Instruction/ maintenance manual of the product 320W ZyXEL Communications
Go to page of 75
Prestige 320W 802.1 1g Wireless Firewall Router Support Notes V ersion v1.0 September 2005.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommuni cations Corporat ion. 2 APPLICA TION NOTES ............................................................................................................................ 5 G ENERAL A PPLICA TION N OTES .
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommuni cations Corporat ion. 3 My Prestige can not get an IP address from th e ISP to connect to the Internet, what can I do? ......... 55 What is BOOTP/DHCP ...............................
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommuni cations Corporat ion. 4 Can radio signals pass through walls? ................................................................................................ 65 What are potential factors that ma y causes interference among W LAN products? .
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 5 Application Notes General Application Notes Internet Connection A typical Internet access application of the Prestige is sho wn below. For a small office, there are some components needs to be checked before accessing the Internet.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommuni cations Corporat ion. 6 • If you only have one PC, connect the PC's Ethern et adapter to the Prestige's LAN port with a Ethernet cable.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 7 The following procedure is for the most typical us age of the Prestige where you have a single-user account (SUA). The Prestige supports embedded web server that allows you to use W eb browser to configure it.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 8 Select “ Get automatically from ISP ” if the ISP provides the IP dynamically, otherwise select “ Use Fixed IP address ” and enter the static IP given by ISP in the box following “MY WAN IP Address ” field.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 9 Configure an Internal Server Behind SUA • Introduction If you wish, you can make internal servers (e.g., Web, ftp or mail server) accessible for outside users, even though SUA makes your LAN appear as a singl e machine to the outside world.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 10 • Port numbers for some common services Service Port Number FTP 21 T elnet 23 SMTP 25 DNS (Domain Name S.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommuni cations Corporat ion. 11 Using the Dynamic DNS (DDNS) 1. What is DDNS? The DDNS service, an IP Registry provides a public central database where information such as em ail addresses, hostnames, IPs etc.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 12 Key Settings for using DDNS function: Option Description Service Pro vider Enter the DDNS server in this field. Currently , we support WWW .DYNDNS.ORG . Active T oggle to 'Y es' .
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommuni cations Corporat ion. 13 SNMP is a member of the TCP/IP protocol suite, it uses the UDP to exchange m essages between a management Client and an Agen t, residing in a network node. There are two versions of SNMP : Version 1 and Version 2.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 14 7. W rites Write is used to control the managed devices, NMSs write variables that are s tored in the managed devices.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 15 • Get Allows the NMS to retrieve an object variable from the agent. • GetNext Allows the NMS to retrieve the next object variab le from a table or list within an agent.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommuni cations Corporat ion. 16 • V ariable-bindings Associates particular object with their value. 3. ZyXEL SNMP Implementation ZyXEL currently includes SNMP support in some Pr estige routers.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 17 In some cases (download new files, CI command "sys reboot", ...), reboot is done intentionally. And traps with the message "System reboot by user!" will be sent.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 18 Set Community Enter the co rrect Set Community . This Set Community mu st match the 'Set-community requested from the NMS.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 19 Using Universal Plug n Play (UPnP) • 1. What is UPnP UPnP (Universal Plug and Play) makes connecting PCs.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 20 • Control points : Control points can manipulate network de vices when you add a new control point (in this case, a laptop ) to a ne twork, the device may ask the network to find UPnP-enabled devices.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 21 In t nable UPnP function in ZyXEL devices. Currently, Microsoft MSN is the most popular application exploi.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 22 2. After getting IP address, you can go to open MSN application on PC a nd sign in MSN server. 3. Start a Video conversation with one online user. 4. On the opposite side, your partner select Accept to accept your conversation request.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 23 5. Finally, your video conversation is achieved..
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 24 WLAN Application Notes Infrastructure Mode 1. What is Infrastructure mode? Infrastructure mode, sometimes referred to as Access Point m ode, is an operating mode of an 802.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 25 2. Configuration Wireless Access Point to In frastructure mode using Web configurator. To configure Infrastructure mode of your P320W please follow the steps below.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 26 b. Configure the desired configuration on P320W. Fo r each configurable parame ter, what it is and how it function, please refer to the us er’s guide for detail or web help located on the page.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 27 3. Select Infrastructure from the operation m ode pu ll down menu, fill in an SSID or leave it as any if you wish to connect to any AP than pr ess Apply Change to take effect.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 28 5. Double click on the AP you want to associated with..
