Manuals / Brands / Computer Equipment / Network Card / ZyXEL Communications / Computer Equipment / Network Card

ZyXEL Communications 314 PLUS 7.5Applying a Filter and Factory Defaults, 7.5.1 LAN traffic, protocol filters, Input Filter Sets, Figure 7-15Protocol and Device Filter Sets

1 225

Download 225 pages, 2.38 Mb

Prestige 314 PLUS Broadband Sharing Gateway with 4-Port Switch

Figure 7-15 Protocol and Device Filter Sets

7.5Applying a Filter and Factory Defaults

This section shows you where to apply the filter(s) after you design it (them). Sets of factory default filter rules have been configured in menu 21 to prevent NetBIOS traffic from triggering calls and block incoming telnet, FTP and HTTP connections.

7.5.1 LAN traffic

You seldom need to filter LAN traffic; however, the filter sets may be useful to block certain packets, reduce traffic and prevent security breaches. Go to menu 3.1 (shown below) and enter the number(s) of the filter set(s) that you want to apply as appropriate. You can choose up to four filter sets (from twelve) by entering their numbers separated by commas, e.g., 3, 4, 6, 11. Input filter sets filter incoming traffic to the Prestige and Output filter sets filter outgoing traffic from the Prestige. A factory default set, NetBIOS_LAN, is inserted in protocol filters field under Input Filter Sets in menu 3.1 to block NetBIOS traffic to the Prestige from the LAN.

