Home

ZyXEL P-2304R-P1 Series User's Manual

1. 30201008 IP Alias 1 Incoming protocol filters 256 Set 3 30201009 IP Alias 1 Incoming protocol filters 256 Set 4 30201010 IP Alias 41 Outgoing protocol filters 256 Set 30201011 IP Alias 41 Outgoing protocol filters 256 Set 2 30201012 IP Alias 1 Outgoing protocol filters 256 Set 3 30201013 IP Alias 1 Outgoing protocol filters 256 Set 4 30201014 IP Alias 2 0O No 1 Yes gt 0 30201015 IP Address 0 0 0 0 30201016 IP Subnet Mask 0 30201017 RIP Direction lt 0 None 0 1 Both 2 In Only 3 Out Only 30201018 Version O Rip 1 0 1 Rip 2B 2 Rip 2M gt 30201019 IP Alias 2 Incoming protocol filters 256 Set 30201020 IP Alias 2 Incoming protocol filters 256 Set 2 30201021 IP Alias 2 Incoming protocol filters 256 Set 3 30201022 IP Alias 2 Incoming protocol filters 256 Set 4 30201023 IP Alias 2 Outgoing protocol filters 256 Set 30201024 IP Alias 2 Outgoing protocol filters 256 Set 2 30201025 IP Alias 2 Outgoing protocol filters 256 Set 3 30201026 IP Alias 2 Outgoing protocol filters 256 Set 4 Menu 3 5 Wireless LAN Setup FIN FN PVA INPUT 30500001 ESSID Wireless 30500002 Hide ESSID lt 0 No 0 1 Yes gt 30500003 Channel ID lt 1 2 3 4 5 6 1 7 8 9 10 11 1 2 13 272 P 2
2. 40000003 ISP s Name ChangeMe 40000004 Encapsulation lt 2 PPPOE 2 3 RFC 1483 4 PPPOA 5 ENET ENCAP gt 40000005 Multiplexing lt 1 LLC based 1 2 VC based 40000006 VPI 0 40000007 VCI d 35 40000008 Service Nam lt Str gt any 40000009 My Login lt Str gt test pga 40000010 My Password lt Str gt 1234 40000011 Single User Account lt 0 No L l Yes 40000012 IP Address Assignment lt 0 Static 1 1 Dynamic gt 40000013 IP Address 0 0 0 0 40000014 Remote IP address 0 0 0 0 40000015 Remote IP subnet mask 0 40000016 ISP incoming protocol filter set 1 6 40000017 ISP incoming protocol filter set 2 256 40000018 ISP incoming protocol filter set 3 256 40000019 ISP incoming protocol filter set 4 256 40000020 ISP outgoing protocol filter set 1 256 40000021 ISP outgoing protocol filter set 2 256 40000022 ISP outgoing protocol filter set 3 256 40000023 ISP outgoing protocol filter set 4 256 40000024 ISP PPPOE idle timeout 0 40000025 Route IP lt 0 No 1 1 Yes gt 40000026 Bridge lt 0 No 0 l Yes 40000027 ATM QoS Type O CBR 1 1 UBR gt 40000028 Peak Cell Rate PCR 0 40000029 Sustain Cell Rate SCR 0 40000030 Maximum Burst Size MBS 0 40000031 RIP Direction lt 0 None 0 1 Both 2 In Only 3 Out Only 274 P 2304R P1 Series
3. Menu 3 2 TCP IP and DHCP Ethernet Setup FIN FN PVA INPUT 30200001 DHCP lt 0 None 0 1 Server 2 Relay gt 30200002 Client IP Pool Starting Address 192 168 1 33 30200003 Size of Client IP Pool 32 30200004 Primary DNS Server 0 0 0 0 30200005 Secondary DNS Server 0 0 0 0 30200006 Remote DHCP Server 0 0 0 0 30200008 IP Address 172 21 2 200 30200009 IP Subnet Mask 16 30200010 RIP Direction lt 0 None 0 1 Both 2 In Only 3 Out Only 30200011 Version O Rip 1 0 1 Rip 2B 2 Rip 2M gt 30200012 Multicast O IGMP v2 zu 1 IGMP v1 2 None 30200013 IP Policies Set 1 1 12 256 30200014 IP Policies Set 2 1 12 256 30200015 IP Policies Set 3 1 12 256 30200016 IP Policies Set 4 1 12 256 Menu 3 2 1 IP Alias Setup FIN F PVA INPUT 30201001 IP Alias 1 lt 0 No 0 1 Yes gt 30201002 IP Address 0 0 0 0 30201003 IP Subnet Mask 0 30201004 RIP Direction lt 0 None 0 1 Both 2 In Only 3 Out Only 30201005 Version O Rip 1 0 1 Rip 2B 2 Rip 2M gt 30201006 IP Alias 1 Incoming protocol filters 256 Set 1 30201007 IP Alias 1 Incoming protocol filters 256 Set 2 P 2304R P1 Series User s Guide 271 Appendix G Internal SPTGEN Table 130 Menu 3
4. s 77 0 22 ROSSI senan REG ES ee GE EG R E 78 MISLEI EL ER AE EE 79 Du WAN Advanced OCR ese Ea AR Ge GE Rd RE ee ES EA ee E EE NR ek Ki ei 81 COA WAN Traffic Redirect SCFeel ou kic DEE NEE EE EE BE ES GE edie Ed ON GES EE OG D GR Re REG RE 83 Chapter 7 E me mre 85 Pal LAN WCPO 85 L4 IP Address and Subnet Mask REEKSE RE ESE GE EG AD EE ke GAS NEK Re AG SN EE ER See ese EG 85 ER dB e Pi PEE T 86 Peale TN pus oi sb aprono X TR 86 1 14 DNS Server OBS st RE RR HP eR Feb eR EF Up e RAE RH AE EE Ge EG Ge te ud ks ed Ge EE 86 dux ui 87 FINA dI E EE TREE NR EE 87 rc oup geo mm E T 88 RES OE c Lem PTT 89 REMIS GE E Umm 89 fied LANDHCP Setup GOEG m 90 Dono LAN SIBIDHOCB SP OR OR da bU ARA EE OE OE aan 91 LAA LAN Glient List SOReeli 2 roto pe pr ER RIO ER EE eI REFER Io Km etu ap EE oi RECHNER GE ke GR 92 fado LANIP AIS SCC ds cotes dos N E oe a ose LR ER au 93 T26 LAN Advanced SCEE ETE T TR T 95 Chapter 8 NAT ge 97 EA A SU VI P RU EN 97 8 1 1 Port Forwarding Services and Port Numbers eise see ee ee ee ee ee ee Ge RA enn 97 Be Digger FOR FOR are sesse n Eise on se ONN 98 RE ALG EE N AE RE N EO OE 99 cae EIE SCOED MA N RE N N EE ER EE NE 99 eT RES ID ei OR OE ONE OE 99 d d MAT Fon Forwarding SERS se SNR Es ie RO GER Pho t e o edd
5. LABEL DESCRIPTION This field is a sequential value It is not associated with a specific entry MAC Address Enter the MAC address of the computer to which you want the ZyXEL Device to assign the same IP address IP Address Enter the IP address you want the ZyXEL Device to assign to the computer Apply Click this to save your changes and to apply them to the ZyXEL Device Reset Click this to set every field in this screen to its last saved value 7 2 4 LAN Client List Screen LES This screen is empty if the DHCP server is not enabled You can enable it in Network gt LAN gt DHCP Setup Use this screen to look at the IP addresses the ZyXEL Device has assigned to DHCP clients on the LAN To access this screen click Network gt LAN gt Client List P 2304R P1 Series User s Guide Chapter 7 LAN Figure 44 Network gt LAN gt Client List Client List DHCP Client Table a ee NN 192 168 1 33 tw11477 02 00 50 8d 48 59 1f Apply Refresh Each field is described in the following table Table 38 Network gt LAN gt Client List LABEL DESCRIPTION This field is a sequential value It is not associated with a specific entry IP Address This field displays the IP address the ZyXEL Device assigned to the computer Host Name This field displays the system name of the computer to which the ZyXEL Device assigned the IP address MAC Address This field displays the MA
6. Allow UPnP to Select this to allow traffic from UPnP enabled applications to bypass the firewall pass through Clear this if you want the firewall to check UPnP application packets for example Firewall MSN packets Apply Click this to save your changes and to apply them to the ZyXEL Device Reset Click this to set every field in this screen to its last saved value P 2304R P1 Series User s Guide Chapter 17 UPnP P 2304R P1 Series User s Guide System Use this screen to set up general system settings change the system mode change the password configure the DDNS server settings and set the current date and time 18 1 System Features Overview 18 1 1 System Name System Name is for identification purposes However because some ISPs check this name y purp you should enter your computer s Computer Name n Windows 95 98 click Start Settings Control Panel Network Click the Identification tab note the entry for the Computer Name field and enter it as the System Name n Windows 2000 click Start Settings and Control Panel and then double click System Click the Network Identification tab and then the Properties button Note the entry for the Computer name field and enter it as the System Name In Windows XP click Start My Computer View system information and then click the Computer Name tab Note the entry in the Full computer name field and enter it as the ZyXEL Device System Name
7. 15 1 6 Scheduler The scheduler divides up an interface s bandwidth among the bandwidth classes The ZyXEL Device has two types of schedulers fairness based and priority based P 2304R P1 Series User s Guide Chapter 15 Bandwidth MGMT With the priority based scheduler the ZyXEL Device forwards traffic from bandwidth classes according to the priorities that you assign to the bandwidth classes The larger a bandwidth class s priority number is the higher the priority Assign real time applications like those using audio or video a higher priority number to provide smoother operation The ZyXEL Device divides bandwidth equally among bandwidth classes when using the fairness based scheduler thus preventing one bandwidth class from using all of the interface s bandwidth 15 1 7 Maximize Bandwidth Usage This option allows the ZyXEL Device to divide up any available bandwidth on the interface including unallocated bandwidth and any allocated bandwidth that a class is not using among the bandwidth classes that require more bandwidth When you enable maximize bandwidth usage the ZyXEL Device first makes sure that each bandwidth class gets up to its bandwidth allotment Next the ZyXEL Device divides up an interface s available bandwidth bandwidth that is unbudgeted or unused by the classes depending on how many bandwidth classes require more bandwidth and on their priority levels When only one class requires more bandwi
8. LABEL DESCRIPTION Class Setup Interface Select the interface for which you wish to set up classes Bandwidth management controls outgoing traffic on an interface not incoming In order to limit the download bandwidth of the LAN users set the bandwidth management class on the LAN In order to limit the upload bandwidth set the bandwidth management class on the corresponding WAN interface Root Class In this section you can look at each class and its allocated bandwidth Select the class to which you want to add a sub class which you want to edit or which you want to delete If you used the Bandwidth Management Wizard each service you selected except WWW becomes a LAN sub class and a WAN sub class in this screen WWW only becomes a LAN sub class Add Sub Class Click this to add a sub class to the selected class Edit Click this to configure the selected class You cannot edit the root class The Bandwidth Class Edit screen appears Delete Click this to delete the selected class and all its sub classes You cannot delete the root class 15 2 3 Bandwidth Class Edit Screen Use this screen to configure a bandwidth management class LES For each interface you must enable bandwidth management before you can configure classes To access this screen click Add Sub Class in Management gt Bandwidth MGMT gt Class Setup P 2304R P1 Series User s Guide Chapter 15 Bandwidth MGMT
9. P 2304R P1 Series User s Guide 253 Appendix D IP Addresses and Subnetting Table 119 Subnet 2 IP SUBNET MASK NETWORK NUMBER LAST OCTET BIT VALUE IP Address 192 168 1 64 IP Address Binary 11000000 10101000 00000001 01000000 Subnet Mask Binary 11111111 11111111 11111111 11000000 Subnet Address 192 168 1 64 Lowest Host ID 192 168 1 65 Broadcast Address 192 168 1 127 Highest Host ID 192 168 1 126 Table 120 Subnet 3 IP SUBNET MASK NETWORK NUMBER LAST OCTET BIT VALUE IP Address 192 168 1 128 IP Address Binary 11000000 10101000 00000001 10000000 Subnet Mask Binary 11111111 11111111 11111111 11000000 Subnet Address 192 168 1 128 Lowest Host ID 192 168 1 129 Broadcast Address 192 168 1 191 Highest Host ID 192 168 1 190 Table 121 Subnet 4 LAST OCTET BIT IP SUBNET MASK NETWORK NUMBER VALUE IP Address 192 168 1 192 IP Address Binary 11000000 10101000 00000001 11000000 Subnet Mask Binary 11111111 11111111 11111111 11000000 Subnet Address 192 168 1 192 Lowest Host ID 192 168 1 193 Broadcast Address 192 168 1 255 Highest Host ID 192 168 1 254 Example Eight Subnets Similarly use a 27 bit mask to create eight subnets 000 001 010 011 100 101 110 and 111 The following table shows IP address last octet values for each subnet Table 122 Eight
10. 6 2 3 PPPoE Use this screen to set up a PPPoE connection with the ISP To access this screen click Network gt WAN gt Internet Connection P 2304R P1 Series User s Guide Chapter 6 WAN Figure 37 Network gt WAN gt Internet Connection PPPoE Internet Connection ISP Parameters for Internet Access Encapsulation PPP over Ethernet 7 Service Name optional User Name Password emm Retype to Confirm em Nailed Up Connection Idle Timeout sec iD in seconds WAN IP Address Assignment Get automatically from ISP Default C Use Fixed IP Address My WAN IP Address Remote IP Address Remote IP Subnet Mask Metric Private WAN MAC Address Spoof WAN MAC Address Clone the computer s MAC address IP Address 192 155 1 33 Each field is described in the following table Table 32 Network gt WAN gt Internet Connection PPPoE LABEL DESCRIPTION ISP Parameters for Internet Access Encapsulation Select PPP over Ethernet Service Name Enter the PPP service name provided by your ISP If your ISP did not provide a service name leave this field blank User Name Enter the user name provided by your ISP Password Enter the password provided by your ISP Retype to Confirm Retype your password to make sure you entered it correctly Nailed Up Select this if you do not want the ZyXEL Device to time out when the connection is Connection idle for too long I
11. 18 1 2 Domain Name The Domain Name entry is what is propagated to the DHCP clients on the LAN If you leave this blank the domain name obtained by DHCP from the ISP is used While you must enter the host name System Name on each individual computer the domain name can be assigned from the ZyXEL Device via DHCP 18 1 3 DNS Server Address Assignment Use DNS Domain Name System to map a domain name to its corresponding IP address and vice versa for instance the IP address of www zyxel com is 204 217 0 2 The DNS server is extremely important because without it you must know the IP address of a computer before you can access it The ZyXEL Device can get the DNS server addresses in the following ways 1 The ISP tells you the DNS server addresses usually in the form of an information sheet when you sign up If your ISP gives you DNS server addresses enter them in the DNS Server fields in the WAN Advanced screen P 2304R P1 Series User s Guide Chapter 18 System 2 Ifthe ISP did not give you DNS server information leave the DNS Server fields in the WAN Advanced screen set to From ISP for the ISP to dynamically assign the DNS server IP addresses 18 1 4 Dynamic DNS BS Dynamic DNS allows you to update your current dynamic IP address with one or many dynamic DNS services so that anyone can contact you in NetMeeting CU SeeMe etc You can also access your FTP server or Web site on your own computer using a domain name
12. LABEL DESCRIPTION DHCP Setup Enable DHCP Select this if you want the ZyXEL Device to be the DHCP server on the LAN As a Server DHCP server the ZyXEL Device assigns IP addresses to DHCP clients on the LAN and provides the subnet mask and DNS server information IP Pool Starting Address Enter the IP address from which the ZyXEL Device begins allocating IP addresses if you have not specified an IP address for this computer in Network LAN gt Static DHCP P 2304R P1 Series User s Guide Chapter 7 LAN Table 36 Network LAN DHCP Setup LABEL DESCRIPTION Pool Size Enter the number of IP addresses to allocate This number must be at least one and is limited by a subnet mask of 255 255 255 0 regardless of the subnet the ZyXEL Device is in For example if the IP Pool Start Address is 10 10 10 10 the ZyXEL Device can allocate up to 10 10 10 254 or 245 IP addresses DNS Server First DNS Server Specify the IP addresses of a maximum of three DNS servers that the network can Second DNS use The ZyXEL Device provides these IP addresses to DHCP clients You can Server specify these IP addresses in the following ways Third DNS Server Custom Defined enter a static IP address From ISP provide the DNS servers provided by the ISP on the WAN port DNS Relay have the ZyXEL Device act as a DNS proxy The ZyXEL Device s LAN IP address displays in the field to the right read only The ZyXEL
13. Sales E mail sales zyxel se Telephone 46 31 744 7700 Fax 46 31 744 7701 Web Site www zyxel se e Regular Mail ZyXEL Communications A S Sj porten 4 41764 G teborg Sweden Ukraine Support E mail support ua zyxel com Sales E mail sales ua zyxel com Telephone 380 44 247 69 78 Fax 380 44 494 49 32 Web Site www ua zyxel com Regular Mail ZyXEL Ukraine 13 Pimonenko Str Kiev 04050 Ukraine United Kingdom Support E mail support zyxel co uk Sales E mail sales zyxel co uk Telephone 444 1344 303044 08707 555779 UK only Fax 44 1344 303034 Web Site www zyxel co uk FTP Site ftp zyxel co uk Regular Mail ZyXEL Communications UK Ltd 11 The Courtyard Eastern Road Bracknell Berkshire RG12 2XB United Kingdom UK is the prefix number you dial to make an international telephone call P 2304R P1 Series User s Guide Index A AbS 112 ACK Message 108 Address Resolution Protocol ARP 89 ADPCM 226 ALG 99 224 alternative subnet mask notation 251 Analog Telephone 27 Analysis by Synthesis 112 Any IP note 89 Application Layer Gateway 99 110 224 Auto discovering UPnP enabled Network Devices 179 Automatic Log Out 35 B Bandwidth Borrowing 157 Bandwidth Class 153 Bandwidth Filter 153 Bandwidth Management 153 Bridge mode features 71 IP address 72 procedure 72 reasons to use 71 Buffer Jitter 224 BYE Request 108 C Call Hold 122
14. enter the port number at the beginning of the range in the Start Port field enter the port number at the end of the range in the End Port field If you want to delete this rule enter zero in the Start Port and End Port fields Trigger Start Port Enter the outgoing port number or range of port numbers that makes the ZyXEL End Port Device record the source IP address and assign it to the selected incoming port number s To select one port number enter the port number in the Start Port and End Port fields To select a range of ports enter the port number at the beginning of the range in the Start Port field enter the port number at the end of the range in the End Port field If you want to delete this rule enter zero in the Start Port and End Port fields Apply Click this to save your changes and to apply them to the ZyXEL Device Reset Click this to delete every port triggering rule P 2304R P1 Series User s Guide Chapter 8 NAT 8 2 5 NAT ALG Screen Use this screen to enable and disable SIP VoIP FTP file transfer and H 323 audio visual ALG in the ZyXEL Device To access this screen click Network gt NAT gt ALG Figure 53 Network gt NAT gt ALG ALG Setup M Enable SIP ALG M Enable FTP ALG M Enable H 323 ALG Each field is described in the following table Table 45 Network gt NAT gt ALG LABEL DESCRIPTION Enable SIP ALG Select this to make sure SIP VoIP works correctly with p
15. 10 2 4 Phone Region Screen Use this screen to maintain settings that often depend on which region of the world the ZyXEL Device is in To access this screen click VoIP gt Phone gt Region Figure 65 VolP gt Phone gt Region Region Region Settings Region Settings Defaut M Call Service Mode Europe Type 7 Apply Each field is described in the following table Table 55 VoIP gt Phone gt Region LABEL DESCRIPTION Region Settings Select the place in which the ZyXEL Device is located Do not select Default Call Service Mode Select the mode for supplementary phone services call hold call waiting call transfer and three way conference calls that your VoIP service provider supports Europe Type use supplementary phone services in European mode USA Type use supplementary phone services American mode You might have to subscribe to these services to use them Contact your VoIP service provider Apply Click this to save your changes and to apply them to the ZyXEL Device Reset Click this to set every field in this screen to its last saved value P 2304R P1 Series User s Guide Chapter 10 Phone P 2304R P1 Series User s Guide Phone Book Use these screens to maintain call forwarding rules and speed dial settings 11 1 Phone Book Overview Speed dial provides shortcuts for dialing frequently used VoIP phone numbers It is also required if you want to make pee
16. Figure 82 Management gt Bandwidth MGMT gt Class Setup gt Edit BW MANAGER EDIT Class Name Bandwidth Budget Priority CLASS LAN lt NULL 4 kbps 3 0 7 Borrow bandwidth from parent class BW MANAGER EDIT CLASS Enable Bandwidth Filter Application Destination IP Addre Destination Subnet Mask Destination Port Source IP Address Source Subnet Mask Source Port Protocol ID ss SS E m r EC EU Apply Cancel See Appendix H on page 283 for examples of services for which you might create bandwidth classes Each field is described in the following table Table 72 Management gt Bandwidth MGMT gt Class Setup gt Edit LABEL DESCRIPTION This section lets you set the budget and priority for this class Class Name Finish the auto generated name or enter a descriptive name up to 20 alphanumeric characters long Spaces are allowed Bandwidth Budget Enter the maximum bandwidth for the class in kbps The recommendation is 20 20000 kbps for each class from parent class Priority Enter the priority of this class The higher the number the higher the priority Legal values are 0 7 The default setting is 3 Borrow bandwidth Select this option to allow a sub class to borrow bandwidth from its parent class if the parent class is not using up its bandwidth budget Bandwidth borrowing is governed by the priority of the sub classes That is a sub cl
17. P 2304R P1 Series User s Guide Chapter 12 Firewall 1 Acomputer on the LAN initiates a connection by sending out a SYN packet to a receiving server on the WAN 2 The ZyXEL Device reroutes the SYN packet through Gateway A on the LAN to the WAN 3 The reply from the WAN goes directly to the computer on the LAN without going through the ZyXEL Device As a result the ZyXEL Device resets the connection as the connection has not been acknowledged Figure 70 Triangle Route Problem Internet 12 2 2 Solving the Triangle Route Problem If you have the ZyXEL Device allow triangle route sessions traffic from the WAN can go directly to a LAN computer without passing through the ZyXEL Device and its firewall protection Another solution is to use IP alias IP alias allows you to partition your network into logical sections over the same Ethernet interface Your ZyXEL Device supports up to three logical LAN interfaces with the ZyXEL Device being the gateway for each logical network It s like having multiple LAN networks that actually use the same physical cables and ports By putting your LAN and Gateway A in different subnets all returning network traffic must pass through the ZyXEL Device to your LAN The following steps describe such a scenario 1 Acomputer on the LAN initiates a connection by sending a SYN packet to a receiving server on the WAN 2 The ZyXEL Device reroutes the packet to Gateway A which is in Subnet 2
18. Daylight savings is a period from late spring to early fall when many places set their clocks ahead of normal local time by one hour to give more daytime light in the evening Start Date Enter which hour on which day of which week of which month daylight savings time starts End Date Enter which hour on the which day of which week of which month daylight savings time ends Apply Click this to save your changes and to apply them to the ZyXEL Device Reset Click this to set every field in this screen to its last saved value P 2304R P1 Series User s Guide Chapter 18 System P 2304R P1 Series User s Guide Logs Use these screens to look at log entries and alerts and to configure the ZyXEL Device s log and alert settings 19 1 Logs Overview For a list of log messages see Section 19 3 on page 200 19 1 1 Alerts An alert is a type of log that warrants more serious attention Some categories such as System Errors consist of both logs and alerts P 2304R P1 Series User s Guide Chapter 19 Logs 19 1 2 Syslog Logs There are two types of syslog event logs and traffic logs The device generates an event log when a system event occurs for example when a user logs in or the device is under attack The device generates a traffic log when a session is terminated A traffic log summarizes the session s type when it started and stopped the amount of traffic that was sent and received and
19. E a Accton EN1207D TX PCI Fast Other Places 4 Control Panel amp My Network Places i My Documents X My Computer Details Network Connections System Folder Network Connections 4 Anicon with the description for each UPnP enabled device displays under Local Network 5 Right click on the icon for your ZyXEL Device and select Invoke The web configurator login screen displays P 2304R P1 Series User s Guide Chapter 17 UPnP Figure 103 Network Connections My Network Places My Network Places File Edit View Favorites Tools Help 1 w Bact e s Search Folders Ei Address My Network Places i Local Network l Network Tasks gg Add a network place view network connections 9 Set up a home or small office network Create Shortcut gy View workgroup computers i Rename Properties Other Places 6 Right click on the icon for your ZyXEL Device and select Properties A properties window displays with basic information about the ZyXEL Device Figure 104 Network Connections My Network Places Properties Example ZyXEL Prestige 650R 31 Internet Sharing Gateway Pr x General m ZUXEL Prestige 650R 31 Internet Sharing G ateway Manufacturer ZyXEL Model Name ZyXEL Internet Sharing Gateway Model Number Prestige 650R 31 Description ZyXEL Prestige 650R 31 Internet Sharing Gateway Device Address http 192 168 1 17 P 2304R P1
20. Fax Option G 711 Fax Passthrough Call Forward Call Forward Table Caller Ringing Enable On Hold Enable 120 30 65535 sec 1800 1 65535 sec C T 38 Fax Relay Table1 v P 2304R P1 Series User s Guide Chapter 9 SIP Each field is described in the following table Table 48 VolP gt SIP gt SIP Settings gt Advanced LABEL DESCRIPTION SIP Account This field displays the SIP account you see in this screen SIP Server Settings URL Type Select whether or not to include the SIP service domain name when the ZyXEL Device sends the SIP number SIP include the SIP service domain name TEL do not include the SIP service domain name Expiration Enter the number of seconds your SIP account is registered with the SIP register Duration server before it is deleted The ZyXEL Device automatically tries to re register your SIP account when one half of this time has passed The SIP register server might have a different expiration Register Re send Enter the number of seconds the ZyXEL Device waits before it tries again to timer register the SIP account if the first try failed or if there is no response Session Expires Enter the number of seconds the conversation can last before the call is automatically disconnected Usually when one half of this time has passed the ZyXEL Device or the other party updates this timer to prevent this from happening Min SE Enter the minimum numbe
21. Figure 137 Windows XP Advanced TCP IP Properties is SS RS ERG SS A pra d Fee iannis 242 Figure 138 Windows XP Internet Protocol TCP IP Properties iseer esse ee se ees seed de ee Se RR Ad ee eed di 243 Figure 139 Macintosh OS X Apple Me sessie eL erret rra EX ese pe Ln nane a Rn ek kes e e pn ee de a 244 Figure 140 Macimeos h OS X ie LA RE ER SA REY Pe eoRE EE Fo 2d opa bua deci Ep vd 2r vo ed dada adn 244 Figure 141 Red Hat 9 0 KDE Network Configuration Devices sesse esse ee ee ee Reed dd ee nemen nnne 245 Figure 142 Red Hat 9 0 KDE Ethernet Device General enne nennt nan be ke 246 Figure 143 Red Hat 9 0 KDE Network Configuration DNS iese seke ees Ee ERGE EE eese rennen nnn nnns 246 Figure 144 Red Hat 9 0 KDE Network Configuration Activate esse ee ee ees se ee ee ee ee ke ee ee ke ee ee ee 247 Figure 145 Red Hat 9 0 Dynamic IP Address Setting in ifconfig ethO 2 0 ee ee ee ee ee Re ee 247 Figure 146 Red Hat 9 0 Static IP Address Setting in ifconfig ethO ooo ee ek ee ee ke ee ee 247 Figure 147 Red Hat 9 0 DNS Settings in resolv conf iss sesse Nek Ge EE ER AG EE EA Ke Ke hn Se Ke Ke Ek Ke KA Ek 248 Figure 148 Red Hat 9 0 Restart Ethemet Card ses ESE EE erre ep tinta tr Ep WEGGEE sko G Ra 248 Figure 149 Red Hat 9 0 Checking TCP IP Properties iss dese enne nennen nennen nna 248 Figure 150 Network Number and Host ID uiuis esr xr ah Ente sida Eia Kon ea an a 250 Figure 151 Subnetting Example Before Subnetting uss iss eis EE
22. Session Initiation Protocol is a signaling protocol used in Internet telephony instant messaging events notification and conferencing The ZyXEL Device supports SIP traffic pass through Select this to configure this bandwidth filter for SIP traffic This makes it easier to manage bandwidth for SIP traffic and is useful for example when there is a VoIP Voice over Internet Protocol device on your LAN Destination IP Enter the destination IP address Address Destination This field is effective if you specify a Destination IP Address Subnet Mask Enter the destination subnet mask Destination Port Enter the destination port number Source IP Address Enter the source IP address Source Subnet Mask This field is effective if you specify a Source IP Address Enter the source subnet mask Source Port Enter the source port number Protocol ID Enter the IP protocol number service type for example 1 for ICMP 6 for TCP or 17 for UDP Apply Click this to save your changes and to apply them to the ZyXEL Device Cancel Click this to set every field in this screen to its last saved value 15 2 4 Bandwidth Monitor Screen Use this screen to look at the device s bandwidth usage and allocation To access this screen click Management gt Bandwidth MGMT gt Monitor Figure 83 Management gt Bandwidth MGMT gt Monitor Monitor Interface LAN SS S Root Class LAN 1 100 0
23. Time RFC 868 193 Tip ring Polarity Reversal 226 TOS 226 ToS 112 Touch Tone 112 trademarks 287 Triangle 139 Triangle Route Solutions 140 Trigger Port Forwarding 98 Process 98 Type Of Service 112 U UIC 176 Uniform Resource Identifier 107 Universal Plug and Play 175 Application 175 Security issues 175 Universal Plug and Play Forum 176 UPnP 175 185 Auto discovery 179 Installing Example 176 UPnP Certification 176 USA Type Call Service Mode 123 Use NAT 110 111 User Agent SIP 108 User Name 191 V VAD 121 225 226 Virtual Local Area Network 113 VLAN 113 VLAN Group 113 VLAN ID 113 VLAN ID Tags 113 VLAN Tag 113 Voice Activity Detection 121 225 226 Voice Channels 225 P 2304R P1 Series User s Guide Index Voice Coding 111 Voice Functions 226 Voice Mail 107 Voice over IP 27 107 VoIP 27 VoIP Service Provider 29 W warranty 288 note 288 Waveform Codec 111 Web Configurator 33 weight 223 P 2304R P1 Series User s Guide
24. Use these screens to set up the ZyXEL Device on the LAN You can configure its IP address and subnet mask DHCP services and other subnets You can also control how the ZyXEL Device sends routing information using RIP and you can enable and disable Any IP T 1 LAN Overview A Local Area Network LAN is a shared communication system to which many computers are attached A LAN is usually a computer network limited to the immediate area such as the same building or floor of a building IP Address and Subnet Mask Similar to the way houses on a street share a common street name so too do computers on a LAN share one common network number Where you obtain your network number depends on your particular situation If the ISP or your network administrator assigns you a block of registered IP addresses follow their instructions in selecting the IP addresses and the subnet mask Ifthe ISP did not explicitly give you an IP network number then most likely you have a single user account and the ISP will assign you a dynamic IP address when the connection is established If this is the case it is recommended that you select a network number from 192 168 0 0 to 192 168 255 0 and you must enable the Network Address Translation NAT feature of the ZyXEL Device The Internet Assigned Number Authority IANA reserved this block of addresses specifically for private use please do not use any other number unless you are told otherwise Let s say you selec
25. Usually you should keep the default value This field is related to RIP See Chapter 7 on page 85 for more information This field determines whether or not the ZyXEL Device includes the route to this remote node in its RIP broadcasts If you select Yes this route is not included in RIP broadcast If you select No the route to this remote node is propagated to other hosts through RIP broadcasts WAN MAC Address Spoof WAN MAC Address Select this if you do not want to use the default MAC address for the ZyXEL Device Clone the This field is enabled if you select Spoof WAN MAC Address computers MAC Enter the IP address of the computer whose MAC address you want the ZyXEL address IP Device to use instead of the default MAC address Address Apply Click this to save your changes and to apply them to the ZyXEL Device Reset Click this to set every field in this screen to its last saved value 6 3 WAN Advanced Screen Use this screen to set up DNS servers RIP and Windows Networking policies for the WAN To access this screen click Network gt WAN gt Advanced P 2304R P1 Series User s Guide Chapter 6 WAN Figure 38 Network gt WAN gt Advanced DNS Servers First DNS Server Second DNS Server Third DNS Server Advanced From ISP 7 0 0 0 From ISP Ea From ISP 0 0 0 RIP amp Multicast Setup RIP Direction RIP Version Multicast None v RIP 1 None hd
26. Windows Networking NetBIOS over TCP IP M Allow between LAN and WAN You also need to create a firewall rule Allow Trigger Dial Reset Each field is described in the following table Table 33 Network gt WAN gt Advanced LABEL DESCRIPTION DNS Servers DNS Domain Name System manages the relationships between domain names and IP addresses Without a DNS server you must know the IP address of the computer you want to access before you access it First DNS Server Second DNS Server Third DNS Server Select From ISP if your ISP dynamically assigns DNS server information In this case the ISP assigns the WAN IP address too See Network gt WAN gt Internet Connection The field to the right is read only and it displays the IP address provided by your ISP Select User Defined if you have the IP address of a DNS server You might get it from your ISP or from your network Enter the IP address in the field to the right Select None if you do not want to use this DNS server If you select None for all of the DNS servers you must use IP addresses to configure the ZyXEL Device and to access the Internet RIP amp Multicast Setup RIP Direction Use this field to control how much routing information the ZyXEL Device sends and receives on the subnet None The ZyXEL Device does not send or receive routing information on the subnet Both The ZyXEL Device sends and receives routing information
27. You must also configure the NAT router to forward traffic with this port number to the ZyXEL Device 9 1 7 3 STUN STUN Simple Traversal of User Datagram Protocol UDP through Network Address Translators allows the ZyXEL Device to find the presence and types of NAT routers and or firewalls between it and the public Internet STUN also allows the ZyXEL Device to find the public IP address that NAT assigned so the ZyXEL Device can embed it in the SIP data stream STUN does not work with symmetric NAT routers or firewalls See RFC 3489 for details on STUN The following figure shows how STUN works 1 The ZyXEL Device A sends SIP packets to the STUN server B 2 The STUN server B finds the public IP address and port number that the NAT router used on the ZyXEL Device s SIP packets and sends them to the ZyXEL Device 3 The ZyXEL Device uses the public IP address and port number in the SIP packets that it sends to the SIP server C Figure 57 STUN VOR 9 1 7 4 Outbound Proxy Your VoIP service provider may host a SIP outbound proxy server to handle all of the ZyXEL Device s VoIP traffic This allows the ZyXEL Device to work with any type of NAT router and eliminates the need for STUN or a SIP ALG Turn off a SIP ALG on a NAT router in front of the ZyXEL Device to keep it from retranslating the IP address since this is already handled by the outbound proxy server 9 1 8 Voice Coding A codec coder decoder codes analog voic
28. act as a SIP user agent to receive the call P 2304R P1 Series User s Guide Chapter 9 SIP Figure 54 SIP User Agent LA i A B 9 1 5 2 SIP Proxy Server A SIP proxy server receives requests from clients and forwards them to another server In the following example you want to use client device A to call someone who is using client device C 1 The client device A in the figure sends a call invitation to the SIP proxy server B 2 The SIP proxy server forwards the call invitation to C Figure 55 SIP Proxy Server 9 1 5 3 SIP Redirect Server A SIP redirect server accepts SIP requests translates the destination address to an IP address and sends the translated IP address back to the device that sent the request Then the client device that originally sent the request can send requests to the IP address that it received back from the redirect server Redirect servers do not initiate SIP requests In the following example you want to use client device A to call someone who is using client device C 1 Client device A sends a call invitation for C to the SIP redirect server B 2 The SIP redirect server sends the invitation back to A with C s IP address or domain name 3 Client device A then sends the call invitation to client device C P 2304R P1 Series User s Guide Chapter 9 SIP Figure 56 SIP Redirect Server 9 1 5 4 SIP Register Server A SIP register server maintains a database of SIP
29. gt Static Route gt IP Static Route P 2304R P1 Series User s Guide Chapter 14 Static Route Figure 78 Static Route Setup Route Name active Private Destination IP Address IP Subnet Mask Gateway IP Address Metric Management gt Static Route gt IP Static Route gt Edit add Apply Cancel Each field is described in the following table Table 63 Management gt Static Route gt IP Static Route gt Edit LABEL DESCRIPTION Route Name Enter the name of the static route Active Select this if you want the static route to be used Clear this if you do not want the static route to be used Private Select this if you do not want the ZyXEL Device to tell other routers about this static route For example you might select this if the static route is in your LAN Clear this if you want the ZyXEL Device to tell other routers about this static route Destination IP Address Enter one of the destination IP addresses that this static route affects IP Subnet Mask Enter the subnet mask that defines the range of destination IP addresses that this static route affects If this static route affects only one IP address enter 255 255 255 255 Gateway IP Address Enter the IP address of the gateway to which the ZyXEL Device should send packets for the specified Destination The gateway is a router or a switch on the same network segment as the device s LAN or WAN port T
30. ie ee se ee 154 15 1 6 SEhedulef ee 154 15 1 7 Maximize Bargdgwidil USage EER etat Pea i HH dtd net Sr HO 155 1E 1 8 Bone With Bmw see qus DR VIA M Phe vu ben DEE Ee ee Ee ee be eam Ern qai ial 157 15 1 9 Over Allotment OF Bandwidth lt lt sessies EERS EERS seeks ig Gee duas FERRE Abu Ge AN GEGEE Eie 158 15 2 Bandwidth Management Screens us cese SERE kar nic tai kA NA eg Se GRA a EX RR RR EA ER 158 15 2 1 Bandwidth Management Summary Screen iss ees sesse ee ke Se Re Ee de ee ee AA AE Bee 158 15 2 2 Bandwidth Class Setup SEEM ss EE RE e ERR GE o cc Do ade 160 15 2 3 Bandwidth Class Edit SOIBOl ee Le rre ER ee be Ee N ket LV ee Ki d 161 1524 Bandwidth Monitor SORES ss es cepi Exe b SS wee ENS eor I E IER FEE ELIO EU r ee ie 163 P 2304R P1 Series User s Guide 13 Table of Contents Chapter 16 Remote MEMT sed Ge Ge GN GE ERE RAV ee AURA N S RAE NOR eGGSA GEEK ELE 165 16 1 Remote Management Overview ss cece EER Ee AE KA renee anna enitn annua nena a naa KEER RA Ra uu Sa IRL eed renee 165 16 1 1 Remoto Management Limitations i cioe tese torri tesisinin GEGEE GER GESE ER 165 16 1 2 Remote Management and NAT iss ss Ee AA AA EER RA AR AAR ER nean KA tha a a nan Ee Re d ana AE be ed ed 165 Si EE OE EE DO AE EE EE 166 10 D Su onea MIBE Luton re Penne EN GE tod s I 167 TOA LM CN E DO S NT 167 16 29 System TIMEOUT n 167 16 2 Remote Management GEGEE 2 peti tib paste ned FDA UR ee Ge FEL AR ge EKG ROLE
31. resolv conf file in the etc directory The following figure shows an example where two DNS server IP addresses are specified Figure 147 Red Hat 9 0 DNS Settings in resolv conf nameserver 172 23 5 1 nameserver 172 23 5 2 3 After you edit and save the configuration files you must restart the network card Enter network restart inthe etc rc d init d directory The following figure shows an example Figure 148 Red Hat 9 0 Restart Ethernet Card root8 localhost init d network restart Shutting down interface eth0 OK Shutting down loopback interface OK Setting network parameters OK Bringing up loopback interface OK Bringing up interface eth0 OK Verifying Settings Enter ifconfig in a terminal screen to check your TCP IP properties Figure 149 Red Hat 9 0 Checking TCP IP Properties root localhost ifconfig etho Link encap Ethernet HWaddr 00 50 BA 72 5B 44 inet addr 172 23 19 129 Bcast 172 23 19 255 Mask 255 255 255 0 UP BROADCAST RUNNING MULTICAST MTU 1500 Metric 1 RX packets 717 errors 0 dropped 0 overruns 0 frame 0 TX packets 13 errors 0 dropped 0 overruns 0 carrier 0 collisions 0 txqueuelen 100 RX bytes 730412 713 2 Kb TX bytes 1570 1 5 Kb Interrupt 10 Base address 0x1000 root localhost P 2304R P1 Series User s Guide IP Addresses and Subnetting This appendix introduces IP addresses and subnet masks IP addresses identify individual devices on
32. 124 Call Service Mode 122 123 Call Transfer 123 124 Call Waiting 123 124 Caller ID 226 certifications 287 notices 288 viewing 288 Change Password 34 Index Circuit switched Telephone Networks 107 Class of Service 112 Class of Service CoS 112 Clicks 112 Client Server SIP 108 Client server Protocol 108 CNG 226 Codec 111 Coder Decoder 111 Comfort Noise Generation 226 Compression 226 Computer Name 187 Computer s IP Address 235 Configuration Upload Successful 212 213 Connection Wizard exceptions 52 contact information 291 copyright 287 CoS 112 customer support 291 D Daytime RFC 867 193 Decoder 111 Default LAN IP Address 33 Password 34 default management IP address 223 management subnet mask 223 password 223 Default LAN IP address 33 Default Password 34 Device Name 185 DHCP 76 187 188 DHCP Client 226 DHCP Clients 76 187 Diagnostic Tools 226 Dialing Type 226 Differentiated Services 112 DiffServ 112 Diffserv 226 P 2304R P1 Series User s Guide Index DiffServ Code Point DSCP 112 DiffServ Code Points 112 DiffServ marking rule 113 dimensions 223 disclaimer 287 DNS Proxy 226 Domain Name 76 187 DS Field 112 DS field 112 DSCPs 112 DTMF 112 DTMF Detection 226 Dual Tone Multi Frequency 112 Dynamic DNS 188 E Echo Cancellation 121 225 Embedded Web Configurator 226 Ethernet 52 55 77 226 Ethernet Encapsulation 97 Ethernet ports 223 Europe
33. 18 System Each field is described in the following table Table 83 Maintenance System General LABEL DESCRIPTION System Setup Mode The ZyXEL Device supports two modes Router and Bridge Usually you should use Router mode because it supports all the features discussed in this User s Guide However you might use Bridge mode in the following situation There is another router in the network and You only want to use the ZyXEL Device for VoIP and Internet access You do not want to use other features such as the firewall even with their default settings See Chapter 5 on page 71 for more information about Bridge mode Note If you change this setting and then click Apply the device automatically restarts After the restart the IP Address of the ZyXEL Device LAN port depends on the mode If the ZyXEL Device is in Router mode use the IP Address in Network gt LAN gt IP If the ZyXEL Device is in Bridge mode use the Management IP Address in this screen System Name Enter your computer s Computer Name This is for identification purposes but some ISPs also check this field This name can be up to 30 alphanumeric characters long Spaces are not allowed but dashes and underscores are accepted Domain Name Enter the domain name entry that is propagated to DHCP clients on the LAN If you leave this blank the domain name obtained from the ISP is used Use up to 38 alphanumeric
34. 2304R P1 Series User s Guide Chapter 19 Logs Table 96 CDR Logs continued LOG MESSAGE DESCRIPTION Connected d s board d line d channel d The PPPoE or dial up call is connected call d s C02 OutCall call d s C02 Call Terminated board d line d channel d The PPPoE or dial up call was disconnected Table 97 PPP Logs LOG MESSAGE DESCRIPTION ppp LCP Starting The PPP connection s Link Control Protocol stage has started ppp LCP Opening The PPP connection s Link Control Protocol stage is opening ppp CHAP Opening The PPP connection s Challenge Handshake Authentication Protocol stage is opening Starting ppp IPCP The PPP connection s Internet Protocol Control Protocol stage is starting ppp IPCP Opening The PPP connection s Internet Protocol Control Protocol stage is opening ppp LCP Closing The PPP connection s Link Control Protocol stage is closing ppp IPCP Closing The PPP connection s Internet Protocol Control Protocol stage is closing Table 98 UPnP Logs LOG MESSAGE DESCRIPTION UPnP pass through Firewall UPnP packets can pass through the firewall Table 99 Content Filtering Logs LOG MESSAGE DESCRIPTION s Keyword blocking The content of a requested web page matched a user defined keyword 9 s Not in trusted web list The web site is not in a trusted domain an
35. 3 4 5 6 7 8 9 10 11 Each field is described in the following table Table 42 Network gt NAT gt Port Forwarding LABEL DESCRIPTION Default Server Setup Default Server Enter the IP address of the server to which the ZyXEL Device should forward packets for ports that are not specified in the Port Forwarding section below or in the Management gt Remote MGMT screens Enter 0 0 0 0 if you want the ZyXEL Device to discard these packets instead Port Forwarding This field is a sequential value and it is not associated with a specific rule The sequence is important however The ZyXEL Device checks each rule in order and it only follows the first one that applies Active Select this to enable this rule Clear this to disable this rule Name This field displays the name of the rule It does not have to be unique Start Port This field displays the beginning of the range of port numbers forwarded by this rule End Port This field displays the end of the range of port numbers forwarded by this rule If it is the same as the Start Port only one port number is forwarded Server IP Address This field displays the IP address of the server to which packet for the selected port s are forwarded Modify This column provides icons to edit and delete rules To edit a rule click the Edit icon next to the rule The NAT Port Forwarding Edit screen appears To delete a rule click the Remove
36. 84 Maintenance gt System gt Dynamic DNS LABEL DESCRIPTION Dynamic DNS Select this if you want the DDNS server to update the IP address of the host server auto detect name s automatically Select this option when there are one or more NAT routers IP address between the ZyXEL Device and the DDNS server Note The DDNS server may not be able to detect the proper IP address if there is an HTTP proxy server between the ZyXEL Device and the DDNS server Use specified IP Select this if you want to use the specified IP address with the host name s Then address specify the IP address Use this option if you have a static IP address Apply Click this to save your changes and to apply them to the ZyXEL Device Reset Click this to set every field in this screen to its last saved value 18 2 3 Time Setting Screen Use this screen to set the date time and time zone in the ZyXEL Device To access this screen click Maintenance gt System gt Time Setting Figure 108 Maintenance gt System gt Time Setting Time Setting Current Time and Date Current Time 01 11 55 Current Date 2000 01 01 Time and Date Setup amp Manual New Time hh mm ss New Date yyyy mm dd C Getfrom Time Server Time Protocol Time Server Address Time Zone Setup Time Zone tow Greenwich Mean Time Dublin Edinburgh Lisbon London 7 Daylight Savings Start Date First z inda 7 of Januar z 2000 01 02 at p o
37. Default Class 100000 190 99900 190 Refresh P 2304R P1 Series User s Guide Chapter 15 Bandwidth MGMT Each field is described in the following table Table 73 Management Bandwidth MGMT Monitor LABEL DESCRIPTION Interface Select the interface at which you want to look in this screen Class Name This field displays the name of each bandwidth class in the selected interface The Default Class represents all the bandwidth in the Root Class that is not allocated to bandwidth classes If you do not select Maximize bandwidth usage in the Bandwidth Management Summary Screen the ZyXEL Device uses the bandwidth in this default class to only send traffic that does not match any of the bandwidth classes If you allocate all the root class s bandwidth to bandwidth classes the Default Class still displays a budget of 2 kbps the minimum amount of bandwidth that can be assigned to a bandwidth class Budget kbps This field displays the amount of bandwidth allocated to each bandwidth class Current Usage kbps This field displays the amount of bandwidth that each bandwidth class is using Refresh Click Refresh to update the screen P 2304R P1 Series User s Guide Remote MGMT Use these screens to control which computers can use which services to access the ZyXEL Device on each interface 16 1 Remote Management Overview Remote management allows you to determine
38. Device tells the DHCP clients on the LAN that the ZyXEL Device itself is the DNS server When a computer on the LAN sends a DNS query to the ZyXEL Device the ZyXEL Device forwards the query to the ZyXEL Device s system DNS server configured in the WAN Advanced screen and relays the response back to the computer You can only select DNS Relay for one of the three servers if you select DNS Relay for a second or third DNS server that choice changes to None after you click Apply None do not use this DNS server If you select None for all of the DNS servers you must use IP addresses to configure the ZyXEL Device and to access the Internet Apply Click this to save your changes and to apply them to the ZyXEL Device Reset Click this to set every field in this screen to its last saved value 7 2 3 LAN Static DHCP Screen ES This screen has no effect if the DHCP server is not enabled You can enable it in Network gt LAN gt DHCP Setup Use this screen to make the ZyXEL Device assign a specific IP address to a specific computer on the LAN To access this screen click Network gt LAN gt Static DHCP P 2304R P1 Series User s Guide Chapter 7 LAN Figure 43 Network gt LAN gt Static DHCP Static DHCP Static DHCP Table Dr re o Address d 1 ooo 2 Bm 1 boos bosa Apply Reset Each field is described in the following table Table 37 Network gt LAN gt Static DHCP
39. Device automatically allocates memory for the maximum number of rules regardless of whether or not there is a rule to enforce This is the same number you enter in Network gt NAT gt General P 2304R P1 Series User s Guide Chapter 12 Firewall Table 58 Security gt Firewall gt General LABEL DESCRIPTION Packet Direction This field displays each direction that packets pass through the ZyXEL Device Log Select the situations in which you want to create log entries for firewall events No Log do not create any log entries Log Blocked LAN to WAN only create log entries when packets are blocked Log Forwarded WAN to LAN only create log entries when packets are forwarded Log All create log entries for every packet Apply Click this to save your changes and to apply them to the ZyXEL Device Reset Click this to set every field in this screen to its last saved value 12 3 2 Firewall Services Screen Use this screen to enable service blocking to set up the date and time service blocking is effective and to maintain the list of services you want to block To access this screen click Security gt Firewall gt Services Figure 73 Security gt Firewall gt Services Service Setup Enable Services Blocking Available Services Blocked Services IPSEC_TUNNEL ESP 0 MULTICAST IGMP 0 PING ICMP 0 PPTP TUNNEL GRE 0 BGP TCP 179 zi Select Custom Port you can give ne
40. Dynamic DNS Type Dynamic DNS v Host Name SS 1 User Name Password EE Enable Wildcard Option Enable off line option Only applies to custom DNS IP Address Update Policy Use WAN IP Address C Dynamic DNS server auto detect IP Address C Use specified IP Addressl 0 0 Each field is described in the following table Table 84 Maintenance gt System gt Dynamic DNS LABEL DESCRIPTION Dynamic DNS Setup Enable Dynamic Select this to use dynamic DNS DNS Service Provider Select the name of your Dynamic DNS service provider Dynamic DNS Select the type of service that you are registered for from your Dynamic DNS Type Service provider Host Name Enter the host name You can specify up to two host names separated by a comma User Name Enter your user name Password Enter the password assigned to you Enable Wildcard Select this to enable the DynDNS Wildcard feature Option Enable offline This field is available when CustomDNS is selected in the DDNS Type field option Select this if your Dynamic DNS service provider redirects traffic to a URL that you can specify while you are off line Check with your Dynamic DNS service provider IP Address Update Policy Use WAN IP Select this if you want the ZyXEL Device to update the domain name with the Address WAN port s IP address P 2304R P1 Series User s Guide Chapter 18 System Table
