
Layer-2 Interface | Internet Connection | ||
|---|---|---|---|
Connection | Mode | encapsulation | Connection Settings |
Ethernet | Routing | PPPoE | PPP user name and password, WAN IPv4 or IPv6 IP address, routing feature, DNS server, VLAN, QoS, and MTU |
IPoE | WAN IPv4 or IPv6 IP address, NAT, DNS server and routing feature | ||
Bridge | N/A | VLAN | |
GPON | Routing | PPPoE | PPP user name and password, WAN IPv4 or IPv6 IP address, routing feature, DNS server, VLAN, QoS, and MTU |
IPoE | WAN IPv4 or IPv6 IP address, NAT, DNS server and routing feature | ||
Bridge | N/A | ||
Layer-2 Interface | Internet Connection | |||
|---|---|---|---|---|
Connection | dsl link type | Mode | encapsulation | Connection Settings |
ADSL or VDSL over PTM | N/A | Routing | PPPoE | PPP information, IPv4 or IPv6 IP address, routing feature, DNS server, VLAN, QoS, and MTU |
IPoE | IPv4 or IPv6 IP address, routing feature, DNS server, VLAN, QoS, and MTU | |||
Bridge | N/A | VLAN and QoS | ||
ADSL over ATM | EoA | Routing | PPPoE ot PPPoA | ATM PVC configuration, PPP information, IPv4/IPv6 IP address, routing feature, DNS server, VLAN, QoS, and MTU |
IPoE or IPoA | ATM PVC configuration, IPv4 or IPv6 IP address, routing feature, DNS server, VLAN, QoS, and MTU | |||
Bridge | N/A | ATM PVC configuration, and QoS | ||
Ethernet | N/A | Routing | PPPoE | PPP user name and password, WAN IPv4 or IPv6 IP address, routing feature, DNS server, VLAN, QoS, and MTU |
IPoE | WAN IPv4 or IPv6 IP address, NAT, DNS server and routing feature | |||
Bridge | N/A | VLAN and QoS | ||



Label | Description |
|---|---|
Add New WAN Interface | Click this button to create a new connection. |
# | This is the index number of the entry. |
Name | This is the service name of the connection. |
Type | This shows types of connections the router has. |
Mode | This shows whether the connection is in routing or bridge mode. |
Encapsulation | This is the method of encapsulation used by this connection. |
802.1p | This indicates the 802.1p priority level assigned to traffic sent through this connection. This displays N/A when there is no priority level assigned. |
802.1q | This indicates the VLAN ID number assigned to traffic sent through this connection. This displays N/A when there is no VLAN ID number assigned. |
IGMP Proxy | This shows whether the Zyxel Device act as an IGMP proxy on this connection. |
NAT | This shows whether NAT is activated or not for this connection. |
Default Gateway | This shows whether the Zyxel Device use the WAN interface of this connection as the system default gateway. |
IPv6 | This shows whether IPv6 is activated or not for this connection. IPv6 is not available when the connection uses the bridging service. |
MLD Proxy | This shows whether Multicast Listener Discovery (MLD) is activated or not for this connection. MLD is not available when the connection uses the bridging service. |
Modify | Click the Edit icon to configure the WAN connection. Click the Delete icon to remove the WAN connection. |

LABEL | Description |
|---|---|
General Click the switch to enable this WAN interface. | |
Name | Specify a descriptive name for this connection. You can use up to 15 alphanumeric (0-9, a-z, A-Z) and special characters except [ " ], [ ` ], [ ' ], [ < ], [ > ], [ ^ ], [ $ ], [ | ], [ & ], or [ ; ]. Spaces are allowed. This field is read-only if you are editing the WAN interface. |
Type | This field shows the types of available connections. This field is read-only if you are editing the WAN interface. |
Mode | Select Routing if your ISP give you one IP address only and you want multiple computers to share an Internet account. |
Encapsulation | Select the method of encapsulation used by your ISP from the drop-down list box. This option is available only when you select Routing in the Mode field. When you select ADSL/VDSL over ATM or Ethernet, the choices are PPPoE and IPoE. When you select ADSL over ATM, the choices are PPPoE, IPoE, PPPoA and IPoA. |
IPv4/IPv6 Mode | Select IPv4 Only if you want the Zyxel Device to run IPv4 only. Select IPv4 IPv6 DualStack to allow the Zyxel Device to run IPv4 and IPv6 at the same time. Select IPv6 Only if you want the Zyxel Device to run IPv6 only. |
PPP Information (This is available only when you select Routing in the Mode field and PPPoE or PPPoA in the Encapsulation field.) | |
PPP User Name | Enter the user name exactly as your ISP assigned. If assigned a name in the form user@domain where domain identifies a service name, then enter both components exactly as given. |
PPP Password | Enter the password associated with the user name above. Select password unmask to show your entered password in plain text. |
PPP Connection Trigger | Select when to have the Zyxel Device establish the PPP connection. Auto Connect – select this to not let the connection time out. On Demand – select this to automatically bring up the connection when the Zyxel Device receives packets destined for the Internet. |
Idle Timeout | This value specifies the time in minutes that elapses before the router automatically disconnects from the PPPoE server. This field is not available if you select Auto Connect in the PPP Connection Trigger field. |
PPPoE Passthrough | This field is available when you select PPPoE encapsulation. In addition to the Zyxel Device’s built-in PPPoE client, you can enable PPPoE pass through to allow up to ten hosts on the LAN to use PPPoE client software on their computers to connect to the ISP through the Zyxel Device. Each host can have a separate account and a public WAN IP address. PPPoE pass through is an alternative to NAT for application where NAT is not appropriate. Disable PPPoE pass through if you do not need to allow hosts on the LAN to use PPPoE client software on their computers to connect to the ISP. |
ATM PVC Configuration (This is available only when you select ADSL over ATM in the Type field.) | |
VPI [0-255] | The valid range for the VPI is 0 to 255. Enter the VPI assigned to you. |
VCI [32-65535] | The valid range for the VCI is 32 to 65535 (0 to 31 is reserved for local management of ATM traffic). Enter the VCI assigned to you. |
Encapsulation | Select the method of multiplexing used by your ISP from the drop-down list box. Choices are: • LLC/SNAP-BRIDGING: In LCC encapsulation, bridged PDUs are encapsulated by identifying the type of the bridged media in the SNAP header. • VC/MUX: In VC multiplexing, each protocol is carried on a single ATM virtual circuit (VC). To transport multiple protocols, the Zyxel Device needs separate VCs. There is a binding between a VC and the type of the network protocol carried on the VC. This reduces payload overhead since there is no need to carry protocol information in each Protocol Data Unit (PDU) payload. |
