AMG1202-T10A Wireless N-lite ADSL2+ 4-port Ethernet Gateway Default Login Details IP Address http://192.168.1.1 Password 1234 Firmware Version 1.00 Edition 1, 6/2011 www.zyxel.com www.zyxel.
About This User's Guide About This User's Guide Intended Audience This manual is intended for people who want to configure the ZyXEL Device using the web configurator. You should have at least a basic knowledge of TCP/IP networking concepts and topology. Related Documentation • Quick Start Guide The Quick Start Guide is designed to help you get up and running right away. It contains information on setting up your network and configuring for Internet access.
About This User's Guide • Knowledge Base If you have a specific question about your product, the answer may be here. This is a collection of answers to previously asked questions about ZyXEL products. • Forum This contains discussions on ZyXEL products. Learn from others who use ZyXEL products and share your experiences as well. Customer Support In the event of problems that cannot be solved by using this manual, you should contact your vendor.
Document Conventions Document Conventions Warnings and Notes These are how warnings and notes are shown in this User’s Guide. Warnings tell you about things that could harm you or your device. Note: Notes tell you other important information (for example, other things you may need to configure or helpful tips) or recommendations. Syntax Conventions • The AMG1202-T10A may be referred to as the “ZyXEL Device”, the “device”, the “system” or the “product” in this User’s Guide.
Document Conventions 6 Server Firewall Router Switch Telephone AMG1202-T10A User’s Guide
Safety Warnings Safety Warnings • • • • • • • • • • • • • • • • • • • • Do NOT use this product near water, for example, in a wet basement or near a swimming pool. Do NOT expose your device to dampness, dust or corrosive liquids. Do NOT store things on the device. Do NOT install, use, or service this device during a thunderstorm. There is a remote risk of electric shock from lightning. Connect ONLY suitable accessories to the device. Do NOT open the device or unit.
Safety Warnings 8 AMG1202-T10A User’s Guide
Contents Overview Contents Overview User’s Guide ........................................................................................................................... 19 Introduction ................................................................................................................................21 The Web Configurator ................................................................................................................27 Status Screens ........................................
Contents Overview 10 AMG1202-T10A User’s Guide
Table of Contents Table of Contents About This User's Guide .......................................................................................................... 3 Document Conventions ........................................................................................................... 5 Safety Warnings........................................................................................................................ 7 Contents Overview .......................................................
Table of Contents Chapter 4 Tutorials ................................................................................................................................... 37 4.1 Overview ..............................................................................................................................37 4.2 Setting Up a Secure Wireless Network ................................................................................37 4.2.1 Configuring the Wireless Network Settings ........................
Table of Contents 6.4.4 IP Address Assignment ..............................................................................................80 6.4.5 Nailed-Up Connection (PPP) ......................................................................................81 6.4.6 NAT .............................................................................................................................81 6.5 Traffic Shaping ........................................................................................
Table of Contents 8.6 The WDS Screen ............................................................................................................... 110 8.7 The Scheduling Screen ...................................................................................................... 112 8.8 Wireless LAN Technical Reference .................................................................................... 112 8.8.1 Wireless Network Overview ...................................................................
Table of Contents 11.2 The URL Filter Screen .....................................................................................................144 11.3 The Application Filter Screen ...........................................................................................145 11.4 The IP/MAC Filter Screen ................................................................................................146 Chapter 12 Static Route ............................................................................
Table of Contents 16.1.2 What You Need to Know About Remote Management ...........................................170 16.2 The WWW Screen ...........................................................................................................171 16.2.1 Configuring the WWW Screen ................................................................................171 16.3 The Telnet Screen ............................................................................................................171 16.
Table of Contents 21.1 Overview ..........................................................................................................................209 21.1.1 What You Can Do in the Diagnostic Screens .........................................................209 21.2 The General Screen .........................................................................................................209 21.3 The DSL Line Screen .....................................................................................
Table of Contents 18 AMG1202-T10A User’s Guide
P ART I User’s Guide 19
C HAPT ER 1 Introduction 1.1 Overview The AMG1202-T10A is an ADSL2+ router. By integrating DSL and NAT, you are provided with ease of installation and high-speed, shared Internet access. The AMG1202-T10A is also a complete security solution with a robust firewall and content filtering. Only use firmware for your ZyXEL Device’s specific model. Refer to the label on the bottom of your ZyXEL Device. Note: All screens displayed in this user’s guide are from the AMG1202-T10A model.
Chapter 1 Introduction 1.4 Applications for the ZyXEL Device Here are some example uses for which the ZyXEL Device is well suited. 1.4.1 Internet Access Your ZyXEL Device provides shared Internet access by connecting the DSL port to the DSL or MODEM jack on a splitter or your telephone jack. Computers can connect to the ZyXEL Device’s LAN ports (or wirelessly).
Chapter 1 Introduction You can configure your wireless network in either the built-in Web Configurator, or using the WPS button. Figure 2 Wireless Access Example 1.5.1 Using the WPS/WLAN Button By default, the wireless network is turned off on the ZyXEL Device. To turn it on, simply press the WPS/WLAN button on top of the device for 1 second. Once the WPS/WLAN LED turns green, the wireless network is active.
Chapter 1 Introduction 1.6 LEDs (Lights) The following graphic displays the labels of the LEDs. Figure 3 LEDs None of the LEDs are on if the ZyXEL Device is not receiving power. Table 1 LED Descriptions LED COLOR STATUS DESCRIPTION POWER Green On The ZyXEL Device is receiving power and ready for use. Blinking The ZyXEL Device is self-testing. On The ZyXEL Device detected an error while self-testing, or there is a device malfunction. Off The ZyXEL Device is not receiving power.
Chapter 1 Introduction 1.7 The RESET Button If you forget your password or cannot access the web configurator, you will need to use the RESET button at the back of the device to reload the factory-default configuration file. This means that you will lose all configurations that you had previously and the password will be reset to “1234”. 1.7.1 Using the Reset Button 1 Make sure the POWER LED is on (not blinking).
Chapter 1 Introduction 26 AMG1202-T10A User’s Guide
C HAPT ER 2 The Web Configurator 2.1 Overview The web configurator is an HTML-based management interface that allows easy device setup and management via Internet browser. Use Internet Explorer 6.0 and later or Netscape Navigator 7.0 and later versions. The recommended screen resolution is 1024 by 768 pixels. In order to use the web configurator you need to allow: • Web browser pop-up windows from your device. Web pop-up blocking is enabled by default in Windows XP SP (Service Pack) 2.
Chapter 2 The Web Configurator 5 The following screen displays if you have not yet changed your password. It is strongly recommended you change the default password. Enter a new password, retype it to confirm and click Apply; alternatively click Ignore to proceed to the main menu if you do not want to change the password now. Figure 5 Change Password Screen 6 Select Go to Wizard setup and click Apply to display the wizard main screen.
Chapter 2 The Web Configurator 2.2 The Main Screen Figure 7 Main Screen A B C D As illustrated above, the main screen is divided into these parts: • A - title bar • B - navigation panel • C - main window • D - status bar 2.2.1 Title Bar The title bar provides some icons in the upper right corner. The icons provide the following functions. Table 2 Web Configurator Icons in the Title Bar ICON DESCRIPTION Wizards: Click this icon to go to the configuration wizards.
Chapter 2 The Web Configurator 2.2.2 Navigation Panel Use the menu items on the navigation panel to open screens to configure ZyXEL Device features. The following tables describe each menu item. Table 3 Navigation Panel Summary LINK TAB Status FUNCTION This screen shows the ZyXEL Device’s general device and network status information. Use this screen to access the statistics and client list.
Chapter 2 The Web Configurator Table 3 Navigation Panel Summary LINK QoS TAB FUNCTION General Use this screen to enable QoS and traffic prioritizing. You can also configure the QoS rules and actions. Dynamic DNS Remote MGMT UPnP This screen allows you to use a static hostname alias for a dynamic IP address. WWW Use this screen to configure through which interface(s) and from which IP address(es) users can use HTTP to manage the ZyXEL Device.
Chapter 2 The Web Configurator 32 AMG1202-T10A User’s Guide
C HAPT ER 3 Status Screens 3.1 Overview Use the Status screens to look at the current status of the device, system resources, and interfaces (LAN and WAN). The Status screen also provides detailed information from DHCP and statistics from bandwidth management, and traffic. 3.2 The Status Screen Use this screen to view the status of the ZyXEL Device. Click Status to open this screen. Figure 8 Status Screen Each field is described in the following table.
Chapter 3 Status Screens Table 4 Status Screen LABEL DESCRIPTION Device Information Host Name This field displays the ZyXEL Device system name. It is used for identification. Model Number This is the model name of your device. MAC Address This is the MAC (Media Access Control) or Ethernet address unique to your ZyXEL Device. ZyNOS Firmware Version This is the current version of the firmware inside the device. Click this to go to the screen where you can change it.
