Resumen del contenido incluido en la página 1
P-661H-D Series
ADSL2+ 4-port Security Gateway
Support Notes
Version3.40
Mar. 2006
Resumen del contenido incluido en la página 2
P-661H-D Series Support Notes FAQ .................................................................................................................5 ZyNOS FAQ .................................................................................................5 1. What is ZyNOS? ...................................................................................5 2. What’s Multilingual Embedded Web Configurator?...............................5 3. How do I
Resumen del contenido incluido en la página 3
P-661H-D Series Support Notes 17. What do the ATM QoS Types (CBR, UBR, VBR-nRT, VBR-RT) mean? ................................................................................................................15 18. What is content filter? .......................................................................15 ADSL FAQ .................................................................................................17 1. How does ADSL compare to Cable m
Resumen del contenido incluido en la página 4
P-661H-D Series Support Notes General FAQ...........................................................................................28 1. What is VPN? .......................................................................28 2. Why do I need VPN?............................................................28 3. What are most common VPN protocols?..............................28 4. What is PPTP? .........................................................
Resumen del contenido incluido en la página 5
P-661H-D Series Support Notes 3. Setup the P-661H-D as a DHCP Relay ................................41 4. SUA Notes............................................................................42 5. Using Full Feature NAT ........................................................51 6. Using the Dynamic DNS (DDNS) .........................................63 7. Network Management Using SNMP.....................................65 8. Using syslog ..........
Resumen del contenido incluido en la página 6
P-661H-D Series Support Notes FAQ ZyNOS FAQ 1. What is ZyNOS? ZyNOS is ZyXEL's proprietary Network Operating System. It is the platform on all Prestige routers that delivers network services and applications. It is designed in a modular fashion so it is easy for developers to add new features. New ZyNOS software upgrades can be easily downloaded from our FTP sites as they become available. 2. What’s Multilingual Embedded Web Configurator? Multi
Resumen del contenido incluido en la página 7
P-661H-D Series Support Notes b. Enter CI command 'sys stdio 0' to disable Stdio idle timeout c. To upgrade firmware, use TFTP client program to put firmware in file 'ras' in the Prestige. After data transfer is finished, the P-661H-D will program the upgraded firmware into FLASH ROM and reboot itself. d. To backup your firmware, use the TFTP client program to get file 'ras' from the Prestige. 6. How do I restore P-661H-D configurations by using T
Resumen del contenido incluido en la página 8
P-661H-D Series Support Notes with its own address and the source port in the TCP or UDP header with another value chosen out of a local pool. It then recomputes the appropriate header checksums and forwards the packet to the Internet as if it is originated from Prestige using the IP address assigned by ISP. When reply packets from the external Internet are received by Prestige, the original IP source address and TCP/UDP source port numbers are writ
Resumen del contenido incluido en la página 9
P-661H-D Series Support Notes must be configured. (You can configure it in Web Configurator, Advanced Setup, Network -> NAT -> Port Forwarding). 12. When do I need select Full Feature NAT? • Make multiple local servers on the LAN accessible from outside with multiple global IP addresses With SUA, 'visible' servers had to be mapped to different ports, since the servers share only one global IP. But when you select Full Feature, you can make multi
Resumen del contenido incluido en la página 10
P-661H-D Series Support Notes The following table summarizes the five types. NAT Type IP Mapping One-to-One ILA1<--->IGA1 ILA1<--->IGA1 Many-to-One ILA2<--->IGA1 (SUA/PAT) ... ILA1<--->IGA1 ILA2<--->IGA2 Many-to-Many ILA3<--->IGA1 Overload ILA4<--->IGA2 ... ILA1<--->IGA1 ILA2<--->IGA2 Many ILA3<--->IGA3 One-to-One ILA4<--->IGA4 ... Server 1 IP<--->IGA1 Server Server 2 IP<--->IGA1 14. How many network users ca
Resumen del contenido incluido en la página 11
P-661H-D Series Support Notes • Allow everything that is not spoofing us Filter rule setup: • Filter type =TCP/IP Filter Rule • Active =Yes • Source IP Addr =a.b.c.d • Source IP Mask =w.x.y.z • Action Matched =Drop • Action Not Matched =Forward Where a.b.c.d is an IP address on your local network and w.x.y.z is your netmask: For the output data filters: • Deny bounce back packet • Allow packets that originate from us Filter rule setu
Resumen del contenido incluido en la página 12
P-661H-D Series Support Notes Product FAQ 1. How can I manage P-661H-D? Multilingual Embedded Web GUI for Local and Remote management CLI (Command-line interface) Telnet support (Administrator Password Protected ) for remote configuration change and status monitoring FTP/ TFTP sever, firmware upgrade and configuration backup and restore are supported(Administrator Password Protected) 2. What is the default password for Web Configurator?
