Manuals / Brands / Computer Equipment / Network Router / ZyXEL Communications / Computer Equipment / Network Router

ZyXEL Communications 310 7.2.2 Configuring a Filter Rule, 7.2.3 TCP/IP Filter Rule, Menu 21.1 — Filter Rules Summary, Menu 21.1.1 — TCP/IP Filter Rule

1 199

Download 199 pages, 2.4 Mb

Prestige 310 Broadband Sharing Gateway

7.2.2 Configuring a Filter Rule

To configure a filter rule, type its number in Menu 21.1 — Filter Rules Summary and press [ENTER] to open menu 21.1.1 for the rule.

To speed up filtering, all rules in a filter set must be of the same class, i.e., protocol filters or generic filters. The class of a filter set is determined by the first rule that you create. When applying the filter sets to a port, separate menu fields are provided for protocol and device filter sets. If you include a protocol filter set in a device filter field or vice versa, the Prestige will warn you and will not allow you to save.

7.2.3 TCP/IP Filter Rule

This section shows you how to configure a TCP/IP filter rule. TCP/IP rules allow you to base the rule on the fields in the IP and the upper layer protocol, for example, UDP and TCP headers.

To configure TCP/IP rules, select press [ENTER] to open Menu 21.1.1 — TCP/IP Filter Rule, as shown next.

Menu 21.1.1 - TCP/IP Filter Rule

Filter #: 1,1

Filter Type= TCP/IP Filter Rule

Active= Yes
IP Protocol= 6	IP Source Route= No

Destination: IP Addr= 0.0.0.0

IP Mask= 0.0.0.0

Port #= 137

Port # Comp= Equal

Source: IP Addr= 0.0.0.0

	IP Mask= 0.0.0.0
	Port	#=
	Port	# Comp= None
TCP Estab= No
More= No		Log= None

Action Matched= Drop

Action Not Matched= Check Next Rule

Press ENTER to Confirm or ESC to Cancel:

Press Space Bar to Toggle.

Figure 7-8 Menu 21.1.1 — TCP/IP Filter Rule

The following table describes how to configure your TCP/IP filter rule.

Table 7-3 TCP/IP Filter Rule Menu Fields

FIELD	DESCRIPTION	EXAMPLE
Active	Yes activates and No deactivates the filter rule.	Yes