Chapter 3 Status Screens Table 4 Status Screen LABEL DESCRIPTION System Uptime This field displays how long the ZyXEL Device has been running since it last started up. The ZyXEL Device starts up when you plug it in, when you restart it (Maintenance > Tools > Restart), or when you reset it. Current Date/ Time This field displays the current date and time in the ZyXEL Device. You can change this in Maintenance > System > Time Setting.
Chapter 3 Status Screens 36 AMG1202-T10A User’s Guide
C HAPT ER 4 Tutorials 4.1 Overview This chapter shows you how to use the ZyXEL Device’s various features. • Setting Up a Secure Wireless Network, see page 37 • Configuring the MAC Address Filter, see page 44 • Configuring Static Route for Routing to Another Network, see page 46 • Multiple Public and Private IP Address Mappings, see page 49 • Multiple WAN Connections Example, see page 52 4.
Chapter 4 Tutorials 1 Click Network > Wireless LAN to open the AP screen. Configure the screen using the provided parameters (see page 37). Click Apply. 2 Click the Advanced Setup button and select 802.11b+g+n in the 802.11 Mode field. Click Apply. Thomas can now use the WPS feature to establish a wireless connection between his notebook and the ZyXEL Device (see Section 4.2.2 on page 38). He can also use the notebook’s wireless client to search for the ZyXEL Device (see Section 4.2.3 on page 42). 4.
Chapter 4 Tutorials There are two WPS methods to set up the wireless client settings: • Push Button Configuration (PBC) - simply press a button. This is the easier of the two methods. • PIN Configuration - configure a Personal Identification Number (PIN) on the ZyXEL Device. A wireless client must also use the same PIN in order to download the wireless network settings from the ZyXEL Device.
Chapter 4 Tutorials The following figure shows you an example of how to set up a wireless network and its security by pressing a button on both ZyXEL Device and wireless client. Example WPS Process: PBC Method ZyXEL Device Wireless Client WITHIN 2 MINUTES Press and hold for 5 seconds SECURITY INFO COMMUNICATION PIN Configuration When you use the PIN configuration method, you need to use both the ZyXEL Device’s web configurator and the wireless client’s utility.
Chapter 4 Tutorials 2 Enter the PIN number in the PIN field in the Network > Wireless LAN > WPS Station screen on the ZyXEL Device. 3 Click the Start buttons (or the button next to the PIN field) on both the wireless client utility screen and the ZyXEL Device’s WPS Station screen within two minutes. The ZyXEL Device authenticates the wireless client and sends the proper configuration settings to the wireless client. This may take up to two minutes.
Chapter 4 Tutorials The following figure shows you how to set up a wireless network and its security on a ZyXEL Device and a wireless client by using PIN method. Example WPS Process: PIN Method Wireless Client ZyXEL Device WITHIN 2 MINUTES Authentication by PIN SECURITY INFO COMMUNICATION 4.2.3 Without WPS Use the wireless adapter’s utility installed on the notebook to search for the “Example” SSID.
Chapter 4 Tutorials Note: The ZyXEL Device supports IEEE 802.11b and IEEE 802.11g wireless clients. Make sure that your notebook or computer’s wireless adapter supports one of these standards. 4.2.4 Setting Up Wireless Network Scheduling Thomas mostly uses his notebook to access the Internet on weekends; occasionally he uses it at night on weekdays. Here is how Thomas can set up a schedule to turn on the wireless network at specific time and days.
Chapter 4 Tutorials 2 Configure the screen as follows. Turn on the wireless network from Mondays to Fridays between 18:00 and 23:30. Turn on the wireless network all day on Saturdays and Sundays. Click Apply. 4.3 Configuring the MAC Address Filter Thomas noticed that his daughter Josephine spends too much time surfing the web and downloading media files. He decided to prevent Josephine from accessing the Internet so that she can concentrate on preparing for her final exams.
Chapter 4 Tutorials 1 Click Network > LAN > Client List to open the following screen. Look for the MAC address of Josephine’s computer. 2 Click Network > Wireless LAN to open the AP screen. Click the Edit button in the MAC Filter field.
Chapter 4 Tutorials 3 Select Active MAC Filter and Deny Filter Action. Enter the MAC address you found in the Client List screen. Click Apply. Josephine will no longer be able to access the Internet through the ZyXEL Device. 4.4 Configuring Static Route for Routing to Another Network In order to extend your Intranet and control traffic flowing directions, you may connect a router to the ZyXEL Device’s LAN. The router may be used to separate two department networks.
Chapter 4 Tutorials computer A (in N1 network) to computer B (in N2 network), the traffic is sent to the ZyXEL Device’s WAN default gateway by default. In this case, B will never receive the traffic. N1 A R N2 B You need to specify a static routing rule on the ZyXEL Device to specify R as the router in charge of forwarding traffic to N2. In this case, the ZyXEL Device routes traffic from A to R and then R routes the traffic to B.
Chapter 4 Tutorials Table 5 IP Settings in this Tutorial DEVICE / COMPUTER IP ADDRESS R’s N2 192.168.10.2 B 192.168.10.33 To configure a static route to route traffic from N1 to N2: 1 Log into the ZyXEL Device’s Web Configurator in advanced mode. 2 Click Advanced > Static Route. 3 Click Edit on a new rule in the Static Route screen. 4 Configure the Static Route Setup screen using the following settings: 4a Type 192.168.10.0 and subnet mask 255.255.255.0 for the destination, N2. 4b Type 192.
Chapter 4 Tutorials 4.5 Multiple Public and Private IP Address Mappings If your ISP gives you more than one static IP address for your Internet access, you can map each IP address for a specific service. This tutorial assumes you are given two static public IP addresses. You want to map them to two servers A and B. IP-1 IP-2 A B C This tutorial uses the following example settings: Table 6 IP Settings in this Tutorial DEVICE / COMPUTER IP ADDRESS The ZyXEL Device’s WAN 172.16.1.253 (IP-1) 172.16.1.
Chapter 4 Tutorials To configure this: 1 Click Network > NAT. 2 Select Active Network Address Translation(NAT) and Full Feature in the General screen. Click Apply. 3 Click the Address Mapping tab, and then click the Edit icon on a new rule. 4 Configure the rule using the following settings: • Type: Many-to-Many No Overload • Local IP addresses: 192.168.1.2 ~ 192.168.1.3 • Global IP addresses: 172.16.1.253 ~ 172.16.1.254 Then click Apply.
Chapter 4 Tutorials 4.5.2 Full Feature NAT + One-to-One Mapping Use this setting if your applications must use fixed public IP addresses and the applications can be initiated either from the Intranet computers (A and B) or the Internet computer (C). For example, gaming application. IP-1 A B C To configure this setting: 1 Click Network > NAT. 2 Select Active Network Address Translation(NAT) and Full Feature in the General screen. Click Apply.
Chapter 4 Tutorials Global Start IP: 172.16.1.254 Click Apply on each of the screens. 4.6 Multiple WAN Connections Example This example shows an application for multiple WAN connections. Your ISP may configure more than one WAN connection on the ZyXEL Device to record traffic statistics or calculate service charges. In Figure 9, three WAN connections are configured over the ADSL line: • The connection with VPI/VCI, 0/33, is dedicated for Media-On-Demand (MOD) service.
P ART II Technical Reference 53
C HAPT ER 5 Internet and Wireless Setup Wizard 5.1 Overview Use the wizard setup screens to configure your system for Internet access with the information given to you by your ISP. Note: See the advanced menu chapters for background information on these fields. 5.2 Internet Access Wizard Setup 1 After you enter the password to access the web configurator, select Go to Wizard setup and click Apply. Otherwise, click the wizard icon ( ) in the top right corner of the web configurator to go to the wizards.
Chapter 5 Internet and Wireless Setup Wizard 2 Click INTERNET/WIRELESS SETUP to configure the system for Internet access and wireless connection. Figure 11 Wizard Welcome 3 Your ZyXEL device attempts to detect your DSL connection and your connection type. 3a The following screen appears if a connection is not detected. Check your hardware connections and click Restart the INTERNET/WIRELESS SETUP Wizard to return to the wizard welcome screen.
Chapter 5 Internet and Wireless Setup Wizard 3b The following screen displays if a PPPoE or PPPoA connection is detected. Enter your Internet account information (username, password and/or service name) exactly as provided by your ISP. Then click Next and see Section 5.3 on page 63 for wireless connection wizard setup. Figure 13 Auto-Detection: PPPoE 3c The following screen appears if the ZyXEL device detects a connection but not the connection type. Click Next and refer to Section 5.2.
