ZyXEL P-870HW-I Bedienungsanleitung

P-870HW-I Series802.11g Wireless VDSL2 4-port GatewayUser’s GuideVersion 3.508/2006Edition 1

P-870HW-I1 User’s Guide10 Customer Support+” is the (prefix) number you enter to make an international telephone [email protected] +47-22-80

P-870HW-I1 User’s Guide100 Chapter 6 Wireless LAN6.4.4 General Wireless LAN Screen: WPAUse this screen to enable and configure WPA encryption in your

P-870HW-I1 User’s GuideChapter 6 Wireless LAN 101The following table describes the labels in this screen.6.4.5 General Wireless LAN Screen: 802.1x +

P-870HW-I1 User’s Guide102 Chapter 6 Wireless LANFigure 50 Network > Wireless LAN > General > 802.1x + Dynamic WEPThe following table descr

P-870HW-I1 User’s GuideChapter 6 Wireless LAN 1036.4.6 General Wireless LAN Screen: 802.1x + Static WEPUse this screen to enable and configure IEEE 8

P-870HW-I1 User’s Guide104 Chapter 6 Wireless LANThe following table describes the labels in this screen.6.4.7 General Wireless LAN Screen: 802.1x +

P-870HW-I1 User’s GuideChapter 6 Wireless LAN 105Figure 52 Network > Wireless LAN > General > 802.1x + No WEPThe following table describes

P-870HW-I1 User’s Guide106 Chapter 6 Wireless LAN6.4.8 General Wireless LAN Screen: WPA2-PSKUse this screen to enable and configure WPA2-PSK encrypti

P-870HW-I1 User’s GuideChapter 6 Wireless LAN 1076.4.9 General Wireless LAN Screen: WPA2Use this screen to enable and configure WPA2 encryption in yo

P-870HW-I1 User’s Guide108 Chapter 6 Wireless LANThe following table describes the labels in this screen.6.5 OTIST ScreenUse this screen to set up an

P-870HW-I1 User’s GuideChapter 6 Wireless LAN 109Figure 55 Network > Wireless LAN > OTISTThe following table describes the labels in this scre

P-870HW-I1 User’s GuideTable of Contents 11Table of ContentsCopyright ...

P-870HW-I1 User’s Guide110 Chapter 6 Wireless LANFigure 56 Example: Wireless Client OTIST ScreenTo start OTIST in the wireless client, click Start i

P-870HW-I1 User’s GuideChapter 6 Wireless LAN 111Figure 59 OTIST: In Progress on the Wireless ClientThese screens close when the transfer is complet

P-870HW-I1 User’s Guide112 Chapter 6 Wireless LANFigure 61 Network > Wireless LAN > MAC FilterThe following table describes the labels in this

P-870HW-I1 User’s GuideChapter 6 Wireless LAN 1136.7 Advanced Wireless LAN ScreenUse this screen to enable and configure roaming and other advanced w

P-870HW-I1 User’s Guide114 Chapter 6 Wireless LAN

P-870HW-I1 User’s GuideChapter 6 Wireless LAN 115

P-870HW-I1 User’s Guide116 Chapter 6 Wireless LAN

P-870HW-I1 User’s GuideChapter 6 Wireless LAN 117

P-870HW-I1 User’s Guide118 Chapter 6 Wireless LAN

P-870HW-I1 User’s GuideChapter 7 WAN 119CHAPTER 7WANThis chapter describes how to configure outside connections to another network or the Internet.7.1

P-870HW-I1 User’s Guide12 Table of Contents3.2 Welcome Screen ...

P-870HW-I1 User’s Guide120 Chapter 7 WAN7.2 Internet Connection ScreensThis screen depends on the Encapsulation your ISP uses.7.2.1 Internet Connect

P-870HW-I1 User’s GuideChapter 7 WAN 1217.2.2 Internet Connection Screen: PPP over Ethernet (PPPoE)Use this screen to set up a PPP over Ethernet (PPP

P-870HW-I1 User’s Guide122 Chapter 7 WANThe following table describes the labels in this screen.Table 48 Network > WAN > Internet Connection &

P-870HW-I1 User’s GuideChapter 7 WAN 1237.3 Advanced WAN ScreenUse this screen to edit the advanced settings for your Internet connection. To open th

P-870HW-I1 User’s Guide124 Chapter 7 WAN7.4 Traffic Redirect ScreenUse this screen to specify a backup gateway in case the default gateway (your ISP)

P-870HW-I1 User’s GuideChapter 7 WAN 125Figure 66 Network > WAN > Traffic RedirectThe following table describes the labels in this screen.Tabl

P-870HW-I1 User’s Guide126 Chapter 7 WAN

P-870HW-I1 User’s GuideChapter 8 LAN 127CHAPTER 8LANThis chapter describes how to configure settings for the LAN port.8.1 LAN Overview A Local Area N

P-870HW-I1 User’s Guide128 Chapter 8 LANThe Version field controls the format and the broadcasting method of the RIP packets that the ZyXEL Device sen

P-870HW-I1 User’s GuideChapter 8 LAN 129Figure 67 Example: IP Alias8.2 LAN IP ScreenUse this screen to set up the IP address and subnet mask of you

P-870HW-I1 User’s GuideTable of Contents 13Chapter 6Wireless LAN ...

P-870HW-I1 User’s Guide130 Chapter 8 LANFigure 69 Network > LAN > IP AliasThe following table describes the fields in this screen.Table 52 N

P-870HW-I1 User’s GuideChapter 8 LAN 1318.4 Advanced LAN ScreenUse this screen to edit advanced settings, such as RIP and multicast, on the LAN port.

P-870HW-I1 User’s Guide132 Chapter 8 LANThe following table describes the fields in this screen.Table 53 Network > LAN > AdvancedLABEL DESCRIP

P-870HW-I1 User’s GuideChapter 9 DHCP Server 133CHAPTER 9DHCP ServerThis chapter describes how to configure the DHCP server for the LAN and WLAN ports

P-870HW-I1 User’s Guide134 Chapter 9 DHCP Server• DNS servers - The ZyXEL Device provides IP addresses for up to three DNS servers that provide DNS se

P-870HW-I1 User’s GuideChapter 9 DHCP Server 1359.3 Static DHCP ScreenUse this screen to assign static IP address to specific computers. To open this

P-870HW-I1 User’s Guide136 Chapter 9 DHCP Server9.4 Client List ScreenUse this screen to look at the current list of DHCP clients. It is empty if the

P-870HW-I1 User’s GuideChapter 10 NAT 137CHAPTER 10NATUse these screens to configure port forwarding, trigger ports, and other NAT rules for the ZyXEL

P-870HW-I1 User’s Guide138 Chapter 10 NAT10.1.2 Trigger Port ForwardingSome services use a dedicated range of ports on the client side and a dedicate

P-870HW-I1 User’s GuideChapter 10 NAT 13910.1.2.2 Two Points To Remember About Trigger Ports1 Trigger events only happen on data that is going coming

P-870HW-I1 User’s Guide14 Table of Contents8.1.4 LAN IP Alias ...

P-870HW-I1 User’s Guide140 Chapter 10 NAT10.3 Port Forwarding ScreenUse this screen to look at the current port-forwarding rules in the ZyXEL Device,

P-870HW-I1 User’s GuideChapter 10 NAT 14110.3.1 Port Forwarding Edit ScreenUse this screen to activate, deactivate, and edit each port-forwarding rul

P-870HW-I1 User’s Guide142 Chapter 10 NAT10.4 Trigger Port ScreenUse this screen to maintain port-triggering rules in the ZyXEL Device. To open this

P-870HW-I1 User’s GuideChapter 10 NAT 14310.5 Address Mapping ScreenUse this screen to edit other NAT rules for your ZyXEL Device. To open this scree

P-870HW-I1 User’s Guide144 Chapter 10 NATThe following table describes the fields in this screen.10.5.1 Address Mapping Edit ScreenUse this screen to

P-870HW-I1 User’s GuideChapter 10 NAT 145The following table describes the fields in this screen. Table 63 Network > NAT > Address Mapping >

P-870HW-I1 User’s Guide146 Chapter 10 NAT

P-870HW-I1 User’s GuideChapter 11 Firewalls 147CHAPTER 11FirewallsThis chapter gives some background information on firewalls and introduces the ZyXEL

P-870HW-I1 User’s Guide148 Chapter 11 Firewalls• The DSL port connects to the Internet.• The LAN (Local Area Network) ports attach to a network of com

P-870HW-I1 User’s GuideChapter 11 Firewalls 149• Restrict use of certain protocols, such as Telnet, to authorized users on the LAN.These custom rules

P-870HW-I1 User’s GuideTable of Contents 1511.3 Guidelines for Enhancing Security with Your Firewall ...15311.3.1 Se

