About Filters & Filter Examples | ZyXEL Communications P-2302HW

About Filters & Filter Examples

Prestige 2302 Support Notes

Once the connection is up, you can establish a secure VPN connection from the PPTP client to the ISP. The default gateway is then used to route the traffic between the PPTP client and the server.

However, before you can establish a secure VPN connection from the PPTP client to the PPTP server, you need to know the WAN IP address of the Prestige with the SUA feature enabled. Depending on your Internet account type and ISP, the Prestige WAN IP address is either fixed(static) or dynamic (different each time). You need to enter the WAN IP address of the Prestige in the VPN dial-up connection screen. You can check the WAN IP address of the Prestige in SMT menu 24.1 or using PNC Monitor. If the Prestige is using a fixed (static) IP address, you can always use this fixed IP address to connect to the PPTP server.

The following figure shows an example VPN dial-up screen. The VPN Server field is 140.113.1.225 which is a dynamic IP address assigned to the Prestige by the ISP. Make sure you enter the WAN IP address of the Prestige correctly; otherwise, the VPN connection will fail. After the VPN connection is established, you can start using Internet applications (such as on-line games).

About Filters & Filter Examples

How does the ZyXEL filter feature work?

17

All contents copyright (c) 2005 ZyXEL Communications Corporation.

Image 17

ZyXEL Communications P-2302HW manual About Filters & Filter Examples, How does the ZyXEL filter feature work?