IP Protocol	Protocol refers to the upper layer protocol, for example,	0-255

Filter Configuration

7-7

Contents

Page Copyright Federal Communications Commission (FCC) Interference Statement Notice Certifications Information for Canadian Users Declaration of Conformity ZyXEL Limited Warranty Customer Support Table of Contents Chapter 3 Internet Access PART II: ADVANCED APPLICATIONS Chapter 6 Network Address Translation (NAT) Chapter 7 Filter Configuration Page Chapter 11 System Maintenance and Information Chapter 12 Internal SPTGEN Chapter 14 Call Scheduling Chapter 15 Troubleshooting Appendix B PPPoE Appendix D Example Internal SPTGEN Screens List of Figures Page Page Page List of Tables Table Preface Syntax Conventions Bold Times Bold Arial Part I: Getting Started Page Getting to Know Your Prestige 1.1The Prestige 310 Broadband Sharing Gateway 1.2Features of the Prestige 1.2.1 10/100MB Auto-negotiationEthernet/Fast Ethernet Interface 1.2.2 SNMP 1.2.4 Traffic Redirect 1.2.5 Port Forwarding 1.2.6 Trigger Port Forwarding 1.2.7 Internal SPTGEN 1.2.8 DHCP Support 1.2.11 PPPoE Support 1.2.12 PPTP Support 1.2.13 IP Alias 1.2.14 Call Scheduling 1.2.15 Call Control 1.3Applications for the Prestige 1.3.1 Broadband Internet Access via Cable or DSL Modem 1.4Internet Access Configuration Checklist Page Hardware Installation and Initial Setup 2.1Front Panel LEDs and Rear Panel Ports 2.1.1 Front Panel LEDs 2.2Prestige 310 Rear Panel and Connections 2.2.1 Connecting the Console Port 2.2.2 Connecting the Prestige to the Broadband Modem 2.2.3 Connecting the Prestige to the LAN 2.2.4 Connecting the Power Adapter to your Prestige 2.2.5 Grounding the Prestige (Optional) 2.3Additional Installation Requirements 2.4Turning on Your Prestige 2.4.1 Initial Screen 2.4.2 Entering the Password 2.5Navigating the SMT Interface 2.5.1 Main Menu 2.5.2 System Management Terminal Interface Summary 2.5.3 SMT Menus at a Glance Figure 2-7Advanced Management SMT Menus 2.6Changing the System Password 2.6.1 Resetting the Prestige 2.7General Setup 2.7.1 Dynamic DNS 2.7.2 Procedure For Configuring Menu 2.7.3 Configuring Dynamic DNS Figure 2-10Configure Dynamic DNS Follow the instructions in the next table to configure Dynamic DNS parameters Table 2-6Configure Dynamic DNS Menu Fields 2.8WAN Setup 2.9LAN Setup 2.9.1 LAN Port Filter Setup Internet Access 3.1TCP/IP and DHCP for LAN 3.1.1 Factory LAN Defaults 3.1.2 DHCP Configuration 3.1.3 IP Address and Subnet Mask 3.1.4 Private IP Addresses 3.1.5 RIP Setup 3.1.6 IP Multicast 3.1.7 IP Alias 3.2TCP/IP and DHCP Ethernet Setup Table 3-3LAN DHCP Setup Menu Fields Table 3-4LAN TCP/IP Setup Menu Fields 3.2.1 IP Alias Setup 3.3Internet Access Setup 3.3.1 Ethernet Encapsulation Figure 3-6Internet Access Setup (Ethernet) The following table describes this screen Table 3-6Internet Access Setup Menu Fields 3.3.2 PPTP Encapsulation 3.3.3 Configure PPTP Client 3.3.4 PPPoE Encapsulation Figure 3-8Internet Access (PPPoE) Table 3-8New Fields in Menu 4 (PPPoE) Screen 3.4Internet Test Setup 3.5Basic Setup Complete Part II: Advanced Applications Remote Node Setup This chapter shows you how to configure a remote node 4.1Remote Node Profile 4.1.1 Ethernet Encapsulation Table 4-1Fields in Menu 11.1 (Ethernet Encapsulation) 4.2PPTP Encapsulation 4.2.1 PPPoE Encapsulation Figure 4-3Menu 11.1 Remote Node Profile for PPPoE Encapsulation Table 4-3Table 4-3Fields in Menu 11.1 (PPPoE Encapsulation Specific Only) 4.3Editing TCP/IP Options (with Ethernet Encapsulation) Figure 4-4Remote Node Network Layer Options Table 4-4Remote Node Network Layer Options Menu Fields 4.3.1 Editing TCP/IP Options (with PPTP Encapsulation) Table 4-5Remote Node Network Layer Options Menu Fields Please see the RIP Setup section for more information on RIP. The default for RIP on the WAN side is None. It is