ZyXEL Communications P320W 802.11g Wireless Firewall Router User Manual ZyBook

ZyXEL Communications Corporation 802.11g Wireless Firewall Router ZyBook

Users Manual 1

P-320W802.11g Wireless Firewall RouterUser’s GuideVersion 1.00 11/2005Edition 1
P-320W User’s Guide Copyright 3CopyrightCopyright © 2005 by ZyXEL Communications Corporation.The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of ZyXEL Communications Corporation.Published by ZyXEL Communications Corporation. All rights reserved.DisclaimerZyXEL does not assume any liability arising out of the application or use of any products, or software described herein. Neither does it convey any license under its patent rights nor the patent rights of others. ZyXEL further reserves the right to make changes in any products described herein without notice. This publication is subject to change without notice.TrademarksZyNOS (ZyXEL Network Operating System) is a registered trademark of ZyXEL Communications, Inc. Other trademarks mentioned in this publication are used for identification purposes only and may be properties of their respective owners.
P-320W User’s Guide4   Federal Communications Commission (FCC) Interference StatementFederal Communications Commission (FCC) Interference StatementThis device complies with Part 15 of FCC rules. Operation is subject to the following two conditions:• This device may not cause harmful interference.• This device must accept any interference received, including interference that may cause undesired operations.This equipment has been tested and found to comply with the limits for a Class B digital device pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a commercial environment. This equipment generates, uses, and can radiate radio frequency energy, and if not installed and used in accordance with the instructions, may cause harmful interference to radio communications.If this equipment does cause harmful interference to radio/television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures:• Reorient or relocate the receiving antenna.• Increase the separation between the equipment and the receiver.• Connect the equipment into an outlet on a circuit different from that to which the receiver is connected.• Consult the dealer or an experienced radio/TV technician for help.Caution1To comply with FCC RF exposure compliance requirements, a separation distance of at least 20 cm must be maintained between the antenna of this device and all persons.2This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter.Notice 1Changes or modifications not expressly approved by the party responsible for compliance could void the user's authority to operate the equipment.This Class B digital apparatus complies with Canadian ICES-003.Cet appareil numérique de la classe B est conforme à la norme NMB-003 du Canada.
P-320W User’s Guide Federal Communications Commission (FCC) Interference Statement 5Certifications1Go to www.zyxel.com2Select your product from the drop-down list box on the ZyXEL home page to go to that product's page.3Select the certification you wish to view from this page.
P-320W User’s Guide6   Safety WarningsSafety WarningsFor your safety, be sure to read and follow all warning notices and instructions.• To reduce the risk of fire, use only No. 26 AWG (American Wire Gauge) or larger telecommunication line cord. • Do NOT open the device or unit. Opening or removing covers can expose you to dangerous high voltage points or other risks. ONLY qualified service personnel can service the device. Please contact your vendor for further information.• Use ONLY the dedicated power supply for your device. Connect the power cord or power adaptor to the right supply voltage (110V AC in North America or 230V AC in Europe).• Do NOT use the device if the power supply is damaged as it might cause electrocution. • If the power supply is damaged, remove it from the power outlet. • Do NOT attempt to repair the power supply. Contact your local vendor to order a new power supply.• Place connecting cables carefully so that no one will step on them or stumble over them. Do NOT allow anything to rest on the power cord and do NOT locate the product where anyone can walk on the power cord.• If you wall mount your device, make sure that no electrical, gas or water pipes will be damaged. • Do NOT install nor use your device during a thunderstorm. There may be a remote risk of electric shock from lightning.• Do NOT expose your device to dampness, dust or corrosive liquids. • Do NOT use this product near water, for example, in a wet basement or near a swimming pool.• Make sure to connect the cables to the correct ports.• Do NOT obstruct the device ventilation slots, as insufficient airflow may harm your device.• Do NOT store things on the device.• Connect ONLY suitable accessories to the device.
P-320W User’s Guide ZyXEL Limited Warranty 7ZyXEL Limited WarrantyZyXEL warrants to the original end user (purchaser) that this product is free from any defects in materials or workmanship for a period of up to two years from the date of purchase. During the warranty period, and upon proof of purchase, should the product have indications of failure due to faulty workmanship and/or materials, ZyXEL will, at its discretion, repair or replace the defective products or components without charge for either parts or labor, and to whatever extent it shall deem necessary to restore the product or components to proper operating condition. Any replacement will consist of a new or re-manufactured functionally equivalent product of equal value, and will be solely at the discretion of ZyXEL. This warranty shall not apply if the product is modified, misused, tampered with, damaged by an act of God, or subjected to abnormal working conditions.NoteRepair or replacement, as provided under this warranty, is the exclusive remedy of the purchaser. This warranty is in lieu of all other warranties, express or implied, including any implied warranty of merchantability or fitness for a particular use or purpose. ZyXEL shall in no event be held liable for indirect or consequential damages of any kind of character to the purchaser.To obtain the services of this warranty, contact ZyXEL's Service Center for your Return Material Authorization number (RMA). Products must be returned Postage Prepaid. It is recommended that the unit be insured when shipped. Any returned products without proof of purchase or those with an out-dated warranty will be repaired or replaced (at the discretion of ZyXEL) and the customer will be billed for parts and labor. All repaired or replaced products will be shipped by ZyXEL to the corresponding return address, Postage Paid. This warranty gives you specific legal rights, and you may also have other rights that vary from country to country.
P-320W User’s Guide8   Customer SupportCustomer SupportPlease have the following information ready when you contact customer support.• Product model and serial number.• Warranty Information.• Date that you received your device.• Brief description of the problem and the steps you took to solve it. METHODLOCATIONSUPPORT E-MAIL TELEPHONEAWEB SITEREGULAR MAILSALES E-MAIL FAX FTP SITECORPORATE HEADQUARTERS (WORLDWIDE)support@zyxel.com.tw +886-3-578-3942 www.zyxel.comwww.europe.zyxel.comZyXEL Communications Corp.6 Innovation Road II Science Park Hsinchu 300 Ta i w a nsales@zyxel.com.tw +886-3-578-2439 ftp.zyxel.comftp.europe.zyxel.comCZECH REPUBLICinfo@cz.zyxel.com +420-241-091-350 www.zyxel.cz ZyXEL Communications Czech s.r.o. Modranská 621 143 01 Praha 4 - Modrany Ceská Republikainfo@cz.zyxel.com +420-241-091-359DENMARKsupport@zyxel.dk  +45-39-55-07-00 www.zyxel.dk  ZyXEL Communications A/S Columbusvej 2860 Soeborg Denmarksales@zyxel.dk  +45-39-55-07-07FINLANDsupport@zyxel.fi +358-9-4780-8411 www.zyxel.fi  ZyXEL Communications Oy Malminkaari 10 00700 Helsinki Finlandsales@zyxel.fi +358-9-4780 8448FRANCEinfo@zyxel.fr  +33-4-72-52-97-97 www.zyxel.fr  ZyXEL France  1 rue des Vergers Bat. 1 / C 69760 Limonest  France+33-4-72-52-19-20GERMANYsupport@zyxel.de +49-2405-6909-0 www.zyxel.de ZyXEL Deutschland GmbH. Adenauerstr. 20/A2 D-52146 Wuerselen Germanysales@zyxel.de +49-2405-6909-99HUNGARYsupport@zyxel.hu +36-1-3361649 www.zyxel.hu ZyXEL Hungary 48, Zoldlomb Str. H-1025, Budapest Hungaryinfo@zyxel.hu +36-1-3259100KAZAKHSTANhttp://zyxel.kz/support +7-3272-590-698 www.zyxel.kz ZyXEL Kazakhstan 43, Dostyk ave.,Office 414 Dostyk Business Centre 050010, Almaty Republic of Kazakhstansales@zyxel.kz +7-3272-590-689NORTH AMERICAsupport@zyxel.com 1-800-255-4101+1-714-632-0882www.us.zyxel.com ZyXEL Communications Inc. 1130 N. Miller St. Anaheim CA 92806-2001 U.S.A.sales@zyxel.com +1-714-632-0858 ftp.us.zyxel.comNORWAYsupport@zyxel.no  +47-22-80-61-80 www.zyxel.no  ZyXEL Communications A/S Nils Hansens vei 13 0667 Oslo Norwaysales@zyxel.no  +47-22-80-61-81
P-320W User’s Guide Customer Support 9POLANDinfo@pl.zyxel.com +48-22-5286603 www.pl.zyxel.com ZyXEL Communications ul.Emilli Plater 53 00-113 Warszawa Poland+48-22-5206701RUSSIAhttp://zyxel.ru/support +7-095-542-89-29 www.zyxel.ru ZyXEL Russia Ostrovityanova 37a Str. Moscow, 117279 Russiasales@zyxel.ru +7-095-542-89-25SPAINsupport@zyxel.es +34-902-195-420 www.zyxel.es  ZyXEL Communications Alejandro Villegas 33 1º, 28043 Madrid Spainsales@zyxel.es  +34-913-005-345SWEDENsupport@zyxel.se  +46-31-744-7700 www.zyxel.se ZyXEL Communications A/S Sjöporten 4, 41764 Göteborg Swedensales@zyxel.se  +46-31-744-7701UKRAINEsupport@ua.zyxel.com +380-44-247-69-78 www.ua.zyxel.com ZyXEL Ukraine 13, Pimonenko Str. Kiev, 04050 Ukrainesales@ua.zyxel.com +380-44-494-49-32UNITED KINGDOMsupport@zyxel.co.uk +44-1344 30304408707 555779 (UK only) www.zyxel.co.uk ZyXEL Communications UK Ltd.,11 The Courtyard, Eastern Road, Bracknell, Berkshire, RG12 2XB, United Kingdom (UK)sales@zyxel.co.uk +44-1344 303034 ftp.zyxel.co.ukA. “+” is the (prefix) number you enter to make an international telephone call.METHODLOCATIONSUPPORT E-MAIL TELEPHONEAWEB SITEREGULAR MAILSALES E-MAIL FAX FTP SITE
P-320W User’s Guide10   Customer Support
P-320W User’s Guide Table of Contents 11Table of ContentsCopyright .................................................................................................................. 3Federal Communications Commission (FCC) Interference Statement ............... 4Safety Warnings ....................................................................................................... 6ZyXEL Limited Warranty.......................................................................................... 7Customer Support.................................................................................................... 8Table of Contents ................................................................................................... 11Preface .................................................................................................................... 25Chapter 1Getting to Know Your Prestige ............................................................................. 271.1 Prestige Overview  ..............................................................................................271.2 Prestige Features ...............................................................................................271.2.1 Physical Features  .....................................................................................271.2.2 Non-Physical Features  .............................................................................281.2.3 Wireless Features .....................................................................................301.3 Applications for the Prestige  ..............................................................................311.3.1 Secure Broadband Internet Access via Cable or DSL Modem .................311.3.2 Wireless LAN Application  .........................................................................321.3.3 Front Panel LEDs  .....................................................................................32Chapter 2Introducing the Web Configurator........................................................................ 352.1 Web Configurator Overview  ...............................................................................352.2 Accessing the Prestige Web Configurator .........................................................352.3 Resetting the Prestige ........................................................................................372.3.1 Procedure To Use The Reset Button  ........................................................372.4 Navigating the Prestige Web Configurator  .........................................................372.4.1 Navigation Panel .......................................................................................392.4.2 Summary: DHCP Table..............................................................................412.4.3 Summary: Association List ........................................................................422.4.4 Summary: Packet Statistics .......................................................................42Chapter 3Connection Wizard................................................................................................. 453.1 Wizard Setup ......................................................................................................45