P-870HW-I1 User’s Guide150 Chapter 11 FirewallsIn general, services are consist of two parts. First, each service has one or two IP protocol types (fo

P-870HW-I1 User’s GuideChapter 11 Firewalls 151When the number of existing half-open sessions rises above a threshold (max-incomplete high), the ZyXEL

P-870HW-I1 User’s Guide152 Chapter 11 Firewalls11.2.1 The “Triangle Route” ProblemA traffic route is a path for sending or receiving data packets bet

P-870HW-I1 User’s GuideChapter 11 Firewalls 1533 The reply from the WAN goes to the ZyXEL Device. 4 The ZyXEL Device then sends it to the computer on

P-870HW-I1 User’s Guide154 Chapter 11 Firewalls• Never e-mail sensitive information such as passwords, credit card information, etc., without encrypti

P-870HW-I1 User’s GuideChapter 11 Firewalls 155The following table describes the labels in this screen. 11.5 Firewall Rules ScreenNote: The ordering

P-870HW-I1 User’s Guide156 Chapter 11 FirewallsFigure 86 Security > Firewall > RulesThe following table describes the labels in this screen.Ta

P-870HW-I1 User’s GuideChapter 11 Firewalls 15711.5.1 Firewall Rule Edit ScreenUse this screen to create a new firewall rule or to edit an existing o

P-870HW-I1 User’s Guide158 Chapter 11 FirewallsFigure 87 Security > Firewall > Rules > Edit

P-870HW-I1 User’s GuideChapter 11 Firewalls 159The following table describes the labels in this screen.Table 66 Security > Firewall > Rules &g

P-870HW-I1 User’s Guide16 Table of ContentsChapter 15Bandwidth MGMT ...

P-870HW-I1 User’s Guide160 Chapter 11 Firewalls11.5.2 Customized Services ScreenUse this screen to create or edit customized services for firewall ru

P-870HW-I1 User’s GuideChapter 11 Firewalls 161Figure 89 Security > Firewall > Rules > Edit > Edit Customized Services > EditThe foll

P-870HW-I1 User’s Guide162 Chapter 11 FirewallsFigure 90 Security > Firewall > Anti ProbingThe following table describes the labels in this sc

P-870HW-I1 User’s GuideChapter 11 Firewalls 163Figure 91 Security > Firewall > ThresholdThe following table describes the labels in this scree

P-870HW-I1 User’s Guide164 Chapter 11 FirewallsDeny New Connection Request forSelect this radio button and specify for how long the ZyXEL Device shoul

P-870HW-I1 User’s GuideChapter 12 Content Filter 165CHAPTER 12Content FilterUse these screens to create and enforce policies that restrict access to t

P-870HW-I1 User’s Guide166 Chapter 12 Content FilterFigure 92 Security > Content Filter > FilterEach field is described in the following table

P-870HW-I1 User’s GuideChapter 12 Content Filter 16712.2.2 Content Filter Schedule ScreenUse this screen to set up the schedule when content filterin

P-870HW-I1 User’s Guide168 Chapter 12 Content Filter

P-870HW-I1 User’s GuideChapter 13 Certificates 169CHAPTER 13CertificatesThis chapter explains how to use certificates with your ZyXEL Device.13.1 Cer

P-870HW-I1 User’s GuideTable of Contents 17Chapter 18System ...

P-870HW-I1 User’s Guide170 Chapter 13 CertificatesCertification authorities maintain directory servers with databases of valid and revoked certificate

P-870HW-I1 User’s GuideChapter 13 Certificates 171Figure 94 Security > Certificates > My CertificatesThe following table describes the labels

P-870HW-I1 User’s Guide172 Chapter 13 Certificates13.3 Import My Certificate ScreenUse this screen to save an existing certificate to the ZyXEL Devic

P-870HW-I1 User’s GuideChapter 13 Certificates 173Figure 95 Security > Certificates > My Certificates > ImportThe following table describes

P-870HW-I1 User’s Guide174 Chapter 13 CertificatesFigure 96 Security > Certificates > My Certificates > CreateThe following table describes

P-870HW-I1 User’s GuideChapter 13 Certificates 175After you click Apply, the following screen appears.Key Length Select a number from the drop-down li

P-870HW-I1 User’s Guide176 Chapter 13 CertificatesFigure 97 Security > Certificates > My Certificates > Create > In ProgressWait while t

P-870HW-I1 User’s GuideChapter 13 Certificates 177Figure 99 Security > Certificates > My Certificates > EditThe following table describes t

P-870HW-I1 User’s Guide178 Chapter 13 CertificatesRefresh Click this to display the certification path.Certificate InformationsThese read-only fields

P-870HW-I1 User’s GuideChapter 13 Certificates 17913.6 Trusted CAs ScreenUse this screen to look at certificates from certification authorities that

P-870HW-I1 User’s Guide18 Table of Contents24.3 IP Alias Setup ...

P-870HW-I1 User’s Guide180 Chapter 13 CertificatesFigure 100 Security > Certificates > Trusted CAsThe following table describes the labels in

P-870HW-I1 User’s GuideChapter 13 Certificates 18113.7 Import Trusted CA ScreenUse this screen to add the certificate of a trusted certification auth

P-870HW-I1 User’s Guide182 Chapter 13 CertificatesFigure 102 Security > Certificates > Trusted CAs > EditThe following table describes the

P-870HW-I1 User’s GuideChapter 13 Certificates 183Refresh Click this to display the certification path.Certificate InformationThese read-only fields d

P-870HW-I1 User’s Guide184 Chapter 13 Certificates13.9 Trusted Remote Hosts ScreenUse this screen to look at the certificates of peers that you trust

P-870HW-I1 User’s GuideChapter 13 Certificates 185Figure 103 Security > Certificates > Trusted Remote HostsThe following table describes the l

P-870HW-I1 User’s Guide186 Chapter 13 Certificates13.10 Verifying a Trusted Remote Host’s CertificateSelf-signed certificates only have the signature

P-870HW-I1 User’s GuideChapter 13 Certificates 187Figure 105 Security > Certificates > Trusted Remote Host > ImportThe following table desc

P-870HW-I1 User’s Guide188 Chapter 13 CertificatesFigure 106 Security > Certificates > Trusted Remote Hosts > EditThe following table descr

P-870HW-I1 User’s GuideChapter 13 Certificates 189Version This field displays the X.509 version number. Serial Number This field displays the certific

P-870HW-I1 User’s GuideTable of Contents 1930.6 Applying a Filter ...

P-870HW-I1 User’s Guide190 Chapter 13 Certificates13.13 Directory Servers ScreenUse this screen to look at the current list of directory servers, whi

P-870HW-I1 User’s GuideChapter 13 Certificates 19113.14 Edit Directory Server ScreenUse this screen to create or edit a directory server the ZyXEL De

P-870HW-I1 User’s Guide192 Chapter 13 CertificatesApply Click this to save your changes to the ZyXEL Device.Cancel Click this to return to the previou

P-870HW-I1 User’s GuideChapter 14 Static Route 193CHAPTER 14Static RouteUse these screens to configure static routes in the ZyXEL Device.14.1 Static

P-870HW-I1 User’s Guide194 Chapter 14 Static RouteFigure 110 Management > Static Route > IP Static RouteEach field is described in the followi

P-870HW-I1 User’s GuideChapter 14 Static Route 195Figure 111 Management > Static Route > IP Static Route > EditEach field is described in t

P-870HW-I1 User’s Guide196 Chapter 14 Static Route

P-870HW-I1 User’s GuideChapter 15 Bandwidth MGMT 197CHAPTER 15Bandwidth MGMTThis chapter explains how to configure bandwidth management in your ZyXEL

P-870HW-I1 User’s Guide198 Chapter 15 Bandwidth MGMT15.1.3 Example: Unused and Unbudgeted BandwidthThe following table shows the priorities of applic

P-870HW-I1 User’s GuideChapter 15 Bandwidth MGMT 19915.1.5 Over Allotment of BandwidthYou can set the bandwidth management speed for an interface hig

P-870HW-I1 User’s Guide20 Table of Contents35.4.7 Uploading Firmware File Via Console Port ...32935.4.8 Exampl

P-870HW-I1 User’s Guide200 Chapter 15 Bandwidth MGMTFigure 112 Management > Bandwidth MGMT > Configuration

P-870HW-I1 User’s GuideChapter 15 Bandwidth MGMT 201See Appendix I on page 431 for examples of services. The following table describes the labels in t

P-870HW-I1 User’s Guide202 Chapter 15 Bandwidth MGMT15.3 Edit Bandwidth Management Rule ScreenUse this screen to create or edit bandwidth management

P-870HW-I1 User’s GuideChapter 15 Bandwidth MGMT 203See Appendix I on page 431 for examples of services. The following table describes the labels in t

P-870HW-I1 User’s Guide204 Chapter 15 Bandwidth MGMT15.4 Bandwidth MonitorUse this screen to view the ZyXEL Device’s bandwidth usage and allotments.