Service Category | Select UBR Without PCR for applications that are non-time sensitive, such as email. Select CBR (Continuous Bit Rate) to specify fixed (always-on) bandwidth for voice or data traffic. Select Non Realtime VBR (non real-time Variable Bit Rate) for connections that do not require closely controlled delay and delay variation. Select Realtime VBR (real-time Variable Bit Rate) for applications with bursty connections that require closely controlled delay and delay variation. |
Peak Cell Rate [cells/s] | Divide the DSL line rate (bps) by 424 (the size of an ATM cell) to find the Peak Cell Rate (PCR). This is the maximum rate at which the sender can send cells. Type the PCR here. |
Sustainable Cell Rate | The Sustain Cell Rate (SCR) sets the average cell rate (long-term) that can be transmitted. Type the SCR, which must be less than the PCR. Note that system default is 0 cells/sec. |
Maximum Burst Size [cells] | Maximum Burst Size (MBS) refers to the maximum number of cells that can be sent at the peak rate. Type the MBS, which is less than 65535. |
VLAN Click this switch to enable VLAN on this WAN interface. This field is not available if you select ADSL over ATM in the Type field and PPPoA or IPoA in the Encapsulation field. | |
802.1p | IEEE 802.1p defines up to 8 separate traffic types by inserting a tag into a MAC-layer frame that contains bits to define class of service. Select the IEEE 802.1p priority level (from 0 to 7) to add to traffic through this connection. The greater the number, the higher the priority level. |
802.1q | Type the VLAN ID number (from 0 to 4094) for traffic through this connection. |
MTU (This is not available if you select ADSL over ATM in the Type field and PPPoA or IPoA in the Encapsulation field.) | |
MTU | Enter the MTU (Maximum Transfer Unit) size for traffic through this connection. |
IP Address (This is available only when you select IPv4 Only or IPv4 IPv6 DualStack in the IPv4/IPv6 Mode field.) | |
Obtain an IP Address Automatically | A static IP address is a fixed IP that your ISP gives you. A dynamic IP address is not fixed; the ISP assigns you a different one each time you connect to the Internet. Select this if you have a dynamic IP address. |
Static IP Address | Select this option If the ISP assigned a fixed IP address. |
IP Address | Enter the static IP address provided by your ISP. |
Subnet Mask | Enter the subnet mask provided by your ISP. This is available only when you set the Encapsulation to IPoE or IPoA. |
Gateway IP Address | Enter the gateway IP address provided by your ISP. This is available only when you set the Encapsulation to IPoE. |
DNS Server (This is available only when you select IPv4 Only or IPv4 IPv6 DualStack in the IPv4/IPv6 Mode field.) | |
Obtain DNS Info Automatically | Select Obtain DNS Info Automatically if you want the Zyxel Device to use the DNS server addresses assigned by your ISP. |
Use Following Static DNS Address | Select Use Following Static DNS Address if you want the Zyxel Device to use the DNS server addresses you configure manually. |
Primary DNS Server | Enter the first DNS server address assigned by the ISP. |
Secondary DNS Server | Enter the second DNS server address assigned by the ISP. |
Routing Feature (This is available only when you select IPv4 Only or IPv4 IPv6 DualStack in the IPv4/IPv6 Mode field.) | |
NAT | Click this switch to activate NAT on this connection. |
IGMP Proxy | Internet Group Multicast Protocol (IGMP) is a network-layer protocol used to establish membership in a multicast group – it is not used to carry user data. Click this switch to have the Zyxel Device act as an IGMP proxy on this connection. This allows the Zyxel Device to get subscribing information and maintain a joined member list for each multicast group. It can reduce multicast traffic significantly. |
Apply as Default Gateway | Click this switch to have the Zyxel Device use this WAN interface of this connection as the system default gateway. |
Fullcone NAT | Click this switch to enable full cone NAT on this WAN connection. This field is available only when you activate NAT. In full cone NAT, the Zyxel Device maps all outgoing packets from an internal IP address and port to a single IP address and port on the external network. The Zyxel Device also maps packets coming to that external IP address and port to the internal IP address and port. |
6RD The 6RD (IPv6 rapid deployment) fields display when you set the IPv6/IPv4 Mode field to IPv4 Only. See IPv6 Rapid Deployment for more information. Click this switch to tunnel IPv6 traffic from the local network through the ISP’s IPv4 network. | |
Automatically configured by DHCPC | The Automatically configured by DHCPC option is configurable only when you set the method of encapsulation to IPoE. |
Manually Configured | Select Manually Configured if you have the IPv4 address of the relay server. Otherwise, select Automatically configured by DHCPC to have the Zyxel Device detect it automatically through DHCP. |
Service Provider IPv6 Prefix | Enter an IPv6 prefix for tunneling IPv6 traffic to the ISP’s border relay router and connecting to the native IPv6 Internet. |
IPv4 Mask Length | Enter the subnet mask number (1 – 32) for the IPv4 network. |
Border Relay IPv4 Address | When you select Manually Configured, specify the relay server’s IPv4 address in this field. |
DHCPC Options (This is available only when you select IPv4 Only or IPv4 IPv6 DualStack in the IPv4/IPv6 Mode field and IPoE in the Encapsulation field.) | |
Request Options | Select Option 42 to have the Zyxel Device get NTP time server information from DHCP packets sent from the DHCP server. Select Option 43 to have the Zyxel Device get vendor specific information from DHCP packets sent from the DHCP server. Select Option 120 to have the Zyxel Device get static route information from DHCP packets sent from the DHCP server. Select Option 121 to have the Zyxel Device get SIP server information from DHCP packets sent from the DHCP server. |
Sent Options | |
option 12 | To identify the Zyxel Device to the DHCP server, select this to automatically add the hostname of the Zyxel Device in the DHCP discovery packets that go to the DHCP server. |
option 60 | Select this and enter the device identity you want the Zyxel Device to add in the DHCP discovery packets that go to the DHCP server. |
Vendor ID | Enter the Vendor Class Identifier, such as the type of the hardware or firmware. |
