Quick Start Guide
Page 6
... on the P-662HW-D, use it instead of the P-662HW-D. P-662HW-D Series Quick Start Guide 7 Click INTERNET / WIRELESS SETUP. If you allow pop-up windows, JavaScript and Java permission or set the Internet security level to the ETHERNET port, follow these steps. 6 Troubleshooting 1 If you enable OTIST but select Disable wireless security using the wireless wizard, the P662HW-D will reset the P-662HW-D to five seconds. Do not change default settings if your wireless clients support WPA and OTIST. Note: If you cannot access the web configurator using Internet Explorer in any...
... on the P-662HW-D, use it instead of the P-662HW-D. P-662HW-D Series Quick Start Guide 7 Click INTERNET / WIRELESS SETUP. If you allow pop-up windows, JavaScript and Java permission or set the Internet security level to the ETHERNET port, follow these steps. 6 Troubleshooting 1 If you enable OTIST but select Disable wireless security using the wireless wizard, the P662HW-D will reset the P-662HW-D to five seconds. Do not change default settings if your wireless clients support WPA and OTIST. Note: If you cannot access the web configurator using Internet Explorer in any...
User Guide
Page 19
....1 Introducing Universal Plug and Play 303 22.1.1 How do I know if I'm using UPnP 303 22.1.2 NAT Traversal ...303 22.1.3 Cautions with UPnP 303 22.2 UPnP and ZyXEL ...304 22.2.1 Configuring UPnP 304 22.3 Installing UPnP in Windows Example 305 22.4 Using UPnP in Windows XP Example 308 Part V: Maintenance, Troubleshooting and Specifications 315 Chapter 23 System ...317 23.1 General Setup and System Name 317 23.1.1 System Configuration 317 P-662H/HW-D Series User's Guide 19
....1 Introducing Universal Plug and Play 303 22.1.1 How do I know if I'm using UPnP 303 22.1.2 NAT Traversal ...303 22.1.3 Cautions with UPnP 303 22.2 UPnP and ZyXEL ...304 22.2.1 Configuring UPnP 304 22.3 Installing UPnP in Windows Example 305 22.4 Using UPnP in Windows XP Example 308 Part V: Maintenance, Troubleshooting and Specifications 315 Chapter 23 System ...317 23.1 General Setup and System Name 317 23.1.1 System Configuration 317 P-662H/HW-D Series User's Guide 19
User Guide
Page 23
... List of Figures Figure 1 ZyXEL Device Internet Access Application 40 Figure 2 ZyXEL Device LAN-to-LAN Application Example 40 Figure 3 Firewall Application ...41 Figure 4 P-662H Front Panel ...41 Figure 5 P-662HW Front Panel ...41 Figure 6 Password Screen ...44 Figure 7 Change Password at Login ...45 Figure 8 Replace Factory Default Certificate 45 Figure 9 Select a Mode ...46 Figure 10 Web Configurator: Main Screen 47 Figure 11 Status Screen ...51 Figure 12 Status: Any IP Table ...53 Figure 13 Status: WLAN Status...
... List of Figures Figure 1 ZyXEL Device Internet Access Application 40 Figure 2 ZyXEL Device LAN-to-LAN Application Example 40 Figure 3 Firewall Application ...41 Figure 4 P-662H Front Panel ...41 Figure 5 P-662HW Front Panel ...41 Figure 6 Password Screen ...44 Figure 7 Change Password at Login ...45 Figure 8 Replace Factory Default Certificate 45 Figure 9 Select a Mode ...46 Figure 10 Web Configurator: Main Screen 47 Figure 11 Status Screen ...51 Figure 12 Status: Any IP Table ...53 Figure 13 Status: WLAN Status...
User Guide
Page 42
... failed. Blinking The DSL is not ready, or has failed. Off The CON/AUX link is attempting to a management computer and someone is no traffic detected. Red On The ZyXEL Device failed to the Quick Start Guide for information on hardware connections. 42 P-662H/HW-D Series User's Guide Off The DSL line is sending/receiving data through the wireless LAN. Amber On The CON/AUX switch is set to CON, the CON/AUX port is connected...
... failed. Blinking The DSL is not ready, or has failed. Off The CON/AUX link is attempting to a management computer and someone is no traffic detected. Red On The ZyXEL Device failed to the Quick Start Guide for information on hardware connections. 42 P-662H/HW-D Series User's Guide Off The DSL line is sending/receiving data through the wireless LAN. Amber On The CON/AUX switch is set to CON, the CON/AUX port is connected...
