ZyXEL Communications P-202H Plus v2 User manual

P-202H Plus v2
ISDN Internet Access Router
User’s Guide
Version 3.40
Edition 1
8/2006

P-202H Plus v2 User’s Guide
Copyright 2
Copyright
Copyright © 2006 by ZyXEL Communications Corporation.
The contents of this publication may not be reproduced in any part or as a whole, transcribed,
stored in a retrieval system, translated into any language, or transmitted in any form or by any
means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or
otherwise, without the prior written permission of ZyXEL Communications Corporation.
Published by ZyXEL Communications Corporation. All rights reserved.
Disclaimer
ZyXEL does not assume any liability arising out of the application or use of any products, or
software described herein. Neither does it convey any license under its patent rights nor the
patent rights of others. ZyXEL further reserves the right to make changes in any products
described herein without notice. This publication is subject to change without notice.
Trademarks
ZyNOS (ZyXEL Network Operating System) is a registered trademark of ZyXEL
Communications, Inc. Other trademarks mentioned in this publication are used for
identification purposes only and may be properties of their respective owners.

P-202H Plus v2 User’s Guide
3Certifications
Certifications
Federal Communications Commission (FCC) Interference Statement
The device complies with Part 15 of FCC rules. Operation is subject to the following two
conditions:
• This device may not cause harmful interference.
• This device must accept any interference received, including interference that may cause
undesired operations.
This device has been tested and found to comply with the limits for a Class B digital device
pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable
protection against harmful interference in a residential installation. This device generates,
uses, and can radiate radio frequency energy, and if not installed and used in accordance with
the instructions, may cause harmful interference to radio communications. However, there is
no guarantee that interference will not occur in a particular installation.
If this device does cause harmful interference to radio/television reception, which can be
determined by turning the device off and on, the user is encouraged to try to correct the
interference by one or more of the following measures:
1Reorient or relocate the receiving antenna.
2Increase the separation between the equipment and the receiver.
3Connect the equipment into an outlet on a circuit different from that to which the receiver
is connected.
4Consult the dealer or an experienced radio/TV technician for help.
Notices
Changes or modifications not expressly approved by the party responsible for compliance
could void the user's authority to operate the equipment.
This Class B digital apparatus complies with Canadian ICES-003.
Cet appareil numérique de la classe B est conforme à la norme NMB-003 du Canada.
Viewing Certifications
1Go to http://www.zyxel.com.
2Select your product from the drop-down list box on the ZyXEL home page to go to that
product's page.
3Select the certification you wish to view from this page.

P-202H Plus v2 User’s Guide
Safety Warnings 4
Safety Warnings
For your safety, be sure to read and follow all warning notices and instructions.
• Do NOT use this product near water, for example, in a wet basement or near a swimming
pool.
• Do NOT expose your device to dampness, dust or corrosive liquids.
• Do NOT store things on the device.
• Do NOT install, use, or service this device during a thunderstorm. There is a remote risk
of electric shock from lightning.
• Connect ONLY suitable accessories to the device.
• Do NOT open the device or unit. Opening or removing covers can expose you to
dangerous high voltage points or other risks. ONLY qualified service personnel should
service or disassemble this device. Please contact your vendor for further information.
• Make sure to connect the cables to the correct ports.
• Place connecting cables carefully so that no one will step on them or stumble over them.
• Always disconnect all cables from this device before servicing or disassembling.
• Use ONLY an appropriate power adaptor or cord for your device.
• Connect the power adaptor or cord to the right supply voltage (for example, 110V AC in
North America or 230V AC in Europe).
• Do NOT allow anything to rest on the power adaptor or cord and do NOT place the
product where anyone can walk on the power adaptor or cord.
• Do NOT use the device if the power adaptor or cord is damaged as it might cause
electrocution.
• If the power adaptor or cord is damaged, remove it from the power outlet.
• Do NOT attempt to repair the power adaptor or cord. Contact your local vendor to order a
new one.
• Do not use the device outside, and make sure all the connections are indoors. There is a
remote risk of electric shock from lightning.
• Use only No. 26 AWG (American Wire Gauge) or larger telecommunication line cord.
• If you wall mount your device, make sure that no electrical lines, gas or water pipes will
be damaged.
This product is recyclable. Dispose of it properly.

