Zyxel-communications P-2608HWL-Dx Series Manual do Utilizador

P-2608HWL-Dx Series802.11g Wireless ADSL2+ VoIP IADUser’s GuideVersion 3.4010/2006Edition 1

P-2608HWL-Dx Series User’s Guide10 Customer Support+” is the (prefix) number you enter to make an international telephone [email protected]

P-2608HWL-Dx Series User’s Guide100 Chapter 7 WAN SetupFigure 49 WAN More Connections > ModifyThe following table describes the labels in this sc

P-2608HWL-Dx Series User’s GuideChapter 7 WAN Setup 101Multiplexing Select the method of multiplexing used by your ISP from the drop-down list. Choice

P-2608HWL-Dx Series User’s Guide102 Chapter 7 WAN Setup7.7 Traffic Redirect Traffic redirect forwards traffic to a backup gateway when the ZyXEL Devi

P-2608HWL-Dx Series User’s GuideChapter 7 WAN Setup 103Figure 51 Traffic Redirect LAN Setup7.8 WAN Backup SetupTo configure your ZyXEL Device’s WAN

P-2608HWL-Dx Series User’s Guide104 Chapter 7 WAN SetupThe following table describes the labels in this screen. Table 28 WAN Backup SetupLABEL DESC

P-2608HWL-Dx Series User’s GuideChapter 8 LAN Setup 105CHAPTER 8LAN SetupThis chapter describes how to configure LAN settings.8.1 LAN Overview A Loca

P-2608HWL-Dx Series User’s Guide106 Chapter 8 LAN Setup8.1.2 DHCP SetupDHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows indiv

P-2608HWL-Dx Series User’s GuideChapter 8 LAN Setup 1078.1.4 DNS Server Address AssignmentUse DNS (Domain Name System) to map a domain name to its co

P-2608HWL-Dx Series User’s Guide108 Chapter 8 LAN Setup8.2.1.1 Private IP AddressesEvery machine on the Internet must have a unique address. If your

P-2608HWL-Dx Series User’s GuideChapter 8 LAN Setup 1098.2.3 MulticastTraditionally, IP packets are transmitted in one of either two ways - Unicast (

P-2608HWL-Dx Series User’s GuideTable of Contents 11Table of ContentsCopyright ...

P-2608HWL-Dx Series User’s Guide110 Chapter 8 LAN SetupFigure 53 Any IP ExampleThe Any IP feature does not apply to a computer using either a dynami

P-2608HWL-Dx Series User’s GuideChapter 8 LAN Setup 1118.3 Configuring LAN IPClick Network > LAN to open the IP screen. See Section 8.1 on page 10

P-2608HWL-Dx Series User’s Guide112 Chapter 8 LAN SetupFigure 55 Advanced LAN SetupThe following table describes the labels in this screen. Table 3

P-2608HWL-Dx Series User’s GuideChapter 8 LAN Setup 1138.4 DHCP SetupClick Network > DHCP Setup to open this screen. Use this screen to configure

P-2608HWL-Dx Series User’s Guide114 Chapter 8 LAN Setup8.5 LAN Client ListThis table allows you to assign IP addresses on the LAN to specific individ

P-2608HWL-Dx Series User’s GuideChapter 8 LAN Setup 115The following table describes the labels in this screen.8.6 LAN IP AliasIP alias allows you to

P-2608HWL-Dx Series User’s Guide116 Chapter 8 LAN SetupFigure 58 Physical Network & Partitioned Logical NetworksClick Network > LAN > IP A

P-2608HWL-Dx Series User’s GuideChapter 8 LAN Setup 117RIP Direction RIP (Routing Information Protocol, RFC 1058 and RFC 1389) allows a router to exch

P-2608HWL-Dx Series User’s Guide118 Chapter 8 LAN Setup

P-2608HWL-Dx Series User’s GuideChapter 9 Wireless LAN 119CHAPTER 9Wireless LANThis chapter discusses how to configure the wireless network settings i

P-2608HWL-Dx Series User’s Guide12 Table of Contents3.3 Wireless Connection Wizard Setup ...

P-2608HWL-Dx Series User’s Guide120 Chapter 9 Wireless LANSecurity stops unauthorized devices from using the wireless network. It can also protect the

P-2608HWL-Dx Series User’s GuideChapter 9 Wireless LAN 121For wireless networks, you can store the user names and passwords for each user in a RADIUS

P-2608HWL-Dx Series User’s Guide122 Chapter 9 Wireless LANMany types of encryption use a key to protect the information in the wireless network. The l

P-2608HWL-Dx Series User’s GuideChapter 9 Wireless LAN 1239.5 General Wireless LAN Screen Note: If you are configuring the ZyXEL Device from a comput

P-2608HWL-Dx Series User’s Guide124 Chapter 9 Wireless LANThe following table describes the general wireless LAN labels in this screen.9.5.1 No Secur

P-2608HWL-Dx Series User’s GuideChapter 9 Wireless LAN 125Figure 62 Wireless: No SecurityThe following table describes the labels in this screen.9.5

P-2608HWL-Dx Series User’s Guide126 Chapter 9 Wireless LANFigure 63 Wireless: Static WEP EncryptionThe following table describes the wireless LAN se

P-2608HWL-Dx Series User’s GuideChapter 9 Wireless LAN 127Figure 64 Wireless: WPA(2)-PSKThe following table describes the wireless LAN security labe

P-2608HWL-Dx Series User’s Guide128 Chapter 9 Wireless LAN9.5.4 WPA(2) Authentication ScreenIn order to configure and enable WPA Authentication; clic

P-2608HWL-Dx Series User’s GuideChapter 9 Wireless LAN 1299.5.5 Wireless LAN Advanced SetupTo configure advanced wireless settings, click the Advance

P-2608HWL-Dx Series User’s GuideTable of Contents 137.3 Traffic Shaping ...

P-2608HWL-Dx Series User’s Guide130 Chapter 9 Wireless LANFigure 66 AdvancedThe following table describes the labels in this screen. 9.6 OTIST Scre

P-2608HWL-Dx Series User’s GuideChapter 9 Wireless LAN 131Figure 67 Network > Wireless LAN > OTISTThe following table describes the labels in

P-2608HWL-Dx Series User’s Guide132 Chapter 9 Wireless LANFigure 68 Example: Wireless Client OTIST ScreenTo start OTIST in the device, click Start i

P-2608HWL-Dx Series User’s GuideChapter 9 Wireless LAN 133The following screen appears on the wireless client.Figure 71 OTIST: In Progress on the Wi

P-2608HWL-Dx Series User’s Guide134 Chapter 9 Wireless LAN9.7 MAC Filter To change your ZyXEL Device’s MAC filter settings, click Network > Wi

P-2608HWL-Dx Series User’s GuideChapter 9 Wireless LAN 1359.8 QoS ScreenThe QoS screen by default allows you to automatically give a service a priori

P-2608HWL-Dx Series User’s Guide136 Chapter 9 Wireless LAN9.8.1 Application Priority ConfigurationTo edit a WMM QoS application entry, click the edit

P-2608HWL-Dx Series User’s GuideChapter 9 Wireless LAN 137Service The following is a description of the applications you can prioritize with WMM QoS.

P-2608HWL-Dx Series User’s Guide138 Chapter 9 Wireless LAN

P-2608HWL-Dx Series User’s GuideChapter 10 Network Address Translation (NAT) Screens 139CHAPTER 10Network Address Translation(NAT) ScreensThis chapter

P-2608HWL-Dx Series User’s Guide14 Table of Contents9.3 Wireless Performance Overview ...

P-2608HWL-Dx Series User’s Guide140 Chapter 10 Network Address Translation (NAT) Screens10.1.2 What NAT DoesIn the simplest form, NAT changes the sou

P-2608HWL-Dx Series User’s GuideChapter 10 Network Address Translation (NAT) Screens 14110.1.4 NAT ApplicationThe following figure illustrates a poss

P-2608HWL-Dx Series User’s Guide142 Chapter 10 Network Address Translation (NAT) ScreensPort numbers do NOT change for One-to-One and Many-to-Many No

P-2608HWL-Dx Series User’s GuideChapter 10 Network Address Translation (NAT) Screens 143Figure 77 NAT GeneralThe following table describes the label

P-2608HWL-Dx Series User’s Guide144 Chapter 10 Network Address Translation (NAT) ScreensYou may enter a single port number or a range of port numbers

P-2608HWL-Dx Series User’s GuideChapter 10 Network Address Translation (NAT) Screens 14510.5 Configuring Port Forwarding Note: If you do not assign a

P-2608HWL-Dx Series User’s Guide146 Chapter 10 Network Address Translation (NAT) Screens10.5.1 Port Forwarding Rule Edit To edit a port forwarding ru

P-2608HWL-Dx Series User’s GuideChapter 10 Network Address Translation (NAT) Screens 14710.6 Address Mapping Note: The Address Mapping screen is avai

P-2608HWL-Dx Series User’s Guide148 Chapter 10 Network Address Translation (NAT) Screens10.6.1 Address Mapping Rule Edit To edit an address mapping r

P-2608HWL-Dx Series User’s GuideChapter 10 Network Address Translation (NAT) Screens 149The following table describes the fields in this screen. 10.6.

