home > Computer > Detailed instructions for setting up zyxel p 330w ee. Setting up a PPPoE connection

Detailed instructions for setting up zyxel p 330w ee. Setting up a PPPoE connection

Part 1: Feature overview and device configuration

In February, the ZyXEL company presented its new Internet center, aimed at use in home networks, where, in addition to access to the Internet, local resources are present. In most home networks, access to the Internet is provided through a PPTP connection established from the user’s computer, but if the user wants to connect 1 or more computers to the network or organize a wireless network at home, then it becomes necessary to use additional equipment (for example, NAT- routers).

The ZyXEL P-330W Internet Center, which we will consider in this review, is designed specifically for a trouble-free solution to this problem using the ZyXEL Link DUO technology - this technology allows you to route traffic between 3 networks:

own local network connected to the LAN interfaces of the Internet center
local network of the service provider, the traffic of this network is usually not charged and is not limited by the provider itself
Internet network, accessed via PPTP connection

This allows all clients of the Internet center’s own local network (that is, those devices connected to the device’s LAN ports) to simultaneously use both the Internet and the local network of the service provider. For many (but not all) inexpensive SOHO-class routers, the task of simultaneous access to the Internet (using a PPTP connection) and to the local network of the service provider still remains impossible.

The ZyXEL P-330W Internet center was specially designed for connecting to networks such as Corbina Telecom - that is, networks that, in addition to access to the Internet, have their own local resources.

Internet center functionality: NAT router with a wireless interface of the IEEE 802.11g standard, 4-port switch with automatic polarity detection on ports - Auto MDI/MDI-X. It is also possible to connect to the service provider's network via wireless communication- the wireless interface acts as a WAN interface.

The following indicators are located on the device:

Internet center power/status indicator
WAN port status/activity indicator
Wireless status/activity indicator
One status/activity LED per LAN port

On the back of the Internet Center there are:

Power connector
4 LAN 10/100 RJ-45 Ethernet ports
WAN port Ethernet 10/100 RJ-45
Reset button - reset parameters
r-SMA connector for connection external antenna wireless communication

Contents of delivery:

The Internet center ZyXEL P-330W itself
Power supply 12V, 800 mA
Disc with manual and additional software
RJ-45–RJ-45 patch cord ~1 m long
Warranty card
Cardboard figurine "NetFriend"

Inside view:

The device is based on the Realtek RTL8186 processor (32-bit RISC processor operating at 180 MHz). The device switch is based on the Realtek 8305SC chip (5-port switch with support for up to 16 VLANs and support for QoS functions). The board also has 2 MB of Flash memory 29LV160C and 16 MB of SDRAM memory 2 × EM638165TS.

The wireless part of the Internet center is hidden under a screen soldered to the main board.

A summary table of specifications can be viewed.

Additionally, I would like to note that some wireless devices of the ZyXEL company (including the Internet center in question) have been tested by the trusted organization SCRF (State Commission on Radio Frequencies) and are included in the “List of RES permitted for operation without issuing permits for the use of radio frequencies.” In accordance with the requirements of the laws of the Russian Federation, wireless equipment used to provide commercial communication services must obtain an operating permit from the SCRF, which takes a large number of time. The equipment listed above does not require these permits - this significantly simplifies the use of this equipment to provide commercial communication services.

More detailed information on ZyXEL wireless equipment that has passed SCRF tests can be found.

Internet center settings

The Internet center can be configured using the WEB configuration interface, console interface, or using software ZyXEL NetFriend.

The ZyXEL company positions the ZyXEL NetFriend configuration utility as the main one for the mass user. The remaining configuration interfaces (WEB interface and console interface) are intended for use by more experienced users, so we will begin to consider the device settings with the ZyXEL NetFriend utility (we have already considered it separately -).

Let's briefly talk about setting up the device using the NetFriend utility. To get started, you need to reset the Internet center parameters; to do this, press the Reset button on the device for a few seconds. The computer on which this utility is launched must be connected to the LAN port of the Internet center. After launch, the utility searches for the device.

While the program was running, it was discovered that the device had outdated version firmware. The ZyXEL NetFriend program offered to update the device firmware to a newer one - all this happened in automatic mode and did not cause any difficulties.

The ZyXEL NetFriend program allows you to select a region and a service provider in this region, after which you set a login and password that are used to connect to the provider’s server (if necessary). The program also allows you to change (add/delete) static routes necessary to work with the provider’s local network (lists of routes are already contained in the program itself).

At the time of writing the review, the ZyXEL NetFriend program contains settings for 22 large Moscow service providers. If you look by region, NetFriend contains settings of the largest providers of 7 regions of Russia.

We will use the NetFriend utility using the example of connecting a device to the Moscow provider Corbina Telecom in the second part of the review, dedicated to the ZyXEL P-330W Internet center, which will be released a little later.

In addition, please note that this utility can configure the Internet center to work in any of the modes described above, and not just for connecting to the Internet.

A complete list of screenshots of the WEB configuration interface is provided.

Let's take a closer look at some points of the WEB configuration interface.

