Manuals / ZyXEL Communications / Computer Equipment / Network Router

ZyXEL Communications 792H manual Diagnostic General

Models: 792H

1 428

Download 428 pages 12.67 Kb

Page 234

Prestige 792H G.SHDSL Router

		Figure 17-5 Diagnostic General
The following table describes the labels in this screen.
		Table 17-4 Diagnostic General

	LABEL	DESCRIPTION

	TCP/IP	Type the IP address of a computer that you want to ping in order to test a connection.
	Address

	Ping	Click this button to ping the IP address that you entered.

	Reset System	Click this button to reboot the Prestige. A warning dialog box is then displayed asking you if
	Reset System	you're sure you want to reboot the system. Click OK to proceed.

17-8	Maintenance

Image 234

ZyXEL Communications 792H manual Diagnostic General

Contents

Prestige 792H Page Disclaimer TrademarksPage Certifications Page Information for Canadian Users Page ZyXEL Limited Warranty Safety WarningsPage Customer Support Page Table of Contents LAN Setup WAN SetupDynamic DNS Setup Content Filtering 12-1 Firewall ConfigurationCustomized Services 11-1 Creating Custom Rules 10-114-1 15-1WAN Setup 20-4 Maintenance 17-1General Setup 19-1 Dial Backup 21-124-1 22-123-1 25-1System Maintenance 30-1 Filter Configuration 28-1Snmp Configuration 29-1 Firmware and Configuration File Maintenance 31-1Call Scheduling 34-1 System Maintenance and Information 32-1IP Policy Routing 33-1 Remote Management 35-1SA Monitor 37-1 VPN/IPSec Setup 36-1Troubleshooting 39-1 Internal Sptgen 38-1List of Figures Xviii List of Figures List of Figures Xix Diagnostic General 17-8 List of Figures Xxi Xxii List of Figures List of Figures Xxiii Xxiv List of Figures List of Figures Xxv Page List of Tables List of Tables Xxvii Xxviii List of Tables 28-15 Xxx List of Tables Page Related Documentation Syntax ConventionsXxxii Preface Introduction to DSL Introduction to G.SHDSLPart Page Getting to Know Your G.SHDSL Router Features of the PrestigeSymmetrical High Speed Internet Access ScalabilityTraffic Redirect IPSec VPN CapabilityFirewall Snmp Simple Network Management Protocol versions 1IP Policy Routing SUA for Single-IP Address Internet AccessIP Alias 10/100MB Auto-negotiation Ethernet/Fast Ethernet InterfaceUniversal Plug and Play UPnP Upgrade Firmware via LANEase of Installation Full Network ManagementInternet Access Application Scenarios for the PrestigeLAN-to-LAN Application Introducing the Web Configurator Web Configurator OverviewAccessing the Prestige Web Configurator Navigating the Prestige Web Configurator Password ScreenConfiguring Password Resetting the Prestige Label DescriptionUsing The Reset Button Uploading a Configuration File Via Console PortPage WAN Setup Wizard SetupWizard Setup Introduction Service TypeTransfer Rates Standard ModeEncapsulation PPP over Ethernet4 RFC MultiplexingPPPoA VC-based MultiplexingWizard Setup Configuration First Screen VPI and VCIServer see Service Type Rate and the same Transfer Min RateVPI IP Address and Subnet MaskPPPoE VCIIP Address Assignment IP Assignment with PPPoA or PPPoE EncapsulationIP Assignment with RFC 1483 Encapsulation IP Assignment with Enet Encap EncapsulationPrivate IP Addresses Wizard Setup Configuration ISP Parameters Nailed-Up Connection PPP10 NAT Internet Connection with PPPoA Internet 11.2 RFC Internet Connection with RFCInternet Connection with Enet Encap Enet EncapPPPoE Internet Connection with PPPoEDhcp Setup Wizard Setup Configuration LAN Configuration IP Pool SetupWizard Screen LAN COnfiguration Wizard LAN ConfigurationWizard Setup Configuration Connection Tests Test Your Internet Connection Wizard Screen Connection TestsPage DNS Server Address LAN SetupLAN Overview LANs, WANs and the PrestigeDNS Server Address Assignment LAN TCP/IPIP Address and Subnet Mask Factory LAN DefaultsRIP Setup MulticastConfiguring LAN LANTCP/IP LAN WAN Setup WAN OverviewMetric PPPoE Encapsulation Traffic Shaping Configuring WAN Setup Example of Traffic ShapingWAN Setup ATM traffic. Enter