Chapter Firewall Configuration 193 | ZyXEL Communications P-2602

	P-2602H(W)(L)-DxA Series User’s Guide
13.7	Packet Filtering Vs Firewall	191
13.7.1 Packet Filtering:		191
	13.7.1.1 When To Use Filtering	192
13.7.2 Firewall		192
	13.7.2.1 When To Use The Firewall	192
Chapter 14
Firewall Configuration		193
14.1	Access Methods	193
14.2	Firewall Policies Overview	193
14.3	Rule Logic Overview	194
14.3.1 Rule Checklist		194
14.3.2 Security Ramifications		194
14.3.3 Key Fields For Configuring Rules		195
	14.3.3.1 Action	195
	14.3.3.2 Service	195
	14.3.3.3 Source Address	195
	14.3.3.4 Destination Address	195
14.4	Connection Direction	195
14.4.1 LAN to WAN Rules		196
14.4.2 Alerts		196
14.5	General Firewall Policy	196
14.6	Firewall Rules Summary	197
14.6.1 Configuring Firewall Rules		199
14.6.2 Customized Services		202
14.6.3 Configuring A Customized Service		202
14.7	Example Firewall Rule	203
14.8	DoS Thresholds	207
14.8.1 Threshold Values		207
14.8.2 Half-Open Sessions		208
	14.8.2.1 TCP Maximum Incomplete and Blocking Time	208
14.8.3 Configuring Firewall Thresholds		209
Chapter 15
Content Filtering		211
15.1	Content Filtering Overview	211
15.2	Configuring Keyword Blocking	211
15.3	Configuring the Schedule	212
15.4	Configuring Trusted Computers	213
Chapter 16
Introduction to IPSec		215
16.1	VPN Overview	215