option 61 | Select this and enter any string that identifies the device. |
IAID | Enter the Identity Association Identifier (IAID) of the device, for example, the WAN connection index number. |
DUID | Enter the DHCP Unique Identifier (DUID), which includes the hardware type, a time value and the MAC address of the device. |
option 125 | Select this to have the Zyxel Device automatically generate and add vendor specific parameters in the DHCP discovery packets that go to the DHCP server. |
IPv6 Address (This is available only when you select IPv4 IPv6 DualStack or IPv6 Only in the IPv4/IPv6 Mode field.) | |
Obtain an IPv6 Address Automatically | Select Obtain an IPv6 Address Automatically if you want to have the Zyxel Device use the IPv6 prefix from the connected router’s Router Advertisement (RA) to generate an IPv6 address. |
Static IPv6 Address | Select Static IPv6 Address if you have a fixed IPv6 address assigned by your ISP. When you select this, the following fields appear. |
IPv6 Address | Enter an IPv6 IP address that your ISP gave to you for this WAN interface. |
Prefix Length | Enter the address prefix length to specify how many most significant bits in an IPv6 address compose the network address. |
IPv6 Default Gateway | Enter the IP address of the next-hop gateway. The gateway is a router or switch on the same segment as your Zyxel Device's interfaces. The gateway helps forward packets to their destinations. |
IPv6 DNS Server (This is available only when you select IPv4 IPv6 DualStack or IPv6 Only in the IPv4/IPv6 Mode field. Configure the IPv6 DNS server in the following section.) | |
Obtain IPv6 DNS Info Automatically | Select Obtain IPv6 DNS Info Automatically to have the Zyxel Device get the IPv6 DNS server addresses from the ISP automatically. |
Use Following Static IPv6 DNS Address | Select Use Following Static IPv6 DNS Address to have the Zyxel Device use the IPv6 DNS server addresses you configure manually. |
Primary DNS Server | Enter the first IPv6 DNS server address assigned by the ISP. |
Secondary DNS Server | Enter the second IPv6 DNS server address assigned by the ISP. |
IPv6 Routing Feature (This is available only when you select IPv4 IPv6 DualStack or IPv6 Only in the IPv4/IPv6 Mode field. You can enable IPv6 routing features in the following section.) | |
MLD Proxy Enable | Select this checkbox to have the Zyxel Device act as an MLD proxy on this connection. This allows the Zyxel Device to get subscription information and maintain a joined member list for each multicast group. It can reduce multicast traffic significantly. |
Apply as Default Gateway | Select this option to have the Zyxel Device use the WAN interface of this connection as the system default gateway. |
DS-Lite | This is available only when you select IPv6 Only in the IPv4/IPv6 Mode field. Enable Dual Stack Lite to let local computers use IPv4 through an ISP’s IPv6 network. See Dual Stack Lite for more information. Click this switch to enable DS-Lite to let local computers use IPv4 through an ISP’s IPv6 network. |
Automatically configured by DHCPC | Select this to have the Zyxel Device detect the relay server automatically through DHCP. |
Manually Configured | Select Manually Configured if you have the IPv6 address of the relay server. Otherwise, select Automatically configured by DHCPC to have the Zyxel Device detect it automatically through DHCP. |
DS-Lite Relay Server IP | Specify the transition router’s IPv6 address. |
DHCPv6 Option (This is available only when you select IPv6 Only or IPv4 IPv6 DualStack in the IPv4/IPv6 Mode field.) | |
IPv6 Address From DHCPv6 Server | Click the switch to let the Zyxel Device send DHCP requests to the DHCPv6 server to obtain an IPv6 address. |
Other Information From DHCPv6 Server | Click the switch to have the Zyxel Device get other information, such as DNS information, from DHCPv6 packets sent from the DHCPv6 server. This will be enabled if IPv6 Address From DHCPv6 Server is enabled. |
IPv6 MAP | This is available when you edit an IPv6 WAN interface. Slide the switch to the right to create an IPv6 map domain. |
Transport Mode | Select MAP-T (Translation) or MAP-E (Encapsulation) based on the ISP deployment. |
Setting Mode | Select DHCP S46 or Manual to configure the following fields. |
BR IPv6 Prefix | This is the IPv6 network address/prefix assigned to the BR, including the prefix length. |
Rule IPv6 Prefix | This is the IPv6 network prefix, including the prefix length. |
Rule IPv4 Prefix | This is the IPv4 network prefix, including the prefix length. |
PSID Offset | The Port Set Identifier (PSID) offset specifies the excluded port range. The default PSID Offset is 6; port 0~1023 will be reserved for the system to use. |
PSID Length | This specifies the number of sharing ratio. When PSID Length is set to 8, the ports will be separated and assigned for 2^8 MAP CEs to use. |
PSID | A Port Set ID (PSID) identifies a set of ports assigned to a CE for mapping. PSID should be unique for each CE sharing the IPv4 address. |
Cancel | Click Cancel to restore your previously saved settings. |
Apply | Click Apply to save your changes. |

Label | Description |
|---|---|
General Click this switch to enable the WAN interface. | |
Name | Enter a service name of the connection. You can use up to 15 alphanumeric (0-9, a-z, A-Z) and special characters except [ " ], [ ` ], [ ' ], [ < ], [ > ], [ ^ ], [ $ ], [ | ], [ & ], or [ ; ]. Spaces are allowed. This field is read-only is you are editing the WAN interface. |
Type | Select VDSL over PTM, ADSL over ATM or Ethernet as the WAN interface type. This field is read-only if you are editing the WAN interface. |
Mode | Select Bridge when your ISP provides you more than one IP address and you want the connected computers to get individual IP address from ISP’s DHCP server directly. If you select Bridge, you cannot use routing functions, such as QoS, Firewall, DHCP server and NAT on traffic from the selected LAN ports. |
VLAN Click this switch to enable VLAN on this WAN interface. | |
802.1p | IEEE 802.1p defines up to 8 separate traffic types by inserting a tag into a MAC-layer frame that contains bits to define class of service. Select the IEEE 802.1p priority level (from 0 to 7) to add to traffic through this connection. The greater the number, the higher the priority level. |
802.1q | Type the VLAN ID number (from 0 to 4094) for traffic through this connection. |
MTU | |
MTU | Enter the MTU (Maximum Transfer Unit) size for traffic through this connection. |
ATM PVC Configuration (This is available only when you select ADSL over ATM in the Type field.) | |
