ZyXEL Communications Prestige 662HW Series Installation instructions

Prestige 662HW Series
802.11g Wireless ADSL 2+ 4 Port Security Gateway
Compact Guide
Version 3.40
May 2004

Prestige 662HW Series Compact Guide
2
Table of Contents
1 Introducing the Prestige..............................................................................................3
2 Hardware .....................................................................................................................4
2.1 Rear Panel Connections.........................................................................................4
2.2 The Front Panel LEDs ...........................................................................................5
3 Internet Access With Zero Configration ...................................................................7
4 Setting Up Your Computer’s IP Address ..................................................................8
4.1 Windows 95/98/Me.................................................................................................8
4.2 Windows 2000/NT/XP ..........................................................................................11
4.3 Checking/Updating Your Computer’s IP Address................................................12
4.4 Testing the Connection to the Prestige.................................................................12
5 Configuring Your Prestige........................................................................................13
5.1 Accessing Your Prestige Via Web Configurator ..................................................13
5.2 Common Screen Command Buttons .....................................................................15
5.3 Internet Access Using the Wizard ........................................................................15
5.4 Test Your Internet Connection .............................................................................21
6 Advanced Configuration...........................................................................................21
6.1 Wireless LAN Setup..............................................................................................21
6.2 Wireless LAN Security Setup................................................................................24
6.3 802.1x and WPA Overview...................................................................................26
6.4 Network Address Translation Overview...............................................................26
6.5 Configuring SUA Server ......................................................................................27
6.6 Firewall Overview................................................................................................29
6.7 Enabling the Firewall with Default Policy...........................................................30
6.8 Procedure for Configuring Firewall Rules ..........................................................31
7 Troubleshooting.........................................................................................................38

Prestige 662HW Series Compact Guide
3
1 Introducing the Prestige
The Prestige 662HW ADSL 2/2+ Gateway with 802.11g Wireless is the ideal all-in-one
device for small networks connecting to the Internet via ADSL. Key features of the
Prestige include NAT, 802.1x wireless LAN security, WPA (Wi-Fi Protected Access),
firewall and anti virus packet scan. See your User’s Guide for more details on all
Prestige features.
You should have an Internet account already set up and have been given most of the
following information.
INTERNET ACCOUNT INFORMATION
Your device’s WAN IP Address (if given): __________________
DNS Server IP Address (if given): Primary __________________,
Secondary _________________
Virtual Path Identifier (VPI): ____________
Virtual Channel Identifier (VCI): ____________
Multiplexing (VC-based or LLC-based): VC LLC
Encapsulation: (choose one below)
 RFC 1483
 ENET ENCAP Ethernet Encapsulation Gateway IP Address:
__________________
 PPPoA User Name: ____________ Password: ____________
 PPPoE Service Name: ____________
User Name: ____________ Password: ____________
Certifications
1. Go to www.zyxel.com
2. Select your product from the drop-down list box on the ZyXEL home page to go to
that product's page.
3. Select the certification you wish to view from this page.

Prestige 662HW Series Compact Guide
4
2 Hardware
2.1 Rear Panel Connections
Figure 1 Rear Panel Hardware Connections
Table 1 Rear Panel Description
LABEL DESCRIPTION
1. DSL Connect to a telephone jack using the included telephone wire.
2. LAN
1/DMZ..
4
Connect to a computer/external hub using an Ethernet cable.
3. POWER
12V DC
Connect to a power source using only the included power adaptor for
your region (see your User’s Guide).
After you’ve made the connections, connect the power adaptor to a power supply and
push in the power button to turn on the Prestige.
The PWR/SYS LED blinks while performing system testing and then turns steady on if
the testing is successful. A LAN LED turns on if a LAN port is properly connected.

Prestige 662HW Series Compact Guide
5
Table 1 Rear Panel Description
LABEL DESCRIPTION
CON/AUX
switch
CON/AUX
port
Only connect this port if you want to configure the Prestige using the
SMT via console port see your User's Guide for details.
Set this switch to the CON side to use the CON/AUX port as a console
port for local device configuration and management. Connect the RJ-45
end of the console cable to the console port of the Prestige and the
other end to a serial port (COM1, COM2 or other COM port) on your
computer. Your computer should have a terminal emulation
communications program (such as HyperTerminal) set to VT100
terminal emulation, no parity, 8 data bits, 1 stop bit, no flow control and
9600 bps port speed.
The console port is also an auxiliary WAN port. Push the CON/AUX
switch to AUX and connect the CON/AUX port to your modem or TA.
RESET You only need to use this button if you’ve forgotten the Prestige’s
password. It returns the Prestige to the factory defaults (password is
1234, LAN IP address 192.168.1.1 etc.; see your User’s Guide for
details).
2.2 The Front Panel LEDs
Figure 2 Front Panel
Refer to the following table for more detailed LED descriptions.
Table 2 Front Panel LED Description
LED COLOR STATUS DESCRIPTION
PWR/SYS Green On The Prestige is receiving power and functioning
properly.