The ZyXEL P-330W Internet Center can operate in various modes:

Gateway - in this mode, the connection to the network is made via a WAN port, NAT is enabled, it is possible to use a PPTP, PPPoE connection, obtain an IP address via DHCP or set an IP address statically. This mode is used when connecting to a provider via Ethernet to organize a local network, sharing access to local and Internet resources with users connecting both via wire and wireless technology Wi-Fi. This mode is the most typical option for using the Internet center.
Wireless Service Provider (Wireless ISP) - in this mode All Ethernet ports of the device (including the WAN port) operate in bridge mode. The wireless interface operates in wireless network client mode and connects to the provider's access point. NAT is enabled on the wireless interface, clients connect to the Ethernet ports. In this mode, it is also possible to use PPTP and PPPoE connections. This mode is used if the provider provides access to the network via Wi-Fi wireless technology (an example is the Golden Wi-Fi service from Golden Telecom)
Access Point - in this mode, all interfaces (5 Ethernet ports and a wireless interface) operate in bridge mode. The Internet center in this mode is a regular access point that has 5 Ethernet ports. NAT is disabled, firewall is disabled. This mode is used to organize a wireless network to which wireless clients can connect.
Wireless Bridge - in this mode, all device interfaces operate in bridge mode. The wireless interface operates in client mode. NAT and firewall are disabled. This mode is used if the Internet Center needs to be connected to a wireless network to provide access to this network to users connected to the Ethernet interfaces of the Internet Center.

Changing these modes leads to some changes in the device interface. We'll look at some modes later in the review, but for now we'll only touch on the standard one - the "Gateway" mode.

Wireless settings allow you to select the operating mode of the wireless interface (access point or client), but you cannot enable client mode when using the “Gateway” mode.

The access point on the ZyXEL P-330W device supports the use of IAPP (Inter-Access Point Protocol) - a protocol used to communicate between access points for such capabilities as roaming and resource allocation (meaning bandwidth resources), but additional settings, applicable to this protocol are not provided in the device. I won’t hide the fact that it would be interesting to see the results of enabling this option, but such a device came to us in a single copy. IAPP protocol support is optional - existing wireless standards do not require its implementation in wireless devices Oh. The IAPP protocol standard has also not been adopted - there is only a set of recommendations that allow the implementation of additional capabilities of wireless equipment. It should be taken into account that since there is no clear standard, incompatibility of IAPP protocol implementations in equipment from different manufacturers is possible.

Using WPA encryption allows you to select the encryption algorithm to use (AES or TKIP). If you select WPA2 encryption, then only AES encryption is used. In wireless security, you can also set the MAC addresses of devices that are allowed to connect to the wireless interface of the Internet center.

Traffic filtering rules are set based on the protocol used (TCP/UDP) and port range (also TCP/UDP). These rules apply only to outgoing traffic generated in the LAN segment of the Internet center and are executed only if the Internet center routes traffic (the “Gateway” or “Wireless ISP” mode is selected on the “Operation Mode” page of the WEB interface settings).

Filtering of ICMP traffic, as well as traffic of other protocols, is not supported, and there is no way to filter traffic by IP addresses of the source and destination of packets - this significantly reduces the flexibility of the firewall, since there is no way to deny access to certain services to certain IP addresses in local network - all rules apply to all clients located in the LAN segment of the Internet center.

The Internet center has a number additional features, allowing you to detect and interrupt DoS (Denial of Service) attacks.

Settings special applications allow you to create up to 8 rules (Port Trigger) - the use of these rules is necessary for applications that have problems when working through NAT. Settings virtual servers do not allow the use of various Public/Private ports on the LAN/WAN interfaces of the Internet center.

The Internet Center logs only system events; the execution of firewall rules is not displayed in the logs. Logs can only be stored inside the device, sending logs via e-mail or storage on a separate Syslog server is not provided.

The device also provides several other types of filtering: by IP address, by MAC address, by URL string. Filtering traffic by IP address allows a computer with a specific IP address located on the local network to deny access to an external network (WAN network). Filtering by MAC address is essentially similar to filtering by IP address - you need to set the MAC address of the computer whose access to the external network (WAN) will be denied.

In addition to the WEB configuration interface, the P-330W Internet center has a console interface accessible via the Telnet protocol.

To display the available commands, you must enter the command “?” in the command line of the console interface. or “help” - this command will display a list of available configuration sections. To display a list of available commands for a section (for example, the “IP” section), you must write “?” after the section name. or “help” - for example “ip?” (displays a list of available commands in the IP section). You can do the same with subsections. Unfortunately, the console interface does not provide the ability to re-enter the previous command; editing the current command is carried out using the Ctrl+Backspace keys.

In Wireless ISP mode, the wireless interface acts as a WAN interface, and all 5 Ethernet ports operate in bridge mode. The Internet Center allows you to discover (search by broadcast SSID) and connect to wireless networks operating in both Infrastructure and AdHoc modes. At the same time, in AdHoc mode, the wireless connection is established at a speed of 54 Mbit/s, which corresponds to the IEEE 802.11g mode. Let me remind you once again that in “Wireless ISP” mode, all Ethernet ports are a 5-port Ethernet switch.

In the “Access point&” mode, the Internet center begins to work as a regular access point connected to a 5-port switch. NAT and traffic filtering functions do not work in this case.

In the “Wireless Bridge” mode, the Internet center acts as a client of the wireless network. It is possible to connect to wireless networks operating in AdHoc and Infrastructure mode. Thus, in this mode, the wireless bridge operates not through WDS (Wireless Distribution System), but by switching the wireless interface of the Internet center to wireless network client mode.

When the Internet center operates in modes where NAT and traffic filtering are not used (Access point, Wireless Bridge), the corresponding settings sections in the Internet center configuration WEB interface are simply missing.

Let me clarify that setting up the device using the ZyXEL NetFriend utility also allows you to operate these operating modes of the Internet center (including connecting to wireless service providers, such as Golden Telecom with the Golden Wi-Fi service).