Chapter 5 Internet and Wireless Setup Wizard 5.2.1 Manual Configuration 1 If the ZyXEL Device fails to detect your DSL connection type but the physical line is connected, enter your Internet access information in the wizard screen exactly as your service provider gave it to you. Leave the defaults in any fields for which you were not given information. Figure 15 Internet Access Wizard Setup: ISP Parameters The following table describes the fields in this screen.
Chapter 5 Internet and Wireless Setup Wizard Table 7 Internet Access Wizard Setup: ISP Parameters LABEL 2 DESCRIPTION VCI Enter the VCI assigned to you. This field may already be configured. Back Click this to return to the previous screen without saving. Next Click this to continue to the next wizard screen. The next wizard screen you see depends on what protocol you chose above. Exit Click this to close the wizard screen without saving.
Chapter 5 Internet and Wireless Setup Wizard The following table describes the fields in this screen. Table 8 LABEL DESCRIPTION User Name Enter the user name exactly as your ISP assigned. If assigned a name in the form user@domain where domain identifies a service name, then enter both components exactly as given. Password Enter the password associated with the user name above. Service Name Type the name of your PPPoE service here. Back Click this to return to the previous screen without saving.
Chapter 5 Internet and Wireless Setup Wizard The following table describes the fields in this screen. Table 9 Internet Connection with RFC 1483 LABEL DESCRIPTION IP Address This field is available if you select Routing in the Mode field. Type your ISP assigned IP address in this field. Back Click this to return to the previous screen without saving. Next Click this to continue to the next wizard screen. Exit Click this to close the wizard screen without saving.
Chapter 5 Internet and Wireless Setup Wizard The following table describes the fields in this screen. Table 10 Internet Connection with ENET ENCAP LABEL DESCRIPTION Obtain an IP Address Automatically A static IP address is a fixed IP that your ISP gives you. A dynamic IP address is not fixed; the ISP assigns you a different one each time you connect to the Internet. Static IP Address Select Static IP Address if your ISP gave you an IP address to use. IP Address Enter your ISP assigned IP address.
Chapter 5 Internet and Wireless Setup Wizard Table 11 Internet Connection with PPPoA (continued) LABEL DESCRIPTION Apply Click this to save your changes. Exit Click this to close the wizard screen without saving. • If the user name and/or password you entered for PPPoE or PPPoA connection are not correct, the screen displays as shown next. Click Back to Username and Password setup to go back to the screen where you can modify them.
Chapter 5 Internet and Wireless Setup Wizard 1 Select Yes and click Next to configure wireless settings. Otherwise, select No and skip to Step 6. Figure 22 Connection Test Successful 2 Use this screen to activate the wireless LAN. Click Next to continue. Figure 23 Wireless LAN Setup Wizard 1 The following table describes the labels in this screen. Table 12 Wireless LAN Setup Wizard 1 64 LABEL DESCRIPTION Active Select the check box to turn on the wireless LAN.
Chapter 5 Internet and Wireless Setup Wizard 3 Configure your wireless settings in this screen. Click Next. Figure 24 Wireless LAN The following table describes the labels in this screen. Table 13 Wireless LAN Setup Wizard 2 LABEL DESCRIPTION Network Name(SSID) Enter a descriptive name (up to 32 printable 7-bit ASCII characters) for the wireless LAN. If you change this field on the ZyXEL Device, make sure all wireless stations use the same SSID in order to access the network.
Chapter 5 Internet and Wireless Setup Wizard 5.3.1 Manually Assign a WPA-PSK key Choose Manually assign a WPA-PSK key in the Wireless LAN setup screen to set up a PreShared Key. Figure 25 Manually Assign a WPA-PSK key The following table describes the labels in this screen. Table 14 Manually Assign a WPA-PSK key LABEL DESCRIPTION Pre-Shared Key Type from 8 to 63 case-sensitive ASCII characters. You can set up the most secure wireless connection by configuring WPA in the wireless LAN screens.
Chapter 5 Internet and Wireless Setup Wizard The following table describes the labels in this screen. Table 15 Manually Assign a WEP key LABEL DESCRIPTION Key The WEP keys are used to encrypt data. Both the ZyXEL Device and the wireless stations must use the same WEP key for data transmission. Enter any 5 or 13 ASCII characters, or 10 or 26 hexadecimal characters ("0-9", "AF") for a 64-bit or 128-bit WEP key respectively. 5 Back Click this to return to the previous screen without saving.
Chapter 5 Internet and Wireless Setup Wizard Note: No wireless LAN settings display if you chose not to configure wireless LAN settings. Figure 28 Internet Access and WLAN Wizard Setup Complete 7 68 Launch your web browser and navigate to www.zyxel.com. Internet access is just the beginning. Refer to the rest of this guide for more detailed information on the complete range of ZyXEL Device features.
C HAPT ER 6 WAN Setup 6.1 Overview This chapter describes how to configure WAN settings from the WAN screens. Use these screens to configure your ZyXEL Device for Internet access. A WAN (Wide Area Network) connection is an outside connection to another network or the Internet. It connects your private networks (such as a LAN (Local Area Network) and other networks, so that a computer in one location can communicate with computers in other locations. Figure 29 LAN and WAN LAN WAN 6.1.
Chapter 6 WAN Setup networks. It can be static (fixed) or dynamically assigned by the ISP each time the ZyXEL Device tries to access the Internet. If your ISP assigns you a static WAN IP address, they should also assign you the subnet mask and DNS server IP address(es) (and a gateway IP address if you use the Ethernet or ENET ENCAP encapsulation method).
Chapter 6 WAN Setup 6.2 The Internet Access Setup Screen Use this screen to change your ZyXEL Device’s WAN settings. Click Network > WAN > Internet Access Setup. The screen differs by the WAN type and encapsulation you select. Figure 30 Network > WAN >Internet Access Setup (PPPoE) The following table describes the labels in this screen. Table 16 Network > WAN > Internet Access Setup LABEL DESCRIPTION Line ADSL Mode Select the mode supported by your ISP.
Chapter 6 WAN Setup Table 16 Network > WAN > Internet Access Setup (continued) LABEL DESCRIPTION Mode Select Routing (default) from the drop-down list box if your ISP gives you one IP address only and you want multiple computers to share an Internet account. Select Bridge when your ISP provides you more than one IP address and you want the connected computers to get individual IP address from ISP’s DHCP server directly.
Chapter 6 WAN Setup Table 16 Network > WAN > Internet Access Setup (continued) LABEL DESCRIPTION Cancel Click this to restore your previously saved settings. Advanced Setup Click this to display the Advanced WAN Setup screen and edit more details of your WAN setup. 6.2.1 Advanced Internet Access Setup Use this screen to edit your ZyXEL Device's advanced WAN settings. Click the Advanced Setup button in the Internet Access Setup screen. The screen appears as shown.
Chapter 6 WAN Setup Table 17 Network > WAN > Internet Access Setup: Advanced Setup (continued) LABEL DESCRIPTION Multicast Multicast packets are sent to a group of computers on the LAN and are an alternative to unicast packets (packets sent to one computer) and broadcast packets (packets sent to every computer). Internet Group Multicast Protocol (IGMP) is a network-layer protocol used to establish membership in a multicast group. The ZyXEL Device supports IGMPv1, IGMP-v2 and IGMP-v3.
Chapter 6 WAN Setup differs by the encapsulation you select. When you use the WAN > Internet Access Setup screen to set up Internet access, you are configuring the first WAN connection. Figure 32 Network > WAN > More Connections The following table describes the labels in this screen. Table 18 Network > WAN > More Connections LABEL DESCRIPTION # This is an index number indicating the number of the corresponding connection. Active This field indicates whether the connection is active or not.
Chapter 6 WAN Setup 6.3.1 More Connections Edit Use this screen to configure a connection. Click the edit icon in the More Connections screen to display the following screen. Figure 33 Network > WAN > More Connections: Edit The following table describes the labels in this screen. Table 19 Network > WAN > More Connections: Edit LABEL DESCRIPTION General Active Select the check box to activate or clear the check box to deactivate this connection.
Chapter 6 WAN Setup Table 19 Network > WAN > More Connections: Edit (continued) LABEL DESCRIPTION Encapsulation Select the method of encapsulation used by your ISP from the drop-down list box. Choices vary depending on the mode you select in the Mode field. If you select Bridge in the Mode field, select either PPPoA or RFC 1483. If you select Routing in the Mode field, select PPPoA, RFC 1483, ENET ENCAP or PPPoE. Multiplexing Select the method of multiplexing used by your ISP from the drop-down list.
Chapter 6 WAN Setup Table 19 Network > WAN > More Connections: Edit (continued) LABEL DESCRIPTION Back Click this to return to the previous screen without saving. Apply Click this to save your changes. Cancel Click this to restore your previously saved settings. Advanced Setup Click this to display the More Connections Advanced Setup screen and edit more details of your WAN setup. 6.3.2 Configuring More Connections Advanced Setup Use this screen to edit your ZyXEL Device's advanced WAN settings.
