Document Outline

• User’s Guide
• Copyright
• Certifications
• Safety Warnings
• ZyXEL Limited Warranty
• Customer Support
• Table of Contents
• List of Figures
• List of Tables
• Preface
• Getting To Know Your ZyXEL Device
  • 1.1 Introducing the ZyXEL Device
    • 1.1.1 Features of the ZyXEL Device
      • 1.1.1.1 P-662HW Wireless Features
    • 1.1.2 Applications for the ZyXEL Device
      • 1.1.2.1 Internet Access
      • 1.1.2.2 LAN to LAN Application
    • 1.1.3 Firewall for Secure Broadband Internet Access
    • 1.1.4 Front Panel LEDs
• Introducing the Web Configurator
  • 2.1 Web Configurator Overview
  • 2.2 Accessing the Web Configurator
  • 2.3 Resetting the ZyXEL Device
    • 2.3.1 Using the Reset Button
  • 2.4 Navigating the Web Configurator
    • 2.4.1 Navigation Panel
    • 2.4.8 Changing Login Password
• Wizard Setup for Internet Access
  • 3.1 Introduction
  • 3.2 Internet Access Wizard Setup
    • 3.2.1 Automatic Detection
    • 3.2.2 Manual Configuration
  • 3.3 Wireless Connection Wizard Setup
• Bandwidth Management Wizard
  • 4.1 Introduction
  • 4.2 Predefined Media Bandwidth Management Services
  • 4.3 Bandwidth Management Wizard Setup
• WAN Setup
  • 5.1.1 Encapsulation
    • 5.1.1.1 ENET ENCAP
    • 5.1.1.2 PPP over Ethernet
    • 5.1.1.3 PPPoA
    • 5.1.1.4 RFC 1483
  • 5.1.2 Multiplexing
    • 5.1.2.1 VC-based Multiplexing
    • 5.1.2.2 LLC-based Multiplexing
  • 5.1.3 VPI and VCI
  • 5.1.4 IP Address Assignment
    • 5.1.4.1 IP Assignment with PPPoA or PPPoE Encapsulation
    • 5.1.4.2 IP Assignment with RFC 1483 Encapsulation
    • 5.1.4.3 IP Assignment with ENET ENCAP Encapsulation
  • 5.1.5 Nailed-Up Connection (PPP)
  • 5.1.6 NAT
  • 5.2 Metric
  • 5.3 Traffic Shaping
    • 5.3.1 ATM Traffic Classes
      • 5.3.1.1 Constant Bit Rate (CBR)
      • 5.3.1.2 Variable Bit Rate (VBR)
      • 5.3.1.3 Unspecified Bit Rate (UBR)
  • 5.4 Zero Configuration Internet Access
• LAN Setup
  • 6.1.1 LANs, WANs and the ZyXEL Device
  • 6.1.2 DHCP Setup
    • 6.1.2.1 IP Pool Setup
  • 6.1.3 DNS Server Address
  • 6.1.4 DNS Server Address Assignment
  • 6.2 LAN TCP/IP
    • 6.2.1 IP Address and Subnet Mask
      • 6.2.1.1 Private IP Addresses
    • 6.2.2 RIP Setup
    • 6.2.3 Multicast
    • 6.2.4 Any IP
      • 6.2.4.1 How Any IP Works
• Wireless LAN
  • 7.1 Wireless Network Overview
  • 7.2 Wireless Security Overview
    • 7.2.1 SSID
    • 7.2.2 MAC Address Filter
    • 7.2.3 User Authentication
    • 7.2.4 Encryption
    • 7.2.5 One-Touch Intelligent Security Technology (OTIST)
  • 7.3 Wireless Performance Overview
    • 7.3.1 Quality of Service (QoS)
  • 7.4 Additional Wireless Terms
    • 7.5.2 WEP Encryption Screen
    • 7.5.3 WPA(2)-PSK
    • 7.5.4 WPA(2) Authentication Screen
    • 7.6.1 Enabling OTIST
      • 7.6.1.1 AP
      • 7.6.1.2 Wireless Client
    • 7.6.2 Starting OTIST
    • 7.6.3 Notes on OTIST
    • 7.8.1 WMM QoS Example
    • 7.8.2 WMM QoS Priorities
    • 7.8.3 Services
    • 7.9.1 ToS (Type of Service) and WMM QoS
  • 7.10 Multiple SSID (P-662HW-D Models only)
    • 7.10.1 Multiple SSID Commands
    • 7.10.2 Multiple SSID Example
• DMZ
  • 8.1 Introduction
  • 8.3 DMZ Public IP Address Example
  • 8.4 DMZ Private and Public IP Address Example
• Network Address Translation (NAT) Screens
  • 9.1.1 NAT Definitions
  • 9.1.2 What NAT Does
