|
|
F. E. C. O.
|
FECO: |
COMMS#72 |
|
PRODUCT: |
ZyXEL Prestige 662HW
ADSL router |
|
PRODUCT WEB SITE: |
|
|
RELEASE DATE: |
|
|
ESTIMATED MAN HOURS: |
|
|
CLASS OF CHANGE: |
INFORMATIONAL |
|
REASON FOR CHANGE: |
|
|
RELATED FECO/AB: |
|
ZyXEL Prestige 662HW ADSL Router
Throughout this FECO a SPACE in a string is shown by the symbol Ñ and all other spaces are purely cosmetic. A carriage return is shown either by the symbol ¿ or <CR>
The ZyXEL Prestige 662HW ADSL router is BT
compatible (with a standard ADSL connection) and can be used to connect to
FastFreenet. The router is a replacement for the 653HWI but unlike the 653HWI
it does not have an ISDN backup facility.
A Laptop with
network capability and a Web Browser configured
Configuration details for the ADSL / VPN (if required)
Firmware Updates for the router (if required) available from Tech Services / TAC / ftp://ftp.zyxel.co.uk/P662HW-61/firmware/
4. Installation
Connect the power supply and the ADSL cable to the router. Attach the network cable from the laptop to either ports 2,3,4 on the back of the router .
The ZyXEL Prestige Router has a default local IP address of 192.168.1.1 and has a DHCP Scope setup on the local LAN. If the Router does not have its default setup it can be defaulted by pressing and holding the reset button on the back of the router next to the On/OFF switch for about 10 seconds. The connections for the router are shown on the next page.
As you can see from diagram the ports available on the router are similar to the 653HWI but there is no ISDN port.
Once the router has been reset configure the laptop to use DHCP to get its IP address and reboot the laptop (if required).
Once the laptop has rebooted you should have an IP address automatically assigned to you of 192.168.1.33 with a default gateway of 192.168.1.1. To check this get to a DOS prompt and enter ipconfig (or winipcfg on older windows clients) and the current network settings will be shown.
To configure the router open up your Web browser and enter 192.168.1.1 as the website address.
The default password is ‘1234’. If you select login you will login to the router.
The next screen prompts you for a new password, refer to the project plan for the password that will be required. If you do not wish to change the password select ignore to leave it at its default value.
The main menu is then displayed .The first task is to check the version of the firmware which is currently installed on the router. You can check the current version of the firmware by selecting ‘system status’ from the Maintenance menu (right hand column).
In the example shown the firmware version is 3.40 QR.5. If the firmware is not up to version 3.40 QR.8 then the firmware will need to be updated.
If you are on firmware version QR.5 or QR.6 you cannot upgrade directly to version QR.8, you have to install version QR.7 before upgrading to QR.8.
The Firmware updates you have should contain both version 7 and 8 updates for the 662HW router.
To upgrade the firmware, place the firmware in a directory on the laptop you are configuring the router with and from the main menu select firmware (maintenance column right hand side). Select browse to browse the laptop and select the directory with the firmware update in it and then select the file with the .bin extention and select open.
When the correct file is selected you will return to the firmware screen and select upload to upload the firmware.
You will be advised the firmware upload is in progress and not to reboot the router.
Once the update is complete the router will reboot.
login as before and you will be prompted to replace the factory default certificate select apply and then repeat the firmware upgrade process to upgrade to version 8.
Once the upgrade is complete and the router has rebooted, login to the router with the configured password
The main menu screen is then displayed and shown below.
As you can see there are now some additional options available on the main menu and if you check the firmware version by selecting ‘system status’ from the maintenance column you will see the firmware version is now QR.8.
The first task is turn off the wireless network capability. To do this select wireless LAN from the main screen (middle column), select wireless from the next screen and de-select enable wireless LAN and select apply.
The next task is to amend the time and date on the router. From the main menu select time and date (middle column), and enter the new date and new time in the format shown and select apply.
The main configuration is done in the ADSL setup screens. Select main menu from the left hand panel in the configuration screen and select ADSL setup (left hand column)
The first details to configure are the ISP parameters for the ADSL connection.
You will need to select the mode to be routing, the encapsulation to be PPPoA, the Multiplex to be LLC, and the Virtual circuit ID to be 0 and 38. (as shown in the screen shot on the previous page). Once you have entered these values select next to continue.
The next screen as shown above allows you to configure the remainder of the ADSL settings. You need to enter the username and password for the connection and ensure that obtain an IP address automatically is selected along with a connection type of “nailed up connection”.
The Network Address Translation (NAT) setting should be set to none. Once you have completed these settings select next to continue.
Now that you have configured the parameters for the ADSL connection, the next task is to setup the local LAN IP address.
Select change LAN Configuration from the Browser screen displayed to configure the LAN.
A screen similar to the one below will be shown. Change the IP address to the IP address required for the router and turn off DHCP.
Once you have entered all the details select finish and the new settings will be applied.
Once the Web browser page has timed out you should reboot the ADSL router and change the IP address of the laptop you are using to fit in with the new IP scheme you have just assigned to the router and set the routers IP address as your default gateway. You should also setup the correct DNS server on your laptop to enable you to browse the internet (default 195.60.21.1 fastfreenet).