P-2608HWL-Dx Series User’s GuideTable of Contents 1511.1.4 SIP Call Progression ...

P-2608HWL-Dx Series User’s Guide150 Chapter 10 Network Address Translation (NAT) ScreensFigure 83 Network > NAT > ALGEach field is described i

P-2608HWL-Dx Series User’s GuideChapter 11 SIP 151CHAPTER 11SIPUse these screens to set up your SIP accounts and to configure QoS settings.11.1 SIP O

P-2608HWL-Dx Series User’s Guide152 Chapter 11 SIP11.1.3.2 SIP Service DomainThe SIP service domain of the VoIP service provider (the company that le

P-2608HWL-Dx Series User’s GuideChapter 11 SIP 15311.1.5.1 SIP User Agent A SIP user agent can make and receive VoIP telephone calls. This means that

P-2608HWL-Dx Series User’s Guide154 Chapter 11 SIP11.1.5.3 SIP Redirect ServerA SIP redirect server accepts SIP requests, translates the destination

P-2608HWL-Dx Series User’s GuideChapter 11 SIP 15511.1.7 NAT and SIPThe ZyXEL Device must register its public IP address with a SIP register server.

P-2608HWL-Dx Series User’s Guide156 Chapter 11 SIPFigure 87 STUN11.1.7.4 Outbound ProxyYour VoIP service provider may host a SIP outbound proxy ser

P-2608HWL-Dx Series User’s GuideChapter 11 SIP 15711.1.10 MWI (Message Waiting Indication)Enable Message Waiting Indication (MWI) enables your phone

P-2608HWL-Dx Series User’s Guide158 Chapter 11 SIP1 Pick up the phone and press “****” on your phone’s keypad and wait for the message that says you a

P-2608HWL-Dx Series User’s GuideChapter 11 SIP 159The DSCP value determines the forwarding behavior, the PHB (Per-Hop Behavior), that each packet gets

P-2608HWL-Dx Series User’s Guide16 Table of ContentsChapter 13Phone Book ...

P-2608HWL-Dx Series User’s Guide160 Chapter 11 SIPFigure 89 VoIP > SIP > SIP SettingsEach field is described in the following table.Table 55

P-2608HWL-Dx Series User’s GuideChapter 11 SIP 16111.2.2 Advanced SIP Setup ScreenUse this screen to maintain advanced settings for each SIP account.

P-2608HWL-Dx Series User’s Guide162 Chapter 11 SIPFigure 90 VoIP > SIP > SIP Settings > AdvancedEach field is described in the following ta

P-2608HWL-Dx Series User’s GuideChapter 11 SIP 163URL Type Select whether or not to include the SIP service domain name when the ZyXEL Device sends th

P-2608HWL-Dx Series User’s Guide164 Chapter 11 SIPEnable Select this if your VoIP service provider has a SIP outbound server to handle voice calls. Th

P-2608HWL-Dx Series User’s GuideChapter 11 SIP 16511.2.3 SIP QoS ScreenUse this screen to maintain ToS and VLAN settings for the ZyXEL Device. To acc

P-2608HWL-Dx Series User’s Guide166 Chapter 11 SIP

P-2608HWL-Dx Series User’s GuideChapter 12 Phone 167CHAPTER 12PhoneUse these screens to configure the phones you use to make phone calls.12.1 Phone O

P-2608HWL-Dx Series User’s Guide168 Chapter 12 PhoneNote: To take full advantage of the supplementary phone services available though the ZyXEL Device

P-2608HWL-Dx Series User’s GuideChapter 12 Phone 169Press the flash key and then “0” to disconnect the call presently on hold and keep the current cal

P-2608HWL-Dx Series User’s GuideTable of Contents 17Chapter 16Firewall Configuration ...

P-2608HWL-Dx Series User’s Guide170 Chapter 12 Phone12.1.3.3 USA Type Supplementary ServicesThis section describes how to use supplementary phone ser

P-2608HWL-Dx Series User’s GuideChapter 12 Phone 1711 When you are on the phone talking to someone, place the flash key to put the caller on hold and

P-2608HWL-Dx Series User’s Guide172 Chapter 12 PhoneFigure 92 VoIP > Phone > Analog PhoneEach field is described in the following table.12.2.2

P-2608HWL-Dx Series User’s GuideChapter 12 Phone 173Figure 93 VoIP > Phone > Analog Phone > AdvancedEach field is described in the followin

P-2608HWL-Dx Series User’s Guide174 Chapter 12 Phone12.2.3 Common Phone Settings ScreenUse this screen to activate and deactivate immediate dialing.

P-2608HWL-Dx Series User’s GuideChapter 12 Phone 175Figure 95 VoIP > Phone > RegionEach field is described in the following table.Table 63 V

P-2608HWL-Dx Series User’s Guide176 Chapter 12 Phone

P-2608HWL-Dx Series User’s GuideChapter 13 Phone Book 177CHAPTER 13Phone BookUse these screens to maintain call-forwarding rules and speed-dial settin

P-2608HWL-Dx Series User’s Guide178 Chapter 13 Phone BookFigure 96 Phone Book > Speed DialEach field is described in the following table.Table 64

P-2608HWL-Dx Series User’s GuideChapter 13 Phone Book 17913.3 Incoming Call Policy ScreenUse this screen to maintain rules for handling incoming call

P-2608HWL-Dx Series User’s Guide18 Table of Contents18.1.2 Additional Topics for IKE SA ...

P-2608HWL-Dx Series User’s Guide180 Chapter 13 Phone BookFigure 97 Phone Book > Incoming Call PolicyYou can create two sets of call-forwarding ru

P-2608HWL-Dx Series User’s GuideChapter 13 Phone Book 18113.4 Group Ring ScreenThis screen lets you specify ring types for calls from particular numb

P-2608HWL-Dx Series User’s Guide182 Chapter 13 Phone BookFigure 98 Phone Book > Group RingEach field is described in the following table.Table 66

P-2608HWL-Dx Series User’s GuideChapter 13 Phone Book 183Name Type a name for the associated telephone number.TEL Type the telephone number you want t

P-2608HWL-Dx Series User’s Guide184 Chapter 13 Phone Book

P-2608HWL-Dx Series User’s GuideChapter 14 PSTN Line 185CHAPTER 14PSTN LineThis chapter applies to P-2608HWL-Dx models only. Use this screen to set up

P-2608HWL-Dx Series User’s Guide186 Chapter 14 PSTN LineFigure 99 VoIP > PSTN Line > GeneralEach field is described in the following table.Tab

P-2608HWL-Dx Series User’s GuideChapter 15 Firewalls 187CHAPTER 15FirewallsThis chapter gives some background information on firewalls and introduces

P-2608HWL-Dx Series User’s Guide188 Chapter 15 Firewalls15.2.2 Application-level FirewallsApplication-level firewalls restrict access by serving as p

P-2608HWL-Dx Series User’s GuideChapter 15 Firewalls 189• The LAN (Local Area Network) port attaches to a network of computers, which needs security f

P-2608HWL-Dx Series User’s GuideTable of Contents 19Chapter 20Static Route ...

P-2608HWL-Dx Series User’s Guide190 Chapter 15 Firewalls15.4.2 Types of DoS AttacksThere are four types of DoS attacks: 1 Those that exploit bugs in

P-2608HWL-Dx Series User’s GuideChapter 15 Firewalls 191Under normal circumstances, the application that initiates a session sends a SYN (synchronize)

P-2608HWL-Dx Series User’s Guide192 Chapter 15 FirewallsFigure 103 Smurf Attack15.4.2.1 ICMP Vulnerability ICMP is an error-reporting protocol that

P-2608HWL-Dx Series User’s GuideChapter 15 Firewalls 19315.4.2.3 TracerouteTraceroute is a utility used to determine the path a packet takes between

P-2608HWL-Dx Series User’s Guide194 Chapter 15 FirewallsThe previous figure shows the ZyXEL Device’s default firewall rules in action as well as demon

P-2608HWL-Dx Series User’s GuideChapter 15 Firewalls 195• Allow certain types of traffic from the Internet to specific hosts on the LAN.• Allow access

P-2608HWL-Dx Series User’s Guide196 Chapter 15 FirewallsA similar situation exists for ICMP, except that the ZyXEL Device is even more restrictive. Sp

P-2608HWL-Dx Series User’s GuideChapter 15 Firewalls 197• Encourage your company or organization to develop a comprehensive security plan. Good networ

P-2608HWL-Dx Series User’s Guide198 Chapter 15 Firewalls15.7.1.1 When To Use Filtering• To block/allow LAN packets by their MAC addresses.• To block/

P-2608HWL-Dx Series User’s GuideChapter 16 Firewall Configuration 199CHAPTER 16Firewall ConfigurationThis chapter shows you how to enable and configur

P-2608HWL-Dx Series User’s Guide20 Table of Contents23.6 Configuring FTP ...