P-320W User’s Guide12  Table of Contents3.2 Connection Wizard: STEP 1: System Information .............................................463.2.1 System Name  ...........................................................................................463.2.2 Domain Name ...........................................................................................463.3 Connection Wizard: STEP 2: Wireless LAN .......................................................473.3.1 Basic(WEP) Security .................................................................................493.3.2 Extend(WPA-PSK) Security.......................................................................503.3.3 OTIST ........................................................................................................513.4 Connection Wizard: STEP 3: Internet Configuration ..........................................523.4.1 Ethernet Connection Type  ........................................................................533.4.2 PPPoE Connection Type  ..........................................................................533.4.3 PPTP Connection Type  ............................................................................553.4.4 Your IP Address .........................................................................................563.4.5 WAN MAC Address ...................................................................................573.4.6 Connection Wizard Complete ....................................................................58Chapter 4Wireless LAN .......................................................................................................... 614.1 Introduction  ........................................................................................................614.2 Wireless Security Overview  ...............................................................................614.2.1 Encryption .................................................................................................614.2.2 Authentication  ...........................................................................................614.2.3 Restricted Access  .....................................................................................624.2.4 Hide Prestige Identity ................................................................................624.2.5 Using OTIST  .............................................................................................624.3 Configuring Wireless LAN on the Prestige .........................................................624.4 General Wireless LAN Screen   ..........................................................................634.4.1 No Security  ...............................................................................................644.4.2 WEP Encryption ........................................................................................654.4.3 Introduction to WPA   .................................................................................674.4.4 WPA-PSK Application Example ................................................................674.4.5 WPA-PSK Authentication Screen  .............................................................684.4.6 WPA with RADIUS Application Example  ..................................................694.4.7 Wireless Client WPA Supplicants  .............................................................694.4.8 WPA Authentication Screen ......................................................................694.4.9 IEEE 802.1x Overview ..............................................................................704.4.10 IEEE 802.1x and Dynamic WEP Key Exchange Screen  ........................714.5 OTIST .................................................................................................................724.5.1 Enabling OTIST  ........................................................................................724.5.1.1 AP  ...................................................................................................724.5.1.2 Wireless Client  ................................................................................744.5.2 Starting OTIST  ..........................................................................................754.5.3 Notes on OTIST ........................................................................................754.6 MAC Filter  ..........................................................................................................76
P-320W User’s Guide Table of Contents 134.7 Wireless LAN Advanced Screen  ........................................................................78Chapter 5WAN......................................................................................................................... 815.1 WAN IP Address Assignment .............................................................................815.2 IP Address and Subnet Mask .............................................................................815.3 DNS Server Address Assignment  ......................................................................825.4 TCP/IP Priority (Metric)  ......................................................................................825.5 WAN MAC Address ............................................................................................835.6 Internet Connection ............................................................................................835.6.1 Ethernet Encapsulation .............................................................................835.6.2 PPPoE Encapsulation ...............................................................................855.6.3 PPTP Encapsulation .................................................................................875.7 Advanced WAN Screen ......................................................................................895.8 Traffic Redirect  ...................................................................................................905.9 Traffic Redirect Screen .......................................................................................90Chapter 6LAN.......................................................................................................................... 936.1 LAN Overview  ....................................................................................................936.1.1 IP Pool Setup ............................................................................................936.1.2 System DNS Servers ................................................................................936.2 LAN TCP/IP ........................................................................................................936.2.1 Factory LAN Defaults ................................................................................936.2.2 IP Address and Subnet Mask  ...................................................................946.3 IP Screen  ...........................................................................................................94Chapter 7DHCP Server........................................................................................................... 957.1 DHCP  .................................................................................................................957.2 DHCP Screen .....................................................................................................957.3 Static DHCP Screen ...........................................................................................967.4 Client List Screen  ...............................................................................................97Chapter 8Network Address Translation (NAT) ..................................................................... 998.1 NAT Overview  ....................................................................................................998.1.1 NAT Definitions  .........................................................................................998.1.2 What NAT Does  ......................................................................................1008.1.3 How NAT Works  .....................................................................................1008.1.4 NAT Application  ......................................................................................1018.1.5 Default Server IP Address  ......................................................................1018.1.6 Port Forwarding: Services and Port Numbers  ........................................102
P-320W User’s Guide14  Table of Contents8.1.7 Configuring Servers Behind SUA (Example) ..........................................1038.2 General NAT Screen  ........................................................................................1038.3 Port Forwarding Screen  ...................................................................................1048.3.1 Rule Setup Screen...................................................................................1058.4 Trigger Port Forwarding  ...................................................................................1068.4.1 Trigger Port Forwarding Example ...........................................................1068.4.2 Two Points To Remember About Trigger Ports .......................................1078.5 Trigger Port Forwarding Screen  .......................................................................107Chapter 9Firewall.................................................................................................................. 1099.1 Introduction to Firewall  .....................................................................................1099.1.1 What is a Firewall?  .................................................................................1099.1.2 Stateful Inspection Firewall.  ....................................................................1099.1.3 About the Prestige Firewall .....................................................................1099.1.4 Guidelines For Enhancing Security With Your Firewall  ..........................1109.2 General Firewall Screen ...................................................................................1109.3  Services Screen  .............................................................................................. 1119.3.1 Services  ..................................................................................................113Chapter 10Static Route Screens ........................................................................................... 11510.1 Static Route Overview ....................................................................................11510.2 IP Static Route Screen  ...................................................................................11510.2.1 Static Route Setup Screen.....................................................................116Chapter 11Remote Management Screens ............................................................................ 11911.1 Remote Management Overview  .....................................................................11911.1.1 Remote Management Limitations  .........................................................11911.1.2 Remote Management and NAT  ............................................................11911.1.3  System Timeout  ...................................................................................12011.2 WWW Screen  .................................................................................................12011.3 SNMP  .............................................................................................................12111.3.1 Supported MIBs  ....................................................................................12211.3.2 SNMP Traps ..........................................................................................12211.4 SNMP Screen .................................................................................................12211.5 Security Screen  ..............................................................................................123Chapter 12UPnP...................................................................................................................... 12512.1  Universal Plug and Play Overview  ................................................................12512.1.1 How Do I Know If I'm Using UPnP? ......................................................125
