Firewall Configuration | ZyXEL Communications P-2602 specs

P-2602H(W)(L)-DxA Series User’s Guide

CH A P T E R 14

Firewall Configuration

This chapter shows you how to enable and configure the ZyXEL Device firewall.

14.1 Access Methods

The web configurator is, by far, the most comprehensive firewall configuration tool your ZyXEL Device has to offer. For this reason, it is recommended that you configure your firewall using the web configurator. CLI commands provide limited configuration options and are only recommended for advanced users.

14.2 Firewall Policies Overview

Firewall rules are grouped based on the direction of travel of packets to which they apply:

•	LAN to LAN/ Router	•	WAN to LAN
•	LAN to WAN	•	WAN to WAN/ Router

Note: The LAN includes both the LAN port and the WLAN.

By default, the ZyXEL Device’s stateful packet inspection allows packets traveling in the following directions:

•LAN to LAN/ Router

This allows computers on the LAN to manage the ZyXEL Device and communicate between networks or subnets connected to the LAN interface.

•LAN to WAN

By default, the ZyXEL Device’s stateful packet inspection drops packets traveling in the following directions:

•WAN to LAN

•WAN to WAN/ Router

This prevents computers on the WAN from using the ZyXEL Device as a gateway to communicate with other computers on the WAN and/or managing the ZyXEL Device.

You may define additional rules and sets or modify existing ones but please exercise extreme caution in doing so.

Chapter 14 Firewall Configuration

193

Image 193

ZyXEL Communications P-2602 manual Access Methods, Firewall Policies Overview, Firewall Configuration 193