VPI [0–255] | The valid range for the VPI is 0 to 255. Enter the VPI assigned to you. |
VCI [32–65535] | The valid range for the VCI is 32 to 65535 (0 to 31 is reserved for local management of ATM traffic). Enter the VCI assigned to you. |
Encapsulation | Select the method of multiplexing used by your ISP from the drop-down list box. Choices are: • LLC/SNAP-BRIDGING: In LCC encapsulation, bridged PDUs are encapsulated by identifying the type of the bridged media in the SNAP header. • VC/MUX: In VC multiplexing, each protocol is carried on a single ATM virtual circuit (VC). To transport multiple protocols, the Zyxel Device needs separate VCs. There is a binding between a VC and the type of the network protocol carried on the VC. This reduces payload overhead since there is no need to carry protocol information in each Protocol Data Unit (PDU) payload. |
Service Category | Select UBR Without PCR for applications that are non-time sensitive, such as email. Select CBR (Continuous Bit Rate) to specify fixed (always-on) bandwidth for voice or data traffic. Select Non Realtime VBR (non real-time Variable Bit Rate) for connections that do not require closely controlled delay and delay variation. Select Realtime VBR (real-time Variable Bit Rate) for applications with bursty connections that require closely controlled delay and delay variation. |
Peak Cell Rate [cells/s] | Divide the DSL line rate (bps) by 424 (the size of an ATM cell) to find the Peak Cell Rate (PCR). This is the maximum rate at which the sender can send cells. Enter the PCR here. This is not available when you set the Service Category to UBR Without PCR. |
Sustainable Cell Rate | The Sustain Cell Rate (SCR) sets the average cell rate (long-term) that can be transmitted. Enter the SCR, which must be less than the PCR. Note that system default is 0 cells/sec. This is not available when you set the Service Category to UBR Without PCR or CBR. |
Maximum Burst Size [cells] | Maximum Burst Size (MBS) refers to the maximum number of cells that can be sent at the peak rate. Enter the MBS, which is less than 65535. This is not available when you set the Service Category to UBR Without PCR or CBR. |
Cancel | Click Cancel to exit this screen without saving any changes. |
Apply | Click Apply to save your changes. |


Label | Description |
|---|---|
Add New WAN Interface | Click this button to create a new connection. |
# | This is the index number of the entry. |
Name | This is the service name of the connection. |
Type | This displays the type of connections available. |
Mode | This shows whether the connection is in routing or bridge mode. |
Encapsulation | This is the method of encapsulation used by this connection. |
802.1p | This indicates the 802.1p priority level assigned to traffic sent through this connection. This displays N/A when there is no priority level assigned. |
802.1q | This indicates the VLAN ID number assigned to traffic sent through this connection. This displays N/A when there is no VLAN ID number assigned. |
IGMP Proxy | This shows whether the Zyxel Device act as an IGMP proxy on this connection. |
NAT | This shows whether NAT is activated or not for this connection. |
Default Gateway | This shows whether the Zyxel Device use the WAN interface of this connection as the system default gateway. |
IPv6 | This shows whether IPv6 is activated or not for this connection. IPv6 is not available when the connection uses the bridging service. |
MLD Proxy | This shows whether Multicast Listener Discovery (MLD) is activated or not for this connection. MLD is not available when the connection uses the bridging service. |
Modify | Click the Edit icon to configure the WAN connection. Click the Delete icon to remove the WAN connection. |



LABEL | Description |
|---|---|
General | Click this switch to enable the WAN interface. |
Name | Specify a descriptive name for this connection. You can use up to 15 alphanumeric (0-9, a-z, A-Z) and special characters except [ " ], [ ` ], [ ' ], [ < ], [ > ], [ ^ ], [ $ ], [ | ], [ & ], or [ ; ]. Spaces are allowed. This field is read-only is you are editing the WAN interface. |
Type | This field shows Ethernet and indicates an Ethernet connection. This field is read-only is you are editing the WAN interface. |
Mode | Select Routing if your ISP give you one IP address only and you want multiple computers to share an Internet account. |
Encapsulation | Select the method of encapsulation used by your ISP from the drop-down list box. This option is available only when you select Routing in the Mode field. The choices are PPPoE and IPoE. |
IPv4/IPv6 Mode | Select IPv4 Only if you want the Zyxel Device to run IPv4 only. Select IPv4 IPv6 DualStack to allow the Zyxel Device to run IPv4 and IPv6 at the same time. Select IPv6 Only if you want the Zyxel Device to run IPv6 only. |
PPP Information (This is available only when you select PPPoE in the Encapsulation field.) | |
PPP User Name | Enter the user name exactly as your ISP assigned. If assigned a name in the form user@domain where domain identifies a service name, then enter both components exactly as given. |
PPP Password | Enter the password associated with the user name above. Select password unmask to show your entered password in plain text. |
PPP Connection Trigger | Select when to have the Zyxel Device establish the PPP connection. Auto Connect – select this to not let the connection time out. On Demand – select this to automatically bring up the connection when the Zyxel Device receives packets destined for the Internet. |
Idle Timeout | This value specifies the time in minutes that elapses before the router automatically disconnects from the PPPoE server. This field is only available if you select On Demand in the PPP Connection Trigger field. |
PPPoE Passthrough | This field is available when you select PPPoE encapsulation. In addition to the Zyxel Device’s built-in PPPoE client, you can enable PPPoE pass through to allow up to ten hosts on the LAN to use PPPoE client software on their computers to connect to the ISP through the Zyxel Device. Each host can have a separate account and a public WAN IP address. PPPoE pass through is an alternative to NAT for application where NAT is not appropriate. Disable PPPoE pass through if you do not need to allow hosts on the LAN to use PPPoE client software on their computers to connect to the ISP. |
VLAN | Click this switch to enable or disable VLAN on this WAN interface. When the switch goes to the right , the function is enabled. Otherwise, it is not. |