P-202H Plus v2 User’s Guide
5ZyXEL Limited Warranty
ZyXEL Limited Warranty
ZyXEL warrants to the original end user (purchaser) that this product is free from any defects
in materials or workmanship for a period of up to two years from the date of purchase. During
the warranty period, and upon proof of purchase, should the product have indications of failure
due to faulty workmanship and/or materials, ZyXEL will, at its discretion, repair or replace the
defective products or components without charge for either parts or labor, and to whatever
extent it shall deem necessary to restore the product or components to proper operating
condition. Any replacement will consist of a new or re-manufactured functionally equivalent
product of equal or higher value, and will be solely at the discretion of ZyXEL. This warranty
shall not apply if the product has been modified, misused, tampered with, damaged by an act
of God, or subjected to abnormal working conditions.
Note
Repair or replacement, as provided under this warranty, is the exclusive remedy of the
purchaser. This warranty is in lieu of all other warranties, express or implied, including any
implied warranty of merchantability or fitness for a particular use or purpose. ZyXEL shall in
no event be held liable for indirect or consequential damages of any kind to the purchaser.
To obtain the services of this warranty, contact ZyXEL's Service Center for your Return
Material Authorization number (RMA). Products must be returned Postage Prepaid. It is
recommended that the unit be insured when shipped. Any returned products without proof of
purchase or those with an out-dated warranty will be repaired or replaced (at the discretion of
ZyXEL) and the customer will be billed for parts and labor. All repaired or replaced products
will be shipped by ZyXEL to the corresponding return address, Postage Paid. This warranty
gives you specific legal rights, and you may also have other rights that vary from country to
country.
Registration
Register your product online to receive e-mail notices of firmware upgrades and information
at www.zyxel.com for global products, or at www.us.zyxel.com for North American products.

P-202H Plus v2 User’s Guide
Customer Support 6
Customer Support
Please have the following information ready when you contact customer support.
• Product model and serial number.
• Warranty Information.
• Date that you received your device.
• Brief description of the problem and the steps you took to solve it.
METHOD
LOCATION
SUPPORT E-MAIL TELEPHONE WEB SITE
REGULAR MAIL
SALES E-MAIL FAX FTP SITE
CORPORATE
HEADQUARTERS
(WORLDWIDE)
[email protected] [phone] www.zyxel.com
www.europe.zyxel.com
ZyXEL Communications Corp.
6 Innovation Road II
Science Park
Hsinchu 300
Ta i w a n
[email protected] [phone] ftp.zyxel.com
ftp.europe.zyxel.com
COSTA RICA
[email protected] [phone] www.zyxel.co.cr ZyXEL Costa Rica
Plaza Roble Escazú
Etapa El Patio, Tercer Piso
San José, Costa Rica
[email protected] [phone] ftp.zyxel.co.cr
CZECH REPUBLIC
[email protected] [phone] www.zyxel.cz ZyXEL Communications
Czech s.r.o.
Modranská 621
143 01 Praha 4 - Modrany
Ceská Republika
[email protected] [phone]
DENMARK
[email protected] [phone] www.zyxel.dk ZyXEL Communications A/S
Columbusvej
2860 Soeborg
Denmark
[email protected] [phone]
FINLAND
[email protected] [phone] www.zyxel.fi ZyXEL Communications Oy
Malminkaari 10
00700 Helsinki
Finland
[email protected] [phone]
FRANCE
[email protected] [phone] www.zyxel.fr ZyXEL France
1 rue des Vergers
Bat. 1 / C
69760 Limonest
France
[phone]
GERMANY
[email protected] [phone] www.zyxel.de ZyXEL Deutschland GmbH.
Adenauerstr. 20/A2 D-52146
Wuerselen
Germany
[email protected] [phone]
HUNGARY
[email protected] [phone] www.zyxel.hu ZyXEL Hungary
48, Zoldlomb Str.
H-1025, Budapest
Hungary
[email protected] [phone]
KAZAKHSTAN
http://zyxel.kz/support [phone] www.zyxel.kz ZyXEL Kazakhstan
43, Dostyk ave.,Office 414
Dostyk Business Centre
050010, Almaty
Republic of Kazakhstan
[email protected] [phone]
NORTH AMERICA
[email protected] 1-800-255-4101
[phone]
www.us.zyxel.com ZyXEL Communications Inc.
1130 N. Miller St.
Anaheim
CA 92806-2001
U.S.A.
[email protected] [phone] ftp.us.zyxel.com