P-320W User’s Guide Table of Contents 1512.1.2 NAT Traversal .......................................................................................12512.1.3 Cautions with UPnP ..............................................................................12512.2 UPnP and ZyXEL  ...........................................................................................12612.3 UPnP Screen  .................................................................................................12612.4 Installing UPnP in Windows Example  ............................................................12712.4.1 Installing UPnP in Windows Me ............................................................12712.4.2 Installing UPnP in Windows XP  ............................................................12812.5  Using UPnP in Windows XP Example  ..........................................................12912.5.1 Auto-discover Your UPnP-enabled Network Device .............................13012.5.2 Web Configurator Easy Access  ............................................................133Chapter 13System .................................................................................................................. 13513.1 System Overview  ...........................................................................................13513.2 General Screen  ..............................................................................................13513.3 Dynamic DNS .................................................................................................13613.3.1 DynDNS Wildcard .................................................................................13613.4 Dynamic DNS Screen  ....................................................................................13713.5 Time Setting Screen .......................................................................................137Chapter 14Logs....................................................................................................................... 14114.1 View Log   .......................................................................................................14114.2 Log Settings  ...................................................................................................142Chapter 15Tools...................................................................................................................... 14515.1 Firmware Upload Screen  ...............................................................................14515.2 Configuration Screen  .....................................................................................14615.2.1 Backup Configuration ...........................................................................14715.2.2 Restore Configuration ...........................................................................14715.2.3 Back to Factory Defaults .......................................................................14815.3 Restart Screen  ...............................................................................................148Chapter 16Troubleshooting ................................................................................................... 15116.1 Problems Starting Up the Prestige  .................................................................15116.2 Problems with the LAN ...................................................................................15116.3 Problems with the WAN  .................................................................................15216.4 Problems with the Password ..........................................................................15216.5 Problems with Remote Management  .............................................................15316.6 Problems Accessing the Prestige  ..................................................................15316.6.1 Pop-up Windows, JavaScripts and Java Permissions ..........................154
P-320W User’s Guide16  Table of Contents16.6.1.1 Internet Explorer Pop-up Blockers  ..............................................15416.6.1.2 JavaScripts ..................................................................................15716.6.1.3 Java Permissions ........................................................................15916.6.2 ActiveX Controls in Internet Explorer ....................................................161Appendix AProduct Specifications ........................................................................................ 163Appendix BIP Subnetting ........................................................................................................ 165Appendix CSetting up Your Computer’s IP Address............................................................ 173Appendix DPPPoE ................................................................................................................... 189Appendix EPPTP...................................................................................................................... 191Appendix FWireless LANs ...................................................................................................... 195Appendix GAntenna Selection and Positioning Recommendation..................................... 209
P-320W User’s Guide 17List of FiguresFigure 1 Secure Internet Access via Cable, DSL or Wireless Modem ................................ 31Figure 2 Internet Access Application Example .................................................................... 32Figure 3 Front Panel  ...........................................................................................................32Figure 4 Login  ..................................................................................................................... 36Figure 5 Language Selection  .............................................................................................. 36Figure 6 Change Password Screen  .................................................................................... 36Figure 7 Select the Mode  .................................................................................................... 37Figure 8 Web Configurator Status Screen  .......................................................................... 38Figure 9 Summary: DHCP Table ......................................................................................... 41Figure 10 Summary: Association List .................................................................................. 42Figure 11 Summary: Packet Statistics ................................................................................. 43Figure 12 Select a Mode  ..................................................................................................... 45Figure 13 Welcome to the Connection Wizard .................................................................... 46Figure 14 Connection Wizard: STEP 1: System Information  .............................................. 47Figure 15 Connection Wizard: STEP 2: Wireless LAN  ....................................................... 48Figure 16 Basic(WEP) Security ........................................................................................... 49Figure 17 Extend(WPA-PSK) Security  ................................................................................ 50Figure 18 OTIST  ................................................................................................................. 51Figure 19 Connection Wizard: STEP 3: WAN Connection Type.  ........................................ 52Figure 20 Ethernet Connection Type  .................................................................................. 53Figure 21 PPPoE Connection Type .................................................................................... 54Figure 22 PPTP Connection Type ....................................................................................... 55Figure 23 Your IP Address  .................................................................................................. 56Figure 24 WAN MAC Address ............................................................................................. 58Figure 25 Connection Wizard Complete ............................................................................. 59Figure 26 Connection Wizard: Congratulation  .................................................................... 59Figure 27 Wireless: General   .............................................................................................. 63Figure 28 Wireless: No Security .......................................................................................... 65Figure 29 Wireless: Static WEP Encryption  ........................................................................ 66Figure 30 WPA-PSK Authentication .................................................................................... 68Figure 31 Wireless: WPA-PSK ............................................................................................ 68Figure 32 WPA with RADIUS Application Example ............................................................ 69Figure 33 Wireless: WPA  .................................................................................................... 70Figure 34 Wireless: 802.1x and Dynamic WEP  .................................................................. 71Figure 35 Wireless: OTIST .................................................................................................. 73Figure 36 Example Wireless Client OTIST Screen ............................................................. 74
P-320W User’s Guide18   Figure 37 Security Key ........................................................................................................ 75Figure 38 OTIST in Progress (AP) ...................................................................................... 75Figure 39 OTIST in Progress (Client) .................................................................................. 75Figure 40         No AP with OTIST Found  ........................................................................... 75Figure 41 Start OTIST?  ....................................................................................................... 76Figure 42 Wireless: MAC Address Filter  ............................................................................. 77Figure 43 Wireless: Advanced  ............................................................................................ 78Figure 44 WAN: Ethernet Encapsulation ............................................................................. 84Figure 45 WAN: PPPoE Encapsulation ............................................................................... 86Figure 46 PPTP Encapsulation  ........................................................................................... 88Figure 47 Advanced  ............................................................................................................ 90Figure 48 Traffic Redirect WAN Setup  ................................................................................ 90Figure 49 WAN: Traffic Redirect .......................................................................................... 91Figure 50 LAN IP ................................................................................................................. 94Figure 51 General  ............................................................................................................... 95Figure 52 Static DHCP  ........................................................................................................ 97Figure 53 Client List  ............................................................................................................ 