41. EERS keel ett vk tre Se Gee Se GR re Ge Eed 210 Table 109 Maintenance Tools gt Configuration issie bre E EF r eret kg Eh La kg de nde 212 Table 110 Device SpecificalonS MEME TU i m 223 Table TII El Ed N MR RE N igang 223 Table 12 Fest re erdie elS ie UT E UU LM 226 Table 113 ZyXEL Device Power Adaptor Specifications iss sss 221 EED sd EE dIE 12e sap ed ARE E MI X HER S npe E RE LEHRER EPUM ara RR e neS 250 t x SSE NUTS T 251 Table 116 Maximum Host Numbers ius ss euidenter dieci dedi bit dd ki dir xb dd grid 251 Table 117 Altemeative Subnet Mask Notation sk GES de kk d ha tard d d i o da dn 251 Tabs Ti SMEER T aie EER AE GE nip PD ERE a pH dea tertie Ge risa E er of MER G 253 BI map e 254 dj 3 lie uo DE OE DE N HE EE OE EE TRES 254 jr EED EE EO EE GR Ge Ge GE GE EG GE De De EG Gee Ge Ge N ss rae 254 El Tee NE US csi ER ER AE OR OE dee aise 254 Table 123 24 bit Network Number Subnet Planning ee ee ee AA ee ee AR Re ee emen 255 Table 124 16 bit Network Number Subnet Planning sie Eed SS EE Se AE de RE Se RA denda 255 P 2304R P1 Series User s Guide 23 List of Tables Table 125 NAT Dolmens TT M 259 lle TARNA Mapbiad TEEL sis EE RE ESE N ARE N RA AE ei Ee ee Gee ae N RA Ge GE i 262 Table Pad NE OE EE M 263 Table 128 Abbreviations Used in the Example Internal SPTGEN Screens Table 270 Table 120
42. Figure 58 DiffServ Differentiated Service Field iss sie ENE SEE DEE Eed ee dd ae Ve ed ees Ve Eed Gee DEd Ge Ged 113 Fou co ee SIP ee mE 114 Figure 60 VolP SIP gt SIP Settings gt Advanpad susse accessi eee GEGEE EED Ge Gee EE ERG nai epe GE Ges GER deen Epid 116 Foue b1 vel zeli GAS sis EE EE KS es KG BR Aoi ER ge Fb da nua keep i Cet cba Rd 119 Figure 62 Vole gt Phone gt Analog FORSEER GN EE SG AE EER GEE ER IHE V E TCR E Gee be 125 Figure 63 VolP gt Phone Analog Phone gt Advanced 1 n enn tror dd ges Vs ee ad ee bede 126 Figure 64 VolP gt Phone OOM ai a ah EO sata e pon Re inca dh Rada ic Ea ERR nii ERN ARRA Kin c d 127 Figure 65 VoIP gt Phone gt REGION e 127 Figure 66 VolP Phone Book gt Incoming Call Polity ses irat rettet arret en tnt nn tni 130 Figure 07 Vole gt Phone Book gt Speed Dial mE 132 Figure 68 Firewall Rule DireClhiong e 138 Figure 69 Ideal Firewall Sopas occ epe lode n pA RR ats dw Sh Rd RN PA RN RA ER RA Sedan bene re 139 Figure 70 Tiangdle Route gis ga erc EE Ge De Ge GE GR GE big 140 2 Fal T 141 Figure 72 Security gt Firewall gt General sr SERE ior taken i Cte ends RP Cd a Ri nte nd ia AR I ge 141 Figure 73 Secunty Firewall gt SOFVIGOS us eN GEL SENDE ELISA eed GEES NKR Ge GE ge bti d Erba dir VANG GE pea a 142 Figure 74 Security gt Content Fit
43. General Security Privacy Content Connections Programs Advanced Settings O Use inline AutoComplete O Use Passive FTP for firewall and DSL modem compatibility Use smooth scrolling HTTP 1 1 settings Use HTTP 1 1 O Use HTTP 1 1 through proxy connections 5 Jaya Sun Microsof VN O Java console enabled requires restart O Java logging enabled JIT compiler for virtual machine enabled requires restart M Multimedia O Always show Internet Explorer 5 0 or later Radio toolbar O Don t display online media content in the media bar Enable Automatic Image Resizing F gt Restore Defaults lt Cancel Apply P 2304R P1 Series User s Guide Setting up Your Computer s IP Address All computers must have a 10M or 100M Ethernet adapter card and TCP IP installed Windows 95 98 Me NT 2000 XP Macintosh OS 7 and later operating systems and all versions of UNIX LINUX include the software components you need to install and use TCP IP on your computer Windows 3 1 requires the purchase of a third party TCP IP application package TCP IP should already be installed on computers using Windows NT 2000 XP Macintosh OS 7 and later operating systems After the appropriate TCP IP components are installed configure the TCP IP settings in order to communicate with your network Windows 95 98 Me Click Start Settings Control Panel and double click the Network icon to open the Network window
44. IE RISK Ee HAE CERERI SM Ee EPA C EM E PR ER be GN ES 95 Table 4 Network NAT gt General E 100 Table 42 Network gt NAT gt Part Forwarding iss rci Te Ek Re NE ed Ft ee i e d Ge N Ge ge ed 101 Table 43 Network NAT gt Port Forwarding gt Edit iese GENRE EES Ge ED Se EE XR EE CFFE ge ee Ge DE Deed 102 Table da Network NAT gt Tngger POTE issie SR ESE Se ER temere rte ER GE BA GER a tute Ge Re GES GR RA Gee EEN 103 hle ds IAT FEALG esse aaa seit AE Ke ee desis Genes ee ER SR Ge eg eke 104 jr coeleste 108 Table 47 VolP gt SIP gt IPSIS aay css derat a vesc erri e lr rc athens OR ps o RO GR pP RH 114 Table 48 VoIP gt SIP gt SIP Settings Advanced ss sesse essei ee retta ehh tta n ska EUER Luna kke Lu 117 Br sd eg cle Rc 120 Table 50 European Type Flash Key C ommands ss er esed DEE eri FS d FER Ern Pea E aia ad 122 Table oT USA Type Flash Key Commands SEER GR pep FCR GEE EG EE Ge GE FR PIER ta REN 123 Table 52 VolP gt Phone Analog PRONG iunc ER gees Ged Sek GRA tik Ged BA dae eek d datus seti sad GE 125 Table 53 VoIP gt Phone gt Analog Phone gt Advanced iss ee ee Ek KA ek AR Ee Ke kk Re ee dd 126 Table 54 VolP gt Prone gt ONGEDEERD ER Ge ee Ge GE lude na GE 127 Table So VOF gt Phone Rogon 127 Table 56 VolP gt Phone Book gt Incoming Gall Pol Lise tnta enhn hok hk Rhin 130 Table 57 VoI
45. Internet P 2304R P1 Series User s Guide Chapter 1 Introducing the ZyXEL Device Figure 2 VoIP Service Provider Application 1 5 2 Make Calls via IP PBX If your company has an IP PBX Internet Protocol Private Branch Exchange you can use the ZyXEL Device to make and receive VoIP telephone calls through it In this example you use your analog phone A in the figure and the ZyXEL Device B changes the call into VoIP and sends it to the IP PBX For PSTN phones C the IP PBX forwards calls through the PSTN network For IP phones D the IP PBX forwards calls through an IP network this could include the Internet Figure 3 IP PBX Application PSTN Network P 2304R P1 Series User s Guide Chapter 1 Introducing the ZyXEL Device 1 5 3 Make Peer to peer Calls Use the ZyXEL Device to make a call to the recipient s IP address without using a SIP proxy server Peer to peer calls are also called Point to Point or IP to IP calls You must know the peer s IP address in order to do this The following figure shows a basic example of how you would make a peer to peer VoIP call You use your analog phone A in the figure and the ZyXEL Device B changes the call into VoIP The ZyXEL Device then sends your call through the Internet to the peer VoIP device C Figure 4 Peer to peer Calling P 2304R P1 Series User s Guide El Chapter 1 Introducing the ZyXEL Device 32 P 2304R P1 Series Us
46. One and Many One to One NAT mapping types The following table summarizes these types Table 126 NAT Mapping Types TYPE IP MAPPING ABBREVIATION One to One ILA1 amp IGA1 1 1 Many to One SUA PAT ILA1 amp gt IGA1 M 1 ILA2 IGA1 Many to Many Overload ILA1 amp IGA1 M M Ov ILA2 IGA2 ILA3 IGA1 ILA4 IGA2 Many One to One ILA1 IGA1 M 1 1 ILA2 IGA2 ILA3 IGA3 Server Server 1 IP amp IGA1 Server Server 2 IP amp 2 IGA1 Server 3 IP 7 gt IGA1 NAT Types This section discusses the following NAT types that may be implemented on a router in front of the ZyXEL Device Full Cone Restricted Cone Port Restricted Cone Symmetric P 2304R P1 Series User s Guide Appendix F NAT The following table summarizes how these NAT types handle outgoing and incoming packets Read the following sections for more details and examples Table 127 NAT Types PORT FULL CONE ER URE EED RESTRICTED SYMMETRIC CONE Incoming Any external host Only external hosts Only external hosts A host on the external Packets can send packets with an IP address with an IP address network can only send to the mapped to which the and port to which packets to the specific external IP address internal host has the internal host mapped external IP and port already sent a has already senta address and port that the packet can send packet can send NAT route
47. Port Start 0 150000045 SUA Server 10 Port End 0 150000046 SUA Server 10 Local IP address 0 0 0 0 150000047 SUA Server L Active 0 No 1 Yes gt 0 150000048 SUA Server Protocol lt 0 ALL 6 TCP 17 U 0 DP 150000049 SUA Server Port Start 0 150000050 SUA Server Port End 0 150000051 SUA Server Local IP address 0 0 0 0 150000052 SUA Server 12 Active lt 0 No 1 Yes gt 0 150000053 SUA Server 12 Protocol lt 0 ALL 6 TCP 17 U 0 DP 50000054 SUA Server 12 Port Start 0 150000055 SUA Server 12 Port End 0 150000056 SUA Server 12 Local IP address 0 0 0 0 Table 134 Menu 21 1 Filter Set 1 Menu 21 Filter set 1 FI FN PVA INPUT 210100001 Filter Set 1 Name Str Menu 21 1 1 1 set 1 rule 1 EL F PVA INPUT 210101001 IP Filter Set 1 Rule 1 Type lt 2 TCP IP gt s2 210101002 IP Filter Set 1 Rule 1 Active lt 0 No 1 Yes s d 210101003 IP Filter Set 1 Rule Protocol 6 210101004 IP Filter Set 1 Rule 1 Dest IP address 0 0 0 0 210101005 IP Filter Set 1 Rule Dest Subnet 0 Mask 210101006 IP Filter Set 1 Rule Dest Port 137 210101007 IP Filter Set 1 Rule Dest Port Comp lt 0 none 1 equal 1 2 not equal 3 less 4 greater gt 210101008 IP Filter Set 1 Rule 1 Src IP address 0 0 0 0 210101009 IP Filter Set 1 Rule 1 Src Subnet Mask 0 210101010 IP Filter Set 1 Rule 1 Src Port 0 P 2304R P1 Se
48. SUBNET MASK HOST ID SIZE MAXIMUM NUMBER OF HOSTS 8 bits 255 0 0 0 24 bits 2242 16777214 16 bits 255 255 0 0 16 bits 216_2 65534 24 bits 255 255 255 0 8 bits 20102 254 29 bits 255 255 255 248 3 bits 29 24 6 Notation Since the mask 1s always a continuous number of ones beginning from the left followed by a continuous number of zeros for the remainder of the 32 bit mask you can simply specify the number of ones instead of writing the value of each octet This is usually specified by writing a followed by the number of bits in the mask after the address For example 192 1 1 0 25 is equivalent to saying 192 1 1 0 with subnet mask 255 255 255 128 The following table shows some possible subnet masks using both notations Table 117 Alternative Subnet Mask Notation ALTERNATIVE LASTOCTET LASTOCTET SUBNET MASK NOTATION BINARY DECIMAL 255 255 255 0 24 0000 0000 0 255 255 255 128 25 1000 0000 128 P 2304R P1 Series User s Guide Appendix D IP Addresses and Subnetting Table 117 Alternative Subnet Mask Notation continued sur aar AUR T exer GENSAT 255 255 255 192 26 1100 0000 192 255 255 255 224 27 1110 0000 224 255 255 255 240 28 1111 0000 240 255 255 255 248 29 1111 1000 248 255 255 255 252 30 1111 1100 252 Subnetting You can use subnetting to divide one network into multiple sub networks In the following exa
49. Server Select From ISP if your ISP dynamically assigns DNS server information In this Second DNS case the ISP assigns the WAN IP address too See Network gt WAN gt Internet Server Connection The field to the right is read only and it displays the IP address Third DNS Server provided by your ISP Select User Defined if you have the IP address of a DNS server You might get it from your ISP or from your network Enter the IP address in the field to the right Select None if you do not want to use this DNS server If you select None for all of the DNS servers you must use IP addresses to configure the ZyXEL Device and to access the Internet P 2304R P1 Series User s Guide Chapter 4 Wizard Setup Table 16 Connection Wizard IP Address Ethernet LABEL DESCRIPTION Back Click this to go to the previous screen Next gt Click this to go to the next screen Exit Click this to close this screen and return to the main screen 4 2 5 2 PPPoE ES You cannot use the Connection Wizard if the PPPoE remote server cannot be discovered automatically Figure 22 Connection Wizard gt IP Address PPPoE Connection Wizard ffi Internet Configuration My WAN IP Address 0 0 0 0 First DNS Server 0 0 0 0 Second DNS Server 0 0 0 0 Third DNS Server 0 0 0 0 P 2304R P1 Series User s Guide Chapter 4 Wizard Setup The following tabl
50. Subnets SUBNET ADDRESS FIRST ADDRESS ADDRESS ADDRESS 1 0 1 30 31 2 32 33 62 63 3 64 65 94 95 4 96 97 126 127 P 2304R P1 Series User s Guide Appendix D IP Addresses and Subnetting Table 122 Eight Subnets continued SUBNET ADDRESS FIRST ADDRESS ADDRESS ADDRESS 5 128 129 158 159 6 160 161 190 191 7 192 193 222 223 8 224 225 254 255 Subnet Planning The following table is a summary for subnet planning on a network with a 24 bit network number Table 123 24 bit Network Number Subnet Planning NO BORROWED SUBNET MASK NO SUBNETS NO HOSTS PER NET HOST BITS SUB 1 255 255 255 128 25 126 2 255 255 255 192 26 62 3 255 255 255 224 27 30 4 255 255 255 240 28 16 14 5 255 255 255 248 29 32 6 6 255 255 255 252 30 64 2 7 255 255 255 254 31 128 1 The following table is a summary for subnet planning on a network with a 16 bit network number Table 124 16 bit Network Number Subnet Planning NOST oe E gt SUBNET MASK NO SUBNETS NO HOSTS PER 1 255 255 128 0 17 32766 2 255 255 192 0 18 16382 3 255 255 224 0 19 8190 4 255 255 240 0 20 16 4094 5 255 255 248 0 21 32 2046 6 255 255 252 0 22 64 1022 7 255 255 254 0 23 128 510 8 255 255 255 0 24 256 254 9 255 255 255 128 25 512 126 10 255 25
51. Uo orbe P Pete td ru Cv qu ehe bu did 57 AG WAG PASS M 60 CAE MUA NN D EE ER OE EE 61 Bo VOIP Setup WIZA cxsicersaiesecd mt 62 LIA MCI gms RP 62 ASe Peder On COP O Dm 63 4 4 Bandwidth Management Wizard 1i euscccc som Geek tomus EEN tenes isinne nen bcr be siai 65 EE NON cara T Tu a 66 44 2 General Iformallonr EES ERG eI pk RR t HR PERO GE we EG SE Ro GEGEE EE RE ENE 67 83 ae SOME sui on DE o ra pedis Dove vitia det toss ot ste ee end 68 SE Pedal ug eR la AG Mt dhe set T E DE ER 69 LM OP FONE C I 70 Chapter 5 Bridde Mode 71 5 1 Bg Mode CINCY RR IE EE ee Ap GE ee DE 71 Dac bie ge ods POSE Uie es N ERG Oe es ee ee EE GEE Ge ee ee GER Rea T2 Part I iri fe UU U 73 Chapter 6 WAN 75 GELE RE m 75 OLET PPP mea area ic deti GE EE aa DE ee ee p s du 75 0 1 2 WAN IP Address INISIEER be vehi GR N Ebo b dade vig ERU Es Rp Ee 75 CTA MAD BOURSE N EE OE OE EE 76 P 2304R P1 Series User s Guide Table of Contents oW Ml uM nra 76 6 1 5 DNS Server Address Assignment sk KEER N EE SA AG KA Ek AA N tha au ER ke 76 O2 WAN Inemet Connection Seregi sarriro x borab eerie plague der E teri E EEAS 77 vog ase ation tera
52. Wizard System Information Connection Wizard c System Information Enter a n e e ur router on the network This information is optional and you may iis field blank ent automatically the ISP to the router If you are having you may need to enter the Domain Name manually in the field Domain Name The following table describes the labels in this screen Table 12 Connection Wizard gt System Information LABEL DESCRIPTION System Name Enter your computer s Computer Name See Section 18 1 on page 187 for more information This is for identification purposes but some ISPs also check this field This name can be up to 30 alphanumeric characters long Spaces are not allowed but dashes and underscores _ are accepted Domain Name Enter the domain name entry that is propagated to DHCP clients on the LAN If you leave this blank the domain name obtained from the ISP is used Use up to 38 alphanumeric characters Spaces are not allowed but dashes and periods are accepted Back Click this to go to the previous screen Next Click this to go to the next screen Exit Click this to close this screen and return to the main screen 4 2 3 ISP Parameters This screen depends on the Connection Type you select 54 P 2304R P1 Series User s Guide Chapter 4 Wizard Setup 4 2 3 1 Ethernet LES You cannot use the Connection Wizard if you subscribe t
53. You don t need to know if the recipient s connection type is an IP cellular or landline based service Calls received from IP telephones work exactly as you would expect from the traditional telephone service The NAT and DHCP server features allow you to use an Ethernet hub or switch to set up a private network and allow multiple computers to share a single Internet connection The ZyXEL Device also provides content filtering and a firewall for security The ZyXEL Device s web configurator allows easy management and configuration See Appendix A on page 223 for a complete list of features 1 2 Ways to Manage the ZyXEL Device Use any of the following methods to manage the ZyXEL Device Web Configurator This is recommended for everyday management of the ZyXEL Device using a supported web browser Command Line Interface Line commands are mostly used for troubleshooting by service engineers FTP for firmware upgrades and configuration backup restore SNMP The device can be monitored by an SNMP manager See the SNMP chapter in this User s Guide 1 3 Good Habits for Managing the ZyXEL Device Do the following things regularly to make the ZyXEL Device more secure and to manage the ZyXEL Device more effectively P 2304R P1 Series User s Guide Chapter 1 Introducing the ZyXEL Device Change the password Use a password that s not easy to guess and that consists of different types of characters such as numbers and lett
54. ZyXEL Device s source address IP address 1 and port A to IP address 2 and port B on the external network for packets sent to IP address 3 and port B The NAT router uses a different mapping IP address 2 and port M when the ZyXEL Device sends packets to IP address 4 and port D A host on the external network IP address 3 and port C for example can only send packets to the internal host via the external IP address and port that the NAT router used in sending a packet to the external host s IP address and port So in the example only 3 C is allowed to send packets to 2 B and only 4 D is allowed to send packets to 2 M b 3 C n 2B E m aM 4 E 1 5 ii P 2304R P1 Series User s Guide Figure 158 Symmetric NAT Appendix F NAT SUA Single User Account Versus NAT SUA Single User Account is a ZyNOS implementation of a subset of NAT that supports two types of mapping Many to One and Server The ZyXEL Device also supports Full Feature NAT to map multiple global IP addresses to multiple private LAN IP addresses of clients or servers using mapping types SUA Server A SUA server set is a list of inside behind NAT on the LAN servers for example web or FTP that you can make visible to the outside world even though SUA makes your whole inside network appear as a single computer to the outside world You may enter a single port number or a range of port numbers to be forwarded and the local IP address of the desired
55. a network Every networking device including computers servers routers printers etc needs an IP address to communicate across the network These networking devices are also known as hosts Subnet masks determine the maximum number of possible hosts on a network You can also use subnet masks to divide one network into multiple sub networks Introduction to IP Addresses One part of the IP address is the network number and the other part is the host ID In the same way that houses on a street share a common street name the hosts on a network share a common network number Similarly as each house has its own house number each host on the network has its own unique identifying number the host ID Routers use the network number to send packets to the correct network while the host ID determines to which host on the network the packets are delivered Structure An IP address is made up of four parts written in dotted decimal notation for example 192 168 1 1 Each of these four parts is known as an octet An octet 1s an eight digit binary number for example 11000000 which is 192 in decimal notation Therefore each octet has a possible range of 00000000 to 11111111 in binary or 0 to 255 in decimal The following figure shows an example IP address in which the first three octets 192 168 1 are the network number and the fourth octet 16 is the host ID P 2304R P1 Series User s Guide Appendix D IP Addresses and Subnett
56. automatically restarts When the POWER LED stops blinking and stays on follow the directions in Chapter 2 on page 33 to log in to the web configurator again Use the Management IP Address you set up in step 4 If your computer s IP address is in a different subnet follow the directions in Appendix C on page 235 to change your computer s IP address When you log in to the web configurator you can still see every screen in Table 3 on page 37 even if the feature is not available in Bridge mode in Table 28 on page 71 However if you configure a feature that is not available in Bridge mode your changes have no effect until you change back to Router mode If you want to change back to Router mode follow these steps 1 Log in to the web configurator See Chapter 2 on page 33 Click Maintenance gt System gt General In the Mode field select Router Click Apply The ZyXEL Device asks you if you want to enable the firewall and NAT Select OK or Cancel a AON Figure 34 Prompt Before Change to Router Mode Microsoft Internet Explorer x 2 Do vou to enable Firewall and NAT The ZyXEL Device automatically restarts Use the IP address in Network gt LAN gt IP to log in to the web configurator again You might have to change your computer s IP address again P 2304R P1 Series User s Guide PART II Network WAN Use these screens to set up the ZyXEL Device on the WAN You can configure the Internet con
57. bits with a 1 value For example an 8 bit mask means that the first 8 bits of the mask are ones and the remaining 24 bits are zeroes P 2304R P1 Series User s Guide Appendix D IP Addresses and Subnetting Subnet masks are expressed in dotted decimal notation just like IP addresses The following examples show the binary and decimal notation for 8 bit 16 bit 24 bit and 29 bit subnet masks Table 115 Subnet Masks BINARY DECIMAL OcrET OCTET ocTET SCTE 8 bit mask 11111111 00000000 00000000 00000000 255 0 0 0 16 bit mask 11111111 11111111 00000000 00000000 255 255 0 0 24 bit mask 11111111 11111111 11111111 00000000 255 255 255 0 29 bit mask 11111111 11111111 11111111 11111000 255 255 255 248 Network Size The size of the network number determines the maximum number of possible hosts you can have on your network The larger the number of network number bits the smaller the number of remaining host ID bits An IP address with host IDs of all zeros is the IP address of the network 192 168 1 0 with a 24 bit subnet mask for example An IP address with host IDs of all ones 1s the broadcast address for that network 192 168 1 255 with a 24 bit subnet mask for example As these two IP addresses cannot be used for individual hosts calculate the maximum number of possible hosts in a network as follows Table 116 Maximum Host Numbers
58. channels telephone calls Additionally you can answer an incoming phone call on a VoIP account even while someone else is using the account for a phone call Comfort Noise Generation The ZyXEL Device generates background noise to fill moments of silence when the other device in a call stops transmitting because the other party is not speaking as total silence could easily be mistaken for a lost connection Voice Activity Detection Silence Suppression Voice Activity Detection VAD reduces the bandwidth that a call uses by not transmitting when you are not speaking Echo Cancellation The ZyXEL Device supports G 168 an ITU T standard for eliminating the echo caused by the sound of your voice reverberating in the telephone receiver while you talk Auto provisioning Your VoIP service provider the company that lets you make phone calls over the Internet can automatically update your ZyXEL Device s configuration via an auto provisioning server Firewall You can configure firewall on the ZyXEL Device for secure Internet access When the firewall is on by default all incoming traffic from the Internet to your network is blocked unless it is initiated from your network This means that probes from the outside to your network are not allowed but you can safely browse the Internet and download files for example Content Filter The ZyXEL Device blocks access to web sites with URLs that contain keywords t
59. clock End Date First z unda z of Januar z 2000 01 02 at F o clock Reset P 2304R P1 Series User s Guide Chapter 18 System Each field is described in the following table Table 85 Maintenance gt System gt Time Setting LABEL DESCRIPTION Current Time and Date This section displays the current date and time Time and Date Setup Manual Select this if you want to specify the current date and time in the fields below New Time Enter the new time in this field and click Apply New Date Enter the new date in this field and click Apply Get from Time Server Select this if you want to use a time server to update the current date and time in the ZyXEL Device Time Protocol Select the time service protocol that your time server uses Check with your ISP or network administrator or use trial and error to find a protocol that works Daytime RFC 867 This format is day month year time zone Time RFC 868 This format displays a 4 byte integer giving the total number of seconds since 1970 1 1 at 0 0 0 NTP RFC 1305 This format is similar to Time RFC 868 Time Server Address Enter the IP address or URL of your time server Check with your ISP or network administrator if you are unsure of this information Time Zone Setup Time Zone Select the time zone at your location Daylight Savings Select this if your location uses daylight savings time
60. copy of the ZyXEL Device s configuration and put it back on the ZyXEL Device later if you decide you want to revert back to an earlier configuration Network Address Translation NAT Each computer on your network must have its own unique IP address Use NAT to convert a single public IP address to multiple private IP addresses for the computers on your network Port Forwarding If you have a server mail or web server for example on your network then use this feature to let people access it from the Internet DHCP Dynamic Host Configuration Protocol Use this feature to have the ZyXEL Device assign IP addresses an IP default gateway and DNS servers to computers on your network Dynamic DNS Support With Dynamic DNS Domain Name System support you can use a fixed URL www zyxel com for example with a dynamic IP address You must register for this service with a Dynamic DNS service provider IP Multicast IP Multicast is used to send traffic to a specific group of computers The ZyXEL Device supports versions 1 and 2 of IGMP Internet Group Management Protocol used to join multicast groups see RFC 2236 IP Alias IP Alias allows you to subdivide a physical network into logical networks over the same Ethernet interface with the ZyXEL Device itself as the gateway for each subnet Bridge Mode The ZyXEL Device can act as a bridge instead of a router This change should not require any other change
61. does not send or receive routing information on the subnet Both The ZyXEL Device sends and receives routing information on the subnet In Only The ZyXEL Device only receives routing information on the subnet Out Only The ZyXEL Device only sends routing information on the subnet RIP Version Select which version of RIP the ZyXEL Device uses when it sends or receives information on the subnet RIP 1 The ZyXEL Device uses RIPv1 to exchange routing information RIP 2B The ZyXEL Device broadcasts RIPv2 to exchange routing information RIP 2M The ZyXEL Device multicasts RIPv2 to exchange routing information IP Alias 2 IP Alias 2 Select this to add the specified subnet to the LAN port IP Address Enter the IP address of the ZyXEL Device on the subnet IP Subnet Mask Enter the subnet mask of the subnet RIP Direction Use this field to control how much routing information the ZyXEL Device sends and receives on the subnet None The ZyXEL Device does not send or receive routing information on the subnet Both The ZyXEL Device sends and receives routing information on the subnet In Only The ZyXEL Device only receives routing information on the subnet Out Only The ZyXEL Device only sends routing information on the subnet P 2304R P1 Series User s Guide Chapter 7 LAN Table 39 Network gt LAN gt IP Alias LABEL DESCRIPTION RIP Version Select which version of RIP the ZyXEL Device
62. extent it shall deem necessary to restore the product or components to proper operating condition Any replacement will consist of a new or re manufactured functionally equivalent product of equal or higher value and will be solely at the discretion of ZyXEL This warranty shall not apply if the product has been modified misused tampered with damaged by an act of God or subjected to abnormal working conditions Note Repair or replacement as provided under this warranty is the exclusive remedy of the purchaser This warranty is in lieu of all other warranties express or implied including any implied warranty of merchantability or fitness for a particular use or purpose ZyXEL shall in no event be held liable for indirect or consequential damages of any kind to the purchaser To obtain the services of this warranty contact ZyXEL s Service Center for your Return Material Authorization number RMA Products must be returned Postage Prepaid It is recommended that the unit be insured when shipped Any returned products without proof of purchase or those with an out dated warranty will be repaired or replaced at the discretion of P 2304R P1 Series User s Guide Appendix Legal Information ZyXEL and the customer will be billed for parts and labor All repaired or replaced products will be shipped by ZyXEL to the corresponding return address Postage Paid This warranty gives you specific legal rights and you may also have other righ
63. field displays the keywords that are blocked when Enable URL Keyword Blocking is selected To delete a keyword select it click Delete and click Apply Delete Click Delete to remove the selected keyword in the Keyword List The keyword disappears after you click Apply Clear All Click this button to remove all of the keywords in the Keyword List Denied Access Enter the message that is displayed when the ZyXEL Device s content filter Message feature blocks access to a web site Apply Click this to save your changes and to apply them to the ZyXEL Device Reset Click this to set every field in this screen to its last saved value 13 2 2 Content Filter Schedule Screen Use this screen to set up the schedule when content filtering is effective To access this screen click Security gt Content Filter gt Schedule Figure 75 Security gt Content Filter gt Schedule Schedule to Block Day to Block M Everyday sun Mon Tue wed Thu Fri Sat Time of Day to Block 24 Hour Format C All day From Start 0 hour 0 min End 0 hour 0 min Apply Reset Each field is described in the following table Table 61 Security gt Content Filter gt Schedule LABEL DESCRIPTION Day to Block Select which days of the week you want content filtering to be effective Time of Day to Block Select what time each day you want content filtering to be effective En
64. following icon on your desktop a P 2304R P1 Series User s Guide Chapter 20 Tools Figure 117 Network Temporarily Disconnected a Local Area Connection Network cable unplugged If the ZyXEL Device s IP address is different in the configuration file you selected you may need to change the IP address of your computer to be in the same subnet as that of the default management IP address 192 168 5 1 See your Quick Start Guide or the appendices for details on how to set up your computer s IP address You might have to open a new browser to log in again If the upload was not successful a Configuration Upload Error screen appears Figure 118 Configuration Upload Error System Restore Restore configuration error The configuration file was not accepted by the device Please return to the previous page and select a valid configuration file Click Help for more information Return Click Return to go back to the Configuration Screen 20 2 5 Restart Screen Use this screen to reboot the ZyXEL Device without turning the power off To access this screen click Maintenance gt Tools gt Restart Figure 119 Maintenance gt Tools gt Restart Restart System Restart Click Restart to have the device perform a software restart The SYS or PWR LED blinks as the device restarts and then stays steady on if the restart is successful Wait a minute before logging into the device again Restart This does not
65. for instance myhost dhs org where myhost is a name of your choice that will never change instead of using an IP address that changes each time you reconnect Your friends or relatives will always be able to call you even if they don t know your IP address First of all you need to have registered a dynamic DNS account with www dyndns org This is for people with a dynamic IP from their ISP or DHCP server that would still like to have a domain name The Dynamic DNS service provider will give you a password or key Enabling the wildcard feature for your host causes yourhost dyndns org to be aliased to the same IP address as yourhost dyndns org This feature is useful if you want to be able to use for example www yourhost dyndns org and still reach your hostname If you have a private WAN IP address then you cannot use Dynamic DNS 18 1 5 Pre defined NTP Time Servers List BS The ZyXEL Device uses the following pre defined list of NTP time servers if you do not specify a time server or it cannot synchronize with the time server you specified The ZyXEL Device can use this pre defined list of time servers regardless of the Time Protocol you select When the ZyXEL Device uses the pre defined list of NTP time servers it randomly selects one server and tries to synchronize with it If the synchronization fails then the ZyXEL Device goes through the rest of the list in order from the first one tried until either it is succe
66. for Internet Access Encapsulation Service Type User Name Password Ethernet bd RR Toshiba m m 0 0 0 0 Retype to Confirm Login Server IP Address WAN MAC Address Spoof WAN MAC Address Clone the computer s MAC address IP Address 32 1 3 Apply Reset P 2304R P1 Series User s Guide Chapter 6 WAN Each field is described in the following table Table 31 Network gt WAN gt Internet Connection Roadrunner LABEL DESCRIPTION ISP Parameters for Internet Access Encapsulation Select Ethernet Service Type Select the Roadrunner service provided by your ISP User Name Enter the user name provided by your ISP Password Enter the password provided by your ISP Retype to Confirm Retype your password to make sure you entered it correctly Login Server IP Address Enter the IP address of the login server provided by your ISP WAN MAC Address Spoof WAN MAC Address Select this if you do not want to use the default MAC address for the ZyXEL Device Clone the This field is enabled if you select Spoof WAN MAC Address computers MAC Enter the IP address of the computer whose MAC address you want the ZyXEL address IP Device to use instead of the default MAC address Address Apply Click this to save your changes and to apply them to the ZyXEL Device Reset Click this to set every field in this screen to its last saved value
67. given to you You can use up to 95 printable ASCII Extended set characters Apply Click this to save your changes and to apply them to the ZyXEL Device Reset Click this to set every field in this screen to its last saved value Advanced Setup Click this to edit the advanced settings for this SIP account The Advanced SIP Setup screen appears 9 2 2 Advanced SIP Setup Screen Use this screen to maintain advanced settings for each SIP account To access this screen click Advanced Setup in VoIP gt SIP gt SIP Settings P 2304R P1 Series User s Guide Chapter 9 SIP Figure 60 VoIP gt SIP gt SIP Settings gt Advanced SIP Account SIP1 SIP Server Settings URL Type Expiration Duration Register Re send timer Session Expires Min SE RTP Port Range Start Port End Port Voice Compression Primary Compression Type Secondary Compression Type Third Compression Type DTMF Mode STUN Active Server Address Server Port Use NAT Active Server Address Server Port Outbound Proxy Active Server Address Server Port NAT Keep Alive Active 3600 20 65535 sec 180 1 65535 sec 300 30 3600 sec 180 20 1800 sec 40000 1025 65535 65535 1025 65535 RFC 2833 3478 1024 65535 5060 1024 65535 3478 1024 65535 C Keep Alive With SIP Proxy C Keep Alive With Outbound Proxy Keep Alive Interval MWI Message Waiting Indication Enable Expiration Time
68. internal IP address 1 and port A to IP address 2 and port B on the external network The difference from full cone and restricted cone NAT is in how the port restricted cone NAT router handles packets coming in from the external network A host on the external network IP address 3 and Port C for example can only send packets to the internal host if the internal host has already sent a packet to the external host s IP address and port A ZyXEL Device with IP address 1 and port A sends packets to IP address 3 port C and IP address 4 port D The NAT router changes the ZyXEL Device s IP address to 2 and port to B Since 1 A has already sent packets to 3 C and 4 D they can send packets back to 2 B and the NAT router will perform NAT on them and send them to the ZyXEL Device at IP address 1 port A P 2304R P1 Series User s Guide Appendix F NAT Packets have not been sent from 1 A to 4 E or 5 so they cannot send packets to 1 A Figure 157 Port Restricted Cone NAT Example 7 3 C gt AD IN 4 E 1 A 1 5 ii Symmetric NAT The full restricted and port restricted cone NAT types use the same mapping for an outgoing packet s source address regardless of the destination IP address and port In symmetric NAT the mapping of an outgoing packet s source address to a source address in another network is different for each different destination IP address and port In the following example the NAT router maps the
69. name In the full SIP URI like 1234 VolP Domain provider com this is the part after the symbol You can use up to 127 printable ASCII Extended set characters Authentication User Name Enter the user name for registering this SIP account exactly as it was given to you You can use up to 95 printable ASCII characters Password Enter the user name for registering this SIP account exactly as it was given to you You can use up to 95 printable ASCII Extended set characters Check here to set up SIPx settings This field is available in the SIP Settings screen Select this if you want to set up other SIP account s as well as the SIP1 account Back Click this to go to the previous screen Apply Click this to go to the next screen If you select Check here to set up SIPx settings the SIP Settings screen appears again for SIP2 SIP3 or SIP 4 Otherwise the ZyXEL Device tries to register your SIP account s The following Screen appears Figure 26 VoIP Setup Wizard gt Registration Test SIP Registration Test in Process Please wait a moment about 2 Seconds Wait until it finishes Exit Click this to close this screen and return to the main screen 4 3 2 Registration Complete This screen depends on whether or not the ZyXEL Device successfully registered your SIP account s P 2304R P1 Series User s Guide Chapter 4 Wizard Setup Figure 27 VoIP Setup Wizard Registration
70. phone to drop the connection 5 Ifyou want to separate the activated three way conference into two individual connections one is on line the other is on hold press the flash key and press 2 10 1 3 3 USA Type Supplementary Services This section describes how to use supplementary phone services with the USA Type Call Service Mode Commands for supplementary services are listed in the table below After pressing the flash key 1f you do not issue the sub command before the default sub command timeout 2 seconds expires or issue an invalid sub command the current operation will be aborted Table 51 USA Type Flash Key Commands COMMAND SUB COMMAND DESCRIPTION Flash Put a current call on hold to place a second call After the second call is successful press the flash key again to have a three way conference call Put a current call on hold to answer an incoming call Flash O8 Transfer the call to another phone P 2304R P1 Series User s Guide 123 Chapter 10 Phone 10 1 3 3 1 USA Call Hold Call hold allows you to put a call A on hold by pressing the flash key If you have another call press the flash key to switch back and forth between caller A and B by putting either one on hold If you hang up the phone but a caller is still on hold there will be a remind ring 10 1 3 3 2 USA Call Waiting This allows you to place a call on hold while you answer another incoming call on
71. port forwarding you set a forwarding port in NAT to forward a service coming in from the server on the WAN to the IP address of a computer on the client side LAN The problem is that port forwarding only forwards a service to a single LAN IP address In order to use the same service on a different LAN computer you have to manually replace the LAN computer s IP address in the forwarding port with another LAN computer s IP address Trigger port forwarding solves this problem by allowing computers on the LAN to dynamically take turns using the service The ZyXEL Device records the IP address of a LAN computer that sends traffic to the WAN to request a service with a specific port number and protocol a trigger port When the ZyXEL Device s WAN port receives a response with a specific port number and protocol incoming port the ZyXEL Device forwards the traffic to the LAN IP address of the computer that sent the request After that computer s connection for that service closes another computer on the LAN can use the service in the same manner This way you do not need to configure a new IP address each time you want a different LAN computer to use the application 8 1 2 1 Trigger Port Forwarding Example The following is an example of trigger port forwarding Figure 48 Trigger Port Forwarding Process Example Jane s computer Internet EI mr Real Audio Server 1 Jane requests a file from the Real Audio serv
72. router maps all outgoing packets from an internal IP address and port to a single IP address and port on the external network In the following example the NAT router maps the source address of all packets sent from internal IP address 1 and port A to IP address 2 and port B on the external network The difference from full cone NAT is in how the restricted cone NAT router handles packets coming in from the external network A host on the external network IP address 3 or IP address 4 for example can only send packets to the internal host if the internal host has already sent a packet to the external host s IP address A ZyXEL Device with IP address 1 and port A sends packets to IP address 3 and IP address 4 The NAT router changes the ZyXEL Device s IP address to 2 and port to B Both 4 D and 4 E can send packets to 2 B since 1 A has already sent packets to 4 The NAT router will perform NAT on the packets from 4 D and 4 E and send them to the ZyXEL Device at IP address 1 port A Packets have not been sent from 1 A to 3 or 5 so 3 and 5 cannot send packets to 1 A Figure 156 Restricted Cone NAT Example Il NAT SE 4 D 4 E E OE Time Port Restricted Cone NAT As in full cone NAT a port restricted cone NAT router maps all outgoing packets from an internal IP address and port to a single IP address and port on the external network In the following example the NAT router maps the source address of all packets sent from
73. s Guide Chapter 17 UPnP Figure 97 Internet Connection Properties Z Internet Connection Properties General Connect to the Internet using amp J Intemet Connection This connection allows you to connect to the Internet through a shared connection on another computer Show icon in notification area when connected 4 You may edit or delete the port mappings or click Add to manually add port mappings P 2304R P1 Series User s Guide Chapter 17 UPnP Figure 98 Internet Connection Properties Advanced Settings Advanced Sethings Services Select Hie say oes unnig on pour neto that Intemet iee can Soo Services Pi marisa 192 168 1658618 16608 TEP BA memes 192 168 1 65 9859 27177 UDP msraso 192 158 1 8 7 2B1 25037 UDF E mms 6323 E81 20 2810 20711 TEE Figure 99 Internet Connection Properties Advanced Settings Add Service Settings Description of service Test Name or IP address for example 192 168 0 12 of the computer hosting this service on your network 132 168 1 11 External Port number for this service 143 TCP C UDP Internal Port number for this service 143 Cancel 5 When the UPnP enabled device is disconnected from your computer all port mappings will be deleted automatically 6 Select Show icon in notification area when connected option and click OK An icon displays in the system tray P 2304R P1 Series User s Guide
74. screen and return to the main screen 4 2 5 WAN IP Address Assignment This screen appears if you select Use fixed IP address provided by your ISP in the previous screen Use this screen to set up your static IP address The fields depend on the Connection Type you select in the ISP Parameters screen P 2304R P1 Series User s Guide Chapter 4 Wizard Setup 4 2 5 1 Ethernet Figure 21 Connection Wizard IP Address Ethernet Connection Wizard ffi Internet Configuration My WAN IP Address My WAN IP Subnet Mask Gateway IP Address First DNS Server Second DNS Server Third DNS Server The following table describes the labels in this screen Table 16 Connection Wizard gt IP Address Ethernet LABEL DESCRIPTION My WAN IP Enter the IP address provided by your ISP Address My WAN IP Enter the subnet mask provided by your ISP Subnet Mask Gateway IP Enter the gateway provided by your ISP If your ISP did not provide one leave it Address blank DNS Server Address Assignment if applicable DNS Domain Name System is for mapping a domain name to its corresponding IP address and vice versa The DNS server is extremely important because without it you must know the IP address of a computer before you can access it The ZyXEL Device uses a system DNS server in the order you specify here to resolve domain names for VPN DDNS and the time server First DNS
75. soon An external log analyzer can reconstruct and analyze the traffic flowing through the device after collecting the traffic logs Table 86 Syslog Logs LOG MESSAGE DESCRIPTION Event Log Facility 8 Severity Mon dd hr mm ss hostname src lt srclP srcPort gt dst lt dstIP dstPort gt msg lt msg gt note lt note gt devID lt mac address gt cat lt category gt This message is sent by the system RAS displays as the system name if you haven t configured one when the router generates a syslog The facility is defined in the Log Settings screen The severity is the log s syslog class The definition of messages and notes are defined in the various log charts throughout this appendix The devID is the MAC address of the router s LAN port The cat is the same as the category in the router s logs Traffic Log lt Facility 8 Severity gt Mon dd hr mm ss hostname src lt srclP srcPort gt dst lt dstIP dstPort gt msg Traffic Log note Traffic Log devID lt mac address gt cat Traffic Log duration seconds sent sentBytes rcvd receiveBytes dir lt from to gt protolD IPProtocollD proto serviceName trans IPSec Normal This message is sent by the device when the connection session is closed The facility is defined in the Log Settings screen The severity is the traffic log type The message and note always display Traffic Log The proto field lists the servic
76. specified port to the ZyXEL Device This eliminates the need for STUN or a SIP ALG Server Address Enter the public IP address or domain name of the NAT router Server Port Enter the port number that your SIP sessions use with the public IP address of the NAT router Outbound Proxy Active Select this if your VoIP service provider has a SIP outbound server to handle voice calls This allows the ZyXEL Device to work with any type of NAT router and eliminates the need for STUN or a SIP ALG Turn off any SIP ALG on a NAT router in front of the ZyXEL Device to keep it from retranslating the IP address since this is already handled by the outbound proxy server Server Address Enter the IP address or domain name of the SIP outbound proxy server Server Port Enter the SIP outbound proxy server s listening port if your VoIP service provider gave you one Otherwise keep the default value NAT Keep Alive Active Select this to stop NAT routers between the ZyXEL Device and SIP server a SIP proxy server or outbound proxy server from dropping the SIP session The ZyXEL Device does this by sending SIP notify messages to the SIP server based on the specified interval Keep Alive with SIP Proxy Select this if the SIP server is a SIP proxy server Keep Alive with Outbound Proxy Select this if the SIP server is an outbound proxy server You must enable Outbound Proxy to use this Keep Alive Interva
77. subnet RIP Version Select which version of RIP the ZyXEL Device uses when it sends or receives information on the subnet RIP 1 The ZyXEL Device uses RIPv1 to exchange routing information RIP 2B The ZyXEL Device broadcasts RIPv2 to exchange routing information RIP 2M The ZyXEL Device multicasts RIPv2 to exchange routing information P 2304R P1 Series User s Guide Chapter 7 LAN Table 40 Network LAN Advanced LABEL DESCRIPTION Multicast You do not have to enable multicasting to use RIP 2M See RIP Version Select which version of IGMP the ZyXEL Device uses to support multicasting on the LAN Multicasting sends packets to some computers on the LAN and is an alternative to unicasting sending packets to one computer and broadcasting sending packets to every computer None The ZyXEL Device does not support multicasting IGMP v1 The ZyXEL Device supports IGMP version 1 IGMP v2 The ZyXEL Device supports IGMP version 2 Multicasting can improve overall network performance However it requires extra processing and generates more network traffic In addition other computers on the LAN have to support the same version of IGMP Any IP Setup Active Select this if you want to let computers on different subnets use the ZyXEL Device Windows NetBIOS over TCP IP Networking Allow between LAN and WAN Select this check box if you want the ZyXEL Device to send NetBIOS Network Basi
78. the computer Off The ZyXEL Device does not have an Ethernet connection with a computer WAN Green On The ZyXEL Device has an Ethernet connection with the cable DSL modem Blinking The ZyXEL Device is sending receiving data to from the cable DSL modem Off The ZyXEL Device doesn t have an Ethernet connection with the cable DSL modem INTERNET Green On The ZyXEL Device has a working IP address Red On The ZyXEL Device does not have a working IP address but there is a network connection Off The ZyXEL Device does not detect any network connection PHONE 1 4 Green On A SIP account on this phone port is registered Blinking The phone is off the hook Off There are no SIP accounts registered on this phone port 1 5 Applications Here are some examples of how you can use your ZyXEL Device 1 5 1 Make Calls via VoIP Service Provider In a home or small office environment you can use the ZyXEL Device to make and receive VoIP telephone calls through a VoIP service provider The following figure shows a basic example of how you would make a VoIP call through a VoIP service provider You use your analog phone A in the figure and the ZyXEL Device B changes the call into VoIP The ZyXEL Device then sends your call to the Internet and the VoIP service provider s SIP server C For PSTN phones E the VoIP call server forwards calls through a trunking gateway D For IP phones F the VoIP call server forwards calls through the
79. the ZyXEL Device 20 1 Tools Overview 20 1 1 ZyXEL Firmware Find firmware at www zyxel com in a file that usually uses the system model name with a bin extension e g ZyXEL Device bin The upload process uses HTTP Hypertext Transfer Protocol and may take up to two minutes After a successful upload the system will reboot LES Only use firmware for your ZyXEL Device s specific model Refer to the label on the bottom of your ZyXEL Device 20 2 Tools Screens 20 2 1 Firmware Screen Use this screen to upload new firmware to the ZyXEL Device To access this screen click Maintenance gt Tools gt Firmware LES Only use firmware for your ZyXEL Device s specific model Refer to the label on the bottom of your ZyXEL Device P 2304R P1 Series User s Guide Chapter 20 Tools Figure 111 Maintenance gt Tools gt Firmware Firmware Firmware Upgrade To upgrade the internal router firmware browse to the location of the binary BIN upgrade file and click Upload Upgrade files can be downloaded from website If the upgrade file is compressed ZIP file you must first extract the binary BIN file In some cases you may need to reconfigure File Path _ Browse Each field is described in the following table Table 108 Maintenance gt Tools gt Firmware LABEL DESCRIPTION File Path Enter the location of the bin file you want to upload or click Browse to find it Y
80. the ZyXEL Device s current configuration to a file on your computer Once your device is configured and functioning properly it is highly recommended that you back up your configuration file before making configuration changes The backup configuration file is useful if you need to return to your previous settings Restore Configuration File Path Enter the location of the file you want to upload or click Browse to find it Browse Click this to find the file you want to upload Upload Click this to restore the selected configuration file See Section 20 2 4 on page 212 for more information about this Note Do not turn off the device while configuration file upload is in progress Back to Factory Defaults Reset Click this to clear all user entered configuration information and return the ZyXEL Device to its factory defaults There is no warning screen 20 2 4 Restore Configuration Screens BS Do not turn off the device while configuration file upload is in progress When the ZyXEL Device has finished restoring the selected configuration file the following screen appears Figure 116 Configuration Upload Successful Restore Configuration successful P 4 The Device Is Rebooting 2 Now After the device finishes rebooting the login screen displays The device now automatically restarts This causes a temporary network disconnect In some operating systems you may see the
