Name*

wan1, wan2

lan1, lan2, dmz

pppx

cellularx

vlanx

brx

**

Configurable Zone

No

No

Yes

Yes

Yes

Yes

No

IP Address Assignment

 

 

 

 

 

 

 

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

No

Yes

Yes

Yes

Yes

No

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Interface Parameters

 

 

 

 

 

 

 

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

Yes

No

DHCP

 

 

 

 

 

 

 

No

Yes

No

No

Yes

Yes

No

No

Yes

No

No

Yes

Yes

No

Connectivity Check

Yes

No

Yes

Yes

Yes

Yes

No

Ethernet interface

physical port

VLAN interface

Ethernet interface

bridge interface

Ethernet interface*

VLAN interface*

PPP interface

Ethernet interface*

VLAN interface*

bridge interface

WAN1, WAN2, OPT*

virtual interface

(virtual Ethernet interface)

(virtual VLAN interface)

(virtual bridge interface)

 

Ethernet interface*

VLAN interface*

bridge interface

trunk

Ethernet interface

Cellular interface

VLAN interface

bridge interface

PPP interface

1111 1110 10

0

Interface ID

10 bits

54 bits

64 bits

Edit

Select an entry, and click this button to configure the speed and the duplex mode of the Ethernet connection on this port.

Name

This field displays the name of the port.

Interface

This field displays the interface for the port.

Type

This field displays the cable type that is used on the port.

Settings

Select the speed and the duplex mode of the Ethernet connection on this port. Choices are Auto Negotiate, 1000Mbps-Full Duplex, 100Mbps-Full Duplex, 100Mbps-Half Duplex, 10Mbps-Full Duplex, and 10Mbps-Half Duplex.

Selecting Auto Negotiate allows one port to negotiate with a peer port automatically to obtain the connection speed (of up to 1000M) and duplex mode that both ends support. When auto-negotiation is turned on, a port on the Zyxel Device negotiates with the peer automatically to determine the connection speed and duplex mode. If the peer port does not support auto-negotiation or turns off this feature, the Zyxel Device determines the connection speed by detecting the signal on the cable and using half duplex mode. When the Zyxel Device’s auto-negotiation is turned off, a port uses the pre-configured speed and duplex mode when making a connection, thus requiring you to make sure that the settings of the peer port are the same in order to connect.

Status

This field displays the speed and the duplex mode of the Ethernet connection on the port.

Apply

Click Apply to save your changes back to the Zyxel Device.

Reset

Click Reset to return the screen to its last-saved settings.

Configuration / IPv6 Configuration

Use the Configuration section for IPv4 network settings. Use the IPv6 Configuration section for IPv6 network settings if you connect your Zyxel Device to an IPv6 network. Both sections have similar fields as described below.

Edit

Double-click an entry or select it and click Edit to open a screen where you can modify the entry’s settings.

Remove

To remove a virtual interface, select it and click Remove. The Zyxel Device confirms you want to remove it before doing so.

Activate

To turn on an interface, select it and click Activate.

Inactivate

To turn off an interface, select it and click Inactivate.

Create Virtual Interface

To open the screen where you can create a virtual Ethernet interface, select an Ethernet interface and click Create Virtual Interface.

References

Select an entry and click References to open a screen that shows which settings use the entry.

#

This field is a sequential value, and it is not associated with any interface.

Status

This icon is lit when the entry is active and dimmed when the entry is inactive.

Name

This field displays the name of the interface.

Description

This field displays the description of the interface.

IP Address

This field displays the current IP address of the interface. If the IP address is 0.0.0.0 (on the IPv4 network) or :: (on the IPv6 network), the interface does not have an IP address yet.

On the IPv4 network, this screen also shows whether the IP address is a static IP address (STATIC) or dynamically assigned (DHCP). IP addresses are always static in virtual interfaces.

On the IPv6 network, this screen also shows whether the IP address is a static IP address (STATIC), link-local IP address (LINK LOCAL), dynamically assigned (DHCP), or an IPv6 StateLess Address AutoConfiguration IP address (SLAAC).

Mask

This field displays the interface’s subnet mask in dot decimal notation.

Apply

Click Apply to save your changes back to the Zyxel Device.

Reset

Click Reset to return the screen to its last-saved settings.

IPv4/IPv6 View / IPv4 View / IPv6 View

Use this button to display both IPv4 and IPv6, IPv4-only, or IPv6-only configuration fields.

Show Advanced Settings / Hide Advanced Settings

Click this button to display a greater or lesser number of configuration fields.

Create New Object

Click this button to create a DHCPv6 lease or DHCPv6 request object that you may use for the DHCPv6 settings in this screen.

General Settings

 

Select this to enable this interface. Clear this to disable this interface.

General IPv6 Setting

 

Select this to enable IPv6 on this interface. Otherwise, clear this to disable it.

Interface Properties

 

This field is configurable for the OPT interface only. Select to which type of network you will connect this interface. When you select internal or external the rest of the screen’s options automatically adjust to correspond. The Zyxel Device automatically adds default route and SNAT settings for traffic it routes from internal interfaces to external interfaces; for example LAN to WAN traffic.

internal is for connecting to a local network. Other corresponding configuration options: DHCP server and DHCP relay. The Zyxel Device automatically adds default SNAT settings for traffic flowing from this interface to an external interface.

external is for connecting to an external network (like the Internet). The Zyxel Device automatically adds this interface to the default WAN trunk.

For general, the rest of the screen’s options do not automatically adjust and you must manually configure a policy route to add routing and SNAT settings for the interface.

Specify a name for the interface. It can use alphanumeric characters, hyphens, and underscores, and it can be up to 11 characters long.

This is the name of the Ethernet interface’s physical port.

Select the zone to which this interface is to belong. You use zones to apply security settings such as security policy, IDP, remote management, anti-malware, and application patrol. Make sure to select the correct zone as otherwise traffic may be blocked by a security policy.

This field is read-only. This is the MAC address that the Ethernet interface uses.

Enter a description of this interface. You can use alphanumeric and ()+/:=?!*#@$_%- characters, and it can be up to 60 characters long. Spaces are allowed, but the string can’t start with a space.

IP Address Assignment

These IP address fields configure an IPv4 IP address on the interface itself. If you change this IP address on the interface, you may also need to change a related address object for the network connected to the interface. For example, if you use this screen to change the IP address of your LAN interface, you should also change the corresponding LAN subnet address object.

This option appears when Interface Type is external or general. Select this to make the interface a DHCP client and automatically get the IP address, subnet mask, and gateway address from a DHCP server.

You should not select this if the interface is assigned to a VRRP group.

DHCP Option 60 is used by the Zyxel Device for identification to the DHCP server using the VCI (Vendor Class Identifier) on the DHCP server. The Zyxel Device adds it in the initial DHCP discovery message that a DHCP client broadcasts in search of an IP address. The DHCP server can assign different IP addresses or options to clients with the specific VCI or reject the request from clients without the specific VCI.

Type a string using up to 63 of these characters [a-zA-Z0-9!\"#$%&\'()*+,-./:;<=>?@\[\\\]^_`{}] to identify this Zyxel Device to the DHCP server. For example, Zyxel-TW.

This option appears when Interface Type is external or general. Select this if you want to specify the IP address, subnet mask, and gateway manually.

Enter the IP address for this interface.

Enter the subnet mask of this interface in dot decimal notation. The subnet mask indicates what part of the IP address is the same for all computers on the network.

This option appears when Interface Type is external or general. Enter the IP address of the gateway. The Zyxel Device sends packets to the gateway when it does not know how to route the packet to its destination. The gateway should be on the same network as the interface.

This option appears when Interface Type is external or general. Enter the priority of the gateway (if any) on this interface. The Zyxel Device decides which gateway to use based on this priority. The lower the number, the higher the priority. If two or more gateways have the same priority, the Zyxel Device uses the one that was configured first.

Enable IGMP Support

Select this to allow the Zyxel Device to act as an IGMP proxy for hosts connected on the IGMP downstream interface.

Enable IGMP Upstream on the interface which connects to a router running IGMP that is closer to the multicast server.

Enable IGMP Downstream on the interface which connects to the multicast hosts.

IPv6 Address Assignment

These IP address fields configure an IPv6 IP address on the interface itself.

Select this to enable IPv6 stateless auto-configuration on this interface. The interface will generate an IPv6 IP address itself from a prefix obtained from an IPv6 router on the network.

This displays the IPv6 link-local address and the network prefix that the Zyxel Device generates itself for the interface.

Enter the IPv6 address and the prefix length for this interface if you want to use a static IP address. This field is optional.

The prefix length indicates what the left-most part of the IP address is the same for all computers on the network, that is, the network address.

Enter the IPv6 address of the default outgoing gateway using colon (:) hexadecimal notation.

Enter the priority of the gateway (if any) on this interface. The Zyxel Device decides which gateway to use based on this priority. The lower the number, the higher the priority. If two or more gateways have the same priority, the Zyxel Device uses the one that was configured first.

Use this table to have the Zyxel Device obtain an IPv6 prefix from the ISP or a connected uplink router for an internal network, such as the LAN or DMZ. You have to also enter a suffix address which is appended to the delegated prefix to form an address for this interface.

To use prefix delegation, you must:

Click this to create an entry.

Select an entry and click this to change the settings.

Select an entry and click this to delete it from this table.

Select an entry and click References to check which settings use the entry.

This field is a sequential value, and it is not associated with any entry.

Select the DHCPv6 request object to use from the drop-down list.

Enter the ending part of the IPv6 address, a slash (/), and the prefix length. The Zyxel Device will append it to the delegated prefix.

For example, you got a delegated prefix of 2003:1234:5678/48. You want to configure an IP address of 2003:1234:5678:1111::1/128 for this interface, then enter ::1111:0:0:0:1/128 in this field.

This field displays the combined IPv6 IP address for this interface.

DHCPv6 Setting

 

Select N/A to not use DHCPv6.

Select Client to set this interface to act as a DHCPv6 client.

Select Server to set this interface to act as a DHCPv6 server which assigns IP addresses and provides subnet mask, gateway, and DNS server information to clients.

Select Relay to set this interface to route DHCPv6 requests to the DHCPv6 relay server you specify. The DHCPv6 server(s) may be on another network.

This field displays the DHCP Unique IDentifier (DUID) of the interface, which is unique and used for identification purposes when the interface is exchanging DHCPv6 messages with others.

Select this if you want the DUID is generated from the interface’s default MAC address.

If you want to use a customized DUID, enter it here for the interface.

Select this to shorten the DHCPv6 message exchange process from four to two steps. This function helps reduce heavy network traffic load.

Enter the number of seconds a DHCPv6 client should wait before refreshing information retrieved from DHCPv6.

This field is available if you set this interface to DHCPv6 Client. Select this to get an IPv6 IP address for this interface from the DHCP server. Clear this to not get any IP address information through DHCPv6.

If this interface is a DHCPv6 client, use this section to configure DHCPv6 request settings that determine what additional information to get from the DHCPv6 server. If the interface is a DHCPv6 server, use this section to configure DHCPv6 lease settings that determine what additional information to offer to the DHCPv6 clients.

Click this to create an entry in this table. See Add/Edit DHCPv6 Request/Release Options for more information.

Select an entry and click this to delete it from this table.

Select an entry and click References to open a screen that shows which settings use the entry.

This field is a sequential value, and it is not associated with any entry.

This field displays the name of the DHCPv6 request or lease object.

This field displays the type of the object.

This field displays the IPv6 prefix that the Zyxel Device obtained from an uplink router (Server is selected) or will advertise to its clients (Client is selected).

When Relay is selected, select this check box and an interface from the drop-down list if you want to use it as the relay server.

When Relay is selected, select this check box and enter the IP address of a DHCPv6 server as the relay server.

IPv6 Router Advertisement Setting

 

Select this to enable this interface to send router advertisement messages periodically.

Select this to have the Zyxel Device indicate to hosts to obtain network settings (such as prefix and DNS settings) through DHCPv6.

Clear this to have the Zyxel Device indicate to hosts that DHCPv6 is not available and they should use the prefix in the router advertisement message.

Select this to have the Zyxel Device indicate to hosts to obtain DNS information through DHCPv6.

Clear this to have the Zyxel Device indicate to hosts that DNS information is not available in this network.

Select the router preference (Low, Medium or High) for the interface. The interface sends this preference in the router advertisements to tell hosts what preference they should use for the Zyxel Device. This helps hosts to choose their default router especially when there are multiple IPv6 router on the network.

The Maximum Transmission Unit. Type the maximum size of each IPv6 data packet, in bytes, that can move through this interface. If a larger packet arrives, the Zyxel Device discards the packet and sends an error message to the sender to inform this.

Enter the maximum number of network segments that a packet can cross before reaching the destination. When forwarding an IPv6 packet, IPv6 routers are required to decrease the Hop Limit by 1 and to discard the IPv6 packet when the Hop Limit is 0.

Configure this table only if you want the Zyxel Device to advertise a fixed prefix to the network.

Click this to create an IPv6 prefix address.

Select an entry in this table and click this to modify it.

Select an entry in this table and click this to delete it.

This field is a sequential value, and it is not associated with any entry.

Enter the IPv6 network prefix address and the prefix length.

The prefix length indicates what the left-most part of the IP address is the same for all computers on the network, that is, the network address.

This table is available when the Interface Type is internal. Use this table to configure the network prefix if you want to use a delegated prefix as the beginning part of the network prefix.

Click this to create an entry in this table.

Select an entry in this table and click this to modify it.

Select an entry in this table and click this to delete it.

This field is a sequential value, and it is not associated with any entry.

Select the DHCPv6 request object to use for generating the network prefix for the network.