98Figure 54 How NAT Works .................................................................................................. 101Figure 55 NAT Application With IP Alias  ............................................................................. 101Figure 56 Multiple Servers Behind NAT Example ............................................................... 103Figure 57 NAT: General ....................................................................................................... 103Figure 58 Port Forwarding  .................................................................................................. 104Figure 59 NAT: Port Forwarding: Rule Setup  ...................................................................... 105Figure 60 Trigger Port Forwarding Process: Example ........................................................ 107Figure 61 NAT: Trigger Port ................................................................................................. 108Figure 62 Firewall: General ................................................................................................. 110Figure 63 Firewall: Services ................................................................................................ 111Figure 64 Example of Static Routing Topology  ................................................................... 115Figure 65 IP Static Route  .................................................................................................... 116Figure 66 Static Route Setup  .............................................................................................. 117Figure 67 WWW Remote Management  .............................................................................. 120Figure 68 SNMP Management Model ................................................................................. 121Figure 69 SNMP Remote Management  .............................................................................. 123Figure 70 Security Remote Management ........................................................................... 124Figure 71 Configuring UPnP  ............................................................................................... 126Figure 72 Add/Remove Programs: Windows Setup: Communication ................................. 127Figure 73 Add/Remove Programs: Windows Setup: Communication: Components  .......... 128Figure 74 Network Connections .......................................................................................... 128Figure 75 Windows Optional Networking Components Wizard  .......................................... 129Figure 76 Networking Services  ........................................................................................... 129Figure 77 Network Connections .......................................................................................... 130Figure 78 Internet Connection Properties   .......................................................................... 131Figure 79 Internet Connection Properties: Advanced Settings  ........................................... 131
P-320W User’s Guide 19Figure 80 Internet Connection Properties: Advanced Settings: Add ................................... 132Figure 81 System Tray Icon  ................................................................................................ 132Figure 82 Internet Connection Status .................................................................................. 132Figure 83 Network Connections .......................................................................................... 133Figure 84 Network Connections: My Network Places ......................................................... 134Figure 85 Network Connections: My Network Places: Properties: Example ....................... 134Figure 86 System General   ................................................................................................. 135Figure 87 Dynamic DNS  ..................................................................................................... 137Figure 88 Time Setting  ........................................................................................................ 138Figure 89 View Log  .............................................................................................................141Figure 90 Log Settings  ........................................................................................................ 143Figure 91 Maintenance Firmware Upload  ........................................................................... 145Figure 92 Upload Warning  .................................................................................................. 146Figure 93 Network Temporarily Disconnected  .................................................................... 146Figure 94 Upload Error Message  ........................................................................................ 146Figure 95 Configuration ....................................................................................................... 147Figure 96 Configuration Restore Successful ....................................................................... 148Figure 97 Temporarily Disconnected ................................................................................... 148Figure 98 Configuration Restore Error  ................................................................................ 148Figure 99 System Restart  ................................................................................................... 149Figure 100 Pop-up Blocker  ................................................................................................. 154Figure 101  Internet Options  ............................................................................................... 155Figure 102 Internet Options  ................................................................................................ 156Figure 103 Pop-up Blocker Settings  ................................................................................... 157Figure 104 Internet Options  ................................................................................................ 158Figure 105 Security Settings - Java Scripting  ..................................................................... 159Figure 106 Security Settings - Java  .................................................................................... 160Figure 107 Java (Sun) ......................................................................................................... 160Figure 108 Internet Options Security  .................................................................................. 161Figure 109 Security Setting ActiveX Controls  ..................................................................... 162Figure 110 WIndows 95/98/Me: Network: Configuration ..................................................... 174Figure 111 Windows 95/98/Me: TCP/IP Properties: IP Address  ......................................... 175Figure 112 Windows 95/98/Me: TCP/IP Properties: DNS Configuration ............................. 176Figure 113 Windows XP: Start Menu  .................................................................................. 177Figure 114 Windows XP: Control Panel  .............................................................................. 177Figure 115 Windows XP: Control Panel: Network Connections: Properties  ....................... 178Figure 116 Windows XP: Local Area Connection Properties  .............................................. 178Figure 117 Windows XP: Internet Protocol (TCP/IP) Properties  ......................................... 179Figure 118 Windows XP: Advanced TCP/IP Properties ...................................................... 180Figure 119 Windows XP: Internet Protocol (TCP/IP) Properties  ......................................... 181Figure 120 Macintosh OS 8/9: Apple Menu  ........................................................................ 182Figure 121 Macintosh OS 8/9: TCP/IP ................................................................................ 182Figure 122 Macintosh OS X: Apple Menu ........................................................................... 183
P-320W User’s Guide20   Figure 123 Macintosh OS X: Network ................................................................................. 184Figure 124 Red Hat 9.0: KDE: Network Configuration: Devices   ........................................ 185Figure 125 Red Hat 9.0: KDE: Ethernet Device: General    ................................................. 185Figure 126 Red Hat 9.0: KDE: Network Configuration: DNS   ............................................. 186Figure 127 Red Hat 9.0: KDE: Network Configuration: Activate    ....................................... 186Figure 128 Red Hat 9.0: Dynamic IP Address Setting in ifconfig-eth0   .............................. 187Figure 129 Red Hat 9.0: Static IP Address Setting in ifconfig-eth0    .................................. 187Figure 130 Red Hat 9.0: DNS Settings in resolv.conf     ...................................................... 187Figure 131 Red Hat 9.0: Restart Ethernet Card    ................................................................ 188Figure 132 Red Hat 9.0: Checking TCP/IP Properties   ...................................................... 188Figure 133 Single-Computer per Router Hardware Configuration  ...................................... 190Figure 134 ZyWALL as a PPPoE Client .............................................................................. 190Figure 135 Transport PPP frames over Ethernet   ............................................................... 191Figure 136 PPTP Protocol Overview  .................................................................................. 192Figure 137 Example Message Exchange between Computer and an ANT ........................ 193Figure 138 Peer-to-Peer Communication in an Ad-hoc Network  ........................................ 195Figure 139 Basic Service Set .............................................................................................. 196Figure 140 Infrastructure WLAN ......................................................................................... 197Figure 141 RTS/CTS ........................................................................................................... 198Figure 142 EAP Authentication  ........................................................................................... 201Figure 143 WEP Authentication Steps ................................................................................ 204Figure 144 Roaming Example ............................................................................................. 207