When using a PPTP connection, authentication is possible using the PAP, CHAP, MSCHAP and MSCHAPv2 protocols. When using MSCHAP and MSCHAPv2, it is possible to use MPPE encryption with a key length of 40, 56 and 128 bits. Thus, the device supports all the most commonly used authentication and encryption options. But it was not without its flaws:

If the main IP address of the WAN interface is obtained automatically from the DHCP server, and the DHCP server issues the IP address of the default gateway, then an additional route will be written in the device’s route table, which will indicate that access to the PPTP server must be carried out only through this gateway. Thus, even if the PPTP server is located on the same subnet as the device’s WAN interface, the device will try to access it through the default gateway, the address of which is obtained from the DHCP server. This situation does not occur often, but is nevertheless quite possible. If the IP address of the PPTP server and the IP address of the gateway match, there are no problems with the PPTP connection.

Using a PPPoE connection also allows you to use all the most common authentication protocols (PAP, CHAP, MSCHAP, MSCHAPv2).

We will test the Internet center in the second part of the review, dedicated to the ZyXEL P-330W device. In it, we will use an example to look at connecting to the Moscow provider Corbina Telecom using the ZyXEL NetFriend utility.

Availability:

At the time of writing this review, the average cost of the equipment in question in Moscow retail was:

ZyXEL P-330W

N/A(0)

Conclusions:

The Internet center in question has a very rich set of capabilities. By allowing the user to change the operating mode, the Internet center can achieve the necessary functionality. This Internet center allows you to use all the most commonly used authentication protocols when using PPTP and PPPoE connections, as well as route local traffic (bypassing the PPP connection).

The use of ZyXEL Link DUO technology allows traffic to be routed between 3 subnets, which allows the device to seamlessly work with Ethernet providers that provide access to their local resources (in addition to providing access to the Internet).

Usage additional utility settings ZyXEL NetFriend (which is also available in Russian) allows you to significantly simplify the process of setting up a connection, eliminating the need for the user to know all the parameters and routes of the network - just know the city where you live, the name of the provider and your login and password to access the service. This utility will also help you update the device firmware (if there is a newer version) and set up wireless communication.

Another advantage of the Internet center in question is its inclusion in the list of wireless devices that do not require permission to use radio frequencies - this list is maintained by the State Commission for Radio Frequencies.

But there is a fly in the ointment - when using a PPTP connection and obtaining the IP address of the WAN interface via DHCP, if the DHCP server sets the IP address of the “default gateway”, then an entry appears in the device’s routing table indicating that PPTP -the server is located on a different network and packets to the PPTP server are sent through the gateway (while the PPTP server may be located in the same subnet as the WAN interface of the Internet center).

The traffic filtering settings turned out to be quite modest - we cannot prohibit specific computer in the LAN segment, access to certain global network services (in this case, we either deny everyone or allow everyone)

In this part of the review, we looked at the capabilities and settings of the ZyXEL P-330W Internet Center. In the second part of this review, we will directly test the device and see how well these features are implemented.

Pros:

Ability to use the Internet center in various modes
Ability to use all the most common authentication protocols (PAP, CHAP, MSCHAP, MSCHAPv2)
Possibility of using MPPE encryption (with a key length of up to 128 bits) when using PPP connections
Availability of protection against DoS (Denial of Service) attacks
Ability to use a configuration utility with a user-friendly interface
The device is included in the SCRF equipment list “List of RES permitted for operation without obtaining permits to use radio frequencies” and has a “CCC” communication certificate, which simplifies the use of the device for the provision of commercial communication services

Minuses:

Low flexibility in setting traffic filtering rules
Appearance of an additional route when obtaining an IP address from a DHCP server if the DHCP server issues a default gateway address
When using the console interface, it is not possible to repeat the previous command - the command must be entered again

ZyXEL P-330W EE | Introduction

The number of cable networks in recent years in the cities of Russia and the CIS countries has been steadily growing, the subscriber bases of telecom operators are constantly increasing, more and more users are connecting, some are even reconnecting, leaving the category of “dial-up” and “ADSL” providers, seduced by high speeds, low tariffs, round-the-clock access, intranet resources. In large cities, the user has the opportunity to choose from at least five available local providers providing access via Ethernet technology. And if connecting one home computer is quite easy, then when connecting several machines, various difficulties and inconveniences may arise. One solution for such a connection is to purchase a SOHO (home office/small business office) class router, which allows you to share a common Internet channel and the provider’s network between several users in the apartment, and also supports various types of VPN tunnels, with the help of which most providers carry out authentication users. One of the great many such routers is, and today it is in our test laboratory. Let's see what this device is capable of.

ZyXEL P-330W EE | Appearance and internal structure

Click on the picture to enlarge.

After clicking on the "Start Upgrade" button, the user is warned that changing the settings will lead to the severing of current connections.

You will also be asked whether to save the current settings to a file.

Click on the picture to enlarge.
Click on the picture to enlarge.
Click on the picture to enlarge.
Click on the picture to enlarge.

The device provided information about the installed firmware.

Click on the picture to enlarge.

We conclude our review of the firmware update process and move on to the next section.

ZyXEL P-330W EE | NetFriend utility overview

In this part of the article we will talk about the program ZyXEL NetFriend v1.2(“Network Friend”), designed for quick and convenient setup of ZyXEL Internet equipment. The reason for creating this software product was caused by a large number of requests from users of ADSL providers to technical support services. ZyXEL specialists tried to solve the main problems facing users when creating an Internet connection to ADSL providers and home Ethernet networks, and this is how the “network friend” appeared.

To configure the ZyXEL device using NetFriend, you need a computer running Windows 2000/XP with an Ethernet port and a CD-ROM drive.

NetFriend technology includes a Windows application that runs on the user's computer and an "agent" integrated into ZyXEL equipment. To use ZyXEL NetFriend, you only need to know the name of the provider and tariff plan, to which the user connects, the “network friend” will take care of all other problems. Together with setting up the provider, NetFriend uses all the Internet center’s network security tools to reliably protect your home network and computers from external threats.

