Manuals / Casio / Computer Equipment / Network Router

Casio ISA550WBUN3K9 manual Understanding Dscp Values 171

Models: ISA550WBUN3K9

1 479

Download 479 pages 49.64 Kb

Page 10

	Contents


Configuring DMZ	141
Configuring Zones	146
Security Levels for Zones	146
Predefined Zones	147
Configuring Zones	147
Configuring DHCP Reserved IPs	149
Configuring Routing	149
Viewing the Routing Table	150
Configuring Routing Mode	150
Configuring Static Routing	151
Configuring Dynamic Routing - RIP	152
Configuring Policy-Based Routing	153
Configuring Quality of Service	155
General QoS Settings	155
Configuring WAN QoS	156
Managing WAN Bandwidth for Upstream Traffic	156
Configuring WAN Queue Settings	157
Configuring Traffic Selectors	158
Configuring WAN QoS Policy Profiles	160
Configuring WAN QoS Class Rules	160
Mapping WAN QoS Policy Profiles to WAN Interfaces	161
WAN QoS Configuration Example	162
Configure WAN QoS for Voice Traffic from LAN to WAN	164
Configuring WAN QoS for Voice Traffic from WAN to LAN	165
Configuring LAN QoS	166
Configuring LAN Queue Settings	167
Configuring LAN QoS Classification Methods	167
Mapping CoS to LAN Queue	168
Mapping DSCP to LAN Queue	168
Configuring Default CoS	169
Configuring Wireless QoS	169
Default Wireless QoS Settings	169
Configuring Wireless QoS Classification Methods	170
Mapping CoS to Wireless Queue	171
Mapping DSCP to Wireless Queue	171
Understanding DSCP Values	171

