ZyXEL Communications Prestige 661H Series User manual

Prestige 661H Series
ADSL 2+ Security Gateway
Prestige 661HW Series
802.11g Wireless ADSL 2+ Gateway
Quick Start Guide
Version 3.40
3/2005

Prestige 661H/HW Series Quick Start Guide
2
Overview
The Prestige 661H (P-661H) and Prestige 661HW (P-661HW) are ADSL routers with a built-in switch. The
Prestige 661HW also has IEEE 802.11g wireless capability. All wireless features pertain to the P-661HW series
only.
You may need your Internet access information.
See your User’s Guide for background information on all features.
This guide is divided into the following sections.
1 Hardware Connections
You need the following before you start.
If you prefer to see a multi-media animation of how to make hardware connections, see the included CD.
1Hardware Connections
2Configuration for Internet Access
3Wireless Configuration (P-661HW)
4NAT
5Firewall
6TMSS
7Troubleshooting
Prestige Computer(s) Ethernet Cable Telephone Cable Power Adaptor

Prestige 661H/HW Series Quick Start Guide
3
1DSL: Connect the Prestige to a telephone jack using a telephone wire.
2LAN: Use an Ethernet cable to connect a computer to a LAN 10/100M port for initial configuration and/or
Internet access.
3POWER: Use the included power adaptor to connect the POWER socket to an appropriate power source
(see the User’s Guide for power adaptors specifications by region).
After you’ve made the connections, push in the power button to turn on the Prestige. Look at the front panel
LEDs. The PWR/SYS LED blinks while performing system testing. The PWR/SYS and/or WLAN LEDs then
turn steady on if the testing is successful. The LAN LEDs turn on if the (corresponding) LAN ports are properly
connected.
2 Configuration for Internet Access
You may configure the Prestige for Internet access in any one of these ways:
• Configuration Genie
• Zero Configuration
•Web Configurator Internet Access Wizard

Prestige 661H/HW Series Quick Start Guide
4
2.1 Configuration Genie
From the included CD, click “Multimedia Auto Provisioner” (the installation and configuration assistant) and
then click “Installation Tutorial”. After you’ve viewed the tutorial, click “Configuration Genie” at the end of the
installation tutorial or from “Multimedia Auto Provisioner” in the CD.
2.2 Zero Configuration
Launch your web browser and
navigate to any web site (for
example, www.zyxel.com). The
Prestige automatically detects
and configures your Internet
connection. This may take about
two minutes.
If you have a PPPoE or PPPoA
connection, a screen displays
prompting you to enter your
Internet account information. Enter the username, password and/or service name exactly as provided. Click
Apply.
Note: Configuration Genie or Zero Configuration are only able to configure the device automatically for
Internet access if you are using PPPoE, PPPoA or ENET ENCAP encapsulation with a
dynamically-assigned IP address from your ISP.
If you’re not using these Internet access settings, then use the Web Configurator Internet
Access Wizard to manually configure the device.
2.3 Accessing the Web Configurator
1Launch your web browser. Enter
“192.168.1.1” as the web site address.

Prestige 661H/HW Series Quick Start Guide
5
Note: If you do not see the next screen, then please read Section 7.1 on page 12
4In the MAIN MENU screen, click WIZARD SETUP.
2.3.1 Internet Access Setup
Note: Enter the Internet access information given to you by your ISP exactly in each wizard screen and
then click Next to continue or click Back to return to the previous screen.
Screen information is not saved when you click Back.
2Click Login. 3Type a new
password
(retype it to
confirm) and
click Apply.
Otherwise click
Ignore. You
then see the
main web
configurator
screen

Prestige 661H/HW Series Quick Start Guide
6
1From the Mode drop-down list box, select Routing (default) if you want to use routing features such as
NAT.
2The next wizard screen varies depending on the Encapsulation you chose in the first wizard screen. From
the Network Address Translation drop-down list box, select SUA Only if you have one public IP address,
Full Feature if you have more than one public IP address (for translation) or None to disable NAT.
•PPPoE.
Select Connect
on Demand
when you don't
want the
connection up
all the time and
specify an idle
time-out period
(in seconds) in
the Max. Idle
Timeout field.
Select Nailed-
Up Connection when you want your connection up all
the time. The Prestige will try to bring up the
connection automatically if it is disconnected.
•ENET
ENCAP

