Document Outline

• P-2608HWL-Dx Series
• Copyright
• Certifications
• Safety Warnings
• ZyXEL Limited Warranty
• Customer Support
• Table of Contents
• List of Figures
• List of Tables
• Preface
• Getting To Know the ZyXEL Device
  • 1.1 Overview
    • 1.1.1 VoIP Features
    • 1.1.2 DSL Router
  • 1.2 LEDs (Lights)
• Introducing the Web Configurator
  • 2.1 Web Configurator Overview
    • 2.1.1 Accessing the Web Configurator
    • 2.1.2 The RESET Button
      • 2.1.2.1 Using The Reset Button
  • 2.2 Web Configurator Main Screen
    • 2.2.1 Title Bar
    • 2.2.2 Navigation Panel
    • 2.2.3 Status Bar
• Internet and Wireless Setup Wizard
  • 3.1 Introduction
  • 3.2 Internet Access Wizard Setup
    • 3.2.1 Manual Configuration
  • 3.3 Wireless Connection Wizard Setup
    • 3.3.1 Automatically assign a WPA key
    • 3.3.2 Manually Assign a WPA key
    • 3.3.3 Manually Assign a WEP key
• VoIP Wizard And Example
  • 4.1 Introduction
  • 4.2 VoIP Wizard Setup
• Bandwidth Management Wizard
  • 5.1 Introduction
  • 5.2 Predefined Media Bandwidth Management Services
  • 5.3 Bandwidth Management Wizard Setup
• Status Screens
  • 6.1 Status Screen
  • 6.2 Any IP Table
  • 6.3 WLAN Status
  • 6.4 Packet Statistics
  • 6.5 VoIP Statistics
• WAN Setup
  • 7.1 WAN Overview
    • 7.1.1 Encapsulation
      • 7.1.1.1 ENET ENCAP
      • 7.1.1.2 PPP over Ethernet
      • 7.1.1.3 PPPoA
      • 7.1.1.4 RFC 1483
    • 7.1.2 Multiplexing
      • 7.1.2.1 VC-based Multiplexing
      • 7.1.2.2 LLC-based Multiplexing
    • 7.1.3 VPI and VCI
    • 7.1.4 IP Address Assignment
      • 7.1.4.1 IP Assignment with PPPoA or PPPoE Encapsulation
      • 7.1.4.2 IP Assignment with RFC 1483 Encapsulation
      • 7.1.4.3 IP Assignment with ENET ENCAP Encapsulation
    • 7.1.5 Nailed-Up Connection (PPP)
    • 7.1.6 NAT
  • 7.2 Metric
  • 7.3 Traffic Shaping
    • 7.3.1 ATM Traffic Classes
      • 7.3.1.1 Constant Bit Rate (CBR)
      • 7.3.1.2 Variable Bit Rate (VBR)
      • 7.3.1.3 Unspecified Bit Rate (UBR)
  • 7.4 Zero Configuration Internet Access
  • 7.5 Internet Access Setup
    • 7.5.1 Advanced Internet Access Setup
  • 7.6 WAN More Connections
    • 7.6.1 WAN More Connections Modify Screen
  • 7.7 Traffic Redirect
  • 7.8 WAN Backup Setup
• LAN Setup
  • 8.1 LAN Overview
    • 8.1.1 LANs, WANs and the ZyXEL Device
    • 8.1.2 DHCP Setup
      • 8.1.2.1 IP Pool Setup
    • 8.1.3 DNS Server Address
    • 8.1.4 DNS Server Address Assignment
  • 8.2 LAN TCP/IP
    • 8.2.1 IP Address and Subnet Mask
      • 8.2.1.1 Private IP Addresses
    • 8.2.2 RIP Setup
    • 8.2.3 Multicast
    • 8.2.4 Any IP
      • 8.2.4.1 How Any IP Works
  • 8.3 Configuring LAN IP
    • 8.3.1 Configuring Advanced LAN Setup
  • 8.4 DHCP Setup
  • 8.5 LAN Client List
  • 8.6 LAN IP Alias
• Wireless LAN
  • 9.1 Wireless Network Overview
  • 9.2 Wireless Security Overview
    • 9.2.1 SSID
    • 9.2.2 MAC Address Filter
    • 9.2.3 User Authentication
    • 9.2.4 Encryption
    • 9.2.5 One-Touch Intelligent Security Technology (OTIST)
  • 9.3 Wireless Performance Overview
    • 9.3.1 Quality of Service (QoS)
  • 9.4 Additional Wireless Terms
  • 9.5 General Wireless LAN Screen
    • 9.5.1 No Security
    • 9.5.2 WEP Encryption Screen
    • 9.5.3 WPA(2)-PSK
    • 9.5.4 WPA(2) Authentication Screen
    • 9.5.5 Wireless LAN Advanced Setup
  • 9.6 OTIST Screen
    • 9.6.1 Notes on OTIST