Cisco ISA500 Series Integrated Security Appliances Administration Guide	10

Image 10

Casio ISA550WBUN3K9 manual Understanding Dscp Values 171

Contents

Administration Guide Cisco Systems, Inc. All rights reserved 78-20776-03 Important Note FCC Radiation Exposure Statement For ISA550W and ISA570WCanada Radiation Exposure Statement For ISA550W and ISA570W Industry Canada statementDéclaration dexposition aux radiations UL/CB Configuration Wizards Getting StartedUsing Remote Access VPN Wizard for SSL Remote Access Status Networking 115 Understanding Dscp Values 171 Wireless for ISA550W and ISA570W only 206 Vlan Setup 180 Wireless Setup 181 User AuthenticationVlan Setup 222 Wireless Setup 223 User Authentication Firewall 251Security Services 291 General Application Control Settings 314 VPN 333Client Mode 366 Network Extension Mode 367 User Management 388 Device Management 403Contents Appendix a Troubleshooting 453 Appendix D Where to Go From Here 479Getting Started Getting Started Model Description ConfigurationIntroduction ISA550WFront Panel Product OverviewFront Panel, Back Panel, VPN POWER/SYSLight Description USBLINK/ACT Back PanelSpeed ISA550 and ISA550W Back PanelFeature Description ANT01/ANT02Power Switch Getting Started with the Configuration UtilityReset Button PowerLogging in to the Configuration Utility Navigating Through the Configuration Utility Number Component DescriptionConfiguration Utility Icons Using the Help SystemIcon Description Action Getting Started Factory Default Settings Default Settings of Key FeaturesRestoring the Factory Default Settings Changing the Default Administrator Password Performing Basic Configuration TasksParameter Default Value Upgrading your Firmware After your First Login Click ContinueBacking Up Your Configuration Configuration Wizards Using the Setup Wizard for the Initial Configuration Configuration WizardsStarting the Setup Wizard Enabling Firmware Upgrade Validating Security License Enabling Bonjour and CDP Discovery ProtocolsConfiguring Remote Administration Configuring Physical Ports Configuring the Secondary WAN Configuring the Primary WANConfiguring WAN Redundancy Configuring Default LAN Settings Configuring DMZ Configuring DMZ Services Configuration Wizards WAN Configuring Wireless Radio SettingsWAN IP Configuring Intranet Wlan Access Configure Security Services Security ServicesViewing Configuration Summary Click Configuration Wizards Dual WAN Wizard Configuring a Configurable Port as a Secondary WAN PortStarting the Dual WAN Wizard Configuring the Primary WAN Configuring Network Failure Detection Using the Remote Access VPN Wizard Using the Remote Access VPN Wizard for IPsec RemoteConfiguring IPsec Remote Access Group Policy Starting the Remote Access VPN WizardClick Configuration Wizards Remote Access VPN Wizard Configuring WAN Settings Configuring Operation ModeConfiguring Access Control Settings Configuring DNS and Wins SettingsConfiguring Split Tunneling Configuring Backup ServersViewing Group Policy Summary Configuring IPsec Remote Access User Groups Viewing IPsec Remote Access SummaryUsing Remote Access VPN Wizard for SSL Remote Access Configuring SSL VPN GatewayClient Netmask Client Address Pool Configuring SSL VPN Group Policy Configuration Wizards Configuration Wizards Configuring SSL VPN User Groups Using the Site-to-Site VPN Wizard to Configure Site-to-Site Viewing SSL VPN SummaryClick Configuration Wizards Site-to-Site VPN Wizard Configuring VPN Peer SettingsStarting the Site-to-Site VPN Wizard Configuring IKE Policies Configuring Transform Policies Configuring Local and Remote Networks Click Configuration Wizards DMZ Wizard Using the DMZ Wizard to Configure DMZ SettingsConfiguring Ddns Profiles Starting the DMZ WizardConfiguring DMZ Network Configuration Wizards Configuring DMZ Services WAN Starting the Wireless Wizard Using the Wireless Wizard for ISA550W and ISA570W onlyClick Configuration Wizards Wireless Wizard Configuring Wireless Connectivity Types Specify Wireless Connectivity Settings for All Enabled SSIDs Configuring the Ssid for Intranet Wlan AccessConfiguring Wireless Security, Configuring the Ssid for Guest Wlan Access Configuration Wizards Configuration Wizards Configuration Wizards Field Description Device Status DashboardStatus Dashboard System InformationLicenses StatusResource Utilization Syslog SummarySite-to-Site VPN Remote Access VPNRouting Mode Physical PortsField Status Summary Network StatusStatus Summary EthernetVlan Pvid Vlan DMZTraffic Statistics Traffic StatisticsUsage Reports Status WAN Bandwidth Reports ARP Table ARP TableDhcp Bindings