Table of Contents

Page 15

Image 15

ZyXEL Communications P-2602 manual Chapter Firewall Configuration 193

Contents

2602HWL Series Page 2602HWL-DxA Series User’s Guide CopyrightDisclaimer Trademarks Certifications Viewing CertificationsCertifications Safety Warnings Safety Warnings ZyXEL Limited Warranty ZyXEL Limited Warranty Customer Support Customer Support Norway Table of Contents Chapter VoIP Wizard And Example Chapter LAN Setup 107 141 156 Chapter Phone Usage 179 Chapter Firewall Configuration 193 Chapter VPN Screens 221 Chapter Static Route 249 Chapter System 289 Chapter Diagnostic 315 Appendix B Splitters and Microfilters 339 Appendix F Services 371 Appendix G Firewall Commands 375 Index 421 List of Figures List of Figures Bandwidth Management Wizard General Information Firewall Example Edit Rule Destination Address 205 Telecommuters Using Unique VPN Rules Example 246 FTP Session Example of Firmware File Upload 312 Peer-to-Peer Communication in an Ad-hoc Network 361 List of Tables List of Tables 139 228 333 389 2602HWL-DxA Series User’s Guide List of Tables User Guide Feedback PrefaceAbout This Users Guide Related Documentation Dslam Graphics Icons Key Getting To Know the ZyXEL Device Getting To Know the ZyXEL DeviceIntroducing the P-2602HWL-Dx Series Models Covered Adsl Standards FeaturesBuilt-in Switch High Speed Internet Access Auto Provisioning Zero Configuration Internet AccessAuto Firmware Upgrade Any IP Dynamic Jitter Buffer Content FilteringNetwork Address Translation NAT Media Bandwidth Management Universal Plug and Play UPnP Echo CancellationQoS Quality of Service Other PPPoE Features Wireless Features W models only External Antenna Ieee 802.11g+ Wireless LANWireless LAN MAC Address Filtering Wi-Fi Protected Access Internet Single User Account Internet AccessMaking Calls via Internet Telephony Service Provider Applications for the ZyXEL Device Make Peer-to-peer Calls Firewall for Secure Broadband Internet Access Firewall Application LAN to LAN Application Wlan LED Color Status Description PowerLEDs Ethernet Phone 1 2602HWL-DxA Series User’s Guide LEDsLED Color Status Description DSL Internet Introducing the Web Configurator Introducing the Web ConfiguratorWeb Configurator Overview Accessing the Web Configurator Password Screen Using The Reset Button Reset Button Title Bar Web Configurator Main Screen Icon Description Web Configurator Icons in the Title BarNavigation Panel Navigation Panel Summary 2602HWL-DxA Series User’s Guide Navigation Panel Summary VPNMgmt Status Bar Main WindowPage Introduction Internet and Wireless Setup WizardInternet Access Wizard Setup Internet and Wireless Setup Wizard Wizard Welcome Auto-Detection PPPoE Manual Configuration VCI Label DescriptionPPPoE VPI Internet Connection with PPPoE Internet Connection with RFC Internet Connection with PPPoA Internet Connection with Enet Encap Connection Test Failed-1 Connection Test Successful Wireless Connection Wizard Setup Wireless LAN Wireless LAN Setup Wizard Manually Assign a WPA key Manually Assign a WPA key Internet and Wireless Setup Wizard Manually Assign a WPA key Manually Assign a WEP key Manually Assign a WEP key Wireless LAN Setup 2602HWL-DxA Series User’s Guide VoIP Wizard Setup VoIP Wizard And ExampleVoIP Wizard And Example Wizard Welcome VoIP Wizard And Example Sample SIP Account Information VoIP Wizard Configuration SIP Registration Test 2602HWL-DxA Series User’s Guide VoIP Wizard Configuration VoIP Wizard Fail 2602HWL-DxA Series User’s Guide VoIP Wizard And Example Bandwidth Management Wizard Predefined Media Bandwidth Management ServicesMedia Bandwidth Management Setup Services Service Description Tftp Bandwidth Management Wizard Setup Click Bandwidth Management Setup Following fields describe the label in this screen Bandwidth Management Wizard Complete 2602HWL-DxA Series User’s Guide Bandwidth Management Wizard Status Screen Status Screens Ssid Status ScreenVPI/VCI Dhcp 253 This in Maintenance System Time Setting 2602HWL-DxA Series User’s Guide Status Screen SettingsCan change these in VoIP SIP SIP Settings Any IP Table Wlan Status W models only Packet StatisticsAny IP Table Packet Statistics VoIP Statistics Status Screens VoIP Statistics VoIP Statistics Interval 2602HWL-DxA Series