802.1p | IEEE 802.1p defines up to 8 separate traffic types by inserting a tag into a MAC-layer frame that contains bits to define class of service. Select the IEEE 802.1p priority level (from 0 to 7) to add to traffic through this connection. The greater the number, the higher the priority level. |
802.1q | Type the VLAN ID number (from 0 to 4094) for traffic through this connection. |
MVLAN | A Multicast VLAN (MVLAN is a special VLAN just for sending multicast traffic. With Multicast VLAN the Switch S can send multicast traffic directly to users in the MVLAN, without duplicating multicast streams for separate VLANs. |
MTU | |
MTU | Enter the MTU (Maximum Transfer Unit) size for traffic through this connection. |
IP Address (This is available only when you select IPv4 Only or IPv4 IPv6 DualStack in the IPv4/IPv6 Mode field.) | |
Obtain an IP Address Automatically | A static IP address is a fixed IP that your ISP gives you. A dynamic IP address is not fixed; the ISP assigns you a different one each time you connect to the Internet. Select this if you have a dynamic IP address. |
Static IP Address | Select this option If the ISP assigned a fixed IP address. |
IP Address | Enter the static IP address provided by your ISP. |
Subnet Mask | Enter the subnet mask provided by your ISP. This is available only when you set the Encapsulation to IPoE. |
Gateway IP Address | Enter the gateway IP address provided by your ISP. This is available only when you set the Encapsulation to IPoE. |
DNS Server (This is available only when you select IPv4 Only or IPv4 IPv6 DualStack in the IPv4/IPv6 Mode field.) | |
Select Obtain DNS Info Automically if you want the Zyxel Device to use the DNS server addresses assigned by your ISP. Select Use Following Static DNS Address if you want the Zyxel Device to use the DNS server addresses you configure manually. | |
Primary DNS Server | Enter the first DNS server address assigned by the ISP. |
Secondary DNS Server | Enter the second DNS server address assigned by the ISP. |
Routing Feature (This is available only when you select IPv4 Only or IPv4 IPv6 DualStack in the IPv4/IPv6 Mode field.) | |
NAT | Click this switch to activate or deactivate NAT on this connection. When the switch goes to the right , the function is enabled. Otherwise, it is not. |
IGMP Proxy | Internet Group Multicast Protocol (IGMP) is a network-layer protocol used to establish membership in a Multicast group - it is not used to carry user data. Click this switch to have the Zyxel Device act as an IGMP proxy on this connection. When the switch goes to the right , the function is enabled. Otherwise, it is not.This allows the Zyxel Device to get subscribing information and maintain a joined member list for each multicast group. It can reduce multicast traffic significantly. |
Apply as Default Gateway | Click this switch to have the Zyxel Device use the WAN interface of this connection as the system default gateway. When the switch goes to the right , the function is enabled. Otherwise, it is not. |
Fullcone NAT Enable | Click this switch to enable or disable full cone NAT on this connection. When the switch goes to the right , the function is enabled. Otherwise, it is not.This field is available only when you activate NAT. In full cone NAT, the Zyxel Device maps all outgoing packets from an internal IP address and port to a single IP address and port on the external network. The Zyxel Device also maps packets coming to that external IP address and port to the internal IP address and port. |
DHCPC Options (This is available only when you set the Encapsulation to IPoE and select IPv4 Only or IPv4 IPv6 DualStack in the IPv4/IPv6 Mode field.) | |
Request Options | Select Option 42 to have the Zyxel Device get NTP time server information from DHCP packets sent from the DHCP server. Select Option 43 to have the Zyxel Device get vendor specific information from DHCP packets sent from the DHCP server. Select Option 120 to have the Zyxel Device get static route information from DHCP packets sent from the DHCP server. Select Option 121 to have the Zyxel Device get SIP server information from DHCP packets sent from the DHCP server. |
Sent Options | |
option 60 | Select this and enter the device identity you want the Zyxel Device to add in the DHCP discovery packets that go to the DHCP server. |
Vendor ID | Enter the Vendor Class Identifier, such as the type of the hardware or firmware. |
option 61 | Select this and enter any string that identifies the device. |
IAID | Enter the Identity Association Identifier (IAID) of the device, for example, the WAN connection index number. |
DUID | Enter the hardware type, a time value and the MAC address of the device. |
option 125 | Select this to have the Zyxel Device automatically generate and add vendor specific parameters in the DHCP discovery packets that go to the DHCP server. |
IPv6 Address (This is available only when you select IPv4 IPv6 DualStack or IPv6 Only in the IPv4/IPv6 Mode field.) | |
Obtain an IPv6 Address Automatically | Select Obtain an IPv6 Address Automatically if you want to have the Zyxel Device use the IPv6 prefix from the connected router’s Router Advertisement (RA) to generate an IPv6 address. |
Static IPv6 Address | Select Static IPv6 Address if you have a fixed IPv6 address assigned by your ISP. When you select this, the following fields appear. |
IPv6 Address | Enter an IPv6 IP address that your ISP gave to you for this WAN interface. |
Prefix Length | Enter the address prefix length to specify how many most significant bits in an IPv6 address compose the network address. |
IPv6 Default Gateway | Enter the IP address of the next-hop gateway. The gateway is a router or switch on the same segment as your Zyxel Device's interfaces. The gateway helps forward packets to their destinations. |
IPv6 DNS Server (This is available only when you select IPv4 IPv6 DualStack or IPv6 Only in the IPv4/IPv6 Mode field. Configure the IPv6 DNS server in the following section.) | |
Obtain IPv6 DNS Info Automatically | Select Obtain IPv6 DNS Info Automatically to have the Zyxel Device get the IPv6 DNS server addresses from the ISP automatically. |
Use Following Static IPv6 DNS Address | Select Use Following Static IPv6 DNS Address to have the Zyxel Device use the IPv6 DNS server addresses you configure manually. |
Primary DNS Server | Enter the first IPv6 DNS server address assigned by the ISP. |
Secondary DNS Server | Enter the second IPv6 DNS server address assigned by the ISP. |
IPv6 Routing Feature (This is available only when you select IPv4 IPv6 DualStack or IPv6 Only in the IPv4/IPv6 Mode field. You can enable IPv6 routing features in the following section.) | |