Dhcp BindingsSTP Status Global Status STP StatusInterface Status Table Status CDP Neighbor Wireless Status Wireless Status for ISA550W and ISA570W onlyWireless Status, Client Status, Client Status NAT StatusNAT Status IPsec VPN Status, SSL VPN Status, VPN StatusIPsec VPN Status VPN Status IPsec VPN StatusStatistics Teleworker VPN Client SSL VPN StatusVPN Status SSL VPN Status SSL VPN Statistics Active User Sessions Active User SessionsSecurity Services Reports Web Security ReportAnti-Virus Report Email Security Report Network Reputation Report IPS Report Application Control Report Processes, Resource Utilization, System StatusProcesses System Status ProcessesCPU Utilization Resource UtilizationSystem Status Resource Utilization Memory UtilizationStatus Networking Managing Ports Configuring IPv4 or IPv6 RoutingViewing Network Status NetworkingViewing Status of Physical Interfaces Configuring Physical Ports Configuring Port Mirroring Configuring Port-Based 802.1x Access Control Networking Configuring WAN Settings for Your Internet Connection Configuring the WANRelease or renew a Dhcp WAN connection, Configure the primary WAN Networking Network Addressing Configuration Mode Configure a secondary WANNetwork Addressing Mode Dhcp ClientStatic IP PPPoE ISPPptp L2TP Dual WAN Settings Networking Configuring Link Failover Detection Networking Ddns Services Table Configuring Dynamic DNSAdding or modifying a Ddns service Measuring and Limiting Traffic with the Traffic Meter Networking Configuring a Vlan Networking Networking Networking Configuring DMZ About DMZ networksExample DMZ with One Public IP Address for WAN and DMZ Configuring a DMZ Example DMZ with Two Public IP AddressesNetworking Networking Configuring Zones Security Levels for ZonesConfiguring Zones Predefined ZonesServices Configuring Dhcp Reserved IPs Configuring RoutingConfiguring Routing Mode Viewing the Routing TableConfiguring Static Routing Configuring Dynamic Routing RIP Configuring Policy-Based Routing Networking General QoS Settings Configuring Quality of ServiceClick Networking QoS General Settings Managing WAN Bandwidth for Upstream Traffic Configuring WAN QoSClick Networking QoS WAN QoS Bandwidth Configuring WAN Queue Settings Configuring Traffic Selectors Click Networking QoS WAN QoS Queue SettingsNetworking Configuring WAN QoS Class Rules Configuring WAN QoS Policy ProfilesClick Networking QoS WAN QoS QoS Policy Profile Mapping WAN QoS Policy Profiles to WAN Interfaces WAN QoS Configuration Example WAN1 WAN1IPSource Address Configure WAN QoS for Voice Traffic from LAN to WANClass Name Policy NameQoS Class Rule Configuring WAN QoS for Voice Traffic from WAN to LANQoS Class Rules Configuring LAN QoS Click Networking QoS LAN QoS Queue Settings Configuring LAN Queue SettingsConfiguring LAN QoS Classification Methods Click Networking QoS LAN QoS Classification MethodsLAN Queue CoS Value Mapping CoS to LAN QueueMapping Dscp to LAN Queue Click Networking QoS LAN QoS Mapping CoS to QueueDefault Wireless QoS Settings Configuring Wireless QoSConfiguring Default CoS 802.1p Priority 802.11e PriorityIeee 802.11e to 802.1p Mapping Configuring Wireless QoS Classification MethodsClick Networking QoS Wireless QoS Classification Methods 802.11e Priority 802.1p PriorityUnderstanding Dscp Values Mapping CoS to Wireless QueueMapping Dscp to Wireless Queue Dscp Value Decimal Value Meaning100 Configuring Igmp011 Click Networking IgmpConfiguring Vrrp Click Networking VrrpNetworking Address Management Configuring AddressesConfiguring Addresses, Configuring Address Groups, Click Networking Address ManagementConfiguring Address Groups Configuring Services, Configuring Service Groups, Service ManagementConfiguring Services Click Networking Service ManagementConfiguring Service Groups Configuring Captive Portal RequirementsVlan Setup Before You BeginWireless Setup Configuring a Captive PortalUser Authentication Networking Networking Networking Troubleshooting Using External Web-Hosted CGI Scripts Networking Networking Networking Networking Networking Networking Networking Networking CGI Source Code Example No Authentication and Accept Button Networking Networking Networking Networking Networking If result == 2 result == 5 //document.form1.UserName.focus Networking Networking Documentation Related InformationSupport Cisco Small BusinessCisco Small Business Home Wireless for ISA550W and ISA570W only Wireless for ISA550W and ISA570W only Viewing Wireless StatusViewing Wireless Statistics Wireless Wireless Status Wireless StatusViewing Wireless Client Status Configuring the Basic SettingsClick