P-2608HWL-Dx Series User’s Guide200 Chapter 16 Firewall ConfigurationNote: If you configure firewall rules without a good understanding of how they wo

P-2608HWL-Dx Series User’s GuideChapter 16 Firewall Configuration 2014 Does a rule that allows Internet users access to resources on the LAN create a

P-2608HWL-Dx Series User’s Guide202 Chapter 16 Firewall Configuration16.4.1 LAN to WAN RulesThe default rule for LAN to WAN traffic is that all users

P-2608HWL-Dx Series User’s GuideChapter 16 Firewall Configuration 203The following table describes the labels in this screen. 16.6 Firewall Rules Sum

P-2608HWL-Dx Series User’s Guide204 Chapter 16 Firewall ConfigurationFigure 106 Firewall Rules The following table describes the labels in this scre

P-2608HWL-Dx Series User’s GuideChapter 16 Firewall Configuration 20516.6.1 Configuring Firewall Rules Refer to Section 15.1 on page 187 for more i

P-2608HWL-Dx Series User’s Guide206 Chapter 16 Firewall ConfigurationFigure 107 Firewall: Edit Rule

P-2608HWL-Dx Series User’s GuideChapter 16 Firewall Configuration 207The following table describes the labels in this screen.Table 74 Firewall: Edit

P-2608HWL-Dx Series User’s Guide208 Chapter 16 Firewall Configuration16.6.2 Customized Services Configure customized services and port numbers not pr

P-2608HWL-Dx Series User’s GuideChapter 16 Firewall Configuration 20916.6.3 Configuring A Customized Service Click a rule number in the Firewall Cus

P-2608HWL-Dx Series User’s GuideTable of Contents 2127.5.2 Restore Configuration ...

P-2608HWL-Dx Series User’s Guide210 Chapter 16 Firewall Configuration2 Select WAN to LAN in the Packet Direction field. Figure 110 Firewall Example:

P-2608HWL-Dx Series User’s GuideChapter 16 Firewall Configuration 211Figure 112 Firewall Example: Edit Rule: Destination Address 9 Use the Add >&

P-2608HWL-Dx Series User’s Guide212 Chapter 16 Firewall ConfigurationFigure 113 Firewall Example: Edit Rule: Select Customized ServicesOn completing

P-2608HWL-Dx Series User’s GuideChapter 16 Firewall Configuration 213Figure 114 Firewall Example: Rules: MyService 16.8 DoS Thresholds For DoS atta

P-2608HWL-Dx Series User’s Guide214 Chapter 16 Firewall ConfigurationYou should make any changes to the threshold values before you continue configuri

P-2608HWL-Dx Series User’s GuideChapter 16 Firewall Configuration 21516.8.3 Configuring Firewall Thresholds The ZyXEL Device also sends alerts whenev

P-2608HWL-Dx Series User’s Guide216 Chapter 16 Firewall ConfigurationMaximum Incomplete LowThis is the number of existing half-open sessions that caus

P-2608HWL-Dx Series User’s GuideChapter 17 Content Filtering 217CHAPTER 17Content FilteringThis chapter covers how to configure content filtering.17.1

P-2608HWL-Dx Series User’s Guide218 Chapter 17 Content FilteringThe following table describes the labels in this screen. 17.3 Configuring the Schedu

P-2608HWL-Dx Series User’s GuideChapter 17 Content Filtering 219The following table describes the labels in this screen. 17.4 Configuring Trusted C

P-2608HWL-Dx Series User’s Guide22 Table of ContentsWindows 95/98/Me...

P-2608HWL-Dx Series User’s Guide220 Chapter 17 Content Filtering

P-2608HWL-Dx Series User’s GuideChapter 18 IPSec VPN 221CHAPTER 18IPSec VPNThis chapter explains how tos set up and maintain IPSec VPNs in the ZyXEL D

P-2608HWL-Dx Series User’s Guide222 Chapter 18 IPSec VPNFigure 120 VPN: IKE SA and IPSec SA In this example, a computer in network A is exchanging d

P-2608HWL-Dx Series User’s GuideChapter 18 IPSec VPN 22318.1.1.2 IKE SA ProposalThe IKE SA proposal is used to identify the encryption algorithm, aut

P-2608HWL-Dx Series User’s Guide224 Chapter 18 IPSec VPN18.1.1.4 AuthenticationBefore the ZyXEL Device and remote IPSec router establish an IKE SA, t

P-2608HWL-Dx Series User’s GuideChapter 18 IPSec VPN 225In the following example, the authentication fails, so they cannot establish an IKE SA.It is a

P-2608HWL-Dx Series User’s Guide226 Chapter 18 IPSec VPN18.1.2 Additional Topics for IKE SAThis section provides more information about IKE SA.18.1.2

P-2608HWL-Dx Series User’s GuideChapter 18 IPSec VPN 227Figure 124 VPN/NAT ExampleIf router A does NAT, it might change IP addresses (source or dest

P-2608HWL-Dx Series User’s Guide228 Chapter 18 IPSec VPN18.1.3.1 Local Network and Remote NetworkIn IPSec SA terminology, the local network, the one(

P-2608HWL-Dx Series User’s GuideChapter 18 IPSec VPN 229In transport mode, the IP header is the original IP header, and the encapsulation depends on t

P-2608HWL-Dx Series User’s GuideTable of Contents 23Log Commands...

P-2608HWL-Dx Series User’s Guide230 Chapter 18 IPSec VPN18.1.4.1.1 IPSec SA Proposal using Manual KeysIn IPSec SAs using manual keys, you can only sp

P-2608HWL-Dx Series User’s GuideChapter 18 IPSec VPN 231Figure 126 VPN SetupThe following table describes the fields in this screen.Table 83 VPN S

P-2608HWL-Dx Series User’s Guide232 Chapter 18 IPSec VPN18.3 Editing VPN PoliciesClick an Edit icon in the VPN Setup Screen to edit VPN policies. Rem

P-2608HWL-Dx Series User’s GuideChapter 18 IPSec VPN 233Figure 127 Edit VPN Policies The following table describes the fields in this screen.Table 8

P-2608HWL-Dx Series User’s Guide234 Chapter 18 IPSec VPNNAT Traversal This function is available if the VPN protocol is ESP.Select this check box if y

P-2608HWL-Dx Series User’s GuideChapter 18 IPSec VPN 235Remote Remote IP addresses must be static and correspond to the remote IPSec router's con

P-2608HWL-Dx Series User’s Guide236 Chapter 18 IPSec VPNPeer ID Type Select IP to identify the remote IPSec router by its IP address.Select DNS to ide

P-2608HWL-Dx Series User’s GuideChapter 18 IPSec VPN 23718.4 Configuring Advanced IKE SettingsClick Advanced in the Edit VPN Policies screen to open

P-2608HWL-Dx Series User’s Guide238 Chapter 18 IPSec VPNFigure 128 Advanced VPN PoliciesThe following table describes the fields in this screen.Tabl

P-2608HWL-Dx Series User’s GuideChapter 18 IPSec VPN 239Negotiation Mode Select Main or Aggressive from the drop-down list box. Multiple SAs connectin

P-2608HWL-Dx Series User’s Guide24 Table of Contents

P-2608HWL-Dx Series User’s Guide240 Chapter 18 IPSec VPN18.5 Configuring Manual KeyYou only configure VPN Manual Key when you select Manual in the IP

P-2608HWL-Dx Series User’s GuideChapter 18 IPSec VPN 241Figure 129 VPN: Manual KeyThe following table describes the fields in this screen.Table 86

P-2608HWL-Dx Series User’s Guide242 Chapter 18 IPSec VPNDNS Server (for IPSec VPN)If there is a private DNS server that services the VPN, type its IP

P-2608HWL-Dx Series User’s GuideChapter 18 IPSec VPN 24318.6 Viewing SA MonitorClick Security, VPN and Monitor to open the SA Monitor screen as shown

P-2608HWL-Dx Series User’s Guide244 Chapter 18 IPSec VPNWhen there is outbound traffic but no inbound traffic, the SA times out automatically after tw

P-2608HWL-Dx Series User’s GuideChapter 18 IPSec VPN 24518.7 Configuring Global SettingTo change your ZyXEL Device’s global settings, click VPN and t

P-2608HWL-Dx Series User’s Guide246 Chapter 18 IPSec VPNFigure 132 Telecommuters Sharing One VPN Rule Example18.8.2 Telecommuters Using Unique VPN

P-2608HWL-Dx Series User’s GuideChapter 18 IPSec VPN 247Figure 133 Telecommuters Using Unique VPN Rules ExampleTable 90 Telecommuters Using Unique

P-2608HWL-Dx Series User’s Guide248 Chapter 18 IPSec VPN18.9 VPN and Remote ManagementIf a VPN tunnel uses Telnet, FTP, WWW, then you should configur

P-2608HWL-Dx Series User’s GuideChapter 19 Certificates 249CHAPTER 19CertificatesThis chapter gives background information about public-key certificat

P-2608HWL-Dx Series User’s GuideList of Figures 25List of FiguresFigure 1 ZyXEL Device’s VoIP Features ...

