Document Outline

• User’s Guide
• Copyright
• Certifications
• Safety Warnings
• ZyXEL Limited Warranty
• Customer Support
• Table of Contents
• List of Figures
• List of Tables
• Preface
• Getting To Know Your ZyXEL Device
  • 1.1 Introducing the ZyXEL Device
  • 1.2 Features
    • 1.2.1 Wireless Features (Wireless Devices Only)
  • 1.3 Applications for the ZyXEL Device
    • 1.3.1 Protected Internet Access
    • 1.3.2 LAN to LAN Application
  • 1.4 Front Panel LEDs
  • 1.5 Hardware Connection
  • 1.6 Splitters and Microfilters
    • 1.6.1 Connecting a POTS Splitter
    • 1.6.2 Telephone Microfilters
• Introducing the Web Configurator
  • 2.1 Web Configurator Overview
  • 2.2 Accessing the Web Configurator
  • 2.3 Resetting the ZyXEL Device
    • 2.3.1 Using the Reset Button
  • 2.4 Navigating the Web Configurator
    • 2.4.1 Navigation Panel
    • 2.4.2 Status Screen
    • 2.4.3 Status: Any IP Table
    • 2.4.4 Status: WLAN Status (Wireless devices only)
    • 2.4.5 Status: VPN Status
    • 2.4.6 Status: Bandwidth Status
    • 2.4.7 Status: Packet Statistics
    • 2.4.8 Changing Login Password
• Wizards
  • 3.1 Internet Setup Wizard
    • 3.1.1 Automatic Detection
    • 3.1.2 Manual Configuration
    • 3.1.3 No DSL Detection
  • 3.2 Wireless Connection Wizard Setup (wireless devices only)
    • 3.2.1 Manually assign a WPA-PSK key
    • 3.2.2 Manually assign a WEP key
  • 3.3 Bandwidth Management Wizard
    • 3.3.1 Screen 1
    • 3.3.2 Screen 2
    • 3.3.3 Screen 3
• WAN Setup
  • 4.1 WAN Overview
    • 4.1.1 Encapsulation
    • 4.1.2 Multiplexing
    • 4.1.3 VPI and VCI
    • 4.1.4 IP Address Assignment
    • 4.1.5 Nailed-Up Connection (PPP)
    • 4.1.6 NAT
  • 4.2 Metric
  • 4.3 Traffic Shaping
    • 4.3.1 ATM Traffic Classes
  • 4.4 Zero Configuration Internet Access
  • 4.5 Internet Connection
    • 4.5.1 Configuring Advanced Internet Connection
  • 4.6 Configuring More Connections
    • 4.6.1 More Connections Edit
    • 4.6.2 Configuring More Connections Advanced Setup
  • 4.7 Traffic Redirect
  • 4.8 Configuring WAN Backup Setup
• LAN Setup
  • 5.1 LAN Overview
    • 5.1.1 LANs, WANs and the ZyXEL Device
    • 5.1.2 DHCP Setup
    • 5.1.3 DNS Server Address
    • 5.1.4 DNS Server Address Assignment
  • 5.2 LAN TCP/IP
    • 5.2.1 IP Address and Subnet Mask
    • 5.2.2 RIP Setup
    • 5.2.3 Multicast
    • 5.2.4 Any IP
  • 5.3 Configuring LAN IP
    • 5.3.1 Configuring Advanced LAN Setup
  • 5.4 DHCP Setup
  • 5.5 LAN Client List
  • 5.6 LAN IP Alias
• Wireless LAN
  • 6.1 Wireless Network Overview
  • 6.2 Wireless Security Overview
    • 6.2.1 SSID
    • 6.2.2 MAC Address Filter
    • 6.2.3 User Authentication
    • 6.2.4 Encryption
    • 6.2.5 One-Touch Intelligent Security Technology (OTIST)
  • 6.3 Wireless Performance Overview
    • 6.3.1 Quality of Service (QoS)
  • 6.4 General Wireless LAN Screen
    • 6.4.1 No Security
    • 6.4.2 WEP Encryption
    • 6.4.3 WPA-PSK/WPA2-PSK
    • 6.4.4 WPA/WPA2
    • 6.4.5 Wireless LAN Advanced Setup
  • 6.5 OTIST
    • 6.5.1 Enabling OTIST
    • 6.5.2 Starting OTIST
    • 6.5.3 Notes on OTIST
  • 6.6 MAC Filter
  • 6.7 WMM QoS
    • 6.7.1 WMM QoS Example
    • 6.7.2 WMM QoS Priorities
    • 6.7.3 Services
  • 6.8 QoS Screen
    • 6.8.1 ToS (Type of Service) and WMM QoS
    • 6.8.2 Application Priority Configuration
• Network Address Translation (NAT) Screens