User Guide
Page 48
... assign wireless clients the ZyXEL Device's wireless security settings. Port Forwarding Use this screen to create and enable a DMZ port. Address Mapping Use this screen to partition your traffic redirect properties and WAN backup settings. WAN Internet Access Setup This screen allows you to prioritize wireless traffic according to the delivery requirements of network traffic to which to configure IP address ranges for DoS attacks. 48 P-662H/HW-D Series User's Guide DMZ DMZ Use this screen to apply the rule. DHCP Setup Use this screen to edit/add a firewall rule...
... assign wireless clients the ZyXEL Device's wireless security settings. Port Forwarding Use this screen to create and enable a DMZ port. Address Mapping Use this screen to partition your traffic redirect properties and WAN backup settings. WAN Internet Access Setup This screen allows you to prioritize wireless traffic according to the delivery requirements of network traffic to which to configure IP address ranges for DoS attacks. 48 P-662H/HW-D Series User's Guide DMZ DMZ Use this screen to apply the rule. DHCP Setup Use this screen to edit/add a firewall rule...
User Guide
Page 49
... status of users on your license key information and update the status of valid and revoked certificates). Trusted Use this screen to configure web sites excluded from content filtering on the LAN from Content Website Access Control settings. Service Use this screen to block sites containing certain keywords in the URL. Monitor Use this screen to set the days and times for the ZyXEL Device to perform content filtering. Advanced Static Route Use...
... status of users on your license key information and update the status of valid and revoked certificates). Trusted Use this screen to configure web sites excluded from content filtering on the LAN from Content Website Access Control settings. Service Use this screen to block sites containing certain keywords in the URL. Monitor Use this screen to set the days and times for the ZyXEL Device to perform content filtering. Advanced Static Route Use...
User Guide
Page 52
... a list of IP addresses and MAC addresses of the ZyXEL Device's heap memory is thus available for running processes like NAT, VPN and the firewall. Summary Any IP Table Use this displays the port speed and duplex setting. WLAN Information (wireless devices only) SSID This is the channel number used to the memory that are not in the wireless LAN. Security Firewall This displays whether or not the ZyXEL Device's firewall is the WAN port DHCP role - System Status System Uptime This is disabled. Memory Usage...
... a list of IP addresses and MAC addresses of the ZyXEL Device's heap memory is thus available for running processes like NAT, VPN and the firewall. Summary Any IP Table Use this displays the port speed and duplex setting. WLAN Information (wireless devices only) SSID This is the channel number used to the memory that are not in the wireless LAN. Security Firewall This displays whether or not the ZyXEL Device's firewall is the WAN port DHCP role - System Status System Uptime This is disabled. Memory Usage...
User Guide
Page 105
... web configurator (LAN; The ZyXEL Device supports IGMP version 1 (IGMP-v1) and IGMP version 2 (IGMP-v2). The following figure depicts a scenario where a computer is set to use a static IP address in another network, you may need to manually configure the network settings of the computer and the ZyXEL Device are not in order to the ZyXEL Device and access the Internet. With the Any IP feature and NAT enabled, the ZyXEL Device allows a computer to access the Internet without changing the network settings (such as the ZyXEL Device's IP address...
... web configurator (LAN; The ZyXEL Device supports IGMP version 1 (IGMP-v1) and IGMP version 2 (IGMP-v2). The following figure depicts a scenario where a computer is set to use a static IP address in another network, you may need to manually configure the network settings of the computer and the ZyXEL Device are not in order to the ZyXEL Device and access the Internet. With the Any IP feature and NAT enabled, the ZyXEL Device allows a computer to access the Internet without changing the network settings (such as the ZyXEL Device's IP address...
User Guide
Page 158
... LAN (Local Area Network) port attaches to a network of computers, which needs security from being made known to outside systems, since the application gateway is designed to use programs written for specific Internet services, such as log events, which may lack the granular application level access control or caching that some proxies support. These firewalls generally provide the best speed and transparency, however, they would be allowed unless you configure remote management...
... LAN (Local Area Network) port attaches to a network of computers, which needs security from being made known to outside systems, since the application gateway is designed to use programs written for specific Internet services, such as log events, which may lack the granular application level access control or caching that some proxies support. These firewalls generally provide the best speed and transparency, however, they would be allowed unless you configure remote management...
User Guide
Page 165
... be used to a server on the Internet and requests a file. Assuming that someone is trying to make a connection from the LAN to work properly, this is an acceptable part of the security policy (as IP addresses, TCP ports, sequence numbers, etc. When the ZyXEL Device receives any connection information (such as FTP and RealAudio) utilize multiple network connections simultaneously. Chapter 10 Firewalls If an initiation packet originates on the LAN, this point, the remote server will open a data connection...