  • 9.7 MAC Filter
  • 9.8 QoS Screen
    • 9.8.1 Application Priority Configuration
• Network Address Translation (NAT) Screens
  • 10.1 NAT Overview
    • 10.1.1 NAT Definitions
    • 10.1.2 What NAT Does
    • 10.1.3 How NAT Works
    • 10.1.4 NAT Application
    • 10.1.5 NAT Mapping Types
  • 10.2 SUA (Single User Account) Versus NAT
  • 10.3 NAT General Setup
  • 10.4 Port Forwarding
    • 10.4.1 Default Server IP Address
    • 10.4.2 Port Forwarding: Services and Port Numbers
    • 10.4.3 Configuring Servers Behind Port Forwarding (Example)
  • 10.5 Configuring Port Forwarding
    • 10.5.1 Port Forwarding Rule Edit
  • 10.6 Address Mapping
    • 10.6.1 Address Mapping Rule Edit
    • 10.6.2 SIP ALG
• SIP
  • 11.1 SIP Overview
    • 11.1.1 Introduction to VoIP
    • 11.1.2 Introduction to SIP
    • 11.1.3 SIP Identities
      • 11.1.3.1 SIP Number
      • 11.1.3.2 SIP Service Domain
    • 11.1.4 SIP Call Progression
    • 11.1.5 SIP Client Server
      • 11.1.5.1 SIP User Agent
      • 11.1.5.2 SIP Proxy Server
      • 11.1.5.3 SIP Redirect Server
      • 11.1.5.4 SIP Register Server
    • 11.1.6 RTP
    • 11.1.7 NAT and SIP
      • 11.1.7.1 SIP ALG
      • 11.1.7.2 Use NAT
      • 11.1.7.3 STUN
      • 11.1.7.4 Outbound Proxy
    • 11.1.8 Voice Coding
    • 11.1.9 PSTN Call Setup Signaling
    • 11.1.10 MWI (Message Waiting Indication)
    • 11.1.11 Custom Tones (IVR)
      • 11.1.11.1 Recording Custom Tones
      • 11.1.11.2 Listening to Custom Tones
      • 11.1.11.3 Deleting Custom Tones
    • 11.1.12 Quality of Service (QoS)
      • 11.1.12.1 Type Of Service (ToS)
      • 11.1.12.2 DiffServ
      • 11.1.12.3 DSCP and Per-Hop Behavior
      • 11.1.12.4 VLAN
  • 11.2 SIP Screens
    • 11.2.1 SIP Settings Screen
    • 11.2.2 Advanced SIP Setup Screen
    • 11.2.3 SIP QoS Screen
• Phone
  • 12.1 Phone Overview
    • 12.1.1 Voice Activity Detection/Silence Suppression/Comfort Noise
    • 12.1.2 Echo Cancellation
    • 12.1.3 Supplementary Phone Services Overview
      • 12.1.3.1 The Flash Key
      • 12.1.3.2 Europe Type Supplementary Phone Services
      • 12.1.3.3 USA Type Supplementary Services
  • 12.2 Phone Screens
    • 12.2.1 Analog Phone Screen
    • 12.2.2 Advanced Analog Phone Setup Screen
    • 12.2.3 Common Phone Settings Screen
    • 12.2.4 Phone Region Screen
• Phone Book
  • 13.1 Phone Book Overview
  • 13.2 Speed Dial Screen
  • 13.3 Incoming Call Policy Screen
  • 13.4 Group Ring Screen
• PSTN Line
  • 14.1 PSTN Line Overview
  • 14.2 PSTN Line Screen
• Firewalls
  • 15.1 Firewall Overview
  • 15.2 Types of Firewalls
    • 15.2.1 Packet Filtering Firewalls
    • 15.2.2 Application-level Firewalls
    • 15.2.3 Stateful Inspection Firewalls
  • 15.3 Introduction to ZyXEL’s Firewall
    • 15.3.1 Denial of Service Attacks
  • 15.4 Denial of Service
    • 15.4.1 Basics
    • 15.4.2 Types of DoS Attacks
      • 15.4.2.1 ICMP Vulnerability
      • 15.4.2.2 Illegal Commands (NetBIOS and SMTP)
      • 15.4.2.3 Traceroute
  • 15.5 Stateful Inspection
    • 15.5.1 Stateful Inspection Process
    • 15.5.2 Stateful Inspection on Your ZyXEL Device
    • 15.5.3 TCP Security
    • 15.5.4 UDP/ICMP Security
    • 15.5.5 Upper Layer Protocols
  • 15.6 Guidelines for Enhancing Security with Your Firewall
    • 15.6.1 Security In General
  • 15.7 Packet Filtering Vs Firewall
    • 15.7.1 Packet Filtering:
      • 15.7.1.1 When To Use Filtering
    • 15.7.2 Firewall
      • 15.7.2.1 When To Use The Firewall
• Firewall Configuration
  • 16.1 Access Methods
  • 16.2 Firewall Policies Overview
  • 16.3 Rule Logic Overview
    • 16.3.1 Rule Checklist
    • 16.3.2 Security Ramifications
    • 16.3.3 Key Fields For Configuring Rules
      • 16.3.3.1 Action
      • 16.3.3.2 Service
      • 16.3.3.3 Source Address
      • 16.3.3.4 Destination Address
  • 16.4 Connection Direction
    • 16.4.1 LAN to WAN Rules
    • 16.4.2 Alerts
  • 16.5 General Firewall Policy
  • 16.6 Firewall Rules Summary
    • 16.6.1 Configuring Firewall Rules
    • 16.6.2 Customized Services
    • 16.6.3 Configuring A Customized Service
  • 16.7 Example Firewall Rule
  • 16.8 DoS Thresholds
    • 16.8.1 Threshold Values
    • 16.8.2 Half-Open Sessions
      • 16.8.2.1 TCP Maximum Incomplete and Blocking Time
    • 16.8.3 Configuring Firewall Thresholds
• Content Filtering
  • 17.1 Content Filtering Overview
  • 17.2 Configuring Keyword Blocking
  • 17.3 Configuring the Schedule
  • 17.4 Configuring Trusted Computers
• IPSec VPN
  • 18.1 IPSec VPN Overview
    • 18.1.1 IKE SA Overview
      • 18.1.1.1 IP Addresses of the ZyXEL Device and Remote IPSec Router
      • 18.1.1.2 IKE SA Proposal
      • 18.1.1.3 Diffie-Hellman (DH) Key Exchange
      • 18.1.1.4 Authentication
      • 18.1.1.5 Extended Authentication
    • 18.1.2 Additional Topics for IKE SA
      • 18.1.2.1 Negotiation Mode
      • 18.1.2.2 VPN, NAT and NAT Traversal
    • 18.1.3 IPSec SA Overview
      • 18.1.3.1 Local Network and Remote Network
      • 18.1.3.2 Active Protocol
      • 18.1.3.3 Encapsulation
      • 18.1.3.4 IPSec SA Proposal and Perfect Forward Secrecy
    • 18.1.4 Additional Topics for IPSec SA
      • 18.1.4.1 IPSec SA using Manual Keys
  • 18.2 VPN Setup Screen
  • 18.3 Editing VPN Policies
  • 18.4 Configuring Advanced IKE Settings
  • 18.5 Configuring Manual Key
  • 18.6 Viewing SA Monitor
  • 18.7 Configuring Global Setting
  • 18.8 Telecommuter VPN/IPSec Examples
    • 18.8.1 Telecommuters Sharing One VPN Rule Example
    • 18.8.2 Telecommuters Using Unique VPN Rules Example
  • 18.9 VPN and Remote Management
• Certificates
  • 19.1 Certificates Overview
    • 19.1.1 Advantages of Certificates
  • 19.2 Self-signed Certificates
  • 19.3 Configuration Summary
  • 19.4 My Certificates
  • 19.5 My Certificate Import
    • 19.5.1 Certificate File Formats
  • 19.6 My Certificate Create
  • 19.7 My Certificate Details
  • 19.8 Trusted CAs
  • 19.9 Trusted CA Import
  • 19.10 Trusted CA Details
  • 19.11 Trusted Remote Hosts
  • 19.12 Verifying a Trusted Remote Host’s Certificate
    • 19.12.1 Trusted Remote Host Certificate Fingerprints
  • 19.13 Trusted Remote Hosts Import
  • 19.14 Trusted Remote Host Certificate Details
  • 19.15 Directory Servers
  • 19.16 Directory Server Add or Edit
• Static Route
  • 20.1 Static Route
  • 20.2 Configuring Static Route
    • 20.2.1 Static Route Edit
• Bandwidth Management
  • 21.1 Bandwidth Management Overview
  • 21.2 Application-based Bandwidth Management
  • 21.3 Subnet-based Bandwidth Management
  • 21.4 Application and Subnet-based Bandwidth Management
  • 21.5 Scheduler
    • 21.5.1 Priority-based Scheduler
    • 21.5.2 Fairness-based Scheduler
  • 21.6 Maximize Bandwidth Usage
    • 21.6.1 Reserving Bandwidth for Non-Bandwidth Class Traffic