the VCI assigned to you For remote node setup, enter the IP address in the same Subnet as the remote nodeTraffic Redirect Encap in the Encapsulation fieldConfiguring WAN Backup Traffic Redirect LAN SetupWAN Backup Cost Outgoing Authentication Protocol WAN , Traffic Redirect , Dial Backup38400 , 57600 , 115200 or 230400 bps Configuring Advanced WAN Backup Advanced WAN Backup 57600 , 115200 or 230400 bps Choose RIP-1,RIP-2B or RIP-2M Choose Both, In Only or Out OnlyAT Command Strings Connection settingsDTR Signal Configuring Advanced Modem SetupResponse Strings Advanced Modem Setup Clid NmbrPart Page NAT Definitions Network Address Translation NATNAT Overview What NAT DoesHow NAT Works NAT ApplicationNAT Mapping Types NAT Application With IP AliasNAT Mapping Types SUA Single User Account Versus NATMapping types Type IP Mapping SMT AbbreviationPort Forwarding Services and Port Numbers SUA ServerServices Port Number Configuring Servers Behind SUA ExampleServices and Port Numbers EchoSelecting the NAT Mode Multiple Servers Behind NAT ExampleConfiguring SUA Server Edit SUA/NAT Server Set Configuring Address Mapping Address Mapping Rules Many-to-One and Server mapping typesEditing an Address Mapping Rule Address Mapping Rule EditAddress Mapping Rules screen Page Dynamic DNS Dynamic DNS SetupConfiguring Dynamic DNS Dyndns WildcardDdns Firewall and Content Filter Page Types of Firewalls FirewallsFirewall Overview Packet Filtering FirewallsIntroduction to ZyXEL’s Firewall Stateful Inspection FirewallsDenial of Service BasicsTypes of DoS Attacks Common IP PortsThree-Way Handshake Icmp Commands That Trigger Alerts Stateful Inspection Legal NetBIOS CommandsLegal Smtp Commands Message Request Positive Negative Retarget KeepaliveStateful Inspection Process Stateful InspectionStateful Inspection and the Prestige TCP Security 4 UDP/ICMP SecurityGuidelines for Enhancing Security with Your Firewall Upper Layer ProtocolsSecurity In General Packet Filtering Vs Firewall Packet FilteringWhen To Use Filtering FirewallPrestige 792H G.SHDSL Router Firewall Configuration Remote Management and the FirewallEnabling the Firewall Configuring E-mail Alerts E-mailDaily Weekly Hourly When Log is Full None Attack AlertAlerts Threshold ValuesHalf-Open Sessions TCP Maximum Incomplete and Blocking Time Alert Following table describes the labels in this screen256 Page Creating Custom Rules Rule ChecklistStudy these points carefully before configuring rules Rules OverviewKey Fields For Configuring Rules Security RamificationsBlock means the firewall silently discards the packet Connection Direction LAN to WAN RulesLogs WAN to LAN RulesFirewall Logs Label Description ExampleRule Summary Block, Forward or NoneFirewall Rules Summary First Screen Predefined Services Predefined Services Service DescriptionNNTPTCP119 RLOGINTCP513NEWSTCP144 PINGICMP0Creating/Editing Firewall Rules Creating/Editing a Firewall Rule Source and Destination Addresses Timeout Range Address , Subnet Address and Any AddressFactors Influencing Choices for Timeout Values Timeout10-16 Creating Custom Rules Customized Services Introduction to Customized ServicesCreating/Editing a Customized Service Creating/Editing a Customized ServiceExample Custom Service Firewall Rule Click Rule Summary under Internet to Local Network SetConfigure Source IP Example Syslog Rule Configuration Example Rule Summary Example Content Filtering Content Filtering OverviewConfiguring Keyword Blocking Content Filter Keyword Configuring the Schedule Content Filter ScheduleConfiguring Trusted Computers Content Filter TrustedConfiguring Logs Content Filter LogsBLOCKUNTRUSTDOMAIN, BLOCKKEYWORD, Blockactivex BLOCKJAVAAPPLET, BLOCKCOOKIE, BlockproxyBlockcybernot VPN/IPSec Page IPSec Introduction to IPSecVPN Overview Security AssociationData Origin Authentication VPN ApplicationsData Integrity IPSec Architecture VPN ApplicationIPSec Algorithms Key ManagementTransport Mode Tunnel ModeIPSec and NAT Security Protocol Mode NAT VPN and