Manuals / ZyXEL Communications / Computer Equipment / Network Router

ZyXEL Communications HS100/HS100W manual HomeSafe User’s Guide Preface Xxv

Models: HS100/HS100W

1 357

Download 357 pages 54.31 Kb

Page 25

HomeSafe User’s Guide

Preface

xxv

Image 25

ZyXEL Communications HS100/HS100W manual HomeSafe User’s Guide Preface Xxv

Contents

Version 10/2005 HS-100 / HS-100WDisclaimer Copyright 2004 by ZyXEL Communications CorporationTrademarks Certifications Information for Canadian Users Online Registration ZyXEL Limited WarrantyCustomer Support Table of Contents III 11-1 Viii 27.1 Page List of Figures Xiv List of Figures 10-1 Xvi List of Figures Xvii Xviii List of Figures List of Tables List of Tables 20-3 Xxii List of Tables User’s Guide Feedback Related Documentation¾ ZyXEL Glossary and Web Site Graphics Icons Key Syntax ConventionsDslam HomeSafe User’s Guide Preface Xxv Part Page Physical Features HomeSafe FeaturesNon-Physical Features Getting to Know Your HomeSafeBrute-Force Password Guessing Protection Content Filtering802.11b Wireless LAN Standard HS-100W only FirewallUniversal Plug and Play UPnP Packet FilteringCall Scheduling PPPoEUpgrade HomeSafe Firmware via LAN Dhcp Dynamic Host Configuration ProtocolNetwork Address Translation NAT Traffic RedirectWireless Association List HS-100W only Secure Broadband Internet Access via Cable or DSL ModemApplications for the HomeSafe HomeSafe Parental Control GatewayWireless LAN Application Example Wireless LAN ApplicationWeb Configurator Overview Introducing the Web ConfiguratorAccessing the HomeSafe Web Configurator Wlan Setup System Administrator Password SetupSet up your wireless LAN using the second wizard screen Following table describes the fields in this screenAccess screen Wlan Setup Basic SecurityEssid Following table describes the labels in this screen Wlan Setup Extended SecurityWEP AsciiRefer to the chapter on wireless LAN for more information Internet Configuration SetupInternet Access Setup Internet Configuration Setup ISP ParametersDhcp Internet Access Static IP Address SetupParental Control Wizard Internet Configuration Setup CompleteWizard Parental Control Wizard Parental Control Time SetupParental Control Create or Edit a Profile 10 Wizard Parental Control Time Setup11 Wizard Create or Edit a Profile Parental Control Profile Information12 Wizard Parental Control Profile Information Parental Control User GroupAccess rights Administrator can decide each group’sParental Control Time Allowance 13 Wizard Parental Control User GroupParental Control Application Blocking 15 Wizard Parental Control Application Blocking Parental Control Account SummaryAllowance screen 16 Wizard Parental Control Summary Parental Control Register for Content FilterChecking Content Filtering Activation Content Filtering with an External ServerIf you click Register Later you will proceed to Figure Content Filter Service ActivationFollowing screen appears after you click Activate in Figure Content Filter Setup Complete Accessing the Internet via the HomeSafe Gateway25 Password Screen Procedure To Use The Reset Button Resetting the HomeSafeHomeSafe Main Menu Navigation PanelLink TAB Function 17 Screens SummaryFirewall MaintenanceRemote Mgmt Telnet FTPPage Chapter Connection Wizard Connection Wizard General Setup and System NameConnection Wizard Overview Domain NameConnection Wizard Screen Connection Wizard General SetupConnection Wizard Wireless LAN Setup Basic Security Ethernet Connection Wizard Wireless LAN Setup Extend SecurityConnection Wizard Ethernet Encapsulation PPPoE EncapsulationConnection Wizard PPPoE Encapsulation Connection Wizard Pptp Encapsulation Pptp EncapsulationPrivate IP Address Ranges WAN IP Address AssignmentDNS Server Address Assignment IP Address and Subnet MaskWAN MAC Address ISP Connection Wizard WAN SetupConnection Wizard Finish Basic Setup Complete10 Connection Wizard Problems HomeSafe User’s Guide Connection Wizard