A filter to block NetBIOS packets | ZyXEL Communications P-2302HW

Image 32

ZyXEL Communications P-2302HW manual A filter to block NetBIOS packets, Prestige 2302 Support Notes

Contents

With Lifeline/ DECT/ USB P-2302HW SERIESSupport Notes VoIP Station Gateway Prestige 2302 Support Notes INDEX What is the difference between NAT and SUA? CLI Command List What is Voice over IP?How does Voice over IP work? Unable to Get WAN IP from ISP Application Notes Prestige 2302 Support NotesGeneral Application Notes Internet Connection Setting up the Prestige router 2. TCP/IP Installation3. TCP/IP Configuration 1. Accessing the Prestige Web Management Interface All contents copyright c 2005 ZyXEL Communications Corporation Prestige 2302 Support Notes Prestige 2302 Support Notes WAN IP Address field Setup the Prestige as a DHCP Relay What is DHCP Relay? Setup the Prestige as a DHCP Client IP Subnet Mask= Introduction Configure an Internal Server Behind the PrestigeConfiguration Service Port NumberThe following table lists some common service port numbers Telnet Configure a PPTP server Behind SUA Window98 PPTP Client / Internet / NT RAS Server Protocol Stack The PPTP is already supported in Windows NT and Windows 98. For Windows 95, a software upgrade with Dial-Up Networking 1.2 is required ƒ Set the Prestige that connects to the ISP as the Internet gateway How does the ZyXEL filter feature work? About Filters & Filter Examples Filter Structure Filter Types and SUA Menu 21.1.1 - Generic Filter Rule Filter # 1,1 Filter Type= Generic Filter Rule Active= Yes Offset= Length=Mask= N/A Value= N/A More= No Log= None Action Matched= Check Next Rule Action Not Matched= Check Next Rule Log= None Protocol and device rule cannot be active togetherprotocol filters= device filters= Route= Edit PPP Options= NoRem IP Edit IP/IPX/Bridge= No Filter to block web services Generally, the outbound packets for a web service could be as follows1. The outbound packet type the protocol and port number 2. The source IP address 2. Configure rule one for a. HTTP packets using TCP06 and port number ENTER to Confirm or 3. Configure rule 2 for b. DNS requests using TCP06 and port number 4. Rule 3 for c. DNS packets using UDP17 and port number A filter to block a specific client 2.Create one rule to block all packets from this client Before you Begin Key SettingsA filter to block a specific MAC address The following shows detailed information with Ethernet Version Configurations Select Generic Filter Rule in the Filter Type field Active Select Yes in the Active field Offset in bytes A filter to block NetBIOS packets Configure field Action Not Matched= Check Next Rule Rule 2-Destination port number 137 with protocol number 17 UDP Rule 3-Destination port number 138 with protocol number 6 TCP Rule 4-Destination port number 138 with protocol number 17 UDP Rule 5-Destination port number 139 with protocol number 6 TCP Rule 6-Destination port number 139 with protocol number 17 UDP Prestige 2302 Support Notes Rule 2-Source port number 137, Destination port number 53 with protocol number 17 UDP Using Dynamic DNS DDNS 1. What is DDNS? web site from the WAN when you have set up the DDNS settings. With DDNS, users can always access a web site regardless of the WAN IP address on the Prestige Service Provider PasswordEnable Wildcard Network Management Using SNMP 6. Reads 7. Writes8. Traversal operations 9. Traps Trap 2. SNMPv1 OperationsGetNext 3. ZyXEL SNMP Implementation If the machine warmstarts, the trap will be sent after booting 4. Configure the Prestige for SNMP Get Community Set Community Trusted Host Trap Community Trap DestinationNMS managers entered, the Prestige will not send traps to any NMS manager UNIX Setup Using syslog4. Prestige Setup line = the WAN ID in a board channel = channel ID within the WAN Packet triggered logFilter log PPP Log Using IP Alias What is IP Alias ? IP Alias Setup 2004 ZyXEL Communications Corpras ip ro st Interface DHCP Setup TCP/IP Setup Edit IP Alias IP Alias IP AliasMenu 3.2.1 - IP Alias Setup IP Alias 1= Yes IP Address= Enter here to CONFIRM or ESC to CANCEL System Date and Time Settings on the Prestige Using IP Multicast Multicast Select IGMP-v1 for IGMP version 1 or IGMP-v2 for IGMP version Using Prestige traffic redirect Traffic Redirect on the WANWhat is Traffic Redirect ? How to set up the backup gateway? Traffic Redirect on the LAN Traffic Redirect Setup Backup TimeoutActive Gateway Using Universal Plug n Play UPnP 1. What is UPnP UPnP Operations Control Point PC1 2. Using UPnP in ZyXEL devicesDevice Prestige Service NAT function provided on the Prestige Select Enable UPnP service to activate UpnP on the device All contents copyright c 2005 ZyXEL Communications Corporation Prestige 2302 Support Notes All contents copyright c 2005 ZyXEL Communications Corporation Prestige 2302 Support Notes All contents copyright c 2005 ZyXEL Communications Corporation Trunk Setup in P-2302HWL/HWUDL-P1 Follow the 3 steps below to set up trunks on P-2302HWL/HWUDL-P1 o Step 2 Access the web configurator and click VoIP Advance Setting So how do you make a phone call over the