P-660 Series Support Notes (For P-660R/H/HW-T1/T3/T7 P-660H-D1/D3/D7) Version3.40 Sep. 2005 P-660 series Support Notes INDEX...........................................................................................................................5 ZyNOS FAQ .............................................................................................................5 1. What is ZyNOS?................................................................................................5 2. How do I access the Prestige SMT menu?.........................................................5 3. What is the default console port baud rate? Moreover, how do I change it?.....5 4. How do I update the firmware and configuration file?......................................5 5. How do I upload the ZyNOS firmware code via console? ................................5 6. How do I upgrade/backup the ZyNOS firmware by using TFTP client program via LAN?................................................................................................................6 7. How do I upload ROMFILE via console port?..................................................6 8. How do I restore SMT configurations by using TFTP client program via LAN?......................................................................................................................6 9. What should I do if I forget the system password?............................................6 10. How to use the Reset button?...........................................................................7 11.What is SUA? When should I use SUA?..........................................................7 12. What is the difference between SUA and Multi-NAT?...................................7 13. Is it possible to access a server running behind SUA from the outside Internet? If possible, how? ....................................................................................................8 14. When do I need Multi-NAT?...........................................................................8 15. What IP/Port mapping does Multi-NAT support?...........................................8 16. How many network users can the SUA/NAT support?...................................9 17. What are Device filters and Protocol filters?.................................................10 18. Why can't I configure device filters or protocol filters? ................................10 19. How can I protect against IP spoofing attacks?.............................................10 General FAQ ..........................................................................................................12 1. How can I manage P-660? ...............................................................................12 2. What is the default user name and password to loging web configurator? .....12 3. How do I know the P-660's WAN IP address assigned by the ISP? ...............12 4. What is the micro filter or splitter used for?....................................................12 5. The P-660 supports Bridge and Router mode, what's the difference between them ?...................................................................................................................12 6. How do I know I am using PPPoE?.................................................................13 7. Why does my provider use PPPoE?.................................................................13 8. What is DDNS?................................................................................................13 9. When do I need DDNS service? ......................................................................13 10. What is DDNS wildcard? Does the P-660 support DDNS wildcard? ...........14 11. Can the P-660's SUA handle IPSec packets sent by the IPSec gateway?......14 12. How do I setup my P-660 for routing IPSec packets over SUA?..................14 13. What is Traffic Shaping? ...............................................................................14 14. What do the parameters (PCR, SCR, MBS) mean?.......................................15 15.Why do we perform traffic shaping in the P-660 ?.........................................15 ADSL FAQ .............................................................................................................16 1. How does ADSL compare to Cable modems? ................................................16 2. What is the expected throughput?....................................................................16 1 All contents copyright © 2005 ZyXEL Communications Corporation. P-660 series Support Notes 3. What is the micro filter used for? ....................................................................16 4. How do I know the ADSL line is up?..............................................................16 5. How does the P-660 work on a noisy ADSL? ...............................................16 6. Does the VC-based multiplexing perform better than the LLC-based multiplexing? .......................................................................................................17 7. How do I know the details of my ADSL line statistics?..................................17 8.What are the possible reasons when the ADSL link is down? .........................17 9.What are the signaling pins of the ADSL connector?.......................................17 Firewall FAQ (For P-660 H/HW Only) ...............................................................18 General.................................................................................................................18 1. What is a network firewall? .............................................................18 2. What makes P-660 secure? ..............................................................18 3. What are the basic types of firewalls? .............................................18 4. What kind of firewall is the P-660? .................................................19 5. Why do you need a firewall when your router has packet filtering and NAT built-in?................................................................................19 6. What is Denials of Service (DoS) attack?........................................19 7. What is Ping of Death attack?..........................................................20 8. What is Teardrop attack? .................................................................20 9. What is SYN Flood attack?..............................................................20 10. What is LAND attack?...................................................................20 11 What is Brute-force attack? ............................................................20 12. What is IP Spoofing attack?...........................................................21 13. What are the default ACL firewall rules in P-660? .......................21 Configuration .......................................................................................................21 1. How do I configure the firewall?.....................................................21 2. How do I prevent others from configuring my firewall?.................21 3. Can I use a browser to configure my P-660?...................................21 4. Why can't I configure my router using Telnet over WAN?.............21 5. Why can't I upload the firmware and configuration file using FTP over WAN? ..........................................................................................22 Log and Alert .......................................................................................................22 1. When does the P-660 generate the firewall log? .............................22 2. What does the log show to us?.........................................................23 3. How do I view the firewall log? ......................................................23 4. When does the P-660 generate the firewall alert? ...........................24 5. What does the alert show to us?.......................................................24 6. What is the difference between the log and alert? ...........................24 General Application Notes ....................................................................................25 1. Internet Access Using P-660 under Bridge mode............................................25 Set up your workstation .......................................................................25 Setup your P-660 under bridge mode ..................................................26 2. Internet Access Using P-660 under Router mode............................................28 Set up your workstation .......................................................................28 2 All contents copyright © 2005 ZyXEL Communications Corporation. P-660 series Support Notes Set up your P-660.................................................................................29 3. Setup the P-660 as a DHCP Relay...................................................................31 4. SUA Notes .......................................................................................................32 Tested SUA/NAT Applications ...........................................................32 Configure an Internal Server Behind SUA ..........................................36 Configure a PPTP server behind SUA.................................................37 5. Using Multi-NAT.............................................................................................41 What is Multi-NAT?............................................................................41 NAT Mapping