System, LAN, Wlan and WAN Chapter System Screens Configuring General SetupSystem Overview Click System to open the General screenDynamic DNS Configuring Dynamic DNSDynDNS Wildcard System Ddns Configuring Time Setting Configuring PasswordSystem Time Setting Daylight Savings Chapter LAN Screens Dhcp SetupLAN Overview Multicast Any IPAny IP Example Application How Any IP WorksClick LAN to open the IP screen Configuring IPLAN TCP/IP LAN Static Dhcp Configuring Static DhcpLAN IP Alias Configuring IP AliasLAN IP Alias Wireless LAN Overview Wireless Configuration and RoamingIbss 2 BSS3 ESS Basic Service set1 RTS/CTS Wireless LAN BasicsFragmentation Threshold Configuring WirelessRTS/CTS Configuring RoamingRoaming Example Requirements for RoamingAll APs on the same subnet Wireless stations must have the same Essid toAllow roaming Page Wireless Security Overview Chapter Wireless SecurityWPA WPA-PSKWireless Security Relational Matrix AuthenticationSecurity Parameters Summary WEP OverviewPreamble Type WEP Authentication StepsEncryption field Configuring WEP EncryptionIntroduction to WPA User AuthenticationEncryption WPA-PSK application looks as follows WPA-PSK Application ExampleIf wireless station authentication is done Configuring WPA-PSK AuthenticationUsing a Radius server, the reauthentication Timer on the Radius server has priorityWPA with Radius Application Example Wireless Client WPA SupplicantsWPA with Radius Application Example Configuring WPA Authentication802.1x Overview Wlan Wireless WPADynamic WEP Key Exchange Configuring 802.1x and Dynamic WEP Key ExchangeEAP-MD5 cannot be used with Dynamic WEP Key Exchange Configuring 802.1x and Static WEP Key Exchange Wlan Wireless 802.1x and Static WEP 10 Wlan Wireless 802.1x and Static WEPWlan Wireless 802.1x and Static WEP Reset ConfiguringMAC Filter Wlan MAC Address Filter Following table describes the labels in this menuMAC Introduction to Local User Database Configuring Local User Database10 Wlan Local User Database Active Select this option to activate the user profileIntroduction to Radius EAP Authentication Overview Configuring Radius11 Wlan Radius 15 Wlan RadiusHomeSafe User’s Guide Page Chapter WAN Screens Configuring RouteWAN Overview TCP/IP Priority MetricEthernet Encapsulation Configuring WAN ISPScreen shown next is for Ethernet encapsulation PPPoE Encapsulation WAN ISP PPPoE Encapsulation WAN ISP Pptp Encapsulation WAN IP Address Assignment Configuring WAN IPSelected Use Fixed IP Address WAN IPServer Choose Both, None, In Only or Out OnlyChoose RIP-1 , RIP-2B or RIP-2M Configuring WAN MACRIP-1 Traffic Redirect Traffic Redirect WAN SetupWAN Traffic Redirect Configuring Traffic RedirectWAN Traffic Redirect SUA/NAT and Static Route Page NAT Overview Chapter Network Address Translation NAT ScreensNAT Definitions What NAT DoesNAT Application How NAT WorksFollowing table summarizes these types NAT Mapping TypesSUA Server Using NATSUA Single User Account Versus NAT NAT Mapping TypesDefault Server IP Address Port Forwarding Services and Port NumbersServices and Port Numbers Services Port NumberConfiguring Servers Behind SUA Example Configuring SUA ServerSUA/NAT Setup Configuring Address MappingOne-to-One and Server mapping types Address MappingTrigger Port Forwarding Configuring Address MappingMany-to-One and Server mapping types Trigger Port Forwarding Example Configuring Trigger Port ForwardingTwo Points To Remember About Trigger Ports Following is an example of trigger port forwardingOnly one LAN computer can use a trigger port range at a time Page Chapter Static Route Screens Configuring IP Static RouteStatic Route Overview Click Static Route to open the screen as shown nextStatic Route Edit Configuring Route EntryNAT Screens 10-3 UPnP, Parental Control and Firewall Chapter UPnP How Do I Know If Im Using UPnP?Universal Plug and Play Overview UPnP and ZyXELInstalling UPnP in Windows Example Configuring UPnPClick UPnP to display the screen