P-2608HWL-Dx Series User’s Guide250 Chapter 19 CertificatesA certification path is the hierarchy of certification authority certificates that validate

P-2608HWL-Dx Series User’s GuideChapter 19 Certificates 251Use the My Certificates screens to generate and export self-signed certificates or certific

P-2608HWL-Dx Series User’s Guide252 Chapter 19 Certificates# This field displays the certificate index number. The certificates are listed in alphabet

P-2608HWL-Dx Series User’s GuideChapter 19 Certificates 25319.5 My Certificate Import Click Security > Certificates > My Certificates and then

P-2608HWL-Dx Series User’s Guide254 Chapter 19 CertificatesThe following table describes the labels in this screen. 19.6 My Certificate Create Click

P-2608HWL-Dx Series User’s GuideChapter 19 Certificates 255The following table describes the labels in this screen. Table 93 My Certificate CreateLA

P-2608HWL-Dx Series User’s Guide256 Chapter 19 CertificatesAfter you click Apply in the My Certificate Create screen, you see a screen that tells you

P-2608HWL-Dx Series User’s GuideChapter 19 Certificates 257Figure 138 My Certificate Details

P-2608HWL-Dx Series User’s Guide258 Chapter 19 CertificatesThe following table describes the labels in this screen. Table 94 My Certificate DetailsL

P-2608HWL-Dx Series User’s GuideChapter 19 Certificates 25919.8 Trusted CAs Click Security > Certificates > Trusted CAs to open the Trusted C

P-2608HWL-Dx Series User’s Guide26 List of FiguresFigure 39 Bandwidth Management Wizard: Complete ... 77Figure

P-2608HWL-Dx Series User’s Guide260 Chapter 19 CertificatesFigure 139 Trusted CAsThe following table describes the labels in this screen. Table 95

P-2608HWL-Dx Series User’s GuideChapter 19 Certificates 26119.9 Trusted CA Import Click Security > Certificates > Trusted CAs to open the Tru

P-2608HWL-Dx Series User’s Guide262 Chapter 19 Certificates19.10 Trusted CA Details Click Security > Certificates > Trusted CAs to open the Tru

P-2608HWL-Dx Series User’s GuideChapter 19 Certificates 263The following table describes the labels in this screen. Table 97 Trusted CA DetailsLABEL

P-2608HWL-Dx Series User’s Guide264 Chapter 19 Certificates19.11 Trusted Remote Hosts Click Security > Certificates > Trusted Remote Hosts to

P-2608HWL-Dx Series User’s GuideChapter 19 Certificates 265Figure 142 Trusted Remote HostsThe following table describes the labels in this screen. T

P-2608HWL-Dx Series User’s Guide266 Chapter 19 Certificates19.12 Verifying a Trusted Remote Host’s CertificateCertificates issued by certification au

P-2608HWL-Dx Series User’s GuideChapter 19 Certificates 267Verify (over the phone for example) that the remote host has the same information in the Th

P-2608HWL-Dx Series User’s Guide268 Chapter 19 CertificatesFigure 146 Trusted Remote Host Details

P-2608HWL-Dx Series User’s GuideChapter 19 Certificates 269The following table describes the labels in this screen. Table 100 Trusted Remote Host De

P-2608HWL-Dx Series User’s GuideList of Figures 27Figure 82 Edit Address Mapping Rule ...

P-2608HWL-Dx Series User’s Guide270 Chapter 19 Certificates19.15 Directory Servers Click Security > Certificates > Directory Servers to open th

P-2608HWL-Dx Series User’s GuideChapter 19 Certificates 271Figure 147 Directory ServersThe following table describes the labels in this screen. 19.1

P-2608HWL-Dx Series User’s Guide272 Chapter 19 CertificatesFigure 148 Directory Server AddThe following table describes the labels in this screen. T

P-2608HWL-Dx Series User’s GuideChapter 20 Static Route 273CHAPTER 20Static RouteThis chapter shows you how to configure static routes for your ZyXEL

P-2608HWL-Dx Series User’s Guide274 Chapter 20 Static RouteFigure 150 Static RouteThe following table describes the labels in this screen. 20.2.1 S

P-2608HWL-Dx Series User’s GuideChapter 20 Static Route 275Figure 151 Static Route EditThe following table describes the labels in this screen. Tabl

P-2608HWL-Dx Series User’s Guide276 Chapter 20 Static Route

P-2608HWL-Dx Series User’s GuideChapter 21 Bandwidth Management 277CHAPTER 21Bandwidth ManagementThis chapter contains information about configuring b

P-2608HWL-Dx Series User’s Guide278 Chapter 21 Bandwidth ManagementThe following figure shows LAN subnets. You could configure one bandwidth class for

P-2608HWL-Dx Series User’s GuideChapter 21 Bandwidth Management 27921.5.2 Fairness-based SchedulerThe ZyXEL Device divides bandwidth equally among ba

P-2608HWL-Dx Series User’s Guide28 List of FiguresFigure 125 VPN: Transport and Tunnel Mode Encapsulation ... 228Figure

P-2608HWL-Dx Series User’s Guide280 Chapter 21 Bandwidth Management21.6.2 Maximize Bandwidth Usage ExampleHere is an example of a ZyXEL Device that h

P-2608HWL-Dx Series User’s GuideChapter 21 Bandwidth Management 281• Research requires more bandwidth but only gets its budgeted 2048 kbps because all

P-2608HWL-Dx Series User’s Guide282 Chapter 21 Bandwidth Management21.7 Over Allotment of BandwidthYou can set the bandwidth management speed for an

P-2608HWL-Dx Series User’s GuideChapter 21 Bandwidth Management 283The following table describes the labels in this screen. 21.9 Bandwidth Management

P-2608HWL-Dx Series User’s Guide284 Chapter 21 Bandwidth ManagementFigure 154 Bandwidth Management: Rule SetupThe following table describes the labe

P-2608HWL-Dx Series User’s GuideChapter 21 Bandwidth Management 28521.9.1 Rule ConfigurationClick the Edit icon or User define in the Service field t

P-2608HWL-Dx Series User’s Guide286 Chapter 21 Bandwidth ManagementRule Name Use the auto-generated name or enter a descriptive name of up to 20 alph

P-2608HWL-Dx Series User’s GuideChapter 21 Bandwidth Management 28721.10 Bandwidth Monitor To view the ZyXEL Device’s bandwidth usage and allotments

P-2608HWL-Dx Series User’s Guide288 Chapter 21 Bandwidth Management

P-2608HWL-Dx Series User’s GuideChapter 22 Dynamic DNS Setup 289CHAPTER 22Dynamic DNS SetupThis chapter discusses how to configure your ZyXEL Device t

P-2608HWL-Dx Series User’s GuideList of Figures 29Figure 168 Configuring UPnP ...

P-2608HWL-Dx Series User’s Guide290 Chapter 22 Dynamic DNS SetupFigure 157 Dynamic DNSThe following table describes the fields in this screen. Table

P-2608HWL-Dx Series User’s GuideChapter 22 Dynamic DNS Setup 291Dynamic DNS server auto detect IP AddressSelect this option only when there are one or

P-2608HWL-Dx Series User’s Guide292 Chapter 22 Dynamic DNS Setup

P-2608HWL-Dx Series User’s GuideChapter 23 Remote Management Configuration 293CHAPTER 23Remote ManagementConfigurationThis chapter provides informatio

P-2608HWL-Dx Series User’s Guide294 Chapter 23 Remote Management Configuration• You have disabled that service in one of the remote management screens

P-2608HWL-Dx Series User’s GuideChapter 23 Remote Management Configuration 2952 HTTP connection requests from a web browser go to port 80 (by default)

P-2608HWL-Dx Series User’s Guide296 Chapter 23 Remote Management ConfigurationThe following table describes the labels in this screen.23.4 TelnetYou

P-2608HWL-Dx Series User’s GuideChapter 23 Remote Management Configuration 297Figure 160 Telnet Configuration on a TCP/IP Network23.5 Configuring T

P-2608HWL-Dx Series User’s Guide298 Chapter 23 Remote Management Configuration23.6 Configuring FTP You can upload and download the ZyXEL Device’s fir

P-2608HWL-Dx Series User’s GuideChapter 23 Remote Management Configuration 29923.7 SNMPSimple Network Management Protocol (SNMP) is a protocol used f

P-2608HWL-Dx Series User’s GuideCopyright 3CopyrightCopyright © 2006 by ZyXEL Communications Corporation.The contents of this publication may not be r

P-2608HWL-Dx Series User’s Guide30 List of FiguresFigure 210 Java (Sun) ...