Resumen del contenido incluido en la página 13
P-661H-D Series Support Notes do not interfere with your voice transmissions. For the details about how to connect the micro filter please refer to the user's manual. 6. The P-661H-D supports Bridge and Router mode, what's the difference between them? When the ISP limits some specific computers to access Internet, that means only the traffic to/from these computers will be forwarded and the other will be filtered. In this case, we use bridge mode w
Resumen del contenido incluido en la página 14
P-661H-D Series Support Notes The outside users can always access the web server using the www.zyxel.com.tw regardless of the WAN IP of the P-661H-D. When the ISP assigns the P-661H-D a new IP, the P-661H-D updates this IP to DDNS server so that the server can update its IP-to-DNS entry. Once the IP-to-DNS table in the DDNS server is updated, the DNS name for your web server (i.e., www.zyxel.com.tw) is still usable. 10. When do I need DDNS servic
Resumen del contenido incluido en la página 15
P-661H-D Series Support Notes For forwarding the inbound IPSec ESP tunnel, A 'Default' server set is required. You could configure it in Web Configurator, Advanced Setup, Network -> NAT -> Port Forwarding -> Default Server Setup: It is because SUA makes your LAN appear as a single machine to the outside world. LAN users are invisible to outside users. So, to make an internal server for outside access, we must specify the service port and the
Resumen del contenido incluido en la página 16
P-661H-D Series Support Notes 16. What do the parameters (PCR, SCR, MBS) mean? Traffic shaping parameters (PCR, SCR, MBS) can be set in Web Configurator, Advanced Setup, Network -> Remote Node -> Edit -> ATM Setup: Peak Cell Rate(PCR): The maximum bandwidth allocated to this connection. The VC connection throughput is limited by PCR. Sustainable Cell Rate(SCR): The least guaranteed bandwidth of a VC. When there are multi-VCs on the same line, the
Resumen del contenido incluido en la página 17
P-661H-D Series Support Notes when the P-661H-D performs content filtering. You can also specify trusted IP Addresses on LAN for which the P-661H-D will not perform content filtering. You can configure the details about it in Web Configurator, Advanced setup, Security -> Content Filter. 16 All contents copyright © 2006 ZyXEL Communications Corporation.
Resumen del contenido incluido en la página 18
P-661H-D Series Support Notes ADSL FAQ 1. How does ADSL compare to Cable modems? ADSL provides a dedicated service over a single telephone line; cable modems offer a dedicated service over a shared media. While cable modems have greater downstream bandwidth capabilities (up to 30 Mbps), that bandwidth is shared among all users on a line, and will therefore vary, perhaps dramatically, as more users in a neighborhood get online at the same time. Cab
Resumen del contenido incluido en la página 19
P-661H-D Series Support Notes 6. Does the VC-based multiplexing perform better than the LLC-based multiplexing? Though the LLC-based multiplexing can carry multiple protocols over a single VC, it requires extra header information to identify the protocol being carried on the virtual circuit (VC). The VC-based multiplexing needs a separate VC for carrying each protocol but it does not need the extra headers. Therefore, the VC-based multiplexing is m
Resumen del contenido incluido en la página 20
P-661H-D Series Support Notes More and more Telco/ISPs are providing three kinds of services (VoIP, Video and Internet) over one existing ADSL connection. • The different services (such as video, VoIP and Internet access) require different Qulity of Service. • The high priority is Voice (VoIP) data. • The Medium priority is Video (IPTV) data. • The low priority is internet access such as ftp etc … Triple Play is a port-based policy to f