P-870HW-I1 User’s GuideChapter 16 Remote MGMT 205CHAPTER 16Remote MGMTUse these screens to control which computers can use which services to access th

P-870HW-I1 User’s Guide206 Chapter 16 Remote MGMT16.1.2 Remote Management and NATWhen NAT is enabled:• Use the ZyXEL Device’s WAN IP address when con

P-870HW-I1 User’s GuideChapter 16 Remote MGMT 207An SNMP managed network consists of two main types of component: agents and a manager. An agent is a

P-870HW-I1 User’s Guide208 Chapter 16 Remote MGMTSome traps include an SNMP interface index. The following table maps the SNMP interface indexes to th

P-870HW-I1 User’s GuideChapter 16 Remote MGMT 209Figure 116 Management > Remote MGMT > WWWEach field is described in the following table.Table

P-870HW-I1 User’s GuideTable of Contents 21Appendix BSetting up Your Computer’s IP Address...

P-870HW-I1 User’s Guide210 Chapter 16 Remote MGMT16.3 Telnet ScreenUse this screen to control Telnet access to your ZyXEL Device. To open this screen

P-870HW-I1 User’s GuideChapter 16 Remote MGMT 211Figure 118 Management > Remote MGMT > FTPEach field is described in the following table.16.5

P-870HW-I1 User’s Guide212 Chapter 16 Remote MGMTFigure 119 Management > Remote MGMT > SNMPEach field is described in the following table.Tabl

P-870HW-I1 User’s GuideChapter 16 Remote MGMT 21316.6 DNS ScreenUse this screen to control DNS access to your ZyXEL Device. To open this screen, clic

P-870HW-I1 User’s Guide214 Chapter 16 Remote MGMTEach field is described in the following table.16.8 SSH ScreenUse this screen to control SSH access

P-870HW-I1 User’s GuideChapter 16 Remote MGMT 215Each field is described in the following table.16.9 TR-069TR-069 is a protocol that defines how your

P-870HW-I1 User’s Guide216 Chapter 16 Remote MGMTThe following table gives a description of TR-069 commands. Table 102 TR-069 CommandsRootCommand or

P-870HW-I1 User’s GuideChapter 17 UPnP 217CHAPTER 17UPnPThis chapter introduces the Universal Plug-and-Play (UPnP) feature.17.1 Introducing Universal

P-870HW-I1 User’s Guide218 Chapter 17 UPnPWhen a UPnP device joins a network, it announces its presence with a multicast message. For security reasons

P-870HW-I1 User’s GuideChapter 17 UPnP 21917.4 Installing UPnP in Windows ExampleThis section shows how to install UPnP in Windows Me and Windows XP.

P-870HW-I1 User’s Guide22 Table of ContentsExample Internal SPTGEN Menus... 418A

P-870HW-I1 User’s Guide220 Chapter 17 UPnPFigure 126 Add/Remove Programs: Windows Setup: Communication: Components4 Click OK to go back to the Add/R

P-870HW-I1 User’s GuideChapter 17 UPnP 221Figure 128 Windows Optional Networking Components Wizard5 In the Networking Services window, select the Un

P-870HW-I1 User’s Guide222 Chapter 17 UPnP6 Click OK to go back to the Windows Optional Networking Component Wizard window and click Next. 17.5 Using

P-870HW-I1 User’s GuideChapter 17 UPnP 223Figure 131 Internet Connection Properties 4 You may edit or delete the port mappings or click Add to manua

P-870HW-I1 User’s Guide224 Chapter 17 UPnPFigure 132 Internet Connection Properties: Advanced SettingsFigure 133 Internet Connection Properties: A

P-870HW-I1 User’s GuideChapter 17 UPnP 225Figure 134 System Tray Icon7 Double-click on the icon to display your current Internet connection status.F

P-870HW-I1 User’s Guide226 Chapter 17 UPnPFigure 136 Network Connections4 An icon with the description for each UPnP-enabled device displays under L

P-870HW-I1 User’s GuideChapter 17 UPnP 227Figure 137 Network Connections: My Network Places6 Right-click on the icon for your ZyXEL Device and selec

P-870HW-I1 User’s Guide228 Chapter 17 UPnP

P-870HW-I1 User’s GuideChapter 18 System 229CHAPTER 18SystemUse this screen to configure the ZyXEL Device’s time and date settings.18.1 General Setup

P-870HW-I1 User’s GuideList of Figures 23List of FiguresFigure 1 Applications: Protected Internet Access ...

P-870HW-I1 User’s Guide230 Chapter 18 System18.1.2.1 DYNDNS WildcardEnabling the wildcard feature for your host causes *.yourhost.dyndns.org to be al

P-870HW-I1 User’s GuideChapter 18 System 23118.3 Dynamic DNS ScreenUse this screen to set up and maintain dynamic DNS on your ZyXEL Device. To open t

P-870HW-I1 User’s Guide232 Chapter 18 SystemFigure 140 Maintenance > System > Dynamic DNSThe following table describes the fields in this scre

P-870HW-I1 User’s GuideChapter 18 System 23318.4 Time Setting ScreenUse this screen to change the current time and time settings on your ZyXEL Device

P-870HW-I1 User’s Guide234 Chapter 18 SystemThe following table describes the fields in this screen.Table 106 Maintenance > System > Time Sett

P-870HW-I1 User’s GuideChapter 18 System 235Start Date Configure the day and time when Daylight Saving Time starts if you selected Enable Daylight Sav

P-870HW-I1 User’s Guide236 Chapter 18 System

P-870HW-I1 User’s GuideChapter 19 Logs 237CHAPTER 19LogsThis chapter contains information about configuring general log settings and viewing the ZyXEL

P-870HW-I1 User’s Guide238 Chapter 19 LogsLog entries in red indicate alerts. The log wraps around and deletes the old entries after it fills up. Clic

P-870HW-I1 User’s GuideChapter 19 Logs 239Figure 143 Maintenance > Logs > Log SettingsThe following table describes the fields in this screen.

P-870HW-I1 User’s Guide24 List of FiguresFigure 39 Status ...

P-870HW-I1 User’s Guide240 Chapter 19 LogsSend Log To The ZyXEL Device sends logs to the e-mail address specified in this field. If this field is lef

P-870HW-I1 User’s GuideChapter 20 Tools 241CHAPTER 20ToolsThis chapter upload new firmware, manage configuration and restart your ZyXEL Device. 20.1

P-870HW-I1 User’s Guide242 Chapter 20 ToolsFigure 145 Upload Firmware: In ProgressWait two minutes before logging into the ZyXEL Device again. The Z

P-870HW-I1 User’s GuideChapter 20 Tools 243Figure 148 Maintenance > Tools > ConfigurationThe following table describes each field in the scree

P-870HW-I1 User’s Guide244 Chapter 20 ToolsFigure 149 Restore Configuration: SuccessfulWait one minute before logging into the ZyXEL Device again. T

P-870HW-I1 User’s GuideChapter 20 Tools 245Figure 152 Restart ScreenClick Restart to have the ZyXEL Device reboot.

P-870HW-I1 User’s Guide246 Chapter 20 Tools

P-870HW-I1 User’s GuideChapter 21 Introducing the SMT 247CHAPTER 21Introducing the SMTThe System Management Terminal (SMT) provides a text-based, menu

P-870HW-I1 User’s Guide248 Chapter 21 Introducing the SMTFigure 154 SMT Main MenuNote: There is an inactivity timeout, and the default value is five

P-870HW-I1 User’s GuideChapter 21 Introducing the SMT 2493.2 TCP/IP and DHCP Ethernet SetupUse this menu to set up the LAN IP address and to configure

P-870HW-I1 User’s GuideList of Figures 25Figure 82 Ideal Firewall Setup ...

P-870HW-I1 User’s Guide250 Chapter 21 Introducing the SMT21.1 Filter Set ConfigurationUse this menu to look at the filter sets in the ZyXEL Device.21.