At the time of writing, NetFriend v1.2 supported the following devices:

P-660R EE (Annex A);
P-660H EE (Annex A);
P-660HW EE (Annex A);
P-660HT EE (Annex A);
P-660HTW EE (Annex A);
P-660RT EE (Annex A);
P-660RU EE (Annex A);
P-660RU EE (Annex B);
P-330WEE;
P-2300RDL EE.

Let's configure our P-330WEE using NetFriend and try to find out the main capabilities and features of the “network friend”.

NetFriend works in interactive mode and has simple interface. At each setup stage, NetFriend reports the current state of the process and prompts you to enter or confirm the necessary parameters. The transition to the next step occurs by clicking on the “Next” button, returning to the previous step by clicking on the “Back” button. To exit the program there is an "Exit" button.

Click on the picture to enlarge.

In the main menu we see three main items: “Settings”, “Changing the device access password”, “Device diagnostics”. When you select Setup, NetFriend will perform an operation to configure your device. If you want to set an access password for your device and thereby increase security when working, select the “Change device access password” item. If you encounter difficulties with setting up or operating the device, the NetFriend program will help you create a report with diagnostic information to contact the ZyXEL support center. To do this, select the “Device diagnostics” item. In our case, select “Settings”.

Click on the picture to enlarge.

After successful detection of the device, click the “Next” button. We are asked to choose the mode of using our Internet center.

Click on the picture to enlarge.

There are 4 connection options available.

Internet center with connection via a dedicated Ethernet line- in this mode, all devices connected to the Internet center, including wireless ones, can simultaneously use the Internet channel for work.
Internet center with connection to the provider via Wi-Fi- in this mode, the Internet center establishes a wireless connection with the provider’s access point, and the entire home computer technology connected using a built-in switch.
Wireless point Wi-Fi access - this mode is used to increase the coverage area of a previously created wireless network.
Wireless Ethernet Wi-Fi Adapter- this mode allows you to connect with home network via Wi-Fi simultaneously up to five devices connected to the “LAN 1-4” and “WAN” connectors.

NetFriend allows you not only to solve problems with setting up an Ethernet and Wi-Fi connection, but also to widely use the wireless capabilities of the device.

Let's set up a connection via a dedicated Ethernet line.

Click on the picture to enlarge.

At the time of writing this article, there are 100 providers in the list of “cities” for Russia. If the desired city/region or provider is not in the list, you can enter the connection settings manually. In this case, you can also fill in special form on the ZyXEL website so that the settings of this provider will be added to the next versions of the NetFriend utility. Our provider was not in the list, and we select the “Configure manually” item.

Click on the picture to enlarge.

The next setup step is the connection parameters to the Internet provider. In this window you need to specify the basic settings for connecting to a telecom operator: IP address, subnet mask, default gateway, DNS 1-3. You can obtain all these parameters from your provider.

Click on the picture to enlarge.

If you chose the PPPoE protocol, then you need to enter your login and password. The service name is optional and you don't have to enter it if your ISP doesn't provide it. If the "Secure Password" flag is set, then the CHAP protocol is used for authorization, in otherwise- RAR.

Click on the picture to enlarge.

To gain access to local resource servers in a city network when using the PPPoE or PPTP protocols to access the Internet, you may need to specify a list of static routes. This list is provided by the provider. To add a static route, click the "Add" button and enter the host's IP address and subnet mask.

NetFriend will make the necessary settings and monitor your Internet connection.

Click on the picture to enlarge.

If errors are detected, the program will offer instructions for eliminating them. If the connection setup was completed successfully, the program will notify you about this.

NetFriend allows you to significantly reduce the number and complexity of operations to configure ZyXEL equipment and does not require the user to know how to establish a connection with the provider, with the exception of the name of the provider, the name of the service, as well as login and password. Using NetFriend, the average user saves not only his time and nerves, but also money.

Establishing a connection with a provider is not the only feature of the NetFriend utility. This program also allows you to configure a wireless connection.

Click on the picture to enlarge.

Another NetFriend feature is “device diagnostics” - this item is used to prepare data when contacting ZyXEL technical support. In this case, the NetFriend utility creates a ZIP archive that contains files with all the device settings.

Click on the picture to enlarge.

The saved settings will be analyzed by technical support to assist the device user. You can transfer the ZIP archive to ZyXEL specialists through the interactive consultation system, which is located at zyxel.ru/content/support/. But if your Internet does not work, how will you transfer the archive? In this case, you will have to look for other options to access the Internet.

NetFriend greatly simplifies life for the untrained user of ZyXEL equipment. The program has a clear and simple interface, all menu items are accompanied by hints. It is worth noting that the device is searched by its IP address, and not using broadcast requests, so to configure NetFriend you will first have to reset the device using the "RESET" button. In November 2006 we tested ZyXEL P-660HTW EE, during which they experienced inconvenience due to the fact that the NetFriend utility did not provide the ability to manually specify an IP address managed device, which was reported to company representatives who promised to add this feature to next versions programs. As we can see, this option is still not available in NetFriend, which can seriously complicate the process of installing ZyXEL equipment into an existing network.

ZyXEL P-330W EE | Web interface overview

The previous section described the NetFriend customizer in detail; in this chapter we will describe the capabilities of the ZyXEL web configurator. The built-in web configurator allows you to remotely control the Internet center using a browser. To call the web configurator, you need to open a browser and enter “192.168.1.1” in the address bar, specify the user name “admin”, password “1234”. After this procedure, the "Status" screen will appear.

Click on the picture to enlarge.

This window contains basic information about the local network, Internet connection and wireless network. You can view the operating time of the device and the firmware version of your equipment.