MLD Proxy Enable | Select this checkbox to have the Zyxel Device act as an MLD proxy on this connection. This allows the Zyxel Device to get subscription information and maintain a joined member list for each multicast group. It can reduce multicast traffic significantly. |
Apply as Default Gateway | Select this option to have the Zyxel Device use the WAN interface of this connection as the system default gateway. |
DS-Lite | This is available only when you select IPv6 Only in the IPv4/IPv6 Mode field. Enable Dual Stack Lite to let local computers use IPv4 through an ISP’s IPv6 network. See Dual Stack Lite for more information. Click this switch to enable DS-Lite to let local computers use IPv4 through an ISP’s IPv6 network. |
DS-Lite Relay Server IP | Specify the transition router’s IPv6 address. |
6RD The 6RD (IPv6 rapid deployment) fields display when you set the IPv6/IPv4 Mode field to IPv4 Only. See IPv6 Rapid Deployment for more information. Click this switch to tunnel IPv6 traffic from the local network through the ISP’s IPv4 network. | |
Select Manually Configured if you have the IPv4 address of the relay server. Otherwise, select Automatically configured by DHCPC to have the Zyxel Device detect it automatically through DHCP. The Automatically configured by DHCPC option is configurable only when you set the method of encapsulation to IPoE. | |
Service Provider IPv6 Prefix | Enter an IPv6 prefix for tunneling IPv6 traffic to the ISP’s border relay router and connecting to the native IPv6 Internet. |
IPv4 Mask Length | Enter the subnet mask number (1 – 32) for the IPv4 network. |
Border Relay IPv4 Address | When you select Manually Configured, specify the relay server’s IPv4 address in this field. |
DHCPv6 Option (This is available only when you select IPv6 Only or IPv4 IPv6 DualStack in the IPv4/IPv6 Mode field.) | |
IPv6 Address From DHCPv6 Server | Click the switch (to the right) to let the Zyxel Device send DHCP requests to the DHCPv6 server to obtain an IPv6 address. |
Other Information From DHCPv6 Server | Click the switch (to the right) to have the Zyxel Device get other information, such as DNS information, from DHCPv6 packets sent from the DHCPv6 server. This will be enabled if IPv6 Address From DHCPv6 Server is enabled. |
Cancel | Click Cancel to restore your previously saved settings. |
Apply | Click Apply to save your changes. |

Label | Description |
|---|---|
General | Click this switch to enable the interface. |
Name | Enter a service name of the connection. You can use up to 15 alphanumeric (0-9, a-z, A-Z) and special characters except [ " ], [ ` ], [ ' ], [ < ], [ > ], [ ^ ], [ $ ], [ | ], [ & ], or [ ; ]. Spaces are allowed. This field is read-only is you are editing the WAN interface. |
Type | This field shows Ethernet and indicates an Ethernet connection. This field is read-only is you are editing the WAN interface. |
Mode | Select Bridge when your ISP provides you more than one IP address and you want the connected computers to get individual IP address from ISP’s DHCP server directly. If you select Bridge, you cannot use routing functions, such as QoS, Firewall, DHCP server and NAT on traffic from the selected LAN ports. |
VLAN | Click this switch to enable VLAN on this WAN interface. |
802.1p | IEEE 802.1p defines up to 8 separate traffic types by inserting a tag into a MAC-layer frame that contains bits to define class of service. Select the IEEE 802.1p priority level (from 0 to 7) to add to traffic through this connection. The greater the number, the higher the priority level. |
802.1q | Type the VLAN ID number (from 0 to 4094) for traffic through this connection. |
MTU | |
MTU | Enter the MTU (Maximum Transfer Unit) size for traffic through this connection. |
Cancel | Click Cancel to exit this screen without saving any changes. |
Apply | Click Apply to save your changes. |



Label | Description |
|---|---|
General | |
Cellular Backup | Click this switch to have the Zyxel Device use the cellular connection as your WAN or a backup when the wired WAN connection fails. |
Ping Check | Click this switch to ping check the connection status of your WAN. You can configure the frequency of the ping check and number of consecutive failures before triggering cellular backup. |
Check Cycle | Enter the frequency of the ping check in this field. |
Consecutive Fail | Enter how many consecutive failures are required before cellular backup is triggered. |
Ping Default Gateway | Select this to have the Zyxel Device ping the WAN interface’s default gateway IP address. |
Ping Host | Select this to have the Zyxel Device ping the particular host name or IP address you typed in this field. |
Cellular Connection Settings | |
Card Description | This field displays the manufacturer and model name of your cellular card if you inserted one in the Zyxel Device. Otherwise, it displays N/A. |
Username | Enter the user name (of up to 64 alphanumeric (0-9, a-z, A-Z) and special characters, including spaces) given to you by your service provider. |
Password | Enter the password (of up to 64 alphanumeric (0-9, a-z, A-Z) and special characters, including spaces) associated with the user name above. |
Authentication | The Zyxel Device supports PAP (Password Authentication Protocol) and CHAP (Challenge Type Handshake Authentication Protocol). In PAP, peers identify themselves with a user name and password. In CHAP, additionally to user name and password the Zyxel Device sends regular challenges to make sure an intruder has not replaced a peer. CHAP is more secure than PAP; however, PAP is available on more platforms. Select an authentication protocol (Auto, CHAP or PAP). Contact your service provider for the correct authentication type. |
PIN | A PIN (Personal Identification Number) code is a key to a cellular card. Without the PIN code, you cannot use the cellular card. If your ISP enabled PIN code authentication, enter the 4-digit PIN code (0000 for example) provided by your ISP. If you enter the PIN code incorrectly, the cellular card may be blocked by your ISP and you cannot use the account to access the Internet. If your ISP disabled PIN code authentication, leave this field blank. |
Dial String | Enter the phone number (dial string) used to dial up a connection to your service provider’s base station. Your ISP should provide the phone number. For example, *99# is the dial string to establish a GPRS or cellular connection in Taiwan. |