Wireless Basic Settings Wireless for ISA550W and ISA570W only Configuring Ssid Profiles Security Mode Description Configuring Wireless SecurityOpen WEP WPAWPA/WPA2-Personal mixed Supports WPA2WPA + WPA2 WPA/WPA2-Enterprise mixed SupportsWireless for ISA550W and ISA570W only Wireless for ISA550W and ISA570W only Wireless for ISA550W and ISA570W only Controlling Wireless Access Based on MAC Addresses Configuring Ssid Schedule Mapping the Ssid to VlanConfiguring Wi-Fi Protected Setup Click Wireless Wi-Fi Protected SetupWireless for ISA550W and ISA570W only Configuring Captive Portal Requirements Configuring a Captive Portal Wireless for ISA550W and ISA570W only Wireless for ISA550W and ISA570W only Wireless for ISA550W and ISA570W only Troubleshooting Using External Web-Hosted CGI Scripts Wireless for ISA550W and ISA570W only Wireless for ISA550W and ISA570W only Wireless for ISA550W and ISA570W only Wireless for ISA550W and ISA570W only Wireless for ISA550W and ISA570W only Wireless for ISA550W and ISA570W only Wireless for ISA550W and ISA570W only Wireless for ISA550W and ISA570W only CGI Source Code Example No Authentication and Accept Button Wireless for ISA550W and ISA570W only Wireless for ISA550W and ISA570W only Wireless for ISA550W and ISA570W only Wireless for ISA550W and ISA570W only Wireless for ISA550W and ISA570W only If result == 2 result == 5 //document.form1.UserName.focus Wireless for ISA550W and ISA570W only Wireless for ISA550W and ISA570W only Related Information Configuring Wireless Rogue AP Detection Click Wireless Rogue AP DetectionAdvanced Radio Settings Click Wireless Advanced SettingsWireless for ISA550W and ISA570W only Wireless for ISA550W and ISA570W only Firewall About Security Zones FirewallSecurity Levels and Predefined Zones Description Default Firewall Settings Click Firewall Access Control Default PoliciesPreliminary Tasks for Configuring Firewall Rules Priorities of Firewall RulesGeneral Firewall Settings Click Firewall Access Control ACL RulesConfiguring a Firewall Rule Configuration Examples,Firewall Configuring a Firewall Rule to Allow Multicast Traffic MAC Address Filtering to Permit or Block Traffic,Configuring Firewall Logging Settings Configuring NAT Rules to Securely Access a Remote Network Viewing NAT Translation Status Firewall NAT NAT StatusInbound Traffic Priorities of NAT RulesOutbound Traffic Configuring Dynamic PAT Rules Click Firewall NAT Dynamic PATConfiguring Static NAT Rules Click Firewall NAT Static NATConfiguring Port Forwarding Rules Click Firewall NAT Port ForwardingFirewall Configuring Port Triggering Rules Click Firewall NAT Port TriggeringConfiguring Advanced NAT Rules Click Firewall NAT Advanced NATConfiguring IP Alias for Advanced NAT rules As Any HttpConfiguring an Advanced NAT Rule to Support NAT Hairpinning From AnyFTP-CONTROL DefaultDefaultnetwork WAN WAN1 WAN IP WAN1IPFirewall and NAT Rule Configuration Examples Allowing Inbound Traffic Using the WAN IP AddressTranslated IP InternalFTP Enable Port ForwardingANY Translated IP RDPServer Allowing Inbound Traffic Using a Public IP AddressRDP WAN WAN1 WAN IPAddress Original Destination PublicIP Original Services Port NameNetmask ZoneCU-SEEME Enable Port Forwarding Create Firewall Rule OffTranslated IP InternalIP Blocking Outbound Traffic to an Offsite Mail Server Blocking Outbound Traffic by Schedule and IP Address RangeSchedule Configuring Content Filtering Policy Profiles Configuring Content Filtering to Control Internet AccessClick Firewall Content Filtering Content Filtering Policies Configuring Website Access Control List Mapping Content Filtering Policy Profiles to Zones Click Firewall Content Filtering Policy to Zone MappingConfiguring Advanced Content Filtering Settings Click Firewall Content Filtering Advanced SettingsConfiguring MAC Address Filtering to Permit or Block Traffic Click Firewall MAC Filtering MAC Address FilteringConfiguring IP-MAC Binding to Prevent Spoofing Click Firewall MAC Filtering IP MAC Binding RulesConfiguring Attack Protection Click Firewall Attack ProtectionConfiguring Session Limits Click Firewall Session LimitsConfiguring Application Level Gateway Click Firewall Application Level GatewayFirewall Security Services About Security Services IPSActivating Security Services Priority of Security ServicesSecurity Services Dashboard Click Security Services DashboardViewing Security Services Reports Viewing Web Security Report Viewing IPS Report, Viewing Application Control Report,Viewing Anti-Virus Report Viewing Email Security Report Total Since Activated Viewing Network Reputation