NATESP 14.1 VPN/IPSec Overview AH Authentication Header ProtocolVPN Screens IPSec AlgorithmsDynamic Secure Gateway Address My IP AddressSecure Gateway Address AH and ESPVPN Summary Screen IPSec Summary FieldsVPN Summary ID Type and Content Keep AlivePeer ID Type and Content Fields ID Type and Content ExamplesLocal ID Type and Content Fields Local ID TYPE= CONTENT=Pre-Shared Key Matching ID Type and Content Configuration ExampleMismatching ID Type and Content Configuration Example Editing VPN PoliciesVPN IKE VPN Screens 14-9 14-10 VPN Screens VPN Screens 14-11 Authentication Algorithm fields described next IKEIKE Phases Two Phases to Set Up the IPSec SANegotiation Mode Diffie-Hellman DH Key Groups14.11Configuring Advanced IKE Settings Perfect Forward Secrecy PFSVPN IKE Advanced Label Description VPN IKEVPN Screens 14-17 14-18 VPN Screens 14.12Manual Key Setup Security Parameter Index SPI14.13Configuring Manual Key VPN Manual KeySPI 14-22 VPN Screens VPN Screens 14-23 14.14Viewing SA Monitor SA Monitor 10 SA Monitor14.15Configuring Global Setting 11 Global Setting14.16Configuring IPSec Logs 12 VPN Logs13 Sample IKE Key Exchange Logs LOG Message Description14 Sample IPSec Logs During Packet Transmission Request conflict with rule #d15 RFC-2408 Isakmp Payload Types LOG Display Payload Type14.17Telecommuter VPN/IPSec Examples Telecommuters Sharing One VPN Rule ExampleHeadquarters Telecommuters Telecommuters Using Unique VPN Rules Example All Headquarters Rules All Telecommuter Rules14.18VPN and Remote Management Remote Management and UPnP Remote Management Limitations Remote Management ConfigurationRemote Management Overview Remote Management and NAT15.3 FTP System TimeoutTelnet 15.4 WebConfiguring Remote Management Remote ManagementUniversal Plug and Play Overview How do I know if Im using UPnP?Universal Plug-and-Play UPnP NAT TransversalAccessing the Prestige Web Configurator to Configure UPnP Configuring UPnPUPnP and ZyXEL Installing UPnP in Windows Example Field DescriptionInstalling UPnP in Windows Me Installing UPnP in Windows XP Double-clickNetwork ConnectionsOptional Networking Component Using UPnP in Windows XP Example Auto-discover Your UPnP-enabled Network DeviceInternet Connection Properties Web Configurator Easy Access Example Click start and then Control PanelConnections Select My Network Places under Other Places UPnP 16-9 Maintenance Page Maintenance Maintenance OverviewSystem Status Screen System Status VPI/VCI System Statistics System Status Show StatisticsMaintenance 17-5 Dhcp Table Screen Dhcp TableDiagnostic Screens Diagnostic General ScreenMAC Diagnostic General Diagnostic DSL Line Screen Prestige 792H G.SHDSL RouterFirmware Upgrade Firmware ScreenNetwork Temporarily Disconnected SMT General Configuration Entering Password Procedure for SMT Configuration via Console PortProcedure for SMT Configuration via Telnet Introducing the SMTLogin Screen Prestige SMT Menu OverviewPrestige Menu Overview Operation Keystroke Description Main Menu CommandsNavigating the SMT Interface ? or ChangeMeSystem Management Terminal Interface Summary Main Menu SummaryMenu Title Description Changing the System Password Menu 23 System PasswordGeneral Setup General SetupConfiguring Menu Configure Menu 1.1 Configure Dynamic DNS discussed next Field Description ExampleYes Configuring Dynamic DNS UserPage WAN Setup Screen From the main menu, enter 2 to open menu20-5 Dial Backup Dial Backup OverviewConfiguring Dial Backup in Menu 115200 Advanced WAN SetupEnter to go to Menu 2.1 Advanced Setup 9600, 19200, 38400, 57600, 115200 or 230400 bpsField Description Default Nmbr =Remote Node Profile Backup ISP Advanced WAN Port Setup Call Control ParametersConnect Remote Node Profile Backup ISP CHAP/PAPPress Enter to go to Menu 11.3 Remote Node Network Editing PPP Options Editing TCP/IP OptionsOtherwise select Standard PPP Enter to open Menu 11.3 Network Layer Options NATBoth/ None /In Only /Out Only and None Editing Filter SetsBoth RIP-1Menu 11.5 Remote