Chapter 6 WAN Setup Table 20 Network > WAN > More Connections: Edit: Advanced Setup (continued) LABEL DESCRIPTION MTU The Maximum Transmission Unit (MTU) defines the size of the largest packet allowed on an interface or connection. Enter the MTU in this field. For ENET ENCAP, the MTU value is 1500. For PPPoE, the MTU value is 1492. For PPPoA and RFC, the MTU is 65535. Back Click this to return to the previous screen without saving. Apply Click this to save your changes.
Chapter 6 WAN Setup By implementing PPPoE directly on the ZyXEL Device (rather than individual computers), the computers on the LAN do not need PPPoE software installed, since the ZyXEL Device does that part of the task. Furthermore, with NAT, all of the LANs’ computers will have access. 6.4.1.3 PPPoA PPPoA stands for Point to Point Protocol over ATM Adaptation Layer 5 (AAL5). A PPPoA connection functions like a dial-up Internet connection.
Chapter 6 WAN Setup IP Assignment with PPPoA or PPPoE Encapsulation If you have a dynamic IP, then the IP Address and Gateway IP Address fields are not applicable (N/A). If you have a static IP, then you only need to fill in the IP Address field and not the Gateway IP Address field. IP Assignment with RFC 1483 Encapsulation In this case the IP address assignment must be static. IP Assignment with ENET ENCAP Encapsulation In this case you can have either a static or dynamic IP.
Chapter 6 WAN Setup Maximum Burst Size (MBS) is the maximum number of cells that can be sent at the PCR. After MBS is reached, cell rates fall below SCR until cell rate averages to the SCR again. At this time, more cells (up to the MBS) can be sent at the PCR again. If the PCR, SCR or MBS is set to the default of "0", the system will assign a maximum value that correlates to your upstream line rate. The following figure illustrates the relationship between PCR, SCR and MBS.
Chapter 6 WAN Setup Unspecified Bit Rate (UBR) The Unspecified Bit Rate (UBR) ATM traffic class is for bursty data transfers. However, UBR doesn't guarantee any bandwidth and only delivers traffic when the network has spare bandwidth. An example application is background file transfer.
Chapter 6 WAN Setup 84 AMG1202-T10A User’s Guide
C HAPT ER 7 LAN Setup 7.1 Overview A Local Area Network (LAN) is a shared communication system to which many networking devices are connected. It is usually located in one immediate area such as a building or floor of a building. Use the LAN screens to help you configure a LAN DHCP server and manage IP addresses. LAN DSL 7.1.1 What You Can Do in the LAN Screens • Use the LAN IP screen (Section 7.2 on page 86) to set the LAN IP address and subnet mask of your ZyXEL device.
Chapter 7 LAN Setup Subnet Mask Subnet masks determine the maximum number of possible hosts on a network. You can also use subnet masks to divide one network into multiple sub-networks. DHCP A DHCP (Dynamic Host Configuration Protocol) server can assign your ZyXEL Device an IP address, subnet mask, DNS and other routing information when it's turned on. RIP RIP (Routing Information Protocol) allows a router to exchange routing information with other routers.
Chapter 7 LAN Setup 1 Enter an IP address into the IP Address field. The IP address must be in dotted decimal notation. This will become the IP address of your ZyXEL Device. 2 Enter the IP subnet mask into the IP Subnet Mask field. Unless instructed otherwise it is best to leave this alone, the configurator will automatically compute a subnet mask based upon the IP address you entered. 3 Click Apply to save your settings.
Chapter 7 LAN Setup The following table describes the labels in this screen. Table 22 Network > LAN > IP: Advanced Setup LABEL DESCRIPTION RIP & Multicast Setup RIP Direction Select the RIP direction from None, Both, In Only and Out Only. RIP Version Select the RIP version from RIP-1, RIP-2B and RIP-2M. Multicast IGMP (Internet Group Multicast Protocol) is a network-layer protocol used to establish membership in a multicast group. The ZyXEL Device supports IGMPv1, IGMP-v2 and IGMP-v3.
Chapter 7 LAN Setup The following table describes the labels in this screen. Table 23 Network > LAN > DHCP Setup LABEL DESCRIPTION DHCP Setup DHCP If set to Server, your ZyXEL Device can assign IP addresses, an IP default gateway and DNS servers to Windows 95, Windows NT and other systems that support the DHCP client. If set to None, the DHCP server will be disabled.
Chapter 7 LAN Setup Use this screen to change your ZyXEL Device’s static DHCP settings. Click Network > LAN > Client List to open the following screen. Figure 39 Network > LAN > Client List The following table describes the labels in this screen. Table 24 Network > LAN > Client List LABEL DESCRIPTION IP Address Enter the IP address that you want to assign to the computer on your LAN with the MAC address that you will also specify. MAC Address Enter the MAC address of a computer on your LAN.
Chapter 7 LAN Setup When you use IP alias, you can also configure firewall rules to control access between the LAN's logical networks (subnets). Note: Make sure that the subnets of the logical networks do not overlap. The following figure shows a LAN divided into subnets A, B, and C. Figure 40 Physical Network & Partitioned Logical Networks A: 192.168.1.1 - 192.168.1.24 Ethernet Interface B: 192.168.2.1 - 192.168.2.24 C: 192.168.3.1 - 192.168.3.24 7.5.
Chapter 7 LAN Setup Table 25 Network > LAN > IP Alias LABEL DESCRIPTION RIP Direction RIP (Routing Information Protocol, RFC 1058 and RFC 1389) allows a router to exchange routing information with other routers. The RIP Direction field controls the sending and receiving of RIP packets. Select the RIP direction from Both/In Only/Out Only/None. When set to Both or Out Only, the ZyXEL Device will broadcast its routing table periodically.
Chapter 7 LAN Setup 7.6.2 DHCP Setup DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individual clients to obtain TCP/IP configuration at start-up from a server. You can configure the ZyXEL Device as a DHCP server or disable it. When configured as a server, the ZyXEL Device provides the TCP/IP configuration for the clients. If you turn DHCP service off, you must have another DHCP server on your LAN, or else the computer must be manually configured.
Chapter 7 LAN Setup 192.168.255.0 and you must enable the Network Address Translation (NAT) feature of the ZyXEL Device. The Internet Assigned Number Authority (IANA) reserved this block of addresses specifically for private use; please do not use any other number unless you are told otherwise. Let's say you select 192.168.1.0 as the network number; which covers 254 individual addresses, from 192.168.1.1 to 192.168.1.254 (zero and 255 are reserved).
Chapter 7 LAN Setup The Version field controls the format and the broadcasting method of the RIP packets that the ZyXEL Device sends (it recognizes both formats when receiving). RIP-1 is universally supported; but RIP-2 carries more information. RIP-1 is probably adequate for most networks, unless you have an unusual network topology. Both RIP-2B and RIP-2M sends the routing data in RIP-2 format; the difference being that RIP-2B uses subnet broadcasting while RIP-2M uses multicasting. 7.6.
Chapter 7 LAN Setup 96 AMG1202-T10A User’s Guide
C HAPT ER 8 Wireless LAN 8.1 Overview This chapter describes how to perform tasks related to setting up and optimizing your wireless network, including the following. • Turning the wireless connection on or off. • Configuring a name, wireless channel and security for the network. • Using WiFi Protected Setup (WPS) to configure your wireless network. • Setting up multiple wireless networks. • Using a MAC (Media Access Control) address filter to restrict access to the wireless network.
Chapter 8 Wireless LAN 8.1.2 What You Need to Know About Wireless Wireless Basics “Wireless” is essentially radio communication. In the same way that walkie-talkie radios send and receive information over the airwaves, wireless networking devices exchange information with one another. A wireless networking device is just like a radio that lets your computer exchange information with radios attached to other computers.
Chapter 8 Wireless LAN 8.2 The AP Screen Use this screen to configure the wireless settings of your ZyXEL Device. Click Network > Wireless LAN to open the AP screen. Figure 43 Network > Wireless LAN > AP The following table describes the labels in this screen. Table 26 Network > Wireless LAN > AP LABEL DESCRIPTION Wireless Setup Enable Wireless LAN Click the check box to activate wireless LAN. Channel Selection Set the operating frequency/channel.
Chapter 8 Wireless LAN Table 26 Network > Wireless LAN > AP LABEL Edit DESCRIPTION Click this to go to the MAC Filter screen to configure MAC filter settings. See Section 8.2.6 on page 106 for more details. QoS Select this check box to activate Quality of Service (QoS). Apply Click this to save your changes. Cancel Click this to restore your previously saved settings. Advanced Setup Click this to display the Wireless Advanced Setup screen and edit more details of your WLAN setup. See Section 8.2.
