Router - ZyXEL P660R-D1

Overview

The ZyXEL P660R-D1 is a nice little ADSL router, ideal for sites that have their own firewall router. It can be configured for routing or bridging.

LED Status
	Steady	Flashing	Blink	Off
Power	Power on			Power off
Ethernet
DSL	In Sync	Attempting sync	Traffic	No Sync
Internet	PPP down			PPP online

Default Admin Username/Password

Default/Factory Password
Username:	admin
Password:	1234

When a ZyXEL is configured by AAISP, the password and the HTTP port will be changed. The plastic card on the base of the router will have all the details.

ZyXEL HTTP Port

From January 2013, ZyXELs will be have a random port number for the web interface. This will be printed on plastic card supplied with the router. The port number can also be seen from the Control pages by clicking on the Line.

Port number as on Control Pages

Login Screen

Basic Configuration for PPPoA

This will cover BT, TT, BE lines.

Bridge config

To configure the ZyxEL as a bridge, the settings to use are as follows, and these settings are set in:

Network > WAN > Internet Connection

Also see the screenshot below:

Name: AAISP (But can be anything)
Mode: Bridge
Encapsulation: RFC 1483
Multiplexing: LLC (VC may work on 20cn, but stick with LLC)
VPI: 0
VCI: 38
ADSL modulation type: Multimode

Netbios Filter

• See: ZyXEL P660R-D1 - Netbios Filter

Closing Open DNS

• See: Stopping_Open_DNS_-_ZyXEL_P66R-D1

Closing WAN HTTP

By default ZyXELs have their web interface open on the LAN IP and the WAN IP. This can be changed on the web interface to only allow access to the LAN IP.

Note: If you have a public IP then setting HTTP to LAN will still allow access from the internet to your LAN IP.

There are a couple of options for securing WAN HTTP access:

• Only Allow Access to the LAN IP
  • Use this if the router does not have a public LAN IP and you want to block access from the Internet
• Allow access to the LAN IP and WAN IP but use a different Port
  • Use this option if you do want to have access to the interface from the Internet, but want a degree of security but obscuring the port used.
• Allow access from a specific single IP
  • Use this to only allow access from a specific IP. This applies to the LAN side and the WAN side.

Changing HTTP Settings via the Web Interface

The setting is found on the web interface under:

Advanced -> Remote MGMT -> WWW

HTTP Options screen. Here you can enable/disable LAN access and change the port

Changing HTTP Setting via Telnet

View the current access settings (for all services)

sys server load
sys server disp

Set the type of access:

sys server load
sys server access web 0
sys save

Note: Allowed access type: 0:ALL, 1:None, 2:LAN IP only, 3:WAN IP only

Set the Port

sys server load
sys server port web 80
sys save