81. the same telephone directory number If there is a second call to your telephone number you will hear a call waiting tone Press the flash key to put the first call on hold and answer the second call 10 1 3 3 3 USA Call Transfer Do the following to transfer an incoming call that you have answered to another phone 1 2 3 Press the flash key to put the caller on hold When you hear the dial tone dial 98 followed by the number to which you want to transfer the call to operate the Intercom After you hear the ring signal or the second party answers it hang up the phone 10 1 3 3 4 USA Three Way Conference Use the following steps to make three way conference calls 1 2 3 When you are on the phone talking to someone place the flash key to put the caller on hold and get a dial tone Dial a phone number directly to make another call When the second call 1s answered press the flash key wait for the sub command tone and press 3 to create a three way conversation Hang up the phone to drop the connection If you want to separate the activated three way conference into two individual connections one is on line the other is on hold press the flash key wait for the sub command tone and press 2 10 2 Phone Screens 10 2 1 Analog Phone Screen Use this screen to control which SIP accounts each phone uses To access this screen click VoIP gt Phone gt Analog Phone P 2304R P1 Se
82. to the ZyXEL Device Table 129 Menu 1 General Setup Menu 1 General Setup EL FN PVA INPUT 10000000 Configured lt 0 No 1 Yes gt 0 10000001 System Name lt Str gt Your Device 10000002 Location lt Str gt 10000003 Contact Person s Name lt Str gt 10000004 Route IP lt 0 No 1 Yes gt 1 10000006 Bridge lt 0 No 1 Yes gt 0 Table 130 Menu 3 Menu 3 1 General Ethernet Setup FIN E PVA INPUT 30100001 Input Protocol filters Set 1 2 30100002 Input Protocol filters Set 2 256 30100003 Input Protocol filters Set 3 256 30100004 Input Protocol filters Set 4 256 30100005 Input device filters Set 1 256 30100006 Input device filters Set 2 256 30100007 Input device filters Set 3 256 30100008 Input device filters Set 4 256 30100009 Output protocol filters Set 1 256 30100010 Output protocol filters Set 2 256 30100011 Output protocol filters Set 3 256 30100012 Output protocol filters Set 4 256 30100013 Output device filters Set 1 256 30100014 Output device filters Set 2 256 30100015 Output device filters Set 3 256 30100016 Output device filters Set 4 256 P 2304R P1 Series User s Guide Appendix G Internal SPTGEN Table 130 Menu 3
83. un 193 Table 55 SVSIQO LODS AE OE N AE Oe ME diia 196 Table 87 REC 2408 ISAKMP Payload Types sussie eis GESE rose tutt GEGEE DERE GEED GEES RUN ES ER ENG GENE gee EE 196 Table 88 Maintenance gt Logs gt View LOB asses KEN ESE EER KG ANGS ka SEN WA des kodak ada Rd 197 Table 89 Maintenance Logs gt Log Satlings uie SS EERS GR EE OR Ge EFRON ek Ge ae ee ese de ed 198 Table OU Systum EUOF Legs ss Ge Ge a dd p ipd ddl ci d OR utor 200 Table 91 System Maintenance Lo aus pieta hada aki rad dua Dp da booa RR ee hA D bad Edda 200 Table 92 Access Control LOGS 201 Wee Oo WGP FBS LOS 201 Table 4 PACESEFIEOE LOSS EE AR OO EE OE 202 Table 9S ICMP LOOS A NE RE a EA ganda 202 TOE O C ORUE aa qo ETE 202 Wale OF FPF LO apua ET 203 Erogo 203 Table 99 Content Filtering LOgS cada aca scan cei waned ERES eN bb pda Pu cde ox EE aac N Re eg EH 203 Table T00 Allack LOGS RE m 204 Table 101 Remote Management LOSS disse RR ed rp eden dotted dd dde d e ade 205 gro 102 Pd e RE 205 Era TS GIP LOUE deer ee 206 jt TOS RTE EO ee eet EE PUT 207 Table OS FoM Logs Caller SIG RS a AEEA 207 Tape TOG FSN Logs Cales SIde aeina aaa Gee GE Fabel ed d ue i Ri E 207 dub TES LMS LOOS MO RE T AT OE 207 Table 108 Maintenance gt Tools gt FIFITIWEIFGE issie EES KERR
84. your ISP gives you the DNS server addresses enter them in the DNS Server fields in DHCP Setup otherwise leave them blank Some ISPs choose to pass the DNS servers using the DNS server extensions of PPP IPCP IP Control Protocol after the connection is up If your ISP did not give you explicit DNS servers chances are the DNS servers are conveyed through IPCP negotiation The ZyXEL Device supports the IPCP DNS server extensions through the DNS proxy feature If the DNS Server fields in the DHCP Setup screen are not specified the ZyXEL Device tells the DHCP clients that it itself is the DNS server When a computer sends a DNS query to the ZyXEL Device the ZyXEL Device forwards the query to the real DNS server learned through IPCP and relays the response back to the computer P 2304R P1 Series User s Guide Chapter 7 LAN Please note that DNS proxy works only when the ISP uses the IPCP DNS server extensions It does not mean you can leave the DNS servers out of the DHCP setup under all circumstances If your ISP gives you explicit DNS servers make sure that you enter their IP addresses in the DHCP Setup screen This way the ZyXEL Device can pass the DNS servers to the computers and the computers can query the DNS server directly without the ZyXEL Device s intervention 7 1 5 RIP Setup RIP Routing Information Protocol allows a router to exchange routing information with other routers The RIP Direction field controls the sending
85. 0 1 3 Supplementary Phone Services Overview cccccecceeeeeeeeeeeeeceeeeeteeeeeeeeseeees 121 70 2 PHONE SEDIS ee ei ep EG eaa FERMER PEDE IER AIRE S SE ebat 124 TEE EU NIU SEM GERBER Ge BG acme 124 10 2 2 Advanced Analog Phone Setup Screen iis ies see de Se RA KA SE ERA Ak ee SERE Ke EED ee 125 10 2 3 Common Phone Settings Screen iis BEREA AKA ERA AK KA ena aa naa BR RA AKA ek Ak KA ee dd 126 10 24 Phone Rogon oe EE m 127 Chapter 11 Phone BOOK Ce IE OE AE EE OE aa 129 TIAM Pine Boo OGE ss ES Ee a EE Ad b a GE GE Ee ES Gr SEDE 129 TE Phone Beak SOTEBITB oos ten ER a etii dedu uu E itidem 129 11 2 1 Incoming Call Policy SEEP sessie KEES sess GEE GEGEE ER inn E EE bte pue ERt bt SEN EE NEE 129 Ts Ee DO TEE sis ER OL T 131 Part IV Security and Management RA EE Ee Ee ee 135 Chapter 12 i Mero 137 12 P 2304R P1 Series User s Guide Table of Contents EE EE ES s C OE OE OE 137 12 1 1 Stateful Inspection FIFEWAlL ascia cic ceo ated ebat EE ER EN ERE GEN KL t gea RR EE EG EFE A GE END 137 12 1 2 About the ZyXEL Device Firewall 1 critican ttt tbe barred SERE 137 12 1 3 Guidelines For Enhancing Security With Your Firewall esses 138 12 1 4 The Firewall NAT and Remote Management iss se ee ee ee ee ee Ge ee 138 12 2 Tangle EE EE EE 139 12 2 1 The Triangle Route PUI asse EERS RR KANA Ge ed CEN ae bn ads ened 139 12 2 2 Solving di Tr
86. 0Mbps Half Full Auto negotiation Auto crossover Ethernet port Phone Ports Four FXS Foreign Exchange Station POTS ports Feeding Voltage On hook 48V Minimum Voltage 20V Off hook 24V Ringing Voltage 40V RMS at 5 REN Operation Temperature 0 C 40 C Storage Temperature 30 60 C Operation Humidity 20 95 RH Storage Humidity 20 95 RH Table 111 Firmware Features FEATURE DESCRIPTION Default IP Address 192 168 1 1 Default Management Subnet Mask 255 255 255 0 24 bits Default Password 1234 DHCP Pool 192 168 1 33 to 192 168 1 64 Device Management Use the web configurator to easily configure the rich range of features on the ZyXEL Device P 2304R P1 Series User s Guide 223 Appendix A Product Specifications Table 111 Firmware Features FEATURE DESCRIPTION Firmware Upgrade Download new firmware when available from the ZyXEL web site and use the web configurator an FTP or a TFTP tool to put it on the ZyXEL Device Note Only upload firmware for your specific model Any IP The Any IP feature allows a computer to access the Internet and the ZyXEL Device without changing the network settings such as IP address and subnet mask of the computer when the IP addresses of the computer and the ZyXEL Device are not in the same subnet Configuration Backup amp Restoration Make a
87. 128 bit WEP gt 230400007 PSK 230400008 WPA Mixed Mode lt 0 Disable 0 1 Enable gt 230400009 Data Privacy for Broadcast lt 0 TKIP 1 WEP gt 0 Multicast packets 230400010 WPA Broadcast Multicast Key Update 0 Timer Table 137 Menu 24 11 Remote Management Control Menu 24 11 Remot anagement Control FIN E PVA INPUT 241100001 TELNET Server Port 23 241100002 TELNET Server Access 0 all 1 none 2 0 Lan 3 Wan gt 241100003 TELNET Server Secured IP address 0 0 0 0 241100004 FTP Server Port 21 241100005 FTP Server Access lt 0 all 1 none 2 0 Lan 3 Wan gt 241100006 FTP Server Secured IP address 0 0 0 0 241100007 WEB Server Port 80 241100008 WEB Server Access lt 0 all 1 none 2 0 Lan 3 Wan gt 241100009 WEB Server Secured IP address 0 0 0 0 P 2304R P1 Series User s Guide Appendix G Internal SPTGEN Command Examples The following are example Internal SPTGEN screens associated with the ZyXEL Device s command interpreter commands Table 138 Command Examples FIN FN PVA INPUT ci command for annex a wan adsl opencmd FIN FN PVA INPUT 990000001 ADSL OPMD O glite 1 ti 413 3 12 gdmt 3 multim ode gt ci command for annex B wan adsl opencmd FIN FN PVA INPU
88. 129 Security and Managemen 1225 iiec exe dest ben ae Ua E UD se N Ee ie se ei 135 Fire iss ES Di Ne ee ee oe n go SR EG Eg Gog 137 CUNT OE RE EE TUE 145 Saia ROUTE EE AE EA N 149 E reped AE gemere Nc n N N 153 Persie itg rc EM 165 Maintenance and Troubleshooting sissies iN Ea tle Fa d an ERE ERE RO RF Mna a ER PAP IE NA AR ON eg ER 173 UPIP eec E M over 175 EE AE MR EA EE AN 187 LE MA ee ou Ee nese ade a ee ge ee Ge RM cula 195 dies ER N EE EE OE N 209 dj le ie is ORE OE 215 Appendices and Ideas Ee AE RE ERK R Re ENE ER RGN ERG KUR EEN RR Re ENG ERK EE EER ENG EeN KG ERWE NERENS ReR SNARE KERR Ke EN 221 P 2304R P1 Series User s Guide Contents Overview P 2304R P1 Series User s Guide Table of Contents Table of Contents About This Ueers cnl eto m 3 Document rs pli o ES GE ON PER 4 cr quiera e EE EE N 6 GONtENtS COVE POW occu ee Ge ae ee N Ge ei ee a AA A 7 Table of ee LE EE EE EER N Re 9 kas da IE a acted 17 Bas NE oi EE EE EE OE EA OR EE aa 21 Part I Introduction and Wizard esee 25 Chapter 1 introducing the ZyXEL Devine KS iik ide ES REI LX Rant Ke GE HR Ko Ra RA ERE RM a i FRA I AREE dt 27 1 1 VolP Staton Gateway COVEFVIOM udi idu MR RE ORG RARE LA MIRA 27 1 2 vas 10 Manage die DEL DViCO qu 27 1 3 Good Habits for Managing the ZyXEL Devi issie rtt rera SS KERN GARS NEE Deed Eg SN Ek ds 27 AE iN Ee ren 28 ee Es AO EO EE EEN 29 1 8 1 M
89. 2304R P1 Series User s Guide 125 Chapter 10 Phone Figure 63 VoIP Phone Analog Phone Advanced Analog Phone 1 Voice Volume Control Speaking Volume 1 Min 7 Listening Volume 1 Min 7 Echo Cancellation G 168 Active Dialing Interval Select Dialing Interval Select 3 7 vAD Support Back Apply Reset Each field is described in the following table Table 53 VoIP Phone Analog Phone Advanced LABEL DESCRIPTION Analog Phone This field displays the phone port you see in this screen Voice Volume Control Speaking Volume Enter the loudness that the ZyXEL Device uses for speech that it sends to the peer device 1 is the quietest and 1 is the loudest Listening Volume Enter the loudness that the ZyXEL Device uses for speech that it receives from the peer device 1 is the quietest and 1 is the loudest Echo Cancellation G 168 Active Select this if you want to eliminate the echo caused by the sound of your voice reverberating in the telephone receiver while you talk Dialing Interval Select Dialing Interval Enter the number of seconds the ZyXEL Device should wait after you stop dialing Select numbers before it makes the phone call The value depends on how quickly you dial phone numbers If you select Active Immediate Dial in VoIP Phone Common you can press the pound key 7 to tell the ZyXEL Device to make the phone call immediate
90. 3 01 Praha 4 Modrany Cesk Republika P 2304R P1 Series User s Guide Appendix J Customer Support Denmark Support E mail support zyxel dk Sales E mail sales zyxel dk Telephone 45 39 55 07 00 Fax 45 39 55 07 07 Web Site www zyxel dk Regular Mail ZyXEL Communications A S Columbusvej 2860 Soeborg Denmark Finland Support E mail support zyxel fi Sales E mail sales zyxel fi Telephone 358 9 4780 8411 Fax 358 9 4780 8448 Web Site www zyxel fi Regular Mail ZyXEL Communications Oy Malminkaari 10 00700 Helsinki Finland France E mail info zyxel fr Telephone 33 4 72 52 97 97 Fax 33 4 72 52 19 20 Web Site www zyxel fr Regular Mail ZyXEL France 1 rue des Vergers Bat 1 C 69760 Limonest France Germany Support E mail support zyxel de Sales E mail sales zyxel de Telephone 49 2405 6909 0 Fax 49 2405 6909 99 Web Site www zyxel de Regular Mail ZyXEL Deutschland GmbH Adenauerstr 20 A2 D 52146 Wuerselen Germany Hungary Support E mail support zyxel hu Sales E mail info zyxel hu Telephone 36 1 3361649 Fax 36 1 3259100 Web Site www zyxel hu Regular Mail ZyXEL Hungary 48 Zoldlomb Str H 1025 Budapest Hungary Kazakhstan Support http zyxel kz support Sales E mail sales zyxel kz P 2304R P1 Series User s Guide Appendix J Customer Support Telephone 7 3272 590 698 Fax 7 3272 590 689 Web Site
91. 3 Navigation Panel Summary Use the menu items on the navigation panel to open screens to configure ZyXEL Device features The following tables describe each menu item LINK TAB FUNCTION Status This screen contains administrative and system related information Network WAN Internet Use this screen to set up ISP parameters IP addresses and MAC Connection addresses Advanced Use this screen to set up DNS RIP multicasting and Windows Networking for your WAN port Traffic Redirect Use this screen to specify up a backup gateway in case the main one is not available LAN IP Use this screen to set up your LAN s IP address and subnet mask DHCP Setup Use this screen to configure the ZyXEL Device s DHCP server and DNS server settings Static DHCP Use this screen to assign static IP addresses to MAC addresses Client List Use this screen to look at which network clients are using the DHCP server IP Alias Use this screen to partition your LAN interface into subnets Advanced Use this screen to set up RIP multicasting Any IP and Windows Networking for your LAN port NAT General Use this screen to enable and disable NAT features Port Forwarding Use this screen to forward traffic to specific IP addresses based on the destination port Trigger Port Use this screen to change your ZyXEL Device s trigger port settings ALG Use this screen to enable and disable the ZyXEL Device s ALG VoIP SIP SI
92. 3 Redirect datagrams for the Type of Service and Host 8 Echo 0 Echo message 11 Time Exceeded 0 Time to live exceeded in transit 1 Fragment reassembly time exceeded 12 Parameter Problem 0 Pointer indicates the error 13 Timestamp 0 Timestamp request message 14 Timestamp Reply 0 Timestamp reply message 15 Information Request 0 Information request message 16 Information Reply 0 Information reply message Table 103 SIP Logs LOG MESSAGE DESCRIPTION SIP Registration Success The listed SIP account was successfully registered with a SIP by SIP SIP Phone Number register server SIP Registration Fail by An attempt to register the listed SIP account with a SIP register SIP SIP Phone Number server was not successful SIP UnRegistration The listed SIP account s registration was deleted from the SIP Success by SIP SIP Phone register server Number SIP UnRegistration Fail An attempt to delete the listed SIP account s registration from the by SIP SIP Phone Number SIP register server failed 206 P 2304R P1 Series User s Guide Chapter 19 Logs Table 104 RTP Logs LOG MESSAGE Error RTP init fail DESCRIPTION The initialization of an RTP session failed A VoIP phone call failed because the RTP session could not be established Error Call fail RTP connect fail Error RTP connection The termination of an RTP session failed cannot close Tab
93. 3 The reply from the WAN goes to the ZyXEL Device 4 The ZyXEL Device then sends it to the computer on the LAN in Subnet 1 P 2304R P1 Series User s Guide Chapter 12 Firewall Figure 71 IP Alias LAN Subnet 1 WAN Internet Subnet 2 12 3 Firewall Screens 12 3 1 General Firewall Screen Use this screen to configure the basic settings for your firewall To access this screen click Security gt Firewall gt General Figure 72 Security gt Firewall gt General Firewall Setup M Enable Firewall O Bypass Triangle Route Make sure this check box is selected to have the firewall protect your LAN from Denial of Service DoS attacks Max NAT Firewall Session Per User 2048 Packet Direction SS LAN to WAN No Log 7 WAN to LAN No Log 7 Apply Reset Each field is described in the following table Table 58 Security gt Firewall gt General LABEL DESCRIPTION Enable Firewall Select this to activate the firewall The ZyXEL Device controls access and protects against Denial of Service DoS attacks when the firewall is activated Bypass Triangle Select this if you want to let some traffic from the WAN go directly to a computer in Route the LAN without passing through the ZyXEL Device See the appendices for more information about triangle route topology Max NAT Firewall Select the maximum number of NAT rules and firewall rules the ZyXEL Device Session Per User enforces at one time The ZyXEL
94. 30 Bandwidth Management Wizard gt General Information Bandwidth Management Wizard STEP 1 STEP2 ff General Information E nent to traffic going through the c the am L Active Managed Bandwidth kbps kbps The following table describes the labels in this screen Table 24 Bandwidth Management Wizard gt General Information LABEL DESCRIPTION Active Select this to enable bandwidth management Bandwidth management applies to all traffic flowing through the router Managed Enter the total amount of traffic the device can send to the WAN It is Bandwidth kbps recommended to set this speed to what the device connected to the WAN can handle For example set this field to 1000 kbps if a broadband device connected to the WAN port has a maximum speed of 1000 kbps This does not affect the total amount of traffic the device can send to the LAN See Management Bandwidth MGMT Summary to do this Back Click this to go to the previous screen Next Click this to go to the next screen Exit Click this to close this screen and return to the main screen P 2304R P1 Series User s Guide Chapter 4 Wizard Setup 4 4 3 Services Setup Figure 31 Bandwidth Management Wizard gt Services Setup Bandwidth Management Wizard STEP STEP 2 STEP 3 fi Services Setup Apply bandwidth management by ecting rom the lis XBox L
95. 304R P1 Series User s Guide Appendix G Internal SPTGEN Table 130 Menu 3 30500004 RTS Threshold 0 2432 2432 30500005 FRAG Threshold 256 2432 2432 30500006 WEP O DISABLE 0 1 64 bit WEP 2 128 bit WEP gt 30500007 Default Key lt 1 2 3 4 gt 0 30500008 WEP Keyl B 30500009 WEP Key2 30500010 WEP Key3 30500011 WEP Key4 30500012 Wlan Active O Disable 0 1 Enable gt 30500013 Wlan 4X Mode lt 0 Disable 0 1 Enable MENU 3 5 1 WLAN MAC ADDRESS FILTER FIN FN PVA INPUT 30501001 Mac Filter Active lt O No 0 1 Yes gt 30501002 Filter Action lt 0 Allow 0 1 Deny gt 30501003 Address 1 00 00 00 00 00 00 30501004 Address 2 00 00 00 00 00 00 30501005 Address 3 00 00 00 00 00 00 Continued 30501034 Address 32 00 00 00 00 00 00 Table 131 Menu 4 Internet Access Setup Menu 4 Internet Access Setup FI FN PVA INPUT 40000000 Configured lt O No s1 1 Yes 40000001 ISP lt O No 1 1 Yes gt 40000002 Active lt O No 1 1 Yes gt P 2304R P1 Series User s Guide 273 Appendix G Internal SPTGEN Table 131 Menu 4 Internet Access Setup continued
96. 5 255 192 26 1024 62 T 255 255 255 224 27 2048 30 12 255 255 255 240 28 4096 14 13 255 255 255 248 29 8192 6 P 2304R P1 Series User s Guide Appendix D IP Addresses and Subnetting Table 124 16 bit Network Number Subnet Planning continued NO BORROWED NO HOSTS PER HOST BITS SUBNET MASK NO SUBNETS SUBNET 14 255 255 255 252 30 16384 2 15 255 255 255 254 31 32768 1 Configuring IP Addresses Where you obtain your network number depends on your particular situation If the ISP or your network administrator assigns you a block of registered IP addresses follow their instructions in selecting the IP addresses and the subnet mask Ifthe ISP did not explicitly give you an IP network number then most likely you have a single user account and the ISP will assign you a dynamic IP address when the connection is established If this is the case it is recommended that you select a network number from 192 168 0 0 to 192 168 255 0 The Internet Assigned Number Authority LANA reserved this block of addresses specifically for private use please do not use any other number unless you are told otherwise You must also enable Network Address Translation NAT on the ZyXEL Device Once you have decided on the network number pick an IP address for your ZyXEL Device that is easy to remember for instance 192 168 1 1 but make sure that no other device on your network is using
97. AGE DESCRIPTION Firewall default policy lt code Sd gt ICMP ICMP access matched the default policy and was lt Packet Direction gt lt type d gt blocked or forwarded according to the user s setting lt type d gt lt code d gt Firewall rule NOT match lt Packet Direction gt lt rule d gt ICMP ICMP access matched or didn t match a firewall rule denoted by its number and was blocked or forwarded according to the rule ICMP Triangle route packet forwarded The firewall allowed a triangle route session to pass through blocked ICMP Packet without a NAT table entry The router blocked a packet that didn t have a corresponding NAT table entry ICMP Unsupported out of order ICMP The firewall does not support this kind of ICMP packets or the ICMP packets are out of order Router reply ICMP packet ICMP The router sent an ICMP reply packet to the sender Table 96 CDR Logs LOG MESSAGE DESCRIPTION dev x ch x Ss board d line d channel d call d Ss C01 Outgoing Call The router received the setup requirements for a call call is the reference count number of the call dev is the device type 3 is for dial up 6 is for PPPoE channel or ch is the call channel ID For example board 0 line 0 channel 0 call 3 C01 Outgoing Call dev 6 ch 0 Means the router has dialed to the PPPoE server 3 times P
98. ALG 8 2 NAT Screens 8 2 1 NAT General Screen Use this screen to enable and disable NAT and to allocate memory for NAT and firewall rules To access this screen click Network gt NAT gt General Figure 49 Network gt NAT gt General General NAT Setup M Enable Network Address Translation Max NAT Firewall Session Per User 2048 Apply P 2304R P1 Series User s Guide Chapter 8 NAT Each field is described in the following table Table 41 Network gt NAT gt General LABEL DESCRIPTION NAT Setup Enable Network Select this if you want to use port forwarding trigger ports or any of the ALG The Address more features you enable the more memory you should allocate in Max NAT Translation Firewall Session Per User Max NAT Firewall Session Per User Select the maximum number of NAT rules and firewall rules the ZyXEL Device enforces at one time The ZyXEL Device automatically allocates memory for the maximum number of rules regardless of whether or not there is a rule to enforce This is the same number you enter in Security Firewall General When computers use peer to peer applications such as file sharing applications they may use a large number of NAT sessions If you do not limit the number of NAT sessions a single client can establish this can result in all of the available NAT sessions being used In this case no additional NAT sessions can be established and users may not be able
99. AN and the IGA Inside Global Address is the source address on the WAN For incoming packets the ILA is the destination address on the LAN and the IGA is the destination address on the WAN NAT maps private local IP addresses to globally unique ones required for communication with hosts on other networks It replaces the original IP source address and TCP or UDP source port numbers for Many to One and Many to Many Overload NAT mapping in each packet and then forwards it to the Internet The ZyXEL Device keeps track of the original addresses and port numbers so incoming reply packets can have their original values restored The following figure illustrates this Figure 153 How NAT Works NAT Table LAN Inside Local Inside Global WAN IP Address IP Address 192 168 1 10 IGA 1 192 168 1 13 192 168 1 11 IGA 2 192 168 1 12 IGA 3 EE 192 168 1 13 IGA 4 192 168 1 12 CY m Inside Local 192 168 1 11 SS Addresses ILA 192 168 1 10 Inside Global Addresses IGA P 2304R P1 Series User s Guide Appendix F NAT NAT Application The following figure illustrates a possible NAT application where three inside LANs logical LANs using IP Alias behind the ZyXEL Device can communicate with three distinct WAN networks More examples follow at the end of this chapter Figure 154 NAT Application With IP Alias LAN1 192 168 1 X Server in Network Server Admin Network Admin 192 168 1 1 I
100. AO EE N RE EE TASE E 190 1a 2 lime Seting SPORE aA aN 192 Chapter 19 Eo EE N ee ee OE ee 195 ER es ER ER OR ER EE NA EE wea 195 AE RA AE AO EE EE EG 195 TEE 1 2 vals LOGS T 196 T es dos oa ON rd wt A 197 19 21 Log Viewer SEGE siese RSG Re EE RR EK Reed ASe Gee Gee Rek sd GE ERG EE Eed 197 Es Ee ME Ee ei GR 198 19 9 Log Message Dasein GRE emm 200 Chapter 20 Esel ORE OR EE AE EE EG EE 209 20T TOE OVON ON nosni RE EE ER ER EN 209 AR REK EMS RE N OR RE EL N 209 20 2 cric RO desdaains sd oraait 209 POM I Fima oE e 209 20 2 2 Firngisware Upload SOHBIIB RE RES Ee EG ER EE EE Ee GE ERI e ido adii tip ene ER 210 20 2 3 ee iis ede M 211 20 24 Restore Configuration Screens secet kt LA RE a a ERE D gee E Re Yeas 212 Pd ESEL jer 213 Chapter 21 Troubleshooting Ee ERK RARR GER RA KAR GE KA RA KERR AR LEA Rd RE SR KA GRA Red ROM CRI NU KA Ke GN Ne 215 21 1 Power Hardware Connections and WEDS 535 a He N EG Ge ek de d e xia Sid ie 215 41 d ZuSEL Device Access and LOG ERGER KS E PEPH e SEHE asin 216 PANE Tp ACCESS T I E m LM 217 214 Phone Cals and VolP RN e m Fenner onan 219 Part VI Appendices and Index esses 221 Appendix A Product Specifications ccccccccecsssssssecceceeeeceseeseeeescececeesesauseasececeeseseusaeaees 223 Appendix B Pop up Windows JavaScripts and Java Permissions ssssss 229 Appendix C
101. C address of the computer to which the ZyXEL Device assigned the IP address Reserve Select this if you always want to assign this IP address to this MAC address Then click Apply The ZyXEL Device creates an entry in the LAN Static DHCP screen See Section 7 2 2 on page 90 Apply Click this to save your changes and to apply them to the ZyXEL Device Reset Click this to set every field in this screen to its last saved value 7 2 5 LAN IP Alias Screen Use this screen to add subnets on the LAN port You can also control what routing information is sent and received by each subnet To access this screen click Network gt LAN gt IP Alias P 2304R P1 Series User s Guide Chapter 7 LAN Figure 45 Network gt LAN gt IP Alias IP Alias 1 IP Alias 1 IP Address ooo IP Subnet Mask ooo RIP Direction None F RIP Version Rei 7 IP Alias 2 IP Alias 2 IP Address IP Subnet Mask RIP Direction RIP Version Reset Each field is described in the following table Table 39 Network gt LAN gt IP Alias LABEL DESCRIPTION IP Alias 1 IP Alias 1 Select this to add the specified subnet to the LAN port IP Address Enter the IP address of the ZyXEL Device on the subnet IP Subnet Mask Enter the subnet mask of the subnet RIP Direction Use this field to control how much routing information the ZyXEL Device sends and receives on the subnet None The ZyXEL Device
102. Chapter 17 UPnP Figure 100 System Tray Icon J Internet Connection is now connected Click here For more information 3 upnp2 Paint Cs BP 6 43PM s 7 Double click on the icon to display your current Internet connection status Figure 101 Internet Connection Status Internet Connection Status General Internet Gateway Status Connected Duration 00 00 56 Speed 100 0 Mbps Activity Internet Internet Gateway My Computer amp Packets Sent 8 Received 5 943 17 2 2 2 Web Configurator Easy Access With UPnP you can access the web based configurator on the ZyXEL Device without finding out the IP address of the ZyXEL Device first This comes helpful if you do not know the IP address of the ZyXEL Device Follow the steps below to access the web configurator 1 Click Start and then Control Panel 2 Double click Network Connections 3 Select My Network Places under Other Places P 2304R P1 Series User s Guide Chapter 17 UPnP Figure 102 Network Connections Network Connections File Edit View Favorites Tools Advanced Help Q Back 2 pe Search Key Folders EF Address Network Connections Internet Gateway Network Tasks Internet Connection 5 Create a new connection Disabled Set up a home or small Internet Connection office network LAN or High Speed Internet See Also t Local Area Connection dy Network Troubleshooter Enabled
103. Complete Success VoIP Setup Congratulation You have completed the VoIP setup Press Finish button te s wizard or click the following link to open other pages Ret o Wizard Main Page G vanced Setup page The following table describes the labels in this screen Table 21 VoIP Setup Wizard gt Registration Complete Success LABEL DESCRIPTION Return to Wizard Click this to open the main wizard screen See Section 4 1 on page 51 Main Page Go to Advanced Click this to close this screen and return to the main screen Setup page Finish Click this to close this screen and return to the main screen If the ZyXEL Device cannot register your SIP account s see the Quick Start Guide for troubleshooting suggestions P 2304R P1 Series User s Guide Chapter 4 Wizard Setup Figure 28 VoIP Setup Wizard gt Registration Complete Fail VoIP Setup f VoIP Configuration tion Failed Please make sure t hernet cable is connected ss Exit button to The following table describes the labels in this screen Table 22 VoIP Setup Wizard gt Registration Complete Fail LABEL DESCRIPTION lt Back Click this to go to the previous screen Register Again Click this if you want the ZyXEL Device to try to register your SIP account s again Exit Click this to close this screen and return to the main screen The ZyXEL Device saves the in
104. Connection Wizard BS Use this wizard to set up your Internet connection See Chapter 6 on page 75 for more information You cannot use the Connection Wizard to set up your Internet connection in the following situations You subscribe to a Roadrunner service You use PPPoE encapsulation and the remote server cannot be discovered automatically In these cases you must use the screens discussed in Chapter 6 on page 75 Some ISPs such as Telstra send UDP heartbeat packets to verify that the customer is still online In this case you have to create a WAN to LAN firewall rule for those packets Contact your ISP to find the correct port number P 2304R P1 Series User s Guide Chapter 4 Wizard Setup 4 2 1 Welcome Figure 16 Connection Wizard Welcome Connection Wizard Welcome to the ZyXEL Connection Wizard tio e multiple p vill take you through the following steps n Information onfiguratic The following table describes the labels in this screen Table 11 Connection Wizard gt Welcome LABEL DESCRIPTION lt Back Click this to go to the previous screen Next gt Click this to go to the next screen Exit Click this to close this screen and return to the main screen 4 2 2 System Information Usually you should just click Next in this screen P 2304R P1 Series User s Guide Chapter 4 Wizard Setup Figure 17 Connection
105. EE KERSE EG ener N GE Be Gee GE Ge nana 252 Figure 152 Subnetting Example After Subnetting iss mtr ret BERG de rt eod ine 253 Figure Toa FRON IA icq ee 260 Figure 154 NAT Application With IP Alias e M 261 Figure 155 Full Cone NAT Example esse esse Ke Fan Etna ERR ke EKS ER ag RR PARRA ERR RA En ARA 263 Figure 155 Resmicted Cone NAT EXSITil tenes niihin an RRR 264 Figure 157 Port Restricted Cone NAT Example 5 5 rra tnnt roba est bt d i nh d EGGO ENS sees 265 Foure 10 nw ne NAT EE OE OR RE RE EO ENERE 265 Figure 159 Configuration Text File Format Column Descriptions ee ee ee ee RA ee ee 267 Figure 160 Invalid Parameter Entered Command Line Example iese sesse ke ee ee ee ee ee ee de ee ee ee 268 Figure 161 Valid Parameter Entered Command Line Example sesse sesse ee se ee se ee de ee ee ee dd Ee ee 268 Figure 162 Internal SPTGEN FTP Download Exempla 22 tr eet esse Eb Ke SEEN GEES EN RENE GEEN REEN 269 Figure 163 Intemal SPTGEN FTP Upload Example 42 2 rt Nes SAKE SN GER EE EN Ed GEE Gee Ge Ke ED KA Dek EE EA 269 P 2304R P1 Series User s Guide List of Tables List of Tables Bibi T LED DESERGIDRS Wc pL 28 Table 2 Web Configurator Icons in the Title Bar eiie e rt ek Ged nena nk N eke Si ee dd 37 Table 3 Navigation Panel SUMMATY AE N EE 37 jr AE SNS PSN 42 TOETAN IE GEE EG SG Ee EC 45 Eris GE ale RE EE EO RE RE AR RE EE 45 le oo ee
106. EVER A ESI RA 168 TE EA EEN e mater errr prec ener DE Ee Gee EG Ge Ge OG Ge GE ee amr meer GESE ie 168 OSA neuer C 168 pos udis MT cm 169 jm oll Eco eec S 170 pew ecg By oes tree 171 1620 SOULS ERIN NP 171 Part V Maintenance and Troubleshooting 173 Chapter 17 E ila TCI OD TTA 175 17 1 Ingoducmg Universal Plug and Play EER eut SEER ee buo eq dup eee 175 173 07 How del know if m weg UPIP 1 5 acci emt a SNR REC ES Ke Ge Se kig ge 175 E EISE EE RE IM 175 EA oe Tuan Wih UPAP OR 175 17 14 HERE abt SO EL voos EE Ente ter ee Re tend 176 Tia IEW Ex AN BES se ee N ee GN De Ge lutum ete ia 176 17 21 Installing UPnP in Windows Example 22 sssssEisgs EE ed ANKER eek ig Eb ee GES EER 176 17 2 2 Using UPnP in Windows XP Example sussa see su Eise EE ENE EES SN SAKEREG ENS etti ea 179 Tha UPR ER Tm 185 Chapter 18 IE EE Ee EE RE EE DU EE 187 RES AE ML OVAN EE EE d 187 191 1 E A Li OO EE RO N EE A tere 187 19 1 2 Doman Name AR RE EE Ee 187 18 1 3 DNS Server Address Assignment ees see AKA BEREA LAAN EE ERA AK AA Be RA aa AA Be RA aa AAR ee 187 RE AE is AE Lt T 188 19 1 5 Pre defined NTP Time Servers LIBE esiisad 188 OLO RoS mna NE os RU T TT 189 rcu A 189 P 2304R P1 Series User s Guide Table of Contents ARE EE he n ei EE OE EE 189 19 22 Dynamic DNS GID
107. GMP The router blocked a packet that didn t have a corresponding NAT table entry message TCP Router sent blocked web site The router sent a message to notify a user that the router blocked access to a web site that the user requested Exceed maximum sessions per host 96d The device blocked a session because the host s connections exceeded the maximum sessions per host Firewall allowed a packet that matched a NAT session TCP UDP A packet from the WAN TCP or UDP matched a cone NAT session and the device forwarded it to the LAN Table 93 TCP Reset Logs LOG MESSAGE DESCRIPTION Under SYN flood attack sent TCP RST The router sent a TCP reset packet when a host was under a SYN flood attack the TCP incomplete count is per destination host Exceed TCP MAX incomplete sent TCP RST The router sent a TCP reset packet when the number of TCP incomplete connections exceeded the user configured threshold the TCP incomplete count is per destination host Peer TCP state out of order sent TCP RST The router sent a TCP reset packet when a TCP connection state was out of order Note The firewall refers to RFC793 Figure 6 to check the TCP state Firewall session time out sent TCP RST The router sent a TCP reset packet when a dynamic firewall session timed out The default timeout values are as follows ICMP idle timeout 3 minutes UDP idle timeo
108. HCP Table m 45 Figure 12 vel S o m 46 Figure TEN MOST MONO aori co Se a eoe edis vend tace n uM Eois Den ER AR CHE MD A 48 Figure MI nca Mem 49 Figure 19 Main Wizard n i i NETTE TO Tm 51 Figure T6 Cannecion Wizard VVOIGOWIBE Luoncosadeke tiep GE EG GEE EG PG GE DU Ge EE SG GE BLUR 53 Figure 17 Connection Wizard gt Systemi NOTA iss reni reet GEE n ende e rax i M Re Ges e R 54 Figure 18 Connection Wizard gt ISP Parameters Ethernet ss sees se ee ee Re ke ee EE Ee Ke de ee Ee ke ek ee kk 55 Figure 19 Connection Wizard gt ISP Parameters PPPOE sissies seer sesse Ep De Gees SERE tetro DE GE BES GEE ERG G Be FEE ER Ee 56 Figure ZU Connection Wizard gt IP AGdFGSE assesseer ES KERE DEE ES bei ES Pet GR ENE EG Se GE pe Gesk PR AG N pe 57 Figure 21 Connection Wizard gt IP Address Ethernet ieke ESE ERGE GE EES AAS GE ES GR GER BEE ERG AE GE EES Gee EE Ee ee 58 Figure 22 Connection Wizard gt IP Address PPPOE siisresdes seer esse see EN ESE Re VEG KEER GEE EER ges Bee GE Se kke 59 Figure 23 Connection Wizard gt MAC Address ies ss kes EE Sek Ee AGE ERA Ke ek AE Re a eua RE Ee Ge Ke a ota a 4a a aoa ek ek ek ee 60 Figure 24 Conneccion Wizard FSI iese EES GEE N GE bebo ee eo Ge ee GE De Eb UR 61 Figure 25 VolP Setup Wizard gt SIP SENSE asses ES EENS RR LASS BRE SS EERS ER SS bee eed WE ds SG EE een 62 Figure 26 VolP Setup Wizard gt Registration Test es
109. Meni 1 Gonera See T 270 D EMI M 270 Table 131 Menu 4 Internet Access Sep isses enr ker SE a Ire tuu GAS RANG SA aen Rd Sk ENE Sek ERE Faq ed Ke NA 273 Table 1S 2M IZ SE EE ee ht ieee 275 Table 133 Monu 13 SUA Server SOUP eiie GE Hp BA rd las aci usd Gentes 275 Table 134 Mens 21 1 Filter Sel E 277 Table 135 Menu 21 1 Filer lr M 278 Table 136 Menu Eer Ed OO EE A 280 Table 137 Menu 24 11 Remote Management Control essseeeessseseesessesrssrnssseeenneenrinnssessrnneerinensseennnneens 281 Table 136 Command Examples dese GEES Ee Ee Ge Ge E A ENN iniaa N OD ONDAS 282 Table 139 Examples of Services iuueni eed pl am ek Lp bis ee aaa anad ei ed un Ln ed 283 P 2304R P1 Series User s Guide PART I Introduction and Wizard Introducing the ZyXEL Device 27 Introducing the Web Configurator 33 Status Screens 41 Wizard Setup 51 Bridge Mode 71 Introducing the ZyXEL Device This chapter introduces the main features and applications of the ZyXEL Device 1 1 VoIP Station Gateway Overview The P 2304R P1 VoIP Voice over IP station gateway lets you use traditional analog telephones to make telephone calls over the Internet The ZyXEL Device uses SIP Session Initiation Protocol an internationally recognized standard for implementing VoIP You can call any landline or mobile telephone as well as IP telephones
110. Networking Components 4 The Windows Optional Networking Components Wizard window displays Select Networking Service in the Components selection box and click Details P 2304R P1 Series User s Guide Chapter 17 UPnP Figure 94 Windows Optional Networking Components Wizard Windows Optional Networking Components Wizard Windows Components You can add or remove components of Windows XP To add or remove a component click the checkbox 4 shaded box means that only part of the component will be installed To see what s included in a component click Details Components L1 Management and Monitoring Tools M lt Networking S 0 3 MB L zu Other Network File and Print Services Description Contains a variety of specialized network related services and protocols Total disk space required 0 0 MB Desi Space available on disk 260 9 MB Deis 5 Inthe Networking Services window select the Universal Plug and Play check box Figure 95 Networking Services Networking Services To add or remove a component click the check box amp shaded box means that only part of the component will be installed To see what s included in a component click Details Subcomponents of Networking Services O RIP Listener 0 0 MB l Simple TCP IP Services 0 0 MB g Universal Plug and Play 0 2 MB Description Allows your computer to discover and control Universal Plug and Play devices
111. P Phone Book gt Speed Dial iS eerte ebbe eI Vou EE FERE DU enia aa ESME GE EE 132 Table 58 Securiiy gt Firewall gt GEHOIBL ER Rt bd d eg aa dac pa tnodo dl do done 141 Table 59 Secuniy Pddi la 60e EERS DORRE Bek ARE S DTE 142 Table 60 Secunty gt Content Filter FIO lt issrsestscescereccisauesceucsanmeseshacanceecenaiwpredtesaieuiiactaaeaniaseareeyadace 146 Table BT SecWiny gt Contem Filter gt Schedule uscire ke oko Se Ke GE NG d dei gs eaa kn GR Re Kent 147 Table 62 Management gt Static Route gt IP Static Route iss ee ee ee Re ER EA Re Re AA ee ee ee ee ee 150 Table 63 Management gt Static Route gt IP Static Route gt Edit 151 Table 64 Application and Subnet based Bandwidth Management Example iis ee ese ee ee ee 154 Table 65 Maximize Bandwidth Usage Example ss ss Es EER ee GENE EER SWERE ttu GEREG NE GR UR d eqni aUe 155 Table 66 Priority based Allotment of Unused and Unbudgeted Bandwidth Example 156 Table 67 Fairness based Allotment of Unused and Unbudgeted Bandwidth Example 156 Table 68 Bandwidth Borrowing Example ies seg GESE GEE EED EER SU REGSES REGSES GER rl Ese eek FINE eke 157 Table 69 Over Allotment of Bandwidth Example iii see ee ee ee GR EA Re Re ee ee ee ee ee ee ee AA Re Re ee ee ee ee 158 Table 70 Management gt Bandwidth MGMT gt Summary iis esse ees AAR ee ee AA Ee EE de ee Re ee Ke Ee ee na 159 Table 71 Management gt Ba
112. P 1 IGA 1 Corporation B m LH LAN2 192 168 2 X ees Network Server Sales 192 168 2 1 NT Server 192 168 2 1 b Corporation A NT Server 192 168 1 1 E m Om M Server in y Sales Network m pran n IP 2 IGA 2 Serverin R amp D Network LANS 192 168 3 X IP 3 IGA 3 Network Server R amp D 192 168 3 1 iS T WAN Addresses LAN Addresses Default IPs m SEK IGA1 es gt 192 168 1 1 NT Sarvar aie IGA a 192 168 2 1 eer IGA 3 192 168 3 1 NAT Mapping Types NAT supports five types of IP port mapping They are One to One In One to One mode the ZyXEL Device maps one local IP address to one global IP address Many to One In Many to One mode the ZyXEL Device maps multiple local IP addresses to one global IP address This is equivalent to SUA 1 e PAT port address translation ZyXEL s Single User Account feature the SUA Only option Many to Many Overload In Many to Many Overload mode the ZyXEL Device maps the multiple local IP addresses to shared global IP addresses Many One to One In Many One to One mode the ZyXEL Device maps each local IP address to a unique global IP address Server This type allows you to specify inside servers of different services behind the NAT to be accessible to the outside world P 2304R P1 Series User s Guide Appendix F NAT BES Port numbers do not change for One to
113. P 2304R P1 Series VoIP Station Gateway User s Guide Version 3 60 ZyXEL www zyxel com About This User s Guide About This User s Guide Intended Audience This manual is intended for people who want to configure the ZyXEL Device using the web configurator You should have at least a basic knowledge of TCP IP networking concepts and topology Related Documentation Quick Start Guide The Quick Start Guide is designed to help you get up and running right away It contains information on setting up your network and configuring for Internet access Web Configurator Online Help Embedded web help for descriptions of individual screens and supplementary information BES It is recommended you use the web configurator to configure the ZyXEL Device Supporting Disk Refer to the included CD for support documents ZyXEL Web Site Please refer to www zyxel com for additional support documentation and product certifications User Guide Feedback Help us help you Send all User Guide related comments questions or suggestions for improvement to the following address or use e mail instead Thank you The Technical Writing Team ZyXEL Communications Corp 6 Innovation Road II Science Based Industrial Park Hsinchu 300 Taiwan E mail techwriters zyxel com tw P 2304R P1 Series User s Guide 3 Document Conventions Document Conventions Warnings and Notes These are how warnings and notes
114. P 2304R P1 Series User s Guide Chapter 3 Status Screens Table 4 Status Screen LABEL DESCRIPTION Rate If the interface uses Ethernet encapsulation this column displays the port speed and the Ethernet duplex setting Duplex settings are Full The ZyXEL Device is using full duplex Ethernet Half The ZyXEL Device is using half duplex Ethernet You cannot change the Ethernet duplex setting in the ZyXEL Device If this interface uses PPPoE encapsulation this column displays the port speed and the status of the call Down The connection is not available Dial The ZyXEL Device is making the call Idle The call is connected Drop The ZyXEL Device is ending the call The LAN interface always uses Ethernet encapsulation You can change the encapsulation of the WAN interface in Network gt WAN gt Internet Connection Summary Any IP Table Click Details to open the Any IP Table window See Section 3 2 on page 44 DHCP Table Click Details to open the DHCP Table window See Section 3 3 on page 45 VoIP Statistics Click Details to open the VoIP Statistics window See Section 3 4 on page 46 BW MGMT Click Details to open the BW MGMT Monitor window See Section 3 5 on Monitor page 47 Packet Statistics Click Details to open the Packet Statistics window See Section 3 6 on page 49 VoIP Status Account This column displays each SIP account in the ZyXEL Device Registration T
115. P 2304R P1 Series User s Guide 235 Appendix C Setting up Your Computer s IP Address Figure 129 Windows 95 98 Me Network Configuration Network AE LPR for TCP IP Printing 3Com EtherLink 10 100 PCI TX NIC 3C905B TX Dial Up Adapter USB Fast Ethernet Adapter Y TCP P gt 3Com EtherLink 10 100 PCI TX NIC Installing Components The Network window Configuration tab displays a list of installed components You need a network adapter the TCP IP protocol and Client for Microsoft Networks If you need the adapter 1 Inthe Network window click Add 2 Select Adapter and then click Add 3 Select the manufacturer and model of your network adapter and then click OK If you need TCP IP 1 Inthe Network window click Add 2 Select Protocol and then click Add 3 Select Microsoft from the list of manufacturers 4 Select TCP IP from the list of network protocols and then click OK If you need Client for Microsoft Networks 1 Click Add 2 Select Client and then click Add 3 Select Microsoft from the list of manufacturers 4 Select Client for Microsoft Networks from the list of network clients and then click OK 5 Restart your computer so the changes you made take effect P 2304R P1 Series User s Guide Appendix C Setting up Your Computer s IP Address Configuring 1 Inthe Network window Configuration tab select your network adapter s TCP IP entry and click Properties 2 Click the IP Address tab f your IP addr
116. P Settings Use this screen to configure your ZyXEL Device s Voice over IP settings QoS Use this screen to configure your ZyXEL Device s Quality of Service settings P 2304R P1 Series User s Guide Chapter 2 Introducing the Web Configurator Table 3 Navigation Panel Summary LINK TAB FUNCTION Phone Analog Phone Use this screen to set up which SIP accounts use which phone ports for incoming and outgoing calls Common Use this screen to configure general phone port settings Region Use this screen to set up regional and call service settings Phone Book Incoming Call Use this screen to set up call forwarding rules Policy Speed Dial Use this screen to configure speed dial numbers for SIP phone numbers Security Firewall General Use this screen to activate deactivate the firewall and log packets related to firewall rules Services Use this screen to enable service blocking LAN to WAN firewall rules Content Filter Filter Use this screen to block sites containing certain keywords in the URL Schedule Use this screen to set the days and times for the ZyXEL Device to perform content filtering Management Static Route IP Static Route Use this screen to configure IP static routes Bandwidth Summary Use this screen to enable bandwidth management on an interface and set MGMT the maximum allowed bandwidth and scheduler for t
117. PPLAESA PEE dee 83 zd AD de Dame N EE ER EO EG 88 Figure 41 Network gt LAN gt IP 89 Figure 42 Network LAN DEEP Getuies se ed se vsus dubie Don booa lew o ped rn LH a n inom 90 Figure 43 Network LAN Silale DHCP oe oe EE Ge Ge bebe v etr tob Prae HEBR RA GE Du ed 92 Figure 44 Network gt LAN PI SE M 93 Figure 45 Newark gt LAN ER Ert a ct ER P ad acer ee BRE da d Rp 94 Figure 46 Network gt LAN gt Advanced m 95 Figure 47 Multiple Servers Behind NAT Example iis KEER GN Rg eia hors a ka th rd GR Ge ted ads 98 Figure 48 Trigger Port Forwarding Process Example iss sesse iss ede ee Ee dee ee EE Se kk Gee en Se aa enun nth hann nna aae 98 Figure 49 Network gt NAT gt General M 99 Figure 50 Network NAT Port Forwarding ccsiisissicxssvssssazgstinsnnsesvvsusadeverssosdagolsnwmnasevvanseseriauangsls nee 101 Figure 51 Network gt NAT gt Poit Forwarding gt Edif ss Re ee EK SG EG De ke Ge GE Ek Ge EE ie 102 Figure 52 Network gt NAT gt Trigger POE sussie sesse sr SR NEE ques GEE eds AE MR GENE BENE NE Ya aba Ge BEE dd ee Feb ede be Ee 103 Figure 53 Network gt MAT gt ALG Les asterisk B pads Veg n pod Vie aM SS de 104 ES CE SIF USS A 4 I e 109 EE SS SIF FON Set c HM 109 Figure D0 SIF Redirect Senol De 110 Figure 37 STUN EE EE a 111
118. Properties Example sesse sesse ese ee ee ee 184 el Me Eg ie EA inde T OE RE RE N 185 Figure 106 Maintenance gt System gt General 22i se ere ad eria ed es a id a a de ad 189 Figure 107 Maintenance gt System gt Dynamic DNS eese eese ennt Ke Re ke ee ke 191 Figure 108 Maintenance gt System gt Time Setting EES EE EE EES eerte retten GE GEE EER EE Ge ee EN ee 192 Figure TOS Maintenance gt Logs gt View LOG siese sees ee gees ERI LEE RR EE A Lea oe ges LH DL ER 197 Figure TTO Maintenance gt Logs Log Setiings ss pete te pev RENE GEGEE Ee Nr EKG N GE ee GE Ge 198 Figure 111 Maintenance gt Tools gt Firmware iss sesse ees ku etae etta uui sob ta genie cans emu sott see SKA AGE EES Ee 210 Figure 112 Firmware Upload In Process cns ox phat rtp E pna ad ri dad n pa Ec gd 210 Figure 113 Network Temporarily Disconnected ske S EES GER OS EE vw rH ur GE EES iS 211 Figure 174 Fimwsre UPd ENOT OE EE Y 211 Figure 115 Maintenance gt Tools gt Configuration sesse ena tia SERE AE EE EK N kn b Cine ERR cd 211 Figure 116 Configuration Upload Successful issie reote here ttt reet rk btt de erae ddr VANG GEE ket Ged Ee Ke Ee 212 Figure 117 Network Temporarily Disconnected sd ss ESE Ne Wed es VEG ek aed ex dea aia 213 Figure TIS Comiguraton Upload ENOT rmm 213 Figure 119 Maintenance gt Tools gt BEBE saiccssscccstacsaseneaavissercauavesuad Puma eue Gee SEEN ee GE EEI Gees ek Rii 213 Figure 120 Maintenance gt
119. Series User s Guide Chapter 17 UPnP 17 3 UPnP Screen Use this screen to set up UPnP in your ZyXEL Device To access this screen click Management gt UPnP Figure 105 Management gt UPnP General UPnP Setup Device Name ZyXEL P 2302RL P1 Internet Sharing Gateway Enable the Universal Plug and Play UPnP Feature F Allow users to make configuration changes through UPnP F allow UPnP to pass through Firewall Note For UPnP to function normally the HTTP service must be available for LAN computers using UPnP Reset Each field is described in the following table Table 81 Management UPnP Universal Plug and Play UPnP Feature LABEL DESCRIPTION Device Name This field identifies your device in UPnP applications Enable the Select this to activate UPnP Be aware that anyone could use a UPnP application to open the web configurator s login screen without entering the ZyXEL Device s IP address You still have to enter the password however Allow users to make configuration changes through UPnP Select this to allow UPnP enabled applications to automatically configure the ZyXEL Device so that they can communicate through the ZyXEL Device For example using NAT traversal UPnP applications automatically reserve a NAT forwarding port in order to communicate with another UPnP enabled device this eliminates the need to manually configure port forwarding for the UPnP enabled application
120. Session Initiation Protocol SIP is an application layer control signaling protocol that handles the setting up altering and tearing down of voice and multimedia sessions over the Internet SIP signaling is separate from the media for which it handles sessions The media that is exchanged during the session can use a different path from that of the signaling SIP handles telephone calls and can interface with traditional circuit switched telephone networks 9 1 3 SIP Identities A SIP account uses an identity sometimes referred to as a SIP address A complete SIP identity is called a SIP URI Uniform Resource Identifier A SIP account s URI identifies the SIP account in a way similar to the way an e mail address identifies an e mail account The format of a SIP identity is SIP Number SIP Service Domain 9 1 3 1 SIP Number The SIP number is the part of the SIP URI that comes before the symbol A SIP number can use letters like in an e mail address johndoe your ITSP com for example or numbers like a telephone number 1122334455 VoIP provider com for example P 2304R P1 Series User s Guide Chapter 9 SIP 9 1 3 2 SIP Service Domain The SIP service domain of the VoIP service provider the company that lets you make phone calls over the Internet is the domain name in a SIP URI For example if the SIP address is 1122334455 a VoIP provider com then VoIP provider com is the SIP service domain 9 1 4 SIP Call P
121. Set 1 Rule 2 Act Not Match lt 1 check 1 next 2 forward 3 drop gt Table 135 Menu 21 1 Filer Set 2 Menu 21 1 filter set 2 FIN FN PVA INPUT 210200001 Filter Set 2 Nam Str NetBIOS WAN Menu 21 1 2 1 Filter set 2 rule 1 FIN FN PVA INPUT 278 P 2304R P1 Series User s Guide Appendix G Internal SPTGEN Table 135 Menu 21 1 Filer Set 2 continued 210201001 IP Filter Set 2 Rule 1 Type 0 none 2 TCP s2 IP 210201002 IP Filter Set 2 Rule 1 Active lt 0 No 1 Yes gt 1 210201003 IP Filter Set 2 Rule 1 Protocol 6 210201004 IP Filter Set 2 Rule 1 Dest IP 0 0 0 0 address 210201005 IP Filter Set 2 Rule 1 Dest 0 Subnet Mask 210201006 IP Filter Set 2 Rule 1 Dest Port 137 210201007 IP Filter Set 2 Rule 1 Dest Port lt 0 none 1 equal 1 Comp 2 not equal 3 less 4 g reater gt 210201008 IP Filter Set 2 Rule 1 Src IP 0 0 0 0 address 210201009 IP Filter Set 2 Rule 1 Src Subnet 0 Mask 210201010 IP Filter Set 2 Rule 1 Src Port 0 210201011 IP Filter Set 2 Rule 1 Src Port 0 none 1 equal 0 Comp 2 not equal 3 less 4 g reater gt 210201013 IP Filter Set 2 Rule 1 Act Match lt 1 check 3 next 2 forward 3 drop gt 210201014 IP Fil