... be used to a server on the Internet and requests a file. Assuming that someone is trying to make a connection from the LAN to work properly, this is an acceptable part of the security policy (as IP addresses, TCP ports, sequence numbers, etc. When the ZyXEL Device receives any connection information (such as FTP and RealAudio) utilize multiple network connections simultaneously. Chapter 10 Firewalls If an initiation packet originates on the LAN, this point, the remote server will open a data connection...
User Guide
Page 166
... files e-mailed to strangers. 166 P-662H/HW-D Series User's Guide Protect by looking for a small "key" icon on " connections and are enabled, protect against IP spoofing by making sure the firewall is safe to minimize risk. Good network administration takes into your router. • Don't enable any local service (such as % or #. • Upgrade your software regularly. The best defense against attacks. Turn your firewall, filtering or NAT can cause security...
... files e-mailed to strangers. 166 P-662H/HW-D Series User's Guide Protect by looking for a small "key" icon on " connections and are enabled, protect against IP spoofing by making sure the firewall is safe to minimize risk. Good network administration takes into your router. • Don't enable any local service (such as % or #. • Upgrade your software regularly. The best defense against attacks. Turn your firewall, filtering or NAT can cause security...
User Guide
Page 200
... used services. 13.2.3 Configuring Web Site Filters Use this screen to enable content filtering and to the name of services that can be more than one IP protocol type. A screen displays as shown next. The following table shows a list of the service, two fields appear in brackets. Figure 115 Content Access Control: General: Web Site Filter 200 P-662H/HW-D Series User's Guide The second field indicates the IP port number...
... used services. 13.2.3 Configuring Web Site Filters Use this screen to enable content filtering and to the name of services that can be more than one IP protocol type. A screen displays as shown next. The following table shows a list of the service, two fields appear in brackets. Figure 115 Content Access Control: General: Web Site Filter 200 P-662H/HW-D Series User's Guide The second field indicates the IP port number...
User Guide
Page 230
... VPN policy. The remote IPSec router must have problems using IKE key management. In order to have to forward UDP port 500 packets to Single, enter a (static) IP address on the VPN by their (private) domain names. Select Single for a specific range of computers on a network by their subnet mask. Local Local Address Type IP Address Start Local IP addresses must also have the same configured local or remote IP address, but the ZyXEL Device drops trailing spaces. Select Range for a single IP address. IPSec Key Mode...
... VPN policy. The remote IPSec router must have problems using IKE key management. In order to have to forward UDP port 500 packets to Single, enter a (static) IP address on the VPN by their (private) domain names. Select Single for a specific range of computers on a network by their subnet mask. Local Local Address Type IP Address Start Local IP addresses must also have the same configured local or remote IP address, but the ZyXEL Device drops trailing spaces. Select Range for a single IP address. IPSec Key Mode...
User Guide
Page 241
... using traffic redirect. Enter 16 characters for MD5 authentication or 20 characters for maximum security. Apply Click Apply to the ZyXEL Device. Reset Click Reset to set the fields to their last saved value. 16.16 Viewing SA Monitor Click Security, VPN and Monitor to open the SA Monitor screen as 0.0.0.0: The ZyXEL Device uses the current ZyXEL Device WAN IP address (static or dynamic) to set up the VPN tunnel. P-662H/HW-D Series User's Guide...
... using traffic redirect. Enter 16 characters for MD5 authentication or 20 characters for maximum security. Apply Click Apply to the ZyXEL Device. Reset Click Reset to set the fields to their last saved value. 16.16 Viewing SA Monitor Click Security, VPN and Monitor to open the SA Monitor screen as 0.0.0.0: The ZyXEL Device uses the current ZyXEL Device WAN IP address (static or dynamic) to set up the VPN tunnel. P-662H/HW-D Series User's Guide...
User Guide
Page 299
Table 128 Remote Management: DNS LABEL DESCRIPTION Port The DNS service port number is allowed to send DNS queries to probe an unsupported port on your ZyXEL Device's security settings, click Advanced > Remote MGMT > ICMP. Secured Client IP A secured client is automatically returned. Figure 170 Remote Management: DNS The following table describes the labels in this screen. This keeps outsiders from discovering your customized settings and exit this screen. If an outside user to begin configuring this screen...
Table 128 Remote Management: DNS LABEL DESCRIPTION Port The DNS service port number is allowed to send DNS queries to probe an unsupported port on your ZyXEL Device's security settings, click Advanced > Remote MGMT > ICMP. Secured Client IP A secured client is automatically returned. Figure 170 Remote Management: DNS The following table describes the labels in this screen. This keeps outsiders from discovering your customized settings and exit this screen. If an outside user to begin configuring this screen...
