Manuals / Brands / Computer Equipment / Network Router / ZyXEL Communications / Computer Equipment / Network Router

ZyXEL Communications NBG-419N Firewall, 20.1 Overview, 20.2What You Can Do, Use the, Services, Section 20.4 on page, Figure 107 Default Firewall Action

1 278

Download 278 pages, 8.42 Mb

20

Firewall

20.1 Overview

This chapter shows you how to enable and configure the firewall that protects your Router and your LAN from unwanted or malicious traffic.

Enable the firewall to protect your LAN computers from attacks by hackers on the Internet and control access between the LAN and WAN. By default the firewall:

•allows traffic that originates from your LAN computers to go to all of the networks.

•blocks traffic that originates on the other networks from going to the LAN.

The following figure illustrates the default firewall action. User A can initiate an IM (Instant Messaging) session from the LAN to the WAN (1). Return traffic for this session is also allowed (2). However other traffic initiated from the WAN is blocked (3 and 4).

Figure 107 Default Firewall Action

20.2What You Can Do

•Use the General (Section 20.4 on page 154) screen to enable or disable the Router’s firewall.

•Use the Services screen (Section 20.5 on page 155) screen enable service blocking, enter/ delete/modify the services you want to block and the date/time you want to block them.

	153
NBG-419N v2 User’s Guide	153

Contents

IMPORTANT LAN IP http://192.168.1.1 READ CAREFULLY Address READ CAREFULLY BEFORE USE KEEP THIS GUIDE FOR FUTURE REFERENCE Related Documentation Contents Overview Page Table of Contents Page 9.3.3 Configuring your WLAN, Bandwidth Management and Maintenance Settings WAN 16.5.2 Two Points To Remember About Trigger Ports Page Appendix Page Page Page Getting to Know Your Router 1.1 Overview 1.2 Applications 1.3Ways to Manage the Router 1.4Good Habits for Managing the Router 1.5 LEDs 1.6 The WPS Button 1.7 Wall Mounting Table 2 Wall Mounting Information Figure 2 Wall Mounting Example ZyXEL NetUSB Share Center Utility 2.1 Overview 2.2The ZyXEL NetUSB Share Center Utility Chapter 2 ZyXEL NetUSB Share Center Utility Table 3 ZyXEL NetUSB Share Center Utility Main Window Icons (continued) ICON DESCRIPTION This section describes the utility’s menus Figure 4 ZyXEL NetUSB Share Center Utility Menus Tools > Configuration The following table describes the labels in this window Table 5 ZyXEL NetUSB Share Center Utility Configuration Window LABEL Basic Language System > Exit Exit Page Connection Wizard 3.1 Overview 3.2 Accessing the Wizard 3.3 Connect to Internet Internet Connection Type Next Back Table 8 Internet Connection Type: Static IP (continued) Subnet Mask Enter the IP subnet mask in this field Default Enter the gateway IP address in this field Table 9 Internet Connection Type: PPPoE Select the PPPoE option for a dial-upconnection Dynamic IP Select this radio button if your ISP did not assign you a fixed IP address Type the name of your service provider The following table describes the fields in this screen Table 10 Internet Connection Type: PPTP connection PPTP Address Type the (static) IP address assigned to you by your ISP Chapter 3 Connection Wizard Table 11 Internet Connection Type: L2TP (continued) L2TP Address L2TP Subnet L2TP Gateway 3.4 Router Password 3.5 Wireless Security Table 12 Wireless Security: No Security Wireless Network Name (SSID) order to access the network ZyGO Easy Mode Introducing the Web Configurator 4.1 Overview 4.2Accessing the Web Configurator Chapter 4 Introducing the Web Configurator The Web Configurator initially displays the following login screen Figure 20 Login screen Table 14 Login screen Type "1234" (default) as the password Table 15 Change Password Screen Ignore Administrator Inactivity Timer Logout You can also open this screen by clicking Home 4.2.3.1 Weather Edit Click the icon to change the Weather display Figure 23 Change Weather Change Weather oC or oF 4.3 Resetting the Router Page Monitor 5.1 Overview 5.2What You Can Do 5.3The Log Screen Log Settings Clear Figure 25 View Log View Log 5.4 BW MGMT Monitor 5.5 DHCP Table 5.6 Packet Statistics 5.7 WLAN Station Status Page Router Modes 6.1 Overview Page Easy Mode 7.1 Overview Network Map Status Screen 7.2 What You Can Do 7.3What You Need to