Enter the ending part of the IPv6 network address plus a slash (/) and the prefix length. The Zyxel Device will append it to the selected delegated prefix. The combined address is the network prefix for the network.

For example, you got a delegated prefix of 2003:1234:5678/48. You want to divide it into 2003:1234:5678:1111/64 for this interface and 2003:1234:5678:2222/64 for another interface. You can use ::1111/64 and ::2222/64 for the suffix address respectively. But if you do not want to divide the delegated prefix into subnetworks, enter ::0/48 here, which keeps the same prefix length (/48) as the delegated prefix.

This is the final network prefix combined by the delegated prefix and the suffix.

Interface Parameters

 

Enter the maximum amount of traffic, in kilobits per second, the Zyxel Device can send through the interface to the network. Allowed values are 0 - 1048576.

This is reserved for future use.

Enter the maximum amount of traffic, in kilobits per second, the Zyxel Device can receive from the network through the interface. Allowed values are 0 - 1048576.

Maximum Transmission Unit. Type the maximum size of each data packet, in bytes, that can move through this interface. If a larger packet arrives, the Zyxel Device divides it into smaller fragments. Allowed values are 576 - 1500. Usually, this value is 1500.

Connectivity Check

These fields appear when Interface Properties is External or General.

The interface can regularly check the connection to the gateway you specified to make sure it is still available. You specify how often the interface checks the connection, how long to wait for a response before the attempt is a failure, and how many consecutive failures are required before the Zyxel Device stops routing to the gateway. The Zyxel Device resumes routing to the gateway the first time the gateway passes the connectivity check.

Select this to turn on the connection check.

Select the method that the gateway allows.

Select icmp to have the Zyxel Device regularly ping the gateway you specify to make sure it is still available.

Select tcp to have the Zyxel Device regularly perform a TCP handshake with the gateway you specify to make sure it is still available.

Enter the number of seconds between connection check attempts.

Enter the number of seconds to wait for a response before the attempt is a failure.

Enter the number of consecutive failures before the Zyxel Device stops routing through the gateway.

Select this to use the default gateway for the connectivity check.

Select this to specify a domain name or IP address for the connectivity check. Enter that domain name or IP address on the field next to it.

This field only displays when you set the Check Method to tcp. Specify the port number to use for a TCP connectivity check.

Type one or two domain names or IP addresses for the connectivity check.

This field applies when you specify two domain names or IP addresses for the connectivity check.

Select any one if you want the check to pass if at least one of the domain names or IP addresses responds.

Select all if you want the check to pass only if both domain names or IP addresses respond.

DHCP Setting

This section appears when Interface Type is internal or general.

Select what type of DHCP service the Zyxel Device provides to the network. Choices are:

None - the Zyxel Device does not provide any DHCP services. There is already a DHCP server on the network.

DHCP Relay - the Zyxel Device routes DHCP requests to one or more DHCP servers you specify. The DHCP server(s) may be on another network.

DHCP Server - the Zyxel Device assigns IP addresses and provides subnet mask, gateway, and DNS server information to the network. The Zyxel Device is the DHCP server for the network.

These fields appear if the Zyxel Device is a DHCP Relay.

Enter the IP address of a DHCP server for the network.

This field is optional. Enter the IP address of another DHCP server for the network.

These fields appear if the Zyxel Device is a DHCP Server.

Enter the IP address from which the Zyxel Device begins allocating IP addresses. If you want to assign a static IP address to a specific computer, use the Static DHCP Table.

If this field is blank, the Pool Size must also be blank. In this case, the Zyxel Device can assign every IP address allowed by the interface’s IP address and subnet mask, except for the first address (network address), last address (broadcast address) and the interface’s IP address.

Enter the number of IP addresses to allocate. This number must be at least one and is limited by the interface’s Subnet Mask. For example, if the Subnet Mask is 255.255.255.0 and IP Pool Start Address is 10.10.10.10, the Zyxel Device can allocate 10.10.10.10 to 10.10.10.254, or 245 IP addresses.

If this field is blank, the IP Pool Start Address must also be blank. In this case, the Zyxel Device can assign every IP address allowed by the interface’s IP address and subnet mask, except for the first address (network address), last address (broadcast address) and the interface’s IP address.

Specify the IP addresses up to three DNS servers for the DHCP clients to use. Use one of the following ways to specify these IP addresses.

Custom Defined - enter a static IP address.

From ISP - select the DNS server that another interface received from its DHCP server.

Zyxel Device - the DHCP clients use the IP address of this interface and the Zyxel Device works as a DNS relay.

Type the IP address of the WINS (Windows Internet Naming Service) server that you want to send to the DHCP clients. The WINS server keeps a mapping table of the computer names on your network and the IP addresses that they are currently using.

If you set this interface to DHCP Server, you can select to use either the interface’s IP address or another IP address as the default router. This default router will become the DHCP clients’ default gateway.

To use another IP address as the default router, select Custom Defined and enter the IP address.

Specify how long each computer can use the information (especially the IP address) before it has to request the information again. Choices are:

infinite - select this if IP addresses never expire.

days, hours, and minutes - select this to enter how long IP addresses are valid.

This table is available if you selected DHCP server.

Configure this table if you want to send more information to DHCP clients through DHCP packets.

Click this to create an entry in this table. See Add/Edit DHCP Extended Options.

Select an entry in this table and click this to modify it.

Select an entry in this table and click this to delete it.

This field is a sequential value, and it is not associated with any entry.

This is the name of the DHCP option.

This is the code number of the DHCP option.

This is the type of the set value for the DHCP option.

This is the value set for the DHCP option.

PXE (Preboot eXecution Environment) allows a client computer to use the network to boot up and install an operating system via a PXE-capable Network Interface Card (NIC).

PXE is available for computers on internal interfaces to allow them to boot up using boot software on a PXE server. The Zyxel Device acts as an intermediary between the PXE server and the computers that need boot software.

The PXE server must have a public IPv4 address. You must enable DHCP Server on the Zyxel Device so that it can receive information from the PXE server.

A boot loader is a computer program that loads the operating system for the computer. Type the exact file name of the boot loader software file, including filename extension, that is on the PXE server. If the wrong filename is typed, then the client computers cannot boot.

Select this option to have this interface enforce links between specific IP addresses and specific MAC addresses. This stops anyone else from manually using a bound IP address on another device connected to this interface. Use this to make use only the intended users get to use specific IP addresses.

Select this option to have the Zyxel Device generate a log if a device connected to this interface attempts to use an IP address that is bound to another device’s MAC address.

Configure a list of static IP addresses the Zyxel Device assigns to computers connected to the interface. Otherwise, the Zyxel Device assigns an IP address dynamically using the interface’s IP Pool Start Address and Pool Size.

Click this to create a new entry.

Select an entry and click this to be able to modify it.

Select an entry and click this to delete it.

This field is a sequential value, and it is not associated with a specific entry.

Enter the IP address to assign to a device with this entry’s MAC address.

Enter the MAC address to which to assign this entry’s IP address.

Enter a description to help identify this static DHCP entry. You can use alphanumeric and ()+/:=?!*#@$_%- characters, and it can be up to 60 characters long.

RIP Setting

 

Select this to enable RIP in this interface.

This field is effective when RIP is enabled. Select the RIP direction from the drop-down list box.

BiDir - This interface sends and receives routing information.

In-Only - This interface receives routing information.

Out-Only - This interface sends routing information.

This field is effective when RIP is enabled. Select the RIP version(s) used for sending RIP packets. Choices are 1, 2, and 1 and 2.

This field is effective when RIP is enabled. Select the RIP version(s) used for receiving RIP packets. Choices are 1, 2, and 1 and 2.

This field is effective when RIP is enabled. Select this to send RIP-2 packets using subnet broadcasting; otherwise, the Zyxel Device uses multicasting.

OSPF Setting

 

Select the area in which this interface belongs. Select None to disable OSPF in this interface.

Enter the priority (between 0 and 255) of this interface when the area is looking for a Designated Router (DR) or Backup Designated Router (BDR). The highest-priority interface identifies the DR, and the second-highest-priority interface identifies the BDR. Set the priority to zero if the interface can not be the DR or BDR.

Enter the cost (between 1 and 65,535) to route packets through this interface.

Select this to stop forwarding OSPF routing information from the selected interface. As a result, this interface only receives routing information.

Select an authentication method, or disable authentication. To exchange OSPF routing information with peer border routers, you must use the same authentication method that they use. Choices are:

Same-as-Area - use the default authentication method in the area

None - disable authentication

Text - authenticate OSPF routing information using a plain-text password

MD5 - authenticate OSPF routing information using MD5 encryption

This field is available if the Authentication is Text. Type the password for text authentication. The key can consist of alphanumeric characters and the underscore, and it can be up to 16 characters long.

This field is available if the Authentication is MD5. Type the ID for MD5 authentication. The ID can be between 1 and 255.

This field is available if the Authentication is MD5. Type the password for MD5 authentication. The password can consist of alphanumeric characters and the underscore, and it can be up to 16 characters long.

MAC Address Setting

This section appears when Interface Properties is External or General. Have the interface use either the factory assigned default MAC address, a manually specified MAC address, or clone the MAC address of another device or computer.

Select this option to have the interface use the factory assigned default MAC address. By default, the Zyxel Device uses the factory assigned MAC address to identify itself.

Select this option to have the interface use a different MAC address. Either enter the MAC address in the fields or click Clone by host and enter the IP address of the device or computer whose MAC you are cloning. Once it is successfully configured, the address will be copied to the configuration file. It will not change unless you change the setting or upload a different configuration file.

Proxy ARP

Proxy ARP is available for external or general interfaces on the Zyxel Device. See Proxy ARP for more information on Proxy ARP.

Select this to allow the Zyxel Device to answer external interface ARP requests on behalf of a device on its internal interface. Interfaces supported are:

See Proxy ARP for more information.

Click Add to create an IPv4 Address, an IPv4 CIDR (for example, 192.168.1.1/24) or an IPv4 Range (for example, 192.168.1.2-192.168.1.100) as the target IP address. The Zyxel Device answers external ARP requests only if they match one of these inputted target IP addresses. For example, if the IPv4 Address is 192.168.1.5, then the Zyxel Device will answer ARP requests coming from the WAN only if it contains 192.168.1.5 as the target IP address.

Select an existing entry and click Remove to delete that entry.

Related Setting

 

Click PPPoE/PPTP if this interface’s Internet connection uses PPPoE or PPTP or L2TP.

Click VLAN if you want to configure a VLAN interface for this Ethernet interface.

Click WAN TRUNK to go to a screen where you can set this interface to be part of a WAN trunk for load balancing.

Click Policy Route to go to the policy route summary screen where you can manually associate traffic with this interface.

You must manually configure a policy route to add routing and SNAT settings for an interface with the Interface Type set to general. You can also configure a policy route to override the default routing and SNAT behavior for an interface with an Interface Type of internal or external.

OK

Click OK to save your changes back to the Zyxel Device.

Cancel

Click Cancel to exit this screen without saving.

Interface Name

This identifies the interface for which the configuration settings that use it are displayed.

Address Type

Choose IPv4 Address, or IPv4 CIDR (for example, 192.168.1.1/24) or an IPv4 Range (for example, 192.168.1.2-192.168.1.100) and then enter the target IP address information. The Zyxel Device answers external ARP requests only if they match one of these inputted target IP addresses. For example, if the IPv4 Address is 192.168.1.5, then the Zyxel Device will answer ARP requests coming from the WAN only if it contains 192.168.1.5 as the target IP address.

OK

Click OK to save your changes back to the Zyxel Device.

Cancel

Click Cancel to exit this screen without saving.

Interface Properties

 

This field is read-only. It displays the name of the virtual interface, which is automatically derived from the underlying Ethernet interface, VLAN interface, or bridge interface.

Enter a description of this interface. It is not used elsewhere. You can use alphanumeric and ()+/:=?!*#@$_%- characters, and it can be up to 60 characters long.

IP Address Assignment

 

Enter the IP address for this interface.

Enter the subnet mask of this interface in dot decimal notation. The subnet mask indicates what part of the IP address is the same for all computers on the network.

Enter the IP address of the gateway. The Zyxel Device sends packets to the gateway when it does not know how to route the packet to its destination. The gateway should be on the same network as the interface.

Enter the priority of the gateway (if any) on this interface. The Zyxel Device decides which gateway to use based on this priority. The lower the number, the higher the priority. If two or more gateways have the same priority, the Zyxel Device uses the one that was configured first.

OK

Click OK to save your changes back to the Zyxel Device.

Cancel

Click Cancel to exit this screen without saving.

Name

This identifies the object for which the configuration settings that use it are displayed. Click the object’s name to display the object’s configuration screen in the main window.

#

This field is a sequential value, and it is not associated with any entry.

Service

This is the type of setting that references the selected object. Click a service’s name to display the service’s configuration screen in the main window.

Priority

If it is applicable, this field lists the referencing configuration item’s position in its list, otherwise N/A displays.

Name

This field identifies the configuration item that references the object.

Description

If the referencing configuration item has a description configured, it displays here.

Refresh

Click this to update the information in this screen.

Cancel

Click Cancel to close the screen.

Option

Select which DHCP option that you want to add in the DHCP packets sent through the interface. See the next table for more information.

Name

This field displays the name of the selected DHCP option. If you selected User Defined in the Option field, enter a descriptive name to identify the DHCP option. You can enter up to 16 characters (“a-z”, “A-Z, “0-9”, “-”, and “_”) with no spaces allowed. The first character must be alphabetical (a-z, A-Z).

Code

This field displays the code number of the selected DHCP option. If you selected User Defined in the Option field, enter a number for the option. This field is mandatory.