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 29 6. After the client have associated with the select ed AP. The linked AP's channel, current linkup rate, SSID, link quality, and signal strength will show on th e Link Info page.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 30 2. ZyXEL MAC Filter Implementation ZyXEL's MAC Filter Implem entation allows users to define a list to a llow or block association fr om STAs. The filter set allows users to input 32 entries in the list.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 31 WEP Configuration 1. Introduction The 802.11 standard describes the communica tion that occurs in wireless LANs.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 32 The standard does not discuss how the shared key is established. In practice, most installations use a single key that is shared between al l mobile stations and access points AP s.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 33 2. Setting up the Access Point Most access points and clients have the ability to hold up to 4 WEP keys simultaneously. You need to specify one of the 4 keys as default Key for data encryption.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 34 Key settings Select one WEP key as default key to encrypt wireless data transmission. 3. Setting up the S t ation 1. Double click on the utility icon in your windows task bar or right cl ick the utility icon then select 'Show Config Utility'.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 35 Note: If the utility icon doesn't exist in your task bar, click Start -> Programs -> IEEE802.11b WLAN Card -> IEEE802.11b WLAN Card. 2. Select the 'Encryption' tab.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 36.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommuni cations Corporat ion. 37 Key settings The WEP Encryption type of station has to equal to the access point. Check 'ASCII' field for characters WEP key or uncheck 'ASCII' field for Hexadecimal digits WEP key.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 38 IEEE 802.1x authentication is a clie nt-server architecture delive red with EAPOL (Extensible Authentication Protocol over LAN).
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 39 The device (i.e. RADIUS server) provi des an authentication service to an authenticator. This serv ice determines, from the cre dentials provided by the s upplicant, whether the supplicant is authorized to access the services provided by the authenticator.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommuni cations Corporat ion. 40 1. Force Authorized: Disables 802.1x and causes the port to tran sition to the authorized state without any authentication exchange requi red. The port transmits and receives norm al traffic without 802.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 41 The EAP protocol can support multiple authentication m echanisms, such as MD5-challenge, One-Time Passwords, Generic Token Card, TLS and TTLS etc.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 42 The EAPOL packet contains the fo llowing fields: protocol version, packet type, packet body length and packet body.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 43 • EAP-Packet: Both the supplicant and the auth enti cator send this packet when authentication is taking place. This is the packet that contains either the MD5-Challenge or TLS information required for authentication.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 44 1. From the W eb Configurator main menu, go to Network > W ireless LAN > General 2. Select 802.1x+Dynamic WEP to enable 802.1x authen tication function.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 45 When the client supplies its ident ity, the authenticator begins its ro le as the intermediary, passing EA P frames between the supplican t and the authentication server until authentication succe eds or fails.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 46 By using WEB Configurator , set up Authentication server address, port number (1812) and shared secret as below Site Survey 1. Introduction What is Site Survey? An RF site survey is a MAP to RF contour of RF cove rage in a particular facil ity.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommuni cations Corporat ion. 47 2. Preparation Below are the steps to complete a simple site su rvey with simple tools. 1. First you will need to obtain a facility diagram, such as a blueprint.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 48 4. It's always a good idea to start with putting the acce ss point at the corner of the room and walk away from the access point in a systema tic manner.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 49 5. When you reach the farthest point of connection mark the spot. No w you move the access point to this new spot as have already determin e the farthest point of the access point installation spot if wireless service is required from corner of the room.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 50 Note: If there are more than one acc ess point is needed be sure to m a ke the adjacent access point service area over lap one another. So the wi reless stations are able to roam .
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommuni cations Corporat ion. 51 your network. Prestige's design helps users to save expenses, minimize maintenance, and simultaneously provide a high quality networking environment.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommuni cations Corporat ion. 52 How do I know I am using PPPoE? PPPoE requires a user account to login to the provider's server. If you n eed to configure a user name and password on your computer to conne ct to the ISP you are probably using PPPoE.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommuni cations Corporat ion. 53 What is the difference between the internal IP and the real IP from my ISP? Internal IPs are sometimes referred to as virtual IPs. They are a group of up to 255 IPs that are used and recognized internally on the local area network.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommuni cations Corporat ion. 54 5. The Prestige Internet Access Sharing Router us es Solid State Disk technology . There are no moving parts in the product. It is much more reliab le than any hard disk ba sed system, such as the one for W inGate.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommuni cations Corporat ion. 55 Ethernet (10baseT) is the most popular cab le modem interface standard for the PC. This automatically limits the speed of the connection to under 10 Mbps even if the cable modem can receive at 30 Mbps.