Create a filter set in Menu | ZyXEL Communications 2602RL-D3A

Prestige 2602RL-D3A Support Notes

1.The outbound packet type (protocol & port number)

2.The source IP address

Generally, the outbound packets for Web service could be as following:

a. HTTP packet, TCP (06) protocol with port number 80 b. DNS packet, TCP (06) protocol with port number 53 or c. DNS packet, UDP (17) protocol with port number 53

For all workstation on the LAN, the source IP address will be 0.0.0.0. Otherwise, you have to enter an IP Address for the workstation you want to block. See the procedure for configuring this filter below.

oCreate a filter set in Menu 21, e.g., set 1

oCreate three filter rules in Menu 21.1.1, Menu 21.1.2, Menu 21.1.3

Rule 1- block the HTTP packet, TCP (06) protocol with port number 80

Rule 2- block the DNS packet, TCP (06) protocol with port number 53

Rule 3- block the DNS packet, UDP (17) protocol with port number 53 o Apply the filter set in menu 4

1.Create a filter set in Menu 21

	Menu 21 - Filter Set Configuration
Filter		Filter
Set #	Comments	Set #	Comments
------	-----------------	------	-----------------
1	Web Request	7	_______________

2	_______________	8	_______________
3	_______________	9	_______________
4	_______________	10	_______________
5	_______________	11	_______________
6	_______________	12	_______________

Enter Filter Set Number to Configure= 1

Edit Comments=

Press ENTER to Confirm or ESC to Cancel:

45

All contents copyright (c) 2007 ZyXEL Communications Corporation.