Contents

2602HWL Series Page Disclaimer CopyrightTrademarks 2602HWL-DxA Series User’s Guide Viewing Certifications CertificationsCertifications Safety Warnings Safety Warnings ZyXEL Limited Warranty ZyXEL Limited Warranty Customer Support Customer Support Norway Table of Contents Chapter VoIP Wizard And Example Chapter LAN Setup 107 141 156 Chapter Phone Usage 179 Chapter Firewall Configuration 193 Chapter VPN Screens 221 Chapter Static Route 249 Chapter System 289 Chapter Diagnostic 315 Appendix B Splitters and Microfilters 339 Appendix F Services 371 Appendix G Firewall Commands 375 Index 421 List of Figures List of Figures Bandwidth Management Wizard General Information Firewall Example Edit Rule Destination Address 205 Telecommuters Using Unique VPN Rules Example 246 FTP Session Example of Firmware File Upload 312 Peer-to-Peer Communication in an Ad-hoc Network 361 List of Tables List of Tables 139 228 333 389 2602HWL-DxA Series User’s Guide List of Tables About This Users Guide PrefaceRelated Documentation User Guide Feedback Dslam Graphics Icons Key Introducing the P-2602HWL-Dx Series Getting To Know the ZyXEL DeviceModels Covered Getting To Know the ZyXEL Device Built-in Switch FeaturesHigh Speed Internet Access Adsl Standards Auto Firmware Upgrade Zero Configuration Internet AccessAny IP Auto Provisioning Network Address Translation NAT Content FilteringMedia Bandwidth Management Dynamic Jitter Buffer QoS Quality of Service Echo CancellationOther PPPoE Features Universal Plug and Play UPnP Wireless Features W models only Wireless LAN MAC Address Filtering Ieee 802.11g+ Wireless LANWi-Fi Protected Access External Antenna Making Calls via Internet Telephony Service Provider Internet AccessApplications for the ZyXEL Device Internet Single User Account Make Peer-to-peer Calls Firewall for Secure Broadband Internet Access Firewall Application LAN to LAN Application LEDs LED Color Status Description PowerEthernet Wlan LED Color Status Description DSL 2602HWL-DxA Series User’s Guide LEDsInternet Phone 1 Web Configurator Overview Introducing the Web ConfiguratorAccessing the Web Configurator Introducing the Web Configurator Password Screen Using The Reset Button Reset Button Title Bar Web Configurator Main Screen Navigation Panel Web Configurator Icons in the Title BarNavigation Panel Summary Icon Description VPN 2602HWL-DxA Series User’s Guide Navigation Panel SummaryMgmt Status Bar Main WindowPage Internet Access Wizard Setup Internet and Wireless Setup WizardInternet and Wireless Setup Wizard Introduction Wizard Welcome Auto-Detection PPPoE Manual Configuration PPPoE Label DescriptionVPI VCI Internet Connection with PPPoE Internet Connection with RFC Internet Connection with PPPoA Internet Connection with Enet Encap Connection Test Failed-1 Connection Test Successful Wireless Connection Wizard Setup Wireless LAN Wireless LAN Setup Wizard Manually Assign a WPA key Manually Assign a WPA key Internet and Wireless Setup Wizard Manually Assign a WPA key Manually Assign a WEP key Manually Assign a WEP key Wireless LAN Setup 2602HWL-DxA Series User’s Guide VoIP Wizard And Example VoIP Wizard SetupVoIP Wizard And Example Wizard Welcome VoIP Wizard And Example Sample SIP Account Information VoIP Wizard Configuration SIP Registration Test 2602HWL-DxA Series User’s Guide VoIP Wizard Configuration VoIP Wizard Fail 2602HWL-DxA Series User’s Guide VoIP Wizard And Example Media Bandwidth Management Setup Services Predefined Media Bandwidth Management ServicesService Description Bandwidth Management Wizard Tftp Bandwidth Management Wizard Setup Click Bandwidth Management Setup Following fields describe the label in this screen Bandwidth Management Wizard Complete 2602HWL-DxA Series User’s Guide Bandwidth Management Wizard Status Screen Status Screens VPI/VCI Status ScreenDhcp Ssid 253 This in