Prestige 662HW Series Compact Guide
6
Table 2 Front Panel LED Description
LED COLOR STATUS DESCRIPTION
Blinking The Prestige is rebooting.
On Power to the Prestige is too low.Red
Blinking The Prestige is receiving power but not functioning
properly.
Off The system is not ready or has malfunctioned.
On The Prestige has a successful 10Mb Ethernet
connection.
Green
Blinking The Prestige is sending/receiving data.
On The Prestige has a successful 100Mb Ethernet
connection.
Amber
Blinking The Prestige is sending/receiving data.
LAN
1/DMZ-4
Off The LAN is not connected.
On The Prestige is ready, but is not sending/receiving
data through the wireless LAN.
Green
Blinking The Prestige is sending/receiving data through the
wireless LAN.
WLAN
Off The wireless LAN is not ready or has failed.
Fast
Blinking
The Prestige is sending/receiving non-PPP data.
Slow
Blinking
The Prestige is initializing the DSL line.
Green
On The system is ready, but is not sending/receiving
non-PPP data.
On The connection to the PPPoE server is up.Amber
Blinking The Prestige is sending/receiving PPP data.
DSL/ACT
Off The DSL link is down.

Prestige 662HW Series Compact Guide
7
Table 2 Front Panel LED Description
LED COLOR STATUS DESCRIPTION
CON/AUX Green On The CON/AUX switch is set to CON, the CON/AUX
port is connected to a management computer and
someone is logged into the Prestige.
Orange On The CON/AUX switch is set to AUX and the
CON/AUX port has an Internet connection through
a dial-up modem.
Blinking The CON/AUX switch is set to AUX and the
CON/AUX port is sending or receiving data through
a dial-up modem or ISDN TA.
Off The CON/AUX link is not ready, or has failed.
3 Internet Access With Zero
Configration
With the Prestige’s Zero Configuration, you can access the Internet easily. Simply
connect a computer to the Prestige and access the Internet without changing the network
settings (such as the IP address and subnet mask) of the computer.
Step 1. Make the hardware connections and turn on the Prestige (refer to the Rear
Panel Connections section).
Step 2. Wait until the DSL/ACT LED turns steady on. Launch your web browser
and navigate to a web site (for example, www.zyxel.com). The Prestige
automatically detects and configures your Internet connection. This may
take about two minutes.
Step 3. If you have a PPPoE or PPPoA connection type, a screen displays
prompting you to enter your Internet account username and/or password.
Enter the username, password and/or service name exactly as provided by
your ISP. Click Apply.

Prestige 662HW Series Compact Guide
8
Step 4. You should be able to access the Internet. Otherwise, follow the on-screen
instructions to solve the problem(s). Refer to the rest of this guide or the
User’s Guide to manually configure your Prestige for Internet connection
and other advanced settings.
4 Setting Up Your Computer’s IP
Address
Skip this section if your computer is already set up to accept a
dynamic IP address (this is the default setting for most new
computers) or has a static private IP address.
The Prestige is already set up to assign your computer an IP address. Use this section to
set up your computer to receive an IP address or assign it a static IP address in the
192.168.1.2 to 192.168.1.254 range with a subnet mask of 255.255.255.0. This is
necessary to ensure that your computer can communicate with your Prestige.
Your computer must have an Ethernet card and TCP/IP installed. TCP/IP should already
be installed on computers using Windows NT/2000/XP, Macintosh OS 7 and later
operating systems.
4.1 Windows 95/98/Me
1. Click Start, Settings, Control Panel and double-click the Network icon to
open the Network window.
2. The Network window Configuration tab displays a list of installed
components. You need a network adapter, the TCP/IP protocol and Client
for Microsoft Networks.

Prestige 662HW Series Compact Guide
9
3. In the Network window
Configuration tab, select your
network adapter's TCP/IP entry and
click Properties.
4. Click the IP Address tab.
-If your IP address is dynamic, select
Obtain an IP address automatically.
-If you have a static IP address, select
Specify an IP address and type your
information into the IP Address and
Subnet Mask fields.

Prestige 662HW Series Compact Guide
10
5. Click the DNS Configuration tab.
-If you do not know your DNS
information, select Disable DNS.
-If you know your DNS information, select
Enable DNS and type the information in
the fields below (you may not need to fill
them all in).
6. Click the Gateway tab.
-If you do not know your gateway’s IP
address, remove previously installed
gateways.
-If you have a gateway IP address, type it
in the New gateway field and click Add.
7. Click OK to save and close the TCP/IP Properties window.