Let's take a closer look at the main points this menu. The first one is "Setup Wizard". This item is used to start the process initial setup, it includes general setup, installation of a wireless network, setting up credentials provided by the provider.

Click on the picture to enlarge.

The ZyXEL P-330W Internet Center can operate in four modes.

"Gateway"- Internet center with connection via a dedicated Ethernet line.
"Wireless ISP" (wireless service provider)- Internet center with connection to the provider via Wi-Fi.
"Access Point"- wireless Wi-Fi access point.
"Wireless Bridge"- wireless Ethernet Wi-Fi bridge.

Select the "Gateway" mode and click "Next".

Click on the picture to enlarge.

Let's figure out the wireless settings. First, we are asked to set the basic parameters. It is necessary to select the operating mode of our access point. The best compatibility is provided by "2.4 GHz (B+G)", the other two modes are used to connect only 802.11b and 802.11g clients to the wireless LAN.

Click on the picture to enlarge.

Let's go to the "LAN" tab. This tab allows you to configure a LAN DHCP server, manage IP addresses, and divide the physical network into logical networks. DHCP (Dynamic Host Configuration Protocol) is network protocol, which allows computers to automatically obtain an IP address and other parameters necessary to operate on a TCP/IP network. To do this, the computer contacts special server, called DHCP server. The network administrator can specify the range of addresses distributed among computers. This avoids manual settings computers on the network and reduces the number of errors.

Let's look at setting up basic wireless communication parameters.

Click on the picture to enlarge.

In the basic wireless communication settings, you can select the device operating mode (access point or client) and set the channel number used by the Internet center. Unfortunately, it is impossible to set the client mode when using the "Gateway" mode. In this window you can also view active clients currently connected.

In the remaining sections of the menu dedicated to the wireless network, you can scan the network, configure connection security, and filter MAC addresses of reliable wireless network stations.

Through the web interface you can configure not only various types of connections, but also a number of additional parameters provided by ZyXEL developers.

Click on the picture to enlarge.

The first of these is access control. Use this screen to block access to certain Internet services based on port number. Used to restrict Internet access to certain applications. Traffic filtering of the two protocols TCP and UDP is provided, but ICMP is not supported. There is no filtering based on the source IP address and destination of the packet, which significantly reduces the functionality of the firewall. All created rules apply to all users located in the local network of the Internet center.

The device also has several other types of filtering: by IP address, by MAC address, by URL string. Filtering by IP address allows a computer with a specific IP address located on the local network to deny access to an external network (WAN network). Filtering by MAC address is essentially similar to filtering by IP address - you need to set the MAC address of the computer whose access to the external network (WAN) will be denied.

Click on the picture to enlarge.

The web configurator provides the ability to use dynamic DNS. Essentially, this service is a specialized DNS server that serves a specific second-level domain, can be reconfigured by users registered on it, and is configured so that changes to it are propagated across the Internet as quickly as possible. If you have a static IP address on the WAN, you cannot use dynamic DNS. To use this service you will need to register.

Click on the picture to enlarge.

The Internet Center keeps a log of events that can be organized, but cannot be saved. Unfortunately, firewall rules are not logged, only system events.

Review graphical interfaces settings P-330WEE We end here and move on to a brief review command line router.

ZyXEL P-330W EE | Command Line Overview

You can connect to the device using the telnet client built into the operating system, or use something more specialized (for example, PuTTY). I would like to immediately note that only one telnet control session is possible per unit of time; it will not be possible to connect with a second remote terminal. Moreover, even the connection in which the prompt to enter a password “hangs” is considered “live”. Now we already have a kind of DoS attack. We left the prompt to enter a password hanging all night (more than 12 hours) and in the morning we were also unable to log in with a second session, which indicates that there was no timeout waiting for the password to be entered, which could threaten to completely block access to the command line of the device by a malicious user. A similar situation is observed with the web interface. According to the manufacturer, this error has been corrected in new firmware versions.

After entering the password correctly, we gain access to the command interface. This is not a Cisco-like interface, which may complicate the process of configuring the device somewhat for adherents of the classic command line. The available commands and their groups are: ?, reload, help, sys, ip, wlan, wan and exit.

We will consider only the most interesting, in our opinion, teams. First text command reload allows you to reboot the device. We did not find any analogues to this command in the web interface.

To obtain information about the device and current firmware, you need to type sys atsh.

The device operating mode is specified using the sys operation line.

Setting up the wireless interface and external port P-330WEE produced at points "wlan" and "wan", respectively. Other settings can, one way or another, be reproduced from the web configurator. The available commands are listed below.

Click on the picture to enlarge.

We complete our brief overview of the command line here and move on to testing.

ZyXEL P-330W EE | Testing

Traditionally, we begin the testing section by establishing the boot time, by which we mean the time interval between the moment the device is powered up and the first response to the ICMP request. For loading time is 31 seconds.

We also measured the surface temperature of the router; it turned out to be 45°C.

Checking the device's security using Positive Techologies XSpider 7.5 (Demo Build 2000) revealed only three open TCP ports (23, 53, 80), but no vulnerabilities were found for services on these ports. I was more pleased with the reaction P-330WEE to ICMP "Source Quench" and "Destination Unreachable" messages. Below is the output of a security scanner with this vulnerability. By the way, I would like to note right away that this is, perhaps, the first ZyXEL device that did not reboot out of the box during such a scan.

Click on the picture to enlarge.

Now we need to check at what speed the device can transfer data. For testing, we used a desktop computer and a laptop, the main parameters of which are given below.