Know 7.4 Navigation Panel 7.5 Network Map 7.6 Control Panel Table 23 Control Panel (continued) Firewall Otherwise, switch OFF Refer to Section 7.6.5 on page 58 to see this screen Bandwidth MGMT Turn this off if your network is not using gaming Click OK to close this screen Table 24 Power Saving WLAN Status WLAN Status Day and Except for the following times fields and Figure 38 Content Filter Content Filter Add Click Add after you have typed a keyword Repeat this procedure to add other keywords. Up to 64 keywords are allowed High Low Cancel Figure 40 Firewall Figure 41 Wireless Security Enter a descriptive name (up to 32 keyboard characters) for the wireless LAN Type a pre-sharedkey from 8 to 63 case-sensitivekeyboard characters Type the password again to confirm Click Cancel to close this screen Figure 42 Wireless Security: WPS Table 27 Wireless Security: WPS Click this to go back to the Wireless Security screen Create a secure wireless network simply by pressing a button information synchronization 7.7 Status Screen in Easy Mode Router Mode 8.1 Overview 8.2 What You Can Do 8.3 Status Screen Table 29 Status Screen Icon Key: Router Mode (continued) Click this button to refresh the status screen statistics Click this icon to see the Monitor navigation menu Click this icon to see the Configuration navigation menu Click this icon to see the Maintenance navigation menu Table 30 Status Screen: Router Mode (continued) - WPS This displays Configured when the WPS has been set up This displays Unconfigured if the WPS has not been set up Click the status to display Network > Wireless LAN > WPS screen Use the sub-menuson the navigation panel to configure Router features Figure 46 Navigation Panel: Router Mode The following table describes the sub-menus Table 31 Navigation Panel: Router Mode LINK Table 31 Navigation Panel: Router Mode (continued) MAINTENANCE Access Point Mode 9.1 Overview 9.2What You Can Do 9.3What You Need to Know Maintenance > Sys OP Mode > General Access Point mode Start > Run page 9.4 AP Mode Status Screen Chapter 9 Access Point Mode Table 32 Status Screen: Access Point Mode (continued) should turn off other applications (for example, using bandwidth management This displays the Router port types. The port types are: LAN and WLAN 9.5 LAN Screen Table 33 Network > LAN > IP Get from DHCP Click this to deploy the Router as an access point in the network Server Internet if the IP address is given by the ISP) WISP Mode 10.1 Overview 10.2What You Can Do 10.3What You Need to Know Mode 10.4 WISP Mode Status Screen Table 34 Status Screen: WISP Mode (continued) - Connect Status Connected or Disassociated 10.5 Wireless LAN General Screen 10.5.0.1 No Security Table 36 No Security (WISP) No Security The following table describes the labels in this screen Table 37 WEP (WISP) Select Static WEP to enable data encryption PassPhrase Enter a Passphrase (up to 26 printable characters) and click Generate Table 37 WEP (WISP) (continued) Hex Select this option in order to enter hexadecimal characters as a WEP key Key 1 to Key use the same WEP key for data transmission Configuration > Wireless LAN Figure 61 Configuration > Wireless LAN > Advance Screen (WISP) Table 39 Configuration > Wireless LAN > Advance Screen (WISP) Mode when no wireless activity is detected in the Wireless LAN Configuration > Site Survey Figure 62 Configuration > Wireless LAN > Site Survey (WISP) Table 40 Configuration > Wireless LAN > Site Survey (WISP) Station Site Survey can add the selected wireless device to a profile and then enable it Page Tutorials 11.1 Overview 11.2Connecting to the Internet from an Access Point 11.3 Configuring Wireless Security Using WPS Push Button Configuration (PBC) PIN Configuration Start Push Button Wireless Client WITHIN 2 MINUTES SECURITY INFO COMMUNICATION PIN Wireless Client NBG-419Nv2 Authentication by PIN 11.4 Enabling and Configuring Wireless Security (No WPS) Interface Status Figure 67 Tutorial: Checking Wireless Settings Start > Programs 4Select SSID_Example3 and click Connect Figure 68 Connecting a Wireless Client to a Wireless Network t The Confirm Save Save Figure 71 Link Status http://www.zyxel.com 11.5Connecting to USB Storage with the ZyXEL NetUSB Share Center Utility Disconnect Request to Connect Accept Exit Chapter 2 on page 11.6 