7-18	Filter Configuration

Contents

Page Copyright Federal Communications Commission (FCC) Interference Statement Notice Information for Canadian Users Declaration of Conformity We, the Manufacturer/Importer ZyXEL Communications Corp No. 6, Innovation Rd. II Prestige 314 PLUS is in conformity with: Declaration of Conformity ZyXEL Limited Warranty Customer Support Table of Contents Chapter 8 UPnP Log and Trace Diagnostic Chapter 12 Firmware and Configuration File Maintenance Command Interpreter Mode Time and Date Setting Page List of Figures Page Page Page List of Diagrams List of Charts List of Tables Page Preface Syntax Conventions Settings Control Panel Bold Times New Roman Bold Arial Part I: Getting Started Page Getting to Know Your Prestige 314 PLUS 1.1The Prestige Broadband Sharing Gateway With 4-PortSwitch 1.2Features of the Prestige 314 PLUS Universal Plug and Play (UPnP) Traffic Redirect SNMP NAT (Network Address Translation) DHCP Support PPTP Support IP Alias Call Scheduling Call Control Full Network Management 1.3Broadband Internet Access via Cable or DSL Modem 1.4Internet Access Configuration Checklist Table 1-1Internet Access Configuration Checklist Page Hardware Installation & Initial Setup 2.1Front Panel LEDs 2.2Prestige Rear Panel and Connections 2.3Connecting Your Prestige 2.4Additional Installation Requirements 2.5Turning on Your Prestige 2.5.1 Initial Screen 2.5.2 Entering the Password 2.6Navigating the SMT Interface 2.6.1 Main Menu 2.6.2 System Management Terminal Interface Summary 2.7Changing the System Password 2.7.1 Resetting the Prestige 2.8General Setup 2.8.1 Dynamic DNS 2.8.2 Procedure For Configuring Menu 2.8.3 Configuring Dynamic DNS Figure 2-8Configure Dynamic DNS Follow the instructions in the next table to configure Dynamic DNS parameters Table 2-6Configure Dynamic DNS Menu Fields Table 2-7Configure Dynamic DNS Menu Fields Page 2.9WAN Setup 2.10 LAN Setup 2.10.1 LAN Port Filter Setup Figure 2-11Menu 3.1 — LAN Port Filter Setup Menu 3.2 is discussed in the next part of the manual. Please read on Internet Access 3.1TCP/IP and DHCP for LAN 3.1.1 Factory LAN Defaults 3.1.2 DHCP Configuration 3.1.3 IP Address and Subnet Mask 3.1.4 Private IP Addresses 3.1.5 RIP Setup 3.1.6 IP Multicast 3.1.7 IP Alias 3.2TCP/IP and DHCP Ethernet Setup Table 3-3LAN DHCP Setup Menu Fields Table 3-4LAN TCP/IP Setup Menu Fields 3.2.1 IP Alias Setup Figure 3-5Menu 3.2.1 — IP Alias Setup Table 3-5IP Alias Setup Menu Fields 3.3Internet Access Setup 3.3.1 Ethernet Encapsulation 3.3.2 PPTP Encapsulation 3.3.3 Configure PPTP Client 3.3.4 PPPoE Encapsulation 3.4Internet Test Setup 3.5Basic Setup Complete Page Part II: Advanced Applications Page Network Address Translation (NAT) 4.1Introduction 4.1.1 NAT Definitions 4.1.2 What NAT Does 4.1.3 How NAT Works 4.1.4 NAT Application 4.1.5 NAT Mapping Types Many to Many Overload Server Port numbers do not change for One-to-One and Many One-to-One NAT mapping types Table 4-2NAT Mapping Types 4.2Using NAT 4.2.1 SUA (Single User Account) Versus NAT 4.2.2Applying NAT The following figure shows how you apply NAT to the remote node in menu Step 1. Enter 11 from the main menu Edit IP Menu 11.3 - Remote Node Network Layer Options Figure 4-4Menu 11.3 — Applying NAT to the Remote Node 4.3NAT Setup 4.3.1 Address Mapping Sets SUA Address Mapping Set section 4.2.1) Figure 4-7Menu 15.1.255 — SUA Address Mapping Rules The following table explains the fields in this screen The fields in menu 15.1.255 are read-only User-DefinedAddress Mapping Sets Select Rule Set Name If the Set Name field is left blank, the entire set will be deleted Set Name Figure 4-8Menu 15.1.1 — First Set The Type, Local and Global Start/End IPs are configured in menu (described later) and the values are displayed here Ordering Your Rules Table 4-5Fields in Menu No changes to the set take place until this action is taken Edit Menu 15.1.1.1 - Address Mapping Rule Local Global 4.3.2 Port Forwarding Setup Table 4-7Services & Port Numbers Configuring a Server behind NAT Menu 15 - NAT Setup Step 2. Enter 2 to go to Menu 15.2 - NAT Server Setup Start Port No End Port No IP Address Figure 4-10Menu 15.2 — NAT