    • 21.6.2 Maximize Bandwidth Usage Example
      • 21.6.2.1 Priority-based Allotment of Unused & Unbudgeted Bandwidth
      • 21.6.2.2 Fairness-based Allotment of Unused & Unbudgeted Bandwidth
    • 21.6.3 Bandwidth Management Priorities
  • 21.7 Over Allotment of Bandwidth
  • 21.8 Configuring Summary
  • 21.9 Bandwidth Management Rule Setup
    • 21.9.1 Rule Configuration
  • 21.10 Bandwidth Monitor
• Dynamic DNS Setup
  • 22.1 Dynamic DNS Overview
    • 22.1.1 DYNDNS Wildcard
  • 22.2 Configuring Dynamic DNS
• Remote Management Configuration
  • 23.1 Remote Management Overview
    • 23.1.1 Remote Management Limitations
    • 23.1.2 Remote Management and NAT
    • 23.1.3 System Timeout
  • 23.2 Introduction to HTTPS
  • 23.3 WWW
  • 23.4 Telnet
  • 23.5 Configuring Telnet
  • 23.6 Configuring FTP
  • 23.7 SNMP
    • 23.7.1 Supported MIBs
    • 23.7.2 SNMP Traps
    • 23.7.3 Configuring SNMP
  • 23.8 Configuring DNS
  • 23.9 Configuring ICMP
  • 23.10 TR-069
• Universal Plug-and-Play (UPnP)
  • 24.1 Introducing Universal Plug and Play
    • 24.1.1 How do I know if I'm using UPnP?
    • 24.1.2 NAT Traversal
    • 24.1.3 Cautions with UPnP
  • 24.2 UPnP and ZyXEL
    • 24.2.1 Configuring UPnP
  • 24.3 Installing UPnP in Windows Example
  • 24.4 Using UPnP in Windows XP Example
• System
  • 25.1 General Setup and System Name
    • 25.1.1 General Setup
  • 25.2 Time Setting
• Logs
  • 26.1 Logs Overview
    • 26.1.1 Alerts and Logs
  • 26.2 Viewing the Logs
  • 26.3 Configuring Log Settings
  • 26.4 SMTP Error Messages
    • 26.4.1 Example E-mail Log
• Tools
  • 27.1 Introduction
  • 27.2 Filename Conventions
  • 27.3 File Maintenance Over WAN
  • 27.4 Firmware Upgrade Screen
  • 27.5 Backup and Restore
    • 27.5.1 Backup Configuration
    • 27.5.2 Restore Configuration
    • 27.5.3 Reset to Factory Defaults
  • 27.6 Restart
  • 27.7 Using FTP or TFTP to Back Up Configuration
    • 27.7.1 Using the FTP Commands to Back Up Configuration
    • 27.7.2 FTP Command Configuration Backup Example
    • 27.7.3 Configuration Backup Using GUI-based FTP Clients
    • 27.7.4 Backup Configuration Using TFTP
    • 27.7.5 TFTP Command Configuration Backup Example
    • 27.7.6 Configuration Backup Using GUI-based TFTP Clients
  • 27.8 Using FTP or TFTP to Restore Configuration
    • 27.8.1 Restore Using FTP Session Example
  • 27.9 FTP and TFTP Firmware and Configuration File Uploads
    • 27.9.1 FTP File Upload Command from the DOS Prompt Example
    • 27.9.2 FTP Session Example of Firmware File Upload
    • 27.9.3 TFTP File Upload
    • 27.9.4 TFTP Upload Command Example
• Diagnostic
  • 28.1 General Diagnostic
  • 28.2 DSL Line Diagnostic
• Troubleshooting
  • 29.1 Problems Starting Up the ZyXEL Device
  • 29.2 Problems with the LAN
  • 29.3 Problems with the WAN
  • 29.4 Problems Accessing the ZyXEL Device
    • 29.4.1 Pop-up Windows, JavaScripts and Java Permissions
      • 29.4.1.1 Internet Explorer Pop-up Blockers
      • 29.4.1.2 JavaScripts
      • 29.4.1.3 Java Permissions
  • 29.5 Telephone Problems
• Product Specifications
• Setting up Your Computer’s IP Address
• IP Addresses and Subnetting
• Common Services
• Importing Certificates
• Triangle Route
• Log Descriptions
• Internal SPTGEN
• Index
  • A
  • B
  • C
  • D
  • E
  • F
  • G
  • H
  • I
  • J
  • K
  • L
  • M
  • N
  • O
  • P
  • Q
  • R
  • S
  • T
  • U
  • V
  • W
  • Z