Type

This is the type of the selected DHCP option. If you selected User Defined in the Option field, select an appropriate type for the value that you will enter in the next field. Only advanced users should configure User Defined. Misconfiguration could result in interface lockout.

Value

Enter the value for the selected DHCP option. For example, if you selected TFTP Server Name (66) and the type is TEXT, enter the DNS domain name of a TFTP server here. This field is mandatory.

First IP Address, Second IP Address, Third IP Address

If you selected Time Server (4), NTP Server (41), SIP Server (120), CAPWAP AC (138), or TFTP Server (150), you have to enter at least one IP address of the corresponding servers in these fields. The servers should be listed in order of your preference.

First Enterprise ID, Second Enterprise ID

If you selected VIVC (124) or VIVS (125), you have to enter at least one vendor’s 32-bit enterprise number in these fields. An enterprise number is a unique number that identifies a company.

First Class, Second Class

If you selected VIVC (124), enter the details of the hardware configuration of the host on which the client is running, or of industry consortium compliance.

First Information, Second Information

If you selected VIVS (125), enter additional information for the corresponding enterprise number in these fields.

OK

Click this to close this screen and update the settings to the previous Edit screen.

Cancel

Click Cancel to close the screen.

Time Offset

2

This option specifies the offset of the client's subnet in seconds from Coordinated Universal Time (UTC).

Time Server

4

This option specifies a list of Time servers available to the client.

NTP Server

42

This option specifies a list of the NTP servers available to the client by IP address.

TFTP Server Name

66

This option is used to identify a TFTP server when the “sname” field in the DHCP header has been used for DHCP options. The minimum length of the value is 1.

Bootfile

67

This option is used to identify a bootfile when the “file” field in the DHCP header has been used for DHCP options. The minimum length of the value is 1.

SIP Server

120

This option carries either an IPv4 address or a DNS domain name to be used by the SIP client to locate a SIP server.

VIVC

124

Vendor-Identifying Vendor Class option

A DHCP client may use this option to unambiguously identify the vendor that manufactured the hardware on which the client is running, the software in use, or an industry consortium to which the vendor belongs.

VIVS

125

Vendor-Identifying Vendor-Specific option

DHCP clients and servers may use this option to exchange vendor-specific information.

CAPWAP AC

138

CAPWAP Access Controller addresses option

The Control And Provisioning of Wireless Access Points Protocol allows a Wireless Termination Point (WTP) to use DHCP to discover the Access Controllers to which it is to connect. This option carries a list of IPv4 addresses indicating one or more CAPWAP ACs available to the WTP.

TFTP Server

150

The option contains one or more IPv4 addresses that the client may use. The current use of this option is for downloading configuration from a VoIP server via TFTP; however, the option may be used for purposes other than contacting a VoIP configuration server.

User Configuration / System Default

The Zyxel Device comes with the (non-removable) System Default PPP interfaces pre-configured. You can create (and delete) User Configuration PPP interfaces. System Default PPP interfaces vary by model.

Add

Click this to create a new user-configured PPP interface.

Edit

Double-click an entry or select it and click Edit to open a screen where you can modify the entry’s settings.

Remove

To remove a user-configured PPP interface, select it and click Remove. The Zyxel Device confirms you want to remove it before doing so.

Activate

To turn on an entry, select it and click Activate.

Inactivate

To turn off an entry, select it and click Inactivate.

Connect

To connect an interface, select it and click Connect. You might use this in testing the interface or to manually establish the connection for a Dial-on-Demand PPPoE/PPTP interface.

Disconnect

To disconnect an interface, select it and click Disconnect. You might use this in testing the interface.

References

Select an entry and click References to open a screen that shows which settings use the entry.

#

This field is a sequential value, and it is not associated with any interface.

Status

The activate (light bulb) icon is lit when the entry is active and dimmed when the entry is inactive.

The connect icon is lit when the interface is connected and dimmed when it is disconnected.

Name

This field displays the name of the interface.

Description

This field displays the description of the interface.

Base Interface

This field displays the interface on the top of which the PPPoE/PPTP/L2TP interface is.

Account Profile

This field displays the ISP account used by this PPPoE/PPTP interface.

Apply

Click Apply to save your changes back to the Zyxel Device.

Reset

Click Reset to return the screen to its last-saved settings.

IPv4/IPv6 View / IPv4 View / IPv6 View

Use this button to display both IPv4 and IPv6, IPv4-only, or IPv6-only configuration fields.

Show Advanced Settings / Hide Advanced Settings

Click this button to display a greater or lesser number of configuration fields.

Create New Object

Click this button to create an ISP Account or a DHCPv6 request object that you may use for the ISP or DHCPv6 settings in this screen.

General Settings

 

Select this to enable this interface. Clear this to disable this interface.

General IPv6 Setting

 

Select this to enable IPv6 on this interface. Otherwise, clear this to disable it.

Interface Properties

 

Specify a name for the interface. It can use alphanumeric characters, hyphens, and underscores, and it can be up to 11 characters long.

Select the interface upon which this PPP interface is built.

Select the zone to which this PPP interface belongs. The zone determines the security settings the Zyxel Device uses for the interface.

Enter a description of this interface. You can use alphanumeric and ()+/:=?!*#@$_%- characters, and it can be up to 60 characters long. Spaces are allowed, but the string can’t start with a space.

Connectivity

 

Select this if the PPPoE/PPTP/L2TP connection should always be up. Clear this to have the Zyxel Device establish the PPPoE/PPTP/L2TP connection only when there is traffic. You might use this option if a lot of traffic needs to go through the interface or it does not cost extra to keep the connection up all the time.

Select this to have the Zyxel Device establish the PPPoE/PPTP/L2TP connection only when there is traffic. You might use this option if there is little traffic through the interface or if it costs money to keep the connection available.

ISP Setting

 

Select the ISP account that this PPPoE/PPTP/L2TP interface uses. The drop-down box lists ISP accounts by name. Use Create new Object if you need to configure a new ISP account.

This field is read-only. It displays the protocol specified in the ISP account.

This field is read-only. It displays the user name for the ISP account.

This field is read-only. It displays the PPPoE service name specified in the ISP account. This field is blank if the ISP account uses PPTP.

IP Address Assignment

Click Show Advanced Settings to display more settings. Click Hide Advanced Settings to display fewer settings.

Select this if this interface is a DHCP client. In this case, the DHCP server configures the IP address automatically. The subnet mask and gateway are always defined automatically in PPPoE/PPTP/L2TP interfaces.

Select this if you want to specify the IP address manually.

This field is enabled if you select Use Fixed IP Address.

Enter the IP address for this interface.

This field is enabled if you select Use Fixed IP Address.

Enter the IP address of the gateway. The Zyxel Device sends packets to the gateway when it does not know how to route the packet to its destination. The gateway should be on the same network as the interface.

Enter the priority of the gateway (the ISP) on this interface. The Zyxel Device decides which gateway to use based on this priority. The lower the number, the higher the priority. If two or more gateways have the same priority, the Zyxel Device uses the one that was configured first.

IPv6 Address Assignment

These IP address fields configure an IPv6 IP address on the interface itself.

Select this to enable IPv6 stateless auto-configuration on this interface. The interface will generate an IPv6 IP address itself from a prefix obtained from an IPv6 router on the network.

Enter the priority of the gateway (if any) on this interface. The Zyxel Device decides which gateway to use based on this priority. The lower the number, the higher the priority. If two or more gateways have the same priority, the Zyxel Device uses the one that was configured first.

Use this table to have the Zyxel Device obtain an IPv6 prefix from the ISP or a connected uplink router for an internal network, such as the LAN or DMZ. You have to also enter a suffix address which is appended to the delegated prefix to form an address for this interface.

To use prefix delegation, you must:

Click this to create an entry.

Select an entry and click this to change the settings.

Select an entry and click this to delete it from this table.

Select an entry and click References to open a screen that shows which settings use the entry.

This field is a sequential value, and it is not associated with any entry.

Select the DHCPv6 request object to use from the drop-down list.

Enter the ending part of the IPv6 address, a slash (/), and the prefix length. The Zyxel Device will append it to the delegated prefix.

For example, you got a delegated prefix of 2003:1234:5678/48. You want to configure an IP address of 2003:1234:5678:1111::1/128 for this interface, then enter ::1111:0:0:0:1/128 in this field.

This field displays the combined IPv6 IP address for this interface.

DHCPv6 Setting

 

Select Client to obtain an IP address and DNS information from the service provider for the interface. Otherwise, select N/A to disable the function.

This field displays the DHCP Unique IDentifier (DUID) of the interface, which is unique and used for identification purposes when the interface is exchanging DHCPv6 messages with others.

Select this if you want the DUID is generated from the interface’s default MAC address.

If you want to use a customized DUID, enter it here for the interface.

Select this to shorten the DHCPv6 message exchange process from four to two steps. This function helps reduce heavy network traffic load.

Select this to get an IPv6 IP address for this interface from the DHCP server. Clear this to not get any IP address information through DHCPv6.

Use this section to configure DHCPv6 request settings that determine what additional information to get from the DHCPv6 server.

Click this to create an entry in this table.

Select an entry and click this to delete it from this table.

Select an entry and click References to open a screen that shows which settings use the entry.

This field displays the name of the DHCPv6 request object.

This field displays the type of the object.

This field displays the IPv6 prefix that the Zyxel Device will advertise to its clients.

Interface Parameters

 

Enter the maximum amount of traffic, in kilobits per second, the Zyxel Device can send through the interface to the network. Allowed values are 0 - 1048576.

This is reserved for future use.

Enter the maximum amount of traffic, in kilobits per second, the Zyxel Device can receive from the network through the interface. Allowed values are 0 - 1048576.

Maximum Transmission Unit. Type the maximum size of each data packet, in bytes, that can move through this interface. If a larger packet arrives, the Zyxel Device divides it into smaller fragments. Allowed values are 576 - 1492. Usually, this value is 1492.

Connectivity Check

The interface can regularly check the connection to the gateway you specified to make sure it is still available. You specify how often the interface checks the connection, how long to wait for a response before the attempt is a failure, and how many consecutive failures are required before the Zyxel Device stops routing to the gateway. The Zyxel Device resumes routing to the gateway the first time the gateway passes the connectivity check.

Select this to turn on the connection check.

Select the method that the gateway allows.

Select icmp to have the Zyxel Device regularly ping the gateway you specify to make sure it is still available.

Select tcp to have the Zyxel Device regularly perform a TCP handshake with the gateway you specify to make sure it is still available.

Enter the number of seconds between connection check attempts.

Enter the number of seconds to wait for a response before the attempt is a failure.

Enter the number of consecutive failures before the Zyxel Device stops routing through the gateway.

Select this to use the default gateway for the connectivity check.

Select this to specify a domain name or IP address for the connectivity check. Enter that domain name or IP address in the field next to it.

This field only displays when you set the Check Method to tcp. Specify the port number to use for a TCP connectivity check.

Related Setting

 

Click WAN TRUNK to go to a screen where you can configure the interface as part of a WAN trunk for load balancing.

Click Policy Route to go to the screen where you can manually configure a policy route to associate traffic with this interface.

OK

Click OK to save your changes back to the Zyxel Device.

Cancel

Click Cancel to exit this screen without saving.

Add

Click this to create a new cellular interface.

Edit

Double-click an entry or select it and click Edit to open a screen where you can modify the entry’s settings.

Remove

To remove an entry, select it and click Remove. The Zyxel Device confirms you want to remove it before doing so.

Activate

To turn on an entry, select it and click Activate.

Inactivate

To turn off an entry, select it and click Inactivate.

Connect

To connect an interface, select it and click Connect. You might use this in testing the interface or to manually establish the connection.

Disconnect

To disconnect an interface, select it and click Disconnect. You might use this in testing the interface.

References

Select an entry and click References to open a screen that shows which settings use the entry.

#

This field is a sequential value, and it is not associated with any interface.

Status

The activate (light bulb) icon is lit when the entry is active and dimmed when the entry is inactive.

The connect icon is lit when the interface is connected and dimmed when it is disconnected.

Name

This field displays the name of the interface.

Description

This field displays the description of the interface.

Extension Slot

This field displays where the entry’s cellular card is located.

Connected Device

This field displays the name of the cellular card.

ISP Settings

This field displays the profile of ISP settings that this cellular interface is set to use.

Mobile Broadband Dongle Support

You should have registered your Zyxel Device at myZyxel. myZyxel hosts a list of supported mobile broadband dongle devices. You should have an Internet connection to access this website.

This displays the latest supported mobile broadband dongle list version number.

This displays the currently supported (by the Zyxel Device) mobile broadband dongle list version number.

If the latest version number is greater than the current version number, then click this button to download the latest list of supported mobile broadband dongle devices to the Zyxel Device.

Apply

Click Apply to save your changes back to the Zyxel Device.

Reset

Click Reset to return the screen to its last-saved settings.

Show Advanced Settings / Hide Advanced Settings

Click this button to display a greater or lesser number of configuration fields.

General Settings

 

Select this option to turn on this interface.

Interface Properties

 

Select a name for the interface.

Select the zone to which you want the cellular interface to belong. The zone determines the security settings the Zyxel Device uses for the interface.

This is the USB slot that you are configuring for use with a mobile broadband card.

This displays the manufacturer and model name of your mobile broadband card if you inserted one in the Zyxel Device. Otherwise, it displays none.

Enter a description of this interface. You can use alphanumeric and ()+/:=?!*#@$_%- characters, and it can be up to 60 characters long. Spaces are allowed, but the string can’t start with a space.

Connectivity

 

Select this if the connection should always be up. Clear this to have the Zyxel Device to establish the connection only when there is traffic. You might not nail up the connection if there is little traffic through the interface or if it costs money to keep the connection available.