Chapter 8 Wireless LAN Note: WEP is extremely insecure. Its encryption can be broken by an attacker, using widely-available software. It is strongly recommended that you use a more effective security mechanism. Use the strongest security mechanism that all the wireless devices in your network support. For example, use WPA-PSK or WPA2-PSK if all your wireless devices support it, or use WPA or WPA2 if your wireless devices support it and you have a RADIUS server.
Chapter 8 Wireless LAN 8.2.3 WPA(2)-PSK Use this screen to configure and enable WPA(2)-PSK authentication. Click Network > Wireless LAN to display the AP screen. Select WPA-PSK or WPA2-PSK from the Security Mode list. Figure 46 Network > Wireless LAN > AP: WPA(2)-PSK The following table describes the wireless LAN security labels in this screen. Table 29 Network > Wireless LAN > AP: WPA(2)-PSK LABEL DESCRIPTION Security Mode Choose WPA-PSK or WPA2-PSK from the drop-down list box.
Chapter 8 Wireless LAN 8.2.4 WPA(2) Authentication Use this screen to configure and enable WPA or WPA2 authentication. Click the Wireless LAN link under Network to display the AP screen. Select WPA, WPA2 or WPAMixed from the Security Mode list. Figure 47 Network > Wireless LAN > AP: WPA(2) The following table describes the wireless LAN security labels in this screen. Table 30 Network > Wireless LAN > AP: WPA(2) LABEL DESCRIPTION Security Mode Choose WPA or WPA2 from the drop-down list box.
Chapter 8 Wireless LAN Table 30 Network > Wireless LAN > AP: WPA(2) LABEL DESCRIPTION WPA Group Key Update Timer The Group Key Update Timer is the rate at which the AP (if using WPA(2)PSK key management) or RADIUS server (if using WPA(2) key management) sends a new group key out to all clients. The re-keying process is the WPA(2) equivalent of automatically changing the WEP key for an AP and all stations in a WLAN on a periodic basis.
Chapter 8 Wireless LAN Table 31 Network > Wireless LAN > AP: Advanced Setup LABEL DESCRIPTION Preamble Select a preamble type from the drop-down list menu. Choices are Long or Short. See the Appendix D on page 269 for more information. 802.11 Mode Select 802.11b Only to allow only IEEE 802.11b compliant WLAN devices to associate with the ZyXEL Device. Select 802.11g Only to allow only IEEE 802.11g compliant WLAN devices to associate with the ZyXEL Device. Select 802.11b+g to allow either IEEE 802.
Chapter 8 Wireless LAN 8.2.6 MAC Filter Use this screen to change your ZyXEL Device’s MAC filter settings. Click the Edit button in the AP screen. The screen appears as shown. Figure 49 Network > Wireless LAN > AP: MAC Address Filter The following table describes the labels in this screen. Table 32 Network > Wireless LAN > AP: MAC Address Filter LABEL DESCRIPTION Active MAC Filter Select the check box to enable MAC address filtering.
Chapter 8 Wireless LAN 8.3 The More AP Screen This screen allows you to enable and configure multiple Basic Service Sets (BSSs) on the ZyXEL Device. Click Network > Wireless LAN > More AP. The following screen displays. Figure 50 Network > Wireless LAN > More AP The following table describes the labels in this screen. Table 33 Network > Wireless LAN > More AP LABEL DESCRIPTION # This is the index number of each SSID profile. Active This field indicates whether this SSID is active.
Chapter 8 Wireless LAN 8.3.1 More AP Edit Use this screen to edit an SSID profile. Click the Edit icon next to an SSID in the More AP screen. The following screen displays. Figure 51 Network > Wireless LAN > More AP: Edit The following table describes the fields in this screen. Table 34 Network > Wireless LAN > More AP: Edit LABEL DESCRIPTION Network Name (SSID) The SSID (Service Set IDentity) identifies the service set with which a wireless device is associated.
Chapter 8 Wireless LAN WPS allows you to quickly set up a wireless network with strong security, without having to configure security settings manually. Set up each WPS connection between two devices. Both devices must support WPS. Click Network > Wireless LAN > WPS. The following screen displays. Figure 52 Network > Wireless LAN > WPS The following table describes the labels in this screen.
Chapter 8 Wireless LAN 8.5 The WPS Station Screen Use this screen to set up a WPS wireless network using either Push Button Configuration (PBC) or PIN Configuration. Click Network > Wireless LAN > WPS Station. The following screen displays. Figure 53 Network > Wireless LAN > WPS Station The following table describes the labels in this screen.
Chapter 8 Wireless LAN Note: WDS security is independent of the security settings between the ZyXEL Device and any wireless clients. Note: At the time of writing, WDS is compatible with other ZyXEL APs only. Not all models support WDS links. Check your other AP’s documentation. Click Network > Wireless LAN > WDS. The following screen displays. Figure 54 Network > Wireless LAN > WDS The following table describes the labels in this screen.
Chapter 8 Wireless LAN 8.7 The Scheduling Screen Use the wireless LAN scheduling to configure the days you want to enable or disable the wireless LAN. Click Network > Wireless LAN > Scheduling. The following screen displays. Figure 55 Network > Wireless LAN > Scheduling The following table describes the labels in this screen. Table 38 Network > Wireless LAN > QoS LABEL DESCRIPTION Enable Wireless LAN Scheduling Select this box to activate wireless LAN scheduling on your ZyXEL Device.
Chapter 8 Wireless LAN 8.8.1 Wireless Network Overview Wireless networks consist of wireless clients, access points and bridges. • A wireless client is a radio connected to a user’s computer. • An access point is a radio with a wired connection to a network, which can connect with numerous wireless clients and let them access the network. • A bridge is a radio that relays communications between access points and wireless clients, extending a network’s range.
Chapter 8 Wireless LAN • If two wireless networks overlap, they should use a different channel. Like radio stations or television channels, each wireless network uses a specific channel, or frequency, to send and receive information. • Every device in the same wireless network must use security compatible with the AP. Security stops unauthorized devices from using the wireless network. It can also protect the information that is sent in the wireless network.
Chapter 8 Wireless LAN These security standards do two things. First, they authenticate. This means that only people presenting the right credentials (often a username and password, or a “key” phrase) can access the network. Second, they encrypt. This means that the information sent over the air is encoded. Only people with the code key can understand the information, and only people who have been authenticated are given the code key. These security standards vary in effectiveness.
Chapter 8 Wireless LAN This type of security does not protect the information that is sent in the wireless network. Furthermore, there are ways for unauthorized wireless devices to get the MAC address of an authorized device. Then, they can use that MAC address to use the wireless network. 8.8.3.3 User Authentication Authentication is the process of verifying whether a wireless device is allowed to use the wireless network. You can make every user log in to the wireless network before using it.
Chapter 8 Wireless LAN support WPA2, you should set up WPA2-PSK or WPA2 (depending on the type of wireless network login) and select the WPA compatible option in the ZyXEL Device. Many types of encryption use a key to protect the information in the wireless network. The longer the key, the stronger the encryption. Every device in the wireless network must have the same key. 8.8.
Chapter 8 Wireless LAN 8.8.6 MBSSID Traditionally, you need to use different APs to configure different Basic Service Sets (BSSs). As well as the cost of buying extra APs, there is also the possibility of channel interference. The ZyXEL Device’s MBSSID (Multiple Basic Service Set IDentifier) function allows you to use one access point to provide several BSSs simultaneously. You can then assign varying QoS priorities and/or security modes to different SSIDs.
Chapter 8 Wireless LAN to authenticate the other) in each of the two devices. When WPS is activated on a device, it has two minutes to find another device that also has WPS activated. Then, the two devices connect and set up a secure network by themselves. 8.8.8.1 Push Button Configuration WPS Push Button Configuration (PBC) is initiated by pressing a button on each WPS-enabled device, and allowing them to connect automatically. You do not need to enter any information.
Chapter 8 Wireless LAN 3 Look for the client’s WPS PIN; it will be displayed either on the device, or in the WPS section of the client’s configuration interface (see the device’s User’s Guide for how to find the WPS PIN - for the ZyXEL Device, see Section 8.4 on page 108). 4 Enter the client’s PIN in the AP’s configuration interface.
Chapter 8 Wireless LAN The following figure shows a WPS-enabled wireless client (installed in a notebook computer) connecting to the WPS-enabled AP via the PIN method. Figure 59 Example WPS Process: PIN Method ENROLLEE REGISTRAR WPS This device’s WPS PIN: 123456 WPS Enter WPS PIN from other device: WPS START WPS START WITHIN 2 MINUTES SECURE EAP TUNNEL SSID WPA(2)-PSK COMMUNICATION 8.8.8.3 How WPS Works When two WPS-enabled devices connect, each device must assume a specific role.