  • 7.1 NAT Overview
    • 7.1.1 NAT Definitions
    • 7.1.2 What NAT Does
    • 7.1.3 How NAT Works
    • 7.1.4 NAT Application
    • 7.1.5 NAT Mapping Types
  • 7.2 SUA (Single User Account) Versus NAT
  • 7.3 NAT General Setup
  • 7.4 Port Forwarding
    • 7.4.1 Default Server IP Address
    • 7.4.2 Port Forwarding: Services and Port Numbers
    • 7.4.3 Configuring Servers Behind Port Forwarding (Example)
  • 7.5 Configuring Port Forwarding
    • 7.5.1 Port Forwarding Rule Edit
  • 7.6 Address Mapping
    • 7.6.1 Address Mapping Rule Edit
• Firewalls
  • 8.1 Firewall Overview
  • 8.2 Types of Firewalls
    • 8.2.1 Packet Filtering Firewalls
    • 8.2.2 Application-level Firewalls
    • 8.2.3 Stateful Inspection Firewalls
  • 8.3 Introduction to ZyXEL’s Firewall
    • 8.3.1 Denial of Service Attacks
  • 8.4 Denial of Service
    • 8.4.1 Basics
    • 8.4.2 Types of DoS Attacks
  • 8.5 Stateful Inspection
    • 8.5.1 Stateful Inspection Process
    • 8.5.2 Stateful Inspection and the ZyXEL Device
    • 8.5.3 TCP Security
    • 8.5.4 UDP/ICMP Security
    • 8.5.5 Upper Layer Protocols
  • 8.6 Guidelines for Enhancing Security with Your Firewall
    • 8.6.1 Security In General
  • 8.7 Packet Filtering Vs Firewall
    • 8.7.1 Packet Filtering:
    • 8.7.2 Firewall
• Firewall Configuration
  • 9.1 Access Methods
  • 9.2 Firewall Policies Overview
  • 9.3 Rule Logic Overview
    • 9.3.1 Rule Checklist
    • 9.3.2 Security Ramifications
    • 9.3.3 Key Fields For Configuring Rules
  • 9.4 Connection Direction
    • 9.4.1 LAN to WAN Rules
    • 9.4.2 Alerts
  • 9.5 Triangle Route
    • 9.5.1 The “Triangle Route” Problem
    • 9.5.2 Solving the “Triangle Route” Problem
  • 9.6 General Firewall Policy
  • 9.7 Firewall Rules Summary
    • 9.7.1 Configuring Firewall Rules
    • 9.7.2 Customized Services
    • 9.7.3 Configuring A Customized Service
  • 9.8 Example Firewall Rule
  • 9.9 Predefined Services
  • 9.10 Anti Probing
  • 9.11 DoS Thresholds
    • 9.11.1 Threshold Values
    • 9.11.2 Half-Open Sessions
    • 9.11.3 Configuring Firewall Thresholds
• Trend Micro Security Services
  • 10.1 Trend Micro Security Services Overview
    • 10.1.1 TMSS Web Page
  • 10.2 Configuring TMSS on the ZyXEL Device
    • 10.2.1 General TMSS Settings
    • 10.2.2 TMSS Exception List
  • 10.3 TMSS Virus Protection
  • 10.4 Parental Controls
    • 10.4.1 Parental Controls Statistics
  • 10.5 ActiveX Controls in Internet Explorer
• Content Filtering
  • 11.1 Content Filtering Overview
  • 11.2 Configuring Keyword Blocking
  • 11.3 Configuring the Schedule
  • 11.4 Configuring Trusted Computers
• Introduction to IPSec
  • 12.1 VPN Overview
    • 12.1.1 IPSec
    • 12.1.2 Security Association
    • 12.1.3 Other Terminology
    • 12.1.4 VPN Applications
  • 12.2 IPSec Architecture
    • 12.2.1 IPSec Algorithms
    • 12.2.2 Key Management
  • 12.3 Encapsulation
    • 12.3.1 Transport Mode
    • 12.3.2 Tunnel Mode
  • 12.4 IPSec and NAT
• VPN Screens
  • 13.1 VPN/IPSec Overview
  • 13.2 IPSec Algorithms
    • 13.2.1 AH (Authentication Header) Protocol
    • 13.2.2 ESP (Encapsulating Security Payload) Protocol
  • 13.3 My IP Address
  • 13.4 Secure Gateway Address
    • 13.4.1 Dynamic Secure Gateway Address
  • 13.5 VPN Setup Screen
  • 13.6 Keep Alive
  • 13.7 VPN, NAT, and NAT Traversal
  • 13.8 Remote DNS Server