Automatically Connecting to a USB Printer 6Select the USB printer you want to connect to and click Apply Page Page Page Wireless LAN 12.1 Overview Router 12.2What You Can Do 12.3What You Should Know 12.3.1.3 Encryption Table 41 Types of Encryption for Each Type of Authentication NO AUTHENTICATION Weakest Strongest 12.4 General Wireless LAN Screen Chapter 12 Wireless LAN Table 42 Network > Wireless LAN > General (continued) Set the operating frequency/channel depending on your particular region Selection band and the country you are in Table 43 Network > Wireless LAN > General: No Security Table 42 on page Static WEP Figure 75 Network > Wireless LAN > General: Static WEP The following table describes the wireless LAN security labels in this screen Table 44 Network > Wireless LAN > General: Static WEP all devices wishing to connect to a wireless network the same WEP key for data transmission 12.5 MAC Filter 12.6 Wireless LAN Advanced Screen Click Network > Wireless LAN > Advanced. The screen appears as shown Figure 78 Network > Wireless LAN > Advanced Table 47 Network > Wireless LAN > Advanced RTS/CTS (Clear To Send) handshake 12.7 Quality of Service (QoS) Screen 12.8 WPS Screen 12.9 WPS Station Screen 12.10 Scheduling Screen 12.11 WDS Screen Table 52 Network > Wireless LAN > WDS (continued) EncrypType Otherwise, select No Security EncrypKey Click Apply to save your changes to Router WAN 13.1 Overview 13.2What You Can Do 13.3What You Need To Know Chapter 13 WAN Encapsulation Method WAN IP Address DNS Server Address Assignment The Router can get the DNS server addresses in the following ways WAN MAC Address 13.4 Internet Connection This screen displays when you select Ethernet encapsulation Figure 86 Network > WAN > Internet Connection: Ethernet Encapsulation Table 53 Network > WAN > Internet Connection: Ethernet Encapsulation ISP Parameters for Internet Access Encapsulation None after you click Apply WAN MAC manually entering a MAC address Factory default Select Factory default to use the factory assigned default MAC Address This screen displays when you select PPPoE encapsulation Figure 87 Network > WAN > Internet Connection: PPPoE Encapsulation Table 54 Network > WAN > Internet Connection: PPPoE Encapsulation Select PPP over Ethernet if you connect to your Internet via dial-up Retype to Table 54 Network > WAN > Internet Connection: PPPoE Encapsulation (continued) My WAN IP First DNS Server Select From ISP if your ISP dynamically assigns DNS server information (and the address that the ISP assigns This screen displays when you select PPTP encapsulation Figure 88 Network > WAN > Internet Connection: PPTP Encapsulation Table 55 Network > WAN > Internet Connection: PPTP Encapsulation PPP connection and the PPTP parameters for a PPTP connection Table 55 Network > WAN > Internet Connection: PPTP Encapsulation (continued) Nailed-up disconnects from the PPTP server PPTP Configuration Server IP This screen displays when you select L2TP encapsulation Figure 89 Network > WAN > Internet Connection: L2TP Encapsulation Table 56 Network > WAN > Internet Connection: L2TP Encapsulation layer-2connection and the L2TP parameters for an L2TP connection Table 56 Network > WAN > Internet Connection: L2TP Encapsulation (continued) L2TP Configuration Type the IP address of the L2TP server 13.5 Advanced WAN Screen 13.6 IGMP Blocking Screen Page LAN 14.1 Overview 14.2What You Can Do 14.3 What You Need To Know 14.4 LAN IP Screen 14.5 IP Alias Screen Table 60 Network > LAN > IP Alias (continued) DHCP Server 15.1 Overview 15.2What You Can Do 15.3General Screen 15.4 Advanced Screen Table 62 Network > DHCP Server > Advanced (continued) Type the LAN IP address of a computer on your LAN DNS Server DNS Servers Assigned by Page Network Address Translation (NAT) 16.1 Overview 16.2What You Can Do 16.3 General NAT Screen 16.4 NAT Application Screen Network > NAT Default Server IP address NAT > General Table 64 Network > NAT > Application Add Application Rule 16.5 NAT Advanced Screen Note: Only one LAN computer can use a trigger port (range) at a time Figure 101 Network > NAT > Advanced Table 65 Network > NAT > Advanced This is the rule index number (read-only) permitted - including spaces The following is an example of trigger port forwarding Figure 102 Trigger Port