  • 9.1.3 How NAT Works
  • 9.1.4 NAT Application
  • 9.1.5 NAT Mapping Types
  • 9.2 SUA (Single User Account) Versus NAT
  • 9.4 Port Forwarding
    • 9.4.1 Default Server IP Address
    • 9.4.2 Port Forwarding: Services and Port Numbers
    • 9.4.3 Configuring Servers Behind Port Forwarding (Example)
• Firewalls
  • 10.2 Types of Firewalls
    • 10.2.1 Packet Filtering Firewalls
    • 10.2.2 Application-level Firewalls
    • 10.2.3 Stateful Inspection Firewalls
  • 10.3 Introduction to ZyXEL’s Firewall
    • 10.3.1 Denial of Service Attacks
  • 10.4 Denial of Service
    • 10.4.1 Basics
    • 10.4.2 Types of DoS Attacks
      • 10.4.2.1 ICMP Vulnerability
      • 10.4.2.2 Illegal Commands (NetBIOS and SMTP)
      • 10.4.2.3 Traceroute
  • 10.5 Stateful Inspection
    • 10.5.1 Stateful Inspection Process
    • 10.5.2 Stateful Inspection and the ZyXEL Device
    • 10.5.3 TCP Security
    • 10.5.4 UDP/ICMP Security
    • 10.5.5 Upper Layer Protocols
  • 10.6 Guidelines for Enhancing Security with Your Firewall
    • 10.6.1 Security In General
  • 10.7 Packet Filtering Vs Firewall
    • 10.7.1 Packet Filtering:
      • 10.7.1.1 When To Use Filtering
    • 10.7.2 Firewall
      • 10.7.2.1 When To Use The Firewall
• Firewall Configuration
  • 11.1 Access Methods
  • 11.2 Firewall Policies Overview
  • 11.3 Rule Logic Overview
    • 11.3.1 Rule Checklist
    • 11.3.2 Security Ramifications
    • 11.3.3 Key Fields For Configuring Rules
      • 11.3.3.1 Action
      • 11.3.3.2 Service
      • 11.3.3.3 Source Address
      • 11.3.3.4 Destination Address
  • 11.4 Connection Direction
    • 11.4.1 LAN to WAN Rules
    • 11.4.2 Alerts
  • 11.7 Example Firewall Rule
  • 11.8 Predefined Services
    • 11.10.1 Threshold Values
    • 11.10.2 Half-Open Sessions
      • 11.10.2.1 TCP Maximum Incomplete and Blocking Time
• Anti-Virus Packet Scan
  • 12.1 Overview
    • 12.1.1 Types of Computer Viruses
  • 12.2 Signature-Based Virus Scan
    • 12.2.1 Computer Virus Infection and Prevention
  • 12.3 Introduction to the ZyXEL Device Anti-virus Packet Scan
    • 12.3.1 How the ZyXEL Device Virus Scan Works
    • 12.3.2 Limitations of the ZyXEL Device Packet Scan
    • 12.5.1 Updating the Anti-Virus Packet Scan
• Content Filtering
• Content Access Control
  • 14.1 Content Access Control Overview
    • 14.1.1 Content Access Control WLAN Application
    • 14.1.2 Configuration Steps
  • 14.2 Activating CAC and Creating User Groups
    • 14.2.2.1 Available Services
  • 14.5 Content Access Control Logins
    • 14.5.1 User Login
    • 14.5.2 Administrator Login
• Introduction to IPSec
  • 15.1 VPN Overview
    • 15.1.1 IPSec
    • 15.1.2 Security Association
    • 15.1.3 Other Terminology
      • 15.1.3.1 Encryption
      • 15.1.3.2 Data Confidentiality
      • 15.1.3.3 Data Integrity
      • 15.1.3.4 Data Origin Authentication
    • 15.1.4 VPN Applications
  • 15.2 IPSec Architecture
    • 15.2.1 IPSec Algorithms
    • 15.2.2 Key Management
  • 15.3 Encapsulation
    • 15.3.1 Transport Mode
    • 15.3.2 Tunnel Mode
  • 15.4 IPSec and NAT
• VPN Screens
  • 16.1 VPN/IPSec Overview
  • 16.2 IPSec Algorithms
    • 16.2.1 AH (Authentication Header) Protocol
    • 16.2.2 ESP (Encapsulating Security Payload) Protocol
  • 16.3 My IP Address
  • 16.4 Secure Gateway Address