P-870HW-I1 User’s GuideChapter 21 Introducing the SMT 25121.3 Navigating the SMT InterfaceSeveral operations that you should be familiar with before

P-870HW-I1 User’s Guide252 Chapter 21 Introducing the SMTEntering information Type in or press [SPACE BAR], then press [ENTER].You need to fill in two

P-870HW-I1 User’s GuideChapter 22 General Setup 253CHAPTER 22General SetupUse this menu to set up the system name, domain name, DNS servers, and dynam

P-870HW-I1 User’s Guide254 Chapter 22 General Setup22.2 Configure Dynamic DNSUse this menu to configure your dynamic DNS account settings. See Chapte

P-870HW-I1 User’s GuideChapter 22 General Setup 25522.3 Configure Dynamic DNSUse this menu to configure your dynamic DNS domain name settings. See Ch

P-870HW-I1 User’s Guide256 Chapter 22 General Setup

P-870HW-I1 User’s GuideChapter 23 WAN Setup 257CHAPTER 23WAN SetupUse this menu to configure the WAN MAC address. See Chapter 7 on page 119 for backgr

P-870HW-I1 User’s Guide258 Chapter 23 WAN Setup

P-870HW-I1 User’s GuideChapter 24 LAN Setup 259CHAPTER 24LAN SetupUse this menu to set up the LAN IP address, DHCP server, additional subnets, and inp

P-870HW-I1 User’s Guide26 List of FiguresFigure 125 Add/Remove Programs: Windows Setup: Communication ... 219Figure 126 Ad

P-870HW-I1 User’s Guide260 Chapter 24 LAN Setup24.2 TCP/IP and DHCP Ethernet SetupUse this menu to set up the LAN IP address and to configure the ZyX

P-870HW-I1 User’s GuideChapter 24 LAN Setup 261First DNS ServerSecond DNS ServerThird DNS ServerPress [SPACE BAR] to select From ISP, User Defined or

P-870HW-I1 User’s Guide262 Chapter 24 LAN Setup24.3 IP Alias SetupUse this menu to partition your LAN interface into subnets. See Chapter 8 on page 1

P-870HW-I1 User’s GuideChapter 24 LAN Setup 26324.4 Wireless LAN SetupUse this menu to configure basic wireless settings and wireless security. See C

P-870HW-I1 User’s Guide264 Chapter 24 LAN SetupFigure 162 Menu 3.5: Wireless LAN SetupThe ESSID in the SMT is the same as the SSID in the web config

P-870HW-I1 User’s GuideChapter 24 LAN Setup 26524.5 WLAN MAC Address FilterUse this menu to block or allow other devices to access the ZyXEL Device.

P-870HW-I1 User’s Guide266 Chapter 24 LAN Setup

P-870HW-I1 User’s GuideChapter 25 Internet Access Setup 267CHAPTER 25Internet Access SetupUse this menu to set up your Internet connection. See Chapte

P-870HW-I1 User’s Guide268 Chapter 25 Internet Access SetupGateway IP Address This field is not available if your ISP uses PPPoE encapsulation. Enter

P-870HW-I1 User’s GuideChapter 26 Remote Node Setup 269CHAPTER 26Remote Node SetupUse this menu to set up your Internet connection, input and output f

P-870HW-I1 User’s GuideList of Figures 27Figure 168 Menu 11.1.5: Traffic Redirect Setup ...

P-870HW-I1 User’s Guide270 Chapter 26 Remote Node Setup26.2 Remote Node Network Layer OptionsUse this menu to set up the WAN IP address and advanced

P-870HW-I1 User’s GuideChapter 26 Remote Node Setup 271Figure 166 Menu 11.1.2: Remote Node Network Layer OptionsThe following table describes the la

P-870HW-I1 User’s Guide272 Chapter 26 Remote Node Setup26.3 Remote Node FilterUse this menu to specify input and output filter sets for the WAN port.

P-870HW-I1 User’s GuideChapter 26 Remote Node Setup 273Figure 167 Menu 11.1.4: Remote Node FilterThe following table describes the labels in this me

P-870HW-I1 User’s Guide274 Chapter 26 Remote Node SetupFigure 168 Menu 11.1.5: Traffic Redirect SetupThe following table describes the labels in thi

P-870HW-I1 User’s GuideChapter 27 Static Routing Setup 275CHAPTER 27Static Routing SetupUse this menu to look at and configure IP static routes.27.1

P-870HW-I1 User’s Guide276 Chapter 27 Static Routing Setup27.2 Edit IP Static RouteUse this menu to configure IP static routes. See Chapter 14 on pag

P-870HW-I1 User’s GuideChapter 28 Dial-in User Setup 277CHAPTER 28Dial-in User SetupUse this menu to look at and configure local user profiles on the

P-870HW-I1 User’s Guide278 Chapter 28 Dial-in User SetupFigure 172 Menu 14.1: Edit Dial-in UserThe following table describes the labels in this menu

P-870HW-I1 User’s GuideChapter 29 NAT Setup 279CHAPTER 29NAT SetupUse this menu to configure address mapping, port forwarding, and trigger ports.29.1

P-870HW-I1 User’s Guide28 List of FiguresFigure 211 Menu 24.6: Restore Configuration ...

P-870HW-I1 User’s Guide280 Chapter 29 NAT SetupFigure 174 Menu 15.1.1: Address Mapping RulesThe following table describes the labels in this menu.

P-870HW-I1 User’s GuideChapter 29 NAT Setup 28129.3 Address Mapping RuleUse this menu to configure network address translation mapping rules. See Cha

P-870HW-I1 User’s Guide282 Chapter 29 NAT SetupThe following table describes the labels in this menu.29.4 NAT Server SetupUse this menu to look at se

P-870HW-I1 User’s GuideChapter 29 NAT Setup 283Figure 176 Menu 15.2: NAT Server SetupThe following table describes the labels in this menu.29.5 NAT

P-870HW-I1 User’s Guide284 Chapter 29 NAT SetupFigure 177 Menu 15.2.1: NAT Server ConfigurationThe following table describes the labels in this menu

P-870HW-I1 User’s GuideChapter 29 NAT Setup 285Figure 178 Menu 15.3: Trigger Port SetupThe following table describes the labels in this menu.

P-870HW-I1 User’s Guide286 Chapter 29 NAT Setup

P-870HW-I1 User’s GuideChapter 30 Filter Setup 287CHAPTER 30Filter SetupThis chapter shows you how to create and apply filters.30.1 Introduction to F

P-870HW-I1 User’s Guide288 Chapter 30 Filter Setup30.1.1 The Filter Structure of the ZyXEL DeviceA filter set consists of one or more filter rules. U

P-870HW-I1 User’s GuideChapter 30 Filter Setup 289Figure 180 Filter Rule ProcessYou can apply up to four filter sets to a particular port to block m

P-870HW-I1 User’s GuideList of Figures 29Figure 254 Macintosh OS X: Network ...

P-870HW-I1 User’s Guide290 Chapter 30 Filter SetupFigure 181 Menu 21: Filter and Firewall Setup2 Enter 1 to bring up the following menu.Figure 182

P-870HW-I1 User’s GuideChapter 30 Filter Setup 291Figure 183 Menu 21.1.1: Filter Rules SummaryThis screen shows the summary of the existing rules in

P-870HW-I1 User’s Guide292 Chapter 30 Filter SetupRefer to the next section for information on configuring the filter rules.30.2.1 Configuring a Filt

P-870HW-I1 User’s GuideChapter 30 Filter Setup 293Figure 184 Menu 21.1.1.1 TCP/IP Filter Rule.The following table describes how to configure your TC

P-870HW-I1 User’s Guide294 Chapter 30 Filter SetupThe following figure illustrates the logic flow of an IP filter.Port # Comp Press [SPACE BAR] and th

P-870HW-I1 User’s GuideChapter 30 Filter Setup 295Figure 185 Executing an IP Filter30.2.3 Configuring a Generic Filter Rule This section shows you

P-870HW-I1 User’s Guide296 Chapter 30 Filter SetupFor generic rules, the ZyXEL Device treats a packet as a byte stream as opposed to an IP or IPX pack

P-870HW-I1 User’s GuideChapter 30 Filter Setup 29730.3 Example FilterLet’s look at an example to block outside users from accessing the ZyXEL Device

P-870HW-I1 User’s Guide298 Chapter 30 Filter SetupFigure 187 Telnet Filter Example1 Enter 21 from the main menu to open Menu 21 - Filter and Firewal

P-870HW-I1 User’s GuideChapter 30 Filter Setup 299•The Port # for the telnet service (TCP protocol) is 23. See RFC 1060 for port numbers of well-known

P-870HW-I1 User’s GuideCopyright 3CopyrightCopyright © 2006 by ZyXEL Communications Corporation.The contents of this publication may not be reproduced

P-870HW-I1 User’s Guide30 List of Figures

P-870HW-I1 User’s Guide300 Chapter 30 Filter Setup30.4 Filter Types and NATThere are two classes of filter rules, Generic Filter (Device) rules and p

P-870HW-I1 User’s GuideChapter 30 Filter Setup 301Figure 191 Filtering LAN Traffic30.6.2 Applying Remote Node FiltersGo to menu 11.5 (shown below –

P-870HW-I1 User’s Guide302 Chapter 30 Filter SetupFigure 193 Menu 11.1: Remote Node ProfileThe following table describes the labels in this menu.

