User manual ZYXEL P-660HW

[. . . ] P-660HW-D Series 802. 11g Wireless ADSL 2+ 4-port Gateway User's Guide Version 3. 40 Edition 1 3/2006 P-660HW-D Series User's Guide Copyright Copyright © 2006 by ZyXEL Communications Corporation. The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of ZyXEL Communications Corporation. All rights reserved. Disclaimer ZyXEL does not assume any liability arising out of the application or use of any products, or software described herein. Neither does it convey any license under its patent rights nor the patent rights of others. [. . . ] · Choose SUA Only if you have just one public WAN IP address for your ZyXEL device. · Choose Full Feature if you have multiple public WAN IP addresses for your ZyXEL device. 8. 3 NAT General Setup You must create a firewall rule in addition to setting up SUA/NAT, to allow traffic from the WAN to be forwarded through the ZyXEL device. Click Network > NAT to open the following screen. 133 Chapter 8 Network Address Translation (NAT) Screens P-660HW-D Series User's Guide Figure 74 NAT General The following table describes the labels in this screen. Table 46 NAT General LABEL Active Network Address Translation (NAT) SUA Only Full Feature Apply Cancel DESCRIPTION Select this check box to enable NAT. Select this radio button if you have just one public WAN IP address for your ZyXEL device. Select this radio button if you have multiple public WAN IP addresses for your ZyXEL device. Click Cancel to reload the previous configuration for this screen. 8. 4 Port Forwarding A port forwarding set is a list of inside (behind NAT on the LAN) servers, for example, web or FTP, that you can make visible to the outside world even though NAT makes your whole inside network appear as a single computer to the outside world. You may enter a single port number or a range of port numbers to be forwarded, and the local IP address of the desired server. The port number identifies a service; for example, web service is on port 80 and FTP on port 21. In some cases, such as for unknown services or where one server can support more than one service (for example both FTP and web service), it might be better to specify a range of port numbers. You can allocate a server IP address that corresponds to a port or a range of ports. Many residential broadband ISP accounts do not allow you to run any server processes (such as a Web or FTP server) from your location. Your ISP may periodically check for servers and may suspend your account if it discovers any active services at your location. If you are unsure, refer to your ISP. Chapter 8 Network Address Translation (NAT) Screens 134 P-660HW-D Series User's Guide 8. 4. 1 Default Server IP Address In addition to the servers for specified services, NAT supports a default server IP address. A default server receives packets from ports that are not specified in this screen. Note: If you do not assign a Default Server IP address, the ZyXEL device discards all packets received for ports that are not specified here or in the remote management setup. 8. 4. 2 Port Forwarding: Services and Port Numbers Use the Port Forwarding screen to forward incoming service requests to the server(s) on your local network. Please also refer to the Supporting CD for more examples and details on port forwarding and NAT. Table 47 Services and Port Numbers SERVICES ECHO FTP (File Transfer Protocol) SMTP (Simple Mail Transfer Protocol) DNS (Domain Name System) Finger HTTP (Hyper Text Transfer protocol or WWW, Web) POP3 (Post Office Protocol) NNTP (Network News Transport Protocol) SNMP (Simple Network Management Protocol) SNMP trap PPTP (Point-to-Point Tunneling Protocol) PORT NUMBER 7 21 25 53 79 80 110 119 161 162 1723 8. 4. 3 Configuring Servers Behind Port Forwarding (Example) Let's say you want to assign ports 21-25 to one FTP, Telnet and SMTP server (A in the example), port 80 to another (B in the example) and assign a default server IP address of 192. 168. 1. 35 to a third (C in the example). You assign the LAN IP addresses and the ISP assigns the WAN IP address. The NAT network appears as a single host on the Internet. 135 Chapter 8 Network Address Translation (NAT) Screens P-660HW-D Series User's Guide Figure 75 Multiple Servers Behind NAT Example 8. 5 Configuring Port Forwarding Note: The Port Forwarding screen is available only when you select SUA Only in the NAT > General screen. If you do not assign a Default Server IP address, the ZyXEL device discards all packets received for ports that are not specified here or in the remote management setup. Click Network > NAT > Port Forwarding to open the following screen. See Table 47 on page 135 for port numbers commonly used for particular services. Figure 76 NAT Port Forwarding Chapter 8 Network Address Translation (NAT) Screens 136 P-660HW-D Series User's Guide The following table describes the fields in this screen. Table 48 NAT Port Forwarding LABEL Default Server Setup Default Server In addition to the servers for specified services, NAT supports a default server. A default server receives packets from ports that are not specified in this screen. If you do not assign a Default Server IP address, the ZyXEL device discards all packets received for ports that are not specified here or in the remote management setup. [. . . ] 3 The AP and wireless clients use the pre-shared key to generate a common PMK (Pairwise Master Key). 4 The AP and wireless clients use the TKIP or AES encryption process to encrypt data exchanged between them. 321 Appendix L Wireless LANs P-660HW-D Series User's Guide Figure 185 WPA(2)-PSK Authentication Security Parameters Summary Refer to this table to see what other security parameters you should configure for each Authentication Method/ key management protocol type. MAC address filters are not dependent on how you configure these security features. Table 141 Wireless Security Relational Matrix AUTHENTICATION ENCRYPTION ENTER METHOD/ KEY METHOD MANUAL KEY MANAGEMENT PROTOCOL Open Open None WEP No No Yes Yes Shared WEP No Yes Yes WPA WPA-PSK WPA2 WPA2-PSK TKIP/AES TKIP/AES TKIP/AES TKIP/AES No Yes No Yes IEEE 802. 1X Disable Enable without Dynamic WEP Key Enable with Dynamic WEP Key Enable without Dynamic WEP Key Disable Enable with Dynamic WEP Key Enable without Dynamic WEP Key Disable Enable Disable Enable Disable Appendix L Wireless LANs 322 P-660HW-D Series User's Guide 323 Appendix L Wireless LANs P-660HW-D Series User's Guide APPENDIX M Pop-up Windows, JavaScripts and Java Permissions In order to use the web configurator you need to allow: · Web browser pop-up windows from your device. Screens for other Internet Explorer versions may vary. Internet Explorer Pop-up Blockers You may have to disable pop-up blocking to log into your device. [. . . ]