    • 16.4.1 Dynamic Secure Gateway Address
  • 16.6 Keep Alive
  • 16.7 VPN, NAT, and NAT Traversal
  • 16.8 Remote DNS Server
  • 16.9 ID Type and Content
    • 16.9.1 ID Type and Content Examples
  • 16.10 Pre-Shared Key
  • 16.12 IKE Phases
    • 16.12.1 Negotiation Mode
    • 16.12.2 Diffie-Hellman (DH) Key Groups
    • 16.12.3 Perfect Forward Secrecy (PFS)
  • 16.13 Configuring Advanced IKE Settings
  • 16.14 Manual Key Setup
    • 16.14.1 Security Parameter Index (SPI)
  • 16.18 Telecommuter VPN/IPSec Examples
    • 16.18.1 Telecommuters Sharing One VPN Rule Example
    • 16.18.2 Telecommuters Using Unique VPN Rules Example
  • 16.19 VPN and Remote Management
• Certificates
  • 17.1 Certificates Overview
    • 17.1.1 Advantages of Certificates
  • 17.2 Self-signed Certificates
  • 17.3 Configuration Summary
    • 17.5.1 Certificate File Formats
  • 17.12 Verifying a Trusted Remote Host’s Certificate
    • 17.12.1 Trusted Remote Host Certificate Fingerprints
• Static Route
• Bandwidth Management
  • 19.2 Application-based Bandwidth Management
  • 19.3 Subnet-based Bandwidth Management
  • 19.4 Application and Subnet-based Bandwidth Management
  • 19.5 Scheduler
    • 19.5.1 Priority-based Scheduler
    • 19.5.2 Fairness-based Scheduler
  • 19.6 Maximize Bandwidth Usage
    • 19.6.1 Reserving Bandwidth for Non-Bandwidth Class Traffic
    • 19.6.2 Maximize Bandwidth Usage Example
      • 19.6.2.1 Priority-based Allotment of Unused and Unbudgeted Bandwidth
      • 19.6.2.2 Fairness-based Allotment of Unused and Unbudgeted Bandwidth
    • 19.6.3 Bandwidth Management Priorities
• Dynamic DNS Setup
  • 20.1.1 DYNDNS Wildcard
• Remote Management Configuration
  • 21.1.1 Remote Management Limitations
  • 21.1.2 Remote Management and NAT
  • 21.1.3 System Timeout
  • 21.3 Telnet
  • 21.6 SNMP
    • 21.6.1 Supported MIBs
    • 21.6.2 SNMP Traps
  • 21.9 TR-069
• Universal Plug-and-Play (UPnP)
  • 22.1.1 How do I know if I'm using UPnP?
  • 22.1.2 NAT Traversal
  • 22.1.3 Cautions with UPnP
  • 22.2 UPnP and ZyXEL
  • 22.3 Installing UPnP in Windows Example
  • 22.4 Using UPnP in Windows XP Example
• System
  • 23.1 General Setup
    • 23.1.1 General Setup and System Name
• Logs
  • 24.1.1 Alerts and Logs
  • 24.4 SMTP Error Messages
    • 24.4.1 Example E-mail Log
• Tools
  • 25.2.1 Backup Configuration
  • 25.2.2 Restore Configuration
  • 25.2.3 Back to Factory Defaults
• Diagnostic
• Troubleshooting
  • 27.1 Problems Starting Up the ZyXEL Device
  • 27.2 Problems with the LAN
  • 27.3 Problems with the WAN
  • 27.4 Problems Accessing the ZyXEL Device
    • 27.4.1 Pop-up Windows, JavaScripts and Java Permissions
      • 27.4.1.1 Internet Explorer Pop-up Blockers
      • 27.4.1.2 JavaScripts
      • 27.4.1.3 Java Permissions
    • 27.4.2 ActiveX Controls in Internet Explorer
• Product Specifications
• About ADSL
• Wall-mounting Instructions
• Setting up Your Computer’s IP Address
• IP Addresses and Subnetting
• Wireless LANs
• Importing Certificates
• Command Interpreter
• Certificates Commands
• Boot Commands
• Firewall Commands
• NetBIOS Filter Commands
• Internal SPTGEN
• Splitters and Microfilters
• Log Descriptions
• Triangle Route
• Index
  • A
  • B
  • C
  • D
  • E
  • F
  • G
  • H
  • I
  • K
  • L
  • M
  • N
  • O
  • P
  • Q
  • R
  • S
  • T
  • U
  • V
  • W
  • Z