P-870HW-I1 User’s GuideChapter 30 Filter Setup 303Nailed-Up Connection Select this if you want the ZyXEL Device to automatically connect to your ISP w

P-870HW-I1 User’s Guide304 Chapter 30 Filter Setup

P-870HW-I1 User’s GuideChapter 31 Firewall Setup 305CHAPTER 31Firewall SetupUse this menu to activate or deactivate the firewall. See Chapter 11 on pa

P-870HW-I1 User’s Guide306 Chapter 31 Firewall Setup

P-870HW-I1 User’s GuideChapter 32 SNMP Configuration 307CHAPTER 32SNMP ConfigurationUse this menu to configure your ZyXEL Device’s settings for Simple

P-870HW-I1 User’s Guide308 Chapter 32 SNMP Configuration

P-870HW-I1 User’s GuideChapter 33 System Security 309CHAPTER 33System SecurityUse this menu to configure the administrator password and to configure w

P-870HW-I1 User’s GuideList of Tables 31List of TablesTable 1 LEDs ...

P-870HW-I1 User’s Guide310 Chapter 33 System SecurityFigure 197 Menu 23.2: System Security - RADIUS ServerThe following table describes the labels i

P-870HW-I1 User’s GuideChapter 33 System Security 311Figure 198 Menu 23.4: System Security - IEEE802.1xThe following table describes the labels in t

P-870HW-I1 User’s Guide312 Chapter 33 System SecurityPSK This field is enabled if the Key Management Protocol is WPA-PSK or WPA2-PSK. Type a pre-share

P-870HW-I1 User’s GuideChapter 34 System Maintenance 24.1 - 24.4 313CHAPTER 34System Maintenance 24.1 - 24.4This chapter covers menus 24.1 through 24.

P-870HW-I1 User’s Guide314 Chapter 34 System Maintenance 24.1 - 24.434.2 InformationUse this menu to look at basic device information and LAN interfa

P-870HW-I1 User’s GuideChapter 34 System Maintenance 24.1 - 24.4 315Figure 200 Menu 24.2.1: System Maintenance - InformationThe following table desc

P-870HW-I1 User’s Guide316 Chapter 34 System Maintenance 24.1 - 24.4Figure 201 Menu 24.2.2: System Maintenance - Change Console Port SpeedThe follow

P-870HW-I1 User’s GuideChapter 34 System Maintenance 24.1 - 24.4 31734.5 Call-Triggering PacketUse this menu to look at information about the packet

P-870HW-I1 User’s Guide318 Chapter 34 System Maintenance 24.1 - 24.4Figure 204 Menu 24.4: System Maintenance - DiagnosticThe following table describ

P-870HW-I1 User’s GuideChapter 35 System Maintenance 24.5 - 24.7 319CHAPTER 35System Maintenance 24.5 - 24.7This chapter covers menus 24.5 through 24.

P-870HW-I1 User’s Guide32 List of TablesTable 39 Network > Wireless LAN > General > 802.1x + Dynamic WEP ... 102Tabl

P-870HW-I1 User’s Guide320 Chapter 35 System Maintenance 24.5 - 24.7The following table is a summary. Please note that the internal filename refers to

P-870HW-I1 User’s GuideChapter 35 System Maintenance 24.5 - 24.7 321Figure 205 Menu 24.5: Backup Configuration35.2.2 Using the FTP command from the

P-870HW-I1 User’s Guide322 Chapter 35 System Maintenance 24.5 - 24.7Figure 206 FTP Session ExampleThe following table describes some of the commands

P-870HW-I1 User’s GuideChapter 35 System Maintenance 24.5 - 24.7 3233 Enter command “sys stdio 0” to disable the SMT timeout, so the TFTP transfer wil

P-870HW-I1 User’s Guide324 Chapter 35 System Maintenance 24.5 - 24.71 Display menu 24.5 and enter “y” at the following screen.Figure 207 System Main

P-870HW-I1 User’s GuideChapter 35 System Maintenance 24.5 - 24.7 32535.3.1 Restore Using FTPFor details about backup using (T)FTP please refer to ear

P-870HW-I1 User’s Guide326 Chapter 35 System Maintenance 24.5 - 24.735.4.1 Firmware UploadFTP is the preferred method for uploading the firmware and

P-870HW-I1 User’s GuideChapter 35 System Maintenance 24.5 - 24.7 327Figure 214 Menu 24.7.2: System Maintenance - Upload System Configuration FileTo

P-870HW-I1 User’s Guide328 Chapter 35 System Maintenance 24.5 - 24.7Figure 215 FTP Session ExampleMore commands that you may find in third party FTP

P-870HW-I1 User’s GuideChapter 35 System Maintenance 24.5 - 24.7 329TFTP [-i] host put firmware.bin raswhere “i” specifies binary image transfer mode

P-870HW-I1 User’s GuideList of Tables 33Table 82 Security > Certificates > Trusted Remote Hosts > Edit ...

P-870HW-I1 User’s Guide330 Chapter 35 System Maintenance 24.5 - 24.735.4.8 Example Xmodem Firmware Upload Using HyperTerminalClick Transfer, then Sen

P-870HW-I1 User’s GuideChapter 35 System Maintenance 24.5 - 24.7 331Figure 218 Menu 24.7.2 as seen using the Console Port 2 After the "Starting

P-870HW-I1 User’s Guide332 Chapter 35 System Maintenance 24.5 - 24.7

P-870HW-I1 User’s GuideChapter 36 System Maintenance 24.8 - 24.11 333CHAPTER 36System Maintenance 24.8 - 24.11This chapter covers menus 24.8 through 2

P-870HW-I1 User’s Guide334 Chapter 36 System Maintenance 24.8 - 24.11Figure 221 Menu 24.9.1: Budget ManagementThe following table describes the labe

P-870HW-I1 User’s GuideChapter 36 System Maintenance 24.8 - 24.11 335Figure 222 Menu 24.9.2: Call HistoryThe following table describes the labels in

P-870HW-I1 User’s Guide336 Chapter 36 System Maintenance 24.8 - 24.11Figure 223 Menu 24.10: Time and Date SettingThe following table describes the l

P-870HW-I1 User’s GuideChapter 36 System Maintenance 24.8 - 24.11 33736.5 Remote Management ControlUse this screen to configure through which interfa

P-870HW-I1 User’s Guide338 Chapter 36 System Maintenance 24.8 - 24.11Figure 224 Menu 24.11: Remote Management ControlThe following table describes t

P-870HW-I1 User’s GuideChapter 37 IP Routing Policy Setup 339CHAPTER 37IP Routing Policy SetupUse this menu to look at and configure policy routes.37.

P-870HW-I1 User’s Guide34 List of TablesTable 125 Menu 11.1.4: Remote Node Filter ...

P-870HW-I1 User’s Guide340 Chapter 37 IP Routing Policy SetupIPPR follows the existing packet filtering facility of RAS in style and in implementation

P-870HW-I1 User’s GuideChapter 37 IP Routing Policy Setup 34137.5 IP Routing Policy SetupUse this menu to configure policy routes. To open this menu,

P-870HW-I1 User’s Guide342 Chapter 37 IP Routing Policy Setup37.6 IP Routing Policy SetupUse this menu to specify the ports from which traffic comes

P-870HW-I1 User’s GuideChapter 37 IP Routing Policy Setup 343Figure 227 Menu 25.1.1: IP Routing Policy SetupThe following table describes the labels

P-870HW-I1 User’s Guide344 Chapter 37 IP Routing Policy Setup1 Create a rule in Menu 25.1 - IP Routing Policy Setup as shown next.Figure 229 IP Rout

P-870HW-I1 User’s GuideChapter 37 IP Routing Policy Setup 345Figure 230 IP Routing Policy Example 25 Select Yes in the LAN field in menu 25.1.1 to

P-870HW-I1 User’s Guide346 Chapter 37 IP Routing Policy Setup

P-870HW-I1 User’s GuideChapter 38 Schedule Setup 347CHAPTER 38Schedule SetupUse this menu to look at and configure the schedule sets in the ZyXEL Devi

P-870HW-I1 User’s Guide348 Chapter 38 Schedule SetupFigure 231 Menu 26: Schedule SetupThe following table describes the labels in this menu.38.3 Sc

P-870HW-I1 User’s GuideChapter 38 Schedule Setup 349Figure 232 Menu 26.1: Schedule Set SetupThe following table describes the labels in this menu.

P-870HW-I1 User’s GuideList of Tables 35Table 168 Device Specifications ...