Maintenance System Time Setting Can change these in VoIP SIP SIP Settings SettingsAny IP Table 2602HWL-DxA Series User’s Guide Status Screen Packet Statistics Wlan Status W models onlyAny IP Table Packet Statistics VoIP Statistics Status Screens VoIP Statistics VoIP Statistics Interval 2602HWL-DxA Series User’s Guide Status Screens WAN Overview WAN SetupEncapsulation Enet Encap VPI and VCI Multiplexing Nailed-Up Connection PPP IP Address Assignment6 NAT Traffic Shaping Metric Constant Bit Rate CBR ATM Traffic ClassesVariable Bit Rate VBR Internet Access Setup Zero Configuration Internet AccessUnspecified Bit Rate UBR Encap or PPPoE Internet Access Setup 100 WAN Setup 2602HWL-DxA Series User’s Guide Internet Access SetupEnet Encap Enet Encap in the Encapsulation field WAN Setup 101 Advanced Internet Access Setup WAN More Connections 102 WAN Setup Traffic Redirect WAN Setup 103 Traffic Redirect Example WAN Backup Setup WAN Backup SetupWAN Setup 105 106 WAN Setup 2602HWL-DxA Series User’s Guide WAN Backup Setup LAN Overview LAN SetupLANs, WANs and the ZyXEL Device IP Pool Setup Dhcp Setup108 LAN Setup DNS Server Address DNS Server Address Assignment LAN Setup 109IP Address and Subnet Mask 110 LAN Setup RIP SetupPrivate IP Addresses Multicast LAN Setup 111Any IP How Any IP Works 112 LAN Setup Configuring Advanced LAN Setup Configuring LAN IPLAN Setup 113 LAN TCP/IP TCP/IP 114 LAN Setup Dhcp Setup Dhcp SetupLAN Setup 115 LAN Client List 2602HWL-DxA Series User’s Guide Dhcp Setup LAN IP Alias LAN Setup 117LAN Client List LAN IP Alias Physical Network & Partitioned Logical Networks LAN Setup 119 2602HWL-DxA Series User’s Guide 120 LAN Setup Wireless Network Overview Wireless LANWireless LAN 121 122 Wireless LAN Wireless Security OverviewSsid MAC Address Filter Types of Encryption for Each Type of Authentication User AuthenticationWireless LAN 123 Weakest Strongest No Authentication Radius Server Quality of Service QoS Wireless Performance Overview124 Wireless LAN One-Touch Intelligent Security Technology Otist Wireless LAN 125 Additional Wireless TermsGeneral Wlan Screen Term Description No Security 126 Wireless LAN WEP Encryption Screen Wireless LAN 127 3 WPA2-PSK 128 Wireless LAN Wireless LAN 129 Wireless WPA2-PSK 130 Wireless LAN 4 WPA2 Authentication Screen Wireless LAN 131 Wireless LAN Advanced Setup 132 Wireless LAN Wireless LAN Advanced802.11g Only mode RTS/CTS Setup Key Type a key password 8 Ascii characters long Wireless LAN 133Security Mode to WPA-PSK , and enter the Pre-Shared Key Otist Screen Example Wireless Client Otist Screen Start OTIST? Otist In Progress on the Wireless Device MAC Filter 136 Wireless LAN QoS Screen Wireless LAN 137 2602HWL-DxA Series User’s Guide Wireless LAN QoS Application Priority ConfigurationApplication Priority Configuration screen Policy Wireless LAN 139 Application Priority ConfigurationFTP WWW 2602HWL-DxA Series User’s Guide 140 Wireless LAN NAT Overview Network Address Translation NAT ScreensNAT Definitions NAT Definitions How NAT Works What NAT Does NAT Mapping Types NAT ApplicationNetwork Address Translation NAT Screens 143 SUA Single User Account Versus NAT NAT General SetupNAT Mapping Types 144 Network Address Translation NAT Screens Network Address Translation NAT Screens 145 Port Forwarding Port Forwarding Services and Port Numbers Default Server IP AddressConfiguring Servers Behind Port Forwarding Example Network Address Translation NAT Screens 147 Configuring Port Forwarding 2602HWL-DxA Series User’s Guide Port Forwarding Port Forwarding Rule Edit148 Network Address Translation NAT Screens SIP ALG 2602HWL-DxA Series User’s Guide Port Forwarding Rule SetupNetwork Address Translation NAT Screens 149 Page Introduction to VoIP Voice11.2 SIP SIP Identities SIP Call Progression SIP Service DomainSIP Servers SIP Call Progression SIP Proxy Server