Prestige 662HW Series Compact Guide
11
8. Click OK to close the Network window. Insert the Windows CD if prompted.
9. Turn on your Prestige and restart your computer when prompted.
Verifying Your Computer’s IP Address
1. Click Start and then Run.
2. In the Run window, type "winipcfg" and then click OK to open the IP
Configuration window.
3. Select your network adapter. You should see your computer's IP address, subnet
mask and default gateway.
4.2 Windows 2000/NT/XP
1. In Windows XP, click start, Control Panel. In Windows 2000/NT, click Start,
Settings, Control Panel.
2. In Windows XP, click Network Connections.
In Windows 2000/NT, click Network and Dial-up Connections.
3. Right-click Local Area Connection and then click Properties.
4. Select Internet Protocol (TCP/IP) (under the General tab in Win XP) and click
Properties.
5. The Internet Protocol TCP/IP Properties
screen opens (the General tab in
Windows XP).
- To have your computer assigned a
dynamic IP address, click Obtain an IP
address automatically.
If you know your DNS sever IP
address(es), type them in the Preferred
DNS server and/or Alternate DNS
server fields.
-To configure a static IP address, click
Use the following IP Address and fill in
the IP address (choose one
from192.168.1.2 to 192.168.1.254),
Subnet mask (255.255.255.0), and
Default gateway (192.168.1.1) fields.

Prestige 662HW Series Compact Guide
12
Then enter your DNS server IP address(es) in the Preferred DNS server and/or
Alternate DNS server fields.
If you have more than two DNS servers, click Advanced, the DNS tab and then
configure them using Add.
6. Click Advanced. Remove any previously
installed gateways in the IP Settings tab
and click OK to go back to the Internet
Protocol TCP/IP Properties screen.
7. Click OK to close the Internet Protocol
(TCP/IP) Properties window.
8. Click OK to close the Local Area
Connection Properties window.
4.3 Checking/Updating Your Computer’s IP Address
1. In the computer, click Start, (All) Programs, Accessories and then Command
Prompt.
2. In the Command Prompt window, type "ipconfig" and then press ENTER to verify
that your computer’s IP address is in the correct range (192.168.1.2 to
192.168.1.254) with subnet mask 255.255.255.0. This is necessary in order to
communicate with the Prestige.
Refer to your User’s Guide for detailed IP address configuration for other Windows and
Macintosh computer operating systems.
4.4 Testing the Connection to the Prestige
1. Click Start, (All) Programs, Accessories and then Command Prompt.
2. In the Command Prompt window, type "ping” followed by a space and the IP
address of the Prestige (192.168.1.1 is the default).
3. Press ENTER and the following screen displays.

Prestige 662HW Series Compact Guide
13
Your computer can now communicate with the Prestige using the LAN port.
5 Configuring Your Prestige
This Compact Guide shows you how to use the web
configurator only. See your User’s Guide for background
information on all Prestige features and SMT (System
Management Terminal) configuration.
5.1 Accessing Your Prestige Via Web Configurator
Step 1. Launch your web browser. Enter “192.168.1.1” as the web site address.
Figure 3 Entering Prestige LAN IP Address in Internet Explorer
Step 2. An Enter Network Password window displays. Enter the user name
(“admin” is the default), password (“1234” is the default). Click Login to
proceed to a screen asking you to change your password. Click Reset to
revert to the default password in the password field
Web site address.
C:\>ping 192.168.1.1
Pinging 192.168.1.1 with 32 bytes of data:
Reply from 192.168.1.1: bytes=32 time=10ms TTL=254
Reply from 192.168.1.1: bytes=32 time<10ms TTL=254
Reply from 192.168.1.1: bytes=32 time<10ms TTL=254
Reply from 192.168.1.1: bytes=32 time<10ms TTL=254
Ping statistics for 192.168.1.1:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 10ms, Average = 2ms

Prestige 662HW Series Compact Guide
14
Figure 4 Web Configurator: Password Screen
Step 3. It is highly recommended you change the default password! Enter a new
password, retype it to confirm and click Apply; alternatively click Ignore
to proceed to the main menu if you do not want to change the password
now.
Step 4. You should now see the web configurator Site Map screen.
 Click Wizard Setup to begin a series of screens to configure your Prestige for
the first time.
 Click a link under Advanced Setup to configure advanced Prestige features.
 Click a link under Maintenance to see Prestige performance statistics, upload
firmware and back up, restore or upload a configuration file.
 Click Logout in the navigation panel when you have finished a Prestige
management session.
Default password.