This value specifies the time in seconds (0~360) that elapses before the Zyxel Device automatically disconnects from the ISP’s server. Zero disables the idle timeout.

ISP Settings

 

Select Device to use one of the mobile broadband device’s profiles of device settings. Then select the profile (use Profile 1 unless your ISP instructed you to do otherwise).

Select Custom to configure your device settings yourself.

This field is read-only if you selected Device in the profile selection. Select Custom in the profile selection to be able to manually input the APN (Access Point Name) provided by your service provider. This field applies with a GSM or HSDPA mobile broadband card. Enter the APN from your service provider. Connections with different APNs may provide different services (such as Internet access or MMS (Multi-Media Messaging Service)) and charge method.

You can enter up to 63 ASCII printable characters. Spaces are allowed.

Enter the dial string if your ISP provides a string, which would include the APN, to initialize the mobile broadband card.

You can enter up to 63 ASCII printable characters. Spaces are allowed.

This field is available only when you insert a GSM mobile broadband card.

The Zyxel Device supports PAP (Password Authentication Protocol) and CHAP (Challenge Handshake Authentication Protocol). CHAP is more secure than PAP; however, PAP is readily available on more platforms.

Use the drop-down list box to select an authentication protocol for outgoing calls. Options are:

None: No authentication for outgoing calls.

CHAP - Your Zyxel Device accepts CHAP requests only.

PAP - Your Zyxel Device accepts PAP requests only.

This field displays when you select an authentication type other than None. This field is read-only if you selected Device in the profile selection. If this field is configurable, enter the user name for this mobile broadband card exactly as the service provider gave it to you.

You can use 1 ~ 64 alphanumeric and #:%-_@$./ characters. The first character must be alphanumeric or -_@$./. Spaces are not allowed.

This field displays when you select an authentication type other than None. This field is read-only if you selected Device in the profile selection and the password is included in the mobile broadband card’s profile. If this field is configurable, enter the password for this SIM card exactly as the service provider gave it to you.

You can use 0 ~ 63 alphanumeric and `~!@#$%^&*()_-+={}|;:'<,>./ characters. Spaces are not allowed.

This field displays when you select an authentication type other than None. This field is read-only if you selected Device in the profile selection and the password is included in the mobile broadband card’s profile. If this field is configurable, re-enter the password for this SIM card exactly as the service provider gave it to you.

SIM Card Setting

 

This field displays with a GSM or HSDPA mobile broadband card. A PIN (Personal Identification Number) code is a key to a mobile broadband card. Without the PIN code, you cannot use the mobile broadband card.

Enter the 4-digit PIN code (0000 for example) provided by your ISP. If you enter the PIN code incorrectly, the mobile broadband card may be blocked by your ISP and you cannot use the account to access the Internet.

If your ISP disabled PIN code authentication, enter an arbitrary number.

Type the PIN code again to confirm it.

Interface Parameters

 

Enter the maximum amount of traffic, in kilobits per second, the Zyxel Device can send through the interface to the network. Allowed values are 0 - 1048576. This setting is used in WAN load balancing and bandwidth management.

This is reserved for future use.

Enter the maximum amount of traffic, in kilobits per second, the Zyxel Device can receive from the network through the interface. Allowed values are 0 - 1048576.

Maximum Transmission Unit. Type the maximum size of each data packet, in bytes, that can move through this interface. If a larger packet arrives, the Zyxel Device divides it into smaller fragments. Allowed values are 576 - 1492. Usually, this value is 1492.

Connectivity Check

The interface can regularly check the connection to the gateway you specified to make sure it is still available. You specify how often the interface checks the connection, how long to wait for a response before the attempt is a failure, and how many consecutive failures are required before the Zyxel Device stops routing to the gateway. The Zyxel Device resumes routing to the gateway the first time the gateway passes the connectivity check.

Select this to turn on the connection check.

Select the method that the gateway allows.

Select icmp to have the Zyxel Device regularly ping the gateway you specify to make sure it is still available.

Select tcp to have the Zyxel Device regularly perform a TCP handshake with the gateway you specify to make sure it is still available.

Enter the number of seconds between connection check attempts.

Enter the number of seconds to wait for a response before the attempt is a failure.

Enter the number of consecutive failures before the Zyxel Device stops routing through the gateway.

Select this to use the default gateway for the connectivity check.

Select this to specify a domain name or IP address for the connectivity check. Enter that domain name or IP address in the field next to it.

This field only displays when you set the Check Method to tcp. Specify the port number to use for a TCP connectivity check.

Related Setting

 

Click WAN TRUNK to go to a screen where you can configure the interface as part of a WAN trunk for load balancing.

Click Policy Route to go to the policy route summary screen where you can configure a policy route to override the default routing and SNAT behavior for the interface.

IP Address Assignment

 

Select this option If your ISP did not assign you a fixed IP address. This is the default selection.

Select this option If the ISP assigned a fixed IP address.

Enter the cellular interface’s WAN IP address in this field if you selected Use Fixed IP Address.

Enter the priority of the gateway (if any) on this interface. The Zyxel Device decides which gateway to use based on this priority. The lower the number, the higher the priority. If two or more gateways have the same priority, the Zyxel Device uses the one that was configured first.

Device Settings

 

This field appears if you selected a mobile broadband device that allows you to select the type of network to use. Select the type of mobile broadband service for your mobile broadband connection. If you are unsure what to select, check with your mobile broadband service provider to find the mobile broadband service available to you in your region.

Select auto to have the card connect to an available network. Choose this option if you do not know what networks are available.

You may want to manually specify the type of network to use if you are charged differently for different types of network or you only have one type of network available to you.

Select GPRS / EDGE (GSM) only to have this interface only use a 2.5G or 2.75G network (respectively). If you only have a GSM network available to you, you may want to select this so the Zyxel Device does not spend time looking for a WCDMA network.

Select UMTS / HSDPA (WCDMA) only to have this interface only use a 3G or 3.5G network (respectively). You may want to do this if you want to make sure the interface does not use the GSM network.

Select LTE only to have this interface only use a 4G LTE network. This option only appears when a USG dongle for 4G technology is inserted.

Home network is the network to which you are originally subscribed.

Select Home to have the mobile broadband device connect only to the home network. If the home network is down, the Zyxel Device’s mobile broadband Internet connection is also unavailable.

Select Auto (Default) to allow the mobile broadband device to connect to a network to which you are not subscribed when necessary, for example when the home network is down or another mobile broadband base station's signal is stronger. This is recommended if you need continuous Internet connectivity. If you select this, you may be charged using the rate of a different network.

Budget Setup

 

Select this to set a monthly limit for the user account of the installed mobile broadband card. You can set a limit on the total traffic and/or call time. The Zyxel Device takes the actions you specified when a limit is exceeded during the month.

Select this and specify the amount of time (in hours) that the mobile broadband connection can be used within one month. If you change the value after you configure and enable budget control, the Zyxel Device resets the statistics.

Select this and specify how much downstream and/or upstream data (in Mega bytes) can be transmitted via the mobile broadband connection within one month.

Select Download to set a limit on the downstream traffic (from the ISP to the Zyxel Device).

Select Upload to set a limit on the upstream traffic (from the Zyxel Device to the ISP).

Select Download/Upload to set a limit on the total traffic in both directions.

If you change the value after you configure and enable budget control, the Zyxel Device resets the statistics.

Select the date on which the Zyxel Device resets the budget every month. If the date you selected is not available in a month, such as 30th or 31st, the Zyxel Device resets the budget on the last day of the month.

This button is available only when you enable budget control in this screen.

Click this button to reset the time and data budgets immediately. The count starts over with the mobile broadband connection’s full configured monthly time and data budgets. This does not affect the normal monthly budget restart; so if you configured the time and data budget counters to reset on the second day of the month and you use this button on the first, the time and data budget counters will still reset on the second.

Specify the actions the Zyxel Device takes when the time or data limit is exceeded.

Select None to not create a log, Log to create a log, or Log-alert to create an alert log. If you select Log or Log-alert you can also select recurring every to have the Zyxel Device send a log or alert for this event periodically. Specify how often (from 1 to 65535 minutes) to send the log or alert.

Select Allow to permit new mobile broadband connections or Disallow to drop/block new mobile broadband connections.

Select Keep to maintain an existing mobile broadband connection or Drop to disconnect it. You cannot set New connection to Allow and Current connection to Drop at the same time.

If you set New connection to Disallow and Current connection to Keep, the Zyxel Device allows you to transmit data using the current connection, but you cannot build a new connection if the existing connection is disconnected.

Actions when over % of time budget or % of data budget

Specify the actions the Zyxel Device takes when the specified percentage of time budget or data limit is exceeded. Enter a number from 1 to 99 in the percentage fields. If you change the value after you configure and enable budget control, the Zyxel Device resets the statistics.

Select None to not create a log when the Zyxel Device takes this action, Log to create a log, or Log-alert to create an alert log. If you select Log or Log-alert you can also select recurring every to have the Zyxel Device send a log or alert for this event periodically. Specify how often (from 1 to 65535 minutes) to send the log or alert.

OK

Click OK to save your changes back to the Zyxel Device.

Cancel

Click Cancel to exit this screen without saving.

Add

Click this to create a new GRE tunnel interface.

Edit

Double-click an entry or select it and click Edit to open a screen where you can modify the entry’s settings.

Remove

To remove an entry, select it and click Remove. The Zyxel Device confirms you want to remove it before doing so.

Activate

To turn on an entry, select it and click Activate.

Inactivate

To turn off an entry, select it and click Inactivate.

References

Select an entry and click References to open a screen that shows which settings use the entry.

#

This field is a sequential value, and it is not associated with any interface.

Status

The activate (light bulb) icon is lit when the entry is active and dimmed when the entry is inactive.

Name

This field displays the name of the interface.

IP Address

This is the IP address of the interface. If the interface is active (and connected), the Zyxel Device tunnels local traffic sent to this IP address to the Remote Gateway Address.

Tunnel Mode

This is the tunnel mode of the interface (GRE, IPv6-in-IPv4 or 6to4). This field also displays the interface’s IPv4 IP address and subnet mask if it is a GRE tunnel. Otherwise, it displays the interface’s IPv6 IP address and prefix length.

My Address

This is the interface or IP address uses to identify itself to the remote gateway. The Zyxel Device uses this as the source for the packets it tunnels to the remote gateway.

Remote Gateway Address

This is the IP address or domain name of the remote gateway to which this interface tunnels traffic.

Apply

Click Apply to save your changes back to the Zyxel Device.

Reset

Click Reset to begin configuring this screen afresh.

Show Advanced Settings / Hide Advanced Settings

Click this button to display a greater or lesser number of configuration fields.

General Settings

 

Select this to enable this interface. Clear this to disable this interface.

Interface Properties

 

This field is read-only if you are editing an existing tunnel interface. Enter the name of the tunnel interface. The format is tunnelx, where x is 0 - 3. For example, tunnel0.

Use this field to select the zone to which this interface belongs. This controls what security settings the Zyxel Device applies to this interface.

Select the tunneling protocol of the interface (GRE, IPv6-in-IPv4 or 6to4).

IP Address Assignment

This section is available if you are configuring a GRE tunnel.

Enter the IP address for this interface.

Enter the subnet mask of this interface in dot decimal notation. The subnet mask indicates what part of the IP address is the same for all computers on the network.

Enter the priority of the gateway (if any) on this interface. The Zyxel Device decides which gateway to use based on this priority. The lower the number, the higher the priority. If two or more gateways have the same priority, the Zyxel Device uses the one that was configured first.

IPv6 Address Assignment

This section is available if you are configuring an IPv6-in-IPv4 or a 6to4 tunnel.

Enter the IPv6 address and the prefix length for this interface if you want to use a static IP address. This field is optional.

The prefix length indicates what the left-most part of the IP address is the same for all computers on the network, that is, the network address.

Enter the priority of the gateway (if any) on this interface. The Zyxel Device decides which gateway to use based on this priority. The lower the number, the higher the priority. If two or more gateways have the same priority, the Zyxel Device uses the one that was configured first.

6to4 Tunnel Parameter

This section is available if you are configuring a 6to4 tunnel which encapsulates IPv6 to IPv4 packets.

Enter the IPv6 prefix of a destination network. The Zyxel Device forwards IPv6 packets to the hosts on the matched network.

If you enter a prefix starting with 2002, the Zyxel Device will forward the matched packets to the IPv4 IP address converted from the packets’ destination address. The IPv4 IP address can be converted from the next 32 bits after the prefix you specified in this field. The Zyxel Device forwards the unmatched packets to the specified Relay Router.

Enter the IPv4 address of a 6to4 relay router which helps forward packets between 6to4 networks and native IPv6 networks.

Enter the IPv4 network address and network bits of a remote 6to4 gateway, for example, 14.15.0.0/16.

This field works if you enter a 6to4 Prefix not starting with 2002 (2003 for example). The Zyxel Device forwards the matched packets to a remote gateway with the network address you specify here, and the bits converted after the 6to4 Prefix in the packets.

For example, you configure the 6to4 prefix to 2003:A0B::/32 and the remote gateway prefix to 14.15.0.0/16. If a packet’s destination is 2003:A0B:1011:5::8, the Zyxel Device forwards the packet to 14.15.16.17, where the network address is 14.15.0.0 and the host address is the remain bits converted from 1011 after the packet’s 6to4 prefix (2003:A0B).

Gateway Settings

 

Specify the interface or IP address to use as the source address for the packets this interface tunnels to the remote gateway. The remote gateway sends traffic to this interface or IP address.

Enter the IP address or domain name of the remote gateway to which this interface tunnels traffic.