122. Setting up Your Computer s IP Address ese RH 235 Appendix D IP Addresses and Subnetting ie ee ee HH 249 Appendix E SIF Passthrough EER ES ENG OS es ERR RE ER ke HR Ee RR MUERE SR SR RR ee 257 P 2304R P1 Series User s Guide 15 Table of Contents Cao oz IUD SR Ei p E ee ee rere RR MEME ERE 259 Appendix G Interial SE TIGE sesse EE Ee EE Rak ppc OE ER Ke dk eN RR KDR Sk GR Ge ee ke PRO Ee 267 Appendix aec rir e 283 Appendix Legal Infafmatef esse EE EE EER ER SEE enun tn EER km haha hk E RE pna E ek BE Ge Ge ee 287 Appendix J Customer Support iese esse ee ee ee ee ee EA ee ee ee ee ee nennen nnn nnn nsn nsn nnne nenas 291 ME m eee UI reer nr ree A E or M reer erm 295 P 2304R P1 Series User s Guide List of Figures List of Figures zc VLEIS antec er 28 Figure 2 VolP Service Provider Application 1 se cerrar EE LER ern dir rea bn ert ad ER e Ee 30 Figure 9 IP PBX evi ein 30 Figure 4 Pear Ti pasr C allg sesse a ke ih S RENS KERS ee E EPOR PRU SM ke beg e E nace Se AGS 31 EE NE se be EE OR ed HE OE ee EE EE EE Er 34 Figure amp Change Password SOOO uuu esas scires cerner dat rx See tb dde t Gede Gee Vbi aa bx Gee bede pce 34 Figure 7 Select Mode Screan M ET A DE T T S LU S EA anal owas 35 Bele ew Ee dc RR o o SS erin EET 36 cdi PES CUaTfon e EL OE 42 SE od F ENS etr 45 Figure TI D
123. Settings Screen Use this screen to configure where the ZyXEL Device sends logs and alerts the schedule for sending logs and which logs and alerts are sent or recorded To access this screen click Maintenance gt Logs gt Log Settings Figure 110 Maintenance gt Logs gt Log Settings Log Settings E mail Log Settings Mail Server Outgoing SMTP Server NAME or IP Address Mail Subject Send Log to D rt LY E Mail Address Send Alerts to 7 E Mail Address Log Schedule when Logis Fur Day for Sending Log l unday 7 Time for Sending Log hour EE minute Clear log after sending mail Syslog Logging Active Syslog Server IP Address ooo Server NAME or IP Address Log Facility Local 1 Active Log and Alert Send immediate alert o 2 System Maintenance System Errors System Errors Access Control Access Control Blocked Web Sites TCP Reset Blocked Java etc Packet Filter Attacks ICMP Remote Management CDR PPP UPnP Forward Web Sites Blocked Web Sites Blocked Java etc Attacks Any IP SIP RI DIEI EI CJ CJ CJ RI RI CI DI CI C1 CI RI RI Reset Each field is described in the following table Table 89 Maintenance gt Logs gt Log Settings LABEL DESCRIPTION E mail Log Settings Mail Server Enter the server name or the IP address of the mail server the ZyXEL Device should use to e mail logs and alerts Leave this field blank if you do not w
124. Subnet Mask DHCP LAN Information IP Address IP Subnet Mask DHCP Refresh Interval None System Up Time Current Date Time System Resource CPU Usage Memory Usage 0 21 46 2000 01 01 00 21 43 36 4995 32 P2304R P1 V3 60 ADW 0 bS 03 13 2006 172 23 23 51 255 255 255 0 Client Interface Status ES EE EE WAN Up 100M Full 100M Full 192 168 1 1 255 255 255 0 Server LAN Up Summary BW MGMT Monitor Details Any IP Table Details VoIP Status Packet Statistics Details DHCP Table Details VoIP Statistics Details SIP 1 SIP 2 SIP 3 SIP 4 Not Register changeme 1i27 0 0 1 Inactive changeme 127 0 0 1 Inactive changeme 127 0 0 1 Inactive changeme 127 0 0 1 Each field is described in the following table Table 4 Status Screen LABEL DESCRIPTION Refresh Interval Enter how often you want the ZyXEL Device to update this screen Refresh Now Click this to update this screen immediately Device Information System Name This field displays the ZyXEL Device system name It is used for identification You can change this in the Configuration Wizard or Maintenance gt System gt General screen Firmware Version This field displays the current version of the firmware inside the ZyXEL Device It also shows the date the firmware version was created You can change the firmware versi
125. T 990000001 ADSL OPMD lt 0 etsi 1 normal 3 2 gdmt 3 multimo de gt P 2304R P1 Series User s Guide Services The following table lists some commonly used services and their associated protocols and port numbers Name This is a short descriptive name for the service You can use this one or create a different one if you like Protocol This is the type of IP protocol used by the service If this is TCP UDP then the service uses the same port number with TCP and UDP If this is USER DEFINED the Port s is the IP protocol number not the port number Port s This value depends on the Protocol Ifthe Protocol is TCP UDP or TCP UDP this is the IP port number Ifthe Protocol is USER this is the IP protocol number Description This is a brief explanation of the applications that use this service or the situations in which this service is used Table 139 Examples of Services NAME PROTOCOL PORT S DESCRIPTION AH User Defined 51 The IPSEC AH Authentication Header IPSEC TUNNEL tunneling protocol uses this service AIM TCP 5190 AOL s Internet Messenger service AUTH TCP 113 Authentication protocol used by some servers BGP TCP 179 Border Gateway Protocol BOOTP CLIENT UDP 68 DHCP Client BOOTP_SERVER UDP 67 DHCP Server CU SEEME TCP UDP 7648 A popular videoconferencing solution from TCP UDP 24032 White Pines Software DNS TCP
126. TCP IP IP Address 182 168 1 1 IP Subnet Mask 255 255 255 0 Apply Reset P 2304R P1 Series User s Guide Chapter 7 LAN Each field is described in the following table Table 35 Network gt LAN gt IP LABEL DESCRIPTION IP Address Enter the IP address of the ZyXEL Device on the LAN Note This field is the IP address you use to access the ZyXEL Device on the LAN If the web configurator is running on a computer on the LAN you lose access to the web configurator as soon as you change this field and click Apply You can access the web configurator again by typing the new IP address in the browser IP Subnet Mask Enter the subnet mask of the LAN Apply Click this to save your changes and to apply them to the ZyXEL Device Reset Click this to set every field in this screen to its last saved value 7 2 2 LAN DHCP Setup Screen Use this screen to enable disable and configure the DHCP server in the ZyXEL Device To access this screen click Network gt LAN gt DHCP Setup Figure 42 Network LAN gt DHCP Setup DHCP Setup DHCP Setup M Enable DHCP Server IP Pool Starting Address 192 168 1 33 DNS Server Pool Size 32 DNS Servers Assigned by DHCP Server First DNS Server From ISP 1 0 From ISP X 0 From ISP Reset Second DNS Server Third DNS Server Each field is described in the following table Table 36 Network LAN DHCP Setup
127. Tools gt Restart gt In Progress se see EE ERA EER EE Se Ke ee EE Sk Ke Ke Ke Ek AA ed ke 214 Figure Tz Fan BIGEKEP EE SE mae OU Aen Na abe RR RM aie ee ee N GE 229 Figuie Tez Intp ODDO issie Ge N GE nice Ge Ee ee poe RF RR t ge Rd 230 Figure 123 MITRE Options ses ede Ee Se ee lonis Uap Nica San bed ad obi Vd eo c Gt 231 Figure 124 Pop up Blocker Set e V M 231 P 2304R P1 Series User s Guide List of Figures Figure T25 menet OPONE ME N EE ted gat d ot uat 232 Figure 126 Security Settings Java Scripting iscritta Et etta nunt tke RE FER RESI ENE Et 233 Figure 127 Security SSUNGS JAVA e 233 PRU Bom Eie pP S 234 Figure 129 Windows 95 28 Me Network Configuration res ses RAKA rra a ann RE rra ae eet epa aeu EE eg eae RE Eris 236 Figure 130 Windows 95 98 Me TCP IP Properties IP Address ies sees sees se ees Se Ee dk Ge Se RE Ge AE nee 237 Figure 131 Windows 95 98 Me TCP IP Properties DNS Configuration esse ee se ee ee ee Re ee 238 Figure T32 Ee GEE N EE a 239 Figure 133 Windows XP Control Panel iese ERG oen an dos pe dou oe uda 239 Figure 134 Windows XP Control Panel Network Connections Properties susuuuss 240 Figure 135 Windows XP Local Area Connection Properties esse sees EER Ee RE GE Ge ER Ge Ge Ge RA ke Ee ee 240 Figure 136 Windows XP Internet Protocol TCP IP Properties sesse esse ee ee ee ee dd ee ee dd ee ee de 241
128. Total disk space required 0 0 MB Space available on disk 260 8 MB Details P 2304R P1 Series User s Guide Chapter 17 UPnP 6 Click OK to go back to the Windows Optional Networking Component Wizard window and click Next 17 2 2 Using UPnP in Windows XP Example This section shows you how to use the UPnP feature in Windows XP You must already have UPnP installed in Windows XP and UPnP activated on the ZyXEL Device Make sure the computer is connected to a LAN port of the ZyXEL Device Turn on your computer and the ZyXEL Device 17 2 2 1 Auto discover Your UPnP enabled Network Device 1 Click Start and Control Panel Double click Network Connections An icon displays under Internet Gateway 2 Right click the icon and select Properties Figure 96 Network Connections Network Connections File Edit View Favorites Tools Advanced Help Q Back amp d P Search E Folders E Address e Network Connections Internet Gateway Network Tasks Internet Connection 54 Create a new nabled connection Internet Connection Set up a home or small f office network Disable Ef Disable this network __LANorH Status device Create Shortcut sl Rename this connection oa RR View status of this en connection Cu Rename Change settings of this i Properties 3 Inthe Internet Connection Properties window click Settings to see the port mappings there were automatically created P 2304R P1 Series User
129. Type Call Service Mode 122 F Fax Pass Through 226 Fax Tone Detection 226 FCC interference statement 287 Firewall 137 138 Firmware 209 Firmware Upload Error 211 Firmware Upload In Process 210 Flash Key 122 Flashing 122 Foreign Exchange Station FXS 223 Frequency Pairs 112 FTP 165 188 226 266 FTP Restrictions 165 Full Cone NAT 263 FXS Foreign Exchange Station 223 G G 168 121 225 G 168 Echo Cancellation 226 G 711 111 226 G 729 112 226 Global 259 H HTTP 209 Hybrid Waveform Codec 112 Hypertext Transfer Protocol 209 IANA 256 Idle Timeout 167 IEEE 802 1Q VLAN 113 IGA 259 IGD 1 0 176 ILA 259 Inside 259 Inside Global Address 259 Inside Local Address 259 Install UPnP 176 Windows Me 176 Windows XP 177 Internal SPTGEN 226 267 FTP Upload Example 269 Points to Remember 268 Text File 267 Internet Assigned Numbers AuthoritySee IANA 256 Internet Explorer 33 Internet Gateway Device 176 Internet Protocol Private Branch Exchange 30 Internet Telephony Service Provider 107 IP Alias 261 IP to IP Calling 226 IP to IP Calls 31 IP PBX 30 107 ITSP 107 ITU T 121 P 2304R P1 Series User s Guide Index J Java Permissions 33 JavaScripts 33 Jitter Buffer 224 L LAN IP Address Default 33 LEDs 28 Listening Port 118 Local 259 Log Out 35 Login 34 Loop Start Signaling 226 Management 226 Management Information Base See MIB management IP address 223 managing th
130. UDP 53 Domain Name Server a service that matches web names e g www zyxel com to IP numbers ESP User Defined 50 The IPSEC ESP Encapsulation Security IPSEC_TUNNEL Protocol tunneling protocol uses this service FINGER TCP 79 Finger is a UNIX or Internet related command that can be used to find out if a user is logged on FTP TCP 20 File Transfer Program a program to enable TCP 21 fast transfer of files including large files that may not be possible by e mail P 2304R P1 Series User s Guide Appendix H Services Table 139 Examples of Services continued NAME PROTOCOL PORT S DESCRIPTION H 323 TCP 1720 NetMeeting uses this protocol HTTP TCP 80 Hyper Text Transfer Protocol a client server protocol for the world wide web HTTPS TCP 443 HTTPS is a secured http session often used in e commerce ICMP User Defined 1 Internet Control Message Protocol is often used for diagnostic purposes ICQ UDP 4000 This is a popular Internet chat program IGMP MULTICAST User Defined 2 Internet Group Multicast Protocol is used when sending packets to a specific group of hosts IKE UDP 500 The Internet Key Exchange algorithm is used for key distribution and management IMAP4 TCP 143 The Internet Message Access Protocol is used for e mail IMAP4S TCP 993 This is a more secure version of IMAP4 that runs over SSL IRC TCP UDP 6667 Thi
131. User s Guide Appendix G Internal SPTGEN Table 131 Menu 4 Internet Access Setup continued 400000322 RIP Version O Rip 1 0 1 Rip 2B 2 Rip 2M gt 40000033 Nailed up Connection lt 0 No 0 1 Yes gt Table 132 Menu 12 Menu 12 1 1 IP Static Route Setup FI E PVA INPUT 20101001 IP Static Route set L Name Str 120101002 IP Static Route set L Active lt 0 No 1 Yes gt 0 20101003 IP Static Route set L Destination 0 0 0 0 IP address 20101004 IP Static Route set L Destination 0 IP subnetmask 20101005 IP Static Route set L Gateway 0 0 0 0 20101006 IP Static Route set 1 Metric 0 20101007 IP Static Route set L Private lt 0 No 1 Yes gt 0 Menu 12 1 2 IP Static Route Setup EI P PVA INPUT 120108001 IP Static Route set 8 Name Str 120108002 IP Static Route set 8 Active lt 0 No 1 Yes gt 0 120108003 IP Static Route set 8 Destination 0 0 0 0 IP address 120108004 IP Static Route set 8 Destination 0 IP subnetmask 120108005 IP Static Route set 8 Gateway 0 0 0 0 120108006 IP Static Route set 8 Metric 0 120108007 IP Static Route set 8 Private lt 0 No 1 Yes gt 0 Table 133 Menu 15 SUA Server Setup Menu 15 SUA Server Setup FI F PVA INPUT 50000001 SUA Ser
132. XEL Device will not save the configuration and the command line will display the Field Identification Number Figure 160 on page 268 shown next is an example of what the ZyXEL Device displays if you enter a value other than 0 or 1 in the Input column of Field Identification Number 1000000 refer to Figure 159 on page 267 Figure 160 Invalid Parameter Entered Command Line Example field value is not legal error 1 ROM t is not saved error Line ID 10000000 reboot to get the original configuration Bootbase Version V2 02 2 22 2001 13 33 11 RAM Size 8192 Kbytes FLASH Intel 8M 2 The ZyXEL Device will display the following if you enter parameter s that are valid Figure 161 Valid Parameter Entered Command Line Example Please wait for the system to write SPT text file ROM t Bootbase Version V2 02 2 22 2001 13 33 11 RAM Size 8192 Kbytes FLASH Intel 8M 2 Internal SPTGEN FTP Download Example 1 Launch your FTP application 2 Enter bin The command bin sets the transfer mode to binary 3 Get rom t file The command get transfers files from the ZyXEL Device to your computer The name rom t is the configuration filename on the ZyXEL Device 4 Edit the rom t file using a text editor do not use a word processor You must leave this FTP screen to edit P 2304R P1 Series User s Guide Appendix G Internal SPTGEN Figure 162 Internal SPTGEN FTP Down
133. a broad information security policy In addition specific policies must be implemented within the firewall itself 12 1 1 Stateful Inspection Firewall Stateful inspection firewalls restrict access by screening data packets against defined access rules They make access control decisions based on IP address and protocol They also inspect the session data to assure the integrity of the connection and to adapt to dynamic protocols These firewalls generally provide the best speed and transparency however they may lack the granular application level access control or caching that some proxies support Firewalls of one type or another have become an integral part of standard security solutions for enterprises 12 1 2 About the ZyXEL Device Firewall The ZyXEL Device firewall is a stateful inspection firewall and is designed to protect against Denial of Service attacks when activated The ZyXEL Device s purpose is to allow a private Local Area Network LAN to be securely connected to the Internet The ZyXEL Device can be used to prevent theft destruction and modification of data as well as log events which may be important to the security of your network The ZyXEL Device is installed between the LAN and a broadband modem connecting to the Internet This allows it to act as a secure gateway for all data passing between the Internet and the LAN P 2304R P1 Series User s Guide Chapter 12 Firewall The ZyXEL Device has one Etherne
134. ack type Sd vulnerability ICMP code d The firewall detected an ICMP vulnerability attack code d traceroute ICMP type d The firewall detected an ICMP traceroute attack ports scan UDP The firewall detected a UDP port scan attack P 2304R P1 Series User s Guide Chapter 19 Logs Table 100 Attack Logs continued LOG MESSAGE DESCRIPTION Firewall sent TCP packet in response to DoS attack TCP The firewall sent TCP packet in response to a DoS attack ICMP Source Quench ICMP The firewall detected an ICMP Source Quench attack ICMP Time Exceed ICMP The firewall detected an ICMP Time Exceed attack ICMP Destination Unreachable The firewall detected an ICMP Destination Unreachable attack ICMP ping of death ICMP The firewall detected an ICMP ping of death attack smurf ICMP The firewall detected an ICMP smurf attack Table 101 Remote Management Logs LOG MESSAGE DESCRIPTION Remote Management FTP denied Attempted use of FTP service was blocked according to remote management settings Remote Management TELNET denied Attempted use of TELNET service was blocked according to remote management settings denied Remote Management HTTP or UPnP Attempted use of HTTP or UPnP service was blocked according to remote management settings Remote Management WWW denied Attempted use of WWW service was bl
135. affect the ZyXEL Device s configuration When you click Restart the following screen appears P 2304R P1 Series User s Guide 213 Chapter 20 Tools Figure 120 Maintenance gt Tools gt Restart gt In Progress Wait one minute for the device to finish restarting Then you can log in again P 2304R P1 Series User s Guide Troubleshooting This chapter offers some suggestions to solve problems you might encounter The potential problems are divided into the following categories Power Hardware Connections and LEDs ZyXEL Device Access and Login Internet Access Phone Calls and VoIP 21 1 Power Hardware Connections and LEDs e The ZyXEL Device does not turn on None of the LEDs turn on 3 Make sure you are using the power adaptor or cord included with the ZyXEL Device 4 Make sure the power adaptor or cord is connected to the ZyXEL Device and plugged in to an appropriate power source Make sure the power source is turned on 5 Disconnect and re connect the power adaptor or cord to the ZyXEL Device 6 Ifthe problem continues contact the vendor e One of the LEDs does not behave as expected Make sure you understand the normal behavior of the LED See Section 1 4 on page 28 Check the hardware connections See the Quick Start Guide Inspect your cables for damage Contact the vendor to replace any damaged cables Disconnect and re connect the power adaptor to the Z
136. ake Calls via VoIP Service Provider ss lt GREG sg es Ge ee Re GN ek Y hada tao ee ie 29 1 5 2 Make Calle Ma IP PBX xuuecenbtsiedusteteva a bytes RR Ge Mie ee ee Ge Se ee 30 1 5 2 Make Pegerto peer Calls mec 31 Chapter 2 introducing the Web Configur altar uas NR SR REKE KARRE ER SE XAR BER ku d RnB AMA DK KAN ER S Ee Ra EE 33 2 1 Web eia iit SIME AN eru rk 33 2 2 Accessing The Web eire iei jos e 33 25 Pissing te ZU EL DEVIC ueteri apertis eret OE OO ER PARAR M ASA PLA IRAM PERS 35 rSv Eus ker OE AE EE N 36 PI MI de AE ER ar ERA es de MER TER m 37 253 5 Ma EOE EA OE Ea NE A 39 23 3 SUIS BAW iaaa A bed OE OE cb adea 39 Chapter 3 Suis S FBBIS cusa cO ERE ORAT RR RARE pu AVR AUD REOR AR ADU NES S A TOR NRI PR 41 P 2304R P1 Series User s Guide 9 Table of Contents 21 DIU QUOI Lisci cepta ex ce e ER e as pr d IS OR e HW Ea d a S P RR CLE HRS kd 41 xs crc a emen 44 ee PII AE EA EE OE OR 45 24 VAP Eie AE p tica a td d a LN eade OE OE P ER ma beicudss 46 oo BW MGMT IRIN Ses Gee tele RE DIR ke oe EE De s qa oleas Me ee DER ERA Du ie gee 47 ERA EO ERA EE AE EN N AE OR EE N 49 Chapter 4 Wizard SQUID PER Ee EAE EE RE N Oe EN 51 2 1 Man Ward S ORO Si ED Ee b ke NE ed bana 51 Ae eg ere rs ER ER N EE EE 52 LEONES I MERIT LITTERE 53 AEN MO EE EE Re ane 53 MA EE EA OE AE AE OE ERA EE 54 SN M Muri HO ET m mM 57 4525 WAN IP Address Assignment sse e aene pr aep hen REED
137. al there may be something wrong with the SIP server contact your VoIP service provider d cannot call from one of the ZyXEL Device s phone ports to the other phone port 1 You cannot call the SIP number of the SIP account that you are using to make a call The ZyXEL Device generates a busy tone and does not attempt to establish a call if the SIP number you dial matches the outgoing SIP number of the phone port you are using For example if you set Phone 1 to use SIP account 1 and set Phone 2 to use SIP account 2 then you can use Phone 1 to call to SIP account 2 s SIP number or Phone 2 to call to SIP account 1 s SIP number P 2304R P1 Series User s Guide Chapter 21 Troubleshooting P 2304R P1 Series User s Guide PART VI Appendices and Index Product Specifications 223 Pop up Windows JavaScripts and Java Permissions 229 Setting up Your Computer s IP Address 235 IP Addresses and Subnetting 249 SIP Passthrough 257 NAT 259 Internal SPTGEN 267 Services 283 Legal Information 287 Customer Support 291 Index 295 Product Specifications See also the introduction chapter for a general overview of the key features Specification Tables Table 110 Device Specifications Dimensions 109 Wide x 105 Deep x 22 High mm Weight 312g WAN Port One RJ 45 10 100Mbps Half Full Auto negotiation Auto crossover Ethernet port Ethernet Ports One RJ 45 10 10
138. all logs and alert messages after logs are sent by e mail Syslog Logging Syslog logging sends a log to an external syslog server used to store logs Active Select this to enable syslog logging Syslog Server IP Address Enter the server name or IP address of the syslog server that logs the selected categories of logs Log Facility Select a location The log facility allows you to log the messages in different files in the syslog server See the documentation of your syslog for more details Active Log and Alert Log Select the categories of logs that you want to record Send immediate alert Select the categories of alerts that you want the ZyXEL Device to send immediately Apply Click this to save your changes and to apply them to the ZyXEL Device Reset Click this to set every field in this screen to its last saved value P 2304R P1 Series User s Guide Chapter 19 Logs 19 3 Log Message Descriptions The following tables provide descriptions of example log messages Table 90 System Error Logs LOG MESSAGE DESCRIPTION WAN connection is down The WAN connection is down You cannot access the network through this interface s exceeds the max number of session per host This attempt to create a NAT session exceeds the maximum number of NAT session table entries allowed to be created per host Table 91 System Maintenance Log
139. an use up to 95 printable ASCII characters It does not matter whether the SIP server is a proxy redirect or register server SIP Server Port Enter the SIP server s listening port number if your VoIP service provider gave you one Otherwise keep the default value REGISTER Enter the IP address or domain name of the SIP register server if your VoIP Server Address service provider gave you one Otherwise enter the same address you entered in the SIP Server Address field You can use up to 95 printable ASCII characters REGISTER Enter the SIP register server s listening port number if your VoIP service provider Server Port gave you one Otherwise enter the same port number you entered in the SIP Server Port field SIP Service Enter the SIP service domain name In the full SIP URI this is the part after the Domain symbol You can use up to 127 printable ASCII Extended set characters Send Caller ID Select this if you want to send identification when you make VoIP phone calls Clear this if you do not want to send identification Authentication P 2304R P1 Series User s Guide Chapter 9 SIP Table 47 VoIP gt SIP gt SIP Settings LABEL DESCRIPTION User Name Enter the user name for registering this SIP account exactly as it was given to you You can use up to 95 printable ASCII characters Password Enter the user name for registering this SIP account exactly as it was
140. and receiving of RIP packets When set to Both the ZyXEL Device will broadcast its routing table periodically and incorporate the RIP information that it receives In Only the ZyXEL Device will not send any RIP packets but will accept all RIP packets received Out Only the ZyXEL Device will send out RIP packets but will not accept any RIP packets received None the ZyXEL Device will not send any RIP packets and will ignore any RIP packets received The Version field controls the format and the broadcasting method of the RIP packets that the ZyXEL Device sends it recognizes both formats when receiving RIP 1 is universally supported but RIP 2 carries more information RIP 1 is probably adequate for most networks unless you have an unusual network topology Both RIP 2B and RIP 2M sends the routing data in RIP 2 format the difference being that RIP 2B uses subnet broadcasting while RIP 2M uses multicasting 7 1 6 Multicast Traditionally IP packets are transmitted in one of either two ways Unicast 1 sender 1 recipient or Broadcast 1 sender everybody on the network Multicast delivers IP packets to a group of hosts on the network not everybody and not just 1 IGMP Internet Group Multicast Protocol is a network layer protocol used to establish membership in a Multicast group it is not used to carry user data IGMP version 2 RFC 2236 is an improvement over version 1 RFC 1112 but IGMP version 1 is still i
141. ant to send logs or alerts by e mail P 2304R P1 Series User s Guide Chapter 19 Logs Table 89 Maintenance Logs Log Settings LABEL DESCRIPTION Mail Subject Enter the subject line used in e mail messages the ZyXEL Device sends Send Log to Enter the e mail address to which log entries are sent by e mail Leave this field blank if you do not want to send logs by e mail Send Alerts to Enter the e mail address to which alerts are sent by e mail Leave this field blank if you do not want to send alerts by e mail Log Schedule Select the frequency with which the ZyXEL Device should send log messages by e mail Daily Weekly Hourly When Log is Full None If the Weekly or the Daily option is selected specify a time of day when the E mail should be sent If the Weekly option is selected then also specify which day of the week the E mail should be sent If the When Log is Full option is selected an alert is sent when the log fills up If you select None no log messages are sent Day for Sending Log This field is only available when you select Weekly in the Log Schedule field Select which day of the week to send the logs Time for Sending Log This field is only available when you select Daily or Weekly in the Log Schedule field Enter the time of day in 24 hour format for example 23 00 equals 11 00 pm to send the logs Clear log after sending mail Select this to clear
142. apter 16 Remote MGMT SNMP itself is a simple request response protocol based on the manager agent model The manager issues a request and the agent returns responses using the following protocol operations Get Allows the manager to retrieve an object variable from the agent GetNext Allows the manager to retrieve the next object variable from a table or list within an agent In SNMPv1 when a manager wants to retrieve all elements of a table from an agent it initiates a Get operation followed by a series of GetNext operations Set Allows the manager to set values for object variables within an agent Trap Used by the agent to inform the manager of some events 16 2 1 Supported MIBs The ZyXEL Device supports MIB II that 1s defined in RFC 1213 and RFC 1215 The focus of the MIBs is to let administrators collect statistical data and monitor status and performance 16 2 2 SNMP Traps The ZyXEL Device will send traps to the SNMP manager when any one of the following events occurs Table 74 SNMP Traps TRAP TRAP NAME DESCRIPTION 0 coldStart defined in RFC 1215 A trap is sent after booting power on 1 warmstart defined in RFC A trap is sent after booting software reboot 1215 4 authenticationFailure defined in A trap is sent to the manager when receiving any SNMP RFC 1215 get or set requirements with the wrong community password 6 whyReboot defined in ZYXEL A trap is sent wi
143. are shown in this User s Guide lt gt Warnings tell you about things that could harm you or your device ES Notes tell you other important information for example other things you may need to configure or helpful tips or recommendations Syntax Conventions The P 2304R P1 may be referred to as the ZyXEL Device the device or the system in this User s Guide Product labels screen names field labels and field choices are all in bold font A key stroke is denoted by square brackets and uppercase text for example ENTER means the enter or return key on your keyboard Enter means for you to type one or more characters and then press the ENTER key Select or choose means for you to use one of the predefined choices A right angle bracket gt within a screen name denotes a mouse click For example Maintenance gt Log gt Log Setting means you first click Maintenance in the navigation panel then the Log sub menu and finally the Log Setting tab to get to that screen Units of measurement may denote the metric value or the scientific value For example k for kilo may denote 1000 or 1024 M for mega may denote 1000000 or 1048576 and so on e g is a Shorthand for for instance and i e means that is or in other words P 2304R P1 Series User s Guide Document Conventions Icons Used in F
144. ass with the highest priority 7 is the first to borrow bandwidth from its parent class Do not select this for the classes directly below the root class if you want to leave bandwidth available for other traffic types see Section 15 1 7 1 on page 155 or you want to set the interface s speed to match what the next device in network can handle see the Speed field description in the Bandwidth Management Summary Screen This section lets you set criteria that are used to identify which traffic is managed in this class and which traffic is not managed in this class If you leave the default value in a field there is no restriction for that criteria Enable Bandwidth Filter Select this if you want the ZyXEL Device to use at least one of the following filter criteria when it manages bandwidth You must enter a value in at least one of the following fields The Subnet Mask fields are only available when you enter the destination or source IP address P 2304R P1 Series User s Guide Chapter 15 Bandwidth MGMT Table 72 Management gt Bandwidth MGMT gt Class Setup gt Edit LABEL DESCRIPTION Application Select a pre defined application If you select a predefined application do not set up the other filter criteria FTP File Transfer Program enables fast transfer of files including large files that may not be possible by e mail Select this to configure the bandwidth filter for FTP traffic SIP
145. atically obtain IP address settings with and select dhep from the drop down list Ifyou have a static IP address click Statically set IP Addresses and fill in the Address Subnet mask and Default Gateway Address fields Co Click OK to save the changes and close the Ethernet Device General screen 4 If you know your DNS server IP address es click the DNS tab in the Network Configuration screen Enter the DNS server information in the fields provided Figure 143 Red Hat 9 0 KDE Network Configuration DNS File Profile Help ta BO New Edit Copy Delete Devices Hardware DNS Hosts rH You may configure the system s hostname domain name servers and search domain Name servers are used to look up other hosts on the network Hostname Primary DNS Secondary DNS Tertiary DNS DNS Search Path 5 Click the Devices tab 6 Click the Activate button to apply the changes The following screen displays Click Yes to save the changes in all screens P 2304R P1 Series User s Guide Appendix C Setting up Your Computer s IP Address Figure 144 Red Hat 9 0 KDE Network Configuration Activate redhat config network You have made some changes in your configuration To activate the network device eth0 the changes have to be saved Do you want to continue 7 After the network card restart process i
146. by either using the factory default or cloning your computer s MAC address Choose Factory Default to select the factory assigned default MAC Address Otherwise click Spoof this computer s MAC address IP Address and enter the IP address of your computer Once it is successfully configured the address will be copied to the rom file ZyNOS configuration file It will not change unless you change the setting or upload a different ROM file It is recommended that you clone the MAC address prior to hooking up the WAN Port 6 1 4 RIP Setup See Section 7 1 5 on page 87 6 1 5 DNS Server Address Assignment The Domain Name entry is what is propagated to the DHCP clients on the LAN If you leave this blank the domain name obtained by DHCP from the ISP is used While you must enter the host name System Name on each individual computer the domain name can be assigned from the ZyXEL Device via DHCP Use DNS Domain Name System to map a domain name to its corresponding IP address and vice versa for instance the IP address of www zyxel com is 204 217 0 2 The DNS server is extremely important because without it you must know the IP address of a computer before you can access it The ZyXEL Device can get the DNS server addresses in the following ways 1 TheISP tells you the DNS server addresses usually in the form of an information sheet when you sign up If your ISP gives you DNS server addresses enter them in the DNS Server fields in th
147. c Input Output System packets between the LAN and WAN You should also make sure that NetBIOS packets are not blocked in Security gt Firewall gt Services NetBIOS packets are TCP or UDP packets that enable a computer to connect to and communicate with computers on other networks It may sometimes be necessary to allow NetBIOS packets to pass through the ZyXEL Device in order to allow computers on the LAN to find computers on the WAN and vice versa This is the same setting you can set in Network gt WAN gt Advanced Apply Click this to save your changes and to apply them to the ZyXEL Device Reset Click this to set every field in this screen to its last saved value P 2304R P1 Series User s Guide NAT Use these screens to configure port forwarding and trigger ports for the ZyXEL Device You can also enable and disable SIP FTP and H 323 ALG See Appendix F on page 259 for more background information about NAT 8 1 NAT Overview 8 1 1 Port Forwarding Services and Port Numbers A NAT server set is a list of inside behind NAT on the LAN servers for example web or FTP that you can make accessible to the outside world even though NAT makes your whole inside network appear as a single machine to the outside world Use the NAT Port Forwarding Screen to forward incoming service requests to the server s on your local network You may enter a single port number or a range of port numbers to be forward
148. ce has been running since it last started up The ZyXEL Device starts up when you plug it in when you restart it Maintenance gt Tools gt Restart or when you reset it see Section 2 3 on page 35 Current Date Time This field displays the current date and time in the ZyXEL Device You can change this in Maintenance gt System gt Time Setting System Resource CPU Usage This field displays what percentage of the ZyXEL Device s processing ability is currently used When this percentage is close to 100 the ZyXEL Device is running at full load and the throughput is not going to improve anymore If you want some applications to have more throughput you should turn off other applications for example using bandwidth management see Chapter 15 on page 153 Memory Usage This field displays what percentage of the ZyXEL Device s memory is currently used Usually this percentage should not increase much If memory usage does get close to 100 the ZyXEL Device is probably becoming unstable and you should restart the device See Section 20 2 5 on page 213 or turn off the device unplug the power for a few seconds Interface Status Interface This column displays each interface the ZyXEL Device has Status This field indicates whether or not the ZyXEL Device is using the interface Up The ZyXEL Device is using the interface Down The ZyXEL Device is not using the interface
149. cess Control System TELNET TCP 23 Telnet is the login and terminal emulation protocol common on the Internet and in UNIX environments It operates over TCP IP networks Its primary function is to allow users to log into remote host systems P 2304R P1 Series User s Guide Appendix H Services Table 139 Examples of Services continued NAME PROTOCOL PORT S DESCRIPTION TFTP UDP 69 Trivial File Transfer Protocol is an Internet file transfer protocol similar to FTP but uses the UDP User Datagram Protocol rather than TCP Transmission Control Protocol VDOLIVE TCP 7000 A videoconferencing solution The UDP port UDP user number is specified in the application defined P 2304R P1 Series User s Guide Legal Information Copyright Copyright O 2006 by ZyXEL Communications Corporation The contents of this publication may not be reproduced in any part or as a whole transcribed stored in a retrieval system translated into any language or transmitted in any form or by any means electronic mechanical magnetic optical chemical photocopying manual or otherwise without the prior written permission of ZyXEL Communications Corporation Published by ZyXEL Communications Corporation All rights reserved Disclaimer ZyXEL does not assume any liability arising out of the application or use of any products or software described herein Neither does it convey any license under
150. characters Spaces are not allowed but dashes and periods are accepted Administrator Inactivity Timer Enter the number of minutes a management session can be left idle before the session times out After it times out you have to log in again A value of 0 means a management session never times out no matter how long it has been left idle This is not recommended Long idle timeouts may have security risks The default is five minutes Management IP Address Enter the IP address you want to use to access the ZyXEL Device when it is in Bridge mode Password Setup Old Password Enter the current password you use to access the ZyXEL Device New Password Enter the new password for the ZyXEL Device You can use up to 30 characters As you type the password the screen displays an asterisk for each character you type Retype to Verify Type the new password again Apply Click this to save your changes and to apply them to the ZyXEL Device Reset Click this to set every field in this screen to its last saved value 18 2 2 Dynamic DNS Screen Use this screen to set up the ZyXEL Device as a dynamic DNS client To access this screen click Maintenance gt System gt Dynamic DNS P 2304R P1 Series User s Guide Chapter 18 System Figure 107 Maintenance System Dynamic DNS Dynamic DNS Dynamic DNS Setup Enable Dynamic DNS Service Provider WW DynDNS ORG v
151. classes equally Maximize Select this if you want the ZyXEL Device to divide any unallocated and unused Bandwidth Usage bandwidth among bandwidth classes that require bandwidth Clear this if you want to reserve bandwidth for traffic that does not match a bandwidth class or if you want to limit the speed of this interface Apply Click this to save your changes and to apply them to the ZyXEL Device Reset Click this to set every field in this screen to its last saved value 15 2 2 Bandwidth Class Setup Screen Use this screen to look at the configured bandwidth classes by individual interface Each interface has a permanent root class The bandwidth budget of the root class is equal to the speed you configured on the interface see Section 15 2 1 on page 158 There is a default class for all the bandwidth in the Root Class that is not allocated to bandwidth classes For each interface you must enable bandwidth management before you can configure classes To access this screen click Management gt Bandwidth MGMT gt Class Setup Figure 81 Management gt Bandwidth MGMT gt Class Setup Class Setup Interface Lan E E Root Class 100000 kbps 1 C LAN 1 100 kbps C Default Class 99900 kbps Add Sub Class Est Delete P 2304R P1 Series User s Guide Chapter 15 Bandwidth MGMT Each field is described in the following table Table 71 Management gt Bandwidth MGMT gt Class Setup
152. computer IP address using the KDE 1 Click the Red Hat button located on the bottom left corner select System Setting and click Network Figure 141 Red Hat 9 0 KDE Network Configuration Devices ST File Profile Help f 5 ggy e x New Edit Copy Delete Activate Deactivate Devices Hardware DNS Hosts st You may configure network devices associated with EN physical hardware here Multiple logical devices can be P associated with a single piece of hardware Nickname X Inactive ethO ethO Ethemet 2 Double click on the profile of the network card you wish to configure The Ethernet Device General screen displays as shown P 2304R P1 Series User s Guide Appendix C Setting up Your Computer s IP Address Figure 142 Red Hat 9 0 KDE Ethernet Device General Ethernet Device o x General Route Hardware Device Nickname ethO Activate device when computer starts Allow all users to enable and disable the device Automatically obtain IP address settings with dhcp DHCP Settings Hostname optional Automatically obtain DNS information from provider Statically set IP addresses Manual IP Address Settings Address Subnet Mask Default Gateway Address OK 3 Cancel f you have a dynamic IP address click Autom
153. cord for your device Connect the power adaptor or cord to the right supply voltage for example 110V AC in North America or 230V AC in Europe Do NOT allow anything to rest on the power adaptor or cord and do NOT place the product where anyone can walk on the power adaptor or cord Do NOT use the device if the power adaptor or cord is damaged as it might cause electrocution If the power adaptor or cord is damaged remove it from the power outlet Do NOT attempt to repair the power adaptor or cord Contact your local vendor to order a new one Do not use the device outside and make sure all the connections are indoors There is a remote risk of electric shock from lightning Use only No 26 AWG American Wire Gauge or larger telecommunication line cord This product is recyclable Dispose of it properly P 2304R P1 Series User s Guide Contents Overview Contents Overview lu troduecti n and Wizard in SEER SG Lao RE ee as ee Ge Ne be kk GR EE DE ek S oV CUL e RE ed es 25 Ini CIS Te ZA DOVETE sirti OE 27 introducing the Web Configurator eem 33 SS SEGE US EE EE N En 41 Var Se ui AA Pes oe OAAR EE RE 51 DI GE MOG esM IU 71 EE dd Gud Boda Gia tia i EE E MELIA ie 73 QC eet rrr OE RE EE terre 75 E Lu E P apa cd et aam N ae oa a ad a eg Fa a CM A d 85 BESTE oun EL ao up OE Oe AA RE eee Dre ln tet Lo en tn NN a 97 Pl EO N N E E E 105 zl RE EE EE RO AN N CT 107 ars EA EE OE N OE 121 VOR BOOR Rec EE A A EG ee EE
154. ct Ethernet P 2304R P1 Series User s Guide Chapter 6 WAN Table 30 Network gt WAN gt Internet Connection Ethernet LABEL DESCRIPTION Service Type Select Standard WAN IP Address Assignment Get automatically Select this if your ISP did not assign you a static IP address from ISP Use Fixed IP Select this if your ISP assigned you a static IP address Address IP Address Enter the IP address provided by your ISP IP Subnet Mask Enter the subnet mask provided by your ISP Gateway IP Enter the gateway provided by your ISP If your ISP did not provide one leave it Address blank WAN MAC Address Spoof WAN MAC Address Select this if you do not want to use the default MAC address for the ZyXEL Device Clone the This field is enabled if you select Spoof WAN MAC Address computers MAC Enter the IP address of the computer whose MAC address you want the ZyXEL address IP Device to use instead of the default MAC address Address Apply Click this to save your changes and to apply them to the ZyXEL Device Reset Click this to set every field in this screen to its last saved value 6 2 2 Roadrunner Use this screen to set up an Ethernet connection using Roadrunner service with the ISP To access this screen click Network gt WAN gt Internet Connection Figure 36 Network gt WAN gt Internet Connection Roadrunner Internet Connection ISP Parameters
155. cted feature that part of the web page appears blank or grayed out ActiveX This is a tool for building dynamic and active Web pages and distributed object applications When you visit an ActiveX Web site ActiveX controls are downloaded to your browser where they remain in case you visit the site again Java This is used to build downloadable Web components or Internet and intranet business applications of all kinds Cookies This is used by Web servers to track usage and to provide service based on ID Web Proxy This is a server that acts as an intermediary between a user and the Internet to provide security administrative control and caching service When a proxy server is located on the WAN it is possible for LAN users to avoid content filtering restrictions Keyword Blocking Enable URL Select this if you want the ZyXEL Device to block Web sites based on words in the Keyword Blocking web site address For example if you block the keyword bad http www website com bad html is blocked Keyword Type a keyword you want to block in this field You can use up to 64 printable ASCII characters There is no wildcard character however Add Click this to add the specified Keyword to the Keyword List You can enter up to 64 keywords 146 P 2304R P1 Series User s Guide Chapter 13 Content Filter Table 60 Security gt Content Filter gt Filter LABEL DESCRIPTION Keyword List This
156. cy Caller Ringing Enable Check this box if you want people to hear a tone when they call you The ZyXEL Device provides a tone for you On Hold Enable Check this box if you want people to hear a tone when you put them on hold The ZyXEL Device provides a default tone for you lt Back Click this to return to the SIP Settings screen without saving your changes Apply Click this to save your changes and to apply them to the ZyXEL Device Reset Click this to set every field in this screen to its last saved value 9 2 3 SIP QoS Screen Use this screen to maintain ToS and VLAN settings for the ZyXEL Device To access this screen click VoIP gt SIP gt QoS Figure 61 VoIP gt SIP gt QoS SIP TOS Priority Setting RTP TOS Priority Setting VLAN Taging Voice VLAN ID 5 0255 5 0255 0 4095 P 2304R P1 Series User s Guide Chapter 9 SIP Each field is described in the following table Table 49 VoIP gt SIP gt QoS LABEL DESCRIPTION SIP TOS Priority Setting Enter the priority for SIP voice transmissions The ZyXEL Device creates Type of Service priority tags with this priority to voice traffic that it transmits RTP TOS Priority Setting Enter the priority for RTP voice transmissions The ZyXEL Device creates Type of Service priority tags with this priority to RTP traffic that it transmits Voice VLAN ID Select this if the ZyXEL Device has to be a member of a VLAN to c
157. d the router blocks all traffic except trusted domain sites s Forbidden Web site The web site is in the forbidden web site list s Contains ActiveX The web site contains ActiveX o s Contains Java applet The web site contains a Java applet s Contains cookie The web site contains a cookie s Proxy mode detected The router detected proxy mode in the packet s Trusted Web site The web site is in a trusted domain oo S When the content filter is not on according to the time schedule Waiting content filter server timeout The external content filtering server did not respond within the timeout P 2304R P1 Series User s Guide period Chapter 19 Logs Table 99 Content Filtering Logs continued LOG MESSAGE DESCRIPTION DNS resolving failed The ZyXEL Device cannot get the IP address of the external content filtering via DNS query The ZyXEL Device cannot issue a query because TCP IP socket creation failed port port number Creating socket failed Connecting to filter server content fail The connection to the external content filtering server failed License key is invalid The external content filtering license key is invalid For type and code details see Table 102 on page 205 Table 100 Attack Logs LOG MESSAGE DESCRIPTION code d attac
158. de and Section 1 4 on page 28 P 2304R P1 Series User s Guide 21 7 Chapter 21 Troubleshooting 2 Make sure you entered your ISP account information correctly in the wizard These fields are case sensitive so make sure Caps Lock is not on 3 Disconnect all the cables from your device and follow the directions in the Quick Start Guide again 4 Ifthe problem continues contact your ISP cannot access the Internet anymore had access to the Internet with the ZyXEL Device but my Internet connection is not available anymore 1 Check the hardware connections and make sure the LEDs are behaving as expected See the Quick Start Guide and Section 1 4 on page 28 2 Rebootthe ZyXEL Device 3 Ifthe problem continues contact your ISP The Internet connection is slow or intermittent 1 There might be a lot of traffic on the network Look at the LEDs and check Section 1 4 on page 28 If the ZyXEL Device is sending or receiving a lot of information try closing some programs that use the Internet especially peer to peer applications 2 Rebootthe ZyXEL Device If the problem continues contact the network administrator or vendor or try one of the advanced suggestions C Advanced Suggestions Check the settings for bandwidth management If it is disabled you might consider activating it If it is enabled you might consider changing the allocations Check the settings for QoS If it is disabled you might c
159. deans 100 8 2 3 MAT Pont Forwarding EUILSCIBIT sies ser tag eae bel d equ EE eds ese pube d ed ee Ge ie vena id 102 B 2 4 NAT Trigger Port SOGE iseer SERE EES ESEL ERGER RA SERE NASA Ea GEORGE EDGE EES aE 102 SPAREN Rene RE EE N EE ON EO 104 ad oo Qe cC M 105 P 2304R P1 Series User s Guide LE Table of Contents Chapter 9 l dert 107 EER EE EE AE OE EA aea tod Deli e debi Lead Oe A QUA 107 NM Introduction t VolP EE EE EE EE EE 107 RR hroducion eko GE N RR EE NE EER EE T T TT 107 9 1 3 IP Iter RE AA OE OO AR EE AE EUN 107 9 1 4 3I ae Na oi OO OO OO EI N ar Res es 108 SIF ERENS GR ig 108 EE EE EE EE EE EE 110 RE GE ER ER OE ER OR ER s 110 ER Ge CORT ainn EE LET 111 9 1 9 PSTN Call Setup SNANG sisie Se EENS DES ER e bots e DLE eie NE BEERS ev 112 9 1 10 MWI Message Waiting Indication sesse see AE Ee Ak KA Be RA KA AR Ee RR Ak AR Ee ek Ak nena 112 dT Sidi GT Sere HOG SY se ER ke Ee de RE ee Ke ee Es ie RE Ge GR Ge eg 112 ZN AE T IT 113 PRE su ede ie OR AE OE N RE EE 113 9 2 2 Advanced SIP Setup GOIBell uci eset pelas beri ex tail Din pL D E ved iiia 115 SIELE OE uico e reni eim Hoe Le ete tie a n do as oir A T ORA pda 119 Chapter 10 FIG n E vie de EE IP E e DR NT oek NG N Ge ea ETE 121 RAS EER KP N ER RE UC EE 121 10 1 1 Voice Activity Detection Silence Suppression Comfort Noise se se ee 121 10 1 2 Echo CACC ss scans cb d pati oap D DE N ee laminate ed 121 1
160. deleted Figure 77 Management gt Static Route gt IP Static Route IP Static Route Static Route Rules EN Name active Destination Gateway Modify 1 2 3 4 5 6 7 8 TERRY EP El El E ED E ED Each field is described in the following table Table 62 Management Static Route IP Static Route LABEL DESCRIPTION This field is a sequential value and it is not associated with a specific rule The sequence is important however The ZyXEL Device checks each rule in order and it only follows the first one that applies Name This field displays the name that describes the static route Active This field shows whether this static route is active Yes or not No Destination This field displays the destination IP address es that this static route affects Gateway This field displays the IP address of the gateway to which the ZyXEL Device should send packets for the specified Destination The gateway is a router or a switch on the same network segment as the device s LAN or WAN port The gateway helps forward packets to their destinations Modify Use this field to edit or erase the static route Click the Edit icon to open the IP Static Route Edit screen for this static route Click the Remove icon to erase this static route 14 2 2 IP Static Route Edit Screen Use this screen to edit a static route in the ZyXEL Device To access this screen click an Edit icon in Management
161. details The Configuration Text File Format All Internal SPTGEN text files conform to the following format lt field identification number field name parameter values allowed input where input is your input conforming to parameter values allowed The figure shown next is an example of an Internal SPTGEN text file Figure 159 Configuration Text File Format Column Descriptions Menu 1 General Setup 10000000 Configured 0 No 1 Yes gt 1 10000001 System Name Str Your Device 10000002 Location Str B 10000003 Contact Person s Name Str d 10000004 Route IP 0 No 1 Yes gt 1 10000005 Route IPX lt 0 No 1 Yes 0 10000006 Bridge 0 No 1 Yes gt 0 P 2304R P1 Series User s Guide 267 Appendix G Internal SPTGEN BS DO NOT alter or delete any field except parameters in the Input column This appendix introduces Internal SPTGEN All menus shown in this appendix are example menus meant to show SPTGEN usage Actual menus for your product may differ Internal SPTGEN File Modification Important Points to Remember Each parameter you enter must be preceded by one sign and one space Some parameters are dependent on others For example if you disable the Configured field in menu 1 see Figure 159 on page 267 then you disable every field in this menu If you enter a parameter that is invalid in the Input column the Zy
162. dge mode the ZyXEL Device acts like a bridge instead of a router A bridge 1s simpler than a router It may be more efficient in small networks but it also offers fewer features In Bridge mode your ZyXEL Device only supports the following features by screen Table 28 Bridge Mode Features by Screen LINK TAB FUNCTION IN BRIDGE MODE Status Same as in router mode Network WAN Internet Same as in router mode use the factory default MAC Connection address Other screens None LAN All screens None NAT All screens None VoIP All screens Same as in router mode Security All screens None Management Remote MGMT All screens Same as in router mode Other screens None Maintenance System General Same as in router mode you cannot re configure the Management IP Address Dynamic DNS None Time Setting Same as in router mode Logs All screens Same as in router mode Tools All screens Same as in router mode P 2304R P1 Series User s Guide Chapter 5 Bridge Mode 5 2 Bridge Mode Procedure Follow these steps to change the ZyXEL Device into Bridge mode 1 Login to the web configurator See Chapter 2 on page 33 2 Click Maintenance gt System gt General 3 Inthe Mode field select Bridge 4 Inthe Management IP Address field enter the IP address you want to use to access the ZyXEL Device in Bridge mode For example enter 192 168 5 1 5 Click Apply The ZyXEL Device