P-202H Plus v2 User’s Guide
7Customer Support
+” is the (prefix) number you enter to make an international telephone call.
NORWAY
[email protected] [phone] www.zyxel.no ZyXEL Communications A/S
Nils Hansens vei 13
0667 Oslo
Norway
[email protected] [phone]
POLAND
[email protected] [phone] www.pl.zyxel.com ZyXEL Communications
ul. Okrzei 1A
03-715 Warszawa
Poland
[phone]
RUSSIA
http://zyxel.ru/support [phone] www.zyxel.ru ZyXEL Russia
Ostrovityanova 37a Str.
Moscow, 117279
Russia
[email protected] [phone]
SPAIN
[email protected] [phone] www.zyxel.es ZyXEL Communications
Arte, 21 5ª planta
28033 Madrid
Spain
[email protected] [phone]
SWEDEN
[email protected] [phone] www.zyxel.se ZyXEL Communications A/S
Sjöporten 4, 41764 Göteborg
Sweden
[email protected] [phone]
UKRAINE
[email protected] [phone] www.ua.zyxel.com ZyXEL Ukraine
13, Pimonenko Str.
Kiev, 04050
Ukraine
[email protected] [phone]
UNITED KINGDOM
[email protected] [phone]
08707 555779 (UK only)
www.zyxel.co.uk ZyXEL Communications UK
Ltd.,11 The Courtyard,
Eastern Road, Bracknell,
Berkshire, RG12 2XB,
United Kingdom (UK)
[email protected] [phone] ftp.zyxel.co.uk
METHOD
LOCATION
SUPPORT E-MAIL TELEPHONE WEB SITE
REGULAR MAIL
SALES E-MAIL FAX FTP SITE

P-202H Plus v2 User’s Guide
Table of Contents 8
Table of Contents
Copyright .................................................................................................................. 2
Certifications ............................................................................................................ 3
Safety Warnings ....................................................................................................... 4
ZyXEL Limited Warranty.......................................................................................... 5
Customer Support.................................................................................................... 6
Table of Contents ..................................................................................................... 8
List of Figures ........................................................................................................ 20
List of Tables .......................................................................................................... 26
Preface .................................................................................................................... 30
Chapter 1
Getting To Know Your ZyXEL Device .................................................................. 32
1.1 Introducing the ZyXEL Device ............................................................................32
1.2 Features .............................................................................................................32
1.3 Applications for the ZyXEL Device .....................................................................36
1.3.1 Internet Access .........................................................................................36
1.3.2 LAN-to-LAN Connection ...........................................................................36
1.3.3 Remote Access Server .............................................................................37
1.3.4 Secure Broadband Internet Access and VPN ...........................................37
1.4 Front Panel LEDs ...............................................................................................38
1.5 Hardware Connection ........................................................................................39
Chapter 2
Introducing the Web Configurator........................................................................ 40
2.1 Web Configurator Overview ...............................................................................40
2.2 Accessing the Web Configurator ........................................................................40
2.3 Resetting the ZyXEL Device ..............................................................................41
2.3.1 Using the Reset Button .............................................................................41
2.4 Navigating the Web Configurator .......................................................................42
2.4.1 Changing Login Password .......................................................................43

P-202H Plus v2 User’s Guide
9Table of Contents
Chapter 3
Wizard Setup .......................................................................................................... 46
3.1 Introduction ........................................................................................................46
3.1.1 MSN (Multiple Subscriber Number) and Subaddress ...............................46
3.1.2 PABX Outside Line Prefix .........................................................................46
3.2 Wizard Setup ......................................................................................................46
3.2.1 Test Your Internet Connection ..................................................................53
Chapter 4
LAN Setup............................................................................................................... 54
4.1 LAN Overview ...................................................................................................54
4.1.1 LANs, WANs and the ZyXEL Device ........................................................54
4.1.2 DHCP Setup .............................................................................................54
4.1.2.1 IP Pool Setup ..................................................................................55
4.1.3 DNS Server Address Assignment .............................................................55
4.2 LAN TCP/IP ........................................................................................................55
4.2.1 IP Address and Subnet Mask ...................................................................55
4.2.1.1 Private IP Addresses .......................................................................56
4.3 Configuring LAN Setup .....................................................................................56
Chapter 5
WAN Setup.............................................................................................................. 60
5.1 WAN Overview ..................................................................................................60
5.1.1 PPP Multilink .............................................................................................60
5.1.2 Bandwidth on Demand .............................................................................60
5.1.3 IP Address Assignment ............................................................................60
5.2 Internet Access Setup .......................................................................................60
Chapter 6
Network Address Translation (NAT) Screens ...................................................... 64
6.1 NAT Overview ...................................................................................................64
6.1.1 NAT Definitions .........................................................................................64
6.1.2 What NAT Does ........................................................................................65
6.1.3 How NAT Works .......................................................................................65
6.1.4 NAT Application ........................................................................................66
6.1.5 NAT Mapping Types .................................................................................66
6.2 SUA (Single User Account) Versus NAT ............................................................67
6.3 Selecting the NAT Mode ...................................................................................67
6.4 SUA Server ........................................................................................................68
6.4.1 Default Server IP Address ........................................................................69
6.4.2 Port Forwarding: Services and Port Numbers ..........................................69
6.4.3 Configuring Servers Behind NAT (Example) ............................................69
6.5 Configuring SUA Server ....................................................................................70