shown next Installing UPnP in Windows XP Installing UPnP in Windows MeFollow the steps below to install UPnP in Windows Me Follow the steps below to install UPnP in Windows XPAuto-discover Your UPnP-enabled Network Device Using UPnP in Windows XP ExampleInternet Connection Properties Connections Select My Network Places under Other Places Web Configurator Easy AccessUPnP 11-7 Page Initial Configuration Parental Control LoginsChapter Parental Control Parental Control OverviewParental Control Application Parental Administrator logHomeSafe Parental Control Wireless Gateway Application Configuring Parental ControlParental Control Content filtering activation For content filtering to be activated. See CheckingWeb site displays a registration successful Web page. It may take up to another ten minutesReset Click Reset to start configuring this screen again Content Filtering with an External ServerParental Control Group Edit Filter Parental Control Group Edit Configuration Parental Control Filter Parental Control 12-9 12-10 Parental Control Parental Control 12-11 See the Customizing Keyword How to set how much of the URLBlocking URL Checking section for HomeSafe checksParental Control Edit Customizing Keyword Blocking URL CheckingService Description ServicesPPTPTUNNELGRE0 RLOGINTCP513RCMDTCP512 REALAUDIOTCP7070Parental Control Edit User access will be denied after the End Access, you should select the unrestrictedIf you want to allow twenty-four hour Check boxWeekdays or Weekend boxes Parental Control Bypass ListParental Control 12-19 Page Introduction Chapter FirewallGuidelines For Enhancing Security With Your Firewall Firewall Settings Firewall Settings ScreenLAN-to-WAN rules Firewall, NAT and Remote ManagementNo Log Log All log all LAN to WAN packetsWAN-to-LAN rules ServicesFirewall Service Click Clear All to empty the Blocked Service Remote Management Page Chapter Remote Management Screens Only LAN only Neither DisableRemote Management Overview Remote Management LimitationsSystem Timeout Configuring WWWRemote Management and NAT Telnet Configuration on a TCP/IP Network Configuring TelnetRemote Management Telnet Configuring FTPRemote Management FTP SnmpSnmp Management Model Snmp is only available if TCP/IP is configuredSupported MIBs Configuring SnmpSnmp Traps Snmp TrapsRemote Management Snmp Remote Management DNS Configuring DNSIcmp Configuring SecurityRemote Management Screens 14-11 Page HomeSafe User’s Guide VPN Screens 14-1 Logs and Maintenance View Log Chapter Centralized LogsSettings, see section Log SettingsLog Settings Daily When Log is FullWeekly HourlyMaintenance Overview Chapter MaintenanceStatus Screen System Statistics Maintenance System StatisticsDhcp Table Screen Maintenance Dhcp TableAssociation List Any IP Table16.6 F/W Upload Screen Maintenance Firmware UploadUpload Warning Configuration ScreenRestore Configuration Backup ConfigurationMaintenance Restore Configuration 11 Configuration Restore Successful Back to Factory DefaultsRestart Screen 14 Factory DefaultsSMT General Configuration Page SMT Introduction Chapter Introducing the SMTNavigating the SMT Interface Main Menu CommandsOperation Keystroke Description EnterMain Menu Summary System Management Terminal Interface Summary? or ChangeMe Menu Title DescriptionMenu 23 System Password Changing the System PasswordGeneral Setup Chapter Menu 1 General SetupProcedure To Configure Menu Field Description ExampleSelect Yes to configure Menu 1.1 Configure Dynamic DNS Procedure to Configure Dynamic DNSDynamicDNS YesUser Specified IP Address field WAN Setup Chapter Menu 2 WAN SetupIntroduction to WAN From the main menu, enter 2 to open menuPage LAN Setup Chapter Menu 3 LAN SetupProtocol Dependent Ethernet Setup 20.3 TCP/IP Ethernet Setup and DhcpMenu 3.2 Dhcp Ethernet Setup Fields Menu 3.2 TCP/IP and Dhcp Ethernet SetupBoth Menu 3.2 LAN TCP/IP Setup FieldsRIP-1 RIP-1,RIP-2B or RIP-2MPhysical Network & Partitioned Logical Networks IP