Automatic displays in this field if you are configuring a 6to4 tunnel. It means the 6to4 tunnel will help forward packets to the corresponding remote gateway automatically by looking at the packet’s destination address.

Interface Parameters

 

Enter the maximum amount of traffic, in kilobits per second, the Zyxel Device can send through the interface to the network. Allowed values are 0 - 1048576. This setting is used in WAN load balancing and bandwidth management.

This is reserved for future use.

Enter the maximum amount of traffic, in kilobits per second, the Zyxel Device can receive from the network through the interface. Allowed values are 0 - 1048576.

Maximum Transmission Unit. Type the maximum size of each data packet, in bytes, that can move through this interface. If a larger packet arrives, the Zyxel Device divides it into smaller fragments. Allowed values are 576 - 1500. Usually, this value is 1500.

Connectivity Check

This section is available if you are configuring a GRE tunnel.

The interface can regularly check the connection to the gateway you specified to make sure it is still available. You specify how often the interface checks the connection, how long to wait for a response before the attempt is a failure, and how many consecutive failures are required before the Zyxel Device stops routing to the gateway. The Zyxel Device resumes routing to the gateway the first time the gateway passes the connectivity check.

Select this to turn on the connection check.

Select the method that the gateway allows.

Select icmp to have the Zyxel Device regularly ping the gateway you specify to make sure it is still available.

Select tcp to have the Zyxel Device regularly perform a TCP handshake with the gateway you specify to make sure it is still available.

Enter the number of seconds between connection check attempts.

Enter the number of seconds to wait for a response before the attempt is a failure.

Enter the number of consecutive failures before the Zyxel Device stops routing through the gateway.

Select this to use the default gateway for the connectivity check.

Select this to specify a domain name or IP address for the connectivity check. Enter that domain name or IP address in the field next to it.

This field displays when you set the Check Method to tcp. Specify the port number to use for a TCP connectivity check.

Related Setting

 

Click this link to go to a screen where you can configure WAN trunk load balancing.

Click this link to go to the screen where you can manually configure a policy route to associate traffic with this interface.

OK

Click OK to save your changes back to the Zyxel Device.

Cancel

Click Cancel to exit this screen without saving.

Configuration / IPv6 Configuration

Use the Configuration section for IPv4 network settings. Use the IPv6 Configuration section for IPv6 network settings if you connect your Zyxel Device to an IPv6 network. Both sections have similar fields as described below.

Edit

Double-click an entry or select it and click Edit to open a screen where you can modify the entry’s settings.

Remove

To remove an entry, select it and click Remove. The Zyxel Device confirms you want to remove it before doing so.

Activate

To turn on an entry, select it and click Activate.

Inactivate

To turn off an entry, select it and click Inactivate.

Create Virtual Interface

To open the screen where you can create a virtual interface, select an interface and click Create Virtual Interface.

References

Select an entry and click References to open a screen that shows which settings use the entry.

#

This field is a sequential value, and it is not associated with any interface.

Status

This icon is lit when the entry is active and dimmed when the entry is inactive.

Name

This field displays the name of the interface.

Description

This field displays the description of the interface.

Port/VID

For VLAN interfaces, this field displays

For virtual interfaces, this field is blank.

IP Address

This field displays the current IP address of the interface. If the IP address is 0.0.0.0, the interface does not have an IP address yet.

This screen also shows whether the IP address is a static IP address (STATIC) or dynamically assigned (DHCP). IP addresses are always static in virtual interfaces.

Mask

This field displays the interface’s subnet mask in dot decimal notation.

Apply

Click Apply to save your changes back to the Zyxel Device.

Reset

Click Reset to return the screen to its last-saved settings.

IPv4/IPv6 View / IPv4 View / IPv6 View

Use this button to display both IPv4 and IPv6, IPv4-only, or IPv6-only configuration fields.

Show Advanced Settings / Hide Advanced Settings

Click this button to display a greater or lesser number of configuration fields.

Create New Object

Click this button to create a DHCPv6 lease or DHCPv6 request object that you may use for the DHCPv6 settings in this screen.

General Settings

 

Select this to turn this interface on. Clear this to disable this interface.

General IPv6 Setting

 

Select this to enable IPv6 on this interface. Otherwise, clear this to disable it.

Interface Properties

 

Select one of the following option depending on the type of network to which the Zyxel Device is connected or if you want to additionally manually configure some related settings.

internal is for connecting to a local network. Other corresponding configuration options: DHCP server and DHCP relay. The Zyxel Device automatically adds default SNAT settings for traffic flowing from this interface to an external interface.

external is for connecting to an external network (like the Internet). The Zyxel Device automatically adds this interface to the default WAN trunk.

For general, the rest of the screen’s options do not automatically adjust and you must manually configure a policy route to add routing and SNAT settings for the interface.

This field is read-only if you are editing an existing VLAN interface. Enter the number of the VLAN interface. You can use a number from 0~4094. For example, use vlan0, vlan8, and so on. The total number of VLANs you can configure on the Zyxel Device depends on the model.

Select the zone to which the VLAN interface belongs.

Select the Ethernet interface on which the VLAN interface runs.

Enter the VLAN ID. This 12-bit number uniquely identifies each VLAN. Allowed values are 1 - 4094. (0 and 4095 are reserved.)

This is a 3-bit field within a 802.1Q VLAN tag that’s used to prioritize associated outgoing VLAN traffic. . The setting configured in Configuration > BWM overwrites the priority setting here.

Enter a description of this interface. You can use alphanumeric and ()+/:=?!*#@$_%- characters, and it can be up to 60 characters long. Spaces are allowed, but the string can’t start with a space.

IP Address Assignment

 

Select this if this interface is a DHCP client. In this case, the DHCP server configures the IP address, subnet mask, and gateway automatically.

You should not select this if the interface is assigned to a VRRP group.

DHCP Option 60 is used by the Zyxel Device for identification to the DHCP server using the VCI (Vendor Class Identifier) on the DHCP server. The Zyxel Device adds it in the initial DHCP discovery message that a DHCP client broadcasts in search of an IP address. The DHCP server can assign different IP addresses or options to clients with the specific VCI or reject the request from clients without the specific VCI.

Type a string using up to 63 of these characters [a-zA-Z0-9!\"#$%&\'()*+,-./:;<=>?@\[\\\]^_`{}] to identify this Zyxel Device to the DHCP server. For example, Zyxel-TW.

Select this if you want to specify the IP address, subnet mask, and gateway manually.

This field is enabled if you select Use Fixed IP Address.

Enter the IP address for this interface.

This field is enabled if you select Use Fixed IP Address.

Enter the subnet mask of this interface in dot decimal notation. The subnet mask indicates what part of the IP address is the same for all computers on the network.

This field is enabled if you select Use Fixed IP Address.

Enter the IP address of the gateway. The Zyxel Device sends packets to the gateway when it does not know how to route the packet to its destination. The gateway should be on the same network as the interface.

Enter the priority of the gateway (if any) on this interface. The Zyxel Device decides which gateway to use based on this priority. The lower the number, the higher the priority. If two or more gateways have the same priority, the Zyxel Device uses the one that was configured first.

Enable IGMP Support

Select this to allow the Zyxel Device to act as an IGMP proxy for hosts connected on the IGMP downstream interface.

Enable IGMP Upstream on the interface which connects to a router running IGMP that is closer to the multicast server.

Enable IGMP Downstream on the interface which connects to the multicast hosts.

IPv6 Address Assignment

These IP address fields configure an IPv6 IP address on the interface itself.

Select this to enable IPv6 stateless auto-configuration on this interface. The interface will generate an IPv6 IP address itself from a prefix obtained from an IPv6 router on the network.

This displays the IPv6 link-local address and the network prefix that the Zyxel Device generates itself for the interface.

Enter the IPv6 address and the prefix length for this interface if you want to configure a static IP address for this interface. This field is optional.

The prefix length indicates what the left-most part of the IP address is the same for all computers on the network, that is, the network address.

Enter the IPv6 address of the default outgoing gateway using colon (:) hexadecimal notation.

Enter the priority of the gateway (if any) on this interface. The Zyxel Device decides which gateway to use based on this priority. The lower the number, the higher the priority. If two or more gateways have the same priority, the Zyxel Device uses the one that was configured first.

Use this table to have the Zyxel Device obtain an IPv6 prefix from the ISP or a connected uplink router for an internal network, such as the LAN or DMZ. You have to also enter a suffix address which is appended to the delegated prefix to form an address for this interface.

To use prefix delegation, you must:

Click this to create an entry.

Select an entry and click this to change the settings.

Select an entry and click this to delete it from this table.

Select an entry and click References to open a screen that shows which settings use the entry.

This field is a sequential value, and it is not associated with any entry.

Select the DHCPv6 request object to use from the drop-down list.

Enter the ending part of the IPv6 address, a slash (/), and the prefix length. The Zyxel Device will append it to the delegated prefix.

For example, you got a delegated prefix of 2003:1234:5678/48. You want to configure an IP address of 2003:1234:5678:1111::1/128 for this interface, then enter ::1111:0:0:0:1/128 in this field.

This field displays the combined IPv6 IP address for this interface.

DHCPv6 Setting

 

Select N/A to not use DHCPv6.

Select Client to set this interface to act as a DHCPv6 client.

Select Server to set this interface to act as a DHCPv6 server which assigns IP addresses and provides subnet mask, gateway, and DNS server information to clients.

Select Relay to set this interface to route DHCPv6 requests to the DHCPv6 relay server you specify. The DHCPv6 server(s) may be on another network.

This field displays the DHCP Unique IDentifier (DUID) of the interface, which is unique and used for identification purposes when the interface is exchanging DHCPv6 messages with others.

Select this to have the DUID generated from the interface’s default MAC address.

If you want to use a customized DUID, enter it here for the interface.

Select this to shorten the DHCPv6 message exchange process from four to two steps. This function helps reduce heavy network traffic load.

Enter the number of seconds a DHCPv6 client should wait before refreshing information retrieved from DHCPv6.

This field is available if you set this interface to DHCPv6 Client. Select this to get an IPv6 IP address for this interface from the DHCP server. Clear this to not get any IP address information through DHCPv6.

If this interface is a DHCPv6 client, use this section to configure DHCPv6 request settings that determine what additional information to get from the DHCPv6 server.

If this interface is a DHCPv6 server, use this section to configure DHCPv6 lease settings that determine what to offer to the DHCPv6 clients.

Click this to create an entry in this table. S

Select an entry and click this to delete it from this table.

Select an entry and click References to open a screen that shows which settings use the entry.

This field is a sequential value, and it is not associated with any entry.

This field displays the name of the DHCPv6 request or lease object.

This field displays the type of the object.

This field displays the IPv6 prefix that the Zyxel Device obtained from an uplink router (Server is selected) or will advertise to its clients (Client is selected).

When Relay is selected, select this check box and an interface from the drop-down list if you want to use it as the relay server.

When Relay is selected, select this check box and enter the IP address of a DHCPv6 server as the relay server.

IPv6 Router Advertisement Setting

 

Select this to enable this interface to send router advertisement messages periodically.

Select this to have the Zyxel Device indicate to hosts to obtain network settings (such as prefix and DNS settings) through DHCPv6.

Clear this to have the Zyxel Device indicate to hosts that DHCPv6 is not available and they should use the prefix in the router advertisement message.

Select this to have the Zyxel Device indicate to hosts to obtain DNS information through DHCPv6.

Clear this to have the Zyxel Device indicate to hosts that DNS information is not available in this network.

Select the router preference (Low, Medium or High) for the interface. The interface sends this preference in the router advertisements to tell hosts what preference they should use for the Zyxel Device. This helps hosts to choose their default router especially when there are multiple IPv6 router on the network.

The Maximum Transmission Unit. Type the maximum size of each IPv6 data packet, in bytes, that can move through this interface. If a larger packet arrives, the Zyxel Device divides it into smaller fragments.

Enter the maximum number of network segments that a packet can cross before reaching the destination. When forwarding an IPv6 packet, IPv6 routers are required to decrease the Hop Limit by 1 and to discard the IPv6 packet when the Hop Limit is 0.

Configure this table only if you want the Zyxel Device to advertise a fixed prefix to the network.

Click this to create an IPv6 prefix address.

Select an entry in this table and click this to modify it.

Select an entry in this table and click this to delete it.

This field is a sequential value, and it is not associated with any entry.

Enter the IPv6 network prefix address and the prefix length.

The prefix length indicates what the left-most part of the IP address is the same for all computers on the network, that is, the network address.

Use this table to configure the network prefix if you want to use a delegated prefix as the beginning part of the network prefix.

Click this to create an entry in this table.

Select an entry in this table and click this to modify it.

Select an entry in this table and click this to delete it.

Select an entry and click References to open a screen that shows which settings use the entry.

This field is a sequential value, and it is not associated with any entry.

Select the DHCPv6 request object to use for generating the network prefix for the network.

Enter the ending part of the IPv6 network address plus a slash (/) and the prefix length. The Zyxel Device will append it to the selected delegated prefix. The combined address is the network prefix for the network.

For example, you got a delegated prefix of 2003:1234:5678/48. You want to divide it into 2003:1234:5678:1111/64 for this interface and 2003:1234:5678:2222/64 for another interface. You can use ::1111/64 and ::2222/64 for the suffix address respectively. But if you do not want to divide the delegated prefix into subnetworks, enter ::0/48 here, which keeps the same prefix length (/48) as the delegated prefix.

This is the final network prefix combined by the delegated prefix and the suffix.

Interface Parameters

 

Enter the maximum amount of traffic, in kilobits per second, the Zyxel Device can send through the interface to the network. Allowed values are 0 - 1048576.