P-202H Plus v2 User’s Guide
Table of Contents 10
6.6 Configuring Address Mapping ...........................................................................71
6.6.1 Address Mapping Rule Edit .....................................................................72
Chapter 7
Dynamic DNS.......................................................................................................... 74
7.1 Dynamic DNS Overview ...................................................................................74
7.1.1 DYNDNS Wildcard ....................................................................................74
7.2 Configuring Dynamic DNS ................................................................................74
Chapter 8
Firewalls.................................................................................................................. 76
8.1 Firewall Overview ..............................................................................................76
8.2 Types of Firewalls ..............................................................................................76
8.2.1 Packet Filtering Firewalls ..........................................................................76
8.2.2 Application-level Firewalls ........................................................................76
8.2.3 Stateful Inspection Firewalls ....................................................................77
8.3 Introduction to ZyXEL’s Firewall .........................................................................77
8.3.1 Denial of Service Attacks ..........................................................................78
8.4 Denial of Service ................................................................................................78
8.4.1 Basics .......................................................................................................78
8.4.2 Types of DoS Attacks ...............................................................................79
8.4.2.1 ICMP Vulnerability ..........................................................................81
8.4.2.2 Illegal Commands (NetBIOS and SMTP) ........................................81
8.4.2.3 Traceroute .......................................................................................82
8.5 Stateful Inspection ..............................................................................................82
8.5.1 Stateful Inspection Process ......................................................................83
8.5.2 Stateful Inspection and the ZyXEL Device ................................................83
8.5.3 TCP Security .............................................................................................84
8.5.4 UDP/ICMP Security ..................................................................................84
8.5.5 Upper Layer Protocols ..............................................................................85
8.6 Guidelines for Enhancing Security with Your Firewall ........................................85
8.6.1 Security In General ...................................................................................85
8.7 Packet Filtering Vs Firewall ................................................................................86
8.7.1 Packet Filtering: ........................................................................................86
8.7.1.1 When To Use Filtering .....................................................................87
8.7.2 Firewall .....................................................................................................87
8.7.2.1 When To Use The Firewall ..............................................................87
Chapter 9
Firewall Configuration ........................................................................................... 88
9.1 Enabling the Firewall ..........................................................................................88
9.2 E-Mail .................................................................................................................88
9.3 Attack Alert .........................................................................................................90

P-202H Plus v2 User’s Guide
11 Table of Contents
9.3.1 Alerts .........................................................................................................90
9.3.2 Threshold Values ......................................................................................90
9.3.3 Half-Open Sessions ..................................................................................91
9.3.3.1 TCP Maximum Incomplete and Blocking Time ...............................91
9.3.4 Configuring Firewall Alert .........................................................................91
9.4 Rules Overview ..................................................................................................93
9.5 Rule Logic Overview .........................................................................................93
9.5.1 Rule Checklist ...........................................................................................94
9.5.2 Security Ramifications ..............................................................................94
9.5.3 Key Fields For Configuring Rules .............................................................94
9.5.3.1 Action ..............................................................................................94
9.5.3.2 Service ............................................................................................94
9.5.3.3 Source Address ...............................................................................95
9.5.3.4 Destination Address ........................................................................95
9.6 Connection Direction ..........................................................................................95
9.6.1 LAN to WAN Rules ...................................................................................95
9.6.2 WAN to LAN Rules ...................................................................................95
9.7 Firewall Rules Summary ...................................................................................95
9.7.1 Configuring Firewall Rules ......................................................................97
9.7.2 Source and Destination Addresses ..........................................................99
9.7.3 Customized Services .............................................................................100
9.7.4 Configuring A Customized Service .......................................................101
9.8 Timeout ............................................................................................................101
9.8.1 Factors Influencing Choices for Timeout Values .....................................102
9.9 Logs Screen .....................................................................................................103
9.10 Example Firewall Rule ...................................................................................104
9.11 Predefined Services .......................................................................................107
Chapter 10
Introduction to IPSec ........................................................................................... 110
10.1 VPN Overview ................................................................................................110
10.1.1 IPSec ....................................................................................................110
10.1.2 Security .................................................................................................110
10.1.3 Other Terminology ................................................................................ 110
10.1.3.1 Encryption ...................................................................................110
10.1.3.2 Data Confidentiality ..................................................................... 111
10.1.3.3 Data Integrity ............................................................................... 111
10.1.3.4 Data Origin Authentication .......................................................... 111
10.1.4 VPN Applications .................................................................................. 111
10.2 IPSec Architecture ......................................................................................... 111
10.2.1 IPSec Algorithms .................................................................................. 112
10.2.2 Key Management ..................................................................................112
10.3 Encapsulation .................................................................................................112