Image 45

ZyXEL Communications 2602RL-D3A manual Create a filter set in Menu

Contents

Version Sep Prestige 2602RL-D3A Prestige 2602RL-D3A Support Notes FAQ Pstn L Ifeline FAQ Trouble Shooting Ethernet connection Application Notes TCP/IP Installation TCP/IP Configuration∙ Setting up the Prestige router Prestige 2602RL-D3A Support Notes Web screen shown below takes PPPoE as the example ∙ What is Dhcp Relay? Setup the Prestige as a Dhcp Relay ∙ Setup the Prestige as a Dhcp Client Configure an Internal Server Behind SUA Edit IP Alias= No Press Enter to Confirm or ESC to Cancel Service Port Number Configure a Pptp server Behind SUA ∙ Example 1723 192.168.1.10 Prestige 2602RL-D3A Support Notes ∙ What is Multi-NAT? Using NAT / Multi-NAT Many to One One to OneMany to Many Overload Many to Many No Overload Following table summarizes these types NAT Type IP Mapping DirectionApplying NAT in the SMT Menus Field Options Description Full FeatureNone SUA Only Configuring NAT Table Applying NAT in Menu 4 and MenuAddress Mapping Sets and NAT Server Sets Prestige 2602RL-D3A Support Notes SUA Field Description Option/Example Description Option Field Following table describes the fields in this screen Enter 2 to go to Menu 15.2.1-NAT Server Setup See the following figure Internet Access Only Prestige 2602RL-D3A Support Notes Internet Access with an Internal Server Types are used Type One-to-One Start= Name= Example3 Support Non NAT Friendly Applications Type Many-to-Many No Overload Start= NAT Type IP Mapping ∙ SUA ∙ Filter Structure About Filter & Filter Examples How does ZyXEL filter work? ∙ Filter Types and SUA Prestige 2602RL-D3A Support Notes Menu Protocol and device rule cannot be active together Filter for blocking the web service Create a filter set in Menu Rule 2 for b.DNS request, TCP06/Port number Rule one for a. http packet, TCP06/Port number Rule 3 for c. DNS packet UDP17/Port number Filter for blocking a specific client Configuration Create a filter set in Menu 21, e.g., set Enter the client IP in this field One rule for blocking all packets from this clientAddr= field, for one workstation it is Set to Drop to drop all the packets from this client Detailed format of the Ethernet Version Before you Begin Configurations Action Matched= Drop Action Not Matched= Forward Value= 0080c810234a Filter for blocking the NetBIOS packets Action Not Matched= Check Next Rule Prestige 2602RL-D3A Support Notes Prestige 2602RL-D3A Support Notes Menu 21.1.6 TCP/IP Filter Rule Filter # 1,6 Prestige 2602RL-D3A Support Notes Prestige 2602RL-D3A Support Notes Menu 3.1 General Ethernet Setup Input Filter Sets Using the Dynamic DNS Ddns Key Settings for using Ddns function Network Management Using Snmp Password Enable Wildcard Writes ∙ GetNext ∙ Get∙ Set ∙ Trap ZyXEL Snmp Implementation ∙ warmStart defined in RFC-1215 Configure the Prestige for Snmp Using syslog ∙ Unix Setup L02 Call Terminated C02 Call Terminated Example ∙ Packet triggered log∙ Filter log Format SdcmdSyslogSend SYSLOGPPPLOG, SYSLOGNOTICE, String ∙ PPP Log ∙ What is IP Alias ? Using IP Alias Dhcp Setup TCP/IP Setup IP Alias Using Call Scheduling Select a Schedule Set number and give it a name Edit the Schedule sets in menu Menu 26.1 Schedule Set Setup is as follows Start Date How Often Forced On Forced Down Enable ∙ Time Service in Prestige ∙ IP Multicast Setup Enable Igmp in Prestiges LAN in menu Using IP Multicast Multicast Enable Igmp in Prestiges remote node in menu You can deploy the backup gateway on LAN of Prestige Using Prestige traffic redirectSMT Menu 2 WAN Backup Setup Traffic Redirect on LAN port WAN IP ∙ 1. What is UPnP Using Universal Plug n Play UPnP UPnP Operations Enable UPnP function in ZyXEL device ∙ 2. Using UPnP in ZyXEL devices Changes through UPnP Prestige 2602RL-D3A Support Notes Finally, your video conversation is achieved Usage of Pstn Lifeline Pstn Lifeline Application Notes Relay to Pstn Lifeline configuration How to connect Lifeline and DSL connection VoIP Application Notes Setup SIP Account To configure Number AccountLocal Port Setup PasswordReset Phone port settings Volume Setting to take effectFunction menu Speaking Active Advanced voice settings configurationSupport Dialing SIP Account Each fields detail description of the page is listed below Dtmf Mode TimerURL Type Expiration Waiting MessageIndication Time Each fields detail description of the page is listed below SIP Number Speed DialName Type Settings Voice Common SettingsRegion Immediate Call Service Mode Services from your voice service providerVoice QoS setup Call Forwarding setup PriorityVoice Vlan Unconditional Forward to Number Busy Forward to NumberNo Answer Forward to Number Forward to Table NumberUnconditional Busy Forward Call Hold setup Number Setup sectionCall Waiting setup Condition Scenario Three Way Conference setup Step Dial B phone number directly to make another call StepConversation Step Hang up the phone to drop the connection Dial to B Off hook B conversation Call Transfer setup Application scenario 2 Consult On Hold Transfer To active Blind Transfer please follow the below step Application scenario 3 Attendant Transfer To active Attendant Transfer please follow the below step Internal CallCall Park / Call Pickup System Call Park Call FlowStep Then a hang up the phone Call Pickup Call Flow Call Return Each filed is described in the following table Distinctive Ringing Do Not Disturb DND How to configure DND on phone keypad? Hot Line Auto Dial On phone keypad, it will implement this feature Music on hold MWI Early Media Country Code How do I access the embedded web configurator? What is ZyNOS? How do I upload or backup Romfile via web configurator? Why cant I make Telnet to Prestige from WAN? What should I do if I forget the system password?What is SUA? When should I use SUA? Why cant I configure device filters or protocol filters? What is the difference between NAT and SUA?How many network users can the SUA/NAT support? What are Device filters and Protocol filters? What is PPPoE? What is the Prestige Integrated Access Device?Will the Prestige work with my Internet connection? What do I need to use the Prestige? Why does my provider use PPPoE? How do I know I am using PPPoE?How can I configure the Prestige? Does the Prestige support PPPoE? Does Prestige support dynamic IP addressing? How does e-mail work through the Prestige?What Dhcp capability does the Prestige support? How does the Prestige support TFTP? Default IP address is 192.168.1.1, PasswordCan the Prestige support Tftp over WAN? How fast can the data go? When do I need Multi-NAT? What is Multi-NAT? Server What IP/Port mapping does Multi-NAT support? What is BOOTP/DHCP? What is the difference between SUA and Multi-NAT? What is DDNS? When do I need Ddns service? Do I need Lifeline? What does Lifeline mean? Why use VoIP? What is Voice over IP?Can I connect more than one phone on the phone port? Can I receive incoming Pstn call through P2602RL- D3A? What is the difference between H.323 and SIP? What is the relationship between codec and VoIP?What is voice quality? What advantage does Voice over IP can provide? What is the relation of codec and VoIP? What is codec?What codec does Prestige support? Which codec should I choose? Can register but can not establish a call? Unable to register with the SIP server? What makes Prestige firewall secure? What is a network firewall? What kind of firewall is the Prestige? What are the basic types of firewalls? What is Ping of Death attack? What is Denials of Service DoSattack?What is Teardrop attack? What is SYN Flood attack? What is Brute-force attack? What is Land attack?What is IP Spoofing attack? What are the default ACL firewall rules in Prestige? How can I protect against IP spoofing attacks? Can I override block or allow certain URLs by wording? Content Filter FAQ Example Online Trace TCP RAW Data 0000 80 C8 4C EA A0-C5 0010 = 0xE8ED 238 Protocol Prestige 2602RL-D3A Support Notes Total Length Idetification Trace LAN packet Trace WAN packet Offline Trace 160 RAW Data Prestige 2602RL-D3A Support Notes 163 TCP/IP Debug PPPoE Connection Example- a trace with system crashes E5bdc000 LAN/WAN Packet Trace Example TCP Urgent Ptr Options 0000 02 05 B4 01 01 172 Example Ras sys trcd parse Be 2F FE EF D0 CLI Command List