163. dle Timeout This field is enabled if you do not select Nailed Up Connection Enter the number of seconds that the connection should be idle before the ZyXEL Device automatically disconnects Enter zero if you do not want the ZyXEL Device to automatically disconnect This is the same as selecting Nailed Up Connection WAN IP Address Assignment 80 P 2304R P1 Series User s Guide Chapter 6 WAN Table 32 Network gt WAN gt Internet Connection PPPoE LABEL DESCRIPTION Get automatically Select this if your ISP did not assign you a static IP address from ISP Use Fixed IP Select this if your ISP assigned you a static IP address Address My WAN IP Enter the IP address provided by your ISP Address Remote IP Enter the IP address your ISP provided for the remote peer server Address Remote IP Subnet Mask Enter the subnet mask your ISP provided for the remote server Metric Usually you should keep the default value This field is related to RIP See Chapter 7 on page 85 for more information The metric represents the cost of transmission A router determines the best route for transmission by choosing a path with the lowest cost The smaller the metric the lower the cost RIP uses hop count as the measurement of cost where 1 is for a directly connected network The metric must be 1 15 if you use a value higher than 15 the routers assume the link is down Private
164. dth the ZyXEL Device gives extra bandwidth to that class When multiple classes require more bandwidth the ZyXEL Device gives the highest priority classes the available bandwidth first as much as they require if there is enough available bandwidth and then to lower priority classes if there 1s still bandwidth available The ZyXEL Device distributes the available bandwidth equally among classes with the same priority level 15 1 7 1 Reserving Bandwidth for Non Bandwidth Class Traffic Do the following three steps to configure the ZyXEL Device to allow bandwidth for traffic that 1s not defined in a bandwidth filter 1 Leave some of the interface s bandwidth unbudgeted 2 Do not enable the interface s Maximize Bandwidth Usage option 3 Do not enable bandwidth borrowing on the sub classes see Section 15 1 8 on page 157 15 1 7 2 Maximize Bandwidth Usage Example Here is an example of a ZyXEL Device that has maximize bandwidth usage enabled on an interface The following table shows each bandwidth class s bandwidth budget The classes are set up based on subnets The interface is set to 10240 kbps Each subnet is allocated 2048 kbps The unbudgeted 2048 kbps allows traffic not defined in any of the bandwidth filters to go out when you do not select the maximize bandwidth option Table 65 Maximize Bandwidth Usage Example BANDWIDTH CLASSES AND ALLOTMENTS Root Class 10240 kbps Administration 2048 kbps Sales 2048 kbps Marketing 2048 kbps R
165. e LAN and WAN You should also make sure that NetBIOS packets are not blocked in Security gt Firewall gt Services NetBIOS packets are TCP or UDP packets that enable a computer to connect to and communicate with computers on other networks It may sometimes be necessary to allow NetBIOS packets to pass through the ZyXEL Device in order to allow computers on the LAN to find computers on the WAN and vice versa This is the same setting you can set in Network gt LAN gt Advanced Allow Trigger Dial Select this if you want to allow NetBIOS packets to initiate calls Apply Click this to save your changes and to apply them to the ZyXEL Device Reset Click this to set every field in this screen to its last saved value 6 4 WAN Traffic Redirect Screen Use this screen to specify a backup gateway in case the default gateway your ISP is not available To access this screen click Network gt WAN gt Traffic Redirect Figure 39 Network gt WAN gt Traffic Redirect Traffic Redirect Traffic Redirect V Active Backup Gateway IP Address ooo Check WAN IP Address ooo Fail Tolerance b Period sec E in seconds Timeout sec B in seconds Reset P 2304R P1 Series User s Guide Chapter 6 WAN Each field is described in the following table Table 34 Network gt WAN gt Traffic Redirect LABEL DESCRIPTION Active Select this to set up a backup gateway
166. e WAN Advanced screen P 2304R P1 Series User s Guide Chapter 6 WAN 2 Ifthe ISP did not give you DNS server information leave the DNS Server fields in the WAN Advanced screen set to From ISP for the ISP to dynamically assign the DNS server IP addresses 6 2 WAN Internet Connection Screen Use this screen to set up your Internet connection This screen depends on the type of Internet connection you have 6 2 1 Ethernet Use this screen to set up an Ethernet connection no Roadrunner service with the ISP To access this screen click Network gt WAN gt Internet Connection Figure 35 Network gt WAN gt Internet Connection Ethernet Internet Connection ISP Parameters for Internet Access Encapsulation Ethernet 7 Service Type Standard WAN IP Address Assignment Get automatically from ISP Default C Use Fixed IP Address IP Address IP Subnet Mask Gateway IP Address WAN MAC Address Spoof WAN MAC Address Clone the computer s MAC address IP Address 216613 Apply Reset ES Some ISPs such as Telstra send UDP heartbeat packets to verify that the customer is still online In this case create a WAN to LAN firewall rule for those packets Contact your ISP to find the correct port number Each field is described in the following table Table 30 Network gt WAN gt Internet Connection Ethernet LABEL DESCRIPTION ISP Parameters for Internet Access Encapsulation Sele
167. e describes the labels in this screen Table 17 Connection Wizard gt IP Address PPPoE LABEL DESCRIPTION My WAN IP Enter the IP address provided by your ISP Address First DNS Server Select From ISP if your ISP dynamically assigns DNS server information In this Second DNS case the ISP assigns the WAN IP address too See Network gt WAN gt Internet Server Connection The field to the right is read only and it displays the IP address Third DNS Server provided by your ISP Select User Defined if you have the IP address of a DNS server You might get it from your ISP or from your network Enter the IP address in the field to the right Select None if you do not want to use this DNS server If you select None for all of the DNS servers you must use IP addresses to configure the ZyXEL Device and to access the Internet Back Click this to go to the previous screen Next Click this to go to the next screen Exit Click this to close this screen and return to the main screen 4 2 6 MAC Address Figure 23 Connection Wizard MAC Address Connection Wizard STEPI STEP 2 ffi Internet Configuration default dr enter the IP addr Factory default Spoof this computer s MAC Address bee tee get eee 1 92 168 1 33 P 2304R P1 Series User s Guide Chapter 4 Wizard Setup The following table describes the labels in this screen Table 18 C
168. e device good habits 27 using FTP See FTP using Telnet See command interface using the command interface See command interface Many to Many No Overload 261 Many to Many Overload 261 Many to One 261 Mapping NAT Many One to One 261 NAT Many to Many Overload 261 NAT Many to One 261 NAT One to One 261 NAT Server 261 Maximize Bandwidth Usage 155 159 160 Message Waiting Indication 112 MIB 166 Modem 226 modes 71 Bridge See Bridge mode Router See Router mode Multimedia 107 Multiple Telephones 224 MWI 112 N NAT 256 259 266 and Remote Management 165 Application 261 Definitions 259 Full Cone 263 How NAT Works 260 Mapping Types 261 Server Sets 97 Symmetric 265 What NAT does 260 NAT Mapping 261 Many One to One 261 Many to Many Overload 261 Many to One 261 Server 261 NAT Routers 111 NAT Traversal 175 226 NAT Types 266 NAT With IP Alias 261 NAT Global 259 NAT Inside 259 NAT Local 259 NAT Outside 259 Netscape Navigator 33 Network Address Translation 259 Network Address Translators 111 Network Temporarily Disconnected 211 213 NTP RFC 1305 193 NTP Time Servers 188 O OK Response 108 One to One 261 operation humidity 223 operation temperature 223 Outbound Proxy 110 111 Outbound Proxy Server 111 Outbound Proxy SIP 111 Outside 259 P Password 34 Change 34 password 223 P 2304R P1 Series User s Guide 297 Index PBX Services 107 PCM 111 226 Peer to Peer Calls 31 Peer t
169. e ee EE ER RA Re ee eg 67 Table 25 Bandwidth Management Wizard gt Services Setup is se RR Re EE GR ER Re Re Re ee ee ee ee 68 Table 26 Bandwidth Management Wizard gt Priority Setup iii ee de ek ee AR ee ee ee emm 69 Table 27 Bandwidth Management Wizard gt Finish issues Ese ee eks Ke GERAAK Ge GEED dd Ke ee DA N GN dee dk GN GE GER kke 70 Table 28 Bridge Mode Features Dy ee AE URS AA EA EE AE UR EE 71 Table 29 Pivate IF Address Rangos Mete RT 75 Table 30 Network gt WAN gt Internet Connection Ethernet iss iss sees ie ee EA EE KA Ee EA Ke Ge ek 77 Table 31 Network gt WAN gt Internet Connection Roadrunner essem 79 Table 32 Network gt WAN gt Internet Connection PPPOE eiseres disse ees dd see ee de Pe Ad ee Ke GE Ee Peka 80 Table 33 Network gt WAN Advanced 51 cds reed etat EE t Odo IM S REL ee Ee S ER P Ge eu 82 Table 34 Network gt WAN gt Traffic Redirect sees ER AA Ee RA AAK AR seated tan tha AR nah daa ed daa 84 Table 2S Network gt LAIN SIP EA EE EE ED 90 Table AB Network gt LAN gt DHCP SGUD soes nor sara HERE Ge ko GE NE e EXER E HET FM bo OPEP EE ti 90 Table oT Nevo LAN SIUE DACP GER xs ee NO UR EBEN SS EE ame eel sere 92 Tablo 28 Network LAN gt Client LIBE RE EEN ER EE EE EO atl b EE 93 P 2304R P1 Series User s Guide 21 List of Tables Table 39 Networks LAN gt PASSER EKEN ra t FS Ra t FERE LEER RP r gee ge 94 Table 0 Network DAN RaW iis ttis ER EKS MA FEM
170. e name The dir field lists the incoming and outgoing interfaces LAN LAN LAN WAN LAN DEV for example The following table shows RFC 2408 ISAKMP payload types that the log displays Please refer to the RFC for detailed information on each type Table 87 RFC 2408 ISAKMP Payload Types LOG DISPLAY PAYLOAD TYPE SA Security Association PROP Proposal TRANS Transform KE Key Exchange ID Identification CER Certificate CER REQ Certificate Request HASH Hash SIG Signature NONCE Nonce NOTFY Notification DEL Delete VID Vendor ID P 2304R P1 Series User s Guide Chapter 19 Logs 19 2 Logs Screens 19 2 1 Log Viewer Screen Use this screen to look at log entries and alerts Alerts are written in red To access this screen click Maintenance gt Logs gt View Log Figure 109 Maintenance gt Logs gt View Log View Log Logs Display All Logs X Email Log Now Refresh Clear Log M 00 14 04 Successful WEB login 192 168 1 33 User admin 01 01 2000 00 02 02 01 01 2000 00 01 43 01 01 2000 00 01 40 01 01 2000 00 01 37 Successful WEB login 192 168 1 33 User admin DHCP server assigns 192 168 1 33 to tw11477 02 DHCP server assigns 192 168 1 33 to tw11477 02 DHCP server assigns 192 168 1 33 to tw11477 02 Click a column header to sort log entries in descending later to earlier order Click again to sort in ascendi
171. e signals into digital signals and decodes the digital signals back into voice signals The ZyXEL Device supports the following codecs G 711 is a Pulse Code Modulation PCM waveform codec PCM measures analog signal amplitudes at regular time intervals and converts them into bits G 711 provides very good sound quality but requires 64kbps of bandwidth P 2304R P1 Series User s Guide 111 Chapter 9 SIP G 729 is an Analysis by Synthesis AbS hybrid waveform codec that uses a filter based on information about how the human vocal tract produces sounds G 729 provides good sound quality and reduces the required bandwidth to 8kbps 9 1 9 PSTN Call Setup Signaling PSTNS Public Switched Telephone Networks use DTMF or pulse dialing to set up telephone calls Dual Tone Multi Frequency DTMF signaling uses pairs of frequencies one lower frequency and one higher frequency to set up calls It is also known as Touch Tone Each of the keys on a DTMF telephone corresponds to a different pair of frequencies Pulse dialing sends a series of clicks to the local phone office in order to dial numbers 9 1 10 MWI Message Waiting Indication Enable Message Waiting Indication MWI enables your phone to give you a message waiting beeping dial tone when you have one or more voice messages Your VoIP service provider must have a messaging system that sends message waiting status SIP packets as defined in RFC 3842 9 1 11 Qualit
172. ed and the local IP address of the desired server The port number identifies a service for example web service is on port 80 and FTP on port 21 In some cases such as for unknown services or where one server can support more than one service for example both FTP and web service it might be better to specify a range of port numbers In addition to the servers for specified services NAT supports a default server A service request that does not have a server explicitly designated for it is forwarded to the default server If the default is not defined the service request is simply discarded See Appendix H on page 283 for examples of services For example let s say you want to assign ports 21 25 to one FTP Telnet and SMTP server A in the example port 80 to another B in the example and assign a default server IP address of 192 168 1 35 to a third C in the example You assign the LAN IP addresses and the ISP assigns the WAN IP address The NAT network appears as a single host on the Internet P 2304R P1 Series User s Guide Chapter 8 NAT Figure 47 Multiple Servers Behind NAT Example A 192 168 1 33 192 16811 B 192 168 1 34 Pl NS c D 192 168 1 36 lt gt C 192 168 1 35 ase IP address assigned by ISP 8 1 2 Trigger Port Forwarding Some services use a dedicated range of ports on the client side and a dedicated range of ports on the server side With regular
173. ed bandwidth to its sub classes that have more traffic than their budgets and have bandwidth borrowing enabled The ZyXEL Device gives priority to sub classes of higher priority and treats classes of the same priority equally 3 The ZyXEL Device assigns any remaining unused or unbudgeted bandwidth on the interface to any class that requires it The ZyXEL Device gives priority to classes of higher priority and treats classes of the same level equally 4 Ifthe bandwidth requirements of all of the traffic classes are met and there is still some unbudgeted bandwidth the ZyXEL Device assigns it to traffic that does not match any of the classes P 2304R P1 Series User s Guide Chapter 15 Bandwidth MGMT 15 1 9 Over Allotment of Bandwidth You can set the bandwidth management speed for an interface higher than the interface s actual transmission speed Higher priority traffic gets to use up to its allocated bandwidth even if it takes up all ofthe interface s available bandwidth This could stop lower priority traffic from being sent The following is an example Table 69 Over Allotment of Bandwidth Example BANDWIDTH CLASSES ALLOTMENTS PRIORITIES Actual outgoing bandwidth available on the interface 1000 kbps Root Class 1500 kbps same VoIP traffic Service SIP 500 Kbps High AS Spes SRNO NetMeeting traffic Service H 323 500 kbps High FTP Service FTP 500 Kbps Medium If you use VoIP and NetMe
174. els on the NAT never changes the IP address either local or global of an outside host P 2304R P1 Series User s Guide Appendix F NAT What NAT Does In the simplest form NAT changes the source IP address in a packet received from a subscriber the inside local address to another the inside global address before forwarding the packet to the WAN side When the response comes back NAT translates the destination address the inside global address back to the inside local address before forwarding it to the original inside host Note that the IP address either local or global of an outside host is never changed The global IP addresses for the inside hosts can be either static or dynamically assigned by the ISP In addition you can designate servers for example a web server and a telnet server on your local network and make them accessible to the outside world If you do not define any servers for Many to One and Many to Many Overload mapping NAT offers the additional benefit of firewall protection With no servers defined your ZyXEL Device filters out all incoming inquiries thus preventing intruders from probing your network For more information on IP address translation refer to RFC 1631 The IP Network Address Translator NAT How NAT Works Each packet has two addresses a source address and a destination address For outgoing packets the ILA Inside Local Address is the source address on the L
175. er Outbound Proxy 111 Services 97 Session Initiation Protocol 27 107 Silence Suppression 121 225 226 Silent Packets 121 Single User Account 266 SIP 27 107 SIP RFC 3261 version 2 226 SIP Account 107 SIP Accounts 224 SIP ACK Message 108 SIP ALG 99 110 224 SIP Application Layer Gateway 99 224 SIP BYE Request 108 SIP Call Progression 108 P 2304R P1 Series User s Guide Index SIP Client 108 SIP Client Server 108 SIP Identities 107 SIP INVITE Request 108 SIP Number 107 SIP OK Response 108 SIP Outbound Proxy 111 SIP Proxy Server 109 SIP Redirect Server 109 SIP Register Server 110 SIP Servers 108 SIP Service Domain 108 SIP URI 107 SIP User Agent 108 SNMP 166 Get 167 GetNext 167 manager 166 MIB 166 167 Set 167 Trap 167 Sound Quality 111 specification tables 223 Speed Dial 129 Speed Dial Phonebook 226 Stateful Inspection 137 Static Routes 226 storage humidity 223 storage temperature 223 STUN 110 111 226 SUA Single User Account 266 SUA Server Set 266 subnet 249 subnet mask 250 subnetting 252 Supplementary Phone Services 121 Supplementary Services 121 Symmetric NAT 265 Symmetric NAT Outgoing 265 syntax conventions 4 Syslog 226 system modes See modes System Name 187 System Parameter Table Generator 267 System Timeout 167 T Telephone Keys 112 Telnet 226 Text File Format 267 TFTP 226 TFTP Restrictions 165 Three Way Conference 123 124 Time Resetting 189
176. er port 7070 P 2304R P1 Series User s Guide Chapter 8 NAT 2 Port 7070 is a trigger port and causes the ZyXEL Device to record Jane s computer IP address The ZyXEL Device associates Jane s computer IP address with the incoming port range of 6970 7170 3 The Real Audio server responds using a port number ranging between 6970 7170 The ZyXEL Device forwards the traffic to Jane s computer IP address 5 Only Jane can connect to the Real Audio server until the connection is closed or times out The ZyXEL Device times out in three minutes with UDP User Datagram Protocol or two hours with TCP IP Transfer Control Protocol Internet Protocol A 8 1 2 2 Two Points To Remember About Trigger Ports 1 Trigger events only happen on data that is going coming from inside the ZyXEL Device and going to the outside 2 If an application needs a continuous data stream that port range will be tied up so that another computer on the LAN can t trigger it 8 1 3 SIP ALG Some NAT routers may include a SIP Application Layer Gateway ALG A SIP ALG allows SIP calls to pass through NAT by examining and translating IP addresses embedded in the data stream When the ZyXEL Device registers with the SIP register server the SIP ALG translates the ZyXEL Device s private IP address inside the SIP data stream to a public IP address You do not need to use STUN or an outbound proxy see Chapter 9 on page 107 if your ZyXEL Device is behind a SIP
177. er Ethernet v Service Name optional User Name Password The following table describes the labels in this screen Table 14 Connection Wizard gt ISP Parameters PPPoE LABEL DESCRIPTION Connection Type Select PPP over Ethernet Service Name Enter the PPP service name provided by your ISP If your ISP did not provide a service name leave this field blank User Name Enter the user name provided by your ISP Password Enter the password provided by your ISP Back Click this to go to the previous screen Next gt Click this to go to the next screen Exit Click this to close this screen and return to the main screen P 2304R P1 Series User s Guide Chapter 4 Wizard Setup 4 2 4 Your IP Address Figure 20 Connection Wizard IP Address Connection Wizard ffi Internet Configuration 9 Get automatically from your ISP L Use fixed IP address provided by your ISP The following table describes the labels in this screen Table 15 Connection Wizard gt IP Address LABEL DESCRIPTION Get automatically Select this if your ISP did not assign you a static IP address from your ISP Use fixed IP Select this if your ISP assigned you a static IP address address provided by your ISP lt Back Click this to go to the previous screen Next gt Click this to go to the next screen Exit Click this to close this
178. er FU usse aic sea eio aged dead ut td PUR LU RO 146 Figure 75 Security gt Content Filter gt Schedule uses cce KOSSE EENS ace ula Pres GE Ged Ge ver BE ep ee EE ed 147 Figure 76 Example of Static Routing TOpOlOGy sissies eter torret EER tuae tao pp cderdesuos fmm aee eb pe Gee SEEN Ge EE Ge Ge 149 Figure 77 Management gt Static Route gt IP Static Route iese esse SAKKE SA AKA EE EA KA Re nnn Ge annua ke ek 150 Figure 78 Management gt Static Route gt IP Static Route gt Edit se see ee ee Re Re ee Ee AG EE Ee ee 151 Figure 79 Subnet based Bandwidth Management Example cccccececccceeseeecceceeeeeeaeenenseeaeeeneseaes 154 Figure 80 Management gt Bandwidth MGMT gt Summary sese 159 Figure 81 Management gt Bandwidth MGMT gt Class Setup ie ees se ee ee ee Re ee ee Ge ke ee ee ee ke ee 160 P 2304R P1 Series User s Guide List of Figures Figure 82 Management gt Bandwidth MGMT gt Class Setup gt Edit ees esse se ee ee see ee ee ee ke ee ee ee 162 Figure 83 Management gt Bandwidth MGMT gt Monitor emen 163 Figure 84 SNMP Management Model iss seks trat ttt VRESE NE Spb b Ede S a aa aana 166 Figure 85 Management gt Remote MGMT gt WWW esse ed dese eed de EE eed ennt nnne d aa tnnt aai RR eua 168 Figure 86 Management Remote MGMT gt Telnet reete nennen nein ees ees ees deer enne ad AE bn 168 Figure 87 Management Remote MGMT gt FTP sessies eua oett euh t
179. er s Guide Introducing the Web Configurator This chapter describes how to access the ZyXEL Device web configurator and provides an overview of its screens 2 1 Web Configurator Overview The web configurator is an HTML based management interface that allows easy ZyXEL Device setup and management via Internet browser Use Internet Explorer 6 0 and later or Netscape Navigator 7 0 and later versions The recommended screen resolution is 1024 by 768 pixels In order to use the web configurator you need to allow Web browser pop up windows from your device Web pop up blocking is enabled by default in Windows XP SP Service Pack 2 JavaScripts enabled by default Java permissions enabled by default See the troubleshooting chapter if you want to make sure these functions are allowed in Internet Explorer or Netscape Navigator 2 2 Accessing the Web Configurator 1 Make sure your ZyXEL Device hardware is properly connected and prepare your computer computer network to connect to the ZyXEL Device refer to the Quick Start Guide 2 Launch your web browser 3 Type 192 168 1 1 the ZyXEL Device s default LAN IP address as the URL The Login screen appears P 2304R P1 Series User s Guide 33 Chapter 2 Introducing the Web Configurator Figure 5 Login Screen Prestige 2304R P1 4 Type 1234 default as the password and click Login In some versions the default password appears a
180. ers Write down the password and put it in a safe place Back up the configuration and make sure you know how to restore it Restoring an earlier working configuration may be useful if the device becomes unstable or even crashes If you forget your password you will have to reset the ZyXEL Device to its factory default settings If you backed up an earlier configuration file you would not have to totally re configure the ZyXEL Device You could simply restore your last configuration 1 4 LEDs The following graphic displays the labels of the LEDs Figure1 LEDs POWER c c ETHERNET c c WAN INTERNET PHONE PHONE c moe mets ZyXEL None of the LEDs are on if the ZyXEL Device is not receiving power Table 1 LED Descriptions DESCRIPTION The ZyXEL Device is receiving power and ready for use Blinking The ZyXEL Device is self testing The ZyXEL Device detected an error while self testing or there is a device malfunction LED COLOR STATUS POWER Green On Red On Off The ZyXEL Device is not receiving power P 2304R P1 Series User s Guide Chapter 1 Introducing the ZyXEL Device Table 1 LED Descriptions LED COLOR STATUS DESCRIPTION ETHERNET Green On The ZyXEL Device has an Ethernet connection with a computer Blinking The ZyXEL Device is sending receiving data to from
181. esearch 2048 kbps P 2304R P1 Series User s Guide 155 Chapter 15 Bandwidth MGMT The ZyXEL Device divides up the unbudgeted 2048 kbps among the classes that require more bandwidth If the administration department only uses 1024 kbps of the budgeted 2048 kbps the ZyXEL Device also divides the remaining 1024 kbps among the classes that require more bandwidth Therefore the ZyXEL Device divides a total of 3072 kbps of unbudgeted and unused bandwidth among the classes that require more bandwidth 15 1 7 3 Priority based Allotment of Unused and Unbudgeted Bandwidth The following table shows the priorities of the bandwidth classes and the amount of bandwidth that each class gets Table 66 Priority based Allotment of Unused and Unbudgeted Bandwidth Example BANDWIDTH CLASSES PRIORITIES AND ALLOTMENTS Root Class 10240 kbps Administration Priority 4 1024 kbps Sales Priority 6 3584 kbps Marketing Priority 6 3584 kbps Research Priority 5 2048 kbps Suppose that all of the classes except for the administration class need more bandwidth Each class gets up to its budgeted bandwidth The administration class only uses 1024 kbps of its budgeted 2048 kbps The sales and marketing are first to get extra bandwidth because they have the highest priority 6 If they each require 1536 kbps or more of extra bandwidth the ZyXEL Device divides the total 3072 kbps total of unbudg
182. ess is dynamic select Obtain an IP address automatically Ifyou have a static IP address select Specify an IP address and type your information into the IP Address and Subnet Mask fields Figure 130 Windows 95 98 Me TCP IP Properties IP Address CPAP Propewies EIE Bindings Advanced NeBlos DNS Configuration Gateway WINS Configuration IP Address An IP address can be automatically assigned to this computer If your network does not automatically assign IP addresses ask your network administrator for an address and then type it in the space below Specify an IP address AR recs ue ees xr Subnet Mess IV Detect connection to network media Cancel 3 Click the DNS Configuration tab f you do not know your DNS information select Disable DNS f you know your DNS information select Enable DNS and type the information in the fields below you may not need to fill them all in P 2304R P1 Series User s Guide 237 Appendix C Setting up Your Computer s IP Address Figure 131 Windows 95 98 Me TCP IP Properties DNS Configuration TCP IP Properties 21 xl Bindings Advanced Nemos DNS Configuration Gateway WINS Configuration IP Address Domain Suffix Search Order P Cancel 4 Click the Gateway tab f you do not know your gateway s IP address remove previously installed gateways f you have a gateway IP address type it i
183. ess of a host in a packet For example the source address of an outgoing packet used within one network is changed to a different IP address known within another network NAT Definitions Inside outside denotes where a host is located relative to the ZyXEL Device For example the computers of your subscribers are the inside hosts while the web servers on the Internet are the outside hosts Global local denotes the IP address of a host in a packet as the packet traverses a router For example the local address refers to the IP address of a host when the packet is in the local network while the global address refers to the IP address of the host when the same packet is traveling in the WAN side Note that inside outside refers to the location of a host while global local refers to the IP address of a host used in a packet Thus an inside local address ILA is the IP address of an inside host in a packet when the packet is still in the local network while an inside global address IGA is the IP address of the same inside host when the packet is on the WAN side The following table summarizes this information Table 125 NAT Definitions TERM DESCRIPTION Inside This refers to the host on the LAN Outside This refers to the host on the WAN Local This refers to the packet address source or destination as the packet travels on the LAN Global This refers to the packet address source or destination as the packet trav
184. eted and unused bandwidth equally between the sales and marketing departments 1536 kbps extra to each for a total of 3584 kbps for each because they both have the highest priority level Research requires more bandwidth but only gets its budgeted 2048 kbps because all of the unbudgeted and unused bandwidth goes to the higher priority sales and marketing classes 15 1 7 4 Fairness based Allotment of Unused and Unbudgeted Bandwidth The following table shows the amount of bandwidth that each class gets Table 67 Fairness based Allotment of Unused and Unbudgeted Bandwidth Example BANDWIDTH CLASSES AND ALLOTMENTS Root Class 10240 kbps Administration 1024 kbps Sales 3072 kbps Marketing 3072 kbps Research 3072 kbps Suppose that all of the classes except for the administration class need more bandwidth Each class gets up to its budgeted bandwidth The administration class only uses 1024 kbps of its budgeted 2048 kbps The ZyXEL Device divides the total 3072 kbps total of unbudgeted and unused bandwidth equally among the other classes 1024 kbps extra goes to each so the other classes each get a total of 3072 kbps P 2304R P1 Series User s Guide Chapter 15 Bandwidth MGMT 15 1 8 Bandwidth Borrowing Bandwidth borrowing allows a sub class to borrow unused bandwidth from its parent class whereas maximize bandwidth usage allows any bandwidth class to borrow any unused or unbudgeted bandwidth on t
185. eting at the same time the device allocates up to 500 Kbps of bandwidth to each of them before it allocates any bandwidth to FTP As a result FTP can only use bandwidth when VoIP and NetMeeting do not use all of their allocated bandwidth Suppose you try to browse the web too In this case VoIP NetMeeting and FTP all have higher priority so they get to use the bandwidth first You can only browse the web when VoIP NetMeeting and FTP do not use all 1000 Kbps of available bandwidth 15 2 Bandwidth Management Screens 15 2 1 Bandwidth Management Summary Screen Use this screen to enable bandwidth management on an interface and to set the maximum allowed bandwidth and the scheduler for the interface You can also enable or disable maximize bandwidth usage To access this screen click Management gt Bandwidth MGMT gt Summary P 2304R P1 Series User s Guide Chapter 15 Bandwidth MGMT Figure 80 Management gt Bandwidth MGMT gt Summary Summary Summary BW Manager manages the bandwidth of traffic flowing out of router on the specific interface BW Manager can be switched on off independently for each interface LAN Active Speed 100000 kbps Scheduler Fairness Based 7 Maximize bandwidth usage WAN Active Speed 100000 kbps Scheduler Fairness Based Maximize bandwidth usage Apply Reset Each field is described in the following table Table 70 Management Bandwidth MGMT Summar
186. ets how much access to specific applications What priority level should you give to each type of traffic Which traffic must have guaranteed delivery How much bandwidth should be allotted to guarantee delivery Bandwidth management also allows you to configure the allowed output for an interface to match what the network can handle This helps reduce delays and dropped packets at the next routing device For example you can set the WAN interface speed to 1024 kbps or less if the broadband device connected to the WAN port has an upstream speed of 1024 kbps 15 1 1 Bandwidth Classes and Filters Use bandwidth classes and sub classes to allocate specific amounts of bandwidth capacity bandwidth budgets Configure a bandwidth filter to define a bandwidth class or sub class based on a specific application and or subnet Use the Bandwidth Class Setup Screen to set up a bandwidth class s name bandwidth allotment and bandwidth filter You can configure up to one bandwidth filter per bandwidth class You can also configure bandwidth classes without bandwidth filters However it is recommended that you configure sub classes with filters for any classes that you configure without filters The ZyXEL Device leaves the bandwidth budget allocated and unused for a class that does not have a filter or sub classes with filters View your configured bandwidth classes and sub classes in the Bandwidth Class Setup Screen The total of the configured ba
187. etworks This is the data channel RCMD TCP 512 Remote Command Service REAL_AUDIO TCP 7070 A streaming audio service that enables real time sound over the web REXEC TCP 514 Remote Execution Daemon RLOGIN TCP 513 Remote Login ROADRUNNER TCP UDP 1026 This is an ISP that provides services mainly for cable modems RTELNET TCP 107 Remote Telnet RTSP TCP UDP 554 The Real Time Streaming media control Protocol RTSP is a remote control for multimedia on the Internet SFTP TCP 115 The Simple File Transfer Protocol is an old way of transferring files between computers SMTP TCP 25 Simple Mail Transfer Protocol is the message exchange standard for the Internet SMTP enables you to move messages from one e mail server to another SMTPS TCP 465 This is a more secure version of SMTP that runs over SSL SNMP TCP UDP 161 Simple Network Management Program SNMP TRAPS TCP UDP 162 Traps for use with the SNMP RFC 1215 SQL NET TCP 1521 Structured Query Language is an interface to access data on many different types of database systems including mainframes midrange systems UNIX systems and network servers SSDP UDP 1900 The Simple Service Discovery Protocol supports Universal Plug and Play UPnP SSH TCP UDP 22 Secure Shell Remote Login Program STRM WORKS UDP 1558 Stream Works Protocol SYSLOG UDP 514 Syslog allows you to send system logs to a UNIX server TACACS UDP 49 Login Host Protocol used for Terminal Access Controller Ac
188. f installing UPnP in Windows XP and Windows Me as well as an example of using UPnP in Windows 17 2 UPnP Examples 17 2 1 Installing UPnP in Windows Example This section shows how to install UPnP in Windows Me and Windows XP 17 2 1 1 Installing UPnP in Windows Me Follow the steps below to install the UPnP in Windows Me 1 Click Start and Control Panel Double click Add Remove Programs 2 Click on the Windows Setup tab and select Communication in the Components selection box Click Details Figure 91 Add Remove Programs Windows Setup Communication Install Uninstall Windows Setup Startup Disk To add or remove a component select or clear the check box If the check box is shaded only part of the component will be installed To see what s included in a component click Details Components M Address Book Communications 5 6 MB C R Desktop Themes 0 0 MB a M i Games 10 1 MB O E Multilanguage Support 0 0 MB Space used by installed components 42 4 MB Space required 0 0 MB Space available on disk 855 3 MB Description Includes accessories to help you connect to other computers and online services 5 of 10 components selected Details Have Disk OK Cancel Apply Add Remove Programs Properties 2 xl P 2304R P1 Series User s Guide Chapter 17 UPnP 3 Inthe Communications window select the Universal Plug and Play check box in the Components selecti
189. formation you provided 4 4 Bandwidth Management Wizard Use this wizard to control how much traffic can pass through your ZyXEL Device and the priority of each service application that can use it Each service you select is guaranteed a small amount of bandwidth The remaining bandwidth is divided by priority If one service has higher priority than another then the first service uses as much of the remaining bandwidth as it needs If there is no more bandwidth for the second service then it waits If you do not select a service in this wizard or if you do not find a particular service the service can still use bandwidth but it does not have any guaranteed amount and it has the lowest priority See Chapter 15 on page 153 for more information P 2304R P1 Series User s Guide Chapter 4 Wizard Setup 4 4 1 Welcome Figure 29 Bandwidth Management Wizard gt Welcome Bandwidth Management Wizard ZyXEL Welcome to the ZyXEL Bandwidth Management Wizard n ty for defined The following table describes the labels in this screen Table 23 Bandwidth Management Wizard gt Welcome LABEL DESCRIPTION lt Back Click this to go to the previous screen Next gt Click this to go to the next screen Exit Click this to close this screen and return to the main screen 66 P 2304R P1 Series User s Guide Chapter 4 Wizard Setup 4 4 2 General Information Figure
190. g P 2304R P1 Series User s Guide Chapter 10 Phone 10 1 3 2 2 European Call Waiting This allows you to place a call on hold while you answer another incoming call on the same telephone directory number If there is a second call to a telephone number you will hear a call waiting tone Take one of the following actions Reject the second call Press the flash key and then press 0 Disconnect the first call and answer the second call Either press the flash key and press 1 or just hang up the phone and then answer the phone after it rings Put the first call on hold and answer the second call Press the flash key and then 2 10 1 3 2 3 European Call Transfer Do the following to transfer an incoming call that you have answered to another phone 1 Press the flash key to put the caller on hold 2 When you hear the dial tone dial 98 followed by the number to which you want to transfer the call to operate the Intercom 3 After you hear the ring signal or the second party answers it hang up the phone 10 1 3 2 4 European Three Way Conference Use the following steps to make three way conference calls 1 When you are on the phone talking to someone place the flash key to put the caller on hold and get a dial tone 2 Dial a phone number directly to make another call 3 When the second call is answered press the flash key and press 3 to create a three way conversation 4 Hang up the
191. g suggestions for I forgot the IP address for the ZyXEL Device Check the hardware connections and make sure the LEDs are behaving as expected See the Quick Start Guide and Section 1 4 on page 28 Make sure your Internet browser does not block pop up windows and has JavaScripts and Java enabled See Appendix B on page 229 If you disabled Any IP Section 21 1 on page 215 make sure your computer is in the same subnet as the ZyXEL Device If you know that there are routers between your computer and the ZyXEL Device skip this step e fthere is a DHCP server on your network make sure your computer is using a dynamic IP address See Appendix C on page 235 Your ZyXEL Device is a DHCP server by default P 2304R P1 Series User s Guide Chapter 21 Troubleshooting 5 Reset the device to its factory defaults and try to access the ZyXEL Device with the default IP address See Section 2 3 on page 35 6 Ifthe problem continues contact the network administrator or vendor or try one of the advanced suggestions Advanced Suggestions You may also need to clear your Internet browser s cache In Internet Explorer click Tools and then Internet Options to open the Internet Options screen In the General tab click Delete Files In the pop up window select the Delete all offline content check box and click OK Click OK in the Internet Options screen to close it e f you disconnect your computer from one device and connect it
192. gt 0 0 150000023 SUA Server 6 Protocol lt 0 A11 6 TCP 17 U 0 DP 150000024 SUA Server 6 Port Start 0 150000025 SUA Server 6 Port End 0 150000026 SUA Server 6 Local IP address 0 150000027 SUA Server 7 Active SO No 1 Yes gt 0 150000028 SUA Server 7 Protocol lt 0 A11 6 TCP 17 U 0 DP 150000029 SUA Server 7 Port Start 0 150000030 SUA Server 7 Port End 0 150000031 SUA Server 7 Local IP address 0 150000032 SUA Server 8 Active SO No 1 Yes gt 0 150000033 SUA Server 48 Protocol lt 0 ALL 6 TCP 17 U 0 DP gt 150000034 SUA Server 8 Port Start 0 150000035 SUA Server 8 Port End 0 150000036 SUA Server 8 Local IP address 0 150000037 SUA Server 9 Active SO No 1 Yes gt 0 150000038 SUA Server 9 Protocol lt 0 ALL 6 TCP 17 U 0 DP gt 150000039 SUA Server 9 Port Start 0 150000040 SUA Server 9 Port End 0 276 P 2304R P1 Series User s Guide Appendix G Internal SPTGEN Table 133 Menu 15 SUA Server Setup continued 150000041 SUA Server 9 Local IP address 0 0 0 0 150000042 SUA Server 10 Active 0 No 1 Yes gt 0 150000043 SUA Server 10 Protocol lt 0 ALL 6 TCP 17 U 0 DP gt 150000044 SUA Server 10
193. gure additional default gateways in the IP Settings tab by clicking Add in Default gateways In TCP IP Gateway Address type the IP address of the default gateway in Gateway To manually configure a default metric the number of transmission hops clear the Automatic metric check box and type a metric in Metric Click Add Repeat the previous three steps for each default gateway you want to add Click OK when finished P 2304R P1 Series User s Guide Appendix C Setting up Your Computer s IP Address Figure 137 Windows XP Advanced TCP IP Properties Advanced TCP IP Settings IP Settings DNS WINS Options IP addresses IP address Subnet mask DHCP Enabled Default gateways Gateway Metric Automatic metric 7 Inthe Internet Protocol TCP IP Properties window the General tab in Windows XP Click Obtain DNS server address automatically if you do not know your DNS server IP address es f you know your DNS server IP address es click Use the following DNS server addresses and type them in the Preferred DNS server and Alternate DNS server fields If you have previously configured DNS servers click Advanced and then the DNS tab to order them P 2304R P1 Series User s Guide Appendix C Setting up Your Computer s IP Address Figure 138 Windows XP Internet Protocol TCP IP Properties Internet Protocol TCP IP Properties General Alternate Configuration You can get IP settings assigned au
194. h prevents the ICMP response packet from being sent This keeps outsiders from discovering your ZyXEL Device when unsupported ports are probed If you clear this your ZyXEL Device replies with an ICMP Port Unreachable packet for a port probe on unused UDP ports and with a TCP Reset packet for a port probe on unused TCP ports Apply Click this to save your changes and to apply them to the ZyXEL Device Reset Click this to set every field in this screen to its last saved value P 2304R P1 Series User s Guide PART V Maintenance and Troubleshooting UPnP Use this screen to set up UPnP 17 1 Introducing Universal Plug and Play Universal Plug and Play UPnP is a distributed open networking standard that uses TCP IP for simple peer to peer network connectivity between devices A UPnP device can dynamically join a network obtain an IP address convey its capabilities and learn about other devices on the network In turn a device can leave a network smoothly and automatically when it is no longer in use 17 1 1 How do I know if I m using UPnP UPnP hardware is identified as an icon in the Network Connections folder Windows XP Each UPnP compatible device installed on your network will appear as a separate icon Selecting the icon of a UPnP device will allow you to access the information and properties of that device 17 1 2 NAT Traversal UPnP NAT traversal automates the process of allo
195. hat you specify You can define time periods and days during which content filtering is enabled Bandwidth Management You can efficiently manage traffic on your network by reserving bandwidth and giving priority to certain types of traffic and or to particular computers This policy based bandwidth allocation helps your network to better handle real time applications such as Voice over IP VoIP Remote Managemet This allows you to decide whether a service HTTP or FTP traffic for example from a computer on a network LAN or WAN for example can access the ZyXEL Device Time and Date Get the current time and date from an external server when you turn on your ZyXEL Device You can also set the time manually These dates and times are then used in logs Logging and Tracing Use packet tracing and logs for troubleshooting You can send logs from the ZyXEL Device to an external UNIX syslog server PPPoE PPPoE mimics a dial up over Ethernet Internet access connection Universal Plug and Play UPnP The ZyXEL Device can communicate with other UPnP enabled devices in a network P 2304R P1 Series User s Guide Appendix A Product Specifications Table 112 Feature Specifications Voice Functions SIP RFC 3261 version 2 SDP RFC 2327 RTP RFC 1889 RTCP RFC 1890 G 168 Echo Cancellation VAD Voice Activity Detection Silence Suppression CNG Comfort Noise Generation Q
196. he gateway helps forward packets to their destinations Metric Usually you should keep the default value This field is related to RIP See Chapter 7 on page 85 for more information The metric represents the cost of transmission A router determines the best route for transmission by choosing a path with the lowest cost The smaller the metric the lower the cost RIP uses hop count as the measurement of cost where 1 is for a directly connected network The metric must be 1 15 if you use a value higher than 15 the routers assume the link is down Apply Click this to save your changes and to apply them to the ZyXEL Device Cancel Click this to return to the previous screen without saving your changes P 2304R P1 Series User s Guide Chapter 14 Static Route 152 P 2304R P1 Series User s Guide Bandwidth MGMT Use these screens to manage the amount of traffic the ZyXEL Device routes through each interface 15 1 Bandwidth Management Overview Bandwidth management allows you to allocate an interface s outgoing capacity to specific types of traffic It can also help you make sure that the ZyXEL Device forwards certain types of traffic especially real time applications with minimum delay With the use of real time applications such as Voice over IP VoIP increasing the requirement for bandwidth allocation is also increasing Bandwidth management addresses questions such as Who g
197. he interface Class Setup Use this screen to define bandwidth classes Monitor Use this screen to view bandwidth class statistics Remote MGMT WWW Use this screen to configure through which interface s and from which IP address es users can use HTTP to manage the ZyXEL Device Telnet Use this screen to configure through which interface s and from which IP address es users can use Telnet to manage the ZyXEL Device FTP Use this screen to configure through which interface s and from which IP address es users can use FTP to access the ZyXEL Device SNMP Use this screen to configure your ZyXEL Device s settings for Simple Network Management Protocol management DNS Use this screen to configure through which interface s and from which IP address es users can send DNS queries to the ZyXEL Device Security Use this screen to change your anti probing settings UPnP General Use this screen to enable UPnP on the ZyXEL Device Maintenance System General Use this screen to configure general system settings Dynamic DNS Use this screen to set up dynamic DNS Time Setting Use this screen to change your ZyXEL Device s time and date Logs View Log Use this screen to view the logs for the categories that you selected Log Settings Use this screen to change your ZyXEL Device s log settings Tools Firmware Use this screen to upload firmware to your ZyXEL Device Configuration Use this screen to backup and restore the configuration or reset the factory defaults t
198. he whole interface Enable bandwidth borrowing on a sub class to allow the sub class to use the parent class s unused bandwidth The parent class s unused bandwidth is given to the highest priority sub class first see Section 15 1 8 1 on page 157 The total of the bandwidth allotments for sub classes cannot exceed the bandwidth allotment of the parent class The ZyXEL Device uses the scheduler to divide the parent class s unused bandwidth among the sub classes that have bandwidth borrowing enabled 15 1 8 1 Bandwidth Borrowing Example Here is an example of bandwidth management with classes configured for bandwidth borrowing The classes are set up based on departments and individuals within certain departments Table 68 Bandwidth Borrowing Example BANDWIDTH CLASSES AND BANDWIDTH BORROWING SETTINGS Root Class Administration Borrowing Enabled Sales Borrowing Disabled Marketing Borrowing Enabled Research Borrowing Enabled The Sales class cannot borrow unused bandwidth from the Root class because the Sales class has bandwidth borrowing disabled 15 1 8 2 Maximize Bandwidth Usage With Bandwidth Borrowing If you configure both maximize bandwidth usage on the interface and bandwidth borrowing on individual sub classes the ZyXEL Device functions as follows 1 The ZyXEL Device sends traffic according to each bandwidth class s bandwidth budget 2 The ZyXEL Device assigns a parent class s unus
199. his field displays the current registration status of the SIP account You have to register SIP accounts with a SIP server to use VoIP If the SIP account is already registered with the SIP server Click Unregister to delete the SIP account s registration in the SIP server This does not cancel your SIP account but it deletes the mapping between your SIP identity and your IP address or domain name The second field displays Registered If the SIP account is not registered with the SIP server Click Register to have the ZyXEL Device attempt to register the SIP account with the SIP server The second field displays the reason the account is not registered Inactive The SIP account is not active You can activate it in VoIP SIP SIP Settings Not Register The SIP account is active but you have not tried to register it yet Register Fail The last time the ZyXEL Device tried to register the SIP account with the SIP server the attempt failed URI This field displays the account number and service domain of the SIP account You can change these in VoIP gt SIP gt SIP Settings 3 2 Any IP Table To access this screen open the Status screen see Section 3 1 on page 41 and click Details next to Any IP Table P 2304R P1 Series User s Guide Chapter 3 Status Screens Figure 10 Any IP Table Any IP TABLE zs IP Address MAC Address Refresh Each field is described in the fol
200. iangle Route Problemi iS GEREG OG GER ee ERR X EE EG ee GE ede 140 T FINAL SEES addetto e bu lox reer ree rem t c d aod Eo EUR opu de ad 141 12 3 1 General Firewall SEER oe b Epid EN N e aaa Le pp bU ebd el a epe 141 12 3 7 Firewall SorviGas D FGDD eoe tee pla ER esi sd VI SS RR ELLE EN Da EN SEI QUN ERG EED EL a PLI GEEN Ee 142 Chapter 13 Content el OE RO Ee N EO EI Rep OE GE EE N EN 145 13 1 Content Filtering COVE sees See ee ed nda dac nae ak En eda d ge 145 19 2 Coment FIG SOSEER ccm 145 122 1 Content Fiter SUIER Less Lope Ea pate EE aad di Haupt dE PLU e is Lote ap SG det 145 13 2 2 Content Filter Schedule SOIN uui cesaasretaek td peak Ea REF end Fa rre a ER Pea Ed Ke Ene 147 Chapter 14 Statie de AE OE Pe 149 EERS ed ROWE de A 149 14 2 cuc ROUTE CNS soes vata sed EE RE Ee Ee E RE QUAS ER NR een FkHEn DI LUE RR RE Kg ents 149 ERN EESCIMCl Eri ESTIS 149 14 22 IP Static Foute Beit See RE GE N EG st ei ed Ge a e toga 150 Chapter 15 cri duc gm AE AR N EE 153 15 1 Bandwidth Mans gemete m 153 15 1 1 Bandwidth Classes and PIEGES essens Ee EE Ve OES Ged de Ge Ge E REI GE Ge be Ee 153 15 1 2 Proportional Bandwidth Allocation esse serta rtt rax aenea gk n nk etna kei nk 154 15 1 3 Application based Bandwidth Management ie se Ee Re AR Re ee ee ee ee ee 154 15 1 4 Subnet based Bandwidth Management eise see dis Ee AAR EE de ee ee de EG ee 154 15 1 5 Application and Subnet based Bandwidth Management
201. ice Power Adaptor Specifications NORTH AMERICAN PLUG STANDARDS AC Power Adapter Model DV 1215A Input Power AC120Volts 60Hz 30W Output Power AC12Volts 1 25A Power Consumption 11 W Safety Standards UL CUL CSA UL 1310 CSA C22 2 No 223 NORTH AMERICAN PLUG STANDARDS AC Power Adapter Model AA 121A25 Input Power AC120Volts 60Hz 19W Output Power AC 12Volts 1 25A Power Consumption 11W Safety Standards UL CUL UL 1310 CSA C22 2 No 223 EUROPEAN PLUG STANDARDS AC Power Adapter Model AA 121A3BN Input Power AC230Volts 50Hz 140mA Output Power AC12Volts 1 3A Power Consumption 11W Safety Standards ITS GS CE EN 60950 P 2304R P1 Series User s Guide 227 Appendix A Product Specifications P 2304R P1 Series User s Guide Pop up Windows JavaScripts and Java Permissions In order to use the web configurator you need to allow Web browser pop up windows from your device JavaScripts enabled by default Java permissions enabled by default LES Internet Explorer 6 screens are used here Screens for other Internet Explorer versions may vary Internet Explorer Pop up Blockers You may have to disable pop up blocking to log into your device Either disable pop up blocking enabled by default in Windows XP SP Service Pack 2 or allow pop up blocking and create an exception for your device s IP address Disable pop up Blocke