	Laptop	Tablet PC	Computer #1	Computer #2
OS	Windows 2000 SP4 English	Windows XP SP2 English	Windows Vista 64 Ultimate English	Windows 2003 Server SP2 Eng
CPU	Intel Pentium M 1.3 GHz	Intel Pentium M 1.2 GHz	Intel Pentium 4 3.0 GHz	Intel Celeron D 3.2 GHz
Motherboard	Arima CO (i855GM/GME)		Asus P5GDC Pro	ECS P4M800Pro-M2
Memory	Samsung 256 MB (DDR)	Samsung 1 GB (DDR2)	Hyundai 2 GB (DDR2)	Hexon 512 MB (DDR2)
Net	Realtek RTL8139/810x Intel Pro Wireless LAN 2100 3B	Intel PRO Wireless 2200/2915	Marvell Yukon 88E8053	3COM 10/100 Mini PCI Ethernet Adapter VIA Rhine II Compatible Fast Ethernet Adapter

First, we decided to connect the computers directly, “raise” PPTP and measure the transfer speed through the tunnel. To measure the transfer speed we used several running utilities netcps. The total transfer speed was about 85 Mbit/s, which, in our opinion, should be enough for testing. That's why we connected P-330WEE into the gap between a laptop and a desktop computer, we measured the transfer speed. The results were simply amazing: the transfer speed from LAN to WAN was only 31 Mbit/s (left side of the graph), and in the opposite direction it was even less - only 30 Mbit/s (right side of the graph). With simultaneous flow in both directions, the total speed was 33 Mbit/s (middle part of the graph). The data obtained surprised us, to put it mildly, because even our old D-Link DI-604 produced high speeds. The channel loading schedule is presented below.

Click on the picture to enlarge.

Then we “raised” a PPTP connection from the router’s WAN port to a machine running Windows Vista directly connected to it. We set up a connection without using MPPE (as, for example, in Corbin) and measured the speed. The measured speed was 3.1 Mbit/s and was practically independent of the direction of the transmitted data. This will clearly not be enough for high-speed tariffs provided in Moscow, for example, by the same Corbina, and in Krasnogorsk near Moscow, for example, by RedNet. Then we connected to a second computer that had a server operating system installed, but again got the same speeds with PPTP.

Click on the picture to enlarge.

We were interested in the question of what will happen to data transfer rates if we use MPPE for a PPTP connection. The speed turned out to be even lower - 1.3 Mbit/s, that is, the channel sags by more than 2 times. CPU P-330WEE There is clearly not enough data processing. I wonder what speeds this router would show if it also carried out full-featured packet parsing using access lists (ACLs)?

Click on the picture to enlarge.

After the testing was done and the article was almost ready, we discovered a new firmware version on the official ZyXEL website (3.60(AMJ.1)D0), for which the information below was provided.

We downloaded the specified version and “updated”. After the update we decided to measure the speeds again. Routing was also done at speeds close to 30 Mbps, but the changes in PPTP performance shocked us. First, we tested the data transfer speed with "raised" MPPE encryption. Measurements were made using several simultaneously running netcps utilities.

Click on the picture to enlarge.

True, there were some unpleasant surprises - just look at the barely noticeable third part of the graph below. This is not a lack of transmission, but a WAN->LAN data transmission. After that we stopped the test using netcps and decided to just download large file by NetBIOS. And the speed was 16 Mbit/s. Probably, in the new firmware, acceleration occurs when transferring large packets.

Click on the picture to enlarge.

Next, we decided to measure the speed of network access through the wireless segment, that is, WLAN (WEP 64), using our Tablet PC. It turned out that from the wired part of the network to the wireless part, data is transmitted at a speed of 10 Mbit/s, and in the opposite direction - 11 Mbit/s. If we organize a flow in both directions simultaneously, we get a total speed of 19 Mbit/s. In principle, these are normal speeds, but, of course, for those who like to squeeze everything out of the WLAN, the capabilities of the P-330W EE will not be enough.

Click on the picture to enlarge.

Conclusion I would like to begin by explaining to readers the meaning of the words Link DUO indicated on the box with the router and in the instructions for it. ZyXEL understands by this term only that with the help P-330WEE You can simultaneously access the Internet through a tunnel (PPTP) and local provider resources that are not accessible through the tunnel. Link DUO does not mean having two physical WAN interfaces. There is only one WAN here. Other manufacturers of network hardware implement this “technology” in the form of correct routing.

We were dissatisfied with the tested router from ZyXEL. And this is even despite the fact that the router withstood “attacks” from XSpider. Below are the strengths P-330WEE .

Ease of setting up for a specific provider, if it is on the list of known ones;
can act both as a wireless client and as an access point;
high data transfer speed over an unencrypted PPTP tunnel (only with new version firmware);
resistance to attacks.

The negative aspects include the following.

Extremely poor options for configuring firewall rules;
low data transfer rates;
overcharge.

The capabilities of this router are not enough to fully load ISP channels when working on high-speed tariff plans.

At the time of publication of the article, buy a router P-330WEE in virtual stores in Moscow it was possible for $75.

In order to get to the router’s web interface, you need to open your Internet browser and type 192. 168.1.1 in the address bar, Username - admin , Password - 1234 (provided that the router has factory settings and its IP has not changed).

Changing the factory password

For security reasons, it is recommended to change the factory password. Default: Login admin, password 1234. In the router interface you need to go to the tab Password. In field New Password enter New Password. In field Confirmed Password repeat new password. Then click the button Save.