P-320W User’s Guide 21List of TablesTable 1 Front Panel LEDs   .................................................................................................. 32Table 2 Status Screen Icon Key   ......................................................................................... 38Table 3 Web Configurator Status Screen   ........................................................................... 38Table 4 Screens Summary   ................................................................................................. 39Table 5 Summary: DHCP Table   ......................................................................................... 41Table 6 Summary: Wireless Association List   ..................................................................... 42Table 7 Summary: Packet Statistics   ................................................................................... 43Table 8 Connection Wizard: STEP 1: System Information  ................................................. 47Table 9 Connection Wizard: STEP 2:  Wireless LAN   ......................................................... 48Table 10 Basic(WEP) Security   ........................................................................................... 49Table 11 Extend(WPA-PSK) Security   ................................................................................. 51Table 12 OTIST   .................................................................................................................. 52Table 13 Connection Wizard: STEP 3: WAN Connection Type  .......................................... 53Table 14 PPPoE Connection Type  ..................................................................................... 54Table 15 PPTP Connection Type   ....................................................................................... 55Table 16 Your IP Address  ................................................................................................... 57Table 17 Example of Network Properties for LAN Servers with Fixed IP Addresses  ......... 57Table 18 WAN MAC Address   ............................................................................................. 58Table 19 ZyAIR Wireless Security Levels   .......................................................................... 63Table 20 Wireless: General   ................................................................................................ 64Table 21 Wireless No Security   ........................................................................................... 65Table 22 Wireless: Static WEP Encryption  ......................................................................... 66Table 23 Wireless: WPA-PSK   ............................................................................................ 68Table 24 Wireless: WPA  ..................................................................................................... 70Table 25 Wireless: 802.1x and Dynamic WEP  ................................................................... 71Table 26 Wireless: OTIST   .................................................................................................. 73Table 27 MAC Address Filter   ............................................................................................. 77Table 28 Wireless: Advanced  ............................................................................................. 78Table 29 Private IP Address Ranges   ................................................................................. 81Table 30 Example of Network Properties for LAN Servers with Fixed IP Addresses  ......... 83Table 31 WAN: Ethernet Encapsulation   ............................................................................. 84Table 32 WAN: PPPoE Encapsulation   ............................................................................... 86Table 33 PPTP Encapsulation  ............................................................................................ 88Table 34 Advanced  .............................................................................................................90Table 35 Traffic Redirect   .................................................................................................... 91Table 36 LAN IP   ................................................................................................................. 94
P-320W User’s Guide22   Table 37 General  ................................................................................................................ 96Table 38 Static DHCP  ......................................................................................................... 97Table 39 Client List  ............................................................................................................. 98Table 40 NAT Definitions  .................................................................................................... 100Table 41 Services and Port Numbers  ................................................................................. 102Table 42 NAT: General   ....................................................................................................... 103Table 43 NAT: Port Forwarding   .......................................................................................... 105Table 44 NAT: Port Forwarding: Rule Setup  ....................................................................... 106Table 45 NAT: Trigger Port   ................................................................................................. 108Table 46 Firewall: General   ................................................................................................. 111Table 47 Firewall: Services   ................................................................................................ 112Table 48 Commonly Used Services   ................................................................................... 113Table 49 IP Static Route  ..................................................................................................... 116Table 50 Static Route Setup  ............................................................................................... 117Table 51 WWW Remote Management  ............................................................................... 120Table 52 SNMP Traps   ........................................................................................................ 122Table 53 SNMP Remote Management  ............................................................................... 123Table 54 Security Remote Management   ............................................................................ 124Table 55 Configuring UPnP  ................................................................................................ 126Table 56 System General  ................................................................................................... 136Table 57 Dynamic DNS   ...................................................................................................... 137Table 58 Time Setting   ........................................................................................................ 138Table 59 View Log  .............................................................................................................. 142Table 60 Log Settings  .........................................................................................................143Table 61 Maintenance Firmware Upload  ............................................................................ 145Table 62 Maintenance: Restore Configuration   ................................................................... 147Table 63 Troubleshooting Starting Up Your Prestige  .......................................................... 151Table 64 Troubleshooting the LAN   ..................................................................................... 151Table 65 Troubleshooting the WAN  .................................................................................... 152Table 66 Troubleshooting the Password   ............................................................................ 152Table 67 Troubleshooting Telnet   ........................................................................................ 153Table 68 Troubleshooting Accessing the Prestige   ............................................................. 153Table 69 Device  .................................................................................................................. 163Table 70 Firmware  .............................................................................................................. 163Table 71 Classes of IP Addresses   ..................................................................................... 165Table 72 Allowed IP Address Range By Class  ................................................................... 166Table 73  “Natural” Masks   .................................................................................................. 166Table 74 Alternative Subnet Mask Notation   ....................................................................... 167Table 75 Two Subnets Example  ......................................................................................... 167Table 76 Subnet 1   .............................................................................................................. 168Table 77 Subnet 2   .............................................................................................................. 168Table 78 Subnet 1   .............................................................................................................. 169Table 79 Subnet 2   .............................................................................................................. 169
P-320W User’s Guide 23Table 80 Subnet 3   .............................................................................................................. 169Table 81 Subnet 4   .............................................................................................................. 170Table 82 Eight Subnets   ...................................................................................................... 170Table 83 Class C Subnet Planning  ..................................................................................... 170Table 84 Class B Subnet Planning  ..................................................................................... 171Table 85 IEEE802.11g  ........................................................................................................ 199Table 86 Comparison of EAP Authentication Types  ........................................................... 205Table 87 Wireless Security Relational Matrix   ..................................................................... 206
P-320W User’s Guide24
P-320W User’s Guide Preface 25PrefaceCongratulations on your purchase of the P-320W, 802.11g Wireless Firewall Router. This manual is designed to guide you through the configuration of your Prestige for its various applications. This manual may refer to the P-320W, 802.11g Wireless Firewall Router as the Prestige. Note: Register your product online to receive e-mail notices of firmware upgrades and information at www.zyxel.com for global products, or at www.us.zyxel.com for North American products.About This User's GuideThis User’s Guide is designed to guide you through the configuration of your Prestige using the web configurator. Related Documentation• Supporting DiskRefer to the included CD for support documents.• Quick Start Guide The Quick Start Guide is designed to help you get up and running right away. They contain connection information and instructions on getting started.• Web Configurator Online HelpEmbedded web help for descriptions of individual screens and supplementary information.• ZyXEL Glossary and Web SitePlease refer to www.zyxel.com for an online glossary of networking terms and additional support documentation.User Guide Feedback Help us help you! E-mail all User Guide-related comments, questions or suggestions for improvement to techwriters@zyxel.com.tw or send regular mail to The Technical Writing Team, ZyXEL Communications Corp., 6 Innovation Road II, Science-Based Industrial Park, Hsinchu, 300, Taiwan. Thank you!Syntax Conventions• “Enter” means for you to type one or more characters. “Select” or “Choose” means for you to use one predefined choices.• Mouse action sequences are denoted using a comma. For example, “In Windows, click Start, Settings and then Control Panel” means first click the Start button, then point your mouse pointer to Settings and then click Control Panel.
P-320W User’s Guide26   Preface• “e.g.,” is a shorthand for “for instance”, and “i.e.,” means “that is” or “in other words”.Graphics Icons KeyPrestige Computer Notebook computerServer DSLAM FirewallModem Switch Router
P-320W User’s GuideChapter 1 Getting to Know Your Prestige 27CHAPTER 1Getting to Know Your PrestigeThis chapter introduces the main features and applications of the Prestige.1.1  Prestige OverviewThe Prestige is the ideal secure wireless firewall router for all data passing between the Internet and LAN’s.The Prestige provides NAT, port forwarding, firewall, DHCP server and many other powerful features. The Prestige has an embedded mini-PCI module for 802.11g Wireless LAN connectivity.The embedded web configurator is easy to operate.Note: Only use firmware for your Prestige’s specific model.1.2  Prestige FeaturesThe following sections describe Prestige features. 1.2.1  Physical Features10/100 Mbps Auto-negotiating Ethernet/Fast Ethernet Interface(s)This auto-negotiation feature allows the Prestige to detect the speed of incoming transmissions and adjust appropriately without manual intervention. It allows data transfer of either 10 Mbps or 100 Mbps in either half-duplex or full-duplex mode depending on your Ethernet network.Auto-negotiation allows data transfer of 100 Mbps in full-duplex modeAuto-crossover 10/100 Mbps Ethernet Interface(s)These interfaces automatically adjust to either a crossover or straight-through Ethernet cable.4-Port SwitchA combination of switch and router makes your Prestige a cost-effective and viable network solution. You can add up to four computers to the Prestige without the cost of a hub. Add more than four computers to your LAN by using a hub.