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 56 the Prestige is attached to the cab le modem directly, the ISP will reje ct the DHCP discovery fro m this MAC, thus no IP is assigned by the ISP. The Prestige supports to cl one the MAC from the first PC the ISP in stalled to be its WAN MAC.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 57 What is BOOTP/DHCP BOOTP stands for Bootstrap Protoc ol. DHCP stands for Dynamic Host Configuration Protocol. Both are mechanisms to dynamically assign an IP address for a TCP/IP client by the server.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommuni cations Corporat ion. 58 When the ISP assigns the Prestige a new IP, the Prestige updates this IP to DDNS se rver so that the server can update its IP-to-DNS entry. Once the IP-to-DNS table in the DDNS server is updated, the DNS name for your web server (i.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 59 traffic will be blocked by P320W . To help users ge t rid of the problem and configuration tasks, P320W will create firewall policy automatica lly to allow incom ing traffic if NAT is enabled in the P320Ws.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommuni cations Corporat ion. 60 as UNIX or Windows NT. It hides va luable data by requiring users to communicate with secure systems by mean of a proxy. A key drawback of this device is perform ance.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommuni cations Corporat ion. 61 2. Those that exploits weaknesse s in the TCP/IP specification such as SYN Flood and LAND Attacks. 3. Brute-force attacks that flood a network with useless data such as Sm urf attack.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 62 ICMP echo request packet to all hos ts on the network. If there are numerous hosts, th is will create a la.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommuni cations Corporat ion. 63 c. Installation Flexib ility: Wireless technology allows the network to go where wire cannot go.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommuni cations Corporat ion. 64 What is IEEE 802.11? The IEEE 802.11 is a wireless LAN industry standard, and the objective of IEEE 802.11 is to make sure that different manufactures' wirele ss LAN devices can communicate to ea ch other.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommuni cations Corporat ion. 65 Is it possible to use products from a variety of vendors? Y es. As long as the products comply with the same IEEE 802.1 1 standard. The W i-Fi logo is used to define 802.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommuni cations Corporat ion. 66 What are potential factors that may causes interfere nce among WLAN products? Factors of interference: 1. Obstacles: walls, ceilings, furniture… etc. 2. Building Materials: metal door, aluminum studs.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommuni cations Corporat ion. 67 What is Direct-Sequence Spread Spectrum Technology – (DSSS)? DSSS spreads its signal continuously over a wide fr equency band.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommuni cations Corporat ion. 68 What is an ESSID? ESSID stands for Extended Service Set Identifie r and identifies the wire less LAN. The ESSID of the mobile device must match the ESSID of the AP to communicate with the AP .
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommuni cations Corporat ion. 69 Can the SSID be encrypted? WEP , the encryption standard for 802.11, only encrypt s the data packets not the 802.1 1 management packets and the SSID is in the beacon and probe ma nagem ent messages.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommuni cations Corporat ion. 70 What is 802.1x? IEEE 802.1x Port-Based Network Access Control is an IEEE (Institute of Electrical and Elec.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommuni cations Corporat ion. 71 T rouble Shooting Why none of the LEDs turn on wh en connect the Prestige’s power? Make sure that you have the correct power adaptor connected to the Prestige, it is plugged into an appropriate power source.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 72 1. Your ISP checks the 'MAC address' Some ISPs only provide an IP addres s to the user with an authorized MAC address. This authorized MAC can be the PC's MAC which is used by the ISP for the authentication.
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommunicat ions Corporatio n. 73 Unable to run applications 1. Currently , the applicatio ns supported in SUA mode are listed in the ZyXEL SUA Support T able . Please check all the required settings suggested in the table to configure your P320W .
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommuni cations Corporat ion. 74 mIR C None for Chat. For DCC, please set Default/Client IP .
P320W Support Notes All contents c opyright (c ) 2005 ZyXEL C ommuni cations Corporat ion. 75 Microsoft Messenger Service 3.0 6901/client IP 6901/client IP Microsoft Messenger Service 4.
An important point after buying a device ZyXEL Communications 320W (or even before the purchase) is to read its user manual. We should do this for several simple reasons:
If you have not bought ZyXEL Communications 320W yet, this is a good time to familiarize yourself with the basic data on the product. First of all view first pages of the manual, you can find above. You should find there the most important technical data ZyXEL Communications 320W - thus you can check whether the hardware meets your expectations. When delving into next pages of the user manual, ZyXEL Communications 320W you will learn all the available features of the product, as well as information on its operation. The information that you get ZyXEL Communications 320W will certainly help you make a decision on the purchase.
If you already are a holder of ZyXEL Communications 320W, but have not read the manual yet, you should do it for the reasons described above. You will learn then if you properly used the available features, and whether you have not made any mistakes, which can shorten the lifetime ZyXEL Communications 320W.
However, one of the most important roles played by the user manual is to help in solving problems with ZyXEL Communications 320W. Almost always you will find there Troubleshooting, which are the most frequently occurring failures and malfunctions of the device ZyXEL Communications 320W along with tips on how to solve them. Even if you fail to solve the problem, the manual will show you a further procedure – contact to the customer service center or the nearest service center