recommended that you do not change this 4.4Remote Node Filter 4.5Traffic Redirect 4.5.1 Traffic Redirect Setup Figure 4-10Menu 11.6 — Traffic Redirect Setup Table 4-7Traffic Redirect Setup Page IP Static Route Setup This chapter shows you how to configure static routes with your Prestige 5.1IP Static Route Setup Table 5-1IP Static Route Menu Fields Page Network Address Translation (NAT) This chapter discusses how to configure NAT on the Prestige 6.1Introduction 6.1.1 NAT Definitions 6.1.2 What NAT Does 6.1.3 How NAT Works 6.1.4 NAT Application 6.1.5 NAT Mapping Types 6.2Using NAT 6.2.1 SUA (Single User Account) Versus NAT 6.2.2Applying NAT 6.3NAT Setup 6.3.1 Address Mapping Sets Figure 6-7Menu 15.1.255 – SUA Address Mapping Rules The fields in Menu 15.1.255 are read-only Table 6-4SUA Address Mapping Rules User-DefinedAddress Mapping Sets Select Rule Figure 6-8Menu 15.1.1 — First Set The Type, Local and Global Start/End IPs are configured in menu (described later) and the values are displayed here Table 6-5Fields in Menu No changes to the set take place until this action is taken Edit Menu 15.1.1.1 — Address Mapping Rule Local 6.4NAT Server Sets – Port Forwarding 6.4.1 Configuring a Server behind NAT Figure 6-10Menu 15.2 — NAT Server Setup Figure 6-11Multiple Servers Behind NAT Example 6.5General NAT Examples 6.5.1 Example 1: Internet Access Only 6.5.2 Example 2: Internet Access with an Inside Server 6.5.3 Example 3: Multiple Public IP Addresses With Inside Servers Figure 6-16NAT Example Menu 15.1 — Address Mapping Sets Edit Action Start IP Figure 6-17Example 3: Menu The following figure shows how to configure the first rule Figure 6-18Example 3: Menu Figure 6-19Example 3: Final Menu Step 9. Now enter 2 from this menu and configure it as shown in Figure Figure 6-20Example 3: Menu 6.5.4 Example 4: NAT Unfriendly Application Programs 6.6Trigger Port Forwarding 6.6.1 Two Points To Remember About Trigger Ports 6.6.2 Trigger Port Forwarding Process Part III: Advanced Management Page Filter Configuration This chapter shows you how to create and apply filter(s) 7.1About Filtering 7.1.1The Filter Structure of the Prestige Start Packet into Filter Fetch First Filter Set Fetch Next Filter Rule Next Filter Set Next Filter Rule 7.2Configuring a Filter Set 7.2.1 Filter Rules Summary Menu Table 7-1Abbreviations Used in the Filter Rules Summary Menu The protocol dependent filter rules abbreviation are listed as follows: Table 7-2Rule Abbreviations Used Refer to the next section for information on configuring the filter rules 7.2.2 Configuring a Filter Rule 7.2.3 TCP/IP Filter Rule Page The following figure illustrates the logic flow of an IP filter Figure 7-9Executing an IP Filter 7.2.4 Generic Filter Rule Page 7.3Example Filter Press [SPACE BAR] to choose this filter rule type. The first filter rule type determines all subsequent filter types within a set A = Y Type = IP Pr DP M = N 7.4Filter Types and NAT 7.5Applying a Filter and Factory Defaults 7.5.1 LAN Traffic 7.5.2 Remote Node Filters SNMP Configuration This chapter explains SNMP configuration menu 8.1About SNMP 8.2Supported MIBs 8.3SNMP Configuration 8.4SNMP Traps Table 8-2SNMP Traps System Information and Diagnosis This chapter covers SMT menus 24.1 to 24 9.1System Status 9.1.1 To get to the System Status: Menu 24.1 — System Maintenance — Status Figure 9-2Menu 24.1 — System Maintenance — Status Table 9-1System Maintenance — Status Menu Fields 9.2System Information and Console Port Speed 9.2.1 System Information 9.2.2 Console Port Speed 9.3Log and Trace 9.3.1 Viewing Error Log 9.3.2 UNIX Syslog Figure 9-8Menu 24.3.2 — System Maintenance — UNIX Syslog Table 9-3System Maintenance Menu Syslog Parameters 1.CDR 2.Packet triggered 3.Filter log 4.PPP log 9.3.3 Call-TriggeringPacket 9.4Diagnostic 9.4.1 WAN DHCP Figure 9-11WAN & LAN DHCP Table 9-4System Maintenance Menu Diagnostic Firmware and Configuration Maintenance 10.1 Filename Conventions 10.2 Backup Configuration 10.2.1 Backup Configuration 10.2.2 Using the FTP Command from the DOS Prompt Example of FTP Commands from the DOS Prompt Figure 10-2FTP Session Example Third Party FTP Clients Table 10-2General Commands for Third Party FTP Clients TFTP and FTP over WAN 10.2.3 Backup Configuration Using TFTP 10.2.4 TFTP Command Example 10.2.5 Backup Via Console Port 10.3 Restore Configuration 10.3.1 Restore Using FTP or TFTP 10.3.2 Restore Via Console Port 10.4 Uploading Firmware and Configuration Files 10.4.1 Firmware File Upload 10.4.2 Configuration File Upload 10.4.3 TFTP File Upload 10.4.4 Uploading Via Console Port Figure 10-16Menu 24.7.1 as seen using the Console Port Example Xmodem Firmware Upload Using HyperTerminal Click Transfer, then Send File to display the following screen Type the firmware file’s location, or click Browse to look for it Figure 10-17Example Xmodem Upload Figure 10-18Menu 24.7.2 as seen using the Console Port Step 3. Enter “atgo” to restart the Prestige Example Xmodem Configuration Upload Using HyperTerminal Figure 10-19Example Xmodem Upload System Maintenance and Information This chapter leads you through SMT menus 24.8 to 11.1 Command Interpreter Mode 11.2 Call Control Support 11.2.1 Budget Management 11.2.2 Call History 11.3 Time and Date Setting Figure 11-6Menu 24 — System Maintenance Then enter 10 to go to Figure 11-7Menu 24.10 System Maintenance — Time and Date Setting Table 11-3Time and Date Setting Fields 11.3.1 Resetting the Time Internal SPTGEN 12.1 The Configuration Text File Format 12.1.1 Internal SPTGEN File Modification - Important Points to Remember 12.2 Internal SPTGEN FTP Download Example 12.3 Internal SPTGEN FTP Upload Example Remote Management 13.1 Telnet 13.2 FTP 13.3 Web 13.4 SNMP 13.5 DNS 13.6 Remote Management Figure 13-2Menu 24.11 — Remote Management Control Table 13-1Menu 24.11 — Remote Management Control 13.6.1 Remote Management Limitations 13.7 Remote Management and NAT 13.8 System Timeout Call Scheduling This chapter shows you how to setup call time periods for remote nodes 14.1 Introduction 14.2 Schedule Setup 14.3 Schedule Set Setup 14.4 Applying Schedule Sets to Remote Nodes Figure 14-4Applying Schedule Sets to a Remote Node Example (PPTP Encapsulation) Part IV: Troubleshooting and Additional Information Troubleshooting 15.1 Problems Starting Up the Prestige 15.2 Problems with the LAN Interface 15.3 Problems with the WAN Interface 15.4 Problems with Internet Access 15.5 Problems with the Password 15.6 Problems with Remote Management Page Appendix A TCP/IP Client Client for Microsoft Networks Configuring TCP/IP Obtain an IP address automatically Specify an IP address Setting up Your Windows NT/2000 Computer Internet Protocol (TCP/IP) 3.The Internet Protocol TCP/IP Properties window opens Use the following IP Address IP address 4.The Internet Protocol TCP/IP Properties window opens ƒIn the IP Settings tab, in IP addresses, click Add TCP/IP Address Default gateways TCP/IP Gateway Address Setting up Your Macintosh Computer Configuring TCP/IP Properties Connect via Using DHCP Server Configure: Appendix B PPPoE How PPPoE Works The Prestige as a PPPoE Client Diagram 2 Prestige as a PPPoE Client Appendix C Appendix C PPTP Diagram 4 PPTP Protocol Overview Control & PPP connections Diagram 5 Example Message Exchange between PC and an ANT Page Appendix D Example Internal SPTGEN Screens Page Page Appendix E Boot Commands Diagram 7 List of Debug Commands Appendix F Power Adapter Specifications Appendix G Hardware Specifications Index Page Non NAT Friendly Application Programs 2-5 PPPoE 3-8 3-11, 4-4 SUA (Single User Account) See NAT Subnet Mask 3-2, 3-6, 3-10, 4-7, 4-9 See UNIX Syslog