ReportSystem Date Total Last 7 DaysTotal Today Viewing IPS ReportGraph Viewing Application Control Report Configuring Anti-Virus General Anti-Virus Settings Click Security Services Anti-Virus General SettingsHttp Notification, Protocol ActionNotify + Drop Connection Drop the connection FTPNotification, NetbiosCifs Configuring Advanced Anti-Virus Settings Click Security Services Anti-Virus Advanced SettingsClick Security Services Anti-Virus Http Notification Configuring Http NotificationConfiguring Email Notification Click Security Services Anti-Virus Email NotificationUpdating Anti-Virus Signatures Configuring Application Control Updating Application Signature Database,General Application Control Policy Settings Configuring Application Control PoliciesImportant Tips Adding an Application Control Policy Security Services Permitting or Blocking Traffic for an Application General Application Control Settings Enabling Application Control Service Mapping Application Control Policies to ZonesConfiguring Application Control Policy Mapping Rules Updating Application Signature Database Advanced Application Control Settings Click Update DatabaseConfiguring Spam Filter Click Security Services Spam FilterSecurity Services Configuring Intrusion Prevention Security Services Configuring Signature Actions Updating IPS Signature Database Configuring Web Reputation Filtering Click Security Services Web Reputation Filtering Configuring Web URL Filtering Configuring Web URL Filtering Policy Profiles Click Security Services Web URL Filtering Policy ProfileConfiguring Website Access Control List Click Security Services Web URL Filtering Advanced Settings Configuring Advanced Web URL Filtering SettingsMapping Web URL Filtering Policy Profiles to Zones Security Services Network Reputation VPN About VPNs Viewing IPsec VPN Status, Viewing SSL VPN Status, Viewing VPN StatusViewing IPsec VPN Status VPN VPN Status IPsec VPN StatusField Description Viewing SSL VPN Status VPN VPN Status SSL VPN StatusSSL VPN Statistics VPN Configuring a Site-to-Site VPN Site-to-Site VPNGeneral Site-to-Site VPN Settings Configuration Tasks to Establish a Site-to-Site VPN TunnelClick VPN Site-to-Site IPsec Policies VPN Configuring IPsec VPN Policies VPN VPN VPN 283058 VPN Click VPN Site-to-Site IKE Policies VPN Configuring Transform Sets Click VPN Site-to-Site Transform PoliciesRemote Network Remote Teleworker Configuration ExamplesField Setting IKE PolicyName Enable From TransformDestination Address Translated Services Address TranslatedConfiguring IPsec Remote Access Cisco VPN Client Compatibility Then choose Cisco VPN ClientConfiguring IPsec Remote Access Group Policies Enabling IPsec Remote AccessClick VPN IPsec Remote Access VPN VPN Group Name Allowing IPsec Remote VPN Clients to Access the InternetIKE Authentication WAN InterfaceName VPNClienttoWAN1 Enable From Any Mode Client Pool Range for Client Start IPClient Internet Disable Access WAN Failover LANWAN2 Name VPNClienttoWAN2 Enable From AnyWAN2IP Configuring Teleworker VPN Client Translated Any Destination Address Translated ServicesRequired IPsec VPN Servers Transform SetModes of Operation Benefits of the Teleworker VPN Client FeatureClient Mode, Client Mode Network Extension Mode,Network Extension Mode IPsec VPN Network Extension ConnectionGeneral Teleworker VPN Client Settings Click VPN Teleworker VPN ClientConfiguring Teleworker VPN Client Group Policies VPN VPN Configuring SSL VPN SSL Remote User Access Elements of the SSL VPNConfiguration Tasks to Establish a SSL VPN Tunnel Installing Cisco AnyConnect Secure Mobility Client Configuring SSL VPN Gateway Importing Certificates for User AuthenticationConfiguring SSL VPN Users Click VPN SSL Remote User Access SSL VPN ConfigurationClient Netmask Client Address Pool VPN Configuring SSL VPN Group Policies Click VPN SSL Remote User Access SSL VPN Group PoliciesVPN VPN Accessing SSL VPN Portal Allowing SSL VPN Clients to Access the InternetAddress Original Destination Any Original Services Enable From AnyName SSLVPNtoWAN1 Enable From Any SslvpnaddresspoolName SSLVPNtoWAN2 Enable From Any Configuring L2TP Server Click VPN L2TP ServerService Configuring VPN Passthrough Click VPN VPN PassthroughViewing Active User Sessions Users Active User SessionsAvailable Services for User Groups Configuring Users and User GroupsDefault User and User Group User ManagementConfiguring Local Users Preempt AdministratorsClick Users Users and Groups Configuring Local User Groups User Management Configuring User Authentication Settings Using Radius Server for User Authentication Using Local