Prestige 662HW Series Compact Guide
15
Figure 5 Web Configurator: Site Map Screen
The Prestige automatically times out after five minutes of
inactivity. Simply log back into the Prestige if this happens to
you.
5.2 Common Screen Command Buttons
The following table shows common command buttons found on many web configurator
screens.
Back Click Back to return to the previous screen.
Apply Click Apply to save your changes back to the Prestige.
Reset/Cancel Click Reset or Cancel to begin configuring this screen afresh.
5.3 Internet Access Using the Wizard
Use the Wizard Setup screens to configure your system for Internet access settings and
fill in the fields with the information in the Internet Account Information table. Your ISP
may have already configured some of the fields in the wizard screens for you.
Step 1. In the Site Map screen click Wizard Setup to display the first wizard
screen.
WIZARD
Navigation panel
LOGOUT

Prestige 662HW Series Compact Guide
16
Figure 6 Wizard Screen 1
From the Mode drop-down list box, select
Routing (default) if your ISP allows
multiple computers to share an Internet
account. Otherwise select Bridge.
Select the encapsulation type your ISP
uses from the Encapsulation drop-down
list box. Choices vary depending on what
you select in the Mode field.
Select the multiplexing method used by
your ISP from the Multiplex drop-down
list box.
Enter the correct Virtual Path Identifier
(VPI) and Virtual Channel Identifier (VCI)
numbers supplied by your ISP in the VPI
and VCI fields. These fields may already
be configured.
Click Next.
Step 2. The second wizard screen varies depending on what mode and
encapsulation type you use. All screens shown are with routing mode.
Configure the fields and click Next to continue.

Prestige 662HW Series Compact Guide
17
Figure 7 Internet Connection with PPPoE
If your ISP provides the name of
your PPPoE service provider,
enter it in the Service Name
field.
Enter the user name and
password exactly as your ISP
assigned them.
Select Obtain an IP Address
Automatically if you have a
dynamic IP address; otherwise
select Static IP Address and
type your ISP assigned IP
address in the text box below.
Select Connect on Demand
when you don't want the
connection up all the time and
specify an idle time-out period (in
seconds) in the Max. Idle
Timeout field.
Select Nailed-Up Connection when you want your connection up all the time. The
Prestige will try to bring up the connection automatically if it is disconnected
From the Network Address Translation drop-down list box, select SUA Only, Full
Feature or None. Refer to the Network Address Translation section for more information.
Figure 8 Internet Connection with RFC 1483
Enter the IP address given by
your ISP in the IP Address field.
The IP Address
field is not
available for
bridge mode.
Refer to Figure 7 for description
of the Network Address
Translation field.

Prestige 662HW Series Compact Guide
18
Figure 9 Internet Connection with ENET
ENCAP
In the ENET ENCAP Gateway
field, enter the gateway IP
address given by your ISP.
Refer to Figure 7 for other field
descriptions.
Figure 10 Internet Connection with PPPoA
Refer to Figure 7 for field
descriptions.
The IP Address
and Network
Address
Translation fields
are not available
for bridge mode.

Prestige 662HW Series Compact Guide
19
Step 3. Verify the settings in the screen shown next. To change the LAN
information on the Prestige, click Change LAN Configurations.
Otherwise click Save Settings to save the configuration and skip to step 5.
Figure 11 Wizard Screen 3
Step 5. If you want to change your Prestige LAN settings, click Change LAN
Configuration to display the screen as shown next.

Prestige 662HW Series Compact Guide
20
Figure 12 Wizard: LAN Configuration
Enter the IP address of your Prestige in
dotted decimal notation in the LAN IP
Address field. For example,
192.168.1.1 (factory default).
If you change the
Prestige’s LAN IP
address, you must use
the new IP address if
you want to access the
web configurator
again.
Enter a subnet mask in dotted decimal
notation in the LAN Subnet Mask field.
From the DHCP Server drop-down list box, select On to allow your Prestige to assign IP
addresses, an IP default gateway and DNS servers to computer systems that support the
DHCP client. Select Off to disable DHCP server.
When DHCP server is used, set the following items:
Specify the first of the contiguous addresses in the IP address pool in the Client IP Pool
Starting Address field.
Specify the size or count of the IP address pool in the Size of Client IP Pool field.
Enter the IP address(es) of the DNS server(s) in the Primary DNS Server and/or
Secondary DNS Server fields.
Step 6. The Prestige automatically tests the connection to the computer(s)
connected to the LAN ports. To test the connection from the Prestige to the
ISP, click Start Diagnose. Otherwise click Return to Main Menu to go
back to the Site Map screen.