This is reserved for future use.

Enter the maximum amount of traffic, in kilobits per second, the Zyxel Device can receive from the network through the interface. Allowed values are 0 - 1048576.

Maximum Transmission Unit. Type the maximum size of each data packet, in bytes, that can move through this interface. If a larger packet arrives, the Zyxel Device divides it into smaller fragments. Allowed values are 576 - 1500. Usually, this value is 1500.

Connectivity Check

The Zyxel Device can regularly check the connection to the gateway you specified to make sure it is still available. You specify how often to check the connection, how long to wait for a response before the attempt is a failure, and how many consecutive failures are required before the Zyxel Device stops routing to the gateway. The Zyxel Device resumes routing to the gateway the first time the gateway passes the connectivity check.

Select this to turn on the connection check.

Select the method that the gateway allows.

Select icmp to have the Zyxel Device regularly ping the gateway you specify to make sure it is still available.

Select tcp to have the Zyxel Device regularly perform a TCP handshake with the gateway you specify to make sure it is still available.

Enter the number of seconds between connection check attempts.

Enter the number of seconds to wait for a response before the attempt is a failure.

Enter the number of consecutive failures before the Zyxel Device stops routing through the gateway.

Select this to use the default gateway for the connectivity check.

Select this to specify a domain name or IP address for the connectivity check. Enter that domain name or IP address in the field next to it.

This field only displays when you set the Check Method to tcp. Specify the port number to use for a TCP connectivity check.

Type one or two domain names or IP addresses for the connectivity check.

This field applies when you specify two domain names or IP addresses for the connectivity check.

Select any one if you want the check to pass if at least one of the domain names or IP addresses responds.

Select all if you want the check to pass only if both domain names or IP addresses respond.

DHCP Setting

The DHCP settings are available for the OPT, LAN and DMZ interfaces.

Select what type of DHCP service the Zyxel Device provides to the network. Choices are:

None - the Zyxel Device does not provide any DHCP services. There is already a DHCP server on the network.

DHCP Relay - the Zyxel Device routes DHCP requests to one or more DHCP servers you specify. The DHCP server(s) may be on another network.

DHCP Server - the Zyxel Device assigns IP addresses and provides subnet mask, gateway, and DNS server information to the network. The Zyxel Device is the DHCP server for the network.

These fields appear if the Zyxel Device is a DHCP Relay.

Enter the IP address of a DHCP server for the network.

This field is optional. Enter the IP address of another DHCP server for the network.

These fields appear if the Zyxel Device is a DHCP Server.

Enter the IP address from which the Zyxel Device begins allocating IP addresses. If you want to assign a static IP address to a specific computer, click Add Static DHCP.

If this field is blank, the Pool Size must also be blank. In this case, the Zyxel Device can assign every IP address allowed by the interface’s IP address and subnet mask, except for the first address (network address), last address (broadcast address) and the interface’s IP address.

Enter the number of IP addresses to allocate. This number must be at least one and is limited by the interface’s Subnet Mask. For example, if the Subnet Mask is 255.255.255.0 and IP Pool Start Address is 10.10.10.10, the Zyxel Device can allocate 10.10.10.10 to 10.10.10.254, or 245 IP addresses.

If this field is blank, the IP Pool Start Address must also be blank. In this case, the Zyxel Device can assign every IP address allowed by the interface’s IP address and subnet mask, except for the first address (network address), last address (broadcast address) and the interface’s IP address.

Specify the IP addresses up to three DNS servers for the DHCP clients to use. Use one of the following ways to specify these IP addresses.

Custom Defined - enter a static IP address.

From ISP - select the DNS server that another interface received from its DHCP server.

Zyxel Device - the DHCP clients use the IP address of this interface and the Zyxel Device works as a DNS relay.

Type the IP address of the WINS (Windows Internet Naming Service) server that you want to send to the DHCP clients. The WINS server keeps a mapping table of the computer names on your network and the IP addresses that they are currently using.

If you set this interface to DHCP Server, you can select to use either the interface’s IP address or another IP address as the default router. This default router will become the DHCP clients’ default gateway.

To use another IP address as the default router, select Custom Defined and enter the IP address.

Specify how long each computer can use the information (especially the IP address) before it has to request the information again. Choices are:

infinite - select this if IP addresses never expire

days, hours, and minutes - select this to enter how long IP addresses are valid. The default is 2 days.

This table is available if you selected DHCP server.

Configure this table if you want to send more information to DHCP clients through DHCP packets.

Click this to create an entry in this table. See Add/Edit DHCP Extended Options.

Select an entry in this table and click this to modify it.

Select an entry in this table and click this to delete it.

This field is a sequential value, and it is not associated with any entry.

This is the option’s name.

This is the option’s code number.

This is the option’s type.

This is the option’s value.

Select this option to have the Zyxel Device enforce links between specific IP addresses and specific MAC addresses for this VLAN. This stops anyone else from manually using a bound IP address on another device connected to this interface. Use this to make use only the intended users get to use specific IP addresses.

Select this option to have the Zyxel Device generate a log if a device connected to this VLAN attempts to use an IP address that is bound to another device’s MAC address.

Configure a list of static IP addresses the Zyxel Device assigns to computers connected to the interface. Otherwise, the Zyxel Device assigns an IP address dynamically using the interface’s IP Pool Start Address and Pool Size.

Click this to create a new entry.

Select an entry and click this to be able to modify it.

Select an entry and click this to delete it.

This field is a sequential value, and it is not associated with a specific entry.

Enter the IP address to assign to a device with this entry’s MAC address.

Enter the MAC address to which to assign this entry’s IP address.

Enter a description to help identify this static DHCP entry. You can use alphanumeric and ()+/:=?!*#@$_%- characters, and it can be up to 60 characters long.

RIP Setting

 

Select this to enable RIP on this interface.

This field is effective when RIP is enabled. Select the RIP direction from the drop-down list box.

BiDir - This interface sends and receives routing information.

In-Only - This interface receives routing information.

Out-Only - This interface sends routing information.

This field is effective when RIP is enabled. Select the RIP version(s) used for sending RIP packets. Choices are 1, 2, and 1 and 2.

This field is effective when RIP is enabled. Select the RIP version(s) used for receiving RIP packets. Choices are 1, 2, and 1 and 2.

This field is effective when RIP is enabled. Select this to send RIP-2 packets using subnet broadcasting; otherwise, the Zyxel Device uses multicasting.

OSPF Setting

 

Select the area in which this interface belongs. Select None to disable OSPF in this interface.

Enter the priority (between 0 and 255) of this interface when the area is looking for a Designated Router (DR) or Backup Designated Router (BDR). The highest-priority interface identifies the DR, and the second-highest-priority interface identifies the BDR. Set the priority to zero if the interface can not be the DR or BDR.

Enter the cost (between 1 and 65,535) to route packets through this interface.

Select this to stop forwarding OSPF routing information from the selected interface. As a result, this interface only receives routing information.

Select an authentication method, or disable authentication. To exchange OSPF routing information with peer border routers, you must use the same authentication method that they use. Choices are:

Same-as-Area - use the default authentication method in the area

None - disable authentication

Text - authenticate OSPF routing information using a plain-text password

MD5 - authenticate OSPF routing information using MD5 encryption

This field is available if the Authentication is Text. Type the password for text authentication. The key can consist of alphanumeric characters and the underscore, and it can be up to 16 characters long.

This field is available if the Authentication is MD5. Type the ID for MD5 authentication. The ID can be between 1 and 255.

This field is available if the Authentication is MD5. Type the password for MD5 authentication. The password can consist of alphanumeric characters and the underscore, and it can be up to 16 characters long.

MAC Address Setting

This section appears when Interface Properties is External or General. Have the interface use either the factory assigned default MAC address, a manually specified MAC address, or clone the MAC address of another device or computer.

Select this option to have the interface use the factory assigned default MAC address. By default, the Zyxel Device uses the factory assigned MAC address to identify itself.

Select this option to have the interface use a different MAC address. Either the MAC address in the field. Once it is successfully configured, the address will be copied to the configuration file. It will not change unless you change the setting or upload a different configuration file.

Proxy ARP

Proxy ARP is available for external or general interfaces on the Zyxel Device. See InternalThese screen’s fields are described in the table below. for more information on Proxy ARP.

Select this to allow the to answer external interface ARP requests on behalf of a device on its internal interface. Interfaces supported are:

See Proxy ARP for more information.

Click Add to create an IPv4 Address, an IPv4 CIDR (for example, 192.168.1.1/24) or an IPv4 Range (for example, 192.168.1.2-192.168.1.100) as the target IP address. The Zyxel Device answers external ARP requests only if they match one of these inputted target IP addresses. For example, if the IPv4 Address is 192.168.1.5, then the Zyxel Device will answer ARP requests coming from the WAN only if it contains 192.168.1.5 as the target IP address.

Select an existing entry and click Remove to delete that entry.

Related Setting

 

Click WAN TRUNK to go to a screen where you can set this VLAN to be part of a WAN trunk for load balancing.

Click Policy Route to go to the screen where you can manually configure a policy route to associate traffic with this VLAN.

OK

Click OK to save your changes back to the Zyxel Device.

Cancel

Click Cancel to exit this screen without saving.

Configuration / IPv6 Configuration

Use the Configuration section for IPv4 network settings. Use the IPv6 Configuration section for IPv6 network settings if you connect your Zyxel Device to an IPv6 network. Both sections have similar fields as described below.

Add

Click this to create a new entry.

Edit

Double-click an entry or select it and click Edit to open a screen where you can modify the entry’s settings.

Remove

To remove an entry, select it and click Remove. The Zyxel Device confirms you want to remove it before doing so.

Activate

To turn on an entry, select it and click Activate.

Inactivate

To turn off an entry, select it and click Inactivate.

Create Virtual Interface

To open the screen where you can create a virtual interface, select an interface and click Create Virtual Interface.

References

Select an entry and click References to open a screen that shows which settings use the entry.

#

This field is a sequential value, and it is not associated with any interface.

Status

This icon is lit when the entry is active and dimmed when the entry is inactive.

Name

This field displays the name of the interface.

Description

This field displays the description of the interface.

IP Address

This field displays the current IP address of the interface. If the IP address is 0.0.0.0, the interface does not have an IP address yet.

This screen also shows whether the IP address is a static IP address (STATIC) or dynamically assigned (DHCP). IP addresses are always static in virtual interfaces.

Member

This field displays the Ethernet interfaces and VLAN interfaces in the bridge interface. It is blank for virtual interfaces.

Apply

Click Apply to save your changes back to the Zyxel Device.

Reset

Click Reset to return the screen to its last-saved settings.

IPv4/IPv6 View / IPv4 View / IPv6 View

Use this button to display both IPv4 and IPv6, IPv4-only, or IPv6-only configuration fields.

Show Advanced Settings / Hide Advanced Settings

Click this button to display a greater or lesser number of configuration fields.

Create New Object

Click this button to create a DHCPv6 lease or DHCPv6 request object that you may use for the DHCPv6 settings in this screen.

General Settings

 

Select this to enable this interface. Clear this to disable this interface.

General IPv6 Setting

 

Select this to enable IPv6 on this interface. Otherwise, clear this to disable it.

Interface Properties

 

Select one of the following option depending on the type of network to which the Zyxel Device is connected or if you want to additionally manually configure some related settings.

internal is for connecting to a local network. Other corresponding configuration options: DHCP server and DHCP relay. The Zyxel Device automatically adds default SNAT settings for traffic flowing from this interface to an external interface.

external is for connecting to an external network (like the Internet). The Zyxel Device automatically adds this interface to the default WAN trunk.

For general, the rest of the screen’s options do not automatically adjust and you must manually configure a policy route to add routing and SNAT settings for the interface.

This field is read-only if you are editing the interface. Enter the name of the bridge interface. The format is brx, where x is 0 - 11. For example, br0, br3, and so on.

Select the zone to which the interface is to belong. You use zones to apply security settings such as security policy, IDP, remote management, anti-malware, and application patrol.

Enter a description of this interface. You can use alphanumeric and ()+/:=?!*#@$_%- characters, and it can be up to 60 characters long. Spaces are allowed, but the string can’t start with a space.

Member Configuration

 

This field displays Ethernet interfaces and VLAN interfaces that can become part of the bridge interface. An interface is not available in the following situations:

Select one, and click the >> arrow to add it to the bridge interface. Each bridge interface can only have one VLAN interface.

This field displays the interfaces that are part of the bridge interface. Select one, and click the << arrow to remove it from the bridge interface.

IP Address Assignment

 

Select this if this interface is a DHCP client. In this case, the DHCP server configures the IP address, subnet mask, and gateway automatically.

DHCP Option 60 is used by the Zyxel Device for identification to the DHCP server using the VCI (Vendor Class Identifier) on the DHCP server. The Zyxel Device adds it in the initial DHCP discovery message that a DHCP client broadcasts in search of an IP address. The DHCP server can assign different IP addresses or options to clients with the specific VCI or reject the request from clients without the specific VCI.

Type a string using up to 63 of these characters [a-zA-Z0-9!\"#$%&\'()*+,-./:;<=>?@\[\\\]^_`{}] to identify this Zyxel Device to the DHCP server. For example, Zyxel-TW.

Select this if you want to specify the IP address, subnet mask, and gateway manually.

This field is enabled if you select Use Fixed IP Address.

Enter the IP address for this interface.

This field is enabled if you select Use Fixed IP Address.

Enter the subnet mask of this interface in dot decimal notation. The subnet mask indicates what part of the IP address is the same for all computers on the network.

This field is enabled if you select Use Fixed IP Address.