APN | Enter the APN (Access Point Name) provided by your service provider. Connections with different APNs may provide different services (such as Internet access or MMS (Multi-Media Messaging Service)) and charge method. You can enter up to 32 printable characters except [ " ], [ ` ], [ ' ], [ < ], [ > ], [ ^ ], [ $ ], [ | ], [ & ], or [ ; ]. Spaces are allowed. |
Connection | Select Nailed UP if you do not want the connection to time out. Select On Demand if you do not want the connection up all the time and specify an idle time-out in the Max Idle Timeout field. |
Max Idle Timeout | This value specifies the time in minutes that elapses before the Zyxel Device automatically disconnects from the ISP. |
Obtain an IP Address Automatically | Select this option if your ISP did not assign you a fixed IP address. |
Use the Following Static IP Address | Select this option if the ISP assigned a fixed IP address. |
IP Address | Enter your WAN IP address in this field if you selected Use the following static IP address. |
Subnet Mask | Enter the subnet mask of the IP address. |
Obtain DNS Info Dynamically | Select this to have the Zyxel Device get the DNS server addresses from the ISP automatically. |
Use the Following Static DNS IP Address | Select this to have the Zyxel Device use the DNS server addresses you configure manually. |
Primary DNS Server | Enter the first DNS server address assigned by the ISP. |
Secondary DNS Server | Enter the second DNS server address assigned by the ISP. |
Enable e-mail Notification | Select this to enable the email notification function. The Zyxel Device will email you a notification when the cellular connection is up. |
Mail Account | Select an email address you have configured in Maintenance > E-mail Notification. The Zyxel Device uses the corresponding mail server to send notifications. You must have configured a mail server already in the Maintenance > E-mail Notification screen. |
Cellular Backup e-mail Title | Enter a title that you want to be in the subject line of the email notifications that the Zyxel Device sends. |
Send Notification to E-mail | Notifications are sent to the email address specified in this field. If this field is left blank, notifications cannot be sent through email. |
Click this to show the advanced cellular backup settings. | |
Budget Setup | |
Enable Budget Control | Click this switch to set a monthly limit for the user account of the installed cellular card. You can set a limit on the total traffic and/or call time. The Zyxel Device takes the actions you specified when a limit is exceeded during the month. |
Time Budget | Select this and specify the amount of time (in hours) that the cellular connection can be used within one month. If you change the value after you configure and enable budget control, the Zyxel Device resets the statistics. |
Data Budget (Mbytes) | Select this and specify how much downstream and/or upstream data (in Mega bytes) can be transmitted through the cellular connection within one month. Select Download/Upload to set a limit on the total traffic in both directions. Select Download to set a limit on the downstream traffic (from the ISP to the Zyxel Device). Select Upload to set a limit on the upstream traffic (from the Zyxel Device to the ISP). If you change the value after you configure and enable budget control, the Zyxel Device resets the statistics. |
Data Budget (kPackets) | Select this and specify how much downstream and/or upstream data (in k Packets) can be transmitted through the cellular connection within one month. Select Download/Upload to set a limit on the total traffic in both directions. Select Download to set a limit on the downstream traffic (from the ISP to the Zyxel Device). Select Upload to set a limit on the upstream traffic (from the Zyxel Device to the ISP). If you change the value after you configure and enable budget control, the Zyxel Device resets the statistics. |
Reset all budget counters on | Select the date on which the Zyxel Device resets the budget every month. Select last if you want the Zyxel Device to reset the budget on the last day of the month. Select specific and enter the number of the date you want the Zyxel Device to reset the budget. |
Reset time and data budget counters | Click this button to reset the time and data budgets immediately. The count starts over with the cellular connection’s full configured monthly time and data budgets. This does not affect the normal monthly budget restart; so if you configured the time and data budget counters to reset on the second day of the month and you use this button on the first, the time and data budget counters will still reset on the second. |
Actions before over budget | Specify the actions the Zyxel Device takes before the time or data limit exceeds. |
Data Budget % of time budget/data budget (Mbytes)/data budget (kPackets) | Select the checkboxes and enter a number from 1 to 99 in the percentage fields. If you change the value after you configure and enable budget control, the Zyxel Device resets the statistics. |
Actions when over budget | Specify the actions the Zyxel Device takes when the time or data limit is exceeded. |
Current Cellular Connection | Select Keep to maintain an existing cellular connection or Drop to disconnect it. |
Actions | |
Enable e-mail Notification | Click this switch to enable the email notification function. The Zyxel Device will email you a notification whenever over budget occurs. |
Mail Account | Select an email address you have configured in Maintenance > E-mail Notification. The Zyxel Device uses the corresponding mail server to send notifications. You must have configured a mail server already in the Maintenance > E-mail Notification screen. |
Cellular Backup e-mail Title | Enter a title that you want to be in the subject line of the email notifications that the Zyxel Device sends. |
Send Notification to E-mail | Notifications are sent to the email address specified in this field. If this field is left blank, notifications cannot be sent through email. |
Enable Log: Interval | Select this to and enter the Interval of how many minutes (1 – 9999) you want the Zyxel Device to email you. |
Cancel | Click Cancel to discard any changes to the settings. |
Apply | Click Apply to save your changes. |
Profile | Bandwidth (MHz) | Number of downstream carriers | Carrier bandwidth (kHz) | Power (dBm) | Max. downstream throughput (Mbit/s) |
|---|---|---|---|---|---|
8a | 8.832 | 2048 | 4.3125 | 17.5 | 50 |
8b | 8.832 | 2048 | 4.3125 | 20.5 | 50 |
8c | 8.5 | 1972 | 4.3125 | 11.5 | 50 |
8d | 8.832 | 2048 | 4.3125 | 14.5 | 50 |
12a | 12 | 2783 | 4.3125 | 14.5 | 68 |
12b | 12 | 2783 | 4.3125 | 14.5 | 68 |