SIP User Agent SIP Redirect Server SIP Settings ScreenSIP Register Server 154 Voice Server Port field Voice 155 Voice Coding Pulse Code Modulation11.3.1 RTP 11.5.1 G.711 MWI Message Waiting Indication Pstn Call Setup SignalingCustom Tones IVR Recording Custom Tones Listening to Custom Tones Advanced SIP Setup ScreenDeleting Custom Tones 158 Voice VoIP SIP Settings Advanced Voice 159 160 Voice VoIP SIP Settings Advanced Voice 161 Type Of Service ToS Quality of Service QoSDiffServ Dscp and Per-Hop Behavior SIP QoS Screen VlanVoice 163 Phone Echo CancellationPstn Line L models only Voice Activity Detection/Silence Suppression Voice 165 Analog Phone ScreenSIP1 SIP2 2602HWL-DxA Series User’s Guide Phone Analog Phone Advanced Analog Phone Setup Screen166 Voice Voice 167 Common Phone Settings ScreenDialing Interval Select in VoIP Phone Analog Phone Europe Type Supplementary Phone Services Supplementary Phone Services OverviewEuropean Flash Key Commands Flash Key European Call Waiting European Call HoldEuropean Call Transfer Voice 169 USA Flash Key Commands USA Type Supplementary ServicesEuropean Three-Way Conference USA Call Hold USA Call Waiting Phone Region ScreenUSA Call Transfer USA Three-Way Conference Peer-to-Peer Calls Speed Dial172 Voice Voice 173 Speed Dial ScreenDial Phone Book section 2602HWL-DxA Series User’s Guide Phone Book Speed Dial Incoming Call Policy Screen174 Voice Voice 175 Phone Book Incoming Call Policy 176 Voice Pstn Line Screen L models onlyCondition Incoming Call Number to the Forward to Number Voice 177 Pstn Line General 2602HWL-DxA Series User’s Guide 178 Voice Phone Usage Using Speed Dial to Dial a Telephone NumberDialing a Telephone Number Internal Calls 180 Phone Usage Auto Firmware Upgrade Firewall Overview FirewallsTypes of Firewalls Packet Filtering Firewalls Application-level Firewalls Introduction to ZyXEL’s FirewallStateful Inspection Firewalls 182 Firewalls Denial of Service Attacks Denial of ServiceBasics Firewalls 183 2602HWL-DxA Series User’s Guide Common IP Ports Types of DoS Attacks Firewalls 185 SYN Flood Icmp Vulnerability Illegal Commands NetBIOS and Smtp Traceroute Stateful Inspection Stateful Inspection on Your ZyXEL Device Stateful Inspection Process188 Firewalls 13.5.4 UDP/ICMP Security TCP SecurityFirewalls 189 Upper Layer Protocols Guidelines for Enhancing Security with Your FirewallSecurity In General 190 Firewalls Packet Filtering Packet Filtering Vs FirewallFirewalls 191 When To Use The Firewall When To Use FilteringFirewall 192 Firewalls Access Methods Firewall ConfigurationFirewall Configuration 193 Firewall Policies Overview 194 Firewall Configuration Rule ChecklistRule Logic Overview Security Ramifications Connection Direction Key Fields For Configuring Rules LAN to WAN Rules General Firewall PolicyAlerts Firewall Rules Summary Firewall Configuration 197Firewall General WAN to WAN / Router , WAN to LAN General screen 198 Firewall Configuration Firewall Configuration 199 Configuring Firewall Rules Firewall Edit Rule 200 Firewall Configuration Firewall Edit Rule Firewall Configuration 201Range Address , Subnet Address and Any Address Edit Configuring a Customized Service Customized ServicesCustomized Services 202 Firewall Configuration Example Firewall Rule Firewall Configuration 203 Edit Custom Port Example Firewall Example Rules Firewall Example Edit Rule Destination Address Firewall Configuration 205 206 Firewall Configuration Firewall Example Edit Rule Select Customized Services DoS Thresholds Firewall Configuration 207Threshold Values Half-Open Sessions 208 Firewall ConfigurationTCP Maximum Incomplete and Blocking Time Firewall Configuration 209 Configuring Firewall ThresholdsLabel Description Default Values 2602HWL-DxA Series User’s Guide Firewall Threshold 210 Firewall ConfigurationNot set Maximum Incomplete High to lower