202. icon next to the rule All the information in the rule returns to the default settings Apply Click this to save your changes and to apply them to the ZyXEL Device Reset Click this to set every field in this screen to its last saved value P 2304R P1 Series User s Guide Chapter 8 NAT 8 2 3 NAT Port Forwarding Edit Screen Use this screen to activate deactivate and edit each port forwarding rule in the ZyXEL Device To access this screen click an Edit icon in Network gt NAT gt Port Forwarding Figure 51 Network NAT Port Forwarding Edit Rule Setup active Service Name Start Port 0 o End Port Server IP Address 0 0 0 0 Apply Cancel Each field is described in the following table Table 43 Network gt NAT gt Port Forwarding gt Edit LABEL DESCRIPTION Active Select this to enable this rule Clear this to disable this rule Service Name Enter a name to identify this rule You can use 1 31 printable ASCII characters or you can leave this field blank It does not have to be a unique name Start Port Enter the port number or range of port numbers you want to forward to the End Port specified server To forward one port number enter the port number in the Start Port and End Port fields To forward a range of ports enter the port number at the beginning of the range in the Start Port field enter the port number at the end of the range in the End Po
203. ide Chapter 3 Status Screens Figure 13 BW MGMT Monitor BW MGMT Monitor LAN VoIP SIP LAN FTP LAN E Mail LAN WWW Default Class WAN VoIP SIP WAN FTP WAN E Mail Default Class Poll Interval b sec 0 100000 kbps 0 100000 kbps 0 100000 kbps 0 100000 kbps 27 100000 kbps 0 50000 kbps 0 50000 kbps 0 50000 kbps 1 50000 kbps The types of traffic shown in this screen do not depend on your settings in the Bandwidth Management Wizard or in Bandwidth MGMT Each field is described in the following table Table 8 BW MGMT Monitor LABEL DESCRIPTION LAN VolP SIP This field displays how much SIP traffic is going to the LAN each second The rate is the number of kilobits that went to the LAN one second before the last time the screen updated refreshed LAN FTP This field displays how much FTP traffic is going to the LAN each second The rate is the number of kilobits that went to the LAN one second before the last time the screen updated refreshed LAN E Mail This field displays how much e mail went to the LAN each second The rate is the number of kilobits that went to the LAN one second before the last time the screen updated refreshed LAN WWW This field displays how much web traffic went to the LAN each second The rate is the number of kilobits that went to the LAN one second before the last time the screen updated refreshed Default Class This field display
204. identity to IP address or domain name mapping The register server checks your user name and password when you register 9 1 6 RTP When you make a VoIP call using SIP the RTP Real time Transport Protocol is used to handle voice data transfer See RFC 1889 for details on RTP 9 1 7 NAT and SIP The ZyXEL Device must register its public IP address with a SIP register server If there is a NAT router between the ZyXEL Device and the SIP register server the ZyXEL Device probably has a private IP address The ZyXEL Device lists its IP address in the SIP message that it sends to the SIP register server NAT does not translate this IP address in the SIP message The SIP register server gets the ZyXEL Device s IP address from inside the SIP message and maps it to your SIP identity If the ZyXEL Device has a private IP address listed in the SIP message the SIP server cannot map it to your SIP identity See Chapter 8 on page 97 for more information about NAT Use a SIP ALG Application Layer Gateway Use NAT STUN or outbound proxy to allow the ZyXEL Device to list its public IP address in the SIP messages 9 1 7 1 SIP ALG See Section 8 1 3 on page 99 P 2304R P1 Series User s Guide Chapter 9 SIP 9 1 7 2 Use NAT If you know the NAT router s public IP address and SIP port number you can use the Use NAT feature to manually configure the ZyXEL Device to use them in the SIP messages This eliminates the need for STUN or a SIP ALG
205. ie N EE AE EA EE TE N 46 pcs c IN D 48 Er ESE BENE Ao WINTON 50 Table 10 Main EE ei AE RE ER N EEN 52 Table 11 Connection Wizard gt Welcome ss SEE Ee Ge AR SE KERR GEK Bee SEL GER Ge ve OE gee 53 Table 12 Connection Wizard gt System Information 1 ette ra da S REEL XR GEE Ges Re ed 54 Table 13 Connection Wizard gt ISP Parameters Elherigl seeds pra SESSE RE enn EER GEEN E Ee EG UE REDE 55 Table 14 Connection Wizard gt ISP Parameters PPPOE secet ie 56 Table 15 Connection Wizard gt IP Address ec 57 Table 16 Connection Wizard gt IP Address Ethernet eeeessseeessrssseeerreersrreessessrneaarinensssesnneeernnnnnseeennnaa 58 Table 17 Connection Wizard gt IP Address PPPOE idrico Erro Rear d APR ee re dd ea 60 Table 18 Connection Wizard gt MAC Address siese seke EE REK EE RR EA AR ed ER tnnt nh aaa anna naa RR eke asa ie 61 Table 19 Connection Wizard gt Fit 62 Table 20 VolP setup Wizard SIP SEDUtgs isi DE ISP ENS ER DE Ge N EE ee Ge Ke pe ee eda 63 Table 21 VoIP Setup Wizard gt Registration Complete Success iss esse ee ARE Ek AR Ee ee AE Be ee 64 Table 22 VolP Setup Wizard gt Registration Complete Fail Ge EDE Se GE EA GE RE GEE AE AE Ge De dk 65 Table 23 Bandwidth Management Wizard gt Welcome iii ee ee ee AR Re AA RR Re emen 66 Table 24 Bandwidth Management Wizard gt General Information e
206. igures Figures in this User s Guide may use the following generic icons The ZyXEL Device icon is not an exact representation of your device ZyXEL Device Computer Notebook computer X Server Firewall NS SSNS GEE a Gad Nim ee cm I NE e 2 2 ER ug EE Nus uum unum m Switch GE Telephone P 2304R P1 Series User s Guide Safety Warnings Safety Warnings D gt For your safety be sure to read and follow all warning notices and instructions e e e e e e e e e e Do NOT use this product near water for example in a wet basement or near a swimming pool Do NOT expose your device to dampness dust or corrosive liquids Do NOT store things on the device Do NOT install use or service this device during a thunderstorm There is a remote risk of electric shock from lightning Connect ONLY suitable accessories to the device Do NOT open the device or unit Opening or removing covers can expose you to dangerous high voltage points or other risks ONLY qualified service personnel should service or disassemble this device Please contact your vendor for further information Make sure to connect the cables to the correct ports Place connecting cables carefully so that no one will step on them or stumble over them Always disconnect all cables from this device before servicing or disassembling Use ONLY an appropriate power adaptor or
207. il or web traffic depending on what traffic is allocated to sub classes You can change what traffic is allocated to sub classes in Management gt Bandwidth MGMT gt Class Setup Poll Interval Enter how often you want the ZyXEL Device to update this screen and click Set Interval Set Interval Click this to make the ZyXEL Device update the screen based on the amount of time you specified in Poll Interval Stop Click this to make the ZyXEL Device stop updating the screen 3 6 Packet Statistics To access this screen open the Status screen see Section 3 1 on page 41 and click Details next to Packet Statistics Figure 14 Packet Statistics Packet Statistics TT WAN 100M Full 3589 11040 0 192 0 24 46 LAN 100M Full 8271 5996 0 64 0 System Up Time 0 24 52 Poll Interval b sec Set Interval P 2304R P1 Series User s Guide Chapter 3 Status Screens Each field is described in the following table Table 9 Packet Statistics Window LABEL DESCRIPTION Port This field displays each port in the ZyXEL Device Status If the port is not connected to anything this field displays Down If the interface uses Ethernet encapsulation this field displays the port speed and the Ethernet duplex setting Duplex settings are Full The ZyXEL Device is using full duplex Ethernet Half The ZyXEL Device is using half duplex Ethernet You cannot change the Ethernet duplex sett
208. in case the default gateway is not available For example this might happen if the Internet connection goes down Clear this if you do not have a backup gateway Backup Gateway Enter the IP address of the backup gateway The ZyXEL Device automatically IP Address uses this gateway if the default gateway is not available anymore Check WAN IP Enter the IP address of a reliable nearby computer the ZyXEL Device uses to test Address whether or not the default gateway is available anymore For example use one of your ISP s DNS server addresses If you enter 0 0 0 0 the test fails each time Fail Tolerance Enter the number of consecutive times the ZyXEL Device may attempt and fail to find the reliable nearby computer at Check WAN IP Address before it starts using the backup gateway 2 5 are typical choices Period sec Enter the number of seconds between attempts to find the reliable nearby computer at Check WAN IP Address 5 60 are typical choices Timeout sec Enter the number of seconds the ZyXEL Device waits for a response from the reliable nearby computer at Check WAN IP Address before the attempt is a failure 3 50 are typical choices but this number should be less than the Period Apply Click this to save your changes and to apply them to the ZyXEL Device Reset Click this to set every field in this screen to its last saved value P 2304R P1 Series User s Guide LAN
209. ing Figure 150 Network Number and Host ID 192 168 1 16 MM ae SEA M a lt a EE N X e mm mm am eee ee e mm WE WEE e am m m m m m m m m ma V How much of the IP address is the network number and how much is the host ID varies according to the subnet mask Subnet Masks A subnet mask is used to determine which bits are part of the network number and which bits are part of the host ID using a logical AND operation The term subnet is short for sub network A subnet mask has 32 bits If a bit in the subnet mask is a 1 then the corresponding bit in the IP address is part of the network number If a bit in the subnet mask is 0 then the corresponding bit in the IP address is part of the host ID The following example shows a subnet mask identifying the network number in bold text and host ID of an IP address 192 168 1 2 in decimal Table 114 Subnet Mask Example 1ST OCTET 2ND OCTET 3RD OCTET 4TH OCTET 192 168 1 2 IP Address Binary 11000000 10101000 00000001 00000010 Subnet Mask Binary 11111111 11111111 11111111 00000000 Network Number 11000000 10101000 00000001 Host ID 00000010 By convention subnet masks always consist of a continuous sequence of ones beginning from the leftmost bit of the mask followed by a continuous sequence of zeros for a total number of 32 bits Subnet masks can be referred to by the size of the network number part the
210. ing in the ZyXEL Device If this interface uses PPPoE encapsulation this field displays the port speed and the status of the call Down The connection is not available Dial The ZyXEL Device is making the call Idle The call is connected Drop The ZyXEL Device is ending the call The LAN interface always uses Ethernet encapsulation You can change the encapsulation of the WAN interface in Network gt WAN gt Internet Connection Tx Pkts This field displays the number of packets the ZyXEL Device has transmitted from the port Rx Pkts This field displays the number of packets the ZyXEL Device has received from the port Collisions This field displays the number of collisions detected by the port Tx B s This field displays how quickly the ZyXEL Device has transmitted packets from the port The rate is the number of bytes transmitted one second before the last time the screen updated refreshed Rx B s This field displays how quickly the ZyXEL Device has received packets from the port The rate is the number of bytes received one second before the last time the screen updated refreshed Up Time This is the total amount of time the port has been connected System Up Time This field displays how long the ZyXEL Device has been running since it last started up The ZyXEL Device starts up when you plug it in when you restart it Maintenance gt Tools gt Restart or when you reset
211. ion System Resource IP Address 172 23 23 51 CPU Usage 36 49 IP Subnet Mask 255 255 255 0 Memory Usage 32 DHCP Client LAN Information ER EN IP Address 192 168 1 1 Interface Status IP Subnet Mask 255 255 255 0 DHCP Server EE EE WAN 100M Full 100M Full Summary Any IP Table Details BW MGMT Monitor Details DHCP Table Details Packet Statistics Details f _ VoIP Statistics Details oIP Status Account Registration SIP 1 Not Register changeme 127 0 0 1 SIP 2 Inactive changeme 127 0 0 1 SIP 3 Inactive changeme 127 0 0 1 SIP 4 Inactive changeme 127 0 0 1 As illustrated above the main screen is divided into these parts A title bar B navigation panel C main window D status bar P 2304R P1 Series User s Guide Chapter 2 Introducing the Web Configurator 2 4 1 Title Bar The title bar provides some icons in the upper right corner gt amp sii The icons provide the following functions Table 2 Web Configurator Icons in the Title Bar ICON DESCRIPTION Help Click this icon to open the help page for the current screen Wizards Click this icon to open one of the web configurator wizards See Chapter 4 on page 51 for more information Logout Click this icon to log out of the web configurator 2 4 2 Navigation Panel Table
212. it see Section 2 3 on page 35 Poll Interval Enter how often you want the ZyXEL Device to update this screen and click Set Interval Set Interval Click this to make the ZyXEL Device update the screen based on the amount of time you specified in Poll Interval Stop Click this to make the ZyXEL Device stop updating the screen P 2304R P1 Series User s Guide This chapter provides information on the wizards in the web configurator 4 1 Main Wizard Screen Use this screen to open one of the wizards in the ZyXEL Device To access this screen click Go to Wizard setup in the Login Options screen or click the Wizard icon in the upper right corner of the main screen Figure 15 Main Wizard Screen Wizard Setup Welcome to the ZyXEL Wizard Setup CONNECTION WIZARD alk you through the m P 2304R P1 Series User s Guide Chapter 4 Wizard Setup The following table describes the labels in this screen Table 10 Main Wizard Screen LABEL DESCRIPTION CONNECTION Click this to open the Connection Wizard See Section 4 2 on page 52 WIZARD VOIP SETUP Click this to open the VoIP Setup Wizard See Section 4 3 on page 62 BANDWIDTH Click this to open the Bandwidth Management Wizard See Section 4 4 on page MANAGEMENT 65 WIZARD Exit Click this to close this screen and return to the main screen 4 2
213. its patent rights nor the patent rights of others ZyXEL further reserves the right to make changes in any products described herein without notice This publication is subject to change without notice Trademarks ZyNOS ZyXEL Network Operating System is a registered trademark of ZyXEL Communications Inc Other trademarks mentioned in this publication are used for identification purposes only and may be properties of their respective owners Certifications Federal Communications Commission FCC Interference Statement The device complies with Part 15 of FCC rules Operation is subject to the following two conditions This device may not cause harmful interference This device must accept any interference received including interference that may cause undesired operations This device has been tested and found to comply with the limits for a Class B digital device pursuant to Part 15 of the FCC Rules These limits are designed to provide reasonable protection against harmful interference in a residential installation This device generates uses and can radiate radio frequency energy and if not installed and used in accordance with the instructions may cause harmful interference to radio communications However there is no guarantee that interference will not occur in a particular installation P 2304R P1 Series User s Guide 287 Appendix Legal Information If this device does cause harmful interference to radio televi
214. ive voip SIP FTP E E Mail E eMule eDonkey www The following table describes the labels in this screen Table 25 Bandwidth Management Wizard Services Setup LABEL DESCRIPTION Service Select the service s that should have higher priority when bandwidth is allocated If you do not select a service or if you do not see it in the list the service can still use bandwidth However it has the lowest priority Note You must select at least one service in this screen Each service you select becomes a LAN sub class and a WAN sub class in Management gt Bandwidth MGMT gt Class Setup lt Back Click this to go to the previous screen Next gt Click this to go to the next screen Exit Click this to close this screen and return to the main screen P 2304R P1 Series User s Guide Chapter 4 Wizard Setup 4 4 4 Priority Setup Figure 32 Bandwidth Management Wizard gt Priority Setup Bandwidth Management Wizard an d are changed in the VoIP SIP High Mid amp Others FTP High Mid amp C others E Mail C High Mid C others www High Mid Others The following table describes the labels in this screen Table 26 Bandwidth Management Wizard Priority Setup LABEL DESCRIPTION Service This column displays each service you selected in the previous screen Priority Set the prio
215. k TCP UDP IGMP The firewall detected a TCP UDP IGMP ESP GRE OSPF attack ESP GRE OSPF attack ICMP type d The firewall detected an ICMP attack code d land TCP UDP IGMP The firewall detected a TCP UDP IGMP ESP GRE OSPF land ESP GRE OSPF attack land ICMP type d The firewall detected an ICMP land attack code d ip spoofing WAN TCP The firewall detected an IP spoofing attack on the WAN port UDP IGMP ESP GRE OSPF ip spoofing WAN ICMP The firewall detected an ICMP IP spoofing attack on the WAN type d code d port icmp echo ICMP The firewall detected an ICMP echo attack type d code d syn flood TCP The firewall detected a TCP syn flood attack ports scan TCP The firewall detected a TCP port scan attack teardrop TCP The firewall detected a TCP teardrop attack teardrop UDP The firewall detected an UDP teardrop attack teardrop ICMP type d The firewall detected an ICMP teardrop attack illegal command TCP The firewall detected a TCP illegal command attack NetBIOS TCP The firewall detected a TCP NetBIOS attack ip spoofing entry TCP ESP GRE no routing UDP IGMP OSPF The firewall classified a packet with no source routing entry as an IP spoofing attack ip spoofing entry ICMP code d no routing type d The firewall classified an ICMP packet with no source routing entry as an IP spoofing att
216. l Enter how often in seconds the ZyXEL Device should send SIP notify messages to the SIP server MWI Message Waiting Indication P 2304R P1 Series User s Guide Chapter 9 SIP Table 48 VoIP gt SIP gt SIP Settings gt Advanced LABEL DESCRIPTION Enable Select this if you want to hear a waiting beeping dial tone on your phone when you have at least one voice message Your VoIP service provider must support this feature Expiration Time Keep the default value unless your VoIP service provider tells you to change it Enter the number of seconds the SIP server should provide the message waiting service each time the ZyXEL Device subscribes to the service Before this time passes the ZyXEL Device automatically subscribes again Fax Option This field controls how the ZyXEL Device handles fax messages G 711 Fax Select this if the ZyXEL Device should use G 711 to send fax messages The peer Passthrough devices must also use G 711 T 38 Fax Relay Select this if the ZyXEL Device should send fax messages as UDP or TCP IP packets through IP networks This provides better quality but it may have inter operability problems The peer devices must also use T 38 Call Forward Call Forward Select which call forwarding table you want the ZyXEL Device to use for incoming Table calls You set up these tables in VoIP gt Phone Book gt Incoming Call Poli
217. le 105 FSM Logs Caller Side LOG MESSAGE DESCRIPTION VoIP Call Start Ph Phone Someone used a phone connected to the listed phone port to Port Number lt Outgoing initiate a VoIP call to the listed destination Call Number Someone used a phone connected to the listed phone port to make a VoIP call to the listed destination VoIP Call Established Ph Phone Port gt Outgoing Call Number A VoIP phone call made from a phone connected to the listed phone port has terminated VoIP Call End Phone Phone Port Table 106 FSM Logs Callee Side LOG MESSAGE DESCRIPTION VoIP Call Start from SIP SIP Port Number A VoIP phone call came to the ZyXEL Device from the listed SIP number VoIP Call Established Ph Phone Port lt Outgoing Call Number A VoIP phone call was set up from the listed SIP number to the ZyXEL Device VoIP Call End Phone Phone Port A VoIP phone call that came into the ZyXEL Device has terminated Table 107 Lifeline Logs LOG MESSAGE DESCRIPTION PSTN Call Start A PSTN call has been initiated PSTN Call End A PSTN call has terminated PSTN Call Established A PSTN call has been set up P 2304R P1 Series User s Guide 207 Chapter 19 Logs P 2304R P1 Series User s Guide Tools Use these screens to upload new firmware back up and restore the configuration and restart
218. le you want to see in this screen If you change this field the screen automatically refreshes Forward to Number Setup The ZyXEL Device checks these rules in the order in which they appear after it checks the rules in the Advanced Setup section Unconditional Forward to Number Select this if you want the ZyXEL Device to forward all incoming calls to the specified phone number regardless of other rules in the Forward to Number section Specify the phone number in the field on the right Busy Forward to Number Select this if you want the ZyXEL Device to forward incoming calls to the specified phone number if the phone port is busy Specify the phone number in the field on the right If you have call waiting the incoming call is forwarded to the specified phone number if you reject or ignore the second incoming call No Answer Select this if you want the ZyXEL Device to forward incoming calls to the specified Forward to phone number if the call is unanswered See No Answer Waiting Time Specify Number the phone number in the field on the right No Answer This field is used by the No Answer Forward to Number feature and No Answer Waiting Time conditions below Enter the number of seconds the ZyXEL Device should wait for you to answer an incoming call before it considers the call is unanswered Advanced Setup The ZyXEL Device checks these rules before it checks the rules in the Forward to Number sectio
219. load Example e ftp 192 168 1 1 220 PPP FTP version 1 0 ready at Sat Jan 1 03 22 12 2000 User 192 168 1 1 none 331 Enter PASS command Password 230 Logged in ftp bin 200 Type I OK ftp get rom t ftp bye C Nedit rom t edit the rom t text file by a text editor and save it LES You can rename your rom t file when you save it to your computer but it must be named rom t when you upload it to your ZyXEL Device Internal SPTGEN FTP Upload Example 1 Launch your FTP application 2 Enter bin The command bin sets the transfer mode to binary 3 Upload your rom t file from your computer to the ZyXEL Device using the put command computer to the ZyXEL Device 4 Exitthis FTP application Figure 163 Internal SPTGEN FTP Upload Example e ftp 192 168 1 1 220 PPP FTP version 1 0 ready at Sat Jan 1 03 22 12 2000 User 192 168 1 1 none 331 Enter PASS command Password 230 Logged in ftp bin 200 Type I OK ftp put rom t ftp gt bye P 2304R P1 Series User s Guide 270 Appendix G Internal SPTGEN Example Internal SPTGEN Menus This section provides example Internal SPTGEN menus Table 128 Abbreviations Used in the Example Internal SPTGEN Screens Table ABBREVIATION MEANING FIN Field Identification Number FN Field Name PVA Parameter Values Allowed INPUT An example of what you may enter Applies
220. low any computer to access the ZyXEL Device using this service Select Selected to only allow the computer with the IP address that you specify to access the ZyXEL Device using this service Apply Click this to save your changes and to apply them to the ZyXEL Device Reset Click this to set every field in this screen to its last saved value 16 3 3 FTP Screen Use this screen to control FTP access to your ZyXEL Device To access this screen click Management gt Remote MGMT gt FTP Figure 87 Management gt Remote MGMT gt FTP FTP Server Port Server Access Secured Client IP Address Fi GEN amp WAN 7 C Selected 0 0 0 0 G all Apply Reset Each field is described in the following table Table 77 Management Remote MGMT FTP LABEL DESCRIPTION Server Port Enter the port number this service can use to access the ZyXEL Device The computer must use the same port number Server Access Select the interface s through which a computer may access the ZyXEL Device using this service Secured Client IP Address Select All to allow any computer to access the ZyXEL Device using this service Select Selected to only allow the computer with the IP address that you specify to access the ZyXEL Device using this service Apply Click this to save your changes and to apply them to the ZyXEL Device Reset Click this to set every field in this screen to it
221. lowing table Table 5 Any IP Table LABEL DESCRIPTION This field is a sequential value It is not associated with a specific entry IP Address This field displays the IP address of each computer that is using the ZyXEL Device but is in a different subnet than the ZyXEL Device MAC Address This field displays the MAC address of the computer that is using the ZyXEL Device but is in a different subnet than the ZyXEL Device Refresh Click this to update this screen 3 3 DHCP Table To access this screen open the Status screen see Section 3 1 on page 41 and click Details next to DHCP Table Figure 11 DHCP Table DHCP Table ER 77 a a ee nnd 192 168 1 33 tw11477 02 00 50 8d 48 59 1f Refresh Each field is described in the following table Table 6 DHCP Table LABEL DESCRIPTION This field is a sequential value It is not associated with a specific entry IP Address This field displays the IP address the ZyXEL Device assigned to a computer in the network Host Name This field displays the system name of the computer to which the ZyXEL Device assigned the IP address MAC Address This field displays the MAC address of the computer to which the ZyXEL Device assigned the IP address Refresh Click this to update this screen P 2304R P1 Series User s Guide Chapter 3 Status Screens 3 4 VoIP Statistics To access this screen open the Status screen
222. ly regardless of this setting VAD Support Select this if the ZyXEL Device should stop transmitting when you are not speaking This reduces the bandwidth the ZyXEL Device uses Back Click this to return to the Analog Phone screen without saving your changes Apply Click this to save your changes and to apply them to the ZyXEL Device Reset Click this to set every field in this screen to its last saved value 10 2 3 Common Phone Settings Screen Use this screen to activate and deactivate immediate dialing To access this screen click VoIP gt Phone gt Common P 2304R P1 Series User s Guide Chapter 10 Phone Figure 64 VoIP Phone Common Common Common Settings Active Immediate Dial Each field is described in the following table Table 54 VoIP gt Phone gt Common LABEL DESCRIPTION Active Immediate Select this if you want to use the pound key to tell the ZyXEL Device to make Dial the phone call immediately instead of waiting the number of seconds you selected in the Dialing Interval Select in VoIP gt Phone gt Analog Phone gt Advanced If you select this dial the phone number and then press the pound key The ZyXEL Device makes the call immediately instead of waiting You can still wait if you want Apply Click this to save your changes and to apply them to the ZyXEL Device Reset Click this to set every field in this screen to its last saved value
223. m EE Eb In a 25 bit subnet the host ID has 7 bits so each sub network has a maximum of 27 2 or 126 possible hosts a host ID of all zeroes is the subnet s address itself all ones is the subnet s broadcast address 192 168 1 0 with mask 255 255 255 128 is subnet A itself and 192 168 1 127 with mask 255 255 255 128 is its broadcast address Therefore the lowest IP address that can be assigned to an actual host for subnet A is 192 168 1 1 and the highest is 192 168 1 126 Similarly the host ID range for subnet B is 192 168 1 129 to 192 168 1 254 Example Four Subnets The previous example illustrated using a 25 bit subnet mask to divide a 24 bit address into two subnets Similarly to divide a 24 bit address into four subnets you need to borrow two host ID bits to give four possible combinations 00 01 10 and 11 The subnet mask is 26 bits 11111111 11111111 11111111 11000000 or 255 255 255 192 Each subnet contains 6 host ID bits giving 26 2 or 62 hosts for each subnet a host ID of all zeroes is the subnet itself all ones is the subnet s broadcast address Table 118 Subnet 1 LAST OCTET BIT IP SUBNET MASK NETWORK NUMBER VALUE IP Address Decimal 192 168 1 0 IP Address Binary 11000000 10101000 00000001 00000000 Subnet Mask Binary 11111111 11111111 11111111 11000000 Subnet Address Lowest Host ID 192 168 1 1 192 168 1 0 Broadcast Address Highest Host ID 192 168 1 62 192 168 1 63
224. mple a network administrator creates two sub networks to isolate a group of servers from the rest of the company network for security reasons In this example the company network address is 192 168 1 0 The first three octets of the address 192 168 1 are the network number and the remaining octet is the host ID allowing a maximum of 2 2 or 254 possible hosts The following figure shows the company network before subnetting Figure 151 Subnetting Example Before Subnetting QUE EB EM EN EN EM EM EN WEN WEN EN SEN EE EE EE n i 8 I A E Uu a i 1 Internet t 1 H Ol I li I li I i I I I li y 192 168 1 0 24 4 r 4 LE E EEN m um um m EE Um EE EE Em um um You can borrow one of the host ID bits to divide the network 192 168 1 0 into two separate sub networks The subnet mask is now 25 bits 255 255 255 128 or 25 The borrowed host ID bit can have a value of either 0 or 1 allowing two subnets 192 168 1 0 25 and 192 168 1 128 25 The following figure shows the company network after subnetting There are now two sub networks A and B 252 P 2304R P1 Series User s Guide Appendix D IP Addresses and Subnetting Figure 152 Subnetting Example After Subnetting 1 A LE I B D P E3 mo SN i I LE de SR 5 iese H P T Internet gt a n 1 B TM P i P i i i 9 192 168 1 0 25 4 W192 168 1 128 ue am mm E wn mm mu mn mu um df eom um um um um u
225. munication across diverse interconnected networks C Show icon in notification area when connected 5 The Internet Protocol TCP IP Properties window opens the General tab in Windows XP f you have a dynamic IP address click Obtain an IP address automatically f you have a static IP address click Use the following IP Address and fill in the IP address Subnet mask and Default gateway fields Click Advanced P 2304R P1 Series User s Guide Appendix C Setting up Your Computer s IP Address Figure 136 Windows XP Internet Protocol TCP IP Properties Internet Protocol TCP IP Properties General Alternate Configuration You can get IP settings assigned automatically if your network supports this capability Otherwise you need to ask your network administrator for the appropriate IP settings Obtain an IP address automatically Use the following IP address Obtain DNS server address automatically Use the following DNS server addresses 6 Ifyou do not know your gateway s IP address remove any previously installed gateways in the IP Settings tab and click OK Do one or more of the following if you want to configure additional IP addresses In the IP Settings tab in IP addresses click Add In TCP IP Address type an IP address in IP address and a subnet mask in Subnet mask and then click Add Repeat the above two steps for each IP address you want to add Confi
226. n P 2304R P1 Series User s Guide Chapter 11 Phone Book Table 56 VoIP gt Phone Book gt Incoming Call Policy LABEL DESCRIPTION This field is a sequential value and it is not associated with a specific rule The sequence is important however The ZyXEL Device checks each rule in order and it only follows the first one that applies Activate Select this to enable this rule Clear this to disable this rule Incoming Call Number Enter the phone number to which this rule applies Forward to Number Enter the phone number to which you want to forward incoming calls from the Incoming Call Number You may leave this field blank depending on the Condition Condition Select the situations in which you want to forward incoming calls from the Incoming Call Number or select an alternative action Unconditional The ZyXEL Device immediately forwards any calls from the Incoming Call Number to the Forward to Number Busy The ZyXEL Device forwards any calls from the Incoming Call Number to the Forward to Number when your SIP account already has a call connected No Answer The ZyXEL Device forwards any calls from the Incoming Call Number to the Forward to Number when the call is unanswered See No Answer Waiting Time Block The ZyXEL Device rejects calls from the Incoming Call Number Accept The ZyXEL Device allows calls from the Incoming Call Number You might create a rule with
227. n a pop up is blocked Filter Level x Medium Block most automatic pop ups Pop up Blocker FAQ P 2304R P1 Series User s Guide Appendix B Pop up Windows JavaScripts and Java Permissions 5 Click Close to return to the Privacy screen 6 Click Apply to save this setting JavaScripts If pages of the web configurator do not display properly in Internet Explorer check that JavaScripts are allowed 1 In Internet Explorer click Tools Internet Options and then the Security tab Figure 125 Internet Options Internet options RR M 8 nx General Security Privacy Content Connections Programs Advanced Select a Web content zone to specify its security settings e amp oe Internet Local intranet Trusted sites Restricted sites Internet 4 This zone contains all Web sites you haven t placed in other zones Security level for this zone Move the slider to set the security level for this zone z Medium Safe browsing and still functional Prompts before downloading potentially unsafe content Unsigned ActiveX controls will not be downloaded Appropriate for most Internet sites C Custom Level D Default Level OK Cancel Apply Click the Custom Level button Scroll down to Scripting Under Active scripting make sure that Enable is selected the default Under Scripting of Java applets make sure that Enable is selected the defa
228. n the New gateway field and click Add 5 Click OK to save and close the TCP IP Properties window 6 Click OK to close the Network window Insert the Windows CD if prompted 7 Restart your computer when prompted Verifying Settings 1 Click Start and then Run 2 Inthe Run window type winipcfg and then click OK to open the IP Configuration window 3 Select your network adapter You should see your computer s IP address subnet mask and default gateway Windows 2000 NT XP The following example figures use the default Windows XP GUI theme 1 Click start Start in Windows 2000 NT Settings Control Panel P 2304R P1 Series User s Guide Appendix C Setting up Your Computer s IP Address Figure 132 Windows XP Start Menu Internet Explorer e My Documents ea Outlook Express y Paint Files and Settings Transfer W B Command Prompt e My Music E Acrobat Reader 4 0 Ws My Computer Tour Windows xP N Windows Movie Maker E control Panel 2 My Recent Documents gt e My Pictures te Printers and Faxes Help and Support jo Search All Programs gt 17 Run Log Off 0 Turn Off Computer untitled Paint 2 Inthe Control Panel double click Network Connections Network and Dial up Connections in Windows 2000 NT Figure 133 Windows XP Control Panel Control Panel File Edit View Favorites Tools Help ear d JO search Folders Gi Address Control Panel Vg Contr
229. n which one the custom port uses Port Number Enter the range of port numbers that defines the service For example suppose you want to define the Gnutella service Select TCP type and enter a port range of 6345 6349 Add Click this to add the selected service in Available Services to the Blocked Services list Delete Select a service in the Blocked Services and click this to remove the service from the list Clear All Click this to remove all the services in the Blocked Services list Schedule to Block Day to Block Select which days of the week you want the service blocking to be effective Time of Day to Block Select what time each day you want service blocking to be effective Enter times in 24 hour format for example 3 00pm should be entered as 15 00 Apply Click this to save your changes and to apply them to the ZyXEL Device Reset Click this to set every field in this screen to its last saved value P 2304R P1 Series User s Guide Chapter 12 Firewall P 2304R P1 Series User s Guide Content Filter Use these screens to create and enforce policies that restrict access to the Internet based on content 13 1 Content Filtering Overview Internet content filtering allows you to create and enforce Internet access policies tailored to their needs Content filtering is the ability to block certain web features or specific URL keywords The ZyXEL Device can block web featu
230. n wide use If you would like to read more detailed information about interoperability between IGMP version 2 and version 1 please see sections 4 and 5 of RFC 2236 The class D IP address is used to identify host groups and can be in the range 224 0 0 0 to 239 255 255 255 The address 224 0 0 0 1s not assigned to any group and is used by IP multicast computers The address 224 0 0 1 is used for query messages and is assigned to the permanent group of all IP hosts including gateways All hosts must join the 224 0 0 1 group in order to participate in IGMP The address 224 0 0 2 is assigned to the multicast routers group P 2304R P1 Series User s Guide Chapter 7 LAN The ZyXEL Device supports both IGMP version 1 IGMP v1 and IGMP version 2 IGMP v2 At start up the ZyXEL Device queries all directly connected networks to gather group membership After that the ZyXEL Device periodically updates this information IP multicasting can be enabled disabled on the ZyXEL Device LAN and or WAN interfaces in the web configurator LAN WAN Select None to disable IP multicasting on these interfaces 7 4 7 Any IP Traditionally you must set the IP addresses and the subnet masks of a computer and the ZyXEL Device to be in the same subnet to allow the computer to access the Internet through the ZyXEL Device In cases where your computer is required to use a static IP address in another network you may need to manually configure the network setting
231. ndwidth MGMT gt Class Setup ie sss 161 Table 72 Management gt Bandwidth MGMT gt Class Setup gt Edit 162 Table 73 Management gt Bandwidth MGMT gt Monitor 164 Te WAS si ER GR ad e GE EN E Rr ed pid o PORT RU Ead aa EA 167 Table 75 Management gt Remote MGMT gt WWW ee ee ER Re RR AE ee ee ee Ee Re Re ee nn nene 168 Table 76 Management gt Remote MGMT gt Telnet ee Ee AR AE EE AA ee ee ee ee ee ee ee 169 Table 77 Management gt Remote MGMT gt FIP uu iieesexiesesix ed Eks GN EKEN ER ER KENS se BENN GER GE RAN Ged rien 169 Table 78 Management gt Remote MGMT gt SNMP ee ee se Ge RR Ge GE Ee ee ee Ee Ee Re Ge ee Ge ee ee ee 170 Table 79 Management gt Remote MGMT gt DNS 1 ee Ee RR AA Ee ee EE AA Ee AA Ge ee ee ee 171 Table 80 Management gt Remote MGMT gt Security ei ee enne 172 Tabe St Management gt UPAR e 185 22 P 2304R P1 Series User s Guide List of Tables Table 82 Pre defined NTP Time Servers ss ssec ner pna das pad Eas sk ne nd dk pu da ko da kk Gee ks 188 Table 83 Maintenance gt System gt General sena KAR th Ad KA ERR RA d dau E ERR A Ad KAR EE Ed AA KA Gesk AAK EE E RM ed 190 Table 84 Maintenance gt System gt Dynamic DNS issie seereis ER EES REEDE GE etta dett Ee Dee GE EE EDE e dd eN ee 191 Table 85 Maintenance gt System gt Time Setting ius iss tenere eet EDE t Ged det tono Y senna ded
232. ndwidth budgets for sub classes cannot exceed the configured bandwidth budget speed of the parent class P 2304R P1 Series User s Guide 153 Chapter 15 Bandwidth MGMT 15 1 2 Proportional Bandwidth Allocation Bandwidth management allows you to define how much bandwidth each class gets however the actual bandwidth allotted to each class decreases or increases in proportion to actual available bandwidth 15 1 3 Application based Bandwidth Management You can create bandwidth classes based on individual applications like VoIP Web FTP E mail and Video for example 15 1 4 Subnet based Bandwidth Management You can create bandwidth classes based on subnets The following figure shows LAN subnets You could configure one bandwidth class for subnet A and another for subnet B Figure 79 Subnet based Bandwidth Management Example Subnet A LAN WAN xc SS Subnet A 320 kbps Subnet B 320 kbps wrieeenete 15 1 5 Application and Subnet based Bandwidth Management You could also create bandwidth classes based on a combination of a subnet and an application The following example table shows bandwidth allocations for application specific traffic from separate LAN subnets Table 64 Application and Subnet based Bandwidth Management Example TRAFFIC TYPE FROM SUBNET A FROM SUBNET B VoIP 64 Kbps 64 Kbps Web 64 Kbps 64 Kbps FTP 64 Kbps 64 Kbps E mail 64 Kbps 64 Kbps Video 64 Kbps 64 Kbps
233. nected to this phone port Codec This field displays the type of voice compression used in the current call Peer Number If the current call is a peer to peer call this field displays the SIP number of the other party Otherwise it displays N A Duration This field displays how long the current call has lasted Tx Pkts This field displays the number of packets the ZyXEL Device has transmitted in the current call Rx Pkts This field displays the number of packets the ZyXEL Device has received in the current call Tx B s This field displays how quickly the ZyXEL Device has transmitted packets in the current call The rate is the number of kilobits transmitted one second before the last time the screen updated refreshed Rx B s This field displays how quickly the ZyXEL Device has received packets in the current call The rate is the number of kilobits received one second before the last time the screen updated refreshed Poll Interval Enter how often you want the ZyXEL Device to update this screen and click Set Interval Set Interval Click this to make the ZyXEL Device update the screen based on the amount of time you specified in Poll Interval Stop Click this to make the ZyXEL Device stop updating the screen 3 5 BW MGMT Monitor To access this screen open the Status screen see Section 3 1 on page 41 and click Details next to BW MGMT Monitor P 2304R P1 Series User s Gu
234. nection DNS servers and how the ZyXEL Device sends routing information using RIP In addition you can set up a backup gateway in case the default gateway 1s not available 6 1 WAN Overview 6 1 1 PPPoE Encapsulation The ZyXEL Device supports PPPoE Point to Point Protocol over Ethernet PPPoE is an IETF standard RFC 2516 specifying how a personal computer PC interacts with a broadband modem DSL cable wireless etc connection The PPP over Ethernet option is for a dial up connection using PPPoE For the service provider PPPoE offers an access and authentication method that works with existing access control systems for example Radius One of the benefits of PPPoE is the ability to let you access one of multiple network services a function known as dynamic service selection This enables the service provider to easily create and offer new IP services for individuals Operationally PPPoE saves significant effort for both you and the ISP or carrier as it requires no specific configuration of the broadband modem at the customer site By implementing PPPoE directly on the ZyXEL Device rather than individual computers the computers on the LAN do not need PPPoE software installed since the ZyXEL Device does that part of the task Furthermore with NAT all of the LANs computers will have access 6 1 2 WAN IP Address Assignment Every computer on the Internet must have a unique IP address If your networks are isolated fr
235. ng order The small triangle next to a column header indicates how the table is currently sorted pointing downward is descending pointing upward 1s ascending Each field is described in the following table Table 88 Maintenance Logs View Log LABEL DESCRIPTION Display Select a category whose log entries you want to view To view all logs select All Logs The list of categories depends on what log categories are selected in the Log Settings page Email Log Now Click this to send the log screen to the e mail address specified in the Log Settings page Refresh Click Refresh to renew the log screen Clear Log Click Clear Log to clear all the log entries regardless of what is shown on the log Screen This field is a sequential value and it is not associated with a specific log entry Time This field displays the time the log was recorded Message This field displays the reason for the log See Section 19 3 on page 200 Source This field displays the source IP address and the port number of the incoming packet In many cases some or all of this information may not be available Destination This field lists the destination IP address and the port number of the incoming packet In many cases some or all of this information may not be available Note This field displays additional information about the log entry P 2304R P1 Series User s Guide Chapter 19 Logs 19 2 2 Log
236. nt of IP Address Space P 2304R P1 Series User s Guide SIP Passthrough Enabling Disabling the SIP ALG You can turn off the ZyXEL Device SIP ALG to avoid retranslating the IP address of an existing SIP device that is using STUN If you want to use STUN with a SIP client device a SIP phone or IP phone for example behind the ZyXEL Device usethe ip alg disable ALG SIP command to turn off the SIP ALG Signaling Session Timeout Most SIP clients have an expire mechanism indicating the lifetime of signaling sessions The SIP UA sends registration packets to the SIP server periodically and keeps the session alive in the ZyXEL Device If the SIP client does not have this mechanism and makes no call during the ZyXEL Device SIP timeout default 60 minutes the ZyXEL Device SIP ALG drops any incoming calls after the timeout period You can use the ip alg siptimeout command to change the timeout value Audio Session Timeout If no voice packets go through the SIP ALG before the timeout period default 5 minutes expires the SIP ALG does not drop the call but blocks all voice traffic and deletes the audio session You cannot hear anything and you will need to make a new call to continue your conversation P 2304R P1 Series User s Guide 257 Appendix E SIP Passthrough P 2304R P1 Series User s Guide NAT NAT Overview NAT Network Address Translation NAT RFC 1631 is the translation of the IP addr
237. nter the port number this service can use to access the ZyXEL Device The computer must use the same port number Server Access Select the interface s through which a computer may access the ZyXEL Device using this service Secured Client IP Select All to allow any computer to access the ZyXEL Device using this service Address Select Selected to only allow the computer with the IP address that you specify to access the ZyXEL Device using this service Apply Click this to save your changes and to apply them to the ZyXEL Device Reset Click this to set every field in this screen to its last saved value 16 3 2 Telnet Screen Use this screen to control Telnet access to your ZyXEL Device To access this screen click Management gt Remote MGMT gt Telnet Figure 86 Management gt Remote MGMT gt Telnet Telnet Server Port Server Access 23 LAN amp WAN Secured Client IP Address G all C Selected 0 0 0 0 Apply Reset P 2304R P1 Series User s Guide Chapter 16 Remote MGMT Each field is described in the following table Table 76 Management gt Remote MGMT gt Telnet LABEL DESCRIPTION Server Port Enter the port number this service can use to access the ZyXEL Device The computer must use the same port number Server Access Select the interface s through which a computer may access the ZyXEL Device using this service Secured Client IP Address Select All to al
238. o Peer Calls 129 Peer to peer Calls 31 Per Hop Behavior 112 PHB Per Hop Behavior 113 Phone Book 129 phone ports 223 Point to Point Calling 226 Point to Point Calls 31 Polarity Reversal 226 Pop up Blocking 33 Port Forwarding 97 Port Forwarding Port Numbers 97 Port Forwarding Services 97 Port Numbers 97 Port Restricted Cone NAT 264 PPPoE 55 Pre defined NTP Time Servers List 188 product registration 289 Proportional Bandwidth Allocation 154 Protocol Support 226 Proxy Server SIP 109 PSTN 112 Public Switched Telephone Network 112 Pulse Code Modulation 111 Pulse Dialing 112 Q QoS 112 226 Quality of Service 112 R Real time Transport Protocol 110 Redirect Server SIP 109 Register Server SIP 110 registration product 289 related documentation 3 Remote Management 165 226 remote management SNMP 166 Remote Management and NAT 165 Remote Management Limitations 165 REN 224 Required Bandwidth 112 Reset button 212 Resetting the Time 189 Resetting to Factory Defaults 35 Restricted Cone NAT 264 RFC 1305 193 RFC 1631 259 RFC 1889 110 226 RFC 1890 226 RFC 2327 226 RFC 2516 226 RFC 3261 226 RFC 3489 111 226 RFC 3842 112 RFC 867 193 RFC 868 193 Ringer Equivalence Number 224 Router mode IP address 72 procedure 72 reasons to use 71 RTCP RFC 1890 226 RTP 110 RTP RFC 1889 226 S safety warnings 6 Scheduler 154 159 160 SDP RFC 2327 226 Server 261 262 Serv
239. o a Roadrunner service You must use the screens discussed in Chapter 6 on page 75 instead Figure 18 Connection Wizard gt ISP Parameters Ethernet Connection Wizard ff Internet Configuration Enter your Internet Service Provider s ISP connection settings Connection Type The following table describes the labels in this screen Table 13 Connection Wizard ISP Parameters Ethernet LABEL DESCRIPTION Connection Type Select Ethernet Back Click this to go to the previous screen Next gt Click this to go to the next screen Exit Click this to close this screen and return to the main screen 4 2 3 2 PPPoE Point to Point Protocol over Ethernet PPPoE functions as a dial up connection PPPoE is an IETF Internet Engineering Task Force standard specifying how a host personal computer interacts with a broadband modem for example DSL cable wireless etc to achieve access to high speed data networks P 2304R P1 Series User s Guide 55 Chapter 4 Wizard Setup LES You cannot use the Connection Wizard if the PPPoE remote server cannot be discovered automatically You must use the screens discussed in Chapter 6 on page 75 instead Figure 19 Connection Wizard gt ISP Parameters PPPoE Connection Wizard ZyXEL i STEP 1 STEP 2 ffi Internet Configuration Enter your Internet Service Provider s ISP connection settings Connection Type PPP ov
240. o copy the information for this speed dial entry into the Speed Dial section where you can change it Click the Remove icon to erase this speed dial entry Clear Click this to erase all the speed dial entries Reset Click this to set every field in this screen to its last saved value P 2304R P1 Series User s Guide 133 Chapter 11 Phone Book P 2304R P1 Series User s Guide PART IV Security and Management Firewall 137 Content Filter 145 Static Route 149 Bandwidth MGMT 153 Remote MGMT 165 Firewall Use these screens to enable configure and disable the firewall that protects your ZyXEL Device and your LAN from unwanted or malicious traffic 12 1 Firewall Overview Originally the term firewall referred to a construction technique designed to prevent the spread of fire from one room to another The networking term firewall is a system or group of systems that enforces an access control policy between two networks It may also be defined as a mechanism used to protect a trusted network from an untrusted network Of course firewalls cannot solve every security problem A firewall is one of the mechanisms used to establish a network security perimeter in support of a network security policy It should never be the only mechanism or method employed For a firewall to guard effectively you must design and deploy it appropriately This requires integrating the firewall into
241. o your ZyXEL Device Restart Use this screen to reboot the ZyXEL Device without turning the power off P 2304R P1 Series User s Guide Chapter 2 Introducing the Web Configurator 2 4 3 Main Window The main window shows the screen you select in the navigation panel It is discussed in more detail in the rest of this document Right after you log in the Status screen is displayed See Chapter 3 on page 41 for more information about the Status screen 2 4 4 Status Bar Check the status bar when you click Apply or OK to verify that the configuration has been updated P 2304R P1 Series User s Guide Chapter 2 Introducing the Web Configurator P 2304R P1 Series User s Guide Status Screens Use the Status screens to look at the current status of the device system resources interfaces LAN and WAN and SIP accounts You can also register and unregister SIP accounts The Status screen also provides detailed information from Any IP and DHCP and statistics from VoIP bandwidth management and traffic 3 1 Status Screen Use this screen to look at the current status of the device system resources interfaces LAN and WAN and SIP accounts You can also register and unregister SIP accounts Click Status to open this screen P 2304R P1 Series User s Guide Chapter 3 Status Screens Figure 9 Status Screen Device Information System Name Firmware Version WAN Information IP Address IP