P-870HW-I1 User’s Guide350 Chapter 38 Schedule SetupDuration Enter the maximum length of time this connection is allowed in hour-minute format. Action

P-870HW-I1 User’s GuideChapter 39 Troubleshooting 351CHAPTER 39TroubleshootingThis chapter covers potential problems and the corresponding remedies.39

P-870HW-I1 User’s Guide352 Chapter 39 Troubleshooting39.3 Problems with the WANThe following table identifies some remedies if you have problems with

P-870HW-I1 User’s GuideChapter 39 Troubleshooting 35339.4 Problems Accessing the ZyXEL DeviceThe following table identifies some remedies if you have

P-870HW-I1 User’s Guide354 Chapter 39 TroubleshootingFigure 233 Pop-up BlockerYou can also check if pop-up blocking is disabled in the Pop-up Blocke

P-870HW-I1 User’s GuideChapter 39 Troubleshooting 355Figure 235 Internet Options3 Type the IP address of your device (the web page that you do not w

P-870HW-I1 User’s Guide356 Chapter 39 TroubleshootingFigure 236 Pop-up Blocker Settings5 Click Close to return to the Privacy screen. 6 Click Apply

P-870HW-I1 User’s GuideChapter 39 Troubleshooting 357Figure 237 Internet Options 2 Click the Custom Level... button. 3 Scroll down to Scripting. 4 U

P-870HW-I1 User’s Guide358 Chapter 39 TroubleshootingFigure 238 Security Settings - Java Scripting39.4.1.3 Java Permissions1 From Internet Explorer

P-870HW-I1 User’s GuideChapter 39 Troubleshooting 359Figure 239 Security Settings - Java 39.4.1.3.1 JAVA (Sun)1 From Internet Explorer, click Tools

P-870HW-I1 User’s Guide36 List of Tables

P-870HW-I1 User’s Guide360 Chapter 39 TroubleshootingFigure 240 Java (Sun)39.4.2 ActiveX Controls in Internet ExplorerIf ActiveX is disabled, you w

P-870HW-I1 User’s GuideChapter 39 Troubleshooting 361Figure 241 Internet Options Security3 Scroll down to ActiveX controls and plug-ins.4 Under Down

P-870HW-I1 User’s Guide362 Chapter 39 TroubleshootingFigure 242 Security Setting ActiveX Controls

P-870HW-I1 User’s GuideAppendix A Product Specifications 363Appendix AProduct SpecificationsThe values are accurate at the time of writing.Table 168

P-870HW-I1 User’s Guide364 Appendix A Product Specifications

P-870HW-I1 User’s Guide365 Appendix B Setting up Your Computer’s IP Address Appendix BSetting up Your Computer’s IP AddressAll computers must have a

P-870HW-I1 User’s GuideAppendix B Setting up Your Computer’s IP Address 366Figure 243 Windows 95/98/Me: Network: ConfigurationInstalling Components

P-870HW-I1 User’s Guide367 Appendix B Setting up Your Computer’s IP Address 3 Select Microsoft from the list of manufacturers.4 Select Client for Mic

P-870HW-I1 User’s GuideAppendix B Setting up Your Computer’s IP Address 368Figure 245 Windows 95/98/Me: TCP/IP Properties: DNS Configuration4 Click

P-870HW-I1 User’s Guide369 Appendix B Setting up Your Computer’s IP Address Figure 246 Windows XP: Start Menu2 In the Control Panel, double-click N

P-870HW-I1 User’s GuidePreface 37PrefaceCongratulations on your purchase of the P-870HW-I1 (“ZyXEL Device“) VDSL router with built-in IEEE 802.11g wir

P-870HW-I1 User’s GuideAppendix B Setting up Your Computer’s IP Address 370Figure 248 Windows XP: Control Panel: Network Connections: Properties4 S

P-870HW-I1 User’s Guide371 Appendix B Setting up Your Computer’s IP Address • Click Advanced.Figure 250 Windows XP: Internet Protocol (TCP/IP) Prop

P-870HW-I1 User’s GuideAppendix B Setting up Your Computer’s IP Address 372Figure 251 Windows XP: Advanced TCP/IP Properties7 In the Internet Proto

P-870HW-I1 User’s Guide373 Appendix B Setting up Your Computer’s IP Address Figure 252 Windows XP: Internet Protocol (TCP/IP) Properties8 Click OK

P-870HW-I1 User’s GuideAppendix B Setting up Your Computer’s IP Address 374Figure 253 Macintosh OS X: Apple Menu2 Click Network in the icon bar.

P-870HW-I1 User’s Guide375 Appendix B Setting up Your Computer’s IP Address 6 Restart your computer (if prompted).Verifying SettingsCheck your TCP/IP

P-870HW-I1 User’s GuideAppendix B Setting up Your Computer’s IP Address 376Figure 256 Red Hat 9.0: KDE: Ethernet Device: General • If you have a dy

P-870HW-I1 User’s Guide377 Appendix B Setting up Your Computer’s IP Address Figure 258 Red Hat 9.0: KDE: Network Configuration: Activate 7 After th

P-870HW-I1 User’s GuideAppendix B Setting up Your Computer’s IP Address 378Figure 260 Red Hat 9.0: Static IP Address Setting in ifconfig-eth0 2 I

P-870HW-I1 User’s GuideAppendix C NetBIOS Filter Commands 379Appendix CNetBIOS Filter CommandsThe following describes the NetBIOS packet filter comman

P-870HW-I1 User’s Guide38 PrefaceUser Guide Feedback Help us help you. E-mail all User Guide-related comments, questions or suggestions for improvemen

P-870HW-I1 User’s Guide380 Appendix C NetBIOS Filter CommandsThe filter types and their default settings are as follows.NetBIOS Filter ConfigurationSy

P-870HW-I1 User’s GuideAppendix D NAT 381APPENDIX DNATNAT OverviewNAT (Network Address Translation - NAT, RFC 1631) is the translation of the IP addre

P-870HW-I1 User’s Guide382 Appendix D NATWhat NAT DoesIn the simplest form, NAT changes the source IP address in a packet received from a subscriber (

P-870HW-I1 User’s GuideAppendix D NAT 383NAT ApplicationThe following figure illustrates a possible NAT application, where three inside LANs (logical

P-870HW-I1 User’s Guide384 Appendix D NATNote: Port numbers do not change for One-to-One and Many One-to-One NAT mapping types.The following table sum

P-870HW-I1 User’s GuideAppendix D NAT 385The following table summarizes how these NAT types handle outgoing and incoming packets. Read the following s

P-870HW-I1 User’s Guide386 Appendix D NATFigure 266 Full Cone NAT ExampleRestricted Cone NATAs in full cone NAT, a restricted cone NAT router maps a

P-870HW-I1 User’s GuideAppendix D NAT 387Figure 267 Restricted Cone NAT ExamplePort Restricted Cone NATAs in full cone NAT, a port restricted cone N

P-870HW-I1 User’s Guide388 Appendix D NATFigure 268 Port Restricted Cone NAT ExampleSymmetric NATThe full, restricted and port restricted cone NAT t

P-870HW-I1 User’s GuideAppendix D NAT 389Figure 269 Symmetric NATSUA (Single User Account) Versus NATSUA (Single User Account) is a ZyNOS implementa

P-870HW-I1 User’s GuideChapter 1 Getting To Know Your ZyXEL Device 39CHAPTER 1Getting To Know Your ZyXELDeviceThis chapter describes the key features

P-870HW-I1 User’s Guide390 Appendix D NAT

P-870HW-I1 User’s GuideAppendix E Firewall Commands 391Appendix EFirewall CommandsThe following describes the firewall commands. Table 173 Firewall

P-870HW-I1 User’s Guide392 Appendix E Firewall Commandsconfig edit firewall e-mail return-addr <e-mail address>This command sets the source e-ma

P-870HW-I1 User’s GuideAppendix E Firewall Commands 393config edit firewall attack minute-low <0-255>This command sets the threshold of half-ope

P-870HW-I1 User’s Guide394 Appendix E Firewall CommandsConfig edit firewall set <set #> log <yes | no>This command sets whether or not the

P-870HW-I1 User’s GuideAppendix E Firewall Commands 395config edit firewall set <set #> rule <rule #> destaddr-subnet <ip address> &

P-870HW-I1 User’s Guide396 Appendix E Firewall Commands

P-870HW-I1 User’s GuideAppendix F Log Descriptions 397Appendix FLog DescriptionsThis appendix provides descriptions of example log messages. Table 174

P-870HW-I1 User’s Guide398 Appendix F Log Descriptions Successful HTTPS login Someone has logged on to the router's web configurator interface us

P-870HW-I1 User’s GuideAppendix F Log Descriptions 399 Table 177 TCP Reset LogsLOG MESSAGE DESCRIPTIONUnder SYN flood attack, sent TCP RSTThe route

P-870HW-I1 User’s Guide4 CertificationsCertificationsFederal Communications Commission (FCC) Interference StatementThe device complies with Part 15 of

P-870HW-I1 User’s Guide40 Chapter 1 Getting To Know Your ZyXEL DeviceTR-069 ComplianceTR-069 is a protocol that defines how your ZyXEL Device can be m