Forwarding Process: Example Router 1Jane requests a file from the Real Audio server (port 7070) 3The Real Audio server responds using a port number ranging between Dynamic DNS 17.1 Overview 17.2 What You Can Do 17.3 What You Need To Know 17.4 Dynamic DNS Screen Chapter 17 Dynamic DNS Table 66 Network > DDNS Enable Select this check box to use dynamic DNS Dynamic DNS Static Route 18.1 Overview 18.2 What You Can Do 18.3 IP Static Route Screen Chapter 18 Static Route This is the number assigned to the route asking you to confirm that you want to delete the route Page RIP 19.1 Overview 19.2 What You Can Do 19.3 RIP Screen Chapter 19 RIP Firewall 20.1 Overview 20.2What You Can Do 20.3 What You Need To Know 20.4 General Firewall Screen 20.5 Services Screen Table 70 Security > Firewall > Services (continued) Enable Firewall Rule Rule below) Enter a name that identifies or describes the firewall rule Content Filter 21.1 Overview 21.2 What You Can Do 21.3 What You Need To Know 21.4 Content Filter Screen Table 71 Security > Content Filter > Content Filter (continued) Cookies Used by Web servers to track usage and provide service based on ID Web Proxy Enable URL Page Bandwidth Management 22.1 Overview ->VOIP ->FTP ->HTTP 22.3 What You Need To Know 22.4 General Screen 22.5 Advanced Screen to open the bandwidth management Figure 113 Management > Bandwidth Management > Advanced Table 73 Management > Bandwidth Management > Advanced Management Bandwidth Upstream Table 73 Management > Bandwidth Management > Advanced (continued) This is the number of an individual bandwidth management rule Priority Select a priority from the drop down list box. Choose High, Mid or Low the variations in delay) Table 74 Bandwidth Management Rule Configuration: Application List managed by bandwidth management Select Maximum Bandwidth or Minimum Bandwidth and specify the maximum or minimum bandwidth allowed for the rule in kilobits per second Destination Port 22.6 Monitor Screen Figure 116 Management > Bandwidth Management > Monitor Management Bandwidth Management Table 76 Media Bandwidth Management Setup: Services SERVICE Remote Management 23.1 Overview 23.2 What You Can Do 23.3 What You Need to Know 23.4 WWW Screen Page Universal Plug-and-Play(UPnP) 24.1 Overview 24.2 What You Can Do 24.3 What You Need to Know 24.4 UPnP Screen 24.5 Technical Refereance 24.5.1.1 Auto-discoverYour UPnP-enabledNetwork Device start Network Connections Properties Internet Connection Properties Page Double-click Follow the steps below to access the web configurator 1Click Start and then Control Panel and then 2Double-click Network Connections 3Select My Network Places under Other Places Local Network Invoke Page Page Maintenance 25.1 Overview 25.2What You Can Do 25.3General Screen 25.4 Password Screen 25.5 Time Setting Screen 25.6 Firmware Upgrade Screen Maintenance > Firmware Upgrade Figure 131 Maintenance > Firmware Upgrade Table 82 Maintenance > Firmware Upgrade File Path Browse 25.7 Configuration Backup/Restore Screen 25.8 Reset/Restart Screen 25.9 System Operation Mode Overview Router Access Point WISP Wireless Client Access Point 25.10 Sys OP Mode Screen Page Troubleshooting 26.1Power, Hardware Connections, and LEDs 26.2 Router Access and Login 26.3Internet Access Network > Wireless LAN > General > WDS Disable Maintenance > Sys OP Mode The Internet connection is slow or intermittent Advanced Suggestions 26.4Resetting the Router to Its Factory Defaults 26.5Wireless Router/AP Troubleshooting 26.6 ZyXEL Share Center Utility Problems Page Page Pop-upWindows, JavaScript and Java Permissions Block pop-ups Enable Pop-upBlockers with Exceptions 2Select Settings…to open the Pop-upBlocker Settings screen Allowed sites Close JavaScript Custom Level Scripting Active scripting Scripting of Java applets Java Permissions Microsoft VM Java permissions JAVA (Sun) 2Make sure that Use Java 2 for <applet> under Java (Sun) is selected Figure 146 Java (Sun) Mozilla Firefox Tools Options Content Opera Allowing Pop-Ups Preferences Choose how you prefer to handle Open all Enabling Java JavaScript Options Page IP Addresses and Subnetting Appendix B IP Addresses and Subnetting Figure 152 Network Number and Host ID Subnet Masks Table 85 IP Address Network Number and Host ID Example 1ST OCTET: 2ND 3RD Network Size Table 