P-320W User’s Guide28  Chapter 1 Getting to Know Your PrestigeReset ButtonThe Prestige reset button is built into the rear panel. Use this button to restore the factory default password to 1234; IP address to 192.168.1.1, subnet mask to 255.255.255.0 and DHCP server enabled with a pool of 32 IP addresses starting at 192.168.1.33. 1.2.2  Non-Physical FeaturesFirewallThe Prestige is a stateful inspection firewall with DoS (Denial of Service) protection. By default, when the firewall is activated, all incoming traffic from the WAN to the LAN is blocked unless it is initiated from the LAN. The Prestige firewall supports TCP/UDP inspection, DoS detection and prevention, real time alerts, reports and logs.Packet FilteringThe packet filtering mechanism blocks unwanted traffic from entering/leaving your network.Time and DateThe Prestige allows you to get the current time and date from an external server when you turn on your Prestige. You can also set the time manually. Universal Plug and Play (UPnP)Using the standard TCP/IP protocol, the Prestige and other UPnP enabled devices can dynamically join a network, obtain an IP address and convey its capabilities to other devices on the network.PPPoEPPPoE facilitates the interaction of a host with an Internet modem to achieve access to high-speed data networks via a familiar "dial-up networking" user interface.PPTP EncapsulationPoint-to-Point Tunneling Protocol (PPTP) is a network protocol that enables secure transfer of data from a remote client to a private server, creating a Virtual Private Network (VPN) using a TCP/IP-based network.PPTP supports on-demand, multi-protocol and virtual private networking over public networks, such as the Internet. The Prestige supports one PPTP server connection at any given time.
P-320W User’s GuideChapter 1 Getting to Know Your Prestige 29Dynamic DNS SupportWith Dynamic DNS (Domain Name System) support, you can have a static hostname alias for a dynamic IP address, allowing the host to be more easily accessible from various locations on the Internet. You must register for this service with a Dynamic DNS service provider.IP MulticastDeliver IP packets to a specific group of hosts using IP multicast. IGMP (Internet Group Management Protocol) is the protocol used to support multicast groups. The latest version is version 2 (see RFC 2236); the Prestige supports both versions 1 and 2.SNMPSNMP (Simple Network Management Protocol) is a protocol used for exchanging management information between network devices. SNMP is a member of the TCP/IP protocol suite. Your Prestige supports SNMP agent functionality, which allows a manager station to manage and monitor the Prestige through the network. The Prestige supports SNMP version one (SNMPv1) and version two (SNMPv2).  Network Address Translation (NAT)Network Address Translation (NAT) allows the translation of an Internet protocol address used within one network (for example a private IP address used in a local network) to a different IP address known within another network (for example a public IP address used on the Internet).Traffic RedirectTraffic Redirect forwards WAN traffic to a backup gateway on the LAN when the Prestige cannot connect to the Internet, thus acting as an auxiliary backup when your regular WAN connection fails.Port ForwardingUse this feature to forward incoming service requests to a server on your local network. You may enter a single port number or a range of port numbers to be forwarded, and the local IP address of the desired server.DHCP (Dynamic Host Configuration Protocol)DHCP (Dynamic Host Configuration Protocol) allows the individual client computers to obtain the TCP/IP configuration at start-up from a centralized DHCP server. The Prestige has built-in DHCP server capability, enabled by default, which means it can assign IP addresses, an IP default gateway and DNS servers to all systems that support the DHCP client.
P-320W User’s Guide30  Chapter 1 Getting to Know Your PrestigeFull Network ManagementThe embedded web configurator is an all-platform web-based utility that allows you to easily access the Prestige’s management settings and configure the firewall. Most functions of the Prestige are also software configurable via the SMT (System Management Terminal) interface. The SMT is a menu-driven interface that you can access over a telnet connection. RoadRunner SupportIn addition to standard cable modem services, the Prestige supports Time Warner’s RoadRunner Service.Logging and Tracing• Built-in message logging and packet tracing.• Firewall logs.• Content filtering logs.Upgrade Prestige Firmware via LANThe firmware of the Prestige can be upgraded via the LAN (refer to Maintenance- F/W Upload Screen).Embedded FTP and TFTP ServersThe Prestige’s embedded FTP and TFTP Servers enable fast firmware upgrades as well as configuration file backups and restoration.1.2.3  Wireless FeaturesWireless LANThe Prestige supports the IEEE 802.11g standard, which is fully compatible with the IEEE 802.11b standard, meaning that you can have both IEEE 802.11b and IEEE 802.11g wireless clients in the same wireless network.Note: The Prestige may be prone to RF (Radio Frequency) interference from other 2.4 GHz devices such as microwave ovens, wireless phones, Bluetooth enabled devices, and other wireless LANs.Wi-Fi Protected AccessWi-Fi Protected Access (WPA) is a subset of the IEEE 802.11i security specification standard. Key differences between WPA and WEP are user authentication and improved data encryption.
P-320W User’s GuideChapter 1 Getting to Know Your Prestige 31Antenna The Prestige is equipped with a 2dBi fixed antenna to provide clear radio signal between the wireless stations and the access points. Wireless LAN MAC Address FilteringYour Prestige can check the MAC addresses of wireless stations against a list of allowed or denied MAC addresses.WEP EncryptionWEP (Wired Equivalent Privacy) encrypts data frames before transmitting over the wireless network to help keep network communications private.OTIST (One Touch Intelligent Security Technology)OTIST allows your Prestige to assign its ESSID and security settings (WEP or WPA-PSK) to the ZyXEL wireless adapters that support OTIST and are within transmission range. The ZyXEL wireless adapters must also have OTIST enabled.Association List With the association list, you can see the list of the wireless stations that are currently using the Prestige to access your wired network.1.3  Applications for the Prestige Here are some examples of what you can do with your Prestige. 1.3.1  Secure Broadband Internet Access via Cable or DSL Modem You can connect a cable modem, DSL or wireless modem to the Prestige for broadband Internet access via an Ethernet or a wireless port on the modem. The Prestige guarantees not only high speed Internet access, but secure internal network protection and traffic management as well. Figure 1   Secure Internet Access via Cable, DSL or Wireless Modem
P-320W User’s Guide32  Chapter 1 Getting to Know Your Prestige1.3.2  Wireless LAN ApplicationAdd a wireless LAN to your existing network without expensive network cables. Wireless stations can move freely anywhere in the coverage area and use resources on the wired network.Figure 2   Internet Access Application Example1.3.3  Front Panel LEDsFigure 3   Front PanelThe following table describes the LEDs.Table 1   Front Panel LEDs LED COLOR STATUS DESCRIPTIONPWR Green On The Prestige is receiving power and functioning properly. Blinking  The Prestige is performing testing.Red On Power to the Prestige is too low. None Off The Prestige is not receiving power.
P-320W User’s GuideChapter 1 Getting to Know Your Prestige 33LAN 1-4 Green On The Prestige has a successful 10Mb Ethernet connection. Blinking  The Prestige is sending/receiving data.Amber On The Prestige has a successful 100Mb Ethernet connection. Blinking  The Prestige is sending/receiving data.None Off The LAN is not connected.WAN Green On The Prestige has a successful 10Mb WAN connection.Blinking The Prestige is sending/receiving data.Amber On The Prestige has a successful 100Mb Ethernet connection.Blinking The Prestige is sending/receiving data.None Off The WAN connection is not ready, or has failed.WLAN Green On The Prestige is ready, but is not sending/receiving data through the wireless LAN. Blinking The Prestige is sending/receiving data through the wireless LAN.None Off The wireless LAN is not ready or has failed.OTIST Green  Blinking  OTIST is in progressOn OTIST is activated and the wireless security settings are given to a wireless client. The LED remains on unless the WLAN settings are changed.None Off OTIST is not activated or WLAN settings are manually configured after OTIST is successful.Table 1   Front Panel LEDs (continued)LED COLOR STATUS DESCRIPTION
P-320W User’s Guide34  Chapter 1 Getting to Know Your Prestige
P-320W User’s GuideChapter 2 Introducing the Web Configurator 35CHAPTER 2Introducing the Web ConfiguratorThis chapter describes how to access the Prestige web configurator and provides an overview of its screens.2.1  Web Configurator OverviewThe web configurator is an HTML-based management interface that allows easy Prestige setup and management via Internet browser. Use Internet Explorer 6.0 and later or Netscape Navigator 7.0 and later versions. The recommended screen resolution is 1024 by 768 pixels.In order to use the web configurator you need to allow:• Web browser pop-up windows from your device. Web pop-up blocking is enabled by default in Windows XP SP (Service Pack) 2.• JavaScripts (enabled by default).• Java permissions (enabled by default).See the Troubleshooting chapter to see how to make sure these functions are allowed in Internet Explorer.2.2  Accessing the Prestige Web Configurator1Make sure your Prestige hardware is properly connected and prepare your computer/computer network to connect to the Prestige (refer to the Quick Start Guide).2Launch your web browser.3Type "192.168.1.1" as the URL.4Type "1234" (default) as the password and click Login. In some versions, the default password appears automatically - if this is the case, click Login.