PSTN and SIP networks? Two examples are described next Example SIP Account Setup VoIP Application Notes Prestige 2302 Support Notes The following table describes the screen labels Service LabelDescription SIP Account Authentication PasswordSettings Reset Use this field to select the phone port that you want to configure Step 3. In the navigation panel, click VoIP Phone Analog PhoneThe table below describes the related fields Phone Volume Speed dial Phone book setupSpeaking Listening Each fields detail description of the page is listed below Entry Speed DialName Type ZyNOS FAQ What is ZyNOS?How to access the embedded web configurator? Clear How do I upload the firmware via the web configurator? Why cant I telnet into Prestige from the WAN? What should I do if I forget the system password? How many network users does SUA/NAT support? What is SUA? When should I use SUA?What is the difference between NAT and SUA? Product FAQ Why cant I configure device or protocol filters?What is the Prestige Internet Access Sharing Router? What are Device and Protocol filters? What is PPPoE? How do I know I am using PPPoE?Why does my provider use PPPoE? How can I configure the Prestige? What network interface does the Prestige support? What can I do with the Prestige?Does the Prestige support dynamic IP addressing? How does e-mail work through the Prestige? What is the difference between the Standard and RoadRunner service? What DHCP capability does the Prestige support? What network interface does the new Prestige series support? Does the Prestige support TFTP?Does the Prestige support TFTP over WAN? How fast is the DSL connection? 1. If your ISP checks the MAC address a. Assigned By Select IP address attached on LAN 2. If your ISP checks the host name3. If your ISP checks the User ID c. My Login Name Enter the login user name given to you by your ISP What is BOOTP/DHCP? What is DDNS?When do I need the DDNS service? What DDNS servers does the Prestige support? VoIP FAQ What is DDNS wildcard?Can VPN tunnels still work on a Prestige using SUA? How do I set up my Prestige to route IPsec packets over SUA? Why use VoIP? What is the relationship between codec and VoIP?What is the difference between H.323 and SIP? How does Voice over IP work? What is voice quality? What is codec?Can H.323 and SIP interoperate with each other? How are voice quality normally rated? Which codec should I choose? What do I need in order to use SIP?I am unable to register to a SIP server I can register to the SIP server but cannot establish a call What should I do if there may be a hardware problem with my Prestige? 1. If your ISP checks the MAC address Trouble ShootingUnable to Get WAN IP from ISP 2. If your ISP checks the Host Name Field settingsAssigned By= IP Address= System Name Enter the same name as the compute name on the computer 3. If your ISP checks the User IDField Setting Using Embedded Packet Trace Embedded Packet Trace 1.1 Disable WAN packet trace sys trcp channel enet1 none 1.2 Enable LAN packet trace sys trcp channel enet0 bothway1. Online Trace--display the trace real time on screen 2. Offline Trace--capture the trace first and display later 103 All contents copyright c 2005 ZyXEL Communications Corporation Prestige sys trcd parseDestination MAC Addr = 0x330B 104 All contents copyright c 2005 ZyXEL Communications Corporation 105 All contents copyright c 2005 ZyXEL Communications Corporation 1.1 Disable LAN packet trace sys trcp channel enet0 none 1.2 Enable WAN packet trace sys trcp channel enet1 bothway106 All contents copyright c 2005 ZyXEL Communications Corporation TCP Data Length=6 107 All contents copyright c 2005 ZyXEL Communications Corporation 108 All contents copyright c 2005 ZyXEL Communications Corporation +Y.x 109 All contents copyright c 2005 ZyXEL Communications Corporation Offline Trace 110 All contents copyright c 2005 ZyXEL Communications Corporation 1.7 Display specific trace packets sys trcp parse fromindex toindex 112 All contents copyright c 2005 ZyXEL Communications Corporation LAN Frame ENET0-XMIT 1.1 Disable LAN packet trace sys trcp channel enet0 none 114 All contents copyright c 2005 ZyXEL Communications Corporation LAN Frame ENET1-RECV a.P&Mq= Debugging PPPoE Connection Debugging PPPoE Connection Example- Trace Example on a crashed system 118 All contents copyright c 2005 ZyXEL Communications Corporation 119 All contents copyright c 2005 ZyXEL Communications Corporation LAN/WAN Packet Trace 1. Online Trace--display real-time trace results on the screen 121 All contents copyright c 2005 ZyXEL Communications Corporation 122 All contents copyright c 2005 ZyXEL Communications Corporation 123 All contents copyright c 2005 ZyXEL Communications Corporation 124 All contents copyright c 2005 ZyXEL Communications Corporation 1.2 Enable WAN packet trace sys trcp channel mpoa00 bothway 125 All contents copyright c 2005 ZyXEL Communications Corporation 126 All contents copyright c 2005 ZyXEL Communications Corporation 1.1 Disable WAN packet trace sys trcp channel mpoa00 none CLI Command List 128 All contents copyright c 2005 ZyXEL Communications Corporation