Alias SetupBoth, In Only, Out Only or None Wireless LAN SetupField Description Example Essid CH06 2437MHz DisableRTS AutoMixed Configuring MAC Address FilterMenu 3.5.1 Wlan MAC Address Filter Configuring Roaming on the HomeSafeMenu 3.5.2 Roaming Configuration 10 Menu 3.5.2 Roaming ConfigurationPage Introduction to Internet Access Setup Chapter Internet AccessMenu 4 Internet Access Setup Ethernet Ethernet EncapsulationConfiguring the Pptp Client Default Configuring the PPPoE ClientNew Fields in Menu 4 Pptp Screen New Fields in Menu 4 PPPoE screen21-4 Internet Access Introduction to Remote Node Setup Chapter Remote Node ConfigurationRemote Node Profile Setup Alias EthernetPress Enter to go to Menu 11.3 Remote Node Network Layer OptionsNailed-Up Connection Outgoing Authentication ProtocolCHAP/PAP Fields in Menu 11.1 PPPoE Encapsulation SpecificMenu 11.1 Remote Node Profile for Pptp Encapsulation Edit IPRemote Node Network Layer Options DynamicSUA Only Remote Node FilterMany-to-One and Server RIP-1/RIP-2B/RIP-2M or NoneMenu 11.5 Remote Node Filter Ethernet Encapsulation Traffic Redirect Setup22-8 Remote Node Configuration IP Static Route Setup Chapter Static Route Setup23-2 Static Route Setup Dial-in User Setup Chapter Dial-in User SetupPage Applying NAT Menu 4 Applying NAT for Internet AccessFull Feature NAT SetupApplying NAT in Menus 4 NATSUA Address Mapping Set Address Mapping SetsFollowing table explains the fields in this menu Menu 15.1.255 is read-only SUA Address Mapping RulesOrdering Your Rules User-Defined Address Mapping SetsField Desription Example Menu 15.1.1 First SetEdit Select Rule itemFollow these steps to configure a server behind NAT Configuring a Server behind NATOne-to-One,Many-to-One and Server types Following are some examples of NAT configuration Example 1 Internet Access OnlyGeneral NAT Examples Example 3 Multiple Public IP Addresses With Inside Servers Example 2 Internet Access with an Inside ServerDynamic Inside Global Address is assigned by the ISP Following figures show how to configure the first rule Enter 1 to configure the Address Mapping SetsAddress Translation field in menu 4 or menu 11.3 Then enter 15 from the main menuEnter 2 in Menu 15 NAT Setup Example 3 Menu Example 4 NAT Unfriendly Application Programs20 Example 4 Menu 15.1.1 Address Mapping Rules Menu 15.3 Trigger Port Setup Page Chapter Enabling the Firewall Access MethodsRemote Management and the Firewall Enabling the FirewallSMT Advanced Management Introduction to Filters Chapter Filter ConfigurationFilter Structure of the HomeSafe Execute Abbreviations Used in the Filter Rules Summary Menu Configuring a Filter SetConfiguring a TCP/IP Filter Rule Configuring a Filter RuleRule Abbreviations Used Abbreviation DescriptionField Description Options TCP/IP Filter RuleLess EqualFollowing figure illustrates the logic flow of an IP filter Executing an IP Filter Configuring a Generic Filter RuleGeneric Filter Rule Menu Fields HomeSafe User’s Guide Generic Filter Rule Menu Fields Example Filter10 Example Filter Menu Filter Types and NAT Applying a Filter Firewall Versus FiltersApplying LAN Filters Applying Remote Node Filters14 Filtering Remote Node Traffic Page About Snmp Chapter Snmp ConfigurationFollowing table describes the Snmp configuration parameters Snmp ConfigurationSupported MIBs Ports and Permanent Virtual Circuits Snmp TrapsPort PVC Permanent Virtual Circuit Page Configuring External Radius Server System PasswordChapter System Security System SecurityEnter 4 to display Menu 23.4 System Security IEEE802.1x 29.1.3Menu 23.4 System Security IEEE802.1x No Access AllowedGroup Data Privacy field PSKMode Management Protocol is selectedSystem Status System Information and DiagnosisSystem Maintenance Status Menu Fields Menu 24.1 System Maintenance StatusSystem Information Menu 1 General SetupSystem Information To get to the System InformationLog and Trace Menu 24.3.2 System Maintenance Syslog and