Router - ZyXEL P660R-D1: Difference between revisions

From AAISP Support Site
Line 94: Line 94:


#Only Allow Access to the LAN IP
#Only Allow Access to the LAN IP
**Use this if the router does not have a public LAN IP and you want to block access from the Internet
*Use this if the router does not have a public LAN IP and you want to block access from the Internet
#Allow access to the LAN IP and WAN IP but use a different Port
#Allow access to the LAN IP and WAN IP but use a different Port
##Use this option if you do want to have access to the interface from the Internet, but want a degree of security but obscuring the port used.
##Use this option if you do want to have access to the interface from the Internet, but want a degree of security but obscuring the port used.

Revision as of 10:48, 13 Ocak 2014

P660rd1.png

Overview

The ZyXEL P660R-D1 is a nice little ADSL router, ideal for sites that have their own firewall router. It can be configured for routing or bridging.

LED Status
Steady Flashing Blink Off
Power Power on Power off
Ethernet
DSL In Sync Attempting sync Traffic No Sync
Internet PPP down PPP online


Default Admin Username/Password

Default/Factory Password
Username: admin
Password: 1234
AAISP configured Password
Printed on card with router
Login Screen


Basic Configuration for PPPoA

This will cover BT, TT, BE lines.

BT-Zyxel.png

Bridge config

To configure the ZyxEL as a bridge, the settings to use are as follows, and these settings are set in:

Network > WAN > Internet Connection

Also see the screenshot below:

Name: AAISP (But can be anything)
Mode: Bridge
Encapsulation: RFC 1483
Multiplexing: LLC (VC may work on 20cn, but stick with LLC)
VPI: 0
VCI: 38
ADSL modulation type: Multimode

Zyxel-bridge.png

Netbios Filter

Closing Open DNS

Closing WAN HTTP

By default ZyXELs have their web interface open to the LAN IP and the WAN IP. This can be changed on the web interface to only allow access to the LAN IP.

There are a couple of options for securing WAN HTTP access:

  1. Only Allow Access to the LAN IP
  • Use this if the router does not have a public LAN IP and you want to block access from the Internet
  1. Allow access to the LAN IP and WAN IP but use a different Port
    1. Use this option if you do want to have access to the interface from the Internet, but want a degree of security but obscuring the port used.
  2. Allow access from a specific single IP
    1. Use this to only allow access from a specific IP. This applies to the LAN side and the WAN side.

The setting is found on the web interface under:

Advanced -> Remote MGMT -> WWW


HTTP Options screen. Here you can enable/disable LAN access and change the port