87 Maximum Host Numbers SUBNET MASK HOST ID SIZE MAXIMUM NUMBER OF Subnetting Example: Four Subnets Table 89 Subnet IP/SUBNET MASK NETWORK NUMBER LAST OCTET BIT Example: Eight Subnets The following table shows IP address last octet values for each subnet Eight Subnets SUBNET FIRST ADDRESS Subnet Planning Table 94 24-bitNetwork Number Subnet Planning NO. “BORROWED” NO. SUBNETS NO. HOSTS PER Configuring IP Addresses Private IP Addresses •10.0.0.0 — •172.16.0.0 — •192.168.0.0 — IP Address Conflicts Conflicting Computer IP Addresses Example Conflicting Router IP Addresses Example Conflicting Computer and Router IP Addresses Example Setting Up Your Computer’s IP Address Windows XP/NT/2000 1Click Start > Control Panel 2In the Control Panel, click the Network Connections icon Page 5The Internet Protocol TCP/IP Properties window opens Obtain an IP address automatically 7Click OK to close the Internet Protocol (TCP/IP) Properties window 8Click OK to close the Local Area Connection Properties window Verifying Settings 1Click Start > All Programs > Accessories > Command Prompt Command Prompt Start > Control Panel > Network Connections Support Windows Vista Continue 6Select Internet Protocol Version 4 (TCP/IPv4) and then select Properties 7The Internet Protocol Version 4 (TCP/IPv4) Properties window opens 9Click OK to close the Internet Protocol (TCP/IP) Properties window 10Click OK to close the Local Area Connection Properties window Windows Page 5Select Internet Protocol Version 4 (TCP/IPv4) and then select Properties 6The Internet Protocol Version 4 (TCP/IPv4) Properties window opens 8Click OK to close the Internet Protocol (TCP/IP) Properties window 9Click OK to close the Local Area Connection Properties window Mac OS X: 10.3 and 1Click Apple > System Preferences System Preferences Built-in Configure Using DHCP Configure IPv4 TCP/IP Manually Subnet Mask Mac OS X: 10.5 and 2In System Preferences, click the Network icon Configure Page Linux: Ubuntu 8 (GNOME) Note: Make sure you are logged in as the root administrator 1Click System > Administration > Network Network Settings Unlock Authenticate Static IP address IP address Subnet mask Gateway address DNS Linux: openSUSE 10.3 (KDE) 1Click K Menu > Computer > Administrator Settings (YaST) Run as Root - KDE su YaST Control Center Network Devices Network Card Overview Network Card Setup Address Dynamic Address (DHCP) Statically assigned IP Address Hostname Hostname/DNS Finish KNetwork Manager Task bar Show Connection Information Page Wireless LANs ESS Figure 166 Infrastructure WLAN Channel RTS/CTS Figure 167 RTS/CTS RTS/CTS RTS/CTS Fragmentation Threshold Fragmentation Threshold Preamble Type IEEE 802.11g Wireless LAN Table 96 IEEE 802.11g DATA RATE (MBPS) MODULATION IEEE •User based identification that allows for roaming RADIUS •Authentication Determines the identity of the users Types of RADIUS Messages •Access-Request Sent by an access point requesting authentication •Access-Reject Sent by a RADIUS server rejecting access EAP-MD5 (Message-DigestAlgorithm 5) EAP-TLS(Transport Layer Security) EAP-TTLS(Tunneled Transport Layer Service) PEAP (Protected EAP) LEAP WPA and WPA2 Encryption User Authentication Wireless Client WPA Supplicants WPA(2) with RADIUS Application Example WPA(2)-PSKApplication Example Security Parameters Summary AUTHENTICATION ENCRYPTIO ENTER METHOD/ KEY Antenna Characteristics Frequency Radiation Pattern Antenna Gain Types of Antennas for WLAN Page Common Services Appendix E Common Services Table 100 Commonly Used Services (continued) Page Page Legal Information FCC Radiation Exposure Statement 注意 Notices Industry Canada Statement IC Radiation Exposure Statement: Viewing Certifications ZyXEL Limited Warranty Note Registration Open Source Licenses Regulatory Information European Union [Czech] National Restrictions Overview of Regulatory Requirements for Wireless LANs Belgium Denmark In Denmark, the band 5150 - 5350 MHz is also allowed for outdoor usage I Danmark må frekvensbåndet 5150 - 5350 også anvendes udendørs Safety Warnings •Make sure to connect the cables to the correct ports •Use ONLY an appropriate power adaptor or cord for your device •If the power adaptor or cord is damaged, remove it from the power outlet Page Page Page SSID 59, 64, 73, 79, 102 133 82, 107 193 WWW167