Node Filter Ethernet Ethernet Setup LAN Port Filter SetupIP Alias Setup TCP/IP and Dhcp SetupRoute IP Setup Both , In Only or Out OnlyRIP-2B or RIP-2M 22.1.4 TCP/IP Ethernet Setup and Dhcp General SetupBoth Both, In Only, Out Only or None RIP-1RIP-1,RIP-2B or RIP-2M 22-6 Internet Access Internet Access OverviewInternet Access Setup LLC-based Enet EncapOr Enet Encap UBRDynamic SUA OnlyAdvanced Applications Remote Node Configuration Remote Node SetupRemote Node Overview Remote Node Setup Encapsulation and Multiplexing ScenariosThen the Rem Login, Rem Password, My Login, My Based or LLC-basedTo display Menu 11.6 Remote Node ATM Layer Options ChapTo display Menu 11.3 Remote Node Network Layer Options Allocated Budget is 10 minutes and the Period hrRemote Node Network Layer Options RemoteStatic My WAN Addr Sample IP Addresses Options are Both, In Only, Out Only or NoneRemote Node Filter Sample IP Addresses for a TCP/IP LAN-to-LAN ConnectionEditing ATM Layer Options VC-based Multiplexing non-PPP EncapsulationPress Enter to open Menu 11.6 Remote Node ATM Layer Options LLC-based Multiplexing or PPP Encapsulation Menu 11.6 for LLC-based Multiplexing or PPP EncapsulationStatic Route Setup Static Route OverviewStatic Route Setup Edit IP Static Route Page Remote Node Bridging Setup Bridging SetupBridge Ethernet Setup Bridging OverviewBridge Static Route Setup Remote Node Bridging OptionsBridge Static Route Setup 26-4 Bridging Setup Applying NAT Applying NAT for Internet Access Address Mapping Sets NAT SetupFull Feature Enter 1 to bring up Menu 15.1 Address Mapping SetsAddress Mapping Sets Address Mapping Rules SUAUser-Defined Address Mapping Sets Field Desription Example NatsetGlobal Start/End IPs EditSelect Rule item One-to-One For ServerTo-One,Many-to-One and Server types NAT Server Sets NAT Server Setup Example 1 Internet Access Only General NAT Examples11 NAT Example Example 2 Internet Access with an Inside Server 13 NAT ExampleExample 3 Multiple Public IP Addresses With Inside Servers 14 NAT Example 2 Menu15 NAT Example 17 Example 3 Menu Enter 2 in Menu 15 NAT Setup Example 4 NAT Unfriendly Application Programs 19 Example 3- Menu21 Example 4 Menu 22 Example 4 Menu Advanced Management Page Filter Configuration About FilteringOutgoing Packet Filtering Process Execute Filter Rule Filter Rule ProcessFilter Set Configuration Filter Structure of the PrestigeNetBios WAN Filter Rules Summary TelnetWAN Filter Rules Summary Ftpwan Filter Rules Summary Filter Rules Summary Menus Abbreviations Used in the Filter Rules Summary MenuFilter Type Description Filter Rule ConfigurationRule Abbreviations Used GEN28.3.1 TCP/IP Filter Rule TCP/IP Filter RuleChoices are TCP/IP Filter Rule or Generic Filter Rule TCP/IP Filter Rule Choices are None , Less , Greater , Equal or Not EqualIf More is Yes , then Action Matched and Action Not Check Next Rule Check Next Rule, Forward or DropChoices are Check Next Rule, Forward or Drop 12 Executing an IP Filter Generic Filter Rule 13 Generic Filter RuleGeneric Filter Rule Menu Fields Filter Types and NAT Example Filter15 Sample Telnet Filter 16 Sample Filter Rules Summary Menu 17 Sample Filter Rules Summary Menu Filter Sets Table Applying Filters and Factory DefaultsEthernet Traffic Filter Sets DescriptionRemote Node Filters 19 Filtering Ethernet TrafficPage Snmp Configuration Snmp is only available if TCP/IP is configuredSnmp Overview Snmp Configuration Supported MIBsSnmp Snmp TrapsSnmp Traps Trap # Trap Name Description29-4 Snmp Configuration System Maintenance System Maintenance OverviewSystem Status System Maintenance Status System Information System InformationWAN Menu 1 General Setup LANViewing Error Log Log and TraceConsole Port Speed Sample Error and Information Messages SyslogSystem Maintenance Menu Syslog Parameters Parameter DescriptionCDR Diagnostic System Maintenance DiagnosticSystem Maintenance Menu Diagnostic Page Firmware and Configuration File Maintenance Filename ConventionsBackup Configuration