P-320W User’s Guide36  Chapter 2 Introducing the Web ConfiguratorFigure 4   Login5Select your language. click Apply.Figure 5   Language Selection6You should see a screen asking you to change your password (highly recommended) as shown next. Type a new password (and retype it to confirm) and click Apply or click Ignore.Figure 6   Change Password Screen
P-320W User’s GuideChapter 2 Introducing the Web Configurator 377Click Go to Wizard setup to do initial configuration withs the wizard, click Go to Advanced setup to configure advanced features, or click Exit to log out of the web configurator.Figure 7   Select the ModeNote: The management session automatically times out when the time period set in the Administrator Inactivity Timer field expires (default five minutes). Simply log back into the Prestige if this happens to you.2.3  Resetting the PrestigeIf you forget your password or cannot access the web configurator, you will need to use the RESET button at the back of the Prestige to reload the factory-default configuration file. This means that you will lose all configurations that you had previously and the password will be reset to “1234”.2.3.1  Procedure To Use The Reset Button1Make sure the PWR LED is on (not blinking).2Press the RESET button for ten seconds or until the PWR LED begins to blink and then release it. When the PWR LED begins to blink, the defaults have been restored and the Prestige restarts.2.4  Navigating the Prestige Web ConfiguratorThe following summarizes how to navigate the web configurator from the Status screen.
P-320W User’s Guide38  Chapter 2 Introducing the Web ConfiguratorFigure 8   Web Configurator Status ScreenThe following table describes the icons shown in the Status screen.Table 2   Status Screen Icon KeyICON DESCRIPTIONSelect a language from the drop-down list box to have the the web configurator  display in that language.Click this icon to open a web help page relevent to the screen you are currently configuring.Click this icon to open the setup wizard. The Prestige has a connection wizard and a bandwidth management wizard.Click this icon to view copyright and a link for related product information.Click this icon at any time to exit the web configurator.Select a number of seconds or None from the drop-down list box to refresh all screen statistics automatically at the end of every time interval or to not refresh the screen statistics.Click this button to refresh the status screen statistics.The following table describes the labels shown in the Status screen.Table 3   Web Configurator Status ScreenLABEL DESCRIPTIONDevice InformationSystem Name This is the System Name you enter in the Maintenance, System, General screen. It is for identification purposes.Firmware Version This is the firmware version and the date created.
P-320W User’s GuideChapter 2 Introducing the Web Configurator 392.4.1  Navigation PanelAfter you enter the password, use the sub-menus on the navigation panel to configure Prestige features. The navigation The following table describes the sub-menus.WAN Information- WAN Type This shows the encapsulation method (and service type) the Prestige is using.- IP Address This shows the WAN port’s IP address.- IP Subnet Mask This shows the WAN port’s subnet mask.- Gateway This shows the gateway IP address.- DNS This shows the IP address(es) of the DNS server(s).LAN Information- IP Address This shows the LAN port’s IP address.- IP Subnet Mask This shows the LAN port’s subnet mask.- DHCP This shows whether the Prestige acts as a DHCP server (Enabled) or not (Disabled).WLAN Information- Name(SSID) This shows a descriptive name used to identify the Prestige in the wireless LAN. - Channel This shows the channel number which the Prestige uses over the wireless LAN. - Security Mode This shows the level of wireless security the Prestige is using.System StatusSystem Uptime This is the total time the Prestige has been on.Current Date/Time This field displays your Prestige’s present date and time along with the difference from the Greenwich Mean Time (GMT) zone. The difference from GMT is based on the time zone. It is also adjusted for Daylight Saving Time if you set the Prestige to use it.SummaryDHCP Table Use this screen to view current DHCP client information.Association List Use this screen to view the wireless stations that are currently associated to the Prestige.Statistics Use this screen to view port status and packet specific statistics.Table 3   Web Configurator Status ScreenLABEL DESCRIPTIONTable 4   Screens SummaryLINK TAB FUNCTIONStatus This screen shows the Prestige’s general device and system status information. Use this screen to access the wizard, and summary statistics tables.Network
P-320W User’s Guide40  Chapter 2 Introducing the Web ConfiguratorWireless LAN General Use this screen to configure wireless LAN.OTIST This screen allows you to assign wireless clients the Prestige’s wireless security settings.MAC Filter Use the MAC filter screen to configure the Prestige to block access to devices or block the devices from accessing the Prestige.Advanced This screen allows you to configure other advanced WLAN properties.WAN Internet ConnectionThis screen allows you to configure ISP parameters, WAN IP address assignment and the WAN MAC address. Advanced Use this screen to configure DNS servers.Traffic Redirect Use this screen to configure your traffic redirect properties and parameters.LAN IP Use this screen to configure LAN settings.DHCP Server General Use this screen to enable the Prestige’s DHCP server and to have DNS servers assigned by the DHCP server.Static DHCP Use this screen to assign IP addresses on the LAN to specific individual computers based on their MAC addresses.Client List Use this screen to view current DHCP client information and to always assign an IP address to a MAC address (and host name). NAT General Use this screen to enable NAT.Port Forwarding Use this screen to configure servers behind the Prestige.Trigger Port Use this screen to change your Prestige’s port triggering settings.SecurityFirewall General Use this screen to activate/deactivate the firewall.Services This screen shows a summary of the firewall rules, and allows you to edit/add a firewall rule.ManagementStatic Route Static Route RulesUse this screen to configure IP static routes.Remote MGMT WWW Use this screen to configure through which interface(s) and from which IP address(es) users can use HTTP to manage the Prestige.SNMP Use this screen to configure your Prestige’s settings for Simple Network Management Protocol management.Security Use this screen to change your anti-probing settings.UPnP General Use this screen to enable UPnP on the Prestige. MaintenanceSystem General This screen contains administrative.Dynamic DNS Use this screen to set up dynamic DNS.Time Setting Use this screen to change your Prestige’s time and date.Logs View Log Use this screen to view the logs for the categories that you selected.Log Settings Use this screen to change your Prestige’s log settings.Table 4   Screens SummaryLINK TAB FUNCTION
P-320W User’s GuideChapter 2 Introducing the Web Configurator 412.4.2  Summary: DHCP TableDHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individual clients to obtain TCP/IP configuration at start-up from a server. You can configure the Prestige as a DHCP server or disable it. When configured as a server, the Prestige provides the TCP/IP configuration for the clients. If DHCP service is disabled, you must have another DHCP server on your LAN, or else the computer must be manually configured.Click the DHCP Table (Detail) hyperlink in the Status screen. Read-only information here relates to your DHCP status. The DHCP table shows current DHCP client information (including IP Address, Host Name and MAC Address) of all network clients using the Prestige’s DHCP server.Figure 9   Summary: DHCP TableThe following table describes the labels in this screen.Table 5   Summary: DHCP Table LABEL  DESCRIPTION#  This is the index number of the host computer. IP Address This field displays the IP address relative to the # field listed above.Host Name  This field displays the computer host name.MAC Address This field shows the MAC address of the computer with the name in the Host Name field. Every Ethernet device has a unique MAC (Media Access Control) address. The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters, for example, 00:A0:C5:00:00:02.Refresh Click Refresh to renew the screen. Tools Firmware Use this screen to upload firmware to your Prestige.Configuration Use this screen to backup and restore the configuration or reset the factory defaults to your Prestige. Restart This screen allows you to reboot the Prestige without turning the power off.Table 4   Screens SummaryLINK TAB FUNCTION
P-320W User’s Guide42  Chapter 2 Introducing the Web Configurator2.4.3  Summary: Association ListClick the Association List (Detail) hyperlink in the Status screen. View the wireless stations that are currently associated to the Prestige in the Association List screen.Figure 10   Summary: Association ListThe following table describes the labels in this screen.Table 6   Summary: Wireless Association ListLABEL DESCRIPTION#  This is the index number of an associated wireless station. MAC Address  This field displays the MAC address of an associated wireless station.Association Time This field displays the time a wireless station first associated with the Prestige.Refresh Click Refresh to redisplay the current screen. 2.4.4  Summary: Packet StatisticsClick the Statistics (Detail) hyperlink in the Status screen. Read-only information here includes packet specific statistics. Also provided are "system up time" and "poll interval(s)".  The Poll Interval(s) field is configurable.