User’s Guide Status Screens Enet Encap WAN SetupWAN Overview Encapsulation VPI and VCI Multiplexing IP Address Assignment Nailed-Up Connection PPP6 NAT Traffic Shaping Metric ATM Traffic Classes Constant Bit Rate CBRVariable Bit Rate VBR Zero Configuration Internet Access Internet Access SetupUnspecified Bit Rate UBR Encap or PPPoE Internet Access Setup Enet Encap in the Encapsulation field 2602HWL-DxA Series User’s Guide Internet Access Setup100 WAN Setup Enet Encap WAN Setup 101 Advanced Internet Access Setup WAN More Connections 102 WAN Setup Traffic Redirect WAN Setup 103 Traffic Redirect Example WAN Backup Setup WAN Backup SetupWAN Setup 105 106 WAN Setup 2602HWL-DxA Series User’s Guide WAN Backup Setup LAN Setup LAN OverviewLANs, WANs and the ZyXEL Device DNS Server Address Dhcp SetupIP Pool Setup 108 LAN Setup LAN Setup 109 DNS Server Address AssignmentIP Address and Subnet Mask RIP Setup 110 LAN SetupPrivate IP Addresses LAN Setup 111 MulticastAny IP How Any IP Works 112 LAN Setup LAN TCP/IP Configuring LAN IPConfiguring Advanced LAN Setup LAN Setup 113 TCP/IP 114 LAN Setup Dhcp Setup Dhcp SetupLAN Setup 115 LAN Client List 2602HWL-DxA Series User’s Guide Dhcp Setup LAN Setup 117 LAN IP AliasLAN Client List LAN IP Alias Physical Network & Partitioned Logical Networks LAN Setup 119 2602HWL-DxA Series User’s Guide 120 LAN Setup Wireless LAN Wireless Network OverviewWireless LAN 121 MAC Address Filter Wireless Security Overview122 Wireless LAN Ssid Weakest Strongest No Authentication Radius Server User AuthenticationTypes of Encryption for Each Type of Authentication Wireless LAN 123 One-Touch Intelligent Security Technology Otist Wireless Performance OverviewQuality of Service QoS 124 Wireless LAN Term Description Additional Wireless TermsWireless LAN 125 General Wlan Screen No Security 126 Wireless LAN WEP Encryption Screen Wireless LAN 127 3 WPA2-PSK 128 Wireless LAN Wireless LAN 129 Wireless WPA2-PSK 130 Wireless LAN 4 WPA2 Authentication Screen Wireless LAN 131 Wireless LAN Advanced Setup RTS/CTS Wireless LAN Advanced132 Wireless LAN 802.11g Only mode Otist Screen Wireless LAN 133Setup Key Type a key password 8 Ascii characters long Security Mode to WPA-PSK , and enter the Pre-Shared Key Example Wireless Client Otist Screen Start OTIST? Otist In Progress on the Wireless Device MAC Filter 136 Wireless LAN QoS Screen Wireless LAN 137 Policy Application Priority Configuration2602HWL-DxA Series User’s Guide Wireless LAN QoS Application Priority Configuration screen WWW Application Priority ConfigurationWireless LAN 139 FTP 2602HWL-DxA Series User’s Guide 140 Wireless LAN NAT Definitions Network Address Translation NAT ScreensNAT Overview NAT Definitions How NAT Works What NAT Does NAT Application NAT Mapping TypesNetwork Address Translation NAT Screens 143 144 Network Address Translation NAT Screens NAT General SetupSUA Single User Account Versus NAT NAT Mapping Types Network Address Translation NAT Screens 145 Port Forwarding Default Server IP Address Port Forwarding Services and Port NumbersConfiguring Servers Behind Port Forwarding Example Network Address Translation NAT Screens 147 Configuring Port Forwarding Port Forwarding Rule Edit 2602HWL-DxA Series User’s Guide Port Forwarding148 Network Address Translation NAT Screens 2602HWL-DxA Series User’s Guide Port Forwarding Rule Setup SIP ALGNetwork Address Translation NAT Screens 149 Page SIP Identities VoiceIntroduction to VoIP 11.2 SIP SIP Call Progression SIP Service DomainSIP Call Progression SIP Servers SIP Proxy Server SIP User Agent 154 Voice SIP Settings ScreenSIP Redirect Server SIP Register Server Server Port field Voice 155 11.5.1 G.711 Pulse Code ModulationVoice Coding 11.3.1 RTP Recording Custom Tones Pstn Call Setup SignalingMWI Message Waiting Indication Custom Tones IVR 158 Voice Advanced SIP Setup ScreenListening to Custom Tones Deleting Custom Tones VoIP SIP Settings Advanced Voice 159 160 Voice VoIP SIP Settings Advanced Voice 161 Dscp and Per-Hop Behavior Quality of Service QoSType Of Service ToS DiffServ Vlan SIP QoS ScreenVoice 163 Voice Activity Detection/Silence Suppression Echo CancellationPhone Pstn Line L models only SIP2 Analog Phone ScreenVoice 165 SIP1 Advanced Analog Phone Setup Screen 2602HWL-DxA