What are Device and Protocol filters?
P-2024 Support Notes
In ZyNOS, there are two filter groups: device filter and protocol filter. Generic filters belong to the device filter group while TCP/IP and IPX filters belong to the protocol filter group.
Why can't I configure device or protocol filters?
In ZyNOS, you cannot configure device filters and protocol filters in the same filter set.
Product FAQ
Will the P-2024 work with my Internet connection?
The P-2024 is designed to work with cable and ADSL modems. The P-2024 comes with an Ethernet port to connect to your computer so the P-2024 is placed between your computer and your modem. The P-2024 also supports PPPoE Internet connection type.
What do I need to use the P-2024?
Ethernet ports for LAN and WAN connection. You should connect the computer to the LAN port and the external modem to the WAN port. If the ISP uses PPPoE or Roadrunner Authentication, you need the user account to enter in the P-2024.
What is PPPoE?
PPPoE (Point-to-Point Protocol over Ethernet) is an IETF draft standard specifying how a computer interacts with a broadband modem (such as xDSL, cable, wireless, etc.) to access the high-speed data networks via a PPP dialer (such as Microsoft's Dial-Up Networking). PPPoE supports a broad range of applications and services including authentication, accounting, secure access and configuration management. Some ISPs still provides
PPPoE connection type today. Before configuring PPPoE in the P-2024, make sure your ISP supports PPPoE.
Does the P-2024 support PPPoE?
Yes. The P-2024 has already supported PPPoE since ZyNOS 2.50.
29
All contents copyright (c) 2006 ZyXEL Communications Corporation.
How do I know I am using PPPoE?
P-2024 Support Notes
PPPoE requires a user account to log into the service provider's server. If you need to configure a user name and password on your computer to connect to the ISP, you are probably using PPPoE. If you connect to the Internet when you turn on your computer, you probably are not using PPPoE. You can also check with your ISP or the information sheet given by the ISP. Choose PPPoE as the encapsulation type in the P-2024 if the ISP uses
PPPoE.
Why does my provider use PPPoE?
PPPoE emulates a familiar Dial-Up connection. It allows your ISP to provide services using their existing network configuration over the broadband connections. Besides, PPPoE supports a broad range of existing applications and services including authentication, accounting, secure access and configuration management.
Which Internet Applications can I use with the P-2024?
The P-2024 supports most common applications including MIRC, PPTP, ICQ, Cu-SeeMe, NetMeeting, IP/TV,
RealPlayer, VDOLive, Quake, QuakeII, QuakeIII, StarCraft, and Quick Time.
How can I configure the P-2024? a. Telnet remote management- Menu driven user interface for easy remote management b. Web browser- embedded web server for easy configuration
What network interface does the P-2024 support?
The P-2024 comes with a 10/100M Ethernet interface to connect to your LAN computer and the external cable/DSL modem.
What can I do with the P-2024?
You can connect to the Internet through the P-2024. This allows you to browse the web, send and receive e-mail, and download/share files. These are just a few of many benefits you get when you put the whole office on-line with the P-2024 Internet Access Sharing ATA.
Does the P-2024 support dynamic IP addressing?
Yes. You can set the P-2024 to use a static WAN IP address or set it to use a dynamic IP address from the ISP.
30
All contents copyright (c) 2006 ZyXEL Communications Corporation.
P-2024 Support Notes
What is the difference between the internal IP and the real IP from my ISP?
Internal IP addresses are also referred to as virtual IP addresses. They are a group of up to 255 IP addresses that are used and recognized internally on the local area network. They are not intended to be recognized on the
Internet. The real IP address (or the public IP address) you obtain from the ISP, instead, can be recognized or pinged by other real IP addresses. The P-2024 Internet Access Sharing ATA works like an intelligent ATA that routes network traffic between the virtual IP addresses and real IP addresses.
How does e-mail work through the P-2024?
It depends on what kind of IP address you have: Static or Dynamic. If your company has a domain name, it means that you have a static IP address. Suppose your company's e-mail address is [email protected]. Joe and Debbie will be able to send e-mail through the P-2024 using [email protected] and [email protected] respectively as their e-mail addresses. They will be able to retrieve their individual private and secure e-mail, if they have been assigned the proper access rights.
If your company does not have a domain name, it means that your ISP provides you with a dynamic IP address.
Suppose your company's e-mail address is [email protected]. Jane and John will be able to send e-mail through the P-2024 using "jane"<[email protected]> and "john"<[email protected]> respectively as their e-mail addresses. Again, they will be able to retrieve their individual private and secured e-mail, if they have been assigned the proper access rights.
What is the difference between the 'Standard' and 'RoadRunner' service?
The Road Runner service is commonly used in the USA and it requires the user to "log in" to the service provider network before Internet access is allowed. The most popular implementation is TAS (Toshiba
Authentication System) with a packet filtering firewall in the upstream direction. Before users are logged in, they can send ICMP packets (that is, ping) to a remote host through the Internet. However, all outgoing
(upstream) TCP and UDP packets to the Internet are blocked. Thus users can access the local local DNS/login server. Downstream packets (or packets from the Internet to the users) are not filtered or blocked.