242. oS Supports TOS and Diffserv Tagging Compression G 711 PCM G 729 ADPCM Loop Start Signaling Support Modem and Fax Tone Detection and Pass Through DTMF Detection Point to Point Calling Direct IP to IP Calling Speed Dial Phonebook Support NAT Traversal RFC 3489 IETF Simple Traversal of UDP Through NAT STUN Caller ID Dialing Type Tone Pulse Auto detection Tip ring polarity reversal Protocol Support PPP over Ethernet RFC 2516 Transparent bridging for unsupported network layer protocols DHCP Client Management Embedded Web Configurator CLI Command Line Interpreter Remote Management via Telnet or Web FTP TFTP for firmware downloading configuration backup and restoration Syslog Built in Diagnostic Tools for FLASH memory RAM and LAN port Firewall Stateful Packet Inspection Prevent Denial of Service attacks such as Ping of Death SYN Flood LAND Smurf etc Real time E mail alerts Reports and logs Content Filtering Service blocking Web page blocking by URL keyword NAT SUA Port Forwarding 2048 NAT sessions Multimedia application PPTP under NAT SUA IPSec passthrough SIP ALG passthrough Static Routes 16 IP and 4 Bridge Other Features Internal SPTGEN DNS Proxy Dynamic DNS Any IP IP Alias Traffic Redirect P 2304R P1 Series User s Guide Appendix A Product Specifications Power Adaptor Specifications Table 113 ZyXEL Dev
243. ocked according to remote management settings Remote Management HTTPS denied Attempted use of HTTPS service was blocked according to remote management settings Remote Management SSH denied Attempted use of SSH service was blocked according to remote management settings Remote Management ICMP Ping response denied Attempted use of ICMP service was blocked according to remote management settings Remote Management DNS denied Attempted use of DNS service was blocked according to remote management settings Table 102 ICMP Notes TYPE CODE DESCRIPTION 0 Echo Reply 0 Echo reply message 3 Destination Unreachable Net unreachable Host unreachable Protocol unreachable Port unreachable Bl ws ND PP Oo A packet that needed fragmentation was dropped because it was set to Don t Fragment DF 5 Source route failed 4 Source Quench P 2304R P1 Series User s Guide Chapter 19 Logs Table 102 ICMP Notes continued TYPE CODE DESCRIPTION 0 A gateway may discard internet datagrams if it does not have the buffer space needed to queue the datagrams for output to the next network on the route to the destination network 5 Redirect 0 Redirect datagrams for the Network 1 Redirect datagrams for the Host 2 Redirect datagrams for the Type of Service and Network
244. ocol is a protocol used for exchanging management information between network devices SNMP is a member of the TCP IP protocol suite Your ZyXEL Device supports SNMP agent functionality which allows a manager station to manage and monitor the ZyXEL Device through the network The ZyXEL Device supports SNMP version one SNMPv1 The next figure illustrates an SNMP management operation SNMP is only available if TCP IP is configured SNMP is only available if TCP IP is configured Figure 84 SNMP Management Model Managed Device Managed Device Managed Device MANAGER An SNMP managed network consists of two main types of component agents and a manager An agent is a management software module that resides in a managed device the ZyXEL Device An agent translates the local management information from the managed device into a form compatible with SNMP The manager is the console through which network administrators perform network management functions It executes applications that control and monitor managed devices The managed devices contain object variables managed objects that define each piece of information to be collected about a device Examples of variables include such as number of packets received node port status etc A Management Information Base MIB is a collection of managed objects SNMP allows a manager and agents to communicate for the purpose of accessing these objects P 2304R P1 Series User s Guide Ch
245. ol Panel A X mum Add Hardware G Switch to Category View Connections See Also Game A Windows Update Controllers 3 Right click Local Area Connection and then click Properties P 2304R P1 Series User s Guide Appendix C Setting up Your Computer s IP Address Figure 134 Windows XP Control Panel Network Connections Properties Network Connections File Edit View Favorites Tools Advanced Help Q sax Q 2 Ss Search Folders E Address Network Connections LAN or High Speed Internet Network Tasks ocal Area Connection E Create a new uis connection dard PCI Fast Ethernet Adapte Set up a home or small Disable office network Status Disable this network i device Repair PN Repair this connection Bridge Connections sl Rename this connection view status of this connection Change settings of this connection Create Shortcut Rename 4 Select Internet Protocol TCP IP under the General tab in Win XP and then click Properties Figure 135 Windows XP Local Area Connection Properties 4 Local Area Connection Properties General Authentication Advanced Connect using E9 Accton EN1207D TX PCI Fast Ethernet Adapter This connection uses the following items v al Client for Microsoft Networks Description Transmission Control Protocol Internet Protocol The default wide area network protocol that provides com
246. om the Internet for instance only between your two branch offices you can assign any IP addresses to the hosts without problems However the Internet Assigned Numbers Authority IANA has reserved the following three blocks of IP addresses specifically for private networks Table 29 Private IP Address Ranges 10 0 0 0 10 255 255 255 172 16 0 0 172 31 255 255 192 168 0 0 192 168 255 255 P 2304R P1 Series User s Guide Chapter 6 WAN You can obtain your IP address from the IANA from an ISP or have it assigned by a private network If you belong to a small organization and your Internet access is through an ISP the ISP can provide you with the Internet addresses for your local networks On the other hand if you are part of a much larger organization you should consult your network administrator for the appropriate IP addresses Regardless of your particular situation do not create an arbitrary IP address always follow the guidelines above For more information on address assignment please refer to RFC 1597 Address Allocation for Private Internets and RFC 1466 Guidelines for Management of IP Address Space 6 1 3 MAC Address Every Ethernet device has a unique MAC Media Access Control address The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters for example 00 A0 C5 00 00 02 The MAC address screen allows users to configure the WAN port s MAC address
247. ommunicate with the SIP server Ask your network administrator if you are not sure Enter the VLAN ID provided by your network administrator in the field on the right Your LAN and gateway must be configured to use VLAN tags Otherwise clear this field Apply Click this to save your changes and to apply them to the ZyXEL Device Reset Click this to set every field in this screen to its last saved value P 2304R P1 Series User s Guide Phone Use these screens to configure the phones you use to make phone calls 10 1 Phone Overview You can configure the volume echo cancellation and VAD settings for each individual phone port on the ZyXEL Device You can also select which SIP account to use for making outgoing calls 10 1 1 Voice Activity Detection Silence Suppression Comfort Noise Voice Activity Detection VAD detects whether or not speech is present This lets the ZyXEL Device reduce the bandwidth that a call uses by not transmitting silent packets when you are not speaking When using VAD the ZyXEL Device generates comfort noise when the other party is not speaking The comfort noise lets you know that the line is still connected as total silence could easily be mistaken for a lost connection 10 1 2 Echo Cancellation G 168 is an ITU T standard for eliminating the echo caused by the sound of your voice reverberating in the telephone receiver while you talk 10 1 3 Supplementary Phone Ser
248. on box Figure 92 Add Remove Programs Windows Setup Communication Components To install a component select the check box next to the component name or clear the check box if you do not want to install it A shaded box means that only part of the component will be installed To see what s included in a component click Details Components GE NetMeeting amp Phone Dialer Universal Plug and Play 0 4 MB ze Virtual Private Networking 0 0 MB Space used by installed components 42 4 MB Space required 0 0 MB Space available on disk 866 3 MB r Description Universal Plug and Play enables seamless connectivity and communication between Windows and intelligent appliances 4 Click OK to go back to the Add Remove Programs Properties window and click Next 5 Restart the computer when prompted 17 2 1 2 Installing UPnP in Windows XP Follow the steps below to install the UPnP in Windows XP 1 Click Start and Control Panel 2 Double click Network Connections 3 Inthe Network Connections window click Advanced in the main menu and select Optional Networking Components Figure 93 Network Connections EN Network Connections File Edit View Favorites Tools Wil Help gt Operator Assisted Dialing Back 7 gs 2 56 Dial up Preferences Address e Network Connections Network Identification Bridge Connections Network Tasks Advanced Settings tional
249. on by uploading new firmware in Maintenance gt Tools gt Firmware WAN Information IP Address This field displays the current IP address of the ZyXEL Device in the WAN IP Subnet This field displays the current subnet mask in the WAN Mask P 2304R P1 Series User s Guide Chapter 3 Status Screens Table 4 Status Screen LABEL DESCRIPTION DHCP This field displays what DHCP services the ZyXEL Device is using in the WAN Choices are Client The ZyXEL Device is a DHCP client in the WAN Its IP address comes from a DHCP server on the WAN None The ZyXEL Device is not using any DHCP services in the WAN It has a static IP address If you are not using Roadrunner on Ethernet you can change this in Network gt WAN If you are using Roadrunner on Ethernet this is controlled by Roadrunner LAN Information IP Address This field displays the current IP address of the ZyXEL Device in the LAN IP Subnet This field displays the current subnet mask in the LAN Mask DHCP This field displays what DHCP services the ZyXEL Device is providing to the LAN Choices are Server The ZyXEL Device is a DHCP server in the LAN It assigns IP addresses to other computers in the LAN None The ZyXEL Device is not providing any DHCP services to the WAN You can change this in Network LAN DHCP Setup System Status System Up Time This field displays how long the ZyXEL Devi
250. on the subnet In Only The ZyXEL Device only receives routing information on the subnet Out Only The ZyXEL Device only sends routing information on the subnet RIP Version Select which version of RIP the ZyXEL Device uses when it sends or receives information on the subnet RIP 1 The ZyXEL Device uses RIPv1 to exchange routing information RIP 2B The ZyXEL Device broadcasts RIPv2 to exchange routing information RIP 2M The ZyXEL Device multicasts RIPv2 to exchange routing information P 2304R P1 Series User s Guide Chapter 6 WAN Table 33 Network WAN Advanced LABEL DESCRIPTION Multicast Select which version of IGMP the ZyXEL Device uses to support multicasting on the WAN Multicasting sends packets to some computers on the WAN and is an alternative to unicasting sending packets to one computer and broadcasting sending packets to every computer None The ZyXEL Device does not support multicasting IGMP v1 The ZyXEL Device supports IGMP version 1 IGMP v2 The ZyXEL Device supports IGMP version 2 Multicasting can improve overall network performance However it requires extra processing and generates more network traffic In addition other computers on the WAN have to support the same version of IGMP Windows NetBIOS over TCP IP Networking Allow between Select this check box if you want the ZyXEL Device to send NetBIOS Network LAN and WAN Basic Input Output System packets between th
251. onnection Wizard gt MAC Address LABEL DESCRIPTION Factory default Select this if you want to use the default MAC address for the ZyXEL Device Spoof this Select this if you do not want to use the default MAC address for the ZyXEL computer s MAC Device Address IP Address This field is enabled if you select Spoof this computer s MAC Address Enter the IP address of the computer whose MAC address you want the ZyXEL Device to use instead of the default MAC address lt Back Click this to go to the previous screen Apply gt Click this to configure the ZyXEL Device and go to the next screen Exit Click this to close this screen and return to the main screen 4 2 7 Finish Figure 24 Connection Wizard gt Finish Connection Wizard Congratulation The Connection Wizard configuration is complete Please press Finish button to complete Connection Wizard Check our exciting range of ZyXEL products atwww zyxel com settings in thi ur wizard entrie as still cannot a ss the Internet then check that your count is ac t the settings yo ard are correct Go to Bandwidth Management Wizard optional P 2304R P1 Series User s Guide Chapter 4 Wizard Setup The following table describes the labels in this screen Table 19 Connection Wizard gt Finish LABEL DESCRIPTION Go to Bandwidth Click this to start the Bandwidth Management Wizard See Section 4 4 on
252. onsider activating it If it is enabled you might consider raising or lowering the priority for some applications The WAN light is off 1 Check the Ethernet cable and connections between the ZyXEL Device WAN port and DSL modem or switch that it is connected to cannot get a WAN IP address from the ISP The INTERNET light is red 1 The ISP provides the WAN IP address after authenticating you Authentication may be through the user name and password the MAC address or the host name P 2304R P1 Series User s Guide Chapter 21 Troubleshooting The username and password apply to PPPoE encapsulation only Make sure that you have entered the correct Service Type User Name and Password be sure to use the correct case Refer to Section 6 2 on page 77 21 4 Phone Calls and VoIP e The telephone port won t work or the telephone lacks a dial tone 1 Check the telephone connections and telephone wire 2 Make sure you have the VoIP SIP Settings screen properly configured e can access the Internet but cannot make VolP calls Make sure you have the VoIP SIP Settings screen properly configured One of the PHONE lights should come on Make sure that your telephone 1s connected to the corresponding PHONE port Noa 3 You can also check the VoIP status in the Status screen 4 Ifthe VoIP settings are correct use speed dial to make peer to peer calls If you cannot make a call using speed di
253. or voice coder decoder Select None if Type you only want the ZyXEL Device to accept the first or second choice P 2304R P1 Series User s Guide Chapter 9 SIP Table 48 VolP gt SIP gt SIP Settings gt Advanced LABEL DESCRIPTION DTMF Mode Control how the ZyXEL Device handles the tones that your telephone makes when you push its buttons You should use the same mode your VoIP service provider uses RFC 2833 send the DTMF tones in RTP packets PCM send the DTMF tones in the voice data stream This method works best when you are using a codec that does not use compression like G 711 Codecs that use compression like G 729 can distort the tones SIP INFO send the DTMF tones in SIP messages STUN Active Select this if all of the following conditions are satisfied There is a NAT router between the ZyXEL Device and the SIP server The NAT router is not a SIP ALG e Your VoIP service provider gave you an IP address or domain name for a STUN server Otherwise clear this field Server Address Enter the IP address or domain name of the STUN server provided by your VoIP service provider Server Port Enter the STUN server s listening port if your VoIP service provider gave you one Otherwise keep the default value Use NAT Active Select this if you want the ZyXEL Device to send SIP traffic to a specific NAT router You must also configure the NAT router to forward traffic with the
254. ort forwarding and port triggering rules Enable FTP ALG Select this to make sure FTP file transfer works correctly with port forwarding and port triggering rules Enable H 323 Select this to make sure H 323 audio visual programs such as NetMeeting ALG works correctly with port forwarding and port triggering rules Apply Click this to save your changes and to apply them to the ZyXEL Device Reset Click this to delete every port triggering rule P 2304R P1 Series User s Guide PART III VoIP SIP 107 Phone 121 Phone Book 129 SIP Use these screens to set up your SIP accounts and to configure QoS settings 9 1 SIP Overview 9 1 1 Introduction to VoIP VoIP Voice over IP is the sending of voice signals over the Internet Protocol This allows you to make phone calls and send faxes over the Internet at a fraction of the cost of using the traditional circuit switched telephone network You can also use servers to run telephone service applications like PBX services and voice mail Internet Telephony Service Provider ITSP companies provide VoIP service A company could alternatively set up an IP PBX and provide it s own VoIP service Circuit switched telephone networks require 64 kilobits per second kbps in each direction to handle a telephone call VoIP can use advanced voice coding techniques with compression to reduce the required bandwidth 9 1 2 Introduction to SIP The
255. ou do not issue the sub command before the default sub command timeout 2 seconds expires or issue an invalid sub command the current operation will be aborted Table 50 European Type Flash Key Commands COMMAND SUB COMMAND DESCRIPTION Flash Put a current call on hold to place a second call Switch back to the call if there is no second call Flash 0 Drop the call presently on hold or reject an incoming call which is waiting for answer Flash 1 Disconnect the current phone connection and answer the incoming call or resume with caller presently on hold Flash 2 1 Switch back and forth between two calls 2 Put a current call on hold to answer an incoming call 3 Separate the current three way conference call into two individual calls one is on line the other is on hold Flash 3 Create three way conference connection Flash O8 Transfer the call to another phone European Call Hold Call hold allows you to put a call A on hold by pressing the flash key If you have another call press the flash key and then 2 to switch back and forth between caller A and B by putting either one on hold Press the flash key and then 0 to disconnect the call presently on hold and keep the current call on line Press the flash key and then 1 to disconnect the current call and resume the call on hold If you hang up the phone but a caller is still on hold there will be a remind rin
256. ou must decompress compressed zip files before you can upload them Browse Click this to find the bin file you want to upload Upload Click this to begin uploading the selected file This may take up to two minutes See Section 20 2 2 on page 210 for more information about this process Note Do not turn off the device while firmware upload is in progress 20 2 2 Firmware Upload Screens LES Do not turn off the device while firmware upload is in progress When the ZyXEL Device starts to upload firmware the Firmware Upload in Process screen appears Figure 112 Firmware Upload In Process Firmware Upload In Process Y p rA Please Wait A Please wait for the device to finish restarting SYS LED is on steady This should take about two minutes To access the device after a successful firmware upload you need to log in again Check your new firmware version in the system status menu 210 P 2304R P1 Series User s Guide Chapter 20 Tools The process usually takes about two minutes The device automatically restarts in this time This causes a temporary network disconnect In some operating systems you may see the following icon on your desktop Figure 113 Network Temporarily Disconnected D Local Area Connection Network cable unplugged After two minutes log in again and check your new firmware version in the Status screen You might have to open a new browser to log in If
257. ould provide this You can also enable and disable each SIP account To access this screen click VoIP gt SIP gt SIP Settings P 2304R P1 Series User s Guide 113 Chapter 9 SIP Figure 59 VoIP gt SIP gt SIP Settings SIP Settings SIP Account SIP1 z SIP Settings M Active SIP Account Number SIP Local Port SIP Server Address SIP Server Port REGISTER Server Address REGISTER Server Port SIP Service Domain V Send Caller ID Authentication User Name hangee 5o60 1025 65535 127 004 5050 1 65535 5050 1 65535 changeme Password EET Apply Reset Advanced Setup Each field is described in the following table Table 47 VoIP SIP SIP Settings LABEL DESCRIPTION SIP Account Select the SIP account you want to see in this screen If you change this field the screen automatically refreshes SIP Settings Active SIP Select this if you want the ZyXEL Device to use this account Clear it if you do not Account want the ZyXEL Device to use this account Number Enter your SIP number In the full SIP URI this is the part before the symbol You can use up to 127 printable ASCII characters SIP Local Port Enter the ZyXEL Device s listening port number if your VoIP service provider gave you one Otherwise keep the default value SIP Server Address Enter the IP address or domain name of the SIP server provided by your VoIP service provider You c
258. page Management 5 Wizard optional Finish Click this to close this screen and return to the main screen 4 3 VoIP Setup Wizard Use this wizard to set up your VoIP account s Leave the default settings in fields if your VoIP service provider the company that lets you make phone calls over the Internet did not provide any information See Chapter 9 on page 107 for more information LES You must have a SIP account before you can use this wizard 4 3 1 SIP Settings Figure 25 VoIP Setup Wizard gt SIP Settings VoIP Setup STEP 1 sTEP 2 ff VoIP Configuration SIP Number ichangeme SIP ver Address 127 0 0 1 SIP Service Domain 127 0 0 1 changeme M Check here to set up SIP2 settings P 2304R P1 Series User s Guide Chapter 4 Wizard Setup The following table describes the labels in this screen Table 20 VoIP Setup Wizard gt SIP Settings LABEL DESCRIPTION SIP Settings SIP Number Enter your SIP number In the full SIP URI like 1234 VolP provider com this is the part before the symbol You can use up to 127 printable ASCII characters SIP Server Enter the IP address or domain name of the SIP server provided by your VoIP Address service provider You can use up to 95 printable ASCII characters It does not matter whether the SIP server is a proxy redirect or register server SIP Service Enter the SIP service domain
259. r of seconds the ZyXEL Device accepts for a session expiration time when it receives a request to start a SIP session If the request has a shorter time the ZyXEL Device rejects it RTP Port Range Start Port Enter the listening port number s for RTP traffic if your VoIP service provider End Port gave you this information Otherwise keep the default values To enter one port number enter the port number in the Start Port and End Port fields To enter a range of ports enter the port number at the beginning of the range in the Start Port field enter the port number at the end of the range in the End Port field Voice Select the type of voice coder decoder codec that you want the ZyXEL Device to Compression use G 711 provides higher voice quality but requires more bandwidth 64 kbps e GT711Ais typically used in Europe e G711uis typically used in North America and Japan In contrast G 729 only requires 8 kbps The ZyXEL Device must use the same codec as the peer When two SIP devices start a SIP session they must agree on a codec Primary Select the ZyXEL Device s first choice for voice coder decoder Compression Type Secondary Select the ZyXEL Device s second choice for voice coder decoder Select None if Compression you only want the ZyXEL Device to accept the first choice Type Third This field is disabled if Secondary Compression Type is None Compression Select the ZyXEL Device s third choice f
260. r to peer calls In peer to peer calls you call another VoIP device directly without going through a SIP server In the ZyXEL Device you must set up a speed dial entry in the phone book in order to do this Select Non Proxy Use IP or URL in the Type column and enter the callee s IP address or domain name The ZyXEL Device sends SIP INVITE requests to the peer VoIP device when you use the speed dial entry You do not need to configure a SIP account in order to make a peer to peer VoIP call 11 2 Phone Book Screens 11 2 1 Incoming Call Policy Screen Use this screen to maintain rules for handling incoming calls You can block redirect or accept them To access this screen click VoIP gt Phone Book gt Incoming Call Policy P 2304R P1 Series User s Guide Chapter 11 Phone Book Figure 66 VoIP Phone Book Incoming Call Policy Incoming Call Policy Table Number Table1 v Forward to Number Setup r Unconditional Forward to Number rn Busy Forward to Number n No Answer Forward to Number No Answer Waiting Time Advanced Setup p res 5 Second Ce a Cc RC RE m F Unconditional You can create two sets of call forwarding rules Each one is stored in a call forwarding table Each field is described in the following table Table 56 VoIP gt Phone Book gt Incoming Call Policy LABEL DESCRIPTION Table Number Select the call forwarding tab
261. r used in packets to the packets to the sending a packet to the mapped external IP mapped external IP external host s IP address and port address and port address and port Outgoing The NAT router maps the internal IP address and port of all The NAT router maps the Packets outgoing packets to a single IP address and port on the internal IP address and external network port of each outgoing packet to a different external IP address and port for each different destination IP address and port The examples in these NAT type sections describe NAT translation between internal private and external public IP addresses Full Cone NAT In full cone NAT the NAT router maps all outgoing packets from an internal IP address and port to a single IP address and port on the external network The NAT router also maps packets coming to that external IP address and port to the internal IP address and port In the following example the NAT router maps the source address of all packets sent from the ZyXEL Device s internal IP address 1 and port A to IP address 2 and port B on the external network The NAT router also performs NAT on all incoming packets sent to IP address 2 and port B and sends them to IP address 1 port A Figure 155 Full Cone NAT Example Pd 1 NAT am 2 B 1 A 9k P 2304R P1 Series User s Guide Appendix F NAT Restricted Cone NAT As in full cone NAT a restricted cone NAT
262. require bandwidth Clear this if you want to reserve bandwidth for traffic that does not match a bandwidth class or if you want to limit the speed of this interface WAN Active Select this to enable bandwidth management on the WAN Bandwidth management applies to all traffic flowing out of the router through the WAN regardless of the traffic s source P 2304R P1 Series User s Guide 459 Chapter 15 Bandwidth MGMT Table 70 Management Bandwidth MGMT Summary LABEL DESCRIPTION Speed Enter the amount of bandwidth for this interface that you want to allocate using bandwidth management The recommendation is to set this speed to match the interface s actual transmission speed For example set the WAN interface speed to 1000 kbps if your Internet connection has an upstream transmission speed of 1 Mbps You can set this number higher than the interface s actual transmission speed This will stop lower priority traffic from being sent if higher priority traffic uses all of the actual bandwidth You can also set this number lower than the interface s actual transmission speed If you do not enable Max Bandwidth Usage this will cause the ZyXEL Device to not use some of the interface s available bandwidth This field is not affected by the Bandwidth Management Wizard Scheduler Select Priority Based to give preference to bandwidth classes with higher priorities Select Fairness Based to treat all bandwidth
263. res such as ActiveX controls Java applets cookies and disable web proxies The ZyXEL Device also allows you to define time periods and days during which the ZyXEL Device performs content filtering 13 2 Content Filtering Screens 13 2 1 Content Filter Screen Use this screen to set up a trusted IP address which web features are restricted and which keywords are blocked when content filtering 1s effective To access this screen click Security 7 Content Filter Filter P 2304R P1 Series User s Guide Chapter 13 Content Filter Figure 74 Security gt Content Filter gt Filter Trusted IP Setup A trusted computer has full access to all blocked resources 0 0 0 0 means there is no trusted computer Trusted Computer IP Address 0 0 0 0 Restrict Web Features Activex Java Cookies Web Proxy Keyword Blocking Enable URL Keyword Blocking Keyword Add Keyword List Delete Clear All Message to display when a site is blocked Denied Access Message Apply Reset Each field is described in the following table Table 60 Security gt Content Filter gt Filter LABEL DESCRIPTION Trusted IP Setup Trusted Computer You can allow a specific computer to access all Internet resources without the IP Address restrictions you set in these screens Enter the IP address of the trusted computer Restrict Web Select the web features you want to disable If a user downloads a page with a Features restri
264. resses from the DHCP pool to your LAN computers These parameters should work for the majority of installations If your ISP gives you explicit DNS server address es read the embedded web configurator help regarding what fields need to be configured 7 1 3 LAN TCP IP The ZyXEL Device has built in DHCP server capability that assigns IP addresses and DNS servers to systems that support DHCP client capability The LAN parameters of the ZyXEL Device are preset in the factory with the following values IP address of 192 168 1 1 with subnet mask of 255 255 255 0 24 bits DHCP server enabled with 32 client IP addresses starting from 192 168 1 33 These parameters should work for the majority of installations If your ISP gives you explicit DNS server address es read the embedded web configurator help regarding what fields need to be configured 7 1 4 DNS Server Address DNS Domain Name System is for mapping a domain name to its corresponding IP address and vice versa The DNS server is extremely important because without it you must know the IP address of a machine before you can access it The DNS server addresses that you enter in the DHCP setup are passed to the client machines along with the assigned IP address and subnet mask There are two ways that an ISP disseminates the DNS server addresses The first is for an ISP to tell a customer the DNS server addresses usually in the form of an information sheet when s he signs up If
265. ries User s Guide 277 Appendix G Internal SPTGEN Table 134 Menu 21 1 Filter Set 1 continued 210101011 IP Filter Set 1 Rule 1 Src Port Comp lt 0 none 1 equal 0 2 not equal 3 less 4 greater gt 210101013 IP Filter Set 1 Rule 1 Act Match lt 1 check 3 next 2 forward 3 drop gt 210101014 IP Filter Set 1 Rule 1 Act Not Match lt 1 check 1 next 2 forward 3 drop gt Menu 21 1 1 2 set 1 rule 2 FI FN PVA INPUT 210102001 IP Filter Set 1 Rule 2 Type lt 2 TCP IP gt SY 210102002 IP Filter Set 1 Rule 2 Active lt 0 No 1 Yes s1 210102003 IP Filter Set 1 Rule 2 Protocol 6 210102004 IP Filter Set 1 Rule 2 Dest IP address 0 0 0 0 210102005 IP Filter Set 1 Rule 2 Dest Subnet 0 Mask 210102006 IP Filter Set 1 Rule 2 Dest Port 138 210102007 IP Filter Set 1 Rule 2 Dest Port Comp lt 0 none 1 equal 1 2 not equal 3 less 4 greater gt 210102008 IP Filter Set 1 Rule 2 Src IP address 0 0 0 0 210102009 IP Filter Set 1 Rule 2 Src Subnet Mask 0 210102010 IP Filter Set 1 Rule 2 Src Port 0 210102011 IP Filter Set 1 Rule 2 Src Port Comp lt 0 none 1 equal 0 2 not equal 3 less 4 greater gt 210102013 IP Filter Set 1 Rule 2 Act Match lt 1 check 3 next 2 forward 3 drop gt 210102014 IP Filter
266. ries User s Guide Chapter 10 Phone Figure 62 VolP gt Phone gt Analog Phone Analog Phone Phone Port Settings Phonet 7 Outgoing Call Use M SIP1 C siP3 Incoming Call apply to M sipi siP2 siP3 Iv siP4 Apply Reset Advanced Setup Each field is described in the following table Table 52 VoIP gt Phone gt Analog Phone LABEL DESCRIPTION Phone Port Select the phone port you want to see in this screen If you change this field the Settings screen automatically refreshes Outgoing Call Use SIP1 4 Select the SIP account s used by this phone port when it make calls If you select more than one SIP accounts the ZyXEL Device tries to use the last registered SIP account Incoming Call apply to SIP1 4 Select the SIP account s for phone calls received on this phone port If you select more than one source for incoming calls there is no way to distinguish between them when you receive phone calls Apply Click this to save your changes and to apply them to the ZyXEL Device Reset Click this to set every field in this screen to its last saved value Advanced Setup Click this to edit the advanced settings for this phone port The Advanced Analog Phone Setup screen appears 10 2 2 Advanced Analog Phone Setup Screen Use this screen to edit advanced settings for each phone port To access this screen click Advanced Setup in VoIP gt Phone gt Analog Phone P
267. rity of each service If a service has higher priority than other services then it can use as much remaining bandwidth as it needs If there is no more bandwidth left other services have to wait Select Others only if you want to set up the sub class manually in the Bandwidth Class Edit Screen Back Click this to go to the previous screen Apply Click this to configure the ZyXEL Device and go to the next screen Exit Click this to close this screen and return to the main screen P 2304R P1 Series User s Guide Chapter 4 Wizard Setup 4 4 5 Finish Figure 33 Bandwidth Management Wizard gt Finish Bandwidth Management Wizard Congratulation The following table describes the labels in this screen Table 27 Bandwidth Management Wizard gt Finish LABEL DESCRIPTION Finish Click this to close this screen and return to the main screen P 2304R P1 Series User s Guide Bridge Mode The ZyXEL Device supports two modes Router and Bridge Usually you should use Router mode because it supports all the features discussed in this User s Guide However you might use Bridge mode in the following situation There is another router in the network and Youonly want to use the ZyXEL Device for VoIP and Internet access You do not want to use other features such as the firewall even with their default settings 5 1 Bridge Mode Overview In Bri
268. rogression The following figure displays the basic steps in the setup and tear down of a SIP call A calls B Table 46 SIP Call Progression A B 1 INVITE 2 Ringing 3 OK 4 ACK 5 Dialogue voice traffic 6 BYE 7 OK 1 A sends a SIP INVITE request to B This message is an invitation for B to participate in a SIP telephone call B sends a response indicating that the telephone is ringing B sends an OK response after the call is answered A then sends an ACK message to acknowledge that B has answered the call Now A and B exchange voice media talk After talking A hangs up and sends a BYE request B replies with an OK response confirming receipt of the BYE request and the call is terminated NO WS DN 9 1 5 SIP Client Server SIP is a client server protocol A SIP client is an application program or device that sends SIP requests A SIP server responds to the SIP requests When you use SIP to make a VoIP call it originates at a client and terminates at a server A SIP client could be a computer or a SIP phone One device can act as both a SIP client and a SIP server 9 1 5 1 SIP User Agent A SIP user agent can make and receive VoIP telephone calls This means that SIP can be used for peer to peer communications even though it is a client server protocol In the following figure either A or B can act as a SIP user agent client to initiate a call A and B can also both
269. rs 1 In Internet Explorer select Tools Pop up Blocker and then select Turn Off Pop up Blocker Figure 121 Pop up Blocker Mail and News gt Turn Off Pop up Blocker Manage Add ons Pop up Blocker Settings Synchronize ee Windows Update Windows Messenger Internet Options You can also check if pop up blocking is disabled in the Pop up Blocker section in the Privacy tab 1 In Internet Explorer select Tools Internet Options Privacy P 2304R P1 Series User s Guide Appendix B Pop up Windows JavaScripts and Java Permissions 2 Clear the Block pop ups check box in the Pop up Blocker section of the screen This disables any web pop up blockers you may have enabled Figure 122 Internet Options Internet Options A General Security Privacy Content Connections Programs Advanced Settings Move the slider to select a privacy setting for the Internet zone Medium Blocks third party cookies that do not have a compact privacy policy Blocks third party cookies that use personally identifiable information without your implicit consent Restricts first party cookies that use personally identifiable information without implicit consent Pop up Blocker Prevent most pop up windows from appearing C Block pop ups 3 Click Apply to save this setting Enable pop up Blockers with Exceptions Alternatively if you only want to allow pop up windows from your device see
270. rt field Server IP Address Enter the IP address of the server to which to forward packets for the selected port number s This server is usually on the LAN Apply Click this to save your changes and to apply them to the ZyXEL Device Reset Click this to set every field in this screen to its last saved value 8 2 4 NAT Trigger Port Screen Use this screen to maintain port triggering rules in the ZyXEL Device To access this screen click Network gt NAT gt Trigger Port P 2304R P1 Series User s Guide Chapter 8 NAT Figure 52 Network gt NAT gt Trigger Port Trigger Port Port Triggering Rules simmer oerte 1 End Port D ON OO Um amp Q N RU go oe TITEL AA ME Apply Reset b b c b b b b c B b b j b b b b c b b b o b c b c b b b j b b b c Bus mn Each field is described in the following table Table 44 Network gt NAT gt Trigger Port LABEL DESCRIPTION Name Enter a name to identify this rule You can use 1 15 printable ASCII characters or you can leave this field blank It does not have to be a unique name Incoming Start Port Enter the incoming port number or range of port numbers you want to forward to End Port the IP address the ZyXEL Device records To forward one port number enter the port number in the Start Port and End Port fields To forward a range of ports
271. s LOG MESSAGE DESCRIPTION Time calibration is successful The device has adjusted its time based on information from the time server Time calibration failed The device failed to get information from the time server WAN interface gets IP s The WAN interface got a new IP address from the DHCP or PPPOE server DHCP client gets s A DHCP client got a new IP address from the DHCP server DHCP client IP expired A DHCP client s IP address has expired DHCP server assigns s The DHCP server assigned an IP address to a client Successful WEB login Someone has logged on to the device s web configurator interface WEB login failed Someone has failed to log on to the device s web configurator interface TELNET Login Successfully Someone has logged on to the router via telnet TELNET Login Fail Someone has failed to log on to the router via telnet Successful FTP login Someone has logged on to the device via ftp FTP login failed Someone has failed to log on to the device via ftp NAT Session Table is Full The maximum number of NAT session table entries has been exceeded and the table is full Time initialized by Daytime Server The device got the time and date from the Daytime server Time initialized by Time server The device got the time and date from the time server Time initialized b
272. s Control or MAC address on the local area network IP routing table is defined on IP Ethernet devices the ZyXEL Device to decide which hop to use to help forward data along to its specified destination The following lists out the steps taken when a computer tries to access the Internet for the first time through the ZyXEL Device 1 When a computer which is in a different subnet first attempts to access the Internet it sends packets to its default gateway which is not the ZyXEL Device by looking at the MAC address in its ARP table 2 When the computer cannot locate the default gateway an ARP request is broadcast on the LAN 3 The ZyXEL Device receives the ARP request and replies to the computer with its own MAC address 4 The computer updates the MAC address for the default gateway to the ARP table Once the ARP table is updated the computer is able to access the Internet through the ZyXEL Device 5 When the ZyXEL Device receives packets from the computer it creates an entry in the IP routing table so it can properly forward packets intended for the computer After all the routing information 1s updated the computer can access the ZyXEL Device and the Internet as if it is in the same subnet as the ZyXEL Device 7 2 LAN Screens 7 2 1 LAN IP Screen Use this screen to set up the ZyXEL Device s IP address and subnet mask To access this screen click Network gt LAN gt IP Figure 41 Network gt LAN gt IP LAN
273. s complete make sure the Status is Active in the Network Configuration screen Using Configuration Files Follow the steps below to edit the network configuration files and set your computer IP address 1 Assuming that you have only one network card on the computer locate the ifconfig eth0 configuration file where eth0 is the name of the Ethernet card Open the configuration file with any plain text editor Ifyou have a dynamic IP address enter dhep in the BOOTPROTO field The following figure shows an example Figure 145 Red Hat 9 0 Dynamic IP Address Setting in ifconfig ethO EVICE eth0 NBOOT yes OOT PROTO dhcp SERCTL no EERDNS yes TYPE Ethernet GOU Ifyou have a static IP address enter static in the BOOTPROTO field Type IPADDR followed by the IP address in dotted decimal notation and type NETMASK followed by the subnet mask The following example shows an example where the static IP address is 192 168 1 10 and the subnet mask is 255 255 255 0 Figure 146 Red Hat 9 0 Static IP Address Setting in ifconfig ethO DEVICE eth0 ONBOOT yes BOOTPROTO static IPADDR 192 168 1 10 NETMASK 255 255 255 0 USERCTL no PEERDNS yes TY PE Ethernet P 2304R P1 Series User s Guide 247 Appendix C Setting up Your Computer s IP Address 2 Ifyou know your DNS server IP address es enter the DNS server information in the
274. s how much traffic that is not allocated to any sub class went to the LAN each second The rate is the number of kilobits that went to the LAN one second before the last time the screen updated refreshed This might include SIP traffic FTP traffic e mail or web traffic depending on what traffic is allocated to sub classes You can change what traffic is allocated to sub classes in Management gt Bandwidth MGMT gt Class Setup WAN VoIP SIP This field displays how much SIP traffic went to the WAN each second The rate is the number of kilobits that went to the WAN one second before the last time the screen updated refreshed P 2304R P1 Series User s Guide Chapter 3 Status Screens Table 8 BW MGMT Monitor LABEL DESCRIPTION WAN FTP This field displays how much FTP traffic went to the WAN each second The rate is the number of kilobits that went to the WAN one second before the last time the screen updated refreshed WAN E Mail This field displays how much e mail went to the WAN each second The rate is the number of kilobits that went to the WAN one second before the last time the screen updated refreshed Default Class This field displays how much traffic that is not allocated to any sub class went to the WAN each second The rate is the number of kilobits that went to the WAN one second before the last time the screen updated refreshed This might include SIP traffic FTP traffic e ma
275. s in your existing network SIP ALG The ZyXEL Device is a SIP Application Layer Gateway ALG It allows VoIP calls to pass through NAT for devices behind the ZyXEL Device such as a SIP based VoIP software application on a computer Multiple Telephones You can connect more than one telephone to the ZyXEL Device s telephone port s The Ringer Equivalence Number REN is used to determine the number of devices that may be connected to the telephone line Dynamic Jitter Buffer The ZyXEL Device has a built in adaptive buffer that helps to smooth out the variations in delay jitter for voice traffic This helps ensure good voice quality for your conversations Multiple SIP Accounts The ZyXEL Device allows you to simultaneously use multiple voice SIP accounts and assign them to one or more telephone ports STUN Simple Traversal of User Datagram Protocol UDP through Network Address Translators STUN allows SIP to pass through NAT routers Outbound Proxy Some VoIP service providers use a SIP outbound server to handle voice calls This allows the ZyXEL Device to work from behind any type of NAT router and eliminates the need for STUN or a SIP ALG Application Layer Gateway P 2304R P1 Series User s Guide Appendix A Product Specifications Table 111 Firmware Features FEATURE DESCRIPTION Multiple Voice Channels The ZyXEL Device can simultaneously handle multiple voice
276. s is another popular Internet chat program MSN Messenger TCP 1863 Microsoft Networks messenger service uses this protocol NetBIOS TCP UDP 137 The Network Basic Input Output System is TCP UDP 138 used for communication between TCP UDP 139 computers in a LAN TCP UDP 445 NEW ICQ TCP 5190 An Internet chat program NEWS TCP 144 A protocol for news groups NFS UDP 2049 Network File System NFS is a client server distributed file service that provides transparent file sharing for network environments NNTP TCP 119 Network News Transport Protocol is the delivery mechanism for the USENET newsgroup service PING User Defined 1 Packet INternet Groper is a protocol that sends out ICMP echo requests to test whether or not a remote host is reachable POP3 TCP 110 Post Office Protocol version 3 lets a client computer get e mail from a POP3 server through a temporary connection TCP IP or other POP3S TCP 995 This is a more secure version of POP3 that runs over SSL PPTP TCP 1723 Point to Point Tunneling Protocol enables secure transfer of data over public networks This is the control channel P 2304R P1 Series User s Guide Appendix H Services Table 139 Examples of Services continued NAME PROTOCOL PORT S DESCRIPTION PPTP TUNNEL User Defined 47 PPTP Point to Point Tunneling Protocol GRE enables secure transfer of data over public n
277. s last saved value P 2304R P1 Series User s Guide Chapter 16 Remote MGMT 16 3 4 SNMP Screen Figure 88 Management Remote MGMT SNMP SNMP SNMP Configuration Get Community Set Community Trap Community Trap Destination SNMP Service Port Service Access Secured Client IP Address all 161 LAN amp WAN 7 C Selected p 000 Apply Reset Each field is described in the following table Table 78 Management Remote MGMT SNMP LABEL DESCRIPTION SNMP Configuration Get Community Enter the Get Community which is the password for the incoming Get and GetNext requests from the management station The default is public and allows all requests Set Community Enter the Set community which is the password for incoming Set requests from the management station The default is public and allows all requests Trap Community Type the trap community which is the password sent with each trap to the SNMP manager The default is public and allows all requests Destination Type the IP address of the station to send your SNMP traps to SNMP Server Port Enter the port number this service can use to access the ZyXEL Device The computer must use the same port number Server Access Select the interface s through which a computer may access the ZyXEL Device using this service Secured Client IP Address Select All to allow any computer to acce
278. s of the computer every time you want to access the Internet via the ZyXEL Device With the Any IP feature and NAT enabled the ZyXEL Device allows a computer to access the Internet without changing the network settings such as IP address and subnet mask of the computer when the IP addresses of the computer and the ZyXEL Device are not in the same subnet Whether a computer is set to use a dynamic or static fixed IP address you can simply connect the computer to the ZyXEL Device and access the Internet The following figure depicts a scenario where a computer is set to use a static private IP address in the corporate environment In a residential house where a ZyXEL Device is installed you can still use the computer to access the Internet without changing the network settings even when the IP addresses of the computer and the ZyXEL Device are not in the same subnet Figure 40 Any IP Example 192 168 10 1 l TA i PN um Y f amil X L ww 192 168 10 1 192 168 1 1 The Any IP feature does not apply to a computer using either a dynamic IP address or a static IP address that is in the same subnet as the ZyXEL Device s IP address P 2304R P1 Series User s Guide Chapter 7 LAN BES You must enable NAT to use the Any IP feature on the ZyXEL Device Address Resolution Protocol ARP is a protocol for mapping an Internet Protocol address IP address to a physical machine address also known as a Media Acces
279. se cerra ek SKA GEN EE Be AAN GE Sek N SEE EN dd events 63 Figure 27 VoIP Setup Wizard gt Registration Complete SUCCESS 00 se ee ee ee AA ee AA ee 64 Figure 28 VoIP Setup Wizard gt Registration Complete Fail eee 65 Figure 29 Bandwidth Management Wizard gt Welcome cccseeercccesererceceeeeeeeeeceeeeeersenenereecenenareacee 66 Figure 30 Bandwidth Management Wizard gt General Information ese ee ee ee ee AA Re AR Re ee ee 67 Figure 31 Bandwidth Management Wizard gt Services Setup ee ee ee ee AA enne 68 Figure 32 Bandwidth Management Wizard gt Priority Setup ii iis eise Ee Re ke Ee RR AR AA Ee RR AA AE Ee eek Ke AR ee 69 Figure 33 Bandwidth Management Wizard gt FINISH uiscera SE Ee dd ed Ee dd ke eed Ed ge aa snena siiis 70 Figure 34 Prompt Before Change to Router Mode sies esse ks SEE Ee Ke AR AE Re kk EE Ee ek AE Re anna nnn Re Ke ek a aae 72 Figure 35 Network gt WAN gt Internet Connection Ethernet Ee EE EE ERG GEGEE EE EE EG ES EE ER SG GEE Ee Ee de 3 Figure 36 Network gt WAN gt Internet Connection Roadrunner esee 78 Figure 37 Network gt WAN Internet Connection PPPOE EE NESER GRA erre i GE ER GR GE EIE ERE RE EG 80 Figure 36 Network gt WAN Umi co er 82 P 2304R P1 Series User s Guide List of Figures Figure 39 Network gt WAN gt Traffic SOBEL issie seeks SEEK RSG PR DEENSE E N pd Bee Ee Ee ARES R
280. see Section 3 1 on page 41 and click Details next to VoIP Statistics Figure 12 VoIP Statistics SIP Status Last Betis e m Registration A Lis SIP1 SIP2 SIP3 SIP4 Call Statistics Not Register Inactive Not Register Inactive N A N A N A N A changeme 127 0 0 1 changeme 127 0 0 1 changeme 127 0 0 1 changeme 127 0 0 1 UDP UDP UDP Phone ook status codes TESTES Duration A Phonei Phone2 Phone3 Phone4 On On On Poll Interval b sec Each field is described in the following table Table 7 VolP Statistics N A N A N A N A N A N A N A N A N A N A N A N A 0 00 00 0 00 00 0 00 00 0 00 00 f Serteva ser LABEL DESCRIPTION SIP Status Account This column displays each SIP account in the ZyXEL Device Registration This field displays the current registration status of the SIP account You can change this in the Status screen Registered The SIP account is registered with a SIP server Register Fail The last time the ZyXEL Device tried to register the SIP account with the SIP server the attempt failed The ZyXEL Device automatically tries to register the SIP account when you turn on the ZyXEL Device or when you activate it Inactive The SIP account is not active You can activate it in VoIP SIP SIP Settings Last Registration This field displays the last time you successfully registered the SIP account It displays N A if
281. server The port number identifies a service for example web service is on port 80 and FTP on port 21 In some cases such as for unknown services or where one server can support more than one service for example both FTP and web service it might be better to specify a range of port numbers You can allocate a server IP address that corresponds to a port or a range of ports Many residential broadband ISP accounts do not allow you to run any server processes such as a Web or FTP server from your location Your ISP may periodically check for servers and may suspend your account if it discovers any active services at your location If you are unsure contact your ISP P 2304R P1 Series User s Guide Internal SPTGEN This appendix introduces Internal SPTGEN All menus shown in this appendix are example menus meant to show SPTGEN usage Actual menus for your product may differ Internal SPTGEN Overview Internal SPTGEN System Parameter Table Generator is a configuration text file useful for efficient configuration of multiple ZyXEL Devices Internal SPTGEN lets you configure save and upload multiple menus at the same time using just one configuration text file eliminating the need to navigate and configure individual screens for each ZyXEL Device You can use FTP to get the Internal SPTGEN file Then edit the file in a text editor and use FTP to upload it again to the same device or another one See the following sections for