Series User’s Guide Phone Analog Phone166 Voice Common Phone Settings Screen Voice 167Dialing Interval Select in VoIP Phone Analog Phone Flash Key Supplementary Phone Services OverviewEurope Type Supplementary Phone Services European Flash Key Commands Voice 169 European Call HoldEuropean Call Waiting European Call Transfer USA Call Hold USA Type Supplementary ServicesUSA Flash Key Commands European Three-Way Conference USA Three-Way Conference Phone Region ScreenUSA Call Waiting USA Call Transfer Speed Dial Peer-to-Peer Calls172 Voice Speed Dial Screen Voice 173Dial Phone Book section Incoming Call Policy Screen 2602HWL-DxA Series User’s Guide Phone Book Speed Dial174 Voice Voice 175 Phone Book Incoming Call Policy Incoming Call Number to the Forward to Number Pstn Line Screen L models only176 Voice Condition Voice 177 Pstn Line General 2602HWL-DxA Series User’s Guide 178 Voice Internal Calls Using Speed Dial to Dial a Telephone NumberPhone Usage Dialing a Telephone Number 180 Phone Usage Auto Firmware Upgrade Packet Filtering Firewalls FirewallsFirewall Overview Types of Firewalls 182 Firewalls Introduction to ZyXEL’s FirewallApplication-level Firewalls Stateful Inspection Firewalls Firewalls 183 Denial of ServiceDenial of Service Attacks Basics 2602HWL-DxA Series User’s Guide Common IP Ports Types of DoS Attacks Firewalls 185 SYN Flood Icmp Vulnerability Illegal Commands NetBIOS and Smtp Traceroute Stateful Inspection Stateful Inspection Process Stateful Inspection on Your ZyXEL Device188 Firewalls TCP Security 13.5.4 UDP/ICMP SecurityFirewalls 189 190 Firewalls Guidelines for Enhancing Security with Your FirewallUpper Layer Protocols Security In General Packet Filtering Vs Firewall Packet FilteringFirewalls 191 192 Firewalls When To Use FilteringWhen To Use The Firewall Firewall Firewall Policies Overview Firewall ConfigurationAccess Methods Firewall Configuration 193 Security Ramifications Rule Checklist194 Firewall Configuration Rule Logic Overview Connection Direction Key Fields For Configuring Rules General Firewall Policy LAN to WAN RulesAlerts WAN to WAN / Router , WAN to LAN Firewall Configuration 197Firewall Rules Summary Firewall General General screen 198 Firewall Configuration Firewall Configuration 199 Configuring Firewall Rules Firewall Edit Rule 200 Firewall Configuration Edit Firewall Configuration 201Firewall Edit Rule Range Address , Subnet Address and Any Address 202 Firewall Configuration Customized ServicesConfiguring a Customized Service Customized Services Example Firewall Rule Firewall Configuration 203 Edit Custom Port Example Firewall Example Rules Firewall Example Edit Rule Destination Address Firewall Configuration 205 206 Firewall Configuration Firewall Example Edit Rule Select Customized Services Firewall Configuration 207 DoS ThresholdsThreshold Values 208 Firewall Configuration Half-Open SessionsTCP Maximum Incomplete and Blocking Time Configuring Firewall Thresholds Firewall Configuration 209Label Description Default Values Than the current Maximum Incomplete Low 210 Firewall Configuration2602HWL-DxA Series User’s Guide Firewall Threshold Not set Maximum Incomplete High to lower Content Filtering Content Filtering OverviewConfiguring Keyword Blocking Content Filter Keyword Configuring the Schedule Configuring Trusted Computers Content Filter ScheduleContent Filtering 213 2602HWL-DxA Series User’s Guide 214 Content Filtering Security Association Introduction to IPSecVPN Overview IPSec Data Confidentiality Data Origin AuthenticationIPSec Architecture VPN Applications Introduction to IPSec 217 EncapsulationIPSec Algorithms Key Management 218 Introduction to IPSec Transport ModeTunnel Mode IPSec and NAT ESP Security Protocol Mode NATVPN and NAT Introduction to IPSec 219 2602HWL-DxA Series User’s Guide 220 Introduction to IPSec IPSec Algorithms AH Authentication Header ProtocolVPN Screens 17.1 VPN/IPSec Overview My IP Address 2602HWL-DxA Series User’s Guide AH and ESP222 VPN Screens VPN Screens 223 VPN Setup ScreenSecure Gateway Address Dynamic Secure Gateway Address 224 VPN Screens VPN Setup Keep Alive VPN Screens 225IKE screen to 226 VPN Screens 17.7 VPN, NAT, and NAT Traversal ID Type and Content Remote DNS ServerVPN Screens 227 Peer ID TYPE= CONTENT= Local