Than the current Maximum Incomplete Low Content Filtering Overview Content FilteringConfiguring Keyword Blocking Content Filter Keyword Configuring the Schedule Content Filter Schedule Configuring Trusted ComputersContent Filtering 213 2602HWL-DxA Series User’s Guide 214 Content Filtering VPN Overview Introduction to IPSecIPSec Security Association IPSec Architecture Data Origin AuthenticationVPN Applications Data Confidentiality IPSec Algorithms EncapsulationKey Management Introduction to IPSec 217 Tunnel Mode Transport ModeIPSec and NAT 218 Introduction to IPSec VPN and NAT Security Protocol Mode NATIntroduction to IPSec 219 ESP 2602HWL-DxA Series User’s Guide 220 Introduction to IPSec VPN Screens AH Authentication Header Protocol17.1 VPN/IPSec Overview IPSec Algorithms 2602HWL-DxA Series User’s Guide AH and ESP My IP Address222 VPN Screens Secure Gateway Address VPN Setup ScreenDynamic Secure Gateway Address VPN Screens 223 224 VPN Screens VPN Setup VPN Screens 225 Keep AliveIKE screen to 226 VPN Screens 17.7 VPN, NAT, and NAT Traversal Remote DNS Server ID Type and ContentVPN Screens 227 Peer ID Type and Content Fields Local ID Type and Content FieldsLocal ID TYPE= CONTENT= Peer ID TYPE= CONTENT= Pre-Shared Key ID Type and Content ExamplesEditing VPN Policies 230 VPN Screens Edit VPN Policies 0.0 VPN Screens 231 232 VPN Screens 2602HWL-DxA Series User’s Guide Edit VPN Policies Secure Gateway Address field description VPN Screens 233 234 VPN Screens IKE Phases VPN Screens 235 Negotiation Mode Diffie-Hellman DH Key Groups Configuring Advanced IKE SettingsPerfect Forward Secrecy PFS 236 VPN Screens VPN IKE VPN Screens 237 238 VPN Screens 2602HWL-DxA Series User’s Guide Advanced VPN Policies Configuring Manual Key Manual Key SetupSecurity Parameter Index SPI VPN Screens 239 SPI 240 VPN Screens VPN Screens 241 2602HWL-DxA Series User’s Guide VPN Manual Key 242 VPN Screens Viewing SA Monitor VPN Screens 243 VPN SA Monitor Telecommuter VPN/IPSec Examples Configuring Global SettingTelecommuters Sharing One VPN Rule Example 244 VPN Screens VPN Screens 245 Telecommuters Using Unique VPN Rules ExampleFields Telecommuters Headquarters Telecommuters Headquarters 246 VPN Screens VPN Screens 247 VPN and Remote Management 2602HWL-DxA Series User’s Guide 248 VPN Screens Static Route Configuring Static RouteStatic Route Static Route 249 250 Static Route Static Route Edit Static Route 251 Static Route Edit 2602HWL-DxA Series User’s Guide 252 Static Route Bandwidth Management Overview Bandwidth ManagementApplication-based Bandwidth Management Subnet-based Bandwidth Management Scheduler Application and Subnet-based Bandwidth ManagementPriority-based Scheduler Application and Subnet-based Bandwidth Management Example Fairness-based Scheduler Maximize Bandwidth UsageReserving Bandwidth for Non-Bandwidth Class Traffic Bandwidth Management 255 Priority-based Allotment of Unused and Unbudgeted Bandwidth Maximize Bandwidth Usage ExampleMaximize Bandwidth Usage Example 256 Bandwidth Management Bandwidth Management Priorities Configuring SummaryFairness-based Allotment of Unused and Unbudgeted Bandwidth Bandwidth Management Priorities 258 Bandwidth Management Media Bandwidth Management Summary Bandwidth Management 259 Bandwidth Management Rule Setup Bandwidth Management Rule Configuration 260 Rule Configuration Bandwidth Management 261 Bandwidth Management Rule Configuration Bandwidth Management Monitor 262 Bandwidth Monitor Configuring Dynamic DNS Dynamic DNS SetupDynamic DNS Setup 263 Dynamic DNS Overview Dynamic DNS 264 Dynamic DNS Setup Dynamic DNS Setup 265 2602HWL-DxA Series User’s Guide 266 Dynamic DNS Setup Remote Management Configuration 267 Remote Management ConfigurationRemote Management Overview Remote Management Limitations 21.2 WWW System TimeoutRemote Management and NAT Remote Management