  • 13.9 ID Type and Content
    • 13.9.1 ID Type and Content Examples
  • 13.10 Pre-Shared Key
  • 13.11 Editing VPN Policies
  • 13.12 IKE Phases
    • 13.12.1 Negotiation Mode
    • 13.12.2 Diffie-Hellman (DH) Key Groups
    • 13.12.3 Perfect Forward Secrecy (PFS)
  • 13.13 Configuring Advanced IKE Settings
  • 13.14 Manual Key Setup
    • 13.14.1 Security Parameter Index (SPI)
  • 13.15 Configuring Manual Key
  • 13.16 Viewing SA Monitor
  • 13.17 Configuring Global Setting
  • 13.18 Telecommuter VPN/IPSec Examples
    • 13.18.1 Telecommuters Sharing One VPN Rule Example
    • 13.18.2 Telecommuters Using Unique VPN Rules Example
  • 13.19 VPN and Remote Management
• Static Route
  • 14.1 Static Route
  • 14.2 Configuring Static Route
    • 14.2.1 Static Route Edit
• Bandwidth Management
  • 15.1 Bandwidth Management Overview
  • 15.2 Application-based Bandwidth Management
  • 15.3 Subnet-based Bandwidth Management
  • 15.4 Application and Subnet-based Bandwidth Management
  • 15.5 Scheduler
    • 15.5.1 Priority-based Scheduler
    • 15.5.2 Fairness-based Scheduler
  • 15.6 Maximize Bandwidth Usage
    • 15.6.1 Reserving Bandwidth for Non-Bandwidth Class Traffic
    • 15.6.2 Maximize Bandwidth Usage Example
    • 15.6.3 Over Allotment of Bandwidth
    • 15.6.4 Bandwidth Management Priorities
  • 15.7 Configuring Summary
  • 15.8 Bandwidth Management Rule Setup
    • 15.8.1 Rule Configuration
  • 15.9 Bandwidth Monitor
• Dynamic DNS Setup
  • 16.1 Dynamic DNS Overview
    • 16.1.1 DYNDNS Wildcard
  • 16.2 Configuring Dynamic DNS
• Remote Management Configuration
  • 17.1 Remote Management Overview
    • 17.1.1 Remote Management Limitations
    • 17.1.2 Remote Management and NAT
    • 17.1.3 System Timeout
  • 17.2 WWW
  • 17.3 Telnet
  • 17.4 Configuring Telnet
  • 17.5 Configuring FTP
  • 17.6 SNMP
    • 17.6.1 Supported MIBs
    • 17.6.2 SNMP Traps
    • 17.6.3 Configuring SNMP
  • 17.7 Configuring DNS
  • 17.8 Configuring ICMP
  • 17.9 TR-069 (P-661H Only)
• Universal Plug-and-Play (UPnP)
  • 18.1 Introducing Universal Plug and Play
    • 18.1.1 How do I know if I'm using UPnP?
    • 18.1.2 NAT Traversal
    • 18.1.3 Cautions with UPnP
  • 18.2 UPnP and ZyXEL
    • 18.2.1 Configuring UPnP
  • 18.3 Installing UPnP in Windows Example
  • 18.4 Using UPnP in Windows XP Example
• System
  • 19.1 General Setup
    • 19.1.1 General Setup and System Name
    • 19.1.2 General Setup
  • 19.2 Time Setting
• Logs
  • 20.1 Logs Overview
    • 20.1.1 Alerts and Logs
  • 20.2 Viewing the Logs
  • 20.3 Configuring Log Settings
• Tools
  • 21.1 Firmware Upgrade
  • 21.2 Configuration
  • 21.3 Restart
• Diagnostic
  • 22.1 General Diagnostic
  • 22.2 DSL Line Diagnostic
• Troubleshooting
  • 23.1 Problems Starting Up the ZyXEL Device
  • 23.2 Problems with the LAN
  • 23.3 Problems with the WAN
  • 23.4 Problems Accessing the ZyXEL Device
• Product Specifications
• About ADSL
• Wall-mounting Instructions
• Setting up Your Computer’s IP Address
• IP Addresses and Subnetting
• Command Interpreter
• Firewall Commands
• NetBIOS Filter Commands
• PPPoE
• Log Descriptions
• Wireless LANs (wireless devices only)
• Pop-up Windows, JavaScripts and Java Permissions
• Index
  • A
  • B
  • C
  • D
  • E
  • F
  • G
  • H
  • I
  • K
  • L
  • M
  • N
  • O
  • P
  • Q
  • R
  • S
  • T
  • U
  • V
  • W
  • Z