ID Type and Content FieldsPeer ID Type and Content Fields Local ID TYPE= CONTENT= ID Type and Content Examples Pre-Shared KeyEditing VPN Policies 230 VPN Screens Edit VPN Policies 0.0 VPN Screens 231 232 VPN Screens 2602HWL-DxA Series User’s Guide Edit VPN Policies Secure Gateway Address field description VPN Screens 233 234 VPN Screens IKE Phases VPN Screens 235 Negotiation Mode 236 VPN Screens Configuring Advanced IKE SettingsDiffie-Hellman DH Key Groups Perfect Forward Secrecy PFS VPN IKE VPN Screens 237 238 VPN Screens 2602HWL-DxA Series User’s Guide Advanced VPN Policies VPN Screens 239 Manual Key SetupConfiguring Manual Key Security Parameter Index SPI SPI 240 VPN Screens VPN Screens 241 2602HWL-DxA Series User’s Guide VPN Manual Key 242 VPN Screens Viewing SA Monitor VPN Screens 243 VPN SA Monitor 244 VPN Screens Configuring Global SettingTelecommuter VPN/IPSec Examples Telecommuters Sharing One VPN Rule Example Telecommuters Using Unique VPN Rules Example VPN Screens 245Fields Telecommuters Headquarters Telecommuters Headquarters 246 VPN Screens VPN Screens 247 VPN and Remote Management 2602HWL-DxA Series User’s Guide 248 VPN Screens Static Route 249 Configuring Static RouteStatic Route Static Route 250 Static Route Static Route Edit Static Route 251 Static Route Edit 2602HWL-DxA Series User’s Guide 252 Static Route Subnet-based Bandwidth Management Bandwidth ManagementBandwidth Management Overview Application-based Bandwidth Management Application and Subnet-based Bandwidth Management Example Application and Subnet-based Bandwidth ManagementScheduler Priority-based Scheduler Bandwidth Management 255 Maximize Bandwidth UsageFairness-based Scheduler Reserving Bandwidth for Non-Bandwidth Class Traffic 256 Bandwidth Management Maximize Bandwidth Usage ExamplePriority-based Allotment of Unused and Unbudgeted Bandwidth Maximize Bandwidth Usage Example Bandwidth Management Priorities Configuring SummaryBandwidth Management Priorities Fairness-based Allotment of Unused and Unbudgeted Bandwidth 258 Bandwidth Management Media Bandwidth Management Summary Bandwidth Management 259 Bandwidth Management Rule Setup Bandwidth Management Rule Configuration 260 Rule Configuration Bandwidth Management 261 Bandwidth Management Rule Configuration Bandwidth Management Monitor 262 Bandwidth Monitor Dynamic DNS Overview Dynamic DNS SetupConfiguring Dynamic DNS Dynamic DNS Setup 263 Dynamic DNS 264 Dynamic DNS Setup Dynamic DNS Setup 265 2602HWL-DxA Series User’s Guide 266 Dynamic DNS Setup Remote Management Limitations Remote Management ConfigurationRemote Management Configuration 267 Remote Management Overview System Timeout 21.2 WWWRemote Management and NAT Remote Management WWW Configuring TelnetRemote Management Configuration 269 Telnet 270 Remote Management Configuration Configuring FTP Snmp Remote Management Configuration 271 Supported MIBs 272 Remote Management Configuration Snmp Traps Configuring SnmpRemote Management Configuration 273 Snmp Traps Remote Management Snmp 274 Remote Management Configuration Configuring DNS Configuring IcmpRemote Management Configuration 275 Remote Management Icmp 276 Remote Management Configuration NAT Traversal How do I know if Im using UPnP?Universal Plug-and-Play UPnP Introducing Universal Plug and Play UPnP and ZyXEL Configuring UPnP Installing UPnP in Windows Example Configuring UPnPUniversal Plug-and-Play UPnP 279 Add/Remove Programs Windows Setup Communication Components Add/Remove Programs Windows Setup Communication Windows Optional Networking Components Wizard Network Connections 282 Universal Plug-and-Play UPnP Using UPnP in Windows XP Example Network Connections Internet Connection Properties Advanced Settings Add Internet Connection Properties Advanced Settings Internet Connection Status System Tray Icon 286 Universal Plug-and-Play UPnP Network Connections My Network Places Page System 289 General Setup and System NameGeneral Setup System 290 System System General Setup System 291 Time Setting 292 System 2602HWL-DxA Series User’s Guide System Time Setting System 293 2602HWL-DxA Series User’s Guide 294 System Alerts and Logs LogsLogs Overview Viewing the Logs 296 Logs Configuring Log Settings Logs 297 Log Settings 298 Logs 2602HWL-DxA Series