Chapter 8 Wireless LAN The following figure shows a WPS-enabled client (installed in a notebook computer) connecting to a WPS-enabled access point. Figure 60 How WPS works ACTIVATE WPS ACTIVATE WPS WITHIN 2 MINUTES WPS HANDSHAKE ENROLLEE SECURE TUNNEL REGISTRAR SECURITY INFO COMMUNICATION The roles of registrar and enrollee last only as long as the WPS setup process is active (two minutes). The next time you use WPS, a different device can be the registrar if necessary.
Chapter 8 Wireless LAN is the registrar, and Client 1 is the enrollee. The registrar randomly generates the security information to set up the network, since it is unconfigured and has no existing information. Figure 61 WPS: Example Network Step 1 ENROLLEE REGISTRAR SECURITY INFO AP1 CLIENT 1 In step 2, you add another wireless client to the network.
Chapter 8 Wireless LAN In step 3, you add another access point (AP2) to your network. AP2 is out of range of AP1, so you cannot use AP1 for the WPS handshake with the new access point. However, you know that Client 2 supports the registrar function, so you use it to perform the WPS handshake instead. Figure 63 WPS: Example Network Step 3 EXISTING CONNECTION CLIENT 1 IS EX O GC TIN ION CT E NN AP1 REGISTRAR CLIENT 2 SE CU RIT Y ENROLLEE INF O AP2 8.8.8.
Chapter 8 Wireless LAN • When you use the PBC method, there is a short period (from the moment you press the button on one device to the moment you press the button on the other device) when any WPS-enabled device could join the network. This is because the registrar has no way of identifying the “correct” enrollee, and cannot differentiate between your enrollee and a rogue device. This is a possible way for a hacker to gain access to a network. You can easily check to see if this has happened.
Chapter 8 Wireless LAN 126 AMG1202-T10A User’s Guide
C HAPT ER 9 Network Address Translation (NAT) 9.1 Overview This chapter discusses how to configure NAT on the ZyXEL Device. NAT (Network Address Translation - NAT, RFC 1631) is the translation of the IP address of a host in a packet, for example, the source address of an outgoing packet, used within one network to a different IP address known within another network. 9.1.1 What You Can Do in the NAT Screens • Use the NAT General Setup screen (Section 9.2 on page 128) to configure the NAT setup settings.
Chapter 9 Network Address Translation (NAT) Port Forwarding A port forwarding set is a list of inside (behind NAT on the LAN) servers, for example, web or FTP, that you can make visible to the outside world even though NAT makes your whole inside network appear as a single computer to the outside world. SUA (Single User Account) Versus NAT SUA (Single User Account) is a ZyNOS implementation of a subset of NAT that supports two types of mapping, Many-to-One and Server.
Chapter 9 Network Address Translation (NAT) Table 41 Network > NAT > General (continued) LABEL DESCRIPTION Full Feature Select this radio button if you have multiple public WAN IP addresses for your ZyXEL Device. Max NAT/Firewall Session Per User When computers use peer to peer applications, such as file sharing applications, they need to establish NAT sessions.
Chapter 9 Network Address Translation (NAT) Configuring Servers Behind Port Forwarding (Example) Let's say you want to assign ports 21-25 to one FTP, Telnet and SMTP server (A in the example), port 80 to another (B in the example) and assign a default server IP address of 192.168.1.35 to a third (C in the example). You assign the LAN IP addresses and the ISP assigns the WAN IP address. The NAT network appears as a single host on the Internet. Figure 65 Multiple Servers Behind NAT Example A=192.168.1.
Chapter 9 Network Address Translation (NAT) Table 42 Network > NAT > Port Forwarding LABEL DESCRIPTION Service Name Select a service from the drop-down list box. Server IP Address Enter the IP address of the server for the specified service. Add Click this button to add a rule to the table below. # This is the rule index number (read-only). Active This field indicates whether the rule is active or not. Clear the check box to disable the rule. Select the check box to enable it.
Chapter 9 Network Address Translation (NAT) The following table describes the fields in this screen. Table 43 Network > NAT > Port Forwarding: Edit LABEL DESCRIPTION Rule Setup Active Click this check box to enable the rule. Service Name Enter a name to identify this port-forwarding rule. Start Port Enter a port number in this field. To forward only one port, enter the port number again in the End Port field.
Chapter 9 Network Address Translation (NAT) To change your ZyXEL Device’s address mapping settings, click Network > NAT > Address Mapping to open the following screen. Figure 68 Network > NAT > Address Mapping The following table describes the fields in this screen. Table 44 Network > NAT > Address Mapping LABEL DESCRIPTION # This is the rule index number. Local Start IP This is the starting Inside Local IP Address (ILA). Local IP addresses are N/A for Server port mapping.
Chapter 9 Network Address Translation (NAT) 9.4.1 The Address Mapping Rule Edit Screen Use this screen to edit an address mapping rule. Click the rule’s edit icon in the Address Mapping screen to display the screen shown next. Figure 69 Network > NAT > Address Mapping: Edit The following table describes the fields in this screen. Table 45 Network > NAT > Address Mapping: Edit LABEL DESCRIPTION Type Choose the port mapping type from one of the following.
Chapter 9 Network Address Translation (NAT) Table 45 Network > NAT > Address Mapping: Edit (continued) LABEL DESCRIPTION Back Click this to return to the previous screen without saving. Apply Click this to save your changes. Cancel Click this to restore your previously saved settings. 9.5 The ALG Screen Some NAT routers may include a SIP Application Layer Gateway (ALG). A SIP ALG allows SIP calls to pass through NAT by examining and translating IP addresses embedded in the data stream.
Chapter 9 Network Address Translation (NAT) Global/local denotes the IP address of a host in a packet as the packet traverses a router, for example, the local address refers to the IP address of a host when the packet is in the local network, while the global address refers to the IP address of the host when the same packet is traveling in the WAN side. Note that inside/outside refers to the location of a host, while global/local refers to the IP address of a host used in a packet.
Chapter 9 Network Address Translation (NAT) ZyXEL Device keeps track of the original addresses and port numbers so incoming reply packets can have their original values restored. The following figure illustrates this. Figure 71 How NAT Works NAT Table LAN Inside Local IP Address 192.168.1.10 192.168.1.11 192.168.1.12 192.168.1.13 192.168.1.13 192.168.1.12 SA SA 192.168.1.10 IGA1 Inside Local Address (ILA) 192.168.1.
Chapter 9 Network Address Translation (NAT) • One to One: In One-to-One mode, the ZyXEL Device maps one local IP address to one global IP address. • Many to One: In Many-to-One mode, the ZyXEL Device maps multiple local IP addresses to one global IP address. This is equivalent to SUA (for instance, PAT, port address translation), ZyXEL’s Single User Account feature that previous ZyXEL routers supported (the SUA Only option in today’s routers).
C HAPTER 10 Firewall 10.1 Overview This chapter shows you how to enable the ZyXEL Device firewall. Use the firewall to protect your ZyXEL Device and network from attacks by hackers on the Internet and control access to it. By default the firewall: • allows traffic that originates from your LAN computers to go to all other networks. • blocks traffic that originates on other networks from going to the LAN. • blocks SYN and port scanner attacks.
Chapter 10 Firewall LAND Attack In a LAND attack, hackers flood SYN packets into the network with a spoofed source IP address of the target system. This makes it appear as if the host computer sent the packets to itself, making the system unavailable while the target system tries to respond to itself. Ping of Death Ping of Death uses a "ping" utility to create and send an IP packet that exceeds the maximum 65,536 bytes of data allowed by the IP specification.
Chapter 10 Firewall 10.2 The Firewall Screen Use this screen to enable firewall and/or SPI. Click Advanced Setup > Firewall to display the following screen. Figure 73 Advanced Setup > Firewall The following table describes the labels in this screen. Table 49 Advanced > Firewall LABEL DESCRIPTION Firewall Use this field to enable or disable firewall on your ZyXEL Device. Apply Click this to save your changes. Cancel Click this to restore your previously saved settings.
Chapter 10 Firewall 142 AMG1202-T10A User’s Guide
C HAPTER 11 Filters 11.1 Overview This chapter introduces three types of filters supported by the ZyXEL Device. You can configure rules to restrict traffic by IP addresses, MAC addresses, application types and/or URLs. 11.1.1 What You Can Do in the Filter Screens • Use the URL Filter screen (Section 11.2 on page 144) to block access to web sites. • Use the Application Filter screen (Section 11.3 on page 145) to allow or deny traffic from certain types of applications.