17a | 17.664 | 4096 | 4.3125 | 14.5 | 100 |
35a | 30.000 | 3479 | 4.3125 | 14.5 | 100 |
35b | 35.328 | 8192 | 4.3125 | 17.0 | 300 |

Label | Description |
|---|---|
DSL Capabilities | |
PhyR US | Enable or disable PhyR US (upstream) for upstream transmission to the WAN. PhyR US should be enabled if data being transmitted upstream is sensitive to noise. However, enabling PhyR US can decrease the US line rate. Enabling or disabling PhyR will require the CPE to retrain. For PhyR to function, the DSLAM must also support PhyR and have it enabled. |
PhyR DS | Enable or disable PhyR DS (downstream) for downstream transmission from the WAN. PhyR DS should be enabled if data being transmitted downstream is sensitive to noise. However, enabling PhyR DS can decrease the DS line rate. Enabling or disabling PhyR will require the CPE to retrain. For PhyR to function, the DSLAM must also support PhyR and have it enabled. |
PhyR US/DS | Enable or disable PhyR US/DS (upstream or downstream) for both upstream and downstream transmission to the WAN. PhyR US should be enabled if data being transmitted upstream is sensitive to noise. However, enabling PhyR US can decrease the US line rate. Enabling or disabling PhyR will require the CPE to retrain. For PhyR to function, the DSLAM must also support PhyR and have it enabled. |
Bitswap | Select Enable to allow the Zyxel Device to adapt to line changes when you are using G.dmt. Bit-swapping is a way of keeping the line more stable by constantly monitoring and redistributing bits between channels. |
SRA | Enable or disable Seamless Rate Adaption (SRA). Select Enable to have the Zyxel Device automatically adjust the connection’s data rate according to line conditions without interrupting service. |
DSL Modulation | |
PTM over ADSL | Select Enable to use PTM over ADSL. Since PTM has less overhead than ATM, some ISPs use this for better performance. |
G.Dmt | ITU G.992.1 (better known as G.dmt) is an ITU standard for ADSL using discrete multitone modulation. G.dmt full-rate ADSL expands the usable bandwidth of existing copper telephone lines, delivering high-speed data communications at rates up to 8 Mbit/s downstream and 1.3 Mbit/s upstream. |
G.lite | ITU G.992.2 (better known as G.lite) is an ITU standard for ADSL using discrete multitone modulation. G.lite does not strictly require the use of DSL filters, but like all variants of ADSL generally functions better with splitters. |
T1.413 | ANSI T1.413 is a technical standard that defines the requirements for the single asymmetric digital subscriber line (ADSL) for the interface between the telecommunications network and the customer installation in terms of their interaction and electrical characteristics. |
ADSL2 | It optionally extends the capability of basic ADSL in data rates to 12 Mbit/s downstream and, depending on Annex version, up to 3.5 Mbit/s upstream (with a mandatory capability of ADSL2 transceivers of 8 Mbit/s downstream and 800 kbit/s upstream). |
Annex L | Annex L is an optional specification in the ITU-T ADSL2 recommendation G.992.3 titled Specific requirements for a Reach Extended ADSL2 (READSL2) system operating in the frequency band above POTS, therefore it is often referred to as Reach Extended ADSL2 or READSL2.The main difference between this specification and commonly deployed Annex A is the maximum distance that can be used. The power of the lower frequencies used for transmitting data is boosted up to increase the reach of this signal up to 7 kilometers (23,000 ft). |
ADSL2+ | ADSL2+ extends the capability of basic ADSL by doubling the number of downstream channels. The data rates can be as high as 24 Mbit/s downstream and up to 1.4 Mbit/s upstream depending on the distance from the DSLAM to the customer's premises. |
Annex M | Annex M is an optional specification in ITU-T recommendations G.992.3 (ADSL2) and G.992.5 (ADSL2+), also referred to as ADSL2 M and ADSL2+ M. This specification extends the capability of commonly deployed Annex A by more than doubling the number of upstream bits. The data rates can be as high as 12 or 24 Mbit/s downstream and 3 Mbit/s upstream depending on the distance from the DSLAM to the customer's premises. |
Annex M/J | Annex M and Annex J are specified in ITU-T recommendations G.992.3 (ADSL2) and G.992.5 (ADSL2+). Annex M and Annex J enhance the capabilities of Annex A and Annex B by increasing the upstream transmission data rate, but slightly reduce the downstream data rates as a trade-off. Annex M supports data rates of up to 12 Mbit/s downstream and 3.5 Mbit/s upstream for ADSL2, and up to 24 Mbit/s downstream and 2.5 Mbit/s upstream for ADSL2+. Annex J supports data rates of up to 12 Mbit/s downstream and 3.5 Mbit/s upstream for ADSL2, and up to 24 Mbit/s downstream and 3.5 Mbit/s upstream for ADSL2+. However, the actual downstream or upstream data rates depend on the distance from the ISP DSLAM to the Zyxel Device and the quality of your telephone line. Click the switch to enable the Zyxel Device to use Annex M for Zyxel Device models that use POTS WAN connection, and use Annex J for Zyxel Device models that use ISDN WAN connection. |
VDSL2 | VDSL2 (Very High Speed Digital Subscriber Line 2) is the second generation of the VDSL standard (which is currently denoted VDSL1). VDSL2 allows a frequency band of up to 30MHz and transmission rates of up to 100 Mbps in each direction. VDSL2 is defined in G.993.2. |
VDSL Profile | VDSL2 profiles differ in the width of the frequency band used to transmit the broadband signal. Profiles that use a wider frequency band can deliver higher maximum speeds. |
8a, 8b, 8c, 8d, 12a, 12b, 17a, 30a, 35b US0 | The G.993.2 VDSL standard defines a wide range of profiles that can be used in different VDSL deployment settings, such as in a central office, a street cabinet or a building. The Zyxel Device must comply with at least one profile specified in G.993.2. but compliance with more than one profile is allowed. |
Cancel | Click Cancel to return to the previous configuration. |
Apply | Click Apply to save your changes back to the Zyxel Device. |


Label | Description |
|---|---|
Ethernet Power Management | |
Energy Efficient Ethernet | Slide the switch to the right to activate Energy Efficient Ethernet on the Zyxel Device. |
Ethernet Auto Power Down | Slide the switch to the right to activate Auto Power Down on the Zyxel Device. |
Cancel | Click Cancel to return to the previous configuration. |
Apply | Click Apply to save your changes back to the Zyxel Device. |

TPID 2 Bytes | User Priority 3 Bits | CFI 1 Bit | VLAN ID 12 Bits |