Setting up Wi-Fi on the router

In the router interface, you need to select the tab on the left Wireless ;, in the list that opens, select Basic Settings;. We set the parameters as follows:

1. Disable Access Point: do not check the box
2. Data Rate: Auto
3. Mode: AP
4. Field SSID;: enter the name of the wireless network. Click the button below Save;

Next, select from the menu on the left Wireless, Further Security; and set the parameters: Encryption: WPA
5. WPA Authentication: Personal
6. WPA Cipher Suite: TKIP
7. WPA format: Passphrase
8. WPA Pre-Shared Key: must enter any set of numbers from 8 to 63. They also need to be remembered so that you can specify them when connecting to the network.
9. Click the button below Save;

Setting up an Internet connection

Setting up a PPPoE connection

WAN Access Type: PPPoE
User Name: Your login from the contract
Password: Your password from the contract
Authentication Type: MS-CHAP v2
MTU Size: 1472
Press the button Connect;

Setting up an L2TP connection

1. WAN Access Type- L2TP.
2. Put a point on Attain L2TP IP Automatically.
3. Put a point on Attain Physical WAN IP Automatically.
4. Server Information: Server name tp.corbina.net
5. User name: Your login.
6. Password: Your password.
7. Authentication Type: Chap.

8. MTU Size: 1460.
9. Put a point on Attain DNS Automatically.
10. Check the last five boxes as shown on the picture .

Setting up PPTP (VPN) when automatically obtaining a local IP address

WAN Access Type: PPTP
We put a point opposite Attain PPTP IP Automatically
We put a point opposite Attain PPTP Physical WAN IP Automatically
Server Information: ppp.lan (or 10.10.3.36)
Username: Your login from the contract
Password: Your password from the agreement
Authentication Type: MS-CHAP v2
MTU: 1472
We put a point opposite Attain DNS Automatically
Save the settings with the button Apply;.

Setting up PPTP (VPN) with a static local IP address

WAN Access Type: PPTP
We put a point opposite Attain PPTP IP Automatically
We put a point opposite Set PPTP Physical WAN IP Manually
IP Address: We enter your IP address according to the contract
Subnet Mask: We hammer in the mask according to the contract
Gateway: We drive in the gateway according to the contract
Server Information: ppp.lan (or 10.10.3.36)
Username: Your login from the contract
Password: Your password from the agreement
Authentication Type: MS-CHAP v2
MTU: 1472
We put a point opposite Set DNS Manually
DNS: 8.8.8.8.DNS 2: 8.8.4.4. or your Internet provider's DNS server
Save the settings with the button Apply;.

NAT when automatically obtaining an IP address (DHCP)

WAN Access Type: DHCP Client
We put a point opposite Obtain DNS Automatically
We put a point opposite Clone MAC Address and enter the MAC address of the previously connected computer, or find out the MAC in technical support your provider.
Save the settings with the button Apply.

Saving/restoring router settings

After setting up, it is recommended to save them so that if problems arise, you can restore them. To do this you need to go to the tab Administrator,menu Config File.- To save the current router settings, you must press the button Download. The settings file will be saved to the specified location on your hard drive. - To restore settings settings from a file, you must click the file selection button, specify the path to the settings file, then click the button Restore. Attention! Button press Restore Defaults will restore factory settings!

Produces reliable and multifunctional routers. They are more expensive than routers of other brands, but the excellent quality justifies high price. Many wireless Internet users choose ZyXEL brand routers.

Let's look at how routers from this company are configured, using the example of the very common ZyXEL P-330W EE model. As with other routers, the setup process begins with preparing the network card of your computer or laptop.

Go to the “Start” menu, then go to “Control Panel” and select “ Network connections" In the window that opens, find the “Local Area Connection” icon, right-click on it and select “Properties”. You will see a list in which you need to select the “Internet Protocols TCP/IP” option (if your computer has an operating system installed Windows system XP) or “Internet Protocols version 4 TCP/IPv4” (for Windows Vista/7/8 users).

Select this option, right-click and select “Properties”. In the window that appears, find the field “Obtain an IP address automatically” and put a dot in front of it. This is necessary for the router to automatically connect to your computer.

Connecting the ZyXEL P-330W EE router

After setting up the network card, you can start connecting the router. The device is connected to the computer using a patch cord. Connect one end to network card computer, and insert the other into one of the LAN ports of the router. The ZyXEL P-330W EE model is equipped with four LAN ports, which are located on the rear panel of the router.

There you will also find a WAN port intended for connecting an Internet provider cable. In addition, the router is equipped with an antenna, which is responsible for wireless connection via Wi-Fi.

After connecting the router, you need to go to its working interface. To do this, launch any Internet browser on your computer or laptop, and enter the IP address of the router in the address bar. The default device address is 192.168.1.1. Press “Enter”, the authorization window opens. Fill in the “Username” and “Password” fields.

The default username is "admin" and the password is "1234". These data are indicated on the bottom cover ZyXEL router P-330WEE.

Setting up the Internet on the ZyXEL P-330W EE router

If authorization is successful, you will be taken to the working interface of the router. You can start setting up the Internet. To do this, you will need to find out some information about your provider, namely: the type and parameters of your Internet connection. If you cannot determine them yourself, contact your provider's technical support.

So, let's look at setting up various connection types. If your ISP uses Dynamic IP (Dynamic IP), In the main menu, select the “WAN” item. In the “WAN Access Type” drop-down list, set “DHCP Client”. We also need to set automatic DNS acquisition, so we mark the “Obtain DNS Automatically” field with a dot. If your provider is one that requires binding a MAC address, check the “Clone MAC Address (Manually)” box. The device will automatically copy the address into this field. Then click the “Save” button to save the changes.

Now let's look at setting up a static, or permanent, IP (Static IP). From the main menu, go to the “WAN” block and in the “WAN Access Type” field, select the “Static IP” item. Then we enter the connection parameters received from the provider. Fill in the fields “IP Address”, “Subnet Mask”, “Default Gateway” and the fields “DNS 1”, “DNS 2”, “DNS 3” "("DNS servers"). If binding to a MAC address is required, mark the “Clone MAC Address (Manually)” item with a dot. Click “Save”.