P-2608HWL-Dx Series User’s Guide300 Chapter 23 Remote Management Configuration• GetNext - Allows the manager to retrieve the next object variable from

P-2608HWL-Dx Series User’s GuideChapter 23 Remote Management Configuration 301Figure 164 Remote Management: SNMPThe following table describes the la

P-2608HWL-Dx Series User’s Guide302 Chapter 23 Remote Management Configuration23.8 Configuring DNS Use DNS (Domain Name System) to map a domain name

P-2608HWL-Dx Series User’s GuideChapter 23 Remote Management Configuration 303If an outside user attempts to probe an unsupported port on your ZyXEL D

P-2608HWL-Dx Series User’s Guide304 Chapter 23 Remote Management Configuration23.10 TR-069TR-069 is a protocol that defines how your ZyXEL Device can

P-2608HWL-Dx Series User’s GuideChapter 23 Remote Management Configuration 305periodicEnable [0:Disable/1:Enable]Whether or not the device must period

P-2608HWL-Dx Series User’s Guide306 Chapter 23 Remote Management Configuration

P-2608HWL-Dx Series User’s GuideChapter 24 Universal Plug-and-Play (UPnP) 307CHAPTER 24Universal Plug-and-Play (UPnP)This chapter introduces the UPnP

P-2608HWL-Dx Series User’s Guide308 Chapter 24 Universal Plug-and-Play (UPnP)24.1.3 Cautions with UPnPThe automated nature of NAT traversal applicati

P-2608HWL-Dx Series User’s GuideChapter 24 Universal Plug-and-Play (UPnP) 309The following table describes the fields in this screen.24.3 Installing

P-2608HWL-Dx Series User’s GuideList of Figures 31Figure 253 Internal SPTGEN FTP Download Example ... 417Figure

P-2608HWL-Dx Series User’s Guide310 Chapter 24 Universal Plug-and-Play (UPnP)Figure 169 Add/Remove Programs: Windows Setup: Communication 3 In the C

P-2608HWL-Dx Series User’s GuideChapter 24 Universal Plug-and-Play (UPnP) 311Installing UPnP in Windows XPFollow the steps below to install the UPnP i

P-2608HWL-Dx Series User’s Guide312 Chapter 24 Universal Plug-and-Play (UPnP)Figure 173 Networking Services6 Click OK to go back to the Windows Opti

P-2608HWL-Dx Series User’s GuideChapter 24 Universal Plug-and-Play (UPnP) 313Figure 174 Network Connections3 In the Internet Connection Properties w

P-2608HWL-Dx Series User’s Guide314 Chapter 24 Universal Plug-and-Play (UPnP)4 You may edit or delete the port mappings or click Add to manually add p

P-2608HWL-Dx Series User’s GuideChapter 24 Universal Plug-and-Play (UPnP) 315Figure 178 System Tray Icon7 Double-click on the icon to display your c

P-2608HWL-Dx Series User’s Guide316 Chapter 24 Universal Plug-and-Play (UPnP)Figure 180 Network Connections4 An icon with the description for each U

P-2608HWL-Dx Series User’s GuideChapter 24 Universal Plug-and-Play (UPnP) 317Figure 181 Network Connections: My Network Places6 Right-click on the i

P-2608HWL-Dx Series User’s Guide318 Chapter 24 Universal Plug-and-Play (UPnP)

P-2608HWL-Dx Series User’s GuideChapter 25 System 319CHAPTER 25SystemUse this screen to configure the ZyXEL Device’s time and date settings.25.1 Gene

P-2608HWL-Dx Series User’s Guide32 List of Figures

P-2608HWL-Dx Series User’s Guide320 Chapter 25 SystemFigure 183 System General SetupThe following table describes the labels in this screen. Table

P-2608HWL-Dx Series User’s GuideChapter 25 System 32125.2 Time Setting To change your ZyXEL Device’s time and date, click Maintenance > System >

P-2608HWL-Dx Series User’s Guide322 Chapter 25 SystemNew Time (hh:mm:ss)This field displays the last updated time from the time server or the last tim

P-2608HWL-Dx Series User’s GuideChapter 25 System 323End Date Configure the day and time when Daylight Saving Time ends if you selected Enable Dayligh

P-2608HWL-Dx Series User’s Guide324 Chapter 25 System

P-2608HWL-Dx Series User’s GuideChapter 26 Logs 325CHAPTER 26LogsThis chapter contains information about configuring general log settings and viewing

P-2608HWL-Dx Series User’s Guide326 Chapter 26 LogsFigure 185 View LogThe following table describes the fields in this screen. 26.3 Configuring L

P-2608HWL-Dx Series User’s GuideChapter 26 Logs 327Alerts are e-mailed as soon as they happen. Logs may be e-mailed as soon as the log is full. Select

P-2608HWL-Dx Series User’s Guide328 Chapter 26 LogsSend Log to The ZyXEL Device sends logs to the e-mail address specified in this field. If this fie

P-2608HWL-Dx Series User’s GuideChapter 26 Logs 32926.4 SMTP Error MessagesIf there are difficulties in sending e-mail the following error message ap

P-2608HWL-Dx Series User’s GuideList of Tables 33List of TablesTable 1 Models Covered ...

P-2608HWL-Dx Series User’s Guide330 Chapter 26 LogsFigure 187 E-mail Log ExampleSubject: Firewall Alert From Date: Fri, 07 Apr 20

P-2608HWL-Dx Series User’s GuideChapter 27 Tools 331CHAPTER 27ToolsThis chapter explains how to upload new firmware, manage configuration files and re

P-2608HWL-Dx Series User’s Guide332 Chapter 27 ToolsThis is a sample FTP session saving the current configuration to the computer file “config.cfg”.If

P-2608HWL-Dx Series User’s GuideChapter 27 Tools 333Figure 188 Firmware UpgradeThe following table describes the labels in this screen.Note: Do NOT

P-2608HWL-Dx Series User’s Guide334 Chapter 27 ToolsFigure 190 Network Temporarily DisconnectedAfter two minutes, log in again and check your new fi

P-2608HWL-Dx Series User’s GuideChapter 27 Tools 335Figure 192 Configuration27.5.1 Backup Configuration Backup Configuration allows you to back up

P-2608HWL-Dx Series User’s Guide336 Chapter 27 ToolsAfter you see a “restore configuration successful” screen, you must then wait one minute before lo

P-2608HWL-Dx Series User’s GuideChapter 27 Tools 337Figure 196 Reset In Process MessageYou can also press the RESET button on the rear panel to rese

P-2608HWL-Dx Series User’s Guide338 Chapter 27 Tools4 Enter your password as requested (the default is “1234”).5 Enter “bin” to set transfer mode to b

P-2608HWL-Dx Series User’s GuideChapter 27 Tools 33927.7.4 Backup Configuration Using TFTPThe ZyXEL Device supports the up/downloading of the firmwar

P-2608HWL-Dx Series User’s Guide34 List of TablesTable 39 Wireless: WPA(2) ...

P-2608HWL-Dx Series User’s Guide340 Chapter 27 Tools27.7.6 Configuration Backup Using GUI-based TFTP ClientsThe following table describes some of the

P-2608HWL-Dx Series User’s GuideChapter 27 Tools 34127.8.1 Restore Using FTP Session ExampleFigure 199 Restore Using FTP Session ExampleRefer to Se

P-2608HWL-Dx Series User’s Guide342 Chapter 27 Tools27.9.2 FTP Session Example of Firmware File UploadFigure 200 FTP Session Example of Firmware Fi

P-2608HWL-Dx Series User’s GuideChapter 27 Tools 34327.9.4 TFTP Upload Command ExampleThe following is an example TFTP command:tftp [-i] host put fir

P-2608HWL-Dx Series User’s Guide344 Chapter 27 Tools

P-2608HWL-Dx Series User’s GuideChapter 28 Diagnostic 345CHAPTER 28DiagnosticThese read-only screens display information to help you identify problems

P-2608HWL-Dx Series User’s Guide346 Chapter 28 DiagnosticFigure 202 Diagnostic: DSL LineThe following table describes the fields in this screen. Ta

P-2608HWL-Dx Series User’s GuideChapter 28 Diagnostic 347DSL Line Status Click this button to view statistics about the DSL connections.noise margin d

P-2608HWL-Dx Series User’s Guide348 Chapter 28 Diagnostic

P-2608HWL-Dx Series User’s GuideChapter 29 Troubleshooting 349CHAPTER 29TroubleshootingThis chapter covers potential problems and the corresponding re

P-2608HWL-Dx Series User’s GuideList of Tables 35Table 82 VPN Example: Mismatching ID Type and Content ... 225Table 83

P-2608HWL-Dx Series User’s Guide350 Chapter 29 Troubleshooting29.3 Problems with the WANTable 138 Troubleshooting the WANPROBLEM CORRECTIVE ACTIONT

P-2608HWL-Dx Series User’s GuideChapter 29 Troubleshooting 35129.4 Problems Accessing the ZyXEL Device29.4.1 Pop-up Windows, JavaScripts and Java Pe

P-2608HWL-Dx Series User’s Guide352 Chapter 29 Troubleshooting• Java permissions (enabled by default).Note: Internet Explorer 6 screens are used here.

P-2608HWL-Dx Series User’s GuideChapter 29 Troubleshooting 353Figure 204 Internet Options3 Click Apply to save this setting.29.4.1.1.2 Enable pop-

P-2608HWL-Dx Series User’s Guide354 Chapter 29 TroubleshootingFigure 205 Internet Options3 Type the IP address of your device (the web page that you

P-2608HWL-Dx Series User’s GuideChapter 29 Troubleshooting 355Figure 206 Pop-up Blocker Settings5 Click Close to return to the Privacy screen. 6 Cli

P-2608HWL-Dx Series User’s Guide356 Chapter 29 TroubleshootingFigure 207 Internet Options 2 Click the Custom Level... button. 3 Scroll down to Scrip

P-2608HWL-Dx Series User’s GuideChapter 29 Troubleshooting 357Figure 208 Security Settings - Java Scripting29.4.1.3 Java Permissions1 From Internet

P-2608HWL-Dx Series User’s Guide358 Chapter 29 TroubleshootingFigure 209 Security Settings - Java 29.4.1.3.1 JAVA (Sun)1 From Internet Explorer, cl

P-2608HWL-Dx Series User’s GuideChapter 29 Troubleshooting 359Figure 210 Java (Sun)29.5 Telephone ProblemsTable 140 Troubleshooting TelephonePROB

P-2608HWL-Dx Series User’s Guide36 List of TablesTable 123 Configuring UPnP ...