P-202H Plus v2 User’s Guide
Table of Contents 12
10.3.1 Transport Mode ....................................................................................113
10.3.2 Tunnel Mode .........................................................................................113
10.4 IPSec and NAT ...............................................................................................113
Chapter 11
VPN Screens ....................................................................................................... 116
11.1 VPN/IPSec Overview .....................................................................................116
11.2 IPSec Algorithms ............................................................................................116
11.2.1 AH (Authentication Header) Protocol ....................................................116
11.2.2 ESP (Encapsulating Security Payload) Protocol ...................................116
11.3 My IP Address ................................................................................................ 117
11.4 Secure Gateway IP Address ..........................................................................117
11.4.1 Dynamic Secure Gateway Address ......................................................118
11.5 VPN Summary Screen ...................................................................................118
11.6 Keep Alive ......................................................................................................120
11.7 ID Type and Content ......................................................................................120
11.7.1 ID Type and Content Examples ............................................................121
11.8 Pre-Shared Key ..............................................................................................122
11.9 VPN Rules ......................................................................................................122
11.10 IKE Phases ..................................................................................................126
11.10.1 Negotiation Mode ................................................................................127
11.10.2 Diffie-Hellman (DH) Key Groups .........................................................128
11.10.3 Perfect Forward Secrecy (PFS) ..........................................................128
11.11 Advanced IKE Settings .................................................................................128
11.12 Manual Key ..................................................................................................131
11.12.1 Security Parameter Index (SPI) ..........................................................131
11.13 Manual Key Screen ......................................................................................132
11.14 SA Monitor Screen .......................................................................................134
11.15 Global Setting Screen ..................................................................................135
11.16 Telecommuter VPN/IPSec Examples ...........................................................136
11.16.1 Telecommuters Sharing One VPN Rule Example ...............................136
11.16.2 Telecommuters Using Unique VPN Rules Example ...........................137
11.17 Logs ..............................................................................................................138
Chapter 12
NetCAPI................................................................................................................. 140
12.1 NetCAPI Overview .........................................................................................140
12.2 CAPI ...............................................................................................................140
12.2.1 ISDN-DCP ............................................................................................140
12.3 Configuring NetCAPI ......................................................................................141
12.3.1 Configuring the ZyXEL Device as a NetCAPI Server ...........................142
12.3.2 RVS-COM .............................................................................................142
12.3.3 Example of Installing a CAPI driver and Communication Software ......143