Setting up a PPPoE connection happens as follows. Go to the “WAN” menu, in the “WAN Access Type” field select the “PPPoE” item. Then fill out the “User Name” and “Password” fields: enter the user name and password specified in the agreement for the supply of Internet services. If you cannot find the agreement, contact the provider’s technical support and clarify your details. Then we mark the following fields with dots: “Attain PPPoE IP Automatically”, “Attain Physical WAN IP Automatically” and “Attain DNS Automatically”. Click on the “Connect” button located in the lower right part of the window.

To set up PPTP (VPN) connection with a static IP, select the “PPTP” option in the “WAN Access Type” field. We mark the fields with dots: “Attain PPTP IP Automatically”, “Set PPTP Physical WAN IP Manually”, “Set DNS Manually”. Then we specify the same parameters as in the case of setting up a static IP: IP address, subnet mask and default gateway. Enter your username and password in the “User Name” and “Password” fields and click “Save”.

The connection type is not the only parameter that needs to be set when setting up the Internet. Let's look at how to make other, no less important, settings. First of all, let's configure the network name, which will be displayed in the list of connections. From the main menu, go to the “Wireless” block and select the “Basic Settings” item. In the “SSID” field we indicate the network name. You can choose any name you want and write it in Latin letters.

Now go to the “Security” subsection and set the security settings. In the “Encryption” drop-down list, select the “WPA” option, which will provide reliable data encryption. In the “WPA Authentification Mode” field, put a dot next to the “Personal (Pre-Shared Key)” item. In the “WPA Cipher Suite” column, select “TKIP”, and in the “WPA Pre-Shared Key” field enter the security key: a combination of numbers and Latin letters of at least 8 characters. This will be the password for your network. Save the changes by clicking on “Save”.

Last week, our department faced a certain task: Attach a telephone for conference calls in the meeting room. It seems that everything is simple, plug in the network, set up the phone, and enjoy the negotiations. But no one has ever seen network wires in the meeting room, and especially no one is going to pull them there. I had to resort to Wi-fi solution(last week I already wrote about D-Link points and the problems of this device), but now about something else. This time we had a Zyxel P-330W in stock, so we decided to install it. But it couldn’t be done without “dancing with a tambourine”...

This device comes with a disk that contains its own software that allows you to quickly set up an access point, but as it turned out, this is not our option. Firstly, the utility from the disk completely refused to install on Vista (I hate Vista, but it’s on our duty laptop, and everyone seems too lazy to reinstall), secondly, even after installing this software, we did not find the settings we needed, therefore, as I already wrote above, this disk is simply useless for us. Further setup via Web interface, but here, too, everything turned out to be not simple. If in the D-Link router this mode is called Repeater and everything works in it, then here in this mode nothing worked, in the Bridge mode it’s the same. We “cut out” our entire brain until we came across this manual:

Is it possible to connect to a provider using the P-330W Internet Center? wireless internet or other wireless networks?

Yes, such a setting is possible. Using the P-330W Internet Center, you can connect to an Internet provider (or wireless access point) via Wi-Fi.

Attention! Before connecting the P-330W Internet center, you must make sure that the IP address issued via Wi-Fi to the P-330W WAN interface does not fall within the LAN range (192.168.1.0/24). If it does, you need to change the IP address range of the LAN subnet, for example, to 10.0.0.0/24, since the P-330W does not work with the same addresses on the WAN and on the LAN. It is necessary to change the address, for example, when connecting the P-330W Internet center to one of the ZyXEL devices via Wi-Fi.

We will configure the connection of the Internet center to the Internet (or access point) via Wi-Fi through the built-in web configurator of the device.
To connect to the P-330W web configurator, launch a browser (for example, Internet Explorer) and in the address bar type 192.168.1.1 (This IP address is preset in the P-330W.) You will see an authorization window. Enter your login admin and password 1234 (these options are set by default). After successful authorization, you will see the device web configurator menu.

Go to the menu Operation mode(Operation mode) and then specify the mode Wireless ISP(Wireless Service Provider or Wireless Client Mode).
In this mode, all Ethernet ports of the device (including the WAN port) operate in bridge mode. The wireless interface operates in wireless client mode and connects to the Internet provider's access point. NAT is enabled on the wireless interface, computers connect to the Ethernet ports and use the previous IP addresses to access the ISP via wireless local network. First you need to set the wireless network client mode and then connect to the provider's access point through the menu Site Survey. The type of connection to the provider can be configured in the menu WAN. It is possible to use PPPoE and PPTP connections, as well as in DHCP client and Static IP modes.

Mode Wireless ISP used if your ISP provides network access via Wi-Fi wireless technology or you want to configure the P-330W as a wireless network client to connect to an access point.

As we see, here this function implemented through Wireless ISP

Next go to the menu Wireless Site Survey(View available networks). This window will show all available wireless networks (access points). If the list of available networks shows an empty table, click Refresh(Update).

In the list of available wireless networks, find the network you need and remember/write down SSID(network identifier). Note also the column Encrypt, which indicates the presence or absence of a security protocol for operation on a particular network.

If the wireless network you want to connect to uses WEP / WPA / WPA-PSK / WPA2 / WPA2-PSK security protocols, you need to go to the menu Wireless(Wireless Network) and then to the submenu Security(Security), specify the protocol and, if necessary, a pre-shared key ( WPA Pre-Shared Key when using the WPA protocol or WEP Key when using the WEP protocol).

Next go to the menu Wireless(Wireless Network) and then to the submenu Basic Settings. In field SSID specify the identifier (name) of the wireless network (access point) of the provider, which is displayed in the window Wireless Site Survey(View available wireless networks).