P-2608HWL-Dx Series User’s Guide360 Chapter 29 Troubleshooting

P-2608HWL-Dx Series User’s GuideAppendix A Product Specifications 361APPENDIX A Product SpecificationsSee also Chapter 1 on page 41 for a general over

P-2608HWL-Dx Series User’s Guide362 Appendix A Product SpecificationsIEEE 802.11b/g Wireless LANThe ZyXEL Device can serve as an IEEE 802.11g wireless

P-2608HWL-Dx Series User’s GuideAppendix A Product Specifications 363TR-069 TR-069 is a protocol that defines how your ZyXEL Device can be managed via

P-2608HWL-Dx Series User’s Guide364 Appendix A Product SpecificationsTable 143 Firmware Specifications ADSL Standards Support ITU G.992.1 G.dmt (Ann

P-2608HWL-Dx Series User’s GuideAppendix A Product Specifications 365Wireless IEEE 802.11g ComplianceFrequency Range: 2.4 GHz ISM BandAdvanced Orthogo

P-2608HWL-Dx Series User’s Guide366 Appendix A Product SpecificationsP-2608HW/HWL-Dx Series Power Adaptor SpecificationsVoice Features SIP version 2 (

P-2608HWL-Dx Series User’s GuideAppendix B Setting up Your Computer’s IP Address 367APPENDIX BSetting up Your Computer’s IP AddressAll computers must

P-2608HWL-Dx Series User’s Guide368 Appendix B Setting up Your Computer’s IP AddressFigure 211 WIndows 95/98/Me: Network: ConfigurationInstalling Co

P-2608HWL-Dx Series User’s GuideAppendix B Setting up Your Computer’s IP Address 3693 Select Microsoft from the list of manufacturers.4 Select Client

P-2608HWL-Dx Series User’s GuideList of Tables 37Table 166 CDR Logs ...

P-2608HWL-Dx Series User’s Guide370 Appendix B Setting up Your Computer’s IP AddressFigure 213 Windows 95/98/Me: TCP/IP Properties: DNS Configuratio

P-2608HWL-Dx Series User’s GuideAppendix B Setting up Your Computer’s IP Address 371Figure 214 Windows XP: Start Menu2 For Windows XP, click Network

P-2608HWL-Dx Series User’s Guide372 Appendix B Setting up Your Computer’s IP AddressFigure 216 Windows XP: Control Panel: Network Connections: Prope

P-2608HWL-Dx Series User’s GuideAppendix B Setting up Your Computer’s IP Address 373• If you have a static IP address click Use the following IP Addre

P-2608HWL-Dx Series User’s Guide374 Appendix B Setting up Your Computer’s IP Address• Click Obtain DNS server address automatically if you do not know

P-2608HWL-Dx Series User’s GuideAppendix B Setting up Your Computer’s IP Address 375Figure 220 Macintosh OS 8/9: Apple Menu2 Select Ethernet built-i

P-2608HWL-Dx Series User’s Guide376 Appendix B Setting up Your Computer’s IP Address•From the Configure box, select Manually.• Type your IP address in

P-2608HWL-Dx Series User’s GuideAppendix B Setting up Your Computer’s IP Address 377Figure 223 Macintosh OS X: Network4 For statically assigned sett

P-2608HWL-Dx Series User’s Guide378 Appendix B Setting up Your Computer’s IP Address

P-2608HWL-Dx Series User’s GuideAppendix C IP Addresses and Subnetting 379APPENDIX CIP Addresses and SubnettingThis appendix introduces IP addresses,

P-2608HWL-Dx Series User’s Guide38 List of Tables

P-2608HWL-Dx Series User’s Guide380 Appendix C IP Addresses and SubnettingThe following table shows the network number and host ID arrangement for cla

P-2608HWL-Dx Series User’s GuideAppendix C IP Addresses and Subnetting 381Subnet MasksA subnet mask is used to determine which bits are part of the ne

P-2608HWL-Dx Series User’s Guide382 Appendix C IP Addresses and SubnettingThe first mask shown is the class “C” natural mask. Normally if no mask is s

P-2608HWL-Dx Series User’s GuideAppendix C IP Addresses and Subnetting 383Host IDs of all zeros represent the subnet itself and host IDs of all ones a

P-2608HWL-Dx Series User’s Guide384 Appendix C IP Addresses and SubnettingExample Eight SubnetsSimilarly use a 27-bit mask to create eight subnets (00

P-2608HWL-Dx Series User’s GuideAppendix C IP Addresses and Subnetting 385The following table shows class C IP address last octet values for each subn

P-2608HWL-Dx Series User’s Guide386 Appendix C IP Addresses and SubnettingThe following table is a summary for class “B” subnet planning. Table 158

P-2608HWL-Dx Series User’s GuideAppendix D Common Services 387Appendix D Common ServicesThe commonly used services and port numbers are shown in the f

P-2608HWL-Dx Series User’s Guide388 Appendix D Common ServicesNFS(UDP:2049) Network File System - NFS is a client/server distributed file service tha

P-2608HWL-Dx Series User’s GuideAppendix E Importing Certificates 389APPENDIX EImporting CertificatesThis appendix shows importing certificates exampl

P-2608HWL-Dx Series User’s GuidePreface 39PrefaceCongratulations on your purchase of the P-2608HWL-Dx ADSL VoIP IAD with 802.11g Wireless (the “ZyXEL

P-2608HWL-Dx Series User’s Guide390 Appendix E Importing CertificatesFigure 225 Login Screen2 Click Install Certificate to open the Install Certific

P-2608HWL-Dx Series User’s GuideAppendix E Importing Certificates 391Figure 227 Certificate Import Wizard 14 Select where you would like to store th

P-2608HWL-Dx Series User’s Guide392 Appendix E Importing CertificatesFigure 229 Certificate Import Wizard 36 Click Yes to add the Prestige certific

P-2608HWL-Dx Series User’s GuideAppendix E Importing Certificates 393Figure 231 Certificate General Information after ImportEnrolling and Importing

P-2608HWL-Dx Series User’s Guide394 Appendix E Importing CertificatesFigure 232 Prestige Trusted CA ScreenThe CA sends you a package containing the

P-2608HWL-Dx Series User’s GuideAppendix E Importing Certificates 395Installing Your Personal Certificate(s)You need a password in advance. The CA may

P-2608HWL-Dx Series User’s Guide396 Appendix E Importing CertificatesFigure 236 Personal Certificate Import Wizard 34 Have the wizard determine wher

P-2608HWL-Dx Series User’s GuideAppendix E Importing Certificates 397Figure 238 Personal Certificate Import Wizard 56 You should see the following s

P-2608HWL-Dx Series User’s Guide398 Appendix E Importing CertificatesFigure 241 SSL Client Authentication3 You next see the Prestige login screen.Fi

P-2608HWL-Dx Series User’s GuideAppendix F Triangle Route 399APPENDIX FTriangle RouteThe Ideal Setup When the firewall is on, your ZyXEL Device acts a

P-2608HWL-Dx Series User’s Guide4 CertificationsCertificationsFederal Communications Commission (FCC) Interference StatementThe device complies with P

P-2608HWL-Dx Series User’s Guide40 Preface• The P-2608HWL-Dx series may be referred to as the ”ZyXEL Device” or the “device” in this user’s guide. Thi

P-2608HWL-Dx Series User’s Guide400 Appendix F Triangle RouteFigure 244 “Triangle Route” ProblemThe “Triangle Route” SolutionsThis section presents

P-2608HWL-Dx Series User’s GuideAppendix F Triangle Route 401Figure 245 IP AliasGateways on the WAN SideA second solution to the “triangle route” pr

P-2608HWL-Dx Series User’s Guide402 Appendix F Triangle Route

P-2608HWL-Dx Series User’s GuideAppendix G Log Descriptions 403APPENDIX GLog DescriptionsThis appendix provides descriptions of example log messages.

