Configuring a Zyxel P-662H-D1 Router

Introduction

This document describes the configuration of a Zyxel P-662 router for use with ECLOUD. We will look into the NAT configuration necessary for the ECLOUD Phone System and VoIP Providers, Remote Extensions or Bridges. This guide is based on the ZyNOS Firmware Version V3.40(AGZ.9), dated 01/08/2010.

Note: We cannot assist you in the configuration of your firewall.

Zyxel P-662H-D1 Router

Step 1: Create Services

  1. Using your browser, browse to the management URL of the Zyxel P-662H-D1 Router.
  2. Log in using the administrator password.
  3. Use the menu on the left to go to Security” → Firewall”.
  4. Click on the Rules” tab.
  5. From the Packet Direction” drop down list, select WAN to LAN”, and click the “Add” button.
  6. Scroll to the “Services” section, and click on the “Edit Customized Services” link.
  7. Add the following services in the table (click on the number to add an entry). For an up to date list of ports that need to be open check here, as the ports may depend on the version you are using:
  • HTTP
  • HTTPS
  • SIP
  • SECURE SIP
  • RTP
  • TUNNEL

Click “Back” when done.        

  1. Scroll back to the top and configure the following settings:
  • Active”: Enabled
  • Action for Matched Packets”: Permit
  • Source – Address Type”: Add IP address if known or leave default “Any”.
  • Destination – Address Type”: Add IP address if known or leave default “Any”.
  • Service – Available Services”: Add “*SIP (TCP/UDP:5060)” and remove “Any (UDP)” and “Any (TCP)” from the list.
  • Day to Apply”“Everyday” (or as needed).
  • Time of Day to Apply”“All day” (or as needed).

Click “Apply” when done.

Zyxel Port Forwarding Rules summary page.

  1. Repeat step 8 for each service configured in step 7.

Step 2: Configure Port Forwarding (NAT)

  1. Use the menu on the left to go to “Network” > “NAT”.
  2. Click on “Port Forwarding”.
  3. In the Service Name, select “User define”.
  4. Configure the Rule as follows:
  • Active”: Enabled
  • Service Name”: SIP
  • Start Port”: 5060
  • End Port”: 5060
  • Server IP Address”: Internal IP of PBX

Click “Apply” when done.

  1. For an always up to date list of the ports check here. Repeat steps 3 to 4 for the following protocols:
  • HTTP
  • HTTPS
  • SIP
  • SECURE SIP
  • RTP
  • TUNNEL
  1. Click “Apply” to save the configuration.

Step 3: Validating Your Setup

Log into the ECLOUD Management Console and go to Dashboard” > Firewall” and run the Firewall Checker to validate if your firewall is correctly configured for use with ECLOUD.