Prestige 661H/HW Series Quick Start Guide
7
Note: You will only see the next two screens in Routing mode.
3 Wireless Configuration (P-661HW series only)
WPA-PSK encryption is preferred to WEP because it has user authentication and improved data encryption. If
you don’t have WPA-capable wireless clients, configure WEP encryption.
• PPPoA • RFC1483
3Verify your
LAN and
WAN
settings.
To change the
LAN settings,
click Change
LAN
Configuration;
otherwise click
Save Settings to
save the
configuration
and go to the
final wizard
screen.If you
change the
Prestige’s LAN IP address, you must use the new IP
address if you want to access the web configurator
again.
4Click Save Settings in the screen shown in step
3 to go to the final wizard screen.The Prestige
automatically tests the connection to the
computer(s) connected to the LAN ports. To test
the connection from the Prestige to the ISP, click
Start Diagnose. Otherwise click Return to Main
Menu to go back to the main screen.

Prestige 661H/HW Series Quick Start Guide
8
Note: Wireless clients and the Prestige must use the same SSID, channel ID, WEP or WPA-PSK key (if
enabled).
1Click the Wireless LAN link under
Advanced Setup.
2Click 802.1x/WPA.
Select
Authentication
Required, then
select WPA-
PSK and then
type a Pre-
shared Key.
3Click Advanced Setup, Wireless LAN, Wireless. In the ESSID field, enter up to 32 printable characters to
uniquely identify the Prestige. If you didn’t configure WPA-PSK, configure WEP in this screen (not visible
if you’ve configured WPA-PSK).

Prestige 661H/HW Series Quick Start Guide
9
3.1 OTIST
Configure this screen only if you have OTIST-aware wireless clients. OTIST (One-Touch Intelligent Security
Technology) allows you to transfer your Prestige’s SSID and WEP or WPA-PSK security settings to wireless
clients that support OTIST and are within transmission range. You can also choose to have OTIST generate
a WPA-PSK key for you if you didn’t configure one manually.
Click Advanced Setup, Wireless LAN and then click OTIST. To change the Setup key enter up to eight
printable characters. To have OTIST automatically generate a WPA-PSK key select the Yes check box. If you
manually configured a WEP key or a WPA-PSK key and you also selected this check box, then the key you
manually configured is used.
Note: The AP and wireless client(s) MUST use
the same Setup key.
In each wireless client ZyXEL utility, click the Adapter tab. Select the OTIST check box, enter the same
Setup Key as your Prestige’s and click Save.
Note: You must click Start in the Prestige OTIST web configurator screen and in the wireless client(s)
Adapter screen all within three minutes (at the time or writing). You can start OTIST in the
wireless clients and Prestige in any order but they must all be within range and with OTIST
enabled.

Prestige 661H/HW Series Quick Start Guide
10
4 NAT
NAT (Network Address Translation - NAT, RFC 1631) means the translation of an IP address in one network to
a different IP address in another. For example, you could translate one public IP address to multiple private IP
addresses on your LAN (SUA Only).
5 Firewall
The firewall is already enabled by default on the Prestige.
Click
Advanced
Setup and
then NAT to
open the
NAT-Mode
screen.
Select SUA
Only if you
have one public IP address and Full Feature if
you have multiple public IP addresses (for
address translation).
If you have
servers on your
LAN, configure
an SUA server
set to have
them visible to
the outside.
From the NAT -
Mode screen
click Edit
Details and fill
in the fields as
shown.
Click Advanced Setup and
then Firewall to open the
firewall screen. The firewall
protects your LAN from
attacks from the Internet. No
traffic can enter your LAN
unless a request was
generated on the LAN first.
Click Default
Policy to see
rule direction
information.
You can also
disable the
firewall here
if you want.