Once the router has rebooted and you have re-configured your laptop you need to make further configuration changes before the router is ready for internet traffic.
The first configuration change is to turn off the routing information protocol (RIP) on the router. To do this login to the web configuration page using the new IP address and from the advanced setup menu select LAN and from the next menu select LAN setup. The LAN setup screen is then displayed and the default configuration is to have RIP enabled and we need to disable RIP.
To do this, select RIP direction and change the setting to none and select apply. This will stop any RIP broadcasts. You will be advised when you have applied the changes that you will need to re-connect to the web configuration tool.
The last amendment that is required is to turn off the built in firewall.
This is the default configuration at the moment but if a firewall is required then you should refer to the project plan for configuration information.
To do this select firewall from the main menu, and then default policy and de-select enable firewall as shown below:-
Select apply to apply the changes and once the changes have been made you should reboot the router to ensure the new configuration is brought into effect.
The router is now configured correctly for connections to FastFreenet. Once the router has rebooted (It can take up to 5 minutes to re-connect) you should be able to connect to the internet through the router. If you can the basic configuration is complete.
5. Checking the status of the connection
You can check the connection status of the router from the main menu screen on the web configuration tool. Select system status and you will get displayed the system status, DSL information and LAN information.
The system status contains the system name, the firmware versions and the mode.
The DSL information contains the IP address and subnet obtained from the radius server (Frame IP), the default gateway and the VCI/VPI settings for the connection.
The LAN information shows the MAC address, the IP address and subnet mask of the router and the status of the DHCP scope.
If you select the show statistics button a new screen will be opened with statistics for the connection being displayed. If you check the DSL port Statistics you can see the upstream and downstream speed for the connection and the status of the connection. This can be useful for fault diagnostics as if the connection is not established then there will be no RxPkts received
6 Configuring VPN’S
If you wish to configure a VPN ( Virtual private Network) between two ZyXel 662 routers you need to know some information before you start trying to configure the connection.
The information required is:
All these setting need to be available before you start trying to configure the VPN and whatever setting you use (with the exception of the local and remote IP ranges and the WAN address to connect to) need to be consistant across both the routers you are configuring.
To access the VPN configuration select VPN from the advanced menu (middle column) and then setup.
Select a rule number from the left hand side of the table, that is not currently being used and you will get the VPN-IKE screen displayed
The VPN screen shown on the previous page is purely an example Configuration.
The VPN is set to be active and it will be kept alive by selecting the appropriate boxes.
The name for the connection is test
The IPSEC mode, Negotiation mode, Encapsulation mode and DNS server were all left at their default value.
The local address type is set to subnet and the subnet IP address and mask for the local network the router is connected to has been entered i.e. 128.1.0.0 / 24. This would give access to everything on the local network. These settings need to correspond with the remote address type settings on the second router.
The remote address type is set to subnet and the IP address and subnet mask for the remote network you wish to access is entered. I.e. 192.168.99.0 / 24.This would give access to everything on the remote network.
From the address information section you only need to enter the secure gateway address, (128.100.2.46) which is the WAN IP address of the router you wish to connect to. (Frame IP from FFN).
VPN protocol should be set to ESP
The preshared key is a key used to authenticate between the two router and needs to be the same at both ends and over 8 characters long. In the example it is testkeytestkey.
The encryption algorithm is set to AES and the authentication algorithm is set to MD5.
Once you have entered the details required select apply to apply the settings.
You will be returned to the VPN selection screen, which confirms the VPN details.
To bring up the tunnel you need to ping an address on the remote subnet from your laptop.
You can check if there is an active connection once you have done this by selecting VPN from the main menu and selecting monitor. If there is an active VPN the name will be shown in the monitor along with the encapsulation and algorithm.
If you have problems with the VPN you can check the logs on the router to see if they can assist in the diagnosis of the problem. To look at the logs select logs from the main menu (middle column) and select view log. This will then show you the latest information put into the logs.
7 Backing up the configuration
The router configuration is very easy to backup and once the entire configuration is done, a backup of the current working configuration should be taken, with one copy left onsite and one passed to custinfo@edp.fastfreenet.com.
To backup the router select configuration from the main menu (right hand column), select backup, and select backup again. You will be prompted to download a file, select save and save to a selected area on your laptop. The file is not very big and will save quickly.
You now have a backup of the system. You should copy the file to floppy disk and leave it onsite with the other media and email a copy to custinfo, either from site or when you are back in the office.
8 Restoring a configuration backup
If you have to replace a Zyxel 662 router and you have a configuration backup, the method or restoring the router is simple. First copy the configuration backup to a directory on your laptop.
If the new router has its default configuration then it will have a DHCP server running and you should set your laptop for DHCP. Once you have amended your network setting, open your Internet Browser and connect to 192.168.1.1 and login with the default password of 1234.
Ignore trying to change the password and update the factory default certificate.
From the main configuration menu select configuration (right hand column), restore from the next screen and select browse. You can then browse to where your configuration file is located on your laptop. Once you have selected the file select open, and then upload.
You will be advised that the restore is successful and that the router is rebooting.
You now need to configure your laptop to be in the correct IP range to access the router and set up your default gateway and DNS server.
You should now be able to connect to the router on its correct address and all of the settings from the previous router i.e. WAN, LAN and VPN will all be configured on the new router.