P-202H Plus v2 User’s Guide
13 Table of Contents
Chapter 13
Supplementary Phone Services.......................................................................... 144
13.1 Overview ........................................................................................................144
13.2 Setting Up Supplemental Phone Service .......................................................145
13.3 The Flash Key ................................................................................................145
13.4 Call Waiting ....................................................................................................145
13.4.1 How to Use Call Waiting .......................................................................145
13.4.1.1 Placing the Current Call on Hold .................................................145
13.4.1.2 Dropping the Current Call to Switch to an Incoming/Holding Call 145
13.5 Three Way Calling ..........................................................................................146
13.5.1 How to Use Three-Way Calling ............................................................146
13.5.1.1 To drop the last call added to the three-way call: ........................146
13.5.1.2 To drop yourself from the conference call: ..................................146
13.6 Call Transfer ...................................................................................................146
13.6.1 How to Use Call Transfer ......................................................................146
13.6.2 To Do a Blind Transfer: .........................................................................147
13.7 Call Forwarding ..............................................................................................147
13.8 Reminder Ring ...............................................................................................147
13.9 Multiple Subscriber Number (MSN) ...............................................................148
13.10 Using MSN ...................................................................................................148
13.11 Terminal Portability (Suspend/Resume) .......................................................148
13.11.1 How to Suspend/Resume a Phone Call: .............................................148
13.11.1.1 To suspend an active phone call ...............................................148
13.11.1.2 To resume your phone call ........................................................148
Chapter 14
Maintenance ......................................................................................................... 150
14.1 Maintenance Overview ...................................................................................150
14.2 System Status ................................................................................................150
14.2.1 System Statistics ...................................................................................152
14.3 DHCP Table Screen .......................................................................................153
14.4 Firmware Screen ...........................................................................................154
14.5 Budget Control ...............................................................................................157
Chapter 15
Introducing the SMT ............................................................................................ 158
15.1 SMT Introduction ............................................................................................158
15.2 Accessing the ZyXEL Device via Console Port ..............................................158
15.2.1 Initial Screen .........................................................................................158
15.2.2 Entering Password ................................................................................158
15.3 Procedure for SMT Configuration via Telnet ..................................................159
15.4 SMT Menu Overview ......................................................................................159
15.5 Navigating the SMT Interface .........................................................................161

P-202H Plus v2 User’s Guide
Table of Contents 14
15.5.1 System Management Terminal Interface Summary ..............................162
15.6 Changing the System Password ....................................................................163
Chapter 16
Menu 1 General Setup ......................................................................................... 166
16.1 General Setup ................................................................................................166
16.2 Procedure To Configure Menu 1 ....................................................................166
16.2.1 Procedure to Configure Dynamic DNS .................................................167
Chapter 17
Menu 2 ISDN Setup .............................................................................................. 170
17.1 ISDN Setup Overview ....................................................................................170
17.1.1 Supplementary Voice Services .............................................................170
17.1.2 ISDN Call Waiting .................................................................................170
17.1.3 PABX Outside Line Prefix .....................................................................170
17.1.4 Outgoing Calling Party Number ............................................................171
17.2 ISDN Setup ....................................................................................................171
17.2.1 ISDN Advanced Setup ..........................................................................173
17.2.2 Configuring Advanced Setup ................................................................174
17.3 NetCAPI .........................................................................................................175
17.3.1 Configuring NetCAPI ............................................................................175
Chapter 18
Menu 3 Ethernet Setup ........................................................................................ 178
18.1 Ethernet Setup ...............................................................................................178
18.1.1 General Ethernet Setup ........................................................................178
18.2 Ethernet TCP/IP and DHCP Server ...............................................................179
18.3 Configuring TCP/IP Ethernet Setup and DHCP .............................................179
18.3.1 IP Alias Setup .......................................................................................180
Chapter 19
Internet Access Setup ......................................................................................... 184
19.1 Introduction to Internet Access Setup ............................................................184
19.2 Internet Access Setup ....................................................................................184
Chapter 20
Remote Node Configuration ............................................................................... 186
20.1 Introduction to Remote Node Setup ...............................................................186
20.1.1 Minimum Toll Period .............................................................................186
20.2 Remote Node Profile Setup ...........................................................................186
20.3 Outgoing Authentication Protocol ...................................................................189
20.4 PPP Multilink ..................................................................................................190
20.5 Bandwidth on Demand ...................................................................................190