Chapter 11 Filters 11.2 The URL Filter Screen Use this screen to block websites by URL. Click Security > Filter > URL Filter. The screen appears as shown. Figure 74 Security > Filter > URL Filter The following table describes the labels in this screen. Table 50 Access Management > Filter (URL) LABEL DESCRIPTION URL Filter Editing Active Use this field to enable or disable the URL filter. URL Index Select the index number of the filter. URL Enter the URL for the ZyXEL Device to block.
Chapter 11 Filters 11.3 The Application Filter Screen Use this screen to allow or deny traffic for certain types of applications. The application filter provides a convenient way to manage the use of various applications on the network. Click Security > Filter > Application Filter. The screen appears as shown. Figure 75 Security > Filter > Application Filter The following table describes the labels in this screen.
Chapter 11 Filters 11.4 The IP/MAC Filter Screen Use this screen to create and apply IP/MAC filters. Click Security > Filter > IP/MAC Filter. The screen appears as shown. Figure 76 Security > Filter > IP/MAC Filter The following table describes the labels in this screen. Table 52 Access Management > Filter (IP/MAC) LABEL DESCRIPTION IP Filter Select IP Filter Select Select IP White Filter to configure traffic to allow. Select IP Black Filter to configure traffic to block.
Chapter 11 Filters Table 52 Access Management > Filter (IP/MAC) (continued) LABEL DESCRIPTION IP/MAC Filter Rule Editing IP/MAC Filter Rule Index Select the index number of the filter rule. Rule Type Select IP to allow or block traffic by IP addresses. Active Use this field to enable or disable the rule. Source Start IP Address Enter the source start IP address of the IP address range for the packets you wish to filter. This field is ignored if it is 0.0.0.0.
Chapter 11 Filters 148 AMG1202-T10A User’s Guide
C HAPTER 12 Static Route 12.1 Overview The ZyXEL Device usually uses the default gateway to route outbound traffic from computers on the LAN to the Internet. To have the ZyXEL Device send data to devices not reachable through the default gateway, use static routes. For example, the next figure shows a computer (A) connected to the ZyXEL Device’s LAN interface. The ZyXEL Device routes most traffic from A to the Internet through the ZyXEL Device’s default gateway (R1).
Chapter 12 Static Route 12.1.1 What You Can Do in the Static Route Screens Use the Static Route screens (Section 12.2 on page 150) to view and configure IP static routes on the ZyXEL Device. 12.2 The Static Route Screen Use this screen to view the static route rules. Click Advanced > Static Route to open the Static Route screen. Figure 78 Advanced > Static Route The following table describes the labels in this screen.
Chapter 12 Static Route Table 53 Advanced > Static Route LABEL DESCRIPTION Apply Click this to save your changes. Cancel Click this to restore your previously saved settings. 12.2.1 Static Route Edit Use this screen to configure the required information for a static route. Select a static route index number and click Edit. The screen shown next appears. Figure 79 Advanced > Static Route: Edit The following table describes the labels in this screen.
Chapter 12 Static Route 152 AMG1202-T10A User’s Guide
C HAPTER 13 802.1Q/1P 13.1 Overview This chapter describes how to configure the 802.1Q/1P settings. A Virtual Local Area Network (VLAN) allows a physical network to be partitioned into multiple logical networks. A VLAN group can be treated as an individual device. Each group can have its own rules about where and how to forward traffic. You can assign any ports on the ZyXEL Device to a VLAN group and configure the settings for the group.
Chapter 13 802.1Q/1P PVC A virtual circuit is a logical point-to-point circuit between customer sites. Permanent means that the circuit is preprogrammed by the carrier as a path through the network. It does not need to be set up or torn down for each session. Forwarding Tagged and Untagged Frames Each port on the device is capable of passing tagged or untagged frames. To forward a frame from an 802.1Q VLAN-aware device to an 802.
Chapter 13 802.1Q/1P Note: If the WAN interface in the VLAN group is not the default router, you need to create a static route to communicate with the WAN. Figure 81 Advanced > 802.1Q/1P > Group Setting The following table describes the labels in this screen. Table 55 Advanced > 802.1Q/1P > Group Setting LABEL DESCRIPTION 802.1Q/1P Active Select this check box to activate the 802.1P/1Q feature. Summary # This field displays the index number of the VLAN group. Active This field displays whether 802.
Chapter 13 802.1Q/1P 13.2.1 Editing 802.1Q/1P Group Setting Use this screen to configure the settings for each VLAN group. In the 802.1Q/1P screen, click the Edit button from the Modify filed to display the following screen. Figure 82 Advanced > 802.1Q/1P > Group Setting > Edit The following table describes the labels in this screen. Table 56 Advanced > 802.1Q/1P > Group Setting > Edit LABEL DESCRIPTION Active Select this check box to activate the group setting.
Chapter 13 802.1Q/1P Table 56 Advanced > 802.1Q/1P > Group Setting > Edit (continued) LABEL DESCRIPTION Apply Click this to save your changes. Cancel Click this to restore your previously saved settings. 13.3 The 802.1Q/1P Port Setting Screen Use this screen to configure the PVID for each port. Click Advanced > 802.1Q/1P > Port Setting to display the following screen. Figure 83 Advanced > 802.1Q/1P > Port Setting The following table describes the labels in this screen. Table 57 Advanced > 802.
Chapter 13 802.
C HAPTER 14 Quality of Service (QoS) 14.1 Overview Use the QoS screen to set up your ZyXEL Device to use QoS for traffic management. Quality of Service (QoS) refers to both a network’s ability to deliver data with minimum delay, and the networking methods used to control bandwidth. QoS allows the ZyXEL Device to group and prioritize application traffic and fine-tune network performance. Without QoS, all traffic data are equally likely to be dropped when the network is congested.
Chapter 14 Quality of Service (QoS) • Use the QoS Settings Summary screen (Section 14.2.1 on page 163) to check the summary of QoS rules and actions you configured for the ZyXEL Device. 14.1.2 What You Need to Know About QoS 802.1p QoS is used to prioritize source-to-destination traffic flows. All packets in the same flow are given the same priority. 802.1p is a way of managing traffic in a network by grouping similar types of traffic together and treating each type as a class. You can use 802.
Chapter 14 Quality of Service (QoS) Click Advanced Setup > QoS to open the screen as shown next. Figure 85 Advanced Setup > QoS The following table describes the labels in this screen. Table 58 Advanced Setup > QoS LABEL DESCRIPTION Quality of Service QoS Use this field to turn on QoS to improve your network performance. You can give priority to traffic that the ZyXEL Device forwards out through the WAN interface. Give high priority to voice and video to make them run more smoothly.
Chapter 14 Quality of Service (QoS) Table 58 Advanced Setup > QoS LABEL DESCRIPTION Active Use this field to enable or disable the rule. Application Select an application from the drop-down list box. The Destination Port Range and Protocol ID fields may change depending on the type of applications you choose. Physical Ports Select Enet1 to apply the rule to the Ethernet port. Destination MAC Type a destination MAC address here.
Chapter 14 Quality of Service (QoS) Table 58 Advanced Setup > QoS LABEL DESCRIPTION Queue # Specify a Low, Medium, High or Highest queue tag to matched traffic. Traffic assigned to a higher queue gets through faster while traffic in lower queues is dropped when there is network congestion. ADD Click this to add the rule. DELETE Click this to remove the rule. CANCEL Click this to restore previously saved settings. 14.2.
Chapter 14 Quality of Service (QoS) Table 59 Advanced Setup > QoS > QoS Settings Summary (continued) LABEL DESCRIPTION 802.1p Remarking The ZyXEL Device re-assigns the priority levels specified in this field to matched traffic. Queue # The ZyXEL Device assigns the queue level specified in this field to matched traffic. 14.3 QoS Technical Reference This section provides some technical background information about the topics covered in this chapter. 14.3.1 IEEE 802.1p IEEE 802.
Chapter 14 Quality of Service (QoS) The following table shows you the internal layer-2 and layer-3 QoS mapping on the ZyXEL Device. On the ZyXEL Device, traffic assigned to higher priority queues gets through faster while traffic in lower index queues is dropped if the network is congested. Table 61 Internal Layer2 and Layer3 QoS Mapping LAYER 2 LAYER 3 PRIORITY QUEUE IEEE 802.
Chapter 14 Quality of Service (QoS) 166 AMG1202-T10A User’s Guide
C HAPTER 15 Dynamic DNS Setup 15.1 Overview Dynamic DNS allows you to update your current dynamic IP address with one or many dynamic DNS services so that anyone can contact you (in NetMeeting, CU-SeeMe, etc.). You can also access your FTP server or Web site on your own computer using a domain name (for instance myhost.dhs.org, where myhost is a name of your choice) that will never change instead of using an IP address that changes each time you reconnect.