With Standard service, no user login is required. This is commonly used with a cable modem. The P-2024 supports both Road Runner and Standard services in SMT menu 4 for connecting to the ISPs for Internet connection.
31
All contents copyright (c) 2006 ZyXEL Communications Corporation.
P-2024 Support Notes
Is it possible to access a server running behind SUA from the outside Internet? If possible, how?
Yes, it is possible because P-2024 delivers the packet to the local server by looking up to a SUA server table.
Therefore, to make a local server accessible to the outside users, the port number and the inside IP address of the server must be configured in SMT Menu 15 - SUA Server Setup .
What DHCP capability does the P-2024 support?
The P-2024 supports DHCP client on the WAN por. The P-2024's DHCP client allows it to get a public WAN
IP address from the ISP automatically if your ISP uses DHCP as a method to assign IP addresses.
How do I use the reset button? And which parameter will be reset by the reset button?
Use a sharp pointed object to press the reset button located near the power connector. Press and hold down the button for about five seconds to reset the device. All device settings, including the login password and IP address, will be reset to the factory defaults.
The default IP address is 192.168.5.1 and the default login password is 1234.
What network interface does the new P-2024 series support?
The new P-2024 series comes with an auto MDX/MDIX 10/100M Ethernet LAN port to connect to computer(s) or switch(es) on the LAN and one 10/100M Ethernet port to connect to the external cable/DSL modem on the
WAN.
Does the P-2024 support TFTP?
Yes. In addition to the direct console port connection, the P-2024 supports firmware upload and configuration file uploading/download using TFTP (Trivial File Transfer Protocol) over LAN.
Does the P-2024 support TFTP over WAN?
Although TFTP also works over the WAN, it is not recommended because of potential data corruption error while transferring files to the P-2024.
How can I upload data to outside Internet over the one-way cable?
32
All contents copyright (c) 2006 ZyXEL Communications Corporation.
P-2024 Support Notes
Set up an alternate path for connection to the Internet (for example, a dialup connection). You can still receive downstream packets from the Internet through the P-2024.
How fast is the DSL connection?
There are a number of factors that can affect the speed of your ADSL connection. The connection speed may depend on how fast your computer handles data, how fast data can be transmitted between your computer and the modem, how well the cable modem handles traffic during network congestion, or how much bandwidth is provided by the ISP, etc.
Depending on your computer, data process speed varies and few computers can achieve data processing rates at up to 30 Mbps.
Ethernet (10baseT) is the most popular cable modem interface standard for a computer. This automatically limits the speed of the connection to less than 10 Mbps even if the modem can receive at 30 Mbps. Most Local
Area Networks use 10baseT Ethernet, and although they are 10 Mbps networks, it takes a much longer than one second to transmit 10 megabits (or 1.25 megabytes) of data from one terminal to another.
Cable modems on the same node share the same bandwidth, which means that congestion is created when too many people try to access the Internet at the same time. In addition, when one user is downloading large graphic or video files, a significant portion of the shared bandwidth is used thus slowing down access for other users in the same neighborhood.
Most independent Internet Service Providers today connect to the Internet using a single 1.5 Mbps "T1" telephone line. All their subscribers share that 1.5 Mbps bandwidth. Cable companies connecting to the Internet backbone using a T1 limit their subscribers to an absolute maximum of 1.5 Mbps.
To create the appearance of faster network access, ISPs store or "cache" frequently requested web sites and
Usenet newsgroups on a server in the central office (CO). Storing data locally will remove some of the bottleneck at the backbone connection.
How fast can they go? Theoretically, they can receive data at speeds up to 30 Mbps. In the real world, with cost conscious cable companies running the systems, the speed will probably fall to about 1.5 Mbps.
My P-2024 cannot obtain a WAN IP address from the ISP to connect to the Internet, what should I do?
There are various ways your ISP controls user access and login. Once a user has successfully logged into, the
ISP will provide the WAN IP address to the user.
33
All contents copyright (c) 2006 ZyXEL Communications Corporation.
The following lists the methods ISP's authenticates users.
P-2024 Support Notes
1. Check if the modem's MAC address' is valid.
2. Check if the host name is correct. The host name is usually the text after the @ sign. For example,
@home
3. Check if the user ID is valid. This is commonly used with the RR-Toshiba Authentication and
RR-Manager Authentication services.
If you are not able to get a WAN IP address from your ISP, check which authentication method your ISP uses and configure the settings on the P-2024. The following sections describe how you can solve this problem.
1. If your ISP checks the MAC address
Some ISPs checks the user device (usually a computer) MAC address before assigning a WAN IP address. If the MAC address matches one on the ISP's system, the ISP sends an IP address to the user device and allows
Internet access. However, if the user connects another computer with a different MAC address directly to the modem, the ISP discards any DHCP discovery packets from the un-authorized MAC address and no IP address is assigned.