User Guide
Page 337
... ZyXEL Device and your computer's Ethernet Card is working properly. Make sure that the IP address and the subnet mask of the LEDs turn on . I turn on when I cannot access the ZyXEL Device from the LAN. In this case, you may have a hardware problem. Make sure your computer(s) are both turned on . Make sure that the ZyXEL Device's power adaptor is connected to the ZyXEL Device and plugged in to the Quick Start Guide for faulty Ethernet cables. P-662H/HW-D Series User's Guide...
... ZyXEL Device and your computer's Ethernet Card is working properly. Make sure that the IP address and the subnet mask of the LEDs turn on . I turn on when I cannot access the ZyXEL Device from the LAN. In this case, you may have a hardware problem. Make sure your computer(s) are both turned on . Make sure that the ZyXEL Device's power adaptor is connected to the ZyXEL Device and plugged in to the Quick Start Guide for faulty Ethernet cables. P-662H/HW-D Series User's Guide...
User Guide
Page 338
... restores all of the factory defaults including the password. Use the ZyXEL Device's LAN IP address when configuring from the WAN. If you changed the password and have now forgotten it, you have configured a secured client IP address, your computer's IP address must be on checking your WAN settings. If you have enabled web service access. and the wall jack. The ISP provides the WAN IP address after authenticating you entered the correct user name and password. The username and password apply to the WAN Setup chapter. I cannot access...
... restores all of the factory defaults including the password. Use the ZyXEL Device's LAN IP address when configuring from the WAN. If you changed the password and have now forgotten it, you have configured a secured client IP address, your computer's IP address must be on checking your WAN settings. If you have enabled web service access. and the wall jack. The ISP provides the WAN IP address after authenticating you entered the correct user name and password. The username and password apply to the WAN Setup chapter. I cannot access...
User Guide
Page 349
... VPN products. PPTP under NAT/SUA. The ZyXEL Device supports 20 IPSec tunnels. Content Filter The ZyXEL Device blocks or allows access to web sites that you specify and blocks access to web sites with URLs that contain keywords that you to forward IP traffic when you connect and turn on the ZyXEL Device, it from the Internet. Static Routes Static routes tell the ZyXEL Device how to control Internet access on a per user basis. P-662H/HW-D Series User's Guide 349 Chapter 28 Product Specifications Table 146 Firmware Specifications (continued) Network Address Translation (NAT...
... VPN products. PPTP under NAT/SUA. The ZyXEL Device supports 20 IPSec tunnels. Content Filter The ZyXEL Device blocks or allows access to web sites that you specify and blocks access to web sites with URLs that contain keywords that you to forward IP traffic when you connect and turn on the ZyXEL Device, it from the Internet. Static Routes Static routes tell the ZyXEL Device how to control Internet access on a per user basis. P-662H/HW-D Series User's Guide 349 Chapter 28 Product Specifications Table 146 Firmware Specifications (continued) Network Address Translation (NAT...
User Guide
Page 350
... the network. PPTP Encapsulation Point-to an earlier configuration. Note: The P-662HW may be prone to a specific group of data through a Virtual Private Network (VPN). IP Multicast IP multicast is used to send traffic to RF (Radio Frequency) interference from the ZyXEL Device to the ZyXEL Device wirelessly. Logging and Tracing Use packet tracing and logs for this feature to other wireless LANs. The ZyXEL wireless adapters must register for troubleshooting. The ZyXEL Device supports one PPTP connection at a time. Universal Plug and Play A UPnP-enabled device can...
... the network. PPTP Encapsulation Point-to an earlier configuration. Note: The P-662HW may be prone to a specific group of data through a Virtual Private Network (VPN). IP Multicast IP multicast is used to send traffic to RF (Radio Frequency) interference from the ZyXEL Device to the ZyXEL Device wirelessly. Logging and Tracing Use packet tracing and logs for this feature to other wireless LANs. The ZyXEL wireless adapters must register for troubleshooting. The ZyXEL Device supports one PPTP connection at a time. Universal Plug and Play A UPnP-enabled device can...
User Guide
Page 356
... manufacturer and model of installed components. Appendix A Setting up Your Computer's IP Address Figure 216 WIndows 95/98/Me: Network: Configuration Installing Components The Network window Configuration tab displays a list of your computer so the changes you need a network adapter, the TCP/IP protocol and Client for Microsoft Networks from the list of network clients and then click OK. 5 Restart your network adapter and then click OK. If you made take effect. 356 P-662H/HW-D Series User's Guide
... manufacturer and model of installed components. Appendix A Setting up Your Computer's IP Address Figure 216 WIndows 95/98/Me: Network: Configuration Installing Components The Network window Configuration tab displays a list of your computer so the changes you need a network adapter, the TCP/IP protocol and Client for Microsoft Networks from the list of network clients and then click OK. 5 Restart your network adapter and then click OK. If you made take effect. 356 P-662H/HW-D Series User's Guide