Server Setup 4.3.3 Trigger Port Setup Two Points To Remember About Trigger Ports Only one LAN computer can use a trigger port (range) at a time Menu 15.3 — Trigger Port Setup Figure 4-13Menu 15.3: Trigger Port Setup 4.4General NAT Examples 4.4.1 Internet Access Only Figure 4-14NAT Example Figure 4-15Menu 4 — Internet Access & NAT Example Network Address Translation 4.4.2 Example 2: Internet Access with an Inside Server 4.4.3 Example 3: Multiple Public IP Addresses With Inside Servers Figure 4-17NAT Example Menu 15.1 - Address Mapping Sets Full Feature Edit Action One-to-One Start IP Figure 4-18Example 3: Menu Figure 4-19Example 3: Menu Figure 4-20Example 3: Final Menu Now configure the IGA3 to map to our web server and mail server on the LAN Step 7. Enter 15 from the main menu 4.4.4 Example 4: NAT Unfriendly Application Programs Figure 4-22NAT Example Figure 4-23Example 4: Menu 15.1.1.1 — Address Mapping Rule Figure 4-24Example 4: Menu 15.1.1 — Address Mapping Rules Remote Node Setup 5.1Remote Node Profile 5.1.1 Ethernet Encapsulation Figure 5-1Menu 11.1 Remote Node Profile for Ethernet Encapsulation Table 5-1Fields in Menu 11.1 (Ethernet Encapsulation) 5.1.2 PPTP Encapsulation Figure 5-2Remote Node Profile for PPTP Encapsulation Remote Node Profile Table 5-2Fields in Menu 11.1 (PPTP Encapsulation) 5.1.3 PPPoE Encapsulation Figure 5-3Menu 11.1 Remote Node Profile for PPPoE Encapsulation The next table describes the fields NOT already described in Table 5-1 already Table 5-3Fields in Menu 11.1 (PPPoE Encapsulation Specific Only) 5.2Editing TCP/IP Options (with Ethernet Encapsulation) Table 5-4Remote Node Network Layer Options Menu Fields 5.2.1 Editing TCP/IP Options (with PPTP Encapsulation) Table 5-5Remote Node Network Layer Options Menu Fields 5.2.2 Editing TCP/IP Options (with PPPoE Encapsulation) 5.3Remote Node Filter Figure 5-6Remote Node Filter (Ethernet Encapsulation) Figure 5-7Remote Node Filter (PPTP/PPPoE Encapsulation) IP Static Route Setup 6.1IP Static Route Setup Table 6-1IP Static Route Menu Fields Page Part III: Advanced Management Page Filter Configuration 7.1About Filtering 7.1.1 The Filter Structure of the Prestige Filter Set Execute Filter Rule 7.2Configuring a Filter Set Figure 7-4NetBIOS_WAN Filter Rules Summary Figure 7-5NetBIOS _LAN Filter Rules Summary Figure 7-6TEL_FTP_WEB_WAN Filter Rules Summary 7.2.1 Filter Rules Summary Menu 7.2.2 Configuring a Filter Rule 7.2.3 TCP/IP Filter Rule Figure 7-8Menu 21.1.1 — TCP/IP Filter Rule The following table describes how to configure your TCP/IP filter rule Table 7-3TCP/IP Filter Rule Menu Fields Page The following figure illustrates the logic flow of an IP filter Figure 7-9Executing an IP Filter 7.2.4 Generic Filter Rule Page 7.3Example Filter Figure 7-12Example Filter — Menu Figure 7-13Example Filter Rules Summary — Menu 7.4Filter Types and NAT 7.5Applying a Filter and Factory Defaults 7.5.1 LAN traffic 7.5.2 Remote Node Filters Page UPnP 8.1Introducing Universal Plug and Play 8.1.1 How do I know if I'm using UPnP 8.1.2 NAT Transversal 8.1.3 Cautions with UPnP 8.2UPnP and ZyXEL 8.2.1 Configuring UPnP Figure 8-1Configuring UPnP Table 8-1Configuring UPnP 8.3Installing UPnP in Windows Example Installing UPnP in Windows XP Click start and Control Panel Double-click Network Connections In the Network Connections window Advanced 8.4Using UPnP in Windows XP Example Step 18. In the Internet Connection Properties Add When the UPnP-enableddevice is disconnected from your computer, all port mappings will be deleted automatically Web Configurator Easy Access Step 22. Click start and then Control Panel Connections Step 24. Select My Network Places under Other Places Local Network Page SNMP Configuration This chapter explains SNMP configuration menu 9.1About SNMP Figure 9-1SNMP Management Model 9.2Supported MIBs 9.3SNMP Configuration 9.4SNMP Traps Page Page Traffic Redirect This section details the configuration process for Traffic Redirect 10.1 Traffic Redirect Figure 10-1Traffic Redirect WAN Setup Figure 10-2Traffic Redirect LAN Setup 10.1.1 Traffic Redirect Setup Figure 10-4Menu 11.6 — Traffic Redirect Setup Table 10-2Traffic Redirect Setup