P-202H Plus v2 User’s Guide
15 Table of Contents
20.6 Editing PPP Options .......................................................................................191
20.7 LAN-to-LAN Application .................................................................................192
20.8 Configuring Network Layer Options ...............................................................193
20.9 Remote Node Filter ........................................................................................195
Chapter 21
Static Route Setup ............................................................................................... 198
21.1 Static Route .................................................................................................198
21.2 IP Static Route Setup .....................................................................................198
Chapter 22
Dial-in Setup ......................................................................................................... 202
22.1 Dial-in Users Overview ...................................................................................202
22.2 Default Dial-in User Setup ..............................................................................202
22.2.1 CLID Callback Support For Dial-In Users .............................................202
22.3 Setting Up Default Dial-in ...............................................................................203
22.3.1 Default Dial-in Filter ..............................................................................205
22.4 Callback Overview .........................................................................................205
22.5 Dial-In User Setup ..........................................................................................206
22.6 Telecommuting Application With Windows Example ......................................207
22.7 LAN-to-LAN Server Application Example .......................................................209
22.7.1 Configuring Callback in LAN-to-LAN Application ..................................209
22.7.2 Configuring With CLID in LAN-to-LAN Application ...............................211
Chapter 23
Network Address Translation (NAT) ................................................................... 214
23.1 Using NAT ......................................................................................................214
23.1.1 SUA (Single User Account) Versus NAT ..............................................214
23.2 Applying NAT .................................................................................................214
23.3 NAT Setup ......................................................................................................216
23.3.1 Address Mapping Sets ..........................................................................216
23.3.1.1 User-Defined Address Mapping Sets ..........................................218
23.3.1.2 Ordering Your Rules ....................................................................219
23.4 Configuring a Server behind NAT ..................................................................220
23.5 General NAT Examples ..................................................................................222
23.5.1 Example 1: Internet Access Only ..........................................................222
23.5.2 Example 2: Internet Access with an Inside Server ...............................223
23.5.3 Example 3: Multiple Public IP Addresses With Inside Servers .............223
23.5.4 Example 4: NAT Unfriendly Application Programs ...............................227
Chapter 24
Enabling the Firewall ........................................................................................... 230
24.1 Remote Management and the Firewall ..........................................................230

P-202H Plus v2 User’s Guide
Table of Contents 16
24.2 Access Methods .............................................................................................230
24.3 Enabling the Firewall ......................................................................................230
24.3.1 Viewing the Firewall Log .......................................................................231
24.3.2 Example E-mail Log ..............................................................................233
Chapter 25
Filter Configuration .............................................................................................. 234
25.1 Introduction to Filters ......................................................................................234
25.1.1 The Filter Structure of the ZyXEL Device .............................................235
25.2 Configuring a Filter Set ..................................................................................236
25.2.1 Filter Rules Summary Menus ...............................................................239
25.2.2 Configuring a Filter Rule .......................................................................240
25.2.3 Configuring a TCP/IP Filter Rule ..........................................................240
25.2.4 Configuring a Generic Filter Rule .........................................................243
25.3 Example Filter ................................................................................................245
25.4 Filter Types and NAT ......................................................................................247
25.5 Firewall Versus Filters ....................................................................................248
25.6 Applying a Filter ............................................................................................248
25.6.1 Applying LAN Filters .............................................................................248
25.6.2 Applying Remote Node Filters ..............................................................249
Chapter 26
SNMP Configuration ............................................................................................ 250
26.1 About SNMP ..................................................................................................250
26.2 Supported MIBs ............................................................................................251
26.3 SNMP Configuration ......................................................................................251
26.4 SNMP Traps ...................................................................................................252
Chapter 27
System Security ................................................................................................... 254
27.1 System Security .............................................................................................254
27.2 System Password ..........................................................................................254
27.3 RADIUS ..........................................................................................................254
27.4 Configuring External Server ...........................................................................255
Chapter 28
System Information and Diagnosis .................................................................... 258
28.1 System Status ................................................................................................258
28.2 System Information and Console Port Speed ................................................260
28.2.1 System Information ...............................................................................260
28.2.2 Console Port Speed ..............................................................................261
28.3 Log and Trace ................................................................................................262
28.3.1 Viewing Error Log .................................................................................262

P-202H Plus v2 User’s Guide
17 Table of Contents
28.3.2 Unix Syslog ...........................................................................................263
28.3.2.1 CDR ............................................................................................264
28.3.2.2 Packet triggered ..........................................................................265
28.3.2.3 Filter log .....................................................................................265
28.3.2.4 PPP log ......................................................................................266
28.3.2.5 POTS log .....................................................................................266
28.3.3 Accounting Server ................................................................................266
28.3.4 Call-Triggering Packet ..........................................................................267
28.4 Diagnostic ......................................................................................................268
Chapter 29
Firmware and Configuration File Maintenance ................................................. 270
29.1 Filename Conventions ...................................................................................270
29.2 Backup Configuration .....................................................................................271
29.2.1 Backup Configuration ...........................................................................271
29.2.2 Using the FTP Command from the Command Line ..............................272
29.2.3 Example of FTP Commands from the Command Line .........................272
29.2.4 GUI-based FTP Clients .........................................................................273
29.2.5 Remote Management Limitations .........................................................273
29.2.6 Backup Configuration Using TFTP .......................................................273
29.2.7 TFTP Command Example ....................................................................274
29.2.8 GUI-based TFTP Clients ......................................................................274
29.2.9 Backup Via Console Port ......................................................................275
29.3 Restore Configuration ....................................................................................276
29.3.1 Restore Using FTP ...............................................................................276
29.3.2 Restore Using FTP Session Example ..................................................277
29.3.3 Restore Via Console Port .....................................................................277
29.4 Uploading Firmware and Configuration Files .................................................278
29.4.1 Firmware File Upload ............................................................................278
29.4.2 Configuration File Upload .....................................................................279
29.4.3 FTP File Upload Command from the DOS Prompt Example ................280
29.4.4 FTP Session Example of Firmware File Upload ...................................280
29.4.5 TFTP File Upload ..................................................................................280
29.4.6 TFTP Upload Command Example ........................................................281
29.4.7 Uploading Via Console Port ..................................................................281
29.4.8 Uploading Firmware File Via Console Port ...........................................281
29.4.9 Example Xmodem Firmware Upload Using HyperTerminal ..................282
29.4.10 Uploading Configuration File Via Console Port ..................................282
29.4.11 Example Xmodem Configuration Upload Using HyperTerminal .........283
Chapter 30
System Maintenance............................................................................................ 284
30.1 Command Interpreter Mode ...........................................................................284

