chapter 9 Network Address Translation (NAT) Table 43 Network > NAT > Port Forwarding: Edit (continued) LABEL DESCRIPTION End Port Enter a port number in this field. ...
User Guide
Page 158
...Global Start IP Global End IP Server Mapping Set This field is N/A for One-to use STUN or an outbound proxy if your ZyXEL Device is N/A for Server port mapping. This is the ending global IP address (IGA). Enter 0.0.0.0 here if you have a dynamic IP address from one of different...with the SIP register server, the SIP ALG translates the ZyXEL Device's private IP address inside servers of the following table describes the fields in this link to go to the Port Forwarding screen to one local IP address to edit a port forwarding set that you have selected in the data stream. You...
...Global Start IP Global End IP Server Mapping Set This field is N/A for One-to use STUN or an outbound proxy if your ZyXEL Device is N/A for Server port mapping. This is the ending global IP address (IGA). Enter 0.0.0.0 here if you have a dynamic IP address from one of different...with the SIP register server, the SIP ALG translates the ZyXEL Device's private IP address inside servers of the following table describes the fields in this link to go to the Port Forwarding screen to one local IP address to edit a port forwarding set that you have selected in the data stream. You...
User Guide
Page 159
Table 46 Network > NAT > ALG LABEL DESCRIPTION Enable SIP ALG Select this to make sure SIP (VoIP) works correctly with port-forwarding and addressmapping rules. Note that inside host when the packet is on the Internet are the inside hosts, while the web servers on the WAN ... address of the host when the same packet is in the local network, while the global address refers to the ZyXEL Device, for example, the computers of a host used in the ZyXEL Device. Table 47 NAT Definitions ITEM DESCRIPTION Inside This refers to enable and disable the SIP (VoIP) ALG in a packet...
Table 46 Network > NAT > ALG LABEL DESCRIPTION Enable SIP ALG Select this to make sure SIP (VoIP) works correctly with port-forwarding and addressmapping rules. Note that inside host when the packet is on the Internet are the inside hosts, while the web servers on the WAN ... address of the host when the same packet is in the local network, while the global address refers to the ZyXEL Device, for example, the computers of a host used in the ZyXEL Device. Table 47 NAT Definitions ITEM DESCRIPTION Inside This refers to enable and disable the SIP (VoIP) ALG in a packet...
User Guide
Page 167
...to display the following screen. Figure 72 Security > Firewall > General The following devices: P-660HNU-Tx, P-660HU-Tx. It allows traffic to restore your previously saved settings. This option ...High This setting blocks all traffic to the following table describes the labels in conjunction with Port Forwarding, Default Server. Medium This is not recommended. Off Apply Cancel Firewall rules can be...LAN to access services on your local network or the management interfaces on the ZyXEL Device. Click this screen to select the firewall protection level on your local network...
...to display the following screen. Figure 72 Security > Firewall > General The following devices: P-660HNU-Tx, P-660HU-Tx. It allows traffic to restore your previously saved settings. This option ...High This setting blocks all traffic to the following table describes the labels in conjunction with Port Forwarding, Default Server. Medium This is not recommended. Off Apply Cancel Firewall rules can be...LAN to access services on your local network or the management interfaces on the ZyXEL Device. Click this screen to select the firewall protection level on your local network...
User Guide
Page 177
... also need to configure NAT port forwarding (or full featured NAT address mapping rules) to allow computers on the WAN to access devices on the LAN. • WAN to Router By default the ZyXEL Device stops computers on the WAN from managing the ZyXEL Device. For example, you don... configuring rules to block packets for the services at specific interfaces. 11 Protect against misuse. Your customized rules take precedence and override the ZyXEL Device's default rules. 10.7.2 Guidelines For Enhancing Security With Your Firewall 6 Change the default password via web configurator. 7 Think about ...
... also need to configure NAT port forwarding (or full featured NAT address mapping rules) to allow computers on the WAN to access devices on the LAN. • WAN to Router By default the ZyXEL Device stops computers on the WAN from managing the ZyXEL Device. For example, you don... configuring rules to block packets for the services at specific interfaces. 11 Protect against misuse. Your customized rules take precedence and override the ZyXEL Device's default rules. 10.7.2 Guidelines For Enhancing Security With Your Firewall 6 Change the default password via web configurator. 7 Think about ...
User Guide
Page 231
... Select this is not your ZyXEL Device. Be aware that they can communicate through UPnP Select this eliminates the need to manually configure port forwarding for examples of installing and using NAT traversal, UPnP applications automatically reserve a NAT forwarding port in this screen. See the...password to access the web configurator). Allow users to open the web configurator's login screen without additional configuration. UPnP and ZyXEL ZyXEL has achieved UPnP certification from the Universal Plug and Play Forum UPnP™ Implementers Corp. (UIC). this check box ...
... Select this is not your ZyXEL Device. Be aware that they can communicate through UPnP Select this eliminates the need to manually configure port forwarding for examples of installing and using NAT traversal, UPnP applications automatically reserve a NAT forwarding port in this screen. See the...password to access the web configurator). Allow users to open the web configurator's login screen without additional configuration. UPnP and ZyXEL ZyXEL has achieved UPnP certification from the Universal Plug and Play Forum UPnP™ Implementers Corp. (UIC). this check box ...
User Guide
Page 260
... must be managed by a management server. URL Type the IP address or domain name of up to be the same. If the ZyXEL Device is behind a NAT router that assigns it a private IP address, you will have to display the following table describes the fields ...this screen. User Name The user name is used to authenticate the ZyXEL Device when making a connection to the management server. Password The password is used to authenticate the ZyXEL Device when making a connection to the management server. Click Advanced> CWMP to configure a NAT port forwarding rule on the NAT router.
... must be managed by a management server. URL Type the IP address or domain name of up to be the same. If the ZyXEL Device is behind a NAT router that assigns it a private IP address, you will have to display the following table describes the fields ...this screen. User Name The user name is used to authenticate the ZyXEL Device when making a connection to the management server. Password The password is used to authenticate the ZyXEL Device when making a connection to the management server. Click Advanced> CWMP to configure a NAT port forwarding rule on the NAT router.
User Guide
Page 261
... Request Use this part of the screen to allow the management server to connect to alter your NAT port forwarding rules if they were already configured. You may need to the ZyXEL Device after a successful login. ADSL Router Series User's Guide 261 Spaces and characters such as are ...not allowed. The management server uses this path to the ZyXEL Device. The management server should use a port number above 1024 (not a commonly used to authenticate the management server when connecting to save your network and it ...
... Request Use this part of the screen to allow the management server to connect to alter your NAT port forwarding rules if they were already configured. You may need to the ZyXEL Device after a successful login. ADSL Router Series User's Guide 261 Spaces and characters such as are ...not allowed. The management server uses this path to the ZyXEL Device. The management server should use a port number above 1024 (not a commonly used to authenticate the management server when connecting to save your network and it ...