User’s Guide Log Settings Logs 299 Smtp Error MessagesSmtp Error Messages Example E-mail Log 300 Logs Mail Log Example Tools Introduction Filename ConventionsTools 301 302 Tools File Maintenance Over WANFirmware Upgrade Screen Filename Conventions Firmware Upgrade 304 Tools Backup and Restore Tools 305 Backup ConfigurationRestore Configuration Restore Configuration Configuration Upload Successful Restart Reset to Factory Defaults 308 Tools Using FTP or Tftp to Back Up ConfigurationUsing the FTP Commands to Back Up Configuration FTP Command Configuration Backup Example Command Description Configuration Backup Using GUI-based FTP ClientsBackup Configuration Using Tftp General Commands for GUI-based FTP Clients General Commands for GUI-based Tftp Clients Using FTP or Tftp to Restore ConfigurationTftp Command Configuration Backup Example Configuration Backup Using GUI-based Tftp Clients Tools 311 FTP and Tftp Firmware and Configuration File UploadsRestore Using FTP Session Example FTP File Upload Command from the DOS Prompt Example FTP Session Example of Firmware File Upload Tftp File Upload312 Tools Tools 313 Tftp Upload Command Example 2602HWL-DxA Series User’s Guide 314 Tools Diagnostic 315 DiagnosticGeneral Diagnostic DSL Line Diagnostic 316 Diagnostic Diagnostic DSL Line Signal coming into the ZyXEL Device from the ISP Diagnostic 317 2602HWL-DxA Series User’s Guide 318 Diagnostic Troubleshooting Problems Starting Up the ZyXEL DeviceProblems with the LAN Internet light is Problems with the WANTroubleshooting the WAN 320 Troubleshooting Pop-up Windows, JavaScripts and Java Permissions Problems Accessing the ZyXEL DeviceTroubleshooting Accessing Your Device Troubleshooting 321 Internet Explorer Pop-up Blockers 322 Troubleshooting Internet Options Troubleshooting 323 324 Troubleshooting JavaScripts Troubleshooting 325 326 Troubleshooting Java Permissions Troubleshooting 327 328 Troubleshooting Security Settings Java Telephone Problems Troubleshooting TelephoneTroubleshooting 329 Outgoing Calls Problems With Multiple SIP Accounts Incoming Calls Incoming Calls Default 2602HWL-DxA Series User’s Guide 332 Troubleshooting Specification Tables Device SpecificationsAppendix a Product Specifications 333 2602HWL-DxA Series User’s Guide Firmware Specifications 334 Appendix a Product SpecificationsRIP I/RIP NAT/SUA Appendix a Product Specifications 335WPA2 WMM 2602HWL Series Power Adaptor Specifications 2602HWL Series Power Adaptor Specifications336 Appendix a Product Specifications United Kingdom Plug Standards Appendix a Product Specifications 337Page Connecting a Pots Splitter Telephone MicrofiltersAppendix B Splitters and Microfilters 339 ZyXEL Device With Isdn Connecting a Microfilter Windows 95/98/Me Appendix C Setting up Your Computer’s IP Address 341 342 Appendix C Setting up Your Computer’s IP Address Installing Components Appendix C Setting up Your Computer’s IP Address 343 Configuring Verifying Settings 344 Appendix C Setting up Your Computer’s IP AddressWindows 2000/NT/XP Windows XP Control Panel Windows XP Start Menu Windows XP Local Area Connection Properties Windows XP Control Panel Network Connections Properties Appendix C Setting up Your Computer’s IP Address 347 Windows XP Advanced TCP/IP Settings Windows XP Internet Protocol TCP/IP Properties 348 Appendix C Setting up Your Computer’s IP Address Macintosh OS 8/9 Appendix C Setting up Your Computer’s IP Address 349 Macintosh OS 8/9 TCP/IP Macintosh OS Macintosh OS X Network Appendix C Setting up Your Computer’s IP Address 351Page Introduction to IP Addresses IP Address Classes and HostsAppendix D IP Addresses and Subnetting 353 354 Appendix D IP Addresses and Subnetting IP Address Classes and Network IDClasses of IP Addresses Allowed IP Address Range By Class Alternative Subnet Mask Notation Subnet MasksSubnetting Natural Masks IP/SUBNET Mask Network Number Host ID Example Two SubnetsTwo Subnets Example 356 Appendix D IP Addresses and Subnetting Example Four Subnets SubnetAppendix D IP Addresses and Subnetting 357 Example Eight Subnets 2602HWL-DxA Series User’s Guide Subnet358 Appendix D IP Addresses and Subnetting Appendix D IP Addresses and Subnetting 359 Subnetting With Class a and Class B NetworksEight Subnets Class C Subnet Planning 