Page Page System Information & Diagnosis 11.1 System Status 11.1.1 To get to the System Status: 11.2 System Information and Console Port Speed 11.2.1 System Information 11.2.2 Console Port Speed 11.3 Log and Trace 11.3.1 Viewing Error Log 11.3.2 UNIX Syslog Table 11-3System Maintenance Menu Syslog Parameters 1.CDR 2.Packet triggered 3.Filter log 11.3.3 Call-TriggeringPacket 11.4 Diagnostic 11.4.1 WAN DHCP Figure 11-11WAN & LAN DHCP Table 11-4System Maintenance Menu Diagnostic Page Firmware and Configuration File Maintenance 12.1 Filename Conventions 12.2 Backup Configuration 12.2.1 Using the FTP Command from the DOS Prompt Example of FTP Commands from the DOS Prompt Figure 12-2FTP Session Example FTP GUI Clients Table 12-2General Commands for GUI Clients TFTP and FTP over WAN Will Not Work When 12.2.2 Backup Configuration Using TFTP 12.2.3 TFTP Command Example 12.2.4 Backup Via Console Port Figure 12-3System Maintenance — Backup Configuration Step 2. The following screen indicates that the Xmodem download has started Figure 12-4System Maintenance — Starting Xmodem Download Screen Transfer Receive File 12.3 Restore Configuration 12.3.1 Restore Using FTP or TFTP Figure 12-7Telnet into Menu 12.3.2 Restore Via Console Port 12.4 Uploading Firmware and Configuration Files 12.4.1 Firmware File Upload 12.4.2 Configuration File Upload rom-0 “rom-0” Likewise get Enter “quit” to exit the ftp prompt Figure 12-14Telnet Into Menu 24.7.2 — System Maintenance 12.4.3 TFTP File Upload 12.4.4 Uploading Via Console Port Figure 12-16Menu 24.7.1 as seen using the Console Port Example Xmodem Firmware Upload Using HyperTerminal Click Transfer, then Send File to display the following screen Figure 12-17Example Xmodem Upload Uploading a Configuration File Via Console Port Select 2 from . Follow the instructions as shown in the next screen Figure 12-18Menu 24.7.2 as seen using the Console Port Step 3. Enter “atgo” to restart the Prestige Figure 12-19Example Xmodem Upload System Maintenance & Information 13.1 Command Interpreter Mode 13.2 Call Control Support 13.2.1 Budget Management 13.2.2 Call History 13.3 Time and Date Setting Figure 13-7Menu 24.10 System Maintenance — Time and Date Setting Table 13-3Time and Date Setting Fields Time Update Frequency Page Remote Management 14.1 Telnet 14.2 FTP 14.3 Web 14.4 DNS (Domain Name System) 14.5 SNMP (Simple Network Management Protocol) 14.6 Remote Management Setup – please see menu Figure 14-2Menu 24.11 – Remote Management Control Table 14-1Menu 24.11 – Remote Management Control 14.6.1 Remote Management Limitations 14.7 Remote Management and NAT 14.8 System Timeout Call Scheduling This chapter shows you how to setup call time periods for remote nodes 15.1 Introduction 15.2 Schedule Setup 15.3 Schedule Set Setup Table 15-1Schedule Set Setup Fields 15.4 Applying Schedule Sets to Remote Nodes Figure 15-4Applying Schedule Sets to a Remote Node Example (PPTP Encapsulation) PART IV: Troubleshooting and Additional Information Troubleshooting 16.1 Problems Starting Up the Prestige 16.2 Problems with the LAN Interface 16.3 Problems with the WAN Interface 16.4 Problems with Internet Access Page Appendix A PPPoE Diagram 1 Single-PCper Modem Hardware Configuration How PPPoE Works The Prestige as a PPPoE Client Diagram 2 Prestige as a PPPoE Client Appendix B PPTP Menu 15.2 - Server Set Setup PPTP Protocol Overview Diagram 4 PPTP Protocol Overview Control & PPP connections Diagram 5 Example Message Exchange between PC and an ANT Appendix D Boot Commands Diagram 7 Boot Module Commands Appendix E NetBIOS Filter Commands The following describes the NetBIOS packet filter commands NetBIOS Filter Configuration Page Appendix A Log Descriptions TELNET Login TELNET Login Fail FTP Login FTP Login Fail NAT Session Table is Chart 5 ICMP Type and Code Explanations Page Appendix F Power Adapter Specifications Hardware Specifications Page Index Page Non NAT Friendly Application Programs 4-24 Network Address Translation (NAT) ........1-2 2-5, 2-8 Power Adapter Specifications SNMP ( Simple Network Management Protocol) SUA (Single User Account) ...................See NAT Subnet Mask 3-2, 3-3, 3-11, 5-8, 5-10