282. sion reception which can be determined by turning the device off and on the user is encouraged to try to correct the interference by one or more of the following measures 1 Reorient or relocate the receiving antenna 2 Increase the separation between the equipment and the receiver 3 Connect the equipment into an outlet on a circuit different from that to which the receiver is connected 4 Consult the dealer or an experienced radio TV technician for help Notices Changes or modifications not expressly approved by the party responsible for compliance could void the user s authority to operate the equipment This Class B digital apparatus complies with Canadian ICES 003 Cet appareil num rique de la classe B est conforme la norme NMB 003 du Canada Viewing Certifications 1 Go to http www zyxel com 2 Select your product on the ZyXEL home page to go to that product s page 3 Select the certification you wish to view from this page ZyXEL Limited Warranty 288 ZyXEL warrants to the original end user purchaser that this product is free from any defects in materials or workmanship for a period of up to two years from the date of purchase During the warranty period and upon proof of purchase should the product have indications of failure due to faulty workmanship and or materials ZyXEL will at its discretion repair or replace the defective products or components without charge for either parts or labor and to whatever
283. ss the ZyXEL Device using this service Select Selected to only allow the computer with the IP address that you specify to access the ZyXEL Device using this service Apply Click this to save your changes and to apply them to the ZyXEL Device Reset Click this to set every field in this screen to its last saved value P 2304R P1 Series User s Guide Chapter 16 Remote MGMT 16 3 5 DNS Screen Use this screen to control DNS access to your ZyXEL Device To access this screen click Management gt Remote MGMT gt DNS Figure 89 Management gt Remote MGMT gt DNS DNS Service Port Service Access LAN amp WAN x Secured Client IP Address all C Selected 0 0 0 0 Reset Each field is described in the following table Table 79 Management gt Remote MGMT gt DNS LABEL DESCRIPTION Server Port This field is read only This field displays the port number this service uses to access the ZyXEL Device The computer must use the same port number Server Access Select the interface s through which a computer may access the ZyXEL Device using this service Secured Client IP Select All to allow any computer to access the ZyXEL Device using this service Address Select Selected to only allow the computer with the IP address that you specify to access the ZyXEL Device using this service Apply Click this to save your changes and to apply them to the ZyXEL Device Reset Click
284. ssful or all the pre defined NTP time servers have been tried Table 82 Pre defined NTP Time Servers ntp1 cs wisc edu ntp1 gbg netnod se ntp2 cs wisc edu tock usno navy mil ntp3 cs wisc edu ntp cs strath ac uk ntp1 sp se P 2304R P1 Series User s Guide Chapter 18 System Table 82 Pre defined NTP Time Servers time1 stupi se tick stdtime gov tw tock stdtime gov tw time stdtime gov tw 18 1 6 Resetting the Time The ZyXEL Device resets the time in the following instances When the ZyXEL Device starts up When you click Apply in the Time Setting Screen 24 hour intervals after starting 18 2 System Screens 18 2 1 General System Screen Use this screen to change the ZyXEL Device s mode set up the ZyXEL Device s system name domain name idle timeout and administrator password To access this screen click Maintenance gt System gt General Figure 106 Maintenance gt System gt General General System Setup Mode Router C Bridge System Name Domain Name Administrator Inactivity Timer E minutes 0 means no timeout Management IP Address oos q Note 1 If change to Bridge mode the system will automatic to disable firewall and NAT 2 If chnage to Bridge mode Please set Management IP Address Password Setup Old Password New Password rn Retype to Confirm ier Apply Reset P 2304R P1 Series User s Guide Chapter
285. supports DTMF at the time of writing 2 The ZyXEL Device does not support DiffServ at the time of writing 112 P 2304R P1 Series User s Guide Chapter 9 SIP Figure 58 DiffServ Differentiated Service Field DSCP Unused 6 bit 2 bit DSCP is backward compatible with the three precedence bits in the ToS octet so that non DiffServ compliant ToS enabled network device will not conflict with the DSCP mapping The DSCP value determines the forwarding behavior the PHB Per Hop Behavior that each packet gets across the DiffServ network Based on the marking rule different kinds of traffic can be marked for different priorities of forwarding Resources can then be allocated according to the DSCP values and the configured policies 9 1 11 4 VLAN Virtual Local Area Network VLAN allows a physical network to be partitioned into multiple logical networks Only stations within the same group can communicate with each other Your ZyXEL Device can add IEEE 802 1Q VLAN ID tags to voice frames that it sends to the network This allows the ZyXEL Device to communicate with a SIP server that is a member of the same VLAN group Some ISPs use the VLAN tag to identify voice traffic and give it priority over other traffic 9 2 SIP Screens 9 2 1 SIP Settings Screen Use this screen to maintain basic information about each SIP account Your VoIP service provider the company that lets you make phone calls over the Internet sh
286. t Figure 140 Macintosh OS X Network O Network OO m Od a Show All Displays Network Startup Disk Location Automatic Show Built in Ethernet B PPPoE AppleTalk Proxies Configure Using DHCP Domain Name Servers Optional IP Address 192 168 11 12 168 95 1 1 Provided by DHCP Server Subnet Mask 255 255 254 0 Search Domains Optional Router 192 168 10 11 DHCP Client ID Optional Example apple com earthlink net Ethernet Address 00 05 02 43 93 ff a Click the lock to prevent further changes Apply Now 4 For statically assigned settings do the following From the Configure box select Manually Type your IP address in the IP Address box Type your subnet mask in the Subnet mask box Type the IP address of your gateway in the Router address box 5 Click Apply Now and close the window 6 Restart your computer if prompted P 2304R P1 Series User s Guide Appendix C Setting up Your Computer s IP Address Verifying Settings Check your TCP IP properties in the Network window Linux This section shows you how to configure your computer s TCP IP settings in Red Hat Linux 9 0 Procedure screens and file location may vary depending on your Linux distribution and release version LES Make sure you are logged in as the root administrator Using the K Desktop Environment KDE Follow the steps below to configure your
287. t 192 168 1 0 as the network number which covers 254 individual addresses from 192 168 1 1 to 192 168 1 254 zero and 255 are reserved In other words the first three numbers specify the network number while the last number identifies an individual computer on that network Once you have decided on the network number pick an IP address that is easy to remember for instance 192 168 1 1 for your ZyXEL Device but make sure that no other device on your network is using that IP address The subnet mask specifies the network number portion of an IP address Your ZyXEL Device will compute the subnet mask automatically based on the IP address that you entered You don t need to change the subnet mask computed by the ZyXEL Device unless you are instructed to do otherwise P 2304R P1 Series User s Guide Chapter 7 LAN 7 1 2 DHCP Setup DHCP Dynamic Host Configuration Protocol RFC 2131 and RFC 2132 allows individual clients to obtain TCP IP configuration at start up from a server You can configure the ZyXEL Device as a DHCP server or disable it When configured as a server the ZyXEL Device provides the TCP IP configuration for the clients If DHCP service is disabled you must have another DHCP server on your LAN or else each computer must be manually configured The ZyXEL Device is pre configured with a pool of IP addresses for the DHCP clients DHCP Pool See the product specifications in the appendices Do not assign static IP add
288. t WAN port and four Ethernet LAN ports which are used to physically separate the network into two areas The WAN Wide Area Network port attaches to the broadband cable or DSL modem to the Internet The LAN Local Area Network port attaches to a network of computers which needs security from the outside world These computers will have access to Internet services such as e mail FTP and the World Wide Web However inbound access is not allowed by default unless the remote host 1s authorized to use a specific service 12 1 3 Guidelines For Enhancing Security With Your Firewall 1 Change the default password via web configurator Think about access control before you connect to the network in any way including attaching a modem to the port Limit who can access your router 4 Don t enable any local service such as telnet or FTP that you don t use Any enabled service could present a potential security risk A determined hacker might be able to find creative ways to misuse the enabled services to access the firewall or the network 5 For local services that are enabled protect against misuse Protect by configuring the services to communicate only with specific peers and protect by configuring rules to block packets for the services at specific interfaces 6 Protect against IP spoofing by making sure the firewall is active 7 Keep the firewall in a secured locked room 12 1 4 The Firewall NAT and Remote Management Fig
289. t forwarding rules Configuring One to One and Many One to One NAT mapping rules in the web configurator Address Mapping screen Configuring WAN or LAN amp WAN access for services in the Remote Management screens When you allow remote management from the WAN you are actually configuring WAN to WAN ZyXEL Device firewall rules WAN to WAN ZyXEL Device firewall rules are Internet to the ZyXEL Device WAN interface firewall rules The default is to block all such traffic When you decide what WAN to LAN packets to log you are in fact deciding what WAN to LAN and WAN to WAN ZyXEL Device packets to log Forwarded WAN to LAN packets are not considered alerts 12 2 Triangle Route When the firewall 1s on your ZyXEL Device acts as a secure gateway between your LAN and the Internet In an ideal network topology all incoming and outgoing network traffic passes through the ZyXEL Device to protect your LAN against attacks Figure 69 Ideal Firewall Setup WAN Internet A 12 2 1 The Triangle Route Problem A traffic route is a path for sending or receiving data packets between two Ethernet devices You may have more than one connection to the Internet through one or more ISPs If an alternate gateway is on the LAN and its IP address is in the same subnet as the ZyXEL Device s LAN IP address the triangle route also called asymmetrical route problem may occur The steps below describe the triangle route problem
290. ter Set 2 Rule 1 Act Not lt 1 check s1 Mat ch next 2 forward 3 drop gt Menu 21 1 2 2 Filter set 2 rule 2 FI F PVA INPUT 210202001 IP Filter Set 2 Rule 2 Type 0 none 2 TCP sp IP 210202002 IP Filter Set 2 Rule 2 Active lt 0 No 1 Yes gt Ex 210202003 IP Filter Set 2 Rule 2 Protocol 6 210202004 IP Filter Set 2 Rule 2 Dest IP 0 0 0 0 address 210202005 IP Filter Set 2 Rule 2 Dest 0 Subnet Mask 210202006 IP Filter Set 2 Rule 2 Dest Port 138 210202007 IP Filter Set 2 Rule 2 Dest Port lt 0 none 1 equal 1 Comp 2 not equal 3 less 4 g reater gt 210202008 IP Filter Set 2 Rule 2 Src IP 0 0 0 0 address 210202009 IP Filter Set 2 Rule 2 Src Subnet 0 Mask P 2304R P1 Series User s Guide 279 Appendix G Internal SPTGEN Table 135 Menu 21 1 Filer Set 2 continued 210202010 IP Filter Set 2 Rule 2 Src Port 0 210202011 IP Filter Set 2 Rule 2 Src Port lt 0 none 1 equal 0 Comp 2 not equal 3 less 4 g reater gt 210202013 IP Filter Set 2 Rule 2 Act Match lt 1 check 3 next 2 forward 3 drop gt 210202014 IP Filter Set 2 Rule 2 Act Not lt 1 check s1 Mat ch next 2 forward 3 drop gt Table 136 Menu 23 System Menus Menu 23 1 System Password Setup FI FN PVA INPUT 230000000 S
291. ter times in 24 hour format for example 3 00pm should be entered as 15 00 Apply Click this to save your changes and to apply them to the ZyXEL Device Reset Click this to set every field in this screen to its last saved value P 2304R P1 Series User s Guide Chapter 13 Content Filter P 2304R P1 Series User s Guide Static Route Use these screens to configure static routes in the ZyXEL Device 14 1 Static Route Overview Each remote node specifies only the network to which the gateway is directly connected and the ZyXEL Device has no knowledge of the networks beyond For instance the ZyXEL Device knows about network N2 in the following figure through remote node Router 1 However the ZyXEL Device is unable to route a packet to network N3 because it doesn t know that there is a route through the same remote node Router 1 via gateway Router 2 The static routes are for you to tell the ZyXEL Device about the networks beyond the remote nodes Figure 76 Example of Static Routing Topology N1 N3 a 4 N g DI 14 2 Static Route Screens 14 2 1 IP Static Route Screen Use this screen to look at static routes in the ZyXEL Device To access this screen click Management gt Static Route gt IP Static Route P 2304R P1 Series User s Guide Chapter 14 Static Route ES The first static route is the default route and cannot be modified or
292. th the reason of restart before rebooting MIB when the system is going to restart warm start 6a For intentional reboot A trap is sent with the message System reboot by user if reboot is done intentionally for example download new files Cl command sys reboot etc 6b For fatal error A trap is sent with the message of the fatal code if the system reboots because of fatal errors 16 2 3 System Timeout There is a default system management idle timeout of five minutes three hundred seconds The ZyXEL Device automatically logs you out if the management session remains idle for longer than this timeout period The management session does not time out when a statistics screen is polling You can change the timeout period in the SYSTEM General screen P 2304R P1 Series User s Guide Chapter 16 Remote MGMT 16 3 Remote Management Screens 16 3 1 WWW Screen Use this screen to control HTTP access to your ZyXEL Device To access this screen click Management gt Remote MGMT gt WWW Figure 85 Management gt Remote MGMT gt WWW www Server Port Server Access 80 LAN amp WAN Secured Client IP Address G al C Selected 0 0 0 0 qQ Note 1 For UPnP to function normally the HTTP service must be available for LAN computers using UPnP Apply Reset Each field is described in the following table Table 75 Management Remote MGMT WWW LABEL DESCRIPTION Server Port E
293. that IP address The subnet mask specifies the network number portion of an IP address Your ZyXEL Device will compute the subnet mask automatically based on the IP address that you entered You don t need to change the subnet mask computed by the ZyXEL Device unless you are instructed to do otherwise Private IP Addresses Every machine on the Internet must have a unique address If your networks are isolated from the Internet running only between two branch offices for example you can assign any IP addresses to the hosts without problems However the Internet Assigned Numbers Authority IANA has reserved the following three blocks of IP addresses specifically for private networks e 10 0 0 0 10 255 255 255 e 172 16 0 0 172 31 255 255 192 168 0 0 192 168 255 255 You can obtain your IP address from the IANA from an ISP or it can be assigned from a private network If you belong to a small organization and your Internet access is through an ISP the ISP can provide you with the Internet addresses for your local networks On the other hand if you are part of a much larger organization you should consult your network administrator for the appropriate IP addresses Regardless of your particular situation do not create an arbitrary IP address always follow the guidelines above For more information on address assignment please refer to RFC 1597 Address Allocation for Private Internets and RFC 1466 Guidelines for Manageme
294. the following steps 1 In Internet Explorer select Tools Internet Options and then the Privacy tab 2 Select Settings to open the Pop up Blocker Settings screen P 2304R P1 Series User s Guide Appendix B Pop up Windows JavaScripts and Java Permissions Figure 123 Internet Options Internet Options LL P 3 General Security Privacy Content Connections Programs Advanced Settings Move the slider to select a privacy setting for the Internet X zone Medium Blocks third party cookies that do not have a compact privacy policy Blocks third party cookies that use personally identifiable information without your implicit consent Restricts first party cookies that use personally identifiable information without implicit consent Pop up Blocker S9 Prevent most pop up windows from appearing v Block pop ups Setting 3 Type the IP address of your device the web page that you do not want to have blocked with the prefix http For example http 192 168 1 1 4 Click Add to move the IP address to the list of Allowed sites Figure 124 Pop up Blocker Settings Pop up Blocker Settings Exceptions Pop ups are currently blocked You can allow pop ups from specific Web sites by adding the site to the list below Address of W eb site to allow http 192 168 1 1 Notifications and Filter Level Play a sound when a pop up is blocked Show Information Bar whe
295. the upload is not successful the following screen appears Figure 114 Firmware Upload Error system Upload Firmware upload error The uploaded file was not accepted by the device Please return to the previous page and select a valid upgrade file Click Help for more information Return Click Return to go back to the Firmware Screen 20 2 3 Configuration Screen Use this screen to back up or restore the configuration of the ZyXEL Device You can also use this screen to reset the ZyXEL Device to the factory default settings To access this screen click Maintenance gt Tools gt Configuration Figure 115 Maintenance gt Tools gt Configuration Backup Configuration Click Backup to save the current configuration of your system to your computer Backup Restore Configuration To restore a previously saved configuration file to your system browse to the location of the configuration file and click Upload File Path Browse Upload Back to Factory Defaults Click Reset to clear all user entered configuration information and return to factory defaults After resetting the Password will be 1234 LAN IP address will be 192 168 1 1 DHCP will be reset to server Reset P 2304R P1 Series User s Guide Chapter 20 Tools Each field is described in the following table Table 109 Maintenance gt Tools gt Configuration LABEL DESCRIPTION Backup Configuration Backup Click this to save
296. this condition if you do not want incoming calls from someone to be forwarded by rules in the Forward to Number section Apply Click this to save your changes and to apply them to the ZyXEL Device Reset Click this to set every field in this screen to its last saved value 11 2 2 Speed Dial Screen You have to create speed dial entries if you want to make peer to peer calls or call SIP numbers that use letters You can also create speed dial entries for frequently used SIP phone numbers Use this screen to add edit or remove speed dial entries To access this screen click VoIP gt Phone Book gt Speed Dial P 2304R P1 Series User s Guide Chapter 11 Phone Book Figure 67 VoIP gt Phone Book gt Speed Dial Speed Dial Speed Dial 01 a EE Speed Dial Number Name Type Use Proxy C Non Proxy Use IP or URL Speed Dial Phone Book i EE EE 01 02 03 04 05 06 07 08 09 10 H E B m B m EP m iic EP m EP m EP m BP m 5 m EP Gi Each field is described in the following table Table 57 VolP gt Phone Book gt Speed Dial LABEL DESCRIPTION Speed Dial Use this section to create or edit speed dial entries Speed Dial Select the speed dial number you want to use for this phone number Number Enter the SIP number you want the ZyXEL Device to call when you dial the speed dial number Name Enter a name to identify the party
297. this to set every field in this screen to its last saved value 16 3 6 Security Screen Use this screen to control how your ZyXEL Device responds to other types of requests To access this screen click Management gt Remote MGMT gt Security Figure 90 Management gt Remote MGMT gt Security ICMP Respond to Ping on LAN amp WAN 7 Do not respond to requests for unauthorized services Apply Reset P 2304R P1 Series User s Guide Chapter 16 Remote MGMT Each field is described in the following table Table 80 Management Remote MGMT Security LABEL DESCRIPTION Respond to Ping on Select the interface s on which the ZyXEL Device should respond to incoming ping requests Disable the ZyXEL Device does not respond to any ping requests LAN the ZyXEL Device only responds to ping requests received from the LAN WAN the ZyXEL Device only responds to ping requests received from the WAN LAN amp WAN the ZyXEL Device responds to ping requests received from the LAN or the WAN Do not respond to requests for unauthorized services Select this to prevent outsiders from discovering your ZyXEL Device by sending requests to unsupported port numbers If an outside user attempts to probe an unsupported port on your ZyXEL Device an ICMP response packet is automatically returned This allows the outside user to know the ZyXEL Device exists Your ZyXEL Device supports anti probing whic
298. ting the ZyXEL Device Reset the ZyXEL Device in the following situations You forgot your password You cannot access the device using the web configurator Check Troubleshooting in the Quick Start Guide to make sure you cannot access the device anymore If you reset the ZyXEL Device you lose all of the changes you have made The ZyXEL Device re loads its default settings and the password resets to 1234 You have to make all of your changes again BES You will lose all of your changes when you push the RESET button To reset the ZyXEL Device P 2304R P1 Series User s Guide 35 Chapter 2 Introducing the Web Configurator 1 Make sure the POWER LED is on and not blinking 2 Press and hold the RESET button for five to ten seconds Release the RESET button when the POWER LED begins to blink The default settings have been restored If the ZyXEL Device restarts automatically wait for the ZyXEL Device to finish restarting and log in to the web configurator The password is 1234 You have finished If the ZyXEL Device does not restart automatically disconnect and reconnect the ZyXEL Device s power Then follow the directions above again 2 4 Web Configurator Main Screen Figure 8 Main Screen Refresh Interval None z Device Information System Status System Name P2304R P1 System Up Time 0 21 46 Firmware Version V3 60 ADW 0 bS 03 13 2006 Current Date Time 2000 01 01 00 21 43 WAN Informat
299. to access the Internet Each NAT session establishes a corresponding firewall session Use this field to limit the number of NAT firewall sessions each client computer can establish through the ZyXEL Device If your network has a small number of clients using peer to peer applications you can raise this number to ensure that their performance is not degraded by the number of NAT sessions they can establish If your network has a large number of users using peer to peer applications you can lower this number to ensure no single client is using all of the available NAT sessions Apply Click this to save your changes and to apply them to the ZyXEL Device Reset Click this to set every field in this screen to its last saved value 8 2 2 NAT Port Forwarding Screen Use this screen to look at the current port forwarding rules in the ZyXEL Device and to enable disable activate and deactivate each one You can also set up a default server to handle ports not covered by rules To access this screen click Network gt NAT gt Port Forwarding P 2304R P1 Series User s Guide Chapter 8 NAT Figure 50 Network gt NAT gt Port Forwarding Port Forwarding Default Server Setup Default Server boo Port Forwarding Active Name startPort End Port Server IP Address Modify AN GE ER OU OU GN EG ER GR EP EP EP EP EP E ED ED ED oo ccocoocoococccoococ3ocoso co ooo oco oos ses co S 1 2
300. to another device that has the same IP address your computer s ARP Address Resolution Protocol table may contain an entry that maps the management IP address to the previous device s MAC address In Windows use arp d at the command prompt to delete all entries in your computer s ARP table Try to access the ZyXEL Device using another service such as Telnet If you can access the ZyXEL Device check the remote management settings and firewall rules to find out why the ZyXEL Device does not respond to HTTP f your computer is connected to the WAN port use a computer that is connected to a ETHERNET port e can see the Login screen but I cannot log in to the ZyXEL Device 1 Make sure you have entered the user name and password correctly The default user name is admin and the default password is 1234 These fields are case sensitive so make sure Caps Lock is not on 2 Youcannot log in to the web configurator while someone is using the Telnet to access the ZyXEL Device Log out ofthe ZyXEL Device in the other session or ask the person who is logged in to log out 3 Disconnect and re connect the power adaptor or cord to the ZyXEL Device 4 Ifthis does not work you have to reset the device to its factory defaults See Section 2 3 on page 35 21 3 Internet Access e cannot access the Internet 1 Check the hardware connections and make sure the LEDs are behaving as expected See the Quick Start Gui
301. tomatically if your network supports this capability Otherwise you need to ask your network administrator for the appropriate IP settings btain an IP address automatically Use the following IP address Obtain DNS server address automatically Use the following DNS server addresses 8 Click OK to close the Internet Protocol TCP IP Properties window 9 Click Close OK in Windows 2000 NT to close the Local Area Connection Properties window 10 Close the Network Connections window Network and Dial up Connections in Windows 2000 NT 11 Restart your computer if prompted Verifying Settings 1 Click Start All Programs Accessories and then Command Prompt 2 Inthe Command Prompt window type ipconfig and then press ENTER You can also open Network Connections right click a network connection click Status and then click the Support tab Macintosh OS X 1 Click the Apple menu and click System Preferences to open the System Preferences window P 2304R P1 Series User s Guide Appendix C Setting up Your Computer s IP Address Figure 139 Macintosh OS X Apple Menu Grab File Edit Capt About This Mac Get Mac OS X Software Doc Location gt 2 Click Network in the icon bar Select Automatic from the Location list Select Built in Ethernet from the Show list Click the TCP IP tab 3 For dynamically assigned settings select Using DHCP from the Configure lis
302. ts that vary from country to country Registration Register your product online to receive e mail notices of firmware upgrades and information at www zyxel com for global products or at www us zyxel com for North American products P 2304R P1 Series User s Guide Appendix Legal Information P 2304R P1 Series User s Guide Customer Support Please have the following information ready when you contact customer support Required Information Product model and serial number Warranty Information Date that you received your device Brief description of the problem and the steps you took to solve it Corporate Headquarters Worldwide Support E mail support zyxel com tw Sales E mail sales zyxel com tw Telephone 886 3 578 3942 Fax 886 3 578 2439 Web Site www zyxel com www europe zyxel com FTP Site ftp zyxel com ftp europe zyxel com Regular Mail ZyXEL Communications Corp 6 Innovation Road II Science Park Hsinchu 300 Taiwan Costa Rica Support E mail soporte zyxel co cr Sales E mail sales zyxel co cr Telephone 506 2017878 Fax 506 2015098 Web Site www zyxel co cr FTP Site ftp zyxel co cr Regular Mail ZyXEL Costa Rica Plaza Roble Escaz Etapa El Patio Tercer Piso San Jos Costa Rica Czech Republic E mail info cz zyxel com Telephone 420 241 091 350 Fax 420 241 091 359 Web Site www zyxel cz Regular Mail ZyXEL Communications Czech s r o Modransk 621 14
303. ult Click OK to close the window o0 amp WO ND 232 P 2304R P1 Series User s Guide Appendix B Pop up Windows JavaScripts and Java Permissions Figure 126 Security Settings Java Scripting Settings 125 Scripting Q Prompt E Allow paste operations via script Q Disable 9 Enable Q Prompt amp Scripting of Java applets Disable al 9 Enable Prompt ear Akhantiae stian b ee custom settings Reset to Medium Reset ea Java Permissions 1 From Internet Explorer click Tools Internet Options and then the Security tab Click the Custom Level button Scroll down to Microsoft VM Under Java permissions make sure that a safety level is selected Click OK to close the window a BR WN Figure 127 Security Settings Java Security Settings KIES Settings O Disable 9 Enable i Font download Q Disable 9 Enable Prompt 3 Microsoft VM Er Java permissions Q Custom Disable Sous 9 High safety Q Low safety Reset custom settings Reset to Medium Reset P 2304R P1 Series User s Guide 233 Appendix B Pop up Windows JavaScripts and Java Permissions JAVA Sun 1 From Internet Explorer click Tools Internet Options and then the Advanced tab 2 make sure that Use Java 2 for lt applet gt under Java Sun is selected 3 Click OK to close the window Figure 128 Java Sun internet options S rE
304. ure 68 Firewall Rule Directions Ser Pe RR Ma nerean EN ie y Pd b Pd EN LAN 3 WAN f f H H H H H i i f N 1 cS i 3 i LE Y Hd f Y y F d Y X ye lt i k EN ej E e 12 1 4 1 LAN to WAN rules LAN to WAN rules are local network to Internet firewall rules The default is to forward all traffic from your local network to the Internet You can block certain LAN to WAN traffic in the Services screen click the Services tab All services displayed in the Blocked Services list box are LAN to WAN firewall rules that block those services originating from the LAN P 2304R P1 Series User s Guide Chapter 12 Firewall Blocked LAN to WAN packets are considered alerts Alerts are higher priority logs that include system errors attacks and attempted access to blocked web sites Alerts appear in red in the View Log screen You may choose to have alerts e mailed immediately in the Log Settings screen LAN to LAN ZyXEL Device means the LAN to the ZyXEL Device LAN interface This is always allowed as this is how you manage the ZyXEL Device from your local computer 12 1 4 2 WAN to LAN rules WAN to LAN rules are Internet to your local network firewall rules The default is to block all traffic from the Internet to your local network How can you forward certain WAN to LAN traffic You may allow traffic originating from the WAN to be forwarded to the LAN by Configuring NAT por
305. uses when it sends or receives information on the subnet RIP 1 The ZyXEL Device uses RIPv1 to exchange routing information RIP 2B The ZyXEL Device broadcasts RIPv2 to exchange routing information RIP 2M The ZyXEL Device multicasts RIPv2 to exchange routing information Apply Click this to save your changes and to apply them to the ZyXEL Device Reset Click this to set every field in this screen to its last saved value 7 2 6 LAN Advanced Screen Use this screen to add subnets on the LAN port You can also control what routing information is sent and received by each subnet To access this screen click Network gt LAN gt Advanced Figure 46 Network gt LAN gt Advanced RIP amp Multicast Setup RIP Direction RIP Version Multicast Any IP Setup Active Windows Networking NetBIOS over TCP IP IV Allow between LAN and WAN Each field is described in the following table Table 40 Network gt LAN gt Advanced LABEL DESCRIPTION RIP amp Multicast Setup RIP Direction Use this field to control how much routing information the ZyXEL Device sends and receives on the subnet None The ZyXEL Device does not send or receive routing information on the subnet Both The ZyXEL Device sends and receives routing information on the subnet In Only The ZyXEL Device only receives routing information on the subnet Out Only The ZyXEL Device only sends routing information on the
306. ut 3 minutes TCP connection three way handshaking timeout 270 seconds TCP FIN wait timeout 2 MSL Maximum Segment Lifetime set in the TCP header TCP idle established timeout s 150 minutes TCP reset timeout 10 seconds P 2304R P1 Series User s Guide Chapter 19 Logs Table 93 TCP Reset Logs continued LOG MESSAGE DESCRIPTION Exceed MAX incomplete sent TCP RST The router sent a TCP reset packet when the number of incomplete connections TCP and UDP exceeded the user configured threshold Incomplete count is for all TCP and UDP connections through the firewall Note When the number of incomplete connections TCP UDP gt Maximum Incomplete High the router sends TCP RST packets for TCP connections and destroys TOS firewall dynamic sessions until incomplete connections lt Maximum Incomplete Low Access block sent TCP RST The router sends a TCP RST packet and generates this log if you turn on the firewall TCP reset mechanism via Cl command sys firewall tcprst Table 94 Packet Filter Logs LOG MESSAGE DESCRIPTION TCP UDP ICMP IGMP Generic packet filter matched set d rule d Attempted access matched a configured filter rule denoted by its set and rule number and was blocked or forwarded according to the rule For type and code details see Table 102 on page 205 Table 95 ICMP Logs LOG MESS
307. utomatically if this is the case click Login The Change Password screen appears Figure 6 Change Password Screen Please enter a new password 5 Itis highly recommended to change your password To change your password type a new password retype it to confirm it and click Apply Otherwise click Ignore if you do not want to change your password right now The options screen should appear P 2304R P1 Series User s Guide Chapter 2 Introducing the Web Configurator Figure 7 Select Mode Screen Please select Wizard or Advanced mode The Wizard setup walks you through the most common configuration settings We suggest you use this mode if it is the first time you are setting up your router or if you need to make basic configuration changes Use Advanced mode if you need access to more advanced features not included in Wizard mode 6 In the options screen Click Go to Wizard setup if you are logging in for the first time or if you want to make basic changes See Chapter 4 on page 51 for more information Click Go to Advanced setup if you want to configure features that are not available in the wizards The main screen appears See Section 2 4 on page 36 for more information Click Exit if you want to log out BES For security reasons the ZyXEL Device automatically logs you out if you do not use the web configurator for five minutes If this happens log in again 2 3 Reset
308. utt GESE RE RES tbt GEES G EE GEREGEER ERWEE EED 169 Figure 88 Management gt Remote MGMT gt SNMP eecesseeseeeeesenn ne AE Ee nana th RA a ka Be RA Ak KAR Ee aa 170 Figure 89 Management Remote MGMT gt DNS ii SG EERS SG EERS SG EE ENG SG EE EES Si GE SERE SG EE EG aequ BEREG 171 Figure 90 Management gt Remote MGMT gt Security sesse see ee ee Ee Ee EE AR nnn nnne ee ee ee 171 Figure 91 Add Remove Programs Windows Setup Communication ee ee se ee RR ee ee 176 Figure 92 Add Remove Programs Windows Setup Communication Components 177 Faus 2a Nelwork Re OE ol ON EE 177 Figure 94 Windows Optional Networking Components Wizard ies ee ee ee ek Re ee ee ke ee ee 178 ED de uier DE EE ER EE 178 Figure 96 Network Connections sd See sk NSS nee adc aa snc paco nan Ke RA dnd di 179 Figure 97 Integre Connection FIGBSITIES RE ed SEE Ee bcd OE erts ainda 180 Figure 98 Internet Connection Properties Advanced Settings uie esse ee sd AE KA AE AE Ge Ak ka ed 181 Figure 99 Internet Connection Properties Advanced Settings Add ee ee ee ee ee ee ee ee 181 Fidure mtitkcuIrErem Ge EE 182 Figure TOT ide sg sr SIAS AE AO OE aan EE OR EN 1a2 ed een ete AE N Ee Oe ee ER 183 Figure 103 Network Connections My Network Places s KERE EE KEER Ee GE GE ENE Ged ee ee Be nmn Be kk Gede Ka ed 184 Figure 104 Network Connections My Network Places
309. ver IP address for default 0 0 0 0 port 50000002 SUA Server 2 Active lt 0 No 1 Yes gt 0 50000003 SUA Server 2 Protocol lt 0 A11 6 TCP 17 U 0 DP gt 50000004 SUA Server 2 Port Start 0 50000005 SUA Server 2 Port End 0 50000006 SUA Server 2 Local IP address 0 0 0 0 P 2304R P1 Series User s Guide 275 Appendix G Internal SPTGEN Table 133 Menu 15 SUA Server Setup continued 150000007 SUA Server 3 Active SO No 1 Yes gt 0 150000008 SUA Server 3 Protocol lt 0 ALL 6 TCP 17 U 0 DP 150000009 SUA Server 3 Port Start 0 150000010 SUA Server 3 Port End 0 150000011 SUA Server 3 Local IP address 0 150000012 SUA Server 4 Active lt 0 No 1 Yes gt 0 150000013 SUA Server 4 Protocol lt 0 ALL 6 TCP 17 U 0 DP 150000014 SUA Server 4 Port Start 0 150000015 SUA Server 4 Port End 0 150000016 SUA Server 4 Local IP address 0 150000017 SUA Server 5 Active SO No 1 Yes gt 0 150000018 SUA Server 5 Protocol lt 0 ALL 6 TCP 17 U 0 DP 150000019 SUA Server 5 Port Start 0 150000020 SUA Server 5 Port End 0 150000021 SUA Server 5 Local IP address 0 150000022 SUA Server 6 Active SO No 1 Yes
310. vices Overview Supplementary services such as call hold call waiting call transfer are generally available from your VoIP service provider The ZyXEL Device supports the following services Call Hold Call Waiting Making a Second Call Call Transfer Call Forwarding Three Way Conference e Internal Calls P 2304R P1 Series User s Guide 121 Chapter 10 Phone BS To take full advantage of the supplementary phone services available though the ZyXEL Device s phone ports you may need to subscribe to the services from your VoIP service provider 10 1 3 1 The Flash Key Flashing means to press the hook for a short period of time a few hundred milliseconds before releasing it On newer telephones there should be a flash key button that generates the signal electronically If the flash key is not available you can tap press and immediately release the hook by hand to achieve the same effect However using the flash key is preferred since the timing is much more precise The ZyXEL Device may interpret manual tapping as hanging up if the duration is too long You can invoke all the supplementary services by using the flash key 10 1 3 2 Europe Type Supplementary Phone Services 10 1 3 2 1 This section describes how to use supplementary phone services with the Europe Type Call Service Mode Commands for supplementary services are listed in the table below After pressing the flash key 1f y
311. w port range for blocking Type TCP m Port Number 0 o Add Delete Clear All Schedule to Block Day to Block M Everyday IV sun M Mon M Tue M wedlv Thu M Fri M sat Time of Day to Block 24 Hour Format all day C From Start fo hour J0 min End o hour 0 min Apply Reset Each field is described in the following table Table 59 Security gt Firewall gt Services LABEL DESCRIPTION Service Setup Enable Services Select this to activate service blocking The Schedule to Block section controls Blocking what days and what times service blocking is actually effective however 142 P 2304R P1 Series User s Guide Chapter 12 Firewall Table 59 Security gt Firewall gt Services LABEL DESCRIPTION Available This is a list of pre defined services destination ports you may prohibit your LAN Services computers from using Select the port you want to block and click Add to add the port to the Blocked Services field A custom port is a service that is not available in the pre defined Available Services list You must define it using the Type and Port Number fields See Appendix H on page 283 for some examples of services Blocked Services This is a list of services ports that are inaccessible to computers on your LAN when service blocking is effective To remove a service from this list select the service and click Delete Type Select TCP or UDP based o
312. which services protocols can access which ZyXEL Device interface if any from which computers You may manage your ZyXEL Device from a remote location via Internet WAN only ALL LAN and WAN LAN only Neither Disable To disable remote management of a service select Disable in the corresponding Server Access field You may only have one remote management session running at a time The ZyXEL Device automatically disconnects a remote management session of lower priority when another remote management session of higher priority starts The priorities for the different types of remote management sessions are as follows 1 Telnet 2 HTTP 16 1 1 Remote Management Limitations Remote management over LAN or WAN will not work when 1 You have disabled that service in one of the remote management screens 2 TheIP address in the Secured Client IP field does not match the client IP address If it does not match the ZyXEL Device will disconnect the session immediately 3 There is already another remote management session with an equal or higher priority running You may only have one remote management session running at one time 16 1 2 Remote Management and NAT When NAT is enabled Usethe ZyXEL Device s WAN IP address when configuring from the WAN Use the ZyXEL Device s LAN IP address when configuring from the LAN P 2304R P1 Series User s Guide Chapter 16 Remote MGMT 16 2 SNMP Simple Network Management Prot
313. wing an application to operate through NAT UPnP network devices can automatically configure network addressing announce their presence in the network to other UPnP devices and enable exchange of simple product and service descriptions NAT traversal allows the following Dynamic port mapping Learning public IP addresses Assigning lease times to mappings Windows Messenger is an example of an application that supports NAT traversal and UPnP See Chapter 8 on page 97 for further information about NAT 17 1 3 Cautions with UPnP The automated nature of NAT traversal applications in establishing their own services and opening firewall ports may present network security issues Network information and configuration may also be obtained and modified by users in some network environments All UPnP enabled devices may communicate freely with each other without additional configuration Disable UPnP if this is not your intention P 2304R P1 Series User s Guide Chapter 17 UPnP 17 1 4 UPnP and ZyXEL ZyXEL has achieved UPnP certification from the Universal Plug and Play Forum Creates UPnP mplementors Corp UIC ZyXEL s UPnP implementation supports IGD 1 0 Internet Gateway Device At the time of writing ZyXEL s UPnP implementation supports Windows Messenger 4 6 and 4 7 while Windows Messenger 5 0 and Xbox are still being tested The ZyXEL Device only sends UPnP multicasts to the LAN See later sections for examples o
314. www zyxel kz Regular Mail ZyXEL Kazakhstan 43 Dostyk ave Office 414 Dostyk Business Centre 050010 Almaty Republic of Kazakhstan North America Support E mail support zyxel com Sales E mail sales zyxel com Telephone 1 800 255 4101 1 714 632 0882 Fax 1 714 632 0858 Web Site www us zyxel com FTP Site ftp us zyxel com Regular Mail ZyXEL Communications Inc 1130 N Miller St Anaheim CA 92806 2001 U S A Norway e e e e Support E mail support zyxel no Sales E mail sales zyxel no Telephone 47 22 80 61 80 Fax 47 22 80 61 81 Web Site www zyxel no Regular Mail ZyXEL Communications A S Nils Hansens vei 13 0667 Oslo Norway Poland e e e E mail info pl zyxel com Telephone 48 22 333 8250 Fax 48 22 333 8251 Web Site www pl zyxel com Regular Mail ZyXEL Communications ul Okrzei 1A 03 715 Warszawa Poland Russia e Support http zyxel ru support Sales E mail sales zyxel ru Telephone 7 095 542 89 29 Fax 7 095 542 89 25 Web Site www zyxel ru Regular Mail ZyXEL Russia Ostrovityanova 37a Str Moscow 117279 Russia Support E mail support zyxel es Sales E mail sales zyxel es Telephone 34 902 195 420 Fax 34 913 005 345 P 2304R P1 Series User s Guide Appendix J Customer Support Web Site www zyxel es Regular Mail ZyXEL Communications Arte 21 5 planta 28033 Madrid Spain Sweden Support E mail support zyxel se
315. y LABEL DESCRIPTION LAN Active Select this to enable bandwidth management on the LAN Bandwidth management applies to all traffic flowing out of the router through the LAN regardless of the traffic s source Traffic redirect or IP alias may cause LAN to LAN traffic to pass through the ZyXEL Device and be managed by bandwidth management Speed Enter the amount of bandwidth for this interface that you want to allocate using bandwidth management The recommendation is to set this speed to match the interface s actual transmission speed For example set the LAN interface speed to 10000 kbps if your Internet connection has an upstream transmission speed of 10 Mbps You can set this number higher than the interface s actual transmission speed This will stop lower priority traffic from being sent if higher priority traffic uses all of the actual bandwidth You can also set this number lower than the interface s actual transmission speed If you do not enable Max Bandwidth Usage this will cause the ZyXEL Device to not use some of the interface s available bandwidth This field is not affected by the Bandwidth Management Wizard Scheduler Select Priority Based to give preference to bandwidth classes with higher priorities Select Fairness Based to treat all bandwidth classes equally Maximize Select this if you want the ZyXEL Device to divide any unallocated and unused Bandwidth Usage bandwidth among bandwidth classes that
316. y NTP server The device got the time and date from the NTP server Connect to Daytime server fail The device was not able to connect to the Daytime server Connect to Time server fail The device was not able to connect to the Time server Connect to NTP server fail The device was not able to connect to the NTP server Too large ICMP packet has been dropped The device dropped an ICMP packet that was too large Configuration Change PC Ox x Task ID Ox x The device is saving configuration changes P 2304R P1 Series User s Guide Chapter 19 Logs Table 92 Access Control Logs LOG MESSAGE Firewall default policy UDP IGMP ESP GRE Packet Direction DESCRIPTION TCP Attempted TCP UDP IGMP ESP GRE OSPF access OSPF matched the default policy and was blocked or forwarded according to the default policy s setting Firewall rule NOT UDP IGMP ESP Packet Direction GRE match TCP rule d Attempted TCP UDP IGMP ESP GRE OSPF access matched or did not match a configured firewall rule denoted by its number and was blocked or forwarded according to the rule OSPF Triangle route packet forwarded ESP GRE TCP OSPF UDP IGMP The firewall allowed a triangle route session to pass through blocked TCP UDP ESP GRE OSPF Packet without a NAT table entry I
317. y of Service QoS Quality of Service QoS refers to both a network s ability to deliver data with minimum delay and the networking methods used to provide bandwidth for real time multimedia applications 9 1 11 1 Type Of Service ToS Network traffic can be classified by setting the ToS Type Of Service values at the data source for example at the ZyXEL Device so a server can decide the best method of delivery that is the least cost fastest route and so on 9 1 11 2 DiffServ DiffServ is a class of service CoS model that marks packets so that they receive specific per hop treatment at DiffServ compliant network devices along the route based on the application types and traffic flow Packets are marked with DiffServ Code Points DSCPs indicating the level of service desired This allows the intermediary DiffServ compliant network devices to handle the packets differently depending on the code points without the need to negotiate paths or remember state information for every flow In addition applications do not have to request a particular service or give advanced notice of where the traffic is going 9 1 11 3 DSCP and Per Hop Behavior DiffServ defines a new DS Differentiated Services field to replace the Type of Service TOS field in the IP header The DS field contains a 2 bit unused field and a 6 bit DSCP field which can define up to 64 service levels The following figure illustrates the DS field 1 The ZyXEL Device
318. yXEL Device If the problem continues contact the vendor ah WD P 2304R P1 Series User s Guide 215 Chapter 21 Troubleshooting 21 2 ZyXEL Device Access and Login forgot the IP address for the ZyXEL Device 1 The default IP address is 192 168 1 1 2 Ifyou changed the IP address and have forgotten it you might get the IP address of the ZyXEL Device by looking up the IP address of the default gateway for your computer To do this in most Windows computers click Start gt Run enter cmd and then enter ipconfig The IP address of the Default Gateway might be the IP address ofthe ZyXEL Device it depends on the network so enter this IP address in your Internet browser If this does not work you have to reset the device to its factory defaults See Section on page 219 forgot the password 1 The default password is 1234 2 If this does not work you have to reset the device to its factory defaults See Section on page 219 cannot see or access the Login screen in the web configurator Make sure you are using the correct IP address Use the ZyXEL Device s LAN IP address when configuring from the LAN Use the ZyXEL Device s WAN IP address when configuring from the WAN The default LAN IP address is 192 168 1 1 f you changed the LAN IP address Section 7 2 on page 89 enter the new one as the URL If you changed the LAN IP address and have forgotten it see the troubleshootin
319. you call when you dial the speed dial number You can use up to 127 printable ASCII characters Type Select Use Proxy if you want to use one of your SIP accounts to call this phone number Select Non Proxy Use IP or URL if you want to use a different SIP server or if you want to make a peer to peer call In this case enter the IP address or domain name of the SIP server or the other party in the field below Add Click this to use the information in the Speed Dial section to update the Speed Dial Phone Book section Speed Dial Phone Book Use this section to look at all the speed dial entries and to erase them Speed Dial This field displays the speed dial number you should dial to use this entry You should dial the numbers the way they appear in the screen Number This field displays the SIP number the ZyXEL Device calls when you dial the speed dial number Name This field displays the name of the party you call when you dial the speed dial number Destination This field is blank if the speed dial entry uses one of your SIP accounts Otherwise this field shows the IP address or domain name of the SIP server or other party This field corresponds with the Type field in the Speed Dial section P 2304R P1 Series User s Guide Chapter 11 Phone Book Table 57 VoIP gt Phone Book gt Speed Dial LABEL DESCRIPTION Modify Use this field to edit or erase the speed dial entry Click the Edit icon t
320. you never successfully registered this account URI This field displays the account number and service domain of the SIP account You can change these in VoIP SIP SIP Settings Protocol This field displays the transport protocol the SIP account is currently using Message Waiting This field indicates whether or not there are any messages waiting for the SIP account Last Incoming This field displays the last number that called the SIP account It displays N A if no Number number has ever dialed the SIP account Last Outgoing This field displays the last number the SIP account called It displays N A if the Number SIP account has never dialed a number P 2304R P1 Series User s Guide Chapter 3 Status Screens Table 7 VoIP Statistics LABEL DESCRIPTION Call Statistics Phone This field displays each phone port in the ZyXEL Device Hook This field indicates whether the phone is on the hook or off the hook On The phone is hanging up or already hung up Off The phone is dialing calling or connected Status This field displays the current status of each call DIAL The ZyXEL Device is dialing the current call RING The phone is ringing because there is an incoming call Process The call is connected and in process DROP The ZyXEL Device is hanging up disconnecting the current call DISC The ZyXEL Device has hung up N A There is no phone con
321. ystem Password 1234 Menu 23 2 System security radius server FI FN PVA INPUT 230200001 Authentication Server Configured lt 0 No 1 Yes gt a 230200002 Authentication Server Active lt 0 No 1 Yes gt 1 230200003 Authentication Server IP Address 192 168 1 32 230200004 Authentication Server Port 1822 230200005 Authentication Server Shared Secret 111111111111 111 111111111111 TT 230200006 Accounting Server Configured O No 1 Yes gt E 230200007 Accounting Server Active O No 1 Yes gt 230200008 Accounting Server IP Address 192 168 1 44 230200009 Accounting Server Port 1823 230200010 Accounting Server Shared Secret 1234 Menu 23 4 System security IEEE802 1x FI FN PVA INPUT 230400001 Wireless Port Control 0 Authentication 2 Required 1 No Access Allowed 2 No Authentication Required gt 230400002 ReAuthentication Timer in second 555 230400003 Idle Timeout in second 999 P 2304R P1 Series User s Guide Appendix G Internal SPTGEN Table 136 Menu 23 System Menus continued 230400004 Authentication Databases lt 0 Local User 1 Database Only 1 RADIUS Only 2 Local RADIUS 3 RADIUS Local gt 230400005 Key Management Protocol 0 8021x 1 WPA 0 2 WPAPSK gt 230400006 Dynamic WEP Key Exchange lt 0 Disable 1 64 0 bit WEP 2

ZyXEL P-2304R-P1 Series User's Manual

Contents

Download Pdf Manuals

Related Search

Related Contents