P-870HW-I1 User’s Guide400 Appendix F Log Descriptions Table 179 ICMP LogsLOG MESSAGE DESCRIPTIONFirewall default policy: ICMP <Packet Directio

P-870HW-I1 User’s GuideAppendix F Log Descriptions 401 ppp:LCP Closing The PPP connection’s Link Control Protocol stage is closing.ppp:IPCP Closing T

P-870HW-I1 User’s Guide402 Appendix F Log Descriptions Connecting to content filter server failThe connection to the external content filtering server

P-870HW-I1 User’s GuideAppendix F Log Descriptions 403 Table 185 IPSec LogsLOG MESSAGE DESCRIPTIONDiscard REPLAY packet The router received and dis

P-870HW-I1 User’s Guide404 Appendix F Log DescriptionsCannot resolve Secure Gateway Addr for rule <%d>The router couldn’t resolve the IP address

P-870HW-I1 User’s GuideAppendix F Log Descriptions 405XAUTH fail! Username: <Username>The router was not able to use extended authentication to

P-870HW-I1 User’s Guide406 Appendix F Log Descriptions Rule [%d] phase 2 mismatch The listed rule’s IKE phase 2 did not match between the router and t

P-870HW-I1 User’s GuideAppendix F Log Descriptions 407 Rcvd data <size> too large! Max size allowed: <max size>The router received directo

P-870HW-I1 User’s Guide408 Appendix F Log Descriptions 26 Database method failed.27 Path was not verified.28 Maximum path length reached.Table 189 8

P-870HW-I1 User’s GuideAppendix F Log Descriptions 409 Table 190 ACL Setting NotesPACKET DIRECTION DIRECTION DESCRIPTION(L to W) LAN to WAN ACL set

P-870HW-I1 User’s GuideChapter 1 Getting To Know Your ZyXEL Device 41Media Bandwidth ManagementZyXEL’s Media Bandwidth Management allows you to specif

P-870HW-I1 User’s Guide410 Appendix F Log Descriptions The following table shows RFC-2408 ISAKMP payload types that the log displays. Please refer to

P-870HW-I1 User’s GuideAppendix F Log Descriptions 411Log CommandsGo to the command interpreter interface. Configuring What You Want the ZyXEL Device

P-870HW-I1 User’s Guide412 Appendix F Log Descriptions• Use the sys logs display [log category] command to show the logs in an individual ZyXEL Device

P-870HW-I1 User’s GuideAppendix G Boot Commands 413Appendix GBoot CommandsThe BootModule AT commands execute from within the router’s bootup software,

P-870HW-I1 User’s Guide414 Appendix G Boot CommandsFigure 273 Boot Module CommandsAT just answer OKATHE print helpATBAx

P-870HW-I1 User’s GuideAppendix H Internal SPTGEN 415APPENDIX HInternal SPTGENThis appendix introduces Internal SPTGEN. All menus shown in this append

P-870HW-I1 User’s Guide416 Appendix H Internal SPTGENInternal SPTGEN File Modification - Important Points to RememberEach parameter you enter must be

P-870HW-I1 User’s GuideAppendix H Internal SPTGEN 417Figure 277 Internal SPTGEN FTP Download ExampleNote: You can rename your “rom-t” file when you

P-870HW-I1 User’s Guide418 Appendix H Internal SPTGENExample Internal SPTGEN MenusThis section provides example Internal SPTGEN menus. Table 194 Abb

P-870HW-I1 User’s GuideAppendix H Internal SPTGEN 41930100012 = Output protocol filters Set 4 = 25630100013 = Output device filters Set 1 = 25630100

P-870HW-I1 User’s Guide42 Chapter 1 Getting To Know Your ZyXEL DeviceNote: The ZyXEL Device may be prone to RF (Radio Frequency) interference from oth

P-870HW-I1 User’s Guide420 Appendix H Internal SPTGEN30201005 = Version <0(Rip-1) | 1(Rip-2B) |2(Rip-2M)> = 030201006 = IP Alias #1 Incoming pr

P-870HW-I1 User’s GuideAppendix H Internal SPTGEN 421FIN FN PVA INPUT30500001 = ESSID Wireless30500002 = Hide ESSID <0(No) | 1(Yes)> = 03050000

P-870HW-I1 User’s Guide422 Appendix H Internal SPTGENTable 197 Menu 4 Internet Access Setup / Menu 4 Internet Access SetupFIN FN PVA INPUT40000000 =

P-870HW-I1 User’s GuideAppendix H Internal SPTGEN 42340000027 = ATM QoS Type <0(CBR) | (1 (UBR)>= 140000028 = Peak Cell Rate (PCR) = 040000029 =

P-870HW-I1 User’s Guide424 Appendix H Internal SPTGENTable 199 Menu 15 SUA Server Setup / Menu 15 SUA Server SetupFIN FN PVA INPUT150000001 = SUA Se

P-870HW-I1 User’s GuideAppendix H Internal SPTGEN 425150000031 = SUA Server #7 Local IP address = 0.0.0.0150000032 = SUA Server #8 Active <0(No)

P-870HW-I1 User’s Guide426 Appendix H Internal SPTGEN210101002 = IP Filter Set 1,Rule 1 Active <0(No)|1(Yes)> = 1210101003 = IP Filter Set 1,R

P-870HW-I1 User’s GuideAppendix H Internal SPTGEN 427210102013 = IP Filter Set 1,Rule 2 Act Match <1(check next)|2(forward)|3(drop)> = 32101020

P-870HW-I1 User’s Guide428 Appendix H Internal SPTGEN210202001 = IP Filter Set 2, Rule 2 Type <0(none)|2(TCP/IP)> = 2210202002 = IP Filter Set

P-870HW-I1 User’s GuideAppendix H Internal SPTGEN 429230200005 = Authentication Server Shared Secret = 1111111111111111111111111111111230200006 = Acco

P-870HW-I1 User’s GuideChapter 1 Getting To Know Your ZyXEL Device 43Figure 1 Applications: Protected Internet Access1.3.2 Management ServerYour Zy

P-870HW-I1 User’s Guide430 Appendix H Internal SPTGEN241100002 = TELNET Server Access <0(all)|1(none)|2(Lan)|3(Wan)> = 0241100003 = TELNET Serv

P-870HW-I1 User’s GuideAppendix I Services 431Appendix IServicesThe following table lists some commonly-used services and their associated protocols a

P-870HW-I1 User’s Guide432 Appendix I ServicesHTTPS TCP 443 HTTPS is a secured http session often used in e-commerce.ICMP User-Defined 1 Internet Cont

P-870HW-I1 User’s GuideAppendix I Services 433REAL_AUDIO TCP 7070 A streaming audio service that enables real time sound over the web.REXEC TCP 514 Re

P-870HW-I1 User’s Guide434 Appendix I Services

P-870HW-I1 User’s GuideIndex 435IndexAaccess point. See AP.AP 93Bbackup 320bandwidth management 41, 197bandwidth manager class configuration 202bandwi

P-870HW-I1 User’s Guide436 Indexguidelines for enhancing security 153introduction 147policies 148rule checklist 149rule logic 149rule security ramific

P-870HW-I1 User’s GuideIndex 437mapping types 383outside 381port forwarding 137server sets 137symmetric 388what NAT does 382NAT mapping 383many one-to

P-870HW-I1 User’s Guide438 IndexSNMPv1 206SNMPv2 206source-based routing 339splitters 44SPTGEN 415FTP upload example 417points to remember 416text fil

P-870HW-I1 User’s Guide44 Chapter 1 Getting To Know Your ZyXEL DeviceThe following table describes the LEDs.1.5 Splitters and MicrofiltersThis sectio

P-870HW-I1 User’s GuideChapter 1 Getting To Know Your ZyXEL Device 45Figure 4 Connecting a POTS Splitter1 Connect the side labeled “Phone” to your t

P-870HW-I1 User’s Guide46 Chapter 1 Getting To Know Your ZyXEL Device

P-870HW-I1 User’s GuideChapter 2 Introducing the Web Configurator 47CHAPTER 2Introducing the WebConfiguratorThis chapter describes how to access and n

P-870HW-I1 User’s Guide48 Chapter 2 Introducing the Web ConfiguratorFigure 6 Login Screen3 The Password field may already contain the default passwo

P-870HW-I1 User’s GuideChapter 2 Introducing the Web Configurator 49Figure 8 Login: Replace Certificate Screen5 Follow the directions in this screen

P-870HW-I1 User’s GuideCertifications 5第十二條 經型式認證合格之低功率射頻電機，非經許可，公司、商號或使用者均不得擅自變更頻率、加大功率或變更原設計之特性及功能。第十四條 低功率射頻電機之使用不得影響飛航安全及干擾合法通信；經發現有干擾現象時，應立即停用，