Enter the IP address of the gateway. The Zyxel Device sends packets to the gateway when it does not know how to route the packet to its destination. The gateway should be on the same network as the interface.

Enter the priority of the gateway (if any) on this interface. The Zyxel Device decides which gateway to use based on this priority. The lower the number, the higher the priority. If two or more gateways have the same priority, the Zyxel Device uses the one that was configured first.

Enable IGMP Support

Select this to allow the Zyxel Device to act as an IGMP proxy for hosts connected on the IGMP downstream interface.

Enable IGMP Upstream on the interface which connects to a router running IGMP that is closer to the multicast server.

Enable IGMP Downstream on the interface which connects to the multicast hosts.

IPv6 Address Assignment

These IP address fields configure an IPv6 IP address on the interface itself.

Select this to enable IPv6 stateless auto-configuration on this interface. The interface will generate an IPv6 IP address itself from a prefix obtained from an IPv6 router on the network.

This displays the IPv6 link-local address and the network prefix that the Zyxel Device generates itself for the interface.

Enter the IPv6 address and the prefix length for this interface if you want to use a static IP address. This field is optional.

The prefix length indicates what the left-most part of the IP address is the same for all computers on the network, that is, the network address.

Enter the IPv6 address of the default outgoing gateway using colon (:) hexadecimal notation.

Enter the priority of the gateway (if any) on this interface. The Zyxel Device decides which gateway to use based on this priority. The lower the number, the higher the priority. If two or more gateways have the same priority, the Zyxel Device uses the one that was configured first.

Use this table to have the Zyxel Device obtain an IPv6 prefix from the ISP or a connected uplink router for an internal network, such as the LAN or DMZ. You have to also enter a suffix address which is appended to the delegated prefix to form an address for this interface.

To use prefix delegation, you must:

Click this to create an entry.

Select an entry and click this to change the settings.

Select an entry and click this to delete it from this table.

Select an entry and click References to open a screen that shows which settings use the entry.

This field is a sequential value, and it is not associated with any entry.

Select the DHCPv6 request object to use from the drop-down list.

Enter the ending part of the IPv6 address, a slash (/), and the prefix length. The Zyxel Device will append it to the delegated prefix.

For example, you got a delegated prefix of 2003:1234:5678/48. You want to configure an IP address of 2003:1234:5678:1111:1/128 for this interface, then enter ::1111:0:0:0:1/128 in this field.

This field displays the combined IPv6 IP address for this interface.

DHCPv6 Setting

 

Select N/A to not use DHCPv6.

Select Client to set this interface to act as a DHCPv6 client.

Select Server to set this interface to act as a DHCPv6 server which assigns IP addresses and provides subnet mask, gateway, and DNS server information to clients.

Select Relay to set this interface to route DHCPv6 requests to the DHCPv6 relay server you specify. The DHCPv6 server(s) may be on another network.

This field displays the DHCP Unique IDentifier (DUID) of the interface, which is unique and used for identification purposes when the interface is exchanging DHCPv6 messages with others. See DHCPv6 for more information.

Select this if you want the DUID is generated from the interface’s default MAC address.

If you want to use a customized DUID, enter it here for the interface.

Select this to shorten the DHCPv6 message exchange process from four to two steps. This function helps reduce heavy network traffic load.

Enter the number of seconds a DHCPv6 client should wait before refreshing information retrieved from DHCPv6.

This field is available if you set this interface to DHCPv6 Client. Select this to get an IPv6 IP address for this interface from the DHCP server. Clear this to not get any IP address information through DHCPv6.

If this interface is a DHCPv6 client, use this section to configure DHCPv6 request settings that determine what additional information to get from the DHCPv6 server.

If the interface is a DHCPv6 server, use this section to configure DHCPv6 lease settings that determine what to offer to the DHCPv6 clients.

Click this to create an entry in this table. See Add/Edit DHCPv6 Request/Release Options for more information.

Select an entry and click this to change the settings.

Select an entry and click this to delete it from this table.

Select an entry and click References to open a screen that shows which settings use the entry.

This field is a sequential value, and it is not associated with any entry.

This field displays the name of the DHCPv6 request or lease object.

This field displays the type of the object.

This field displays the IPv6 prefix that the Zyxel Device obtained from an uplink router (Server is selected) or will advertise to its clients (Client is selected).

When Relay is selected, select this check box and an interface from the drop-down list if you want to use it as the relay server.

When Relay is selected, select this check box and enter the IP address of a DHCPv6 server as the relay server.

IPv6 Router Advertisement Setting

 

Select this to enable this interface to send router advertisement messages periodically.

Select this to have the Zyxel Device indicate to hosts to obtain network settings (such as prefix and DNS settings) through DHCPv6.

Clear this to have the Zyxel Device indicate to hosts that DHCPv6 is not available and they should use the prefix in the router advertisement message.

Select this to have the Zyxel Device indicate to hosts to obtain DNS information through DHCPv6.

Clear this to have the Zyxel Device indicate to hosts that DNS information is not available in this network.

Select the router preference (Low, Medium or High) for the interface. The interface sends this preference in the router advertisements to tell hosts what preference they should use for the Zyxel Device. This helps hosts to choose their default router especially when there are multiple IPv6 router on the network.

The Maximum Transmission Unit. Type the maximum size of each IPv6 data packet, in bytes, that can move through this interface. If a larger packet arrives, the Zyxel Device divides it into smaller fragments.

Enter the maximum number of network segments that a packet can cross before reaching the destination. When forwarding an IPv6 packet, IPv6 routers are required to decrease the Hop Limit by 1 and to discard the IPv6 packet when the Hop Limit is 0.

Configure this table only if you want the Zyxel Device to advertise a fixed prefix to the network.

Click this to create an IPv6 prefix address.

Select an entry in this table and click this to modify it.

Select an entry in this table and click this to delete it.

This field is a sequential value, and it is not associated with any entry.

Enter the IPv6 network prefix address and the prefix length.

The prefix length indicates what the left-most part of the IP address is the same for all computers on the network, that is, the network address.

Use this table to configure the network prefix if you want to use a delegated prefix as the beginning part of the network prefix.

Click this to create an entry in this table.

Select an entry in this table and click this to modify it.

Select an entry in this table and click this to delete it.

Select an entry and click References to open a screen that shows which settings use the entry.

This field is a sequential value, and it is not associated with any entry.

Select the DHCPv6 request object to use for generating the network prefix for the network.

Enter the ending part of the IPv6 network address plus a slash (/) and the prefix length. The Zyxel Device will append it to the selected delegated prefix. The combined address is the network prefix for the network.

For example, you got a delegated prefix of 2003:1234:5678/48. You want to divide it into 2003:1234:5678:1111/64 for this interface and 2003:1234:5678:2222/64 for another interface. You can use ::1111/64 and ::2222/64 for the suffix address respectively. But if you do not want to divide the delegated prefix into subnetworks, enter ::0/48 here, which keeps the same prefix length (/48) as the delegated prefix.

This is the final network prefix combined by the selected delegated prefix and the suffix.

Interface Parameters

 

Enter the maximum amount of traffic, in kilobits per second, the Zyxel Device can send through the interface to the network. Allowed values are 0 - 1048576.

This is reserved for future use.

Enter the maximum amount of traffic, in kilobits per second, the Zyxel Device can receive from the network through the interface. Allowed values are 0 - 1048576.

Maximum Transmission Unit. Type the maximum size of each data packet, in bytes, that can move through this interface. If a larger packet arrives, the Zyxel Device divides it into smaller fragments. Allowed values are 576 - 1500. Usually, this value is 1500.

DHCP Setting

 

Select what type of DHCP service the Zyxel Device provides to the network. Choices are:

None - the Zyxel Device does not provide any DHCP services. There is already a DHCP server on the network.

DHCP Relay - the Zyxel Device routes DHCP requests to one or more DHCP servers you specify. The DHCP server(s) may be on another network.

DHCP Server - the Zyxel Device assigns IP addresses and provides subnet mask, gateway, and DNS server information to the network. The Zyxel Device is the DHCP server for the network.

These fields appear if the Zyxel Device is a DHCP Relay.

Enter the IP address of a DHCP server for the network.

This field is optional. Enter the IP address of another DHCP server for the network.

These fields appear if the Zyxel Device is a DHCP Server.

Enter the IP address from which the Zyxel Device begins allocating IP addresses. If you want to assign a static IP address to a specific computer, click Add Static DHCP.

If this field is blank, the Pool Size must also be blank. In this case, the Zyxel Device can assign every IP address allowed by the interface’s IP address and subnet mask, except for the first address (network address), last address (broadcast address) and the interface’s IP address.

Enter the number of IP addresses to allocate. This number must be at least one and is limited by the interface’s Subnet Mask. For example, if the Subnet Mask is 255.255.255.0 and IP Pool Start Address is 10.10.10.10, the Zyxel Device can allocate 10.10.10.10 to 10.10.10.254, or 245 IP addresses.

If this field is blank, the IP Pool Start Address must also be blank. In this case, the Zyxel Device can assign every IP address allowed by the interface’s IP address and subnet mask, except for the first address (network address), last address (broadcast address) and the interface’s IP address.

Specify the IP addresses up to three DNS servers for the DHCP clients to use. Use one of the following ways to specify these IP addresses.

Custom Defined - enter a static IP address.

From ISP - select the DNS server that another interface received from its DHCP server.

Zyxel Device - the DHCP clients use the IP address of this interface and the Zyxel Device works as a DNS relay.

Type the IP address of the WINS (Windows Internet Naming Service) server that you want to send to the DHCP clients. The WINS server keeps a mapping table of the computer names on your network and the IP addresses that they are currently using.

If you set this interface to DHCP Server, you can select to use either the interface’s IP address or another IP address as the default router. This default router will become the DHCP clients’ default gateway.

To use another IP address as the default router, select Custom Defined and enter the IP address.

Specify how long each computer can use the information (especially the IP address) before it has to request the information again. Choices are:

infinite - select this if IP addresses never expire

days, hours, and minutes - select this to enter how long IP addresses are valid.

This table is available if you selected DHCP server.

Configure this table if you want to send more information to DHCP clients through DHCP packets.

Click this to create an entry in this table.

Select an entry in this table and click this to modify it.

Select an entry in this table and click this to delete it.

This field is a sequential value, and it is not associated with any entry.

This is the option’s name.

This is the option’s code number.

This is the option’s type.

This is the option’s value.

PXE (Preboot eXecution Environment) allows a client computer to use the network to boot up and install an operating system via a PXE-capable Network Interface Card (NIC).

PXE is available for computers on internal interfaces to allow them to boot up using boot software on a PXE server. The Zyxel Device acts as an intermediary between the PXE server and the computers that need boot software.

The PXE server must have a public IPv4 address. You must enable DHCP Server on the Zyxel Device so that it can receive information from the PXE server.

A boot loader is a computer program that loads the operating system for the computer. Type the exact file name of the boot loader software file, including filename extension, that is on the PXE server. If the wrong filename is typed, then the client computers cannot boot.

Select this option to have this interface enforce links between specific IP addresses and specific MAC addresses. This stops anyone else from manually using a bound IP address on another device connected to this interface. Use this to make use only the intended users get to use specific IP addresses.

Select this option to have the Zyxel Device generate a log if a device connected to this interface attempts to use an IP address that is bound to another device’s MAC address.

Configure a list of static IP addresses the Zyxel Device assigns to computers connected to the interface. Otherwise, the Zyxel Device assigns an IP address dynamically using the interface’s IP Pool Start Address and Pool Size.

Click this to create a new entry.

Select an entry and click this to be able to modify it.

Select an entry and click this to delete it.

This field is a sequential value, and it is not associated with a specific entry.

Enter the IP address to assign to a device with this entry’s MAC address.

Enter the MAC address to which to assign this entry’s IP address.

Enter a description to help identify this static DHCP entry. You can use alphanumeric and ()+/:=?!*#@$_%- characters, and it can be up to 60 characters long.

Connectivity Check

The interface can regularly check the connection to the gateway you specified to make sure it is still available. You specify how often the interface checks the connection, how long to wait for a response before the attempt is a failure, and how many consecutive failures are required before the Zyxel Device stops routing to the gateway. The Zyxel Device resumes routing to the gateway the first time the gateway passes the connectivity check.

Select this to turn on the connection check.

Select the method that the gateway allows.

Select icmp to have the Zyxel Device regularly ping the gateway you specify to make sure it is still available.

Select tcp to have the Zyxel Device regularly perform a TCP handshake with the gateway you specify to make sure it is still available.

Enter the number of seconds between connection check attempts.

Enter the number of seconds to wait for a response before the attempt is a failure.

Enter the number of consecutive failures before the Zyxel Device stops routing through the gateway.

Select this to use the default gateway for the connectivity check.

Select this to specify a domain name or IP address for the connectivity check. Enter that domain name or IP address in the field next to it.

This field only displays when you set the Check Method to tcp. Specify the port number to use for a TCP connectivity check.

Type one or two domain names or IP addresses for the connectivity check.

This field applies when you specify two domain names or IP addresses for the connectivity check.

Select any one if you want the check to pass if at least one of the domain names or IP addresses responds.

Select all if you want the check to pass only if both domain names or IP addresses respond.

Proxy ARP

Proxy ARP is available for external or general interfaces on the Zyxel Device. See InternalThese screen’s fields are described in the table below. for more information on Proxy ARP.

Select this to allow the to answer external interface ARP requests on behalf of a device on its internal interface. Interfaces supported are:

See Proxy ARP for more information.