P-320W User’s GuideChapter 2 Introducing the Web Configurator 43Figure 11   Summary: Packet StatisticsThe following table describes the labels in this screen.Table 7   Summary: Packet StatisticsLABEL DESCRIPTIONPort This is the WAN, LAN or WLAN port.TxPkts  This is the number of transmitted packets on this port.RxPkts  This is the number of received packets on this port.System Up Time This is the total time the Prestige has been on.Poll Interval(s) Enter the time interval for refreshing statistics in this field.Set Interval Click this button to apply the new poll interval you entered in the Poll Interval(s) field.Stop Click Stop to stop refreshing statistics, click Stop.
P-320W User’s Guide44  Chapter 2 Introducing the Web Configurator
P-320W User’s GuideChapter 3 Connection Wizard 45CHAPTER 3Connection WizardThis chapter provides information on the Wizard setup screens in the web configurator.3.1  Wizard SetupThe web configurator’s Wizard setup helps you configure your device to access the Internet. Refer to your ISP (Internet Service Provider) checklist in the Quick Start Guide to know what to enter in each field. Leave a field blank if you don’t have that information.1After you access the Prestige web configurator, click the Go to Wizard setup hyperlink.You can click the Go to Advanced setup hyperlink to skip this wizard setup and configure advanced features.Figure 12   Select a Mode2Read the on-screen information and click Next.
P-320W User’s Guide46  Chapter 3 Connection WizardFigure 13   Welcome to the Connection Wizard3.2  Connection Wizard: STEP 1: System InformationSystem Information contains administrative and system-related information.3.2.1  System NameSystem Name is for identification purposes. However, because some ISPs check this name you should enter your computer's  "Computer Name". • In Windows 95/98 click Start, Settings, Control Panel, Network. Click the Identification tab, note the entry for the Computer Name field and enter it as the System Name.• In Windows 2000, click Start, Settings and Control Panel and then double-click System. Click the Network Identification tab and then the Properties button. Note the entry for the Computer name field and enter it as the System Name.• In Windows XP, click Start, My Computer, View system information and then click the Computer Name tab. Note the entry in the Full computer name field and enter it as the Prestige System Name.3.2.2  Domain NameThe Domain Name entry is what is propagated to the DHCP clients on the LAN. If you leave this blank, the domain name obtained by DHCP from the ISP is used. While you must enter the host name (System Name) on each individual computer, the domain name can be assigned from the Prestige via DHCP.Click Next to configure the Prestige for Internet access.
P-320W User’s GuideChapter 3 Connection Wizard 47Figure 14   Connection Wizard: STEP 1: System InformationThe following table describes the labels in this screen.Table 8   Connection Wizard: STEP 1: System InformationLABEL DESCRIPTIONSystem Name System Name is a unique name to identify the Prestige in an Ethernet network. Enter a descriptive name. This name can be up to 30 alphanumeric characters long. Spaces are not allowed, but dashes "-" and underscores "_" are accepted. Domain Name Type the domain name (if you know it) here. If you leave this field blank, the ISP may assign a domain name via DHCP. The domain name entered by you is given priority over the ISP assigned domain name.Back Click Back to display the previous screen.Next Click Next to proceed to the next screen. Exit Click Exit to close the wizard screen without saving.3.3  Connection Wizard: STEP 2: Wireless LANSet up your wireless LAN using the following screen.
P-320W User’s Guide48  Chapter 3 Connection WizardFigure 15   Connection Wizard: STEP 2: Wireless LANThe following table describes the labels in this screen.Table 9   Connection Wizard: STEP 2:  Wireless LANLABEL DESCRIPTIONName(SSID) Enter a descriptive name (up to 32 printable 7-bit ASCII characters) for the wireless LAN. If you change this field on the Prestige, make sure all wireless stations use the same SSID in order to access the network. Channel SelectionThe range of radio frequencies used by IEEE 802.11b/g wireless devices is called a channel. Select a channel ID that is not already in use by a neighboring device.Security Select a Security level from the drop-down list box.Choose Auto (WPA-PSK with self-generated key) to use WPA-PSK security with a default Pre-Shared Key and only if your wireless clients support WPA-PSK. If you choose this option, skip directly to Section 3.3.3 on page 51.Choose None to have no wireless LAN security configured. If you do not enable any wireless security on your Prestige, your network is accessible to any wireless networking device that is within range. If you choose this option, skip directly to section 3.3.3.Choose Basic (WEP) security if you want to configure WEP Encryption parameters. If you choose this option, go directly to Section 3.3.1 on page 49.Choose Extend (WPA-PSK with customized key) security to configure a Pre-Shared Key. Choose this option only if your wireless clients support WPA-PSK or WPA2-PSK respectively. If you choose this option, skip directly to Section 3.3.2 on page 50. Back Click Back to display the previous screen.Next Click Next to proceed to the next screen. Exit Click Exit to close the wizard screen without saving.
P-320W User’s GuideChapter 3 Connection Wizard 49Note: The wireless stations and Prestige must use the same SSID, channel ID and WEP encryption key (if WEP is enabled), WPA-PSK (if WPA-PSK is enabled) for wireless communication.3.3.1  Basic(WEP) SecurityChoose Basic(WEP) to setup WEP Encryption parameters.Figure 16   Basic(WEP) SecurityThe following table describes the labels in this screen.Table 10   Basic(WEP) SecurityLABEL DESCRIPTIONPassphrase Type a Passphrase (up to 32 printable characters) and click Generate. The Prestige automatically generates four different WEP keys. Generate After you enter the passphrase, click Generate to have the Prestige generates four different WEP keys automatically.Clear Click Clear to discard the passphrase you configured in the Passphrase field and the WEP key(s) generated automatically or maually configured.WEP EncryptionSelect 64-bit WEP or 128-bit WEP to allow data encryption.ASCII Select this option in order to enter ASCII characters as the WEP keys. HEX Select this option to enter hexadecimal characters as the WEP keys.The preceding “0x” is entered automatically.
P-320W User’s Guide50  Chapter 3 Connection Wizard3.3.2  Extend(WPA-PSK) SecurityChoose Extend(WPA-PSK) security in the Wireless LAN setup screen to set up a Pre-Shared Key.Figure 17   Extend(WPA-PSK) SecurityKey 1 to Key 4  The WEP keys are used to encrypt data. Both the Prestige and the wireless stations must use the same WEP key for data transmission.If you chose 64-bit WEP, then enter any 5 ASCII characters or 10 hexadecimal characters ("0-9", "A-F").If you chose 128-bit WEP, then enter 13 ASCII characters or 26 hexadecimal characters   ("0-9", "A-F"). You must configure at least one key, only one key can be activated at any one time. The default key is key 1.Back Click Back to display the previous screen.Next Click Next to proceed to the next screen. Exit Click Exit to close the wizard screen without saving.Table 10   Basic(WEP) SecurityLABEL DESCRIPTION

Navigation menu