Filename ConventionsFile Type Internal External Name Description Backup Configuration Using the FTP Command from the Command LineExample of FTP Commands from the Command Line GUI-based FTP Clients General Commands for GUI-based FTP ClientsCommand Description Tftp and FTP over WAN Will Not Work WhenBackup Configuration Using Tftp Tftp Command ExampleGUI-based Tftp Clients Backup Via Console Port General Commands for GUI-based Tftp ClientsRestore Configuration Backup Configuration ExampleRestore Using FTP System Maintenance Restore ConfigurationRestore Using FTP Session Example Restore Via Console PortUploading Firmware and Configuration Files Firmware File UploadConfiguration File Upload 13 System Maintenance Upload System FirmwareFTP File Upload Command from the DOS Prompt Example FTP Session Example of Firmware File UploadTftp File Upload Tftp Upload Command Example Uploading Via Console PortExample Xmodem Firmware Upload Using HyperTerminal Uploading Firmware File Via Console PortUploading Configuration File Via Console Port Example Xmodem Configuration Upload Using HyperTerminal19 Example Xmodem Upload System Maintenance and Information Command Interpreter ModeCall Control Support Budget ManagementBudget Management Time and Date Setting System Maintenance Time and Date SettingResetting the Time Time and Date Setting FieldsNTP RFC-1305 is similar to Time RFC-868 Page IP Policy Routing Benefits IP Policy RoutingIP Policy Routing Overview Routing PolicyIP Routing Policy Setup IP Routing Policy SetupCriterion ServiceAbbreviation Meaning ActionDelay, Max Thruput, Min Cost or Max Reliable G tLess, Greater, Less or Equal or Greater or Equal Applying an IP PolicyEthernet IP Policies Matched33-6 IP Policy Routing IP Policy Routing Example Example of IP Policy RoutingIP Routing Policy Example Applying IP Policies Page Schedule Setup Call SchedulingCall Scheduling Overview Schedule Set Setup Once Forced OnApplying Schedule Sets to a Remote Node PPPoE Remote Management and Telnet Services Remote Management and FTP ServicesRemote Management Disabling Remote Management Remote Management SetupRemote Management and Web Services Remote Management ControlSystem Timeout Remote Management and NATSMT VPN/IPSec and Internal Sptgen VPN/IPSec Setup 36.1 VPN/IPSec OverviewMenu 27 VPN/IPSec Setup IPSec Summary ScreenTunnel ESP DES MD536-4 VPN/IPSec Setup IPSec Setup Menu 27.1.1 IPSec Setup IPSec SummaryGateway Address field below Address field set to SingleSubnet Manual Setup Field IKE Setup3Menu 27.1.1.1 IKE Setup Description ExampleDES DH1MD5 Active Protocol Manual SetupMode Security Protocol Active Protocol Encapsulation and Security ProtocolMenu 27.1.1.2 Manual Setup ESP TunnelVPN/IPSec Setup 36-15 Page Using SA Monitor SA MonitorSA Monitor Overview Taiwan ESP DESRefresh Diagram 37-1 Example VPN Responder IPSec Log Viewing IPSec LogVPN Responder IPSec Log Page Configuration Text File Format Internal SptgenInternal Sptgen Overview 38-2 Internal Sptgen Invalid Parameter Entered Command Line Example Internal Sptgen FTP Download ExampleInternal Sptgen FTP Upload Example Internal Sptgen FTP Upload ExampleAppendices and Index Page Problems with the LAN Interface TroubleshootingProblems Starting Up the Prestige Troubleshooting the Start-Up of Your PrestigeTroubleshooting the WAN Interface Problems with the WAN InterfaceProblems with Internet Access Troubleshooting Internet AccessTroubleshooting the Password Problems with the PasswordProblems with Telnet Troubleshooting TelnetPage Benefits of PPPoE Appendix a PPPoEPPPoE in Action Traditional Dial-up ScenarioDiagram 2 Prestige as a PPPoE Client Prestige as a PPPoE ClientDiagram 3 Virtual Circuit Topology Appendix B Virtual Circuit TopologyNorth American Plug Standards Power Adapter SpecificationsAppendix C United Kingdom Plug StandardsEuropean Plug Standards AA-121ABNChina Standards Power Consumption Safety Standards Ccee GB8898 Index 28-4 17-10Local Network 10-730-6 24-2 24-1,24-2RIP 30-5TCP/IP Traceroute