360 Appendix D IP Addresses and Subnetting Class B Subnet Planning Wireless LAN Topologies Ad-hoc Wireless LAN ConfigurationAppendix E Wireless LANs 361 362 Appendix E Wireless LANs Basic Service Set Channel Appendix E Wireless LANs 363 Fragmentation Threshold 364 Appendix E Wireless LANs Preamble Type Appendix E Wireless LANs 365 366 Appendix E Wireless LANs IeeeTypes of Radius Messages Types of Authentication Appendix E Wireless LANs 367EAP-MD5 Message-Digest Algorithm Peap Protected EAP EAP-TTLS Tunneled Transport Layer Service368 Appendix E Wireless LANs EAP-TLS Transport Layer Security Comparison of EAP Authentication Types Appendix E Wireless LANs 369EAP-MD5 EAP-TLS EAP-TTLS Peap Leap Wireless Security Relational Matrix 370 Appendix E Wireless LANsSecurity Parameters Summary Examples of Services Appendix F Services 371Name Protocol Ports Description 372 Appendix F Services 2602HWL-DxA Series User’s Guide Examples of Services Appendix F Services 373 374 Appendix F Services Tftp UDPVdolive TCP Command Description Sys Firewall CommandsSys Firewall Commands Appendix G Firewall Commands 375Page Ideal Setup Triangle Route ProblemAppendix H Triangle Route 377 Triangle Route Solutions IP Aliasing378 Appendix H Triangle Route Gateways on the WAN Side Appendix H Triangle Route 379 Gateways on the WAN SidePage System Maintenance Logs Appendix I Log Descriptions 381LOG Message Description 382 Appendix I Log Descriptions 2602HWL-DxA Series User’s Guide System Maintenance LogsSystem Error Logs Access Control Logs TCP Maximum Incomplete in the Firewall Attack Alerts screen 2602HWL-DxA Series User’s Guide TCP Reset LogsPacket Filter Logs Appendix I Log Descriptions 383 384 Appendix I Log Descriptions 2602HWL-DxA Series User’s Guide Icmp Logs Appendix I Log Descriptions 385 Content Filtering LogsSystem forwarded web content Attack Logs 2602HWL-DxA Series User’s Guide Attack Logs 802.1X Logs386 Appendix I Log Descriptions Packet Direction Description ACL Setting NotesIcmp Notes Appendix I Log Descriptions 387 2602HWL-DxA Series User’s Guide Icmp Notes Syslog Logs388 Appendix I Log Descriptions Appendix I Log Descriptions 389 FSM Logs Caller SideFSM Logs Callee Side Pstn Logs 390 Appendix I Log Descriptions Log CommandsConfiguring What You Want the ZyXEL Device to Log RFC-2408 Isakmp Payload Types Appendix I Log Descriptions 391 Displaying Logs 392 Appendix I Log Descriptions Log Command Example Command Syntax Command UsageAppendix J Command Interpreter 393 Page Configuration Text File Format Internal Sptgen OverviewAppendix K Internal Sptgen 395 396 Appendix K Internal Sptgen Internal Sptgen FTP Download Example Internal Sptgen FTP Upload Example Example Internal Sptgen ScreensAppendix K Internal Sptgen 397 Menu 1 General Setup 398 Appendix K Internal SptgenAbbreviation Meaning Dhcp Appendix K Internal Sptgen 399 400 Appendix K Internal Sptgen Appendix K Internal Sptgen 401 Menu 4 Internet Access Setup 402 Appendix K Internal Sptgen 2602HWL-DxA Series User’s Guide Menu 4 Internet Access Setup Appendix K Internal Sptgen 403 404 Appendix K Internal Sptgen 2602HWL-DxA Series User’s Guide Menu Appendix K Internal Sptgen 405 406 Appendix K Internal Sptgen Appendix K Internal Sptgen 407 Menu 15 SUA Server Setup 408 Appendix K Internal Sptgen 2602HWL-DxA Series User’s Guide Menu 15 SUA Server Setup Appendix K Internal Sptgen 409 Menu 21.1 Filter Set #1 410 Appendix K Internal Sptgen 2602HWL-DxA Series User’s Guide Menu 21.1 Filter Set #1 Appendix K Internal Sptgen 411 412 Appendix K Internal Sptgen Appendix K Internal Sptgen 413 2602HWL-DxA Series User’s Guide Menu 21.1 Filer Set #2 414 Appendix K Internal Sptgen Appendix K Internal Sptgen 415 416 Appendix K Internal Sptgen Appendix K Internal Sptgen 417 Menu 23 System Menus 2602HWL-DxA Series User’s Guide Menu 23 System Menus Menu 24.11 Remote Management Control418 Appendix K Internal Sptgen FIN PVA Input Command ExamplesCommand Examples Appendix K Internal Sptgen 419Page Index 421 Index 422 Index DbpskFCC Http 182, 183 Index 423 424 Index ItspOfdm QoS 41 Index 425 SIP URI 426 Index Vlan ID Index 427

P-2602H(W)(L)-DxA Series User’s Guide

Chapter 14

Firewall Configuration

193

Chapter 15

Content Filtering

211

Chapter 16

Introduction to IPSec

215