P-202H Plus v2 User’s Guide
Table of Contents 18
30.1.1 Command Syntax .................................................................................284
30.1.2 Command Usage ..................................................................................285
30.2 Call Control Support .......................................................................................285
30.2.1 Call Control Parameters .......................................................................286
30.2.2 Black List ..............................................................................................286
30.2.3 Budget Management ............................................................................287
30.2.4 Call History ...........................................................................................288
30.3 Time and Date Setting ....................................................................................289
30.3.1 Resetting the Time ................................................................................290
Chapter 31
Remote Management ........................................................................................... 292
31.1 Remote Management .....................................................................................292
31.1.1 Remote Management Limitations .........................................................293
31.2 Remote Management and NAT ......................................................................293
31.3 System Timeout .............................................................................................294
Chapter 32
Call Scheduling .................................................................................................... 296
32.1 Introduction to Call Scheduling ......................................................................296
Chapter 33
VPN/IPSec Setup .................................................................................................. 300
33.1 VPN/IPSec Overview .....................................................................................300
33.2 IPSec Summary Screen .................................................................................301
33.3 IPSec Setup ...................................................................................................303
33.4 IKE Setup .......................................................................................................306
33.5 Manual Setup .................................................................................................308
33.5.1 Active Protocol ......................................................................................308
Chapter 34
SA Monitor ............................................................................................................ 312
34.1 SA Monitor Overview .....................................................................................312
34.2 Using SA Monitor ...........................................................................................312
Chapter 35
IPSec Log.............................................................................................................. 314
35.1 IPSec Logs .....................................................................................................314
Chapter 36
Troubleshooting ................................................................................................... 318
36.1 Problems Starting Up the ZyXEL Device .......................................................318
36.2 Problems with the LAN ...................................................................................318

P-202H Plus v2 User’s Guide
19 Table of Contents
36.3 Problems with the ISDN Line .........................................................................319
36.4 Problems with Remote User Dial-in ...............................................................319
36.5 Problems Accessing the ZyXEL Device .........................................................320
Appendix A
Product Specifications ....................................................................................... 322
Appendix B
Wall-mounting Instructions................................................................................. 324
Appendix C
Log Descriptions.................................................................................................. 326
Appendix D
Setting up Your Computer’s IP Address............................................................ 338
Windows 95/98/Me................................................................................................. 338
Windows 2000/NT/XP ............................................................................................ 341
Macintosh OS 8/9................................................................................................... 346
Macintosh OS X ..................................................................................................... 348
Linux....................................................................................................................... 349
36.5.1 Verifying Settings ..................................................................................353
Appendix E
IP Addresses and Subnetting ............................................................................. 354
Introduction to IP Addresses .................................................................................. 354
Subnet Masks ........................................................................................................ 356
Subnetting .............................................................................................................. 356
Example: Two Subnets .......................................................................................... 357
Example: Four Subnets.......................................................................................... 358
Example Eight Subnets.......................................................................................... 359
Subnetting With Class A and Class B Networks. ................................................... 360
Appendix F
Pop-up Windows, JavaScripts and Java Permissions ..................................... 362
Internet Explorer Pop-up Blockers ......................................................................... 362
JavaScripts............................................................................................................. 365
Index...................................................................................................................... 370