You can set the P-2024 to copy the MAC address of the computer whose MAC address is authorized by the ISP.
The P-2024 will use the copied MAC address as its WAN MAC address.
In SMT menu 2, enter the computer MAC address. The P-2024 will use the copied MAC address as its WAN
MAC address and update SMT menu 24.1.
MAC Address:
Assigned By= IP address attached on LAN
IP Address= 192.168.5.33
Field settings: a. Assigned By: Select IP address attached on LAN. b. IP Address: Enter the IP address of the computer whose MAC address is authorized by the ISP.
2. If your ISP checks the host name
34
All contents copyright (c) 2006 ZyXEL Communications Corporation.
P-2024 Support Notes
Some ISPs checks the host name information contained in the DHCP request sent by the user computer. A host name is text that comes after the @ sign. For example, in [email protected], the host name is “home.com".
If a technician from your ISP helped you set up Internet connection, he/she set the host name as the computer name on your computer (in the Networking screen). When you connect that computer to the P-2024, you must set the same name as the P-2024's system name in SMT menu 1.
Menu 1 - General Setup
System Name= zyxel
Field Setting:
• System Name: Enter the same name as the computer.
3. If your ISP checks the User ID
This authentication method is used mostly by ISPs providing RoadRunner services (for example, RR-TAS
(Toshiba Authentication Service) or RR-Manager authentication). You must configure the service type, username and password exactly as provided by your ISP in SMT menu 4.
Menu 4 - Internet Access Setup
ISP's Name= MyISP
Encapsulation= Ethernet
Service Type= RR-Toshiba
My Login= cso@zyxel
My Password= ********
Retype to Confirm= N/A
Login Server= 0.0.0.0
IP Address Assignment= Dynamic
IP Address= N/A
IP Subnet Mask= N/A
35
All contents copyright (c) 2006 ZyXEL Communications Corporation.
Gateway IP Address= N/A
Network Address Translation= SUA Only
P-2024 Support Notes
Field settings: a. Service Type: Select RR-TAS or RR-Manager authentication method used by your ISP. b. Login Server: Enter the IP address of the authentication server if you know it. Otherwise, leave this field to the default to have the P-2024 automatically obtain this information. c. My Login Name: Enter the login user name given to you by your ISP d. My Password: Enter the password associated with the login name. e. WAN IP Address Assignment: If the ISP did not assign you a fixed (or static) WAN IP address, select Dynamic, otherwise, select Static. f. IP Address, Subnet Mask, Gateway IP Address: If you select Static in the WAN IP Address
Assignment field, enter the IP address, subnet mask and gateway device IP address provided by your ISP.
What is DDNS?
The Dynamic DNS service allows you to map a dynamic IP address to a static hostname, allowing your computer to be more easily assessable from various locations on the Internet. To use the service, you must first apply an account from one of the several free DDNS service providers such as WWW.DYNDNS.ORG
.
Without DDNS, you have to tell your users the WAN IP address of your server for them to access. It is inconvenient for the users if this IP is dynamic which changes. With DDNS supported on the P-2024, you use a
DNS name (e.g., www.zyxel.com.tw
) supplied by the DDNS service provider to your server (e.g., Web server).
Outside users can always access the web server at www.zyxel.com.tw regardless of whether the WAN IP on the
P-2024 is dynamic or static.
When the ISP assigns the P-2024 a new IP address, the P-2024 updates this IP address to the DDNS server so that the server can update its IP-to-DNS entry. Once the IP-to-DNS table in the DDNS server is updated, the
DNS name for your web server (i.e., www.zyxel.com.tw) is still easily accessible.
When do I need the DDNS service?
When you want your internal server to be accessible by using DNS name rather than using a dynamic IP address, use the DDNS service. The DDNS server maps a dynamic IP address to a static hostname. Whenever
36
All contents copyright (c) 2006 ZyXEL Communications Corporation.
P-2024 Support Notes the ISP assigns you a new IP address, the P-2024 sends this IP address to the DDNS server to update its
IP-DNS table.
What DDNS servers does the P-2024 support?
Currently, the P-2024 supports WWW.DYNDNS.ORG
for DDNS service. This is the web site to which you apply the DNS and update the P-2024 WAN IP.
What is DDNS wildcard?
Some DDNS servers support the wildcard feature which allows the *.yourhost.dyndns.org hostname to be mapped to the same IP address as yourhost.dyndns.org. This feature is useful when there are multiple internal servers and you want users to be able to use addresses such as www.yourhost.dyndns.org and still reach your server.
Does the P-2024 support DDNS wildcard?
Yes. the P-2024 supports DDNS wildcard that WWW.DynDNS.ORG
supports. To use wildcard, simply enter yourhost.dyndns.org in the Host field in SMT menu 1.1.
All contents copyright (c) 2006 ZyXEL Communications Corporation.
37