P-2608HWL-Dx Series User’s Guide404 Appendix G Log Descriptions Successful HTTPS login Someone has logged on to the router's web configurator int

P-2608HWL-Dx Series User’s GuideAppendix G Log Descriptions 405 For type and code details, see Table 173 on page 409.Table 163 TCP Reset LogsLOG ME

P-2608HWL-Dx Series User’s Guide406 Appendix G Log Descriptions Triangle route packet forwarded: ICMPThe firewall allowed a triangle route session to

P-2608HWL-Dx Series User’s GuideAppendix G Log Descriptions 407 For type and code details, see Table 173 on page 409.Table 168 UPnP LogsLOG MESSAG

P-2608HWL-Dx Series User’s Guide408 Appendix G Log Descriptions ip spoofing - no routing entry ICMP (type:%d, code:%d)The firewall classified an ICMP

P-2608HWL-Dx Series User’s GuideAppendix G Log Descriptions 409 No Server to authenticate user. There is no authentication server to authenticate a us

P-2608HWL-Dx Series User’s GuideChapter 1 Getting To Know the ZyXEL Device 41CHAPTER 1Getting To Know the ZyXELDeviceThis chapter introduces the main

P-2608HWL-Dx Series User’s Guide410 Appendix G Log Descriptions 11 Time Exceeded0 Time to live exceeded in transit1 Fragment reassembly time exceeded1

P-2608HWL-Dx Series User’s GuideAppendix G Log Descriptions 411Table 176 RTP LogsLOG MESSAGE DESCRIPTIONError, RTP init fail The initialization of a

P-2608HWL-Dx Series User’s Guide412 Appendix G Log DescriptionsThe following table shows RFC-2408 ISAKMP payload types that the log displays. Please r

P-2608HWL-Dx Series User’s GuideAppendix G Log Descriptions 413Figure 248 Displaying Log Parameters Example4 Use sys logs category followed by a log

P-2608HWL-Dx Series User’s Guide414 Appendix G Log DescriptionsLog Command ExampleThis example shows how to set the ZyXEL Device to record the access

P-2608HWL-Dx Series User’s GuideAppendix H Internal SPTGEN 415APPENDIX HInternal SPTGENInternal SPTGEN OverviewInternal SPTGEN (System Parameter Table

P-2608HWL-Dx Series User’s Guide416 Appendix H Internal SPTGENSome parameters are dependent on others. For example, if you disable the Configured fiel

P-2608HWL-Dx Series User’s GuideAppendix H Internal SPTGEN 417Figure 253 Internal SPTGEN FTP Download ExampleNote: You can rename your “rom-t” file

P-2608HWL-Dx Series User’s Guide418 Appendix H Internal SPTGENThe following are the Internal SPTGEN menus.PVA Parameter Values AllowedINPUT An example

P-2608HWL-Dx Series User’s GuideAppendix H Internal SPTGEN 419FIN FN PVA INPUT30200001 = DHCP <0(None) | 1(Server) | 2(Relay)>= 030200002 = Cli

P-2608HWL-Dx Series User’s Guide42 Chapter 1 Getting To Know the ZyXEL Device1.1.2 DSL RouterYour ZyXEL Device is an ideal solution for fast Internet

P-2608HWL-Dx Series User’s Guide420 Appendix H Internal SPTGEN30201008 = IP Alias #1 Incoming protocol filters Set 3 = 25630201009 = IP Alias #1 Incom

P-2608HWL-Dx Series User’s GuideAppendix H Internal SPTGEN 42130500004 = RTS Threshold <0 ~ 2432> = 243230500005 = FRAG. Threshold <256 ~ 2

P-2608HWL-Dx Series User’s Guide422 Appendix H Internal SPTGEN40000002 = Active <0(No) | 1(Yes)> = 140000003 = ISP's Name = ChangeMe40000

P-2608HWL-Dx Series User’s GuideAppendix H Internal SPTGEN 42340000032= RIP Version <0(Rip-1) | 1(Rip-2B) |2(Rip-2M)> = 040000033= Nailed-up Co

P-2608HWL-Dx Series User’s Guide424 Appendix H Internal SPTGEN/ Menu 12.1.4 IP Static Route Setup FIN FN PVA INPUT120104001 = IP Static Route set #4,

P-2608HWL-Dx Series User’s GuideAppendix H Internal SPTGEN 425120107006 = IP Static Route set #7, Metric = 0120107007 = IP Static Route set #7, Priva

P-2608HWL-Dx Series User’s Guide426 Appendix H Internal SPTGEN120111004 = IP Static Route set #11, Destination IP subnetmask = 0120111005 = IP Static

P-2608HWL-Dx Series User’s GuideAppendix H Internal SPTGEN 427120115002 = IP Static Route set #15, Active <0(No) |1(Yes)> = 0120115003 = IP St

P-2608HWL-Dx Series User’s Guide428 Appendix H Internal SPTGEN150000014 = SUA Server #4 Port Start = 0150000015 = SUA Server #4 Port End = 01500000

P-2608HWL-Dx Series User’s GuideAppendix H Internal SPTGEN 429150000048 = SUA Server #11 Protocol <0(All)|6(TCP)|17(UDP)> = 0150000049 = SUA Ser

P-2608HWL-Dx Series User’s GuideChapter 1 Getting To Know the ZyXEL Device 43The following table describes your device’s LEDs.Table 2 LEDsLIGHT COLO

P-2608HWL-Dx Series User’s Guide430 Appendix H Internal SPTGEN/ Menu 21.1.1.2 set #1, rule #2 FIN FN PVA INPUT210102001 = IP Filter Set 1,Rule 2 Type

P-2608HWL-Dx Series User’s GuideAppendix H Internal SPTGEN 431210103013 = IP Filter Set 1,Rule 3 Act Match <1(check next)|2(forward)|3(drop) = 3210

P-2608HWL-Dx Series User’s Guide432 Appendix H Internal SPTGEN210105009 = IP Filter Set 1,Rule 5 Src Subnet Mask = 0210105010 = IP Filter Set 1,Rule

P-2608HWL-Dx Series User’s GuideAppendix H Internal SPTGEN 433/ Menu 21.1.2.1 Filter set #2, rule #1 FIN FN PVA INPUT210201001 = IP Filter Set 2, Rule

P-2608HWL-Dx Series User’s Guide434 Appendix H Internal SPTGEN210202009 = IP Filter Set 2, Rule 2 Src Subnet Mask = 0210202010 = IP Filter Set 2,Rule

P-2608HWL-Dx Series User’s GuideAppendix H Internal SPTGEN 435210204002 = IP Filter Set 2, Rule 4 Active <0(No)|1(Yes)> = 1210204003 = IP Filter

P-2608HWL-Dx Series User’s Guide436 Appendix H Internal SPTGEN210205011 = IP Filter Set 2, Rule 5 Src Port Comp<0(none)|1(equal)|2(not equal)|3(les

P-2608HWL-Dx Series User’s GuideAppendix H Internal SPTGEN 437Table 189 Menu 23 System Menus */ Menu 23.1 System Password Setup FIN FN PVA INPUT2300

P-2608HWL-Dx Series User’s Guide438 Appendix H Internal SPTGENCommand ExamplesThe following are example Internal SPTGEN screens associated with the Zy

P-2608HWL-Dx Series User’s GuideAppendix H Internal SPTGEN 439FIN FN PVA INPUT990000001 = ADSL OPMD <0(etsi)|1(normal)|2(gdmt)|3(multimode)>= 3

P-2608HWL-Dx Series User’s Guide44 Chapter 1 Getting To Know the ZyXEL Device

P-2608HWL-Dx Series User’s Guide440 Appendix H Internal SPTGEN

P-2608HWL-Dx Series User’s GuideIndex 441IndexAAAL5 364AbS 156active protocol 228AH 228and encapsulation 228ESP 228Address Resolution Protocol (ARP) 1

P-2608HWL-Dx Series User’s Guide442 Indexand cryptology 249and directory servers 250, 270and IKE SA 225and public-key cryptology 249and public-private

P-2608HWL-Dx Series User’s GuideIndex 443Domain Name System, See DNSdomain name, and ISPs 319domain name, of system 319DoS 189types 190DoS (Denial of

P-2608HWL-Dx Series User’s Guide444 Indexand Smurf attack 191and SYN attack 191and SYN Flood 190and TCP/IP 190and Teardrop 190and three-way-handshake

P-2608HWL-Dx Series User’s GuideIndex 445password 225peer identity 224pre-shared key 224proposal 223user name 225IKE SA. See also VPN.importing certif

P-2608HWL-Dx Series User’s Guide446 Indexschedule 327settings 326sorting 325syslog server 325viewing 325MMAC address filter action 134MAC filter 134Ma

P-2608HWL-Dx Series User’s GuideIndex 447pop-ups, browser settings 351Port Forwarding 365port forwarding 144and servers 144configuration 145example 14

P-2608HWL-Dx Series User’s Guide448 IndexRFC 2684 364RFC 3261 366RFC 3489 155RIP 108direction 108version 108RIP (Routing Information Protocol) 108romf

P-2608HWL-Dx Series User’s GuideIndex 449configuration 274example 273reaching other networks 273Storage Humidity 361Storage Temperature 361STUN 155how

P-2608HWL-Dx Series User’s GuideChapter 2 Introducing the Web Configurator 45CHAPTER 2Introducing the WebConfiguratorThis chapter describes how to acc

P-2608HWL-Dx Series User’s Guide450 IndexVBR-nRT 98VBR-RT 98VCI (Virtual Channel Identifier) 90Virtual Channel Identifier (VCI) 90virtual circuit (VC)

P-2608HWL-Dx Series User’s GuideIndex 451Zzero configuration Internet access 94ZyNOS 332ZyNOS (ZyXEL Network Operating System) 331ZyNOS firmware versi

P-2608HWL-Dx Series User’s Guide46 Chapter 2 Introducing the Web ConfiguratorFigure 4 Password Screen5 The following screen displays if you have not

P-2608HWL-Dx Series User’s GuideChapter 2 Introducing the Web Configurator 47Figure 6 Factory Default Certificate 7 A screen displays to let you ch

P-2608HWL-Dx Series User’s Guide48 Chapter 2 Introducing the Web Configurator2.1.2 The RESET ButtonYou can use the RESET button on the side of the de

P-2608HWL-Dx Series User’s GuideChapter 2 Introducing the Web Configurator 49• B - navigation panel• C - main window• D - status bar2.2.1 Title BarTh

P-2608HWL-Dx Series User’s GuideCertifications 5第十二條 經型式認證合格之低功率射頻電機，非經許可，公司、商號或使用者均不得擅自變更頻率、加大功率或變更原設計之特性及功能。第十四條 低功率射頻電機之使用不得影響飛航安全及干擾合法通信；經發現有干擾現

P-2608HWL-Dx Series User’s Guide50 Chapter 2 Introducing the Web ConfiguratorWireless LAN General Use this screen to configure the wireless LAN settin

P-2608HWL-Dx Series User’s GuideChapter 2 Introducing the Web Configurator 51VPN Setup Use this screen to configure each VPN tunnel.Monitor Use this s

P-2608HWL-Dx Series User’s Guide52 Chapter 2 Introducing the Web ConfiguratorMain WindowThe main window displays information and configuration fields.