Click Add to create an IPv4 Address, an IPv4 CIDR (for example, 192.168.1.1/24) or an IPv4 Range (for example, 192.168.1.2-192.168.1.100) as the target IP address. The Zyxel Device answers external ARP requests only if they match one of these inputted target IP addresses. For example, if the IPv4 Address is 192.168.1.5, then the Zyxel Device will answer ARP requests coming from the WAN only if it contains 192.168.1.5 as the target IP address.

Select an existing entry and click Remove to delete that entry.

Related Setting

 

Click WAN TRUNK to go to a screen where you can configure the interface as part of a WAN trunk for load balancing.

Click Policy Route to go to the screen where you can manually configure a policy route to associate traffic with this bridge interface.

OK

Click OK to save your changes back to the Zyxel Device.

Cancel

Click Cancel to exit this screen without saving.

Configuration

 

Add

Click this to create a new entry.

Edit

Double-click an entry or select it and click Edit to open a screen where you can modify the entry’s settings.

Remove

To remove an entry, select it and click Remove. The Zyxel Device confirms you want to remove it before doing so.

Activate

To turn on an entry, select it and click Activate.

Inactivate

To turn off an entry, select it and click Inactivate.

References

Select an entry and click References to open a screen that shows which settings use the entry.

#

This field is a sequential value, and it is not associated with any interface.

Status

This icon is lit when the entry is active and dimmed when the entry is inactive.

Name

This field displays the name of the VTI interface.

IP Address

This field displays the current IP address of the virtual interface and subnet mask in bits. If the IP address is 0.0.0.0, the interface does not have an IP address yet.

vpn-rule

This shows the name of the associated IPSec VPN rule with VPN Tunnel Interface application scenario.

Apply

Click Apply to save your changes back to the Zyxel Device.

Reset

Click Reset to return the screen to its last-saved settings.

General Settings

 

Select this to enable VTI. Clear this to disable it.

Interface Properties

 

This field is read-only if you are editing an existing VPN tunnel interface. For a new VPN tunnel interface, enter the name of the VPN tunnel interface in vtix format, where x is a number from 0 to the maximum number of VPN connections allowed for this model. For example, enter vti10.

Select a zone. Make sure that the zone you select does not have traffic blocked by a security feature such as a security policy.

You should have created a VPN tunnel first for a VPN Tunnel Interface scenario. Select one of the VPN Tunnel Interface scenario rules that you created.

IP Address Assignment

 

Enter the IP address for this interface.

Enter the subnet mask of this interface in dot decimal notation. The subnet mask indicates what part of the IP address is the same for all computers on the network.

Enter the priority of the gateway (if any) on this interface. The Zyxel Device decides which gateway to use based on this priority. The lower the number, the higher the priority. If two or more gateways have the same priority, the Zyxel Device uses the one that was configured first.

Enable IGMP Support

Select this to allow the Zyxel Device to act as an IGMP proxy for hosts connected on the IGMP downstream interface.

Enable IGMP Upstream on the interface which connects to a router running IGMP that is closer to the multicast server.

Enable IGMP Downstream on the interface which connects to the multicast hosts.

Interface Parameters

 

Enter the maximum amount of traffic, in kilobits per second, the Zyxel Device can send through the interface to the network. Allowed values are 0 - 1048576.

This is reserved for future use.

Enter the maximum amount of traffic, in kilobits per second, the Zyxel Device can receive from the network through the interface. Allowed values are 0 - 1048576.

Connectivity Check

These fields appear when you select a vpn-rule.

The interface can regularly check the connection to the gateway you specified to make sure it is still available. You specify how often the interface checks the connection, how long to wait for a response before the attempt is a failure, and how many consecutive failures are required before the Zyxel Device stops routing to the gateway. The Zyxel Device resumes routing to the gateway the first time the gateway passes the connectivity check.

Select this to turn on the connection check.

Select the method that the gateway allows.

Select icmp to have the Zyxel Device regularly ping the gateway you specify to make sure it is still available.

Select tcp to have the Zyxel Device regularly perform a TCP handshake with the gateway you specify to make sure it is still available.

Enter the number of seconds between connection check attempts.

Enter the number of seconds to wait for a response before the attempt is a failure.

Enter the number of consecutive failures before the Zyxel Device stops routing through the gateway.

Select this to specify a domain name or IP address for the connectivity check. Enter that domain name or IP address in the field next to it.

This field only displays when you set the Check Method to tcp. Specify the port number to use for a TCP connectivity check.

RIP Setting

 

Select this to enable RIP in this interface.

This field is effective when RIP is enabled. Select the RIP direction from the drop-down list box.

BiDir - This interface sends and receives routing information.

In-Only - This interface receives routing information.

Out-Only - This interface sends routing information.

This field is effective when RIP is enabled. Select the RIP version(s) used for sending RIP packets. Choices are 1, 2, and 1 and 2.

This field is effective when RIP is enabled. Select the RIP version(s) used for receiving RIP packets. Choices are 1, 2, and 1 and 2.

This field is effective when RIP is enabled. Select this to send RIP-2 packets using subnet broadcasting; otherwise, the Zyxel Device uses multicasting.

OSPF Setting

 

Select the area in which this interface belongs. Select None to disable OSPF in this interface.

Enter the priority (between 0 and 255) of this interface when the area is looking for a Designated Router (DR) or Backup Designated Router (BDR). The highest-priority interface identifies the DR, and the second-highest-priority interface identifies the BDR. Set the priority to zero if the interface can not be the DR or BDR.

Enter the cost (between 1 and 65,535) to route packets through this interface.

Select this to stop forwarding OSPF routing information from the selected interface. As a result, this interface only receives routing information.

Select an authentication method, or disable authentication. To exchange OSPF routing information with peer border routers, you must use the same authentication method that they use. Choices are:

Same-as-Area - use the default authentication method in the area

None - disable authentication

Text - authenticate OSPF routing information using a plain-text password

MD5 - authenticate OSPF routing information using MD5 encryption

This field is available if the Authentication is Text. Type the password for text authentication. The key can consist of alphanumeric characters and the underscore, and it can be up to 16 characters long.

This field is available if the Authentication is MD5. Type the ID for MD5 authentication. The ID can be between 1 and 255.

This field is available if the Authentication is MD5. Type the password for MD5 authentication. The password can consist of alphanumeric characters and the underscore, and it can be up to 16 characters long.

Related Setting

 

Click WAN TRUNK to go to a screen where you can configure the interface as part of a WAN trunk for load balancing.

Click Policy Route to go to the screen where you can manually configure a policy route to associate traffic with this bridge interface.

OK

Click OK to save your changes back to the Zyxel Device.

Cancel

Click Cancel to exit this screen without saving.

Show Advanced Settings / Hide Advanced Settings

Click this button to display a greater or lesser number of configuration fields.

Configuration

Configure what to do with existing passive mode interface connections when an interface set to active mode in the same trunk comes back up.

Select this to terminate existing connections on an interface which is set to passive mode when any interface set to active mode in the same trunk comes back up.

Enable Default SNAT

Select this to have the Zyxel Device use the IP address of the outgoing interface as the source IP address of the packets it sends out through its WAN trunks. The Zyxel Device automatically adds SNAT settings for traffic it routes from internal interfaces to external interfaces.

Default Trunk Selection

Select whether the Zyxel Device is to use the default system WAN trunk or one of the user configured WAN trunks as the default trunk for routing traffic from internal interfaces to external interfaces.

User Configuration / System Default

The Zyxel Device automatically adds all external interfaces into the pre-configured system default SYSTEM_DEFAULT_WAN_TRUNK. You cannot delete it. You can create your own User Configuration trunks and customize the algorithm, member interfaces and the active/passive mode.

Add

Click this to create a new user-configured trunk.

Edit

Double-click an entry or select it and click Edit to open a screen where you can modify the entry’s settings.

Remove

To remove a user-configured trunk, select it and click Remove. The Zyxel Device confirms you want to remove it before doing so.

References

Select an entry and click References to open a screen that shows which settings use the entry.

#

This field is a sequential value, and it is not associated with any interface.

Name

This field displays the label that you specified to identify the trunk.

Algorithm

This field displays the load balancing method the trunk is set to use.

Apply

Click this button to save your changes to the Zyxel Device.

Reset

Click this button to return the screen to its last-saved settings.

Name

This is read-only if you are editing an existing trunk. When adding a new trunk, enter a descriptive name for this trunk. You may use 1-31 alphanumeric characters, underscores (_), or dashes (-), but the first character cannot be a number. This value is case-sensitive.

Load Balancing Algorithm

Select a load balancing method to use from the drop-down list box.

Select Weighted Round Robin to balance the traffic load between interfaces based on their respective weights. An interface with a larger weight gets more chances to transmit traffic than an interface with a smaller weight. For example, if the weight ratio of wan1 and wan2 interfaces is 2:1, the Zyxel Device chooses wan1 for 2 sessions’ traffic and wan2 for 1 session’s traffic in each round of 3 new sessions.

Select Least Load First to send new session traffic through the least utilized trunk member.

Select Spillover to send network traffic through the first interface in the group member list until there is enough traffic that the second interface needs to be used (and so on).

Load Balancing Index(es)

This field is available if you selected to use the Least Load First or Spillover method.

Select Outbound, Inbound, or Outbound + Inbound to set the traffic to which the Zyxel Device applies the load balancing method. Outbound means the traffic traveling from an internal interface (ex. LAN) to an external interface (ex. WAN). Inbound means the opposite.

 

The table lists the trunk’s member interfaces. You can add, edit, remove, or move entries for user configured trunks.

Add

Click this to add a member interface to the trunk. Select an interface and click Add to add a new member interface after the selected member interface.

Edit

Select an entry and click Edit to modify the entry’s settings.

Remove

To remove a member interface, select it and click Remove. The Zyxel Device confirms you want to remove it before doing so.

Move

To move an interface to a different number in the list, click the Move icon. In the field that appears, specify the number to which you want to move the interface.

#

This column displays the priorities of the group’s interfaces. The order of the interfaces in the list is important since they are used in the order they are listed.

Member

Click this table cell and select an interface to be a group member.

If you select an interface that is part of another Ethernet interface, the Zyxel Device does not send traffic through the interface as part of the trunk. For example, if you have physical port 5 in the ge2 representative interface, you must select interface ge2 in order to send traffic through port 5 as part of the trunk. If you select interface ge5 as a member here, the Zyxel Device will not send traffic through port 5 as part of the trunk.

Mode

Click this table cell and select Active to have the Zyxel Device always attempt to use this connection.

Select Passive to have the Zyxel Device only use this connection when all of the connections set to active are down. You can only set one of a group’s interfaces to passive mode.

Weight

This field displays with the weighted round robin load balancing algorithm. Specify the weight (1~10) for the interface. The weights of the different member interfaces form a ratio. This ratio determines how much traffic the Zyxel Device assigns to each member interface. The higher an interface’s weight is (relative to the weights of the interfaces), the more sessions that interface should handle.

Ingress Bandwidth

This is reserved for future use.

This field displays with the least load first load balancing algorithm. It displays the maximum number of kilobits of data the Zyxel Device is to allow to come in through the interface per second.

Egress Bandwidth

This field displays with the least load first or spillover load balancing algorithm. It displays the maximum number of kilobits of data the Zyxel Device is to send out through the interface per second.

Spillover

This field displays with the spillover load balancing algorithm. Specify the maximum bandwidth of traffic in kilobits per second (1~1048576) to send out through the interface before using another interface. When this spillover bandwidth limit is exceeded, the Zyxel Device sends new session traffic through the next interface. The traffic of existing sessions still goes through the interface on which they started.

The Zyxel Device uses the group member interfaces in the order that they are listed.

OK

Click OK to save your changes back to the Zyxel Device.

Cancel

Click Cancel to exit this screen without saving.

Name

This field displays the name of the selected system default trunk.

Load Balancing Algorithm

Select the load balancing method to use for the trunk.

Select Weighted Round Robin to balance the traffic load between interfaces based on their respective weights. An interface with a larger weight gets more chances to transmit traffic than an interface with a smaller weight. For example, if the weight ratio of wan1 and wan2 interfaces is 2:1, the Zyxel Device chooses wan1 for 2 sessions’ traffic and wan2 for 1 session’s traffic in each round of 3 new sessions.

Select Least Load First to send new session traffic through the least utilized trunk member.

Select Spillover to send network traffic through the first interface in the group member list until there is enough traffic that the second interface needs to be used (and so on).

 

The table lists the trunk’s member interfaces. This table is read-only.

#

This column displays the priorities of the group’s interfaces. The order of the interfaces in the list is important since they are used in the order they are listed.

Member

This column displays the name of the member interfaces.

Mode

This field displays Active if the Zyxel Device always attempt to use this connection.

This field displays Passive if the Zyxel Device only use this connection when all of the connections set to active are down. Only one of a group’s interfaces can be set to passive mode.

Weight

This field displays with the weighted round robin load balancing algorithm. Specify the weight (1~10) for the interface. The weights of the different member interfaces form a ratio. s

Ingress Bandwidth

This is reserved for future use.

This field displays with the least load first load balancing algorithm. It displays the maximum number of kilobits of data the Zyxel Device is to allow to come in through the interface per second.

Egress Bandwidth

This field displays with the least load first or spillover load balancing algorithm. It displays the maximum number of kilobits of data the Zyxel Device is to send out through the interface per second.

Spillover

This field displays with the spillover load balancing algorithm. Specify the maximum bandwidth of traffic in kilobits per second (1~1048576) to send out through the interface before using another interface. When this spillover bandwidth limit is exceeded, the Zyxel Device sends new session traffic through the next interface. The traffic of existing sessions still goes through the interface on which they started.

The Zyxel Device uses the group member interfaces in the order that they are listed.

OK

Click OK to save your changes back to the Zyxel Device.

Cancel

Click Cancel to exit this screen without saving.