AccountingConsole Port Speed Syslog LoggingSystem Information and Diagnosis 30-5 Call-Triggering Packet DiagnosticWAN Dhcp System Maintenance Menu Diagnostic30-8 System Information and Diagnosis Filename Conventions Chapter Firmware and Configuration File MaintenanceFilename Conventions File Type Internal Name External Name DescriptionUsing the FTP Command from the Command Line Backup ConfigurationExample of FTP Commands from the Command Line Follow the instructions as shown in the next screenGeneral Commands for GUI-based FTP Clients Backup Configuration Using TftpCommand Description GUI-based FTP ClientsTftp Command Example Restore ConfigurationRestore Using FTP Following is an example Tftp commandRestore Using FTP Session Example Uploading Firmware and Configuration FilesYou see the following screen when you telnet into menu Configuration File UploadFirmware File Upload FTP Session Example of Firmware File Upload FTP File Upload Command from the DOS Prompt ExampleTftp File Upload Tftp Upload Command Example Command Interpreter Mode Chapter System MaintenanceCommand Syntax Command UsageBudget Management Call Control SupportCall History Fields Call HistoryTime and Date Setting Fields Time and Date SettingNTP RFC-1305 the default, is similar to Time RFC-868 Daylight Saving field Resetting the TimePage Remote Management Chapter Remote ManagementLAN Only Introduction to Call Scheduling Chapter Call SchedulingOnce Menu 26.1 Schedule Set SetupApplying Schedule Sets to a Remote Node PPPoE Appendices and Index Page Problem Corrective Action TroubleshootingAppendix a Control Group Edit screen PPPoE in Action Appendix B PPPoEBenefits of PPPoE Traditional Dial-up ScenarioHomeSafeas a PPPoE Client Diagram B-2 The HomeSafeas a PPPoE ClientDiagram C-1 Transport PPP frames over Ethernet What is PPTP?Appendix C Pptp and the HomeSafeDiagram C-3 Example Message Exchange between PC and an ANT Diagram C-2 Pptp Protocol OverviewPptp Protocol Overview Control & PPP connectionsPptp Page Chart 2 System Maintenance Logs Chart 1 System Error LogsAppendix D Log Descriptions LOG Message DescriptionChart 4 Content Filtering Logs Chart 3 UPnP LogsID content Type Code Description Chart 5 Icmp Type and Code ExplanationsConfiguring What You Want the HomeSafe to Log Log CommandsDisplaying Logs Page Windows 95/98/Me Appendix E Setting up Your Computer’s IP AddressIf you need TCP/IP If you need Client for Microsoft Networks Checking/Modifying Your Computer’s IP Address Windows 2000/NT/XP Click Advanced to go to the Advanced TCP/IP HomeSafe User’s Guide Turn on your HomeSafeand restart your computer if prompted Select Ethernet built-in from the Connect via list Macintosh OS 8/9Close the TCP/IP Control Panel Check your TCP/IP properties in the Network window Macintosh OSSelect Built-in Ethernet from the Show list Page Benefits of a Wireless LAN Appendix F Wireless LAN and IeeeAd-hoc Wireless LAN Configuration IeeeDiagram F-1 Peer-to-Peer Communication in an Ad-hoc Network Infrastructure Wireless LAN ConfigurationDiagram F-2 ESS Provides Campus-Wide Coverage Page Deployment Issues with Ieee Appendix G Wireless LAN With IeeeSecurity Flaws with Ieee Advantages of the IeeeDiagram G-1 Sequences for EAP MD5-Challenge Authentication EAP-TTLS Tunneled Transport Layer Service Appendix H Types of EAP AuthenticationEAP-MD5 Message-Digest Algorithm EAP-TLS Transport Layer SecurityCertificate Client Difficulty Wireless SecurityCertificate Server Dynamic KeyAppendix Antenna Selection and Positioning Recommendation Antenna CharacteristicsTypes of Antennas For Wlan Positioning Antennas Chart 6 Brute-Force Password Guessing Protection Commands Appendix J Brute-Force Password Guessing ProtectionExample Page Triangle Route Problem Ideal SetupTriangle Route Solutions Appendix K Triangle RouteDiagram K-3 IP Alias How To Configure Triangle RouteDiagram K-4 Gateways on the WAN Side Gateways on the WAN SideBSS Appendix L IndexIbss See NAT See Ttls Wlan