Database for User AuthenticationClick Users User Authentication Local Database Settings Radius Server Settings Local Radius Server Settings Database Click Users User Authentication Using Ldap for User Authentication User Management Using Local Database and Ldap for Authentication Configuring Radius Servers Click Users Radius ServersUser Management Device Management Viewing Process Status Viewing System StatusViewing Resource Utilization Administration Configuring Administrator Settings Example https//209.165.201.18080 Configuring Email Alert Settings Click Device Management Administration Email Alert New Firmware Alert Event DescriptionCPU Overload Alert Your Firmware from Cisco.com,Security License, Settings page. See Configuring Log Settings,Log Facilities, Up/Down Alert Check Site-to-Site VPN Up/Down Alert in the Enable columnWAN Up/Down Alert Traffic Meter Alert Anti-Virus AlertSettings. See Configuring Application Control, IPS AlertConfiguring Snmp Click Device Management Administration SnmpBacking Up and Restoring a Configuration Click Device Management Backup/RestoreDevice Management Managing Certificates for Authentication Viewing Certificate Status and Details Click Device Management Certificate ManagementExporting Certificates to Your Local PC Certificate Type DetailsExporting Certificates to a USB Device Importing Certificates from Your Local PCImporting Certificates from a USB Device Generating New Certificate Signing RequestsImporting Signed Certificate for CSR from Your Local PC Configuring Cisco Services and Support Settings Configuring Cisco OnPlus Configuring Remote Support Settings Sending Contents for System DiagnosisConfiguring System Time Click Device Management Date and TimeClick Device Management Device Properties Configuring Device PropertiesDiagnostic Utilities Ping, Traceroute, DNS Lookup, Packet Capture,Ping Click Device Management Diagnostic Utilities PingClick Device Management Diagnostic Utilities Traceroute TraceroutePacket Capture Device Discovery ProtocolsDNS Lookup UPnP Discovery, Bonjour Discovery, CDP Discovery,Lldp Discovery, UPnP DiscoveryClick Device Management Discovery Protocols UPnP Click Device Management Discovery Protocols Bonjour Bonjour DiscoveryCDP Discovery Click Device Management Discovery Protocols CDPLldp Discovery Click Device Management Discovery Protocols LldpFirmware Management View the firmware status. See Viewing Firmware Information,Viewing Firmware Information Using the Secondary FirmwareFirmware Version area, click Switch Firmware Click Device Management FirmwareUpgrading your Firmware from Cisco.com Upgrading Firmware from a PC or a USB Device Using Rescue Mode to Recover the System Firmware Auto Fall Back MechanismManaging Security License Checking Security License Status Click Device Management License ManagementInstalling or Renewing Security License Viewing Logs Log ManagementClick Device Management Logs View Logs Click Query Configuring Log Settings Click Device Management Logs Log SettingsCritical level Severity Level DescriptionEmergency level Notification levelDevice Management Configuring Log Facilities Click Device Management Logs Logs FacilitiesClick Device Management Reboot/Reset Rebooting and Resetting the DeviceReset Device area, click Reset to Factory Defaults Rebooting the Security Appliance Configuring SchedulesClick Device Management Schedules Device Management Device Management Device Management Internet Connection Recommended ActionsTroubleshooting Click Status DashboardRecommended Actions Click Networking WAN WAN Settings Date and Time Enable the Daylight Saving Time Adjustment featureDate and Time Testing the LAN Path from Your PC to Your Security Appliance Pinging to Test LAN ConnectivityTesting the LAN Path from Your PC to a Remote Device Feature ISA550 ISA570Internal Power Supply Physical SpecificationsRemote Administration Feature SettingDevice Management CDP Factory Default SettingsSnmp LldpUser Groups User ManagementLocal Users IPv4 or IPv6 Routing User Authentication MethodsNetworking Network Addressing ModesWAN Redundancy Operation Modes Port-based Access ControlVLANs Zones RoutingLAN QOS VrrpWireless Captive Portal Wi-Fi Protected Setup WPSRogue AP Detection IKE PoliciesIPsec Remote Access SSL VPNFeatures Setting Security ServicesFirewall MAC Address Filtering Content FilteringNAT IP MAC BindingReports Default Service Objects Service Name Protocol Port Description Start EndFTP-DATA TCP IKE UDP Rtelnet TCP Default Address Objects Address Name Type IP, IP/Netmask, or IP RangeProduct Documentation Product ResourcesSupport Cisco Small Business