P-2608HWL-Dx Series User’s GuideChapter 3 Internet and Wireless Setup Wizard 53CHAPTER 3Internet and Wireless SetupWizardThis chapter provides informa

P-2608HWL-Dx Series User’s Guide54 Chapter 3 Internet and Wireless Setup WizardFigure 10 Wizard Welcome3 Your ZyXEL Device attempts to detect your D

P-2608HWL-Dx Series User’s GuideChapter 3 Internet and Wireless Setup Wizard 55Figure 12 Auto-Detection: PPPoEc The following screen appears if the

P-2608HWL-Dx Series User’s Guide56 Chapter 3 Internet and Wireless Setup WizardFigure 14 Internet Access Wizard Setup: ISP ParametersThe following t

P-2608HWL-Dx Series User’s GuideChapter 3 Internet and Wireless Setup Wizard 572 The next wizard screen varies depending on what mode and encapsulatio

P-2608HWL-Dx Series User’s Guide58 Chapter 3 Internet and Wireless Setup WizardThe following table describes the fields in this screen.Figure 17 Int

P-2608HWL-Dx Series User’s GuideChapter 3 Internet and Wireless Setup Wizard 59Figure 18 Internet Connection with PPPoAThe following table describes

P-2608HWL-Dx Series User’s Guide6 Safety WarningsSafety WarningsFor your safety, be sure to read and follow all warning notices and instructions.• Do

P-2608HWL-Dx Series User’s Guide60 Chapter 3 Internet and Wireless Setup WizardFigure 19 Connection Test Failed-1• If the following screen displays,

P-2608HWL-Dx Series User’s GuideChapter 3 Internet and Wireless Setup Wizard 61Figure 21 Connection Test Successful2 Use this screen to activate the

P-2608HWL-Dx Series User’s Guide62 Chapter 3 Internet and Wireless Setup Wizard3 Configure your wireless settings in this screen. Click Next.Figure 23

P-2608HWL-Dx Series User’s GuideChapter 3 Internet and Wireless Setup Wizard 634 This screen varies depending on the security mode you selected in the

P-2608HWL-Dx Series User’s Guide64 Chapter 3 Internet and Wireless Setup WizardFigure 25 Manually Assign a WEP keyThe following table describes the

P-2608HWL-Dx Series User’s GuideChapter 3 Internet and Wireless Setup Wizard 65Figure 26 Wireless LAN Setup 36 Use the read-only summary table to ch

P-2608HWL-Dx Series User’s Guide66 Chapter 3 Internet and Wireless Setup Wizard

P-2608HWL-Dx Series User’s GuideChapter 4 VoIP Wizard And Example 67CHAPTER 4VoIP Wizard And ExampleThis chapter shows you how to configure your SIP a

P-2608HWL-Dx Series User’s Guide68 Chapter 4 VoIP Wizard And ExampleFigure 29 Select a Mode2 Click VOICE OVER INTERNET SETUP to configure your SIP s

P-2608HWL-Dx Series User’s GuideChapter 4 VoIP Wizard And Example 693 Fill in the VOICE OVER INTERNET SETUP wizard screen with the information provide

P-2608HWL-Dx Series User’s GuideSafety Warnings 7This product is recyclable. Dispose of it properly.

P-2608HWL-Dx Series User’s Guide70 Chapter 4 VoIP Wizard And Example4 Your ZyXEL Device will attempt to register your SIP account with your VoIP servi

P-2608HWL-Dx Series User’s GuideChapter 4 VoIP Wizard And Example 71Figure 33 VoIP Wizard Fail6 This screen displays if your SIP account registratio

P-2608HWL-Dx Series User’s Guide72 Chapter 4 VoIP Wizard And Example

P-2608HWL-Dx Series User’s GuideChapter 5 Bandwidth Management Wizard 73CHAPTER 5Bandwidth Management WizardThis chapter shows you how to configure ba

P-2608HWL-Dx Series User’s Guide74 Chapter 5 Bandwidth Management Wizard5.3 Bandwidth Management Wizard Setup1 After you enter the password to access

P-2608HWL-Dx Series User’s GuideChapter 5 Bandwidth Management Wizard 752 Click BANDWIDTH MANAGEMENT SETUP.Figure 36 Wizard: Welcome3 Activate bandw

P-2608HWL-Dx Series User’s Guide76 Chapter 5 Bandwidth Management WizardFigure 38 Bandwidth Management Wizard: Service ConfigurationThe following ta

P-2608HWL-Dx Series User’s GuideChapter 5 Bandwidth Management Wizard 775 Follow the on-screen instructions and click Finish to complete the wizard se

P-2608HWL-Dx Series User’s Guide78 Chapter 5 Bandwidth Management Wizard

P-2608HWL-Dx Series User’s GuideChapter 6 Status Screens 79CHAPTER 6Status ScreensUse the Status screens to look at the current status of the device,

P-2608HWL-Dx Series User’s Guide8 ZyXEL Limited WarrantyZyXEL Limited WarrantyZyXEL warrants to the original end user (purchaser) that this product is

P-2608HWL-Dx Series User’s Guide80 Chapter 6 Status ScreensEach field is described in the following table.Table 19 Status ScreenLABEL DESCRIPTIONRef

P-2608HWL-Dx Series User’s GuideChapter 6 Status Screens 81SecurityFirewall This displays whether or not the ZyXEL Device’s firewall is activated. Cli

P-2608HWL-Dx Series User’s Guide82 Chapter 6 Status Screens6.2 Any IP TableClick Status > AnyIP Table to access this screen. Use this screen to vi

P-2608HWL-Dx Series User’s GuideChapter 6 Status Screens 83Each field is described in the following table.6.3 WLAN StatusClick Status > WLAN Statu

P-2608HWL-Dx Series User’s Guide84 Chapter 6 Status ScreensFigure 43 Packet StatisticsThe following table describes the fields in this screen. Tabl

P-2608HWL-Dx Series User’s GuideChapter 6 Status Screens 856.5 VoIP StatisticsClick Status > VoIP Statistics to access this screen. Figure 44 Vo

P-2608HWL-Dx Series User’s Guide86 Chapter 6 Status ScreensEach field is described in the following table.Table 23 VoIP Statistics LABEL DESCRIPTION

P-2608HWL-Dx Series User’s GuideChapter 6 Status Screens 87Tx B/s This field displays how quickly the ZyXEL Device has transmitted packets in the curr

P-2608HWL-Dx Series User’s Guide88 Chapter 6 Status Screens

P-2608HWL-Dx Series User’s GuideChapter 7 WAN Setup 89CHAPTER 7WAN SetupThis chapter describes how to configure WAN settings.7.1 WAN Overview A WAN (

P-2608HWL-Dx Series User’s GuideCustomer Support 9Customer SupportPlease have the following information ready when you contact customer support.• Prod

P-2608HWL-Dx Series User’s Guide90 Chapter 7 WAN SetupBy implementing PPPoE directly on the ZyXEL Device (rather than individual computers), the compu

P-2608HWL-Dx Series User’s GuideChapter 7 WAN Setup 917.1.4 IP Address AssignmentA static IP is a fixed IP that your ISP gives you. A dynamic IP is n

P-2608HWL-Dx Series User’s Guide92 Chapter 7 WAN Setup7.2 Metric The metric represents the "cost of transmission". A router determines the

P-2608HWL-Dx Series User’s GuideChapter 7 WAN Setup 93Maximum Burst Size (MBS) is the maximum number of cells that can be sent at the PCR. After MBS i

P-2608HWL-Dx Series User’s Guide94 Chapter 7 WAN SetupThe VBR-nRT (non real-time Variable Bit Rate) type is used with bursty connections that do not r

P-2608HWL-Dx Series User’s GuideChapter 7 WAN Setup 95Figure 46 Internet Access Setup (PPPoE)The following table describes the labels in this screen

P-2608HWL-Dx Series User’s Guide96 Chapter 7 WAN SetupMultiplexing Select the method of multiplexing used by your ISP from the drop-down list. Choices

P-2608HWL-Dx Series User’s GuideChapter 7 WAN Setup 977.5.1 Advanced Internet Access Setup To edit your ZyXEL Device's advanced WAN settings, cl

P-2608HWL-Dx Series User’s Guide98 Chapter 7 WAN Setup7.6 WAN More ConnectionsThe ZyXEL Device allows you to configure more than one Internet access

P-2608HWL-Dx Series User’s GuideChapter 7 WAN Setup 99Figure 48 WAN More ConnectionsThe following table describes the labels in this screen. 7.6.1