Contents

P-2302HW SERIES With Lifeline/ DECT/ USBSupport Notes VoIP Station Gateway INDEX Prestige 2302 Support Notes What is the difference between NAT and SUA? What is Voice over IP? CLI Command ListHow does Voice over IP work? Unable to Get WAN IP from ISP Prestige 2302 Support Notes Application NotesGeneral Application Notes Internet Connection Setting up the Prestige router 2. TCP/IP Installation3. TCP/IP Configuration 1. Accessing the Prestige Web Management Interface Prestige 2302 Support Notes All contents copyright c 2005 ZyXEL Communications Corporation Prestige 2302 Support Notes What is DHCP Relay? WAN IP Address field Setup the Prestige as a DHCP Relay IP Subnet Mask= Setup the Prestige as a DHCP Client Introduction Configure an Internal Server Behind the PrestigeConfiguration Port Number ServiceThe following table lists some common service port numbers Telnet Window98 PPTP Client / Internet / NT RAS Server Protocol Stack Configure a PPTP server Behind SUA The PPTP is already supported in Windows NT and Windows 98. For Windows 95, a software upgrade with Dial-Up Networking 1.2 is required ƒ Set the Prestige that connects to the ISP as the Internet gateway About Filters & Filter Examples How does the ZyXEL filter feature work? Filter Structure Filter Types and SUA Filter Type= Generic Filter Rule Active= Yes Offset= Length= Menu 21.1.1 - Generic Filter Rule Filter # 1,1Mask= N/A Value= N/A More= No Log= None Action Matched= Check Next Rule Action Not Matched= Check Next Rule Log= None Protocol and device rule cannot be active togetherprotocol filters= device filters= Edit PPP Options= No Route=Rem IP Edit IP/IPX/Bridge= No Generally, the outbound packets for a web service could be as follows Filter to block web services1. The outbound packet type the protocol and port number 2. The source IP address ENTER to Confirm or 2. Configure rule one for a. HTTP packets using TCP06 and port number 4. Rule 3 for c. DNS packets using UDP17 and port number 3. Configure rule 2 for b. DNS requests using TCP06 and port number A filter to block a specific client 2.Create one rule to block all packets from this client Before you Begin Key SettingsA filter to block a specific MAC address The following shows detailed information with Ethernet Version Select Generic Filter Rule in the Filter Type field Configurations Active Select Yes in the Active field Offset in bytes A filter to block NetBIOS packets Configure field Rule 2-Destination port number 137 with protocol number 17 UDP Action Not Matched= Check Next Rule Rule 4-Destination port number 138 with protocol number 17 UDP Rule 3-Destination port number 138 with protocol number 6 TCP Rule 5-Destination port number 139 with protocol number 6 TCP Rule 6-Destination port number 139 with protocol number 17 UDP Prestige 2302 Support Notes Rule 2-Source port number 137, Destination port number 53 with protocol number 17 UDP 1. What is DDNS? Using Dynamic DNS DDNS web site from the WAN when you have set up the DDNS settings. With DDNS, users can always access a web site regardless of the WAN IP address on the Prestige Password Service ProviderEnable Wildcard Network Management Using SNMP 7. Writes 6. Reads8. Traversal operations 9. Traps Trap 2. SNMPv1 OperationsGetNext 3. ZyXEL SNMP Implementation If the machine warmstarts, the trap will be sent after booting 4. Configure the Prestige for SNMP Trap Destination Get Community Set Community Trusted Host Trap CommunityNMS managers entered, the Prestige will not send traps to any NMS manager UNIX Setup Using syslog4. Prestige Setup line = the WAN ID in a board channel = channel ID within the WAN Packet triggered logFilter log PPP Log What is IP Alias ? Using IP Alias 2004 ZyXEL Communications Corp IP Alias Setupras ip ro st Interface IP Alias IP Alias DHCP Setup TCP/IP Setup Edit IP AliasMenu 3.2.1 - IP Alias Setup IP Alias 1= Yes IP Address= Enter here to CONFIRM or ESC to CANCEL System Date and Time Settings on the Prestige Using IP Multicast Select IGMP-v1 for IGMP version 1 or IGMP-v2 for IGMP version Multicast Traffic Redirect on the WAN Using Prestige traffic redirectWhat is Traffic Redirect ? How to set up the backup gateway? Traffic Redirect Setup Traffic Redirect on the LAN Timeout BackupActive Gateway 1. What is UPnP Using Universal Plug n Play UPnP UPnP Operations Control Point PC1 2. Using UPnP in ZyXEL devicesDevice Prestige Service NAT function provided on the Prestige Select Enable UPnP service to activate UpnP on the device Prestige 2302 Support Notes All contents copyright c 2005 ZyXEL Communications Corporation Prestige 2302 Support Notes All contents copyright c 2005 ZyXEL Communications Corporation Prestige 2302 Support Notes Follow the 3 steps below to set up trunks on P-2302HWL/HWUDL-P1 Trunk Setup in P-2302HWL/HWUDL-P1 o Step 2 Access the web configurator and click VoIP Advance Setting Two examples are described next Example So how do you make a phone call over the PSTN and SIP networks? VoIP Application Notes SIP Account Setup Prestige 2302 Support Notes The following table describes the screen labels Label ServiceDescription SIP Account Password AuthenticationSettings Reset Step 3. In the navigation panel, click VoIP Phone Analog Phone Use this field to select the phone port that you want to configureThe table below describes the related fields Phone Speed dial Phone book setup VolumeSpeaking Listening Each fields detail description of the page is listed below Speed Dial EntryName Type What is ZyNOS? ZyNOS FAQHow to access the embedded web configurator? Clear How do I upload the firmware via the web configurator? What should I do if I forget the system password? Why cant I telnet into Prestige from the WAN? How many network users does SUA/NAT support? What is SUA? When should I use SUA?What is the difference between NAT and SUA? Why cant I configure device or protocol filters? Product FAQWhat is the Prestige Internet Access Sharing Router? What are Device and Protocol filters? How do I know I am using PPPoE? What is PPPoE?Why does my provider use PPPoE? How can I configure the Prestige? What can I do with the Prestige? What network interface does the Prestige support?Does the Prestige support dynamic IP addressing? How does e-mail work through the Prestige? What DHCP capability does the Prestige support? What is the difference between the Standard and RoadRunner service? Does the Prestige support TFTP? What network interface does the new Prestige series support?Does the Prestige support TFTP over WAN? How fast is the DSL connection? 1. If your ISP checks the MAC address a. Assigned By Select IP address attached on LAN 2. If your ISP checks the host name3. If your ISP checks the User ID c. My Login Name Enter the login user name given to you by your ISP What is DDNS? What is BOOTP/DHCP?When do I need the DDNS service? What DDNS servers does the Prestige support? What is DDNS wildcard? VoIP FAQCan VPN tunnels still work on a Prestige using SUA? How do I set up my Prestige to route IPsec packets over SUA? What is the relationship between codec and VoIP? Why use VoIP?What is the difference between H.323 and SIP? How does Voice over IP work? What is codec? What is voice quality?Can H.323 and SIP interoperate with each other? How are voice quality normally rated? What do I need in order to use SIP? Which codec should I choose?I am unable to register to a SIP server I can register to the SIP server but cannot establish a call What should I do if there may be a hardware problem with my Prestige? 1. If your ISP checks the MAC address Trouble ShootingUnable to Get WAN IP from ISP Field settings 2. If your ISP checks the Host NameAssigned By= IP Address= System Name Enter the same name as the compute name on the computer 3. If your ISP checks the User IDField Setting Embedded Packet Trace Using Embedded Packet Trace 1.2 Enable LAN packet trace sys trcp channel enet0 bothway 1.1 Disable WAN packet trace sys trcp channel enet1 none1. Online Trace--display the trace real time on screen 2. Offline Trace--capture the trace first and display later Prestige sys trcd parse 103 All contents copyright c 2005 ZyXEL Communications CorporationDestination MAC Addr = 0x330B 104 All contents copyright c 2005 ZyXEL Communications Corporation 105 All contents copyright c 2005 ZyXEL Communications Corporation 1.2 Enable WAN packet trace sys trcp channel enet1 bothway 1.1 Disable LAN packet trace sys trcp channel enet0 none106 All contents copyright c 2005 ZyXEL Communications Corporation TCP Data Length=6 107 All contents copyright c 2005 ZyXEL Communications Corporation +Y.x 108 All contents copyright c 2005 ZyXEL Communications Corporation 109 All contents copyright c 2005 ZyXEL Communications Corporation 110 All contents copyright c 2005 ZyXEL Communications Corporation Offline Trace 1.7 Display specific trace packets sys trcp parse fromindex toindex LAN Frame ENET0-XMIT 112 All contents copyright c 2005 ZyXEL Communications Corporation 1.2 Enable WAN packet trace sys trcp channel enet1 bothway LAN Frame ENET1-RECV 114 All contents copyright c 2005 ZyXEL Communications Corporation a.P&Mq= Debugging PPPoE Connection Debugging PPPoE Connection Example- Trace Example on a crashed system 118 All contents copyright c 2005 ZyXEL Communications Corporation 119 All contents copyright c 2005 ZyXEL Communications Corporation 1. Online Trace--display real-time trace results on the screen LAN/WAN Packet Trace 121 All contents copyright c 2005 ZyXEL Communications Corporation 122 All contents copyright c 2005 ZyXEL Communications Corporation 123 All contents copyright c 2005 ZyXEL Communications Corporation 124 All contents copyright c 2005 ZyXEL Communications Corporation 125 All contents copyright c 2005 ZyXEL Communications Corporation 1.2 Enable WAN packet trace sys trcp channel mpoa00 bothway 126 All contents copyright c 2005 ZyXEL Communications Corporation 1.1 Disable WAN packet trace sys trcp channel mpoa00 none 128 All contents copyright c 2005 ZyXEL Communications Corporation CLI Command List