Chapter 15 Dynamic DNS Setup 15.2 The Dynamic DNS Screen Use this screen to change your ZyXEL Device’s DDNS. Click Advanced > Dynamic DNS. The screen appears as shown. Figure 87 Advanced > Dynamic DNS The following table describes the fields in this screen. Table 62 Advanced > Dynamic DNS LABEL DESCRIPTION Dynamic DNS Setup Active Dynamic DNS Select this check box to use dynamic DNS. Service Provider This is the name of your Dynamic DNS service provider.
C HAPTER 16 Remote Management 16.1 Overview Remote management allows you to determine which services/protocols can access which ZyXEL Device interface (if any) from which computers. The following figure shows remote management of the ZyXEL Device coming in from the WAN. Figure 88 Remote Management From the WAN LAN WAN HTTP Telnet Note: When you configure remote management to allow management from the WAN, you still need to configure a firewall rule to allow access.
Chapter 16 Remote Management 16.1.1 What You Can Do in the Remote Management Screens • Use the WWW screen (Section 16.2 on page 171) to configure through which interface(s) and from which IP address(es) users can use HTTP to manage the ZyXEL Device. • Use the Telnet screen (Section 16.3 on page 171) to configure through which interface(s) and from which IP address(es) users can use Telnet to manage the ZyXEL Device. • Use the FTP screen (Section 16.
Chapter 16 Remote Management 16.2 The WWW Screen Use this screen to specify how to connect to the ZyXEL Device from a web browser, such as Internet Explorer. Note: If you disable the WWW service in the Remote MGMT > WWW screen, then the ZyXEL Device blocks all HTTP connection attempts. 16.2.1 Configuring the WWW Screen Click Advanced > Remote MGMT to display the WWW screen. Figure 89 Advanced > Remote MGMT > WWW The following table describes the labels in this screen.
Chapter 16 Remote Management Click Advanced > Remote MGMT > Telnet tab to display the screen as shown. Figure 90 Advanced > Remote MGMT > Telnet The following table describes the labels in this screen. Table 64 Advanced > Remote Management > Telnet LABEL DESCRIPTION Server Port You may change the server port number for a service if needed, however you must use the same port number in order to use that service for remote management.
Chapter 16 Remote Management Use this screen to specify which interfaces allow FTP access and from which IP address the access can come. To change your ZyXEL Device’s FTP settings, click Advanced > Remote MGMT > FTP. The screen appears as shown. Figure 91 Advanced > Remote MGMT > FTP The following table describes the labels in this screen. Table 65 Advanced > Remote MGMT > FTP LABEL DESCRIPTION Server Port You may change the server port number for a service, if needed.
Chapter 16 Remote Management supports SNMP version one (SNMPv1) and version two (SNMPv2c). The next figure illustrates an SNMP management operation. Figure 92 SNMP Management Model An SNMP managed network consists of two main types of component: agents and a manager. An agent is a management software module that resides in a managed device (the ZyXEL Device). An agent translates the local management information from the managed device into a form compatible with SNMP.
Chapter 16 Remote Management 16.5.1 Configuring SNMP To change your ZyXEL Device’s SNMP settings, click Advanced > Remote MGMT > SNMP tab. The screen appears as shown. Figure 93 Advanced > Remote MGMT > SNMP The following table describes the labels in this screen. Table 66 Advanced > Remote MGMT > SNMP LABEL DESCRIPTION SNMP Server Port The SNMP agent listens on port 161 by default.
Chapter 16 Remote Management Table 66 Advanced > Remote MGMT > SNMP (continued) LABEL DESCRIPTION Apply Click Apply to save your changes back to the ZyXEL Device. Cancel Click Cancel to begin configuring this screen afresh. 16.6 The DNS Screen Use DNS (Domain Name System) to map a domain name to its corresponding IP address and vice versa. Refer to Chapter 7 on page 85 for background information.
Chapter 16 Remote Management 16.7 The ICMP Screen To change your ZyXEL Device’s security settings, click Advanced > Remote MGMT > ICMP. The screen appears as shown. If an outside user attempts to probe an unsupported port on your ZyXEL Device, an ICMP response packet is automatically returned. This allows the outside user to know the ZyXEL Device exists. Your ZyXEL Device supports anti-probing, which prevents the ICMP response packet from being sent.
C HAPTER 17 Universal Plug-and-Play (UPnP) 17.1 Overview Universal Plug and Play (UPnP) is a distributed, open networking standard that uses TCP/IP for simple peer-to-peer network connectivity between devices. A UPnP device can dynamically join a network, obtain an IP address, convey its capabilities and learn about other devices on the network. In turn, a device can leave a network smoothly and automatically when it is no longer in use. 17.1.
Chapter 17 Universal Plug-and-Play (UPnP) When a UPnP device joins a network, it announces its presence with a multicast message. For security reasons, the ZyXEL Device allows multicast messages on the LAN only. All UPnP-enabled devices may communicate freely with each other without additional configuration. Disable UPnP if this is not your intention. UPnP and ZyXEL ZyXEL has achieved UPnP certification from the Universal Plug and Play Forum UPnP™ Implementers Corp. (UIC).
Chapter 17 Universal Plug-and-Play (UPnP) Table 69 Advanced > UPnP > General LABEL DESCRIPTION Apply Click this to save your changes. Cancel Click this to restore your previously saved settings. 17.3 Installing UPnP in Windows Example This section shows how to install UPnP in Windows Me and Windows XP. Installing UPnP in Windows Me Follow the steps below to install the UPnP in Windows Me. 1 Click Start and Control Panel. Double-click Add/Remove Programs.
Chapter 17 Universal Plug-and-Play (UPnP) 3 In the Communications window, select the Universal Plug and Play check box in the Components selection box. Add/Remove Programs: Windows Setup: Communication: Components 4 Click OK to go back to the Add/Remove Programs Properties window and click Next. 5 Restart the computer when prompted. Installing UPnP in Windows XP Follow the steps below to install the UPnP in Windows XP. 1 Click Start and Control Panel. 2 Double-click Network Connections.
Chapter 17 Universal Plug-and-Play (UPnP) 3 In the Network Connections window, click Advanced in the main menu and select Optional Networking Components …. Network Connections 4 The Windows Optional Networking Components Wizard window displays. Select Networking Service in the Components selection box and click Details.
Chapter 17 Universal Plug-and-Play (UPnP) 5 In the Networking Services window, select the Universal Plug and Play check box. Networking Services 6 Click OK to go back to the Windows Optional Networking Component Wizard window and click Next. 17.4 Using UPnP in Windows XP Example This section shows you how to use the UPnP feature in Windows XP. You must already have UPnP installed in Windows XP and UPnP activated on the ZyXEL Device. Make sure the computer is connected to a LAN port of the ZyXEL Device.
Chapter 17 Universal Plug-and-Play (UPnP) 2 Right-click the icon and select Properties. Network Connections 3 In the Internet Connection Properties window, click Settings to see the port mappings there were automatically created.
Chapter 17 Universal Plug-and-Play (UPnP) 4 You may edit or delete the port mappings or click Add to manually add port mappings. Internet Connection Properties: Advanced Settings Internet Connection Properties: Advanced Settings: Add 5 When the UPnP-enabled device is disconnected from your computer, all port mappings will be deleted automatically.
Chapter 17 Universal Plug-and-Play (UPnP) 6 Select Show icon in notification area when connected option and click OK. An icon displays in the system tray. System Tray Icon 7 Double-click on the icon to display your current Internet connection status. Internet Connection Status Web Configurator Easy Access With UPnP, you can access the web-based configurator on the ZyXEL Device without finding out the IP address of the ZyXEL Device first.
Chapter 17 Universal Plug-and-Play (UPnP) 3 Select My Network Places under Other Places. Network Connections 4 An icon with the description for each UPnP-enabled device displays under Local Network.
Chapter 17 Universal Plug-and-Play (UPnP) 5 Right-click on the icon for your ZyXEL Device and select Invoke. The web configurator login screen displays. Network Connections: My Network Places 6 Right-click on the icon for your ZyXEL Device and select Properties. A properties window displays with basic information about the ZyXEL Device.
C HAPTER 18 System Settings 18.1 Overview This chapter shows you how to configure system related settings, such as system time, password, name, the domain name and the inactivity timeout interval. 18.1.1 What You Can Do in the System Settings Screens • Use the General screen (Section 18.2 on page 189) to configure system settings. • Use the Time and Date screen (Section 18.3 on page 190) to set the system time. 18.2 The General Screen Use this screen to configure system admin password.
Chapter 18 System Settings Table 70 Maintenance > System > General LABEL Retype to confirm DESCRIPTION Type the new password again for confirmation. Apply Click this to save your changes. Cancel Click this to restore your previously saved settings. 18.3 The Time and Date Screen Use this screen to configure the ZyXEL Device’s time based on your local time zone. To change your ZyXEL Device’s time and date, click Maintenance > System > Time and Date. The screen appears as shown.