P-870HW-I1 User’s Guide50 Chapter 2 Introducing the Web ConfiguratorFigure 10 Main ScreenNote: Click the icon (located in the upper right corner o

P-870HW-I1 User’s GuideChapter 2 Introducing the Web Configurator 51Wireless LAN General Use this screen to configure basic wireless settings and wire

P-870HW-I1 User’s Guide52 Chapter 2 Introducing the Web ConfiguratorCertificates My Certificates Use this screen to add, modify, or remove the ZyXEL D

P-870HW-I1 User’s GuideChapter 2 Introducing the Web Configurator 532.4 Resetting the ZyXEL DeviceReset the ZyXEL Device in the following situations:

P-870HW-I1 User’s Guide54 Chapter 2 Introducing the Web Configurator

P-870HW-I1 User’s GuideChapter 3 Connection Wizard 55CHAPTER 3Connection WizardThis chapter provides information on the Wizard Setup screens for wirel

P-870HW-I1 User’s Guide56 Chapter 3 Connection Wizard3.2 Welcome ScreenUse this screen to look at a preview of the Connection Wizard.Figure 12 Conn

P-870HW-I1 User’s GuideChapter 3 Connection Wizard 57Figure 13 Connection Wizard: System InformationThe following table describes the labels in this

P-870HW-I1 User’s Guide58 Chapter 3 Connection WizardFigure 14 Connection Wizard: Wireless LANThe following table describes the labels in this scree

P-870HW-I1 User’s GuideChapter 3 Connection Wizard 593.5 Wireless Security ScreensThe next screens depend on which type of Security you select in the

P-870HW-I1 User’s Guide6 Safety WarningsSafety WarningsFor your safety, be sure to read and follow all warning notices and instructions.• Do NOT use t

P-870HW-I1 User’s Guide60 Chapter 3 Connection WizardFigure 16 Connection Wizard: Wireless Security: Basic Security Screen 1The following table desc

P-870HW-I1 User’s GuideChapter 3 Connection Wizard 61Figure 17 Connection Wizard: Wireless Security: Basic Security Screen 2The following table desc

P-870HW-I1 User’s Guide62 Chapter 3 Connection WizardFigure 18 Connection Wizard: Wireless Security: AutoThe following table describes the labels in

P-870HW-I1 User’s GuideChapter 3 Connection Wizard 63Figure 19 Connection Wizard: Wireless Security: Extend (WPA-PSK) Security Screen 1The following

P-870HW-I1 User’s Guide64 Chapter 3 Connection WizardFigure 20 Connection Wizard: Wireless Security: Extend (WPA-PSK) Security Screen 2The following

P-870HW-I1 User’s GuideChapter 3 Connection Wizard 65Figure 21 Connection Wizard: Wireless Security: Extend (WPA2-PSK) Security Screen 1The followin

P-870HW-I1 User’s Guide66 Chapter 3 Connection Wizard3.5.8 Wireless Security: Extend (WPA2-PSK) Security Screen 2Figure 22 Connection Wizard: Wirel

P-870HW-I1 User’s GuideChapter 3 Connection Wizard 67Figure 23 Connection Wizard: Internet Connection: Auto-Detection3.7 ISP Parameters ScreenUse t

P-870HW-I1 User’s Guide68 Chapter 3 Connection WizardFigure 24 Connection Wizard: ISP Parameters: EthernetThe following table describes the labels i

P-870HW-I1 User’s GuideChapter 3 Connection Wizard 69Figure 25 Connection Wizard: ISP Parameters: PPPoEThe following table describes the labels in t

P-870HW-I1 User’s GuideSafety Warnings 7This product is recyclable. Dispose of it properly.

P-870HW-I1 User’s Guide70 Chapter 3 Connection WizardFigure 26 Connection Wizard: IP Address TypeThe following table describes the labels in this sc

P-870HW-I1 User’s GuideChapter 3 Connection Wizard 71Figure 27 Connection Wizard: Static IP Address: EthernetThe following table describes the label

P-870HW-I1 User’s Guide72 Chapter 3 Connection WizardFigure 28 Connection Wizard: ISP Parameters: PPPoEThe following table describes the labels in t

P-870HW-I1 User’s GuideChapter 3 Connection Wizard 73Figure 29 Connection Wizard: MAC AddressThe following table describes the labels in this screen

P-870HW-I1 User’s Guide74 Chapter 3 Connection Wizard3.11 Internet Configuration ScreenFigure 30 Connection Wizard: Internet ConfigurationThe follo

P-870HW-I1 User’s GuideChapter 3 Connection Wizard 75Figure 31 Connection Wizard: OTIST: Start3.13 Congratulations ScreenUse this screen to finish

P-870HW-I1 User’s Guide76 Chapter 3 Connection Wizard

P-870HW-I1 User’s GuideChapter 4 Bandwidth Management Wizard 77CHAPTER 4Bandwidth Management WizardThis chapter provides information on the Wizard Set

P-870HW-I1 User’s Guide78 Chapter 4 Bandwidth Management WizardFigure 33 Main Wizard ScreenThe following table describes the labels in this screen.4

P-870HW-I1 User’s GuideChapter 4 Bandwidth Management Wizard 79Figure 34 BWM Wizard: WelcomeThe following table describes the labels in this screen.

P-870HW-I1 User’s Guide8 ZyXEL Limited WarrantyZyXEL Limited WarrantyZyXEL warrants to the original end user (purchaser) that this product is free fro

P-870HW-I1 User’s Guide80 Chapter 4 Bandwidth Management WizardFigure 35 BWM Wizard: General InformationThe following table describes the labels in

P-870HW-I1 User’s GuideChapter 4 Bandwidth Management Wizard 814.4 Services Setup ScreenUse this screen to select the applications to which you want

P-870HW-I1 User’s Guide82 Chapter 4 Bandwidth Management WizardThe following table describes the labels in this screen.4.5 Priority Setup ScreenUse t

P-870HW-I1 User’s GuideChapter 4 Bandwidth Management Wizard 83Figure 37 BWM Wizard: Priority SetupThe following table describes the labels in this

P-870HW-I1 User’s Guide84 Chapter 4 Bandwidth Management WizardFigure 38 BWM Wizard: CongratulationsThe following table describes the labels in this

P-870HW-I1 User’s GuideChapter 5 Status Screen 85CHAPTER 5Status ScreenThis chapter introduces the Status screen and the summary screens you can open

P-870HW-I1 User’s Guide86 Chapter 5 Status ScreenThe following table describes the labels shown in the Status screen.Table 29 StatusLABEL DESCRIPTIO

P-870HW-I1 User’s GuideChapter 5 Status Screen 875.1.1 Status: BW MGMT MonitorUse this screen to view the bandwidth usage based on the rules you conf

P-870HW-I1 User’s Guide88 Chapter 5 Status ScreenFigure 40 Status > BW MGMT Monitor5.1.2 Status: DHCP TableTo access this screen, click Status,

P-870HW-I1 User’s GuideChapter 5 Status Screen 89Figure 41 Status > DHCP TableEach field is described in the following table.5.1.3 Status: Packe

P-870HW-I1 User’s GuideCustomer Support 9Customer SupportPlease have the following information ready when you contact customer support.• Product model

P-870HW-I1 User’s Guide90 Chapter 5 Status ScreenThe following table describes the fields in this screen.5.1.4 Status: WLAN Station StatusUse this sc

P-870HW-I1 User’s GuideChapter 5 Status Screen 91The following table describes the labels in this screen.Table 32 Status > WLAN Station StatusLAB

P-870HW-I1 User’s Guide92 Chapter 5 Status Screen

P-870HW-I1 User’s GuideChapter 6 Wireless LAN 93CHAPTER 6Wireless LANThis chapter discusses how to configure the wireless network settings in your ZyX

P-870HW-I1 User’s Guide94 Chapter 6 Wireless LAN• Every wireless client in the same wireless network must use security compatible with the AP.Security

P-870HW-I1 User’s GuideChapter 6 Wireless LAN 95For wireless networks, there are two typical places to store the user names and passwords for each use

P-870HW-I1 User’s Guide96 Chapter 6 Wireless LANNote: It is recommended that wireless networks use WPA-PSK, WPA, or stronger encryption. IEEE 802.1x a

P-870HW-I1 User’s GuideChapter 6 Wireless LAN 97To open this screen, click Network > Wireless LAN.Figure 45 Network > Wireless LAN > Genera

P-870HW-I1 User’s Guide98 Chapter 6 Wireless LANFigure 46 Network > Wireless LAN > General > No SecurityThe following table describes the l

P-870HW-I1 User’s GuideChapter 6 Wireless LAN 99The following table describes the labels in this screen.6.4.3 General Wireless LAN Screen: WPA-PSKUse