Configuration 269 Configuring TelnetTelnet Remote Management WWW 270 Remote Management Configuration Configuring FTP Snmp Remote Management Configuration 271 Supported MIBs 272 Remote Management Configuration Remote Management Configuration 273 Configuring SnmpSnmp Traps Snmp Traps Remote Management Snmp 274 Remote Management Configuration Configuring Icmp Configuring DNSRemote Management Configuration 275 Remote Management Icmp 276 Remote Management Configuration Universal Plug-and-Play UPnP How do I know if Im using UPnP?Introducing Universal Plug and Play NAT Traversal UPnP and ZyXEL Configuring UPnP Configuring UPnP Installing UPnP in Windows ExampleUniversal Plug-and-Play UPnP 279 Add/Remove Programs Windows Setup Communication Components Add/Remove Programs Windows Setup Communication Windows Optional Networking Components Wizard Network Connections 282 Universal Plug-and-Play UPnP Using UPnP in Windows XP Example Network Connections Internet Connection Properties Advanced Settings Add Internet Connection Properties Advanced Settings Internet Connection Status System Tray Icon 286 Universal Plug-and-Play UPnP Network Connections My Network Places Page General Setup General Setup and System NameSystem System 289 290 System System General Setup System 291 Time Setting 292 System 2602HWL-DxA Series User’s Guide System Time Setting System 293 2602HWL-DxA Series User’s Guide 294 System Logs Overview LogsViewing the Logs Alerts and Logs 296 Logs Configuring Log Settings Logs 297 Log Settings 298 Logs 2602HWL-DxA Series User’s Guide Log Settings Smtp Error Messages Smtp Error MessagesExample E-mail Log Logs 299 300 Logs Mail Log Example Introduction Filename Conventions ToolsTools 301 Firmware Upgrade Screen File Maintenance Over WANFilename Conventions 302 Tools Firmware Upgrade 304 Tools Backup and Restore Restore Configuration Backup ConfigurationRestore Configuration Tools 305 Configuration Upload Successful Restart Reset to Factory Defaults Using the FTP Commands to Back Up Configuration Using FTP or Tftp to Back Up ConfigurationFTP Command Configuration Backup Example 308 Tools Backup Configuration Using Tftp Configuration Backup Using GUI-based FTP ClientsGeneral Commands for GUI-based FTP Clients Command Description Tftp Command Configuration Backup Example Using FTP or Tftp to Restore ConfigurationConfiguration Backup Using GUI-based Tftp Clients General Commands for GUI-based Tftp Clients Restore Using FTP Session Example FTP and Tftp Firmware and Configuration File UploadsFTP File Upload Command from the DOS Prompt Example Tools 311 Tftp File Upload FTP Session Example of Firmware File Upload312 Tools Tools 313 Tftp Upload Command Example 2602HWL-DxA Series User’s Guide 314 Tools General Diagnostic DiagnosticDSL Line Diagnostic Diagnostic 315 316 Diagnostic Diagnostic DSL Line Signal coming into the ZyXEL Device from the ISP Diagnostic 317 2602HWL-DxA Series User’s Guide 318 Diagnostic Problems Starting Up the ZyXEL Device TroubleshootingProblems with the LAN Troubleshooting the WAN Problems with the WAN320 Troubleshooting Internet light is Troubleshooting Accessing Your Device Problems Accessing the ZyXEL DeviceTroubleshooting 321 Pop-up Windows, JavaScripts and Java Permissions Internet Explorer Pop-up Blockers 322 Troubleshooting Internet Options Troubleshooting 323 324 Troubleshooting JavaScripts Troubleshooting 325 326 Troubleshooting Java Permissions Troubleshooting 327 328 Troubleshooting Security Settings Java Troubleshooting Telephone Telephone ProblemsTroubleshooting 329 Outgoing Calls Problems With Multiple SIP Accounts Incoming Calls Incoming Calls Default 2602HWL-DxA Series User’s Guide 332 Troubleshooting Device Specifications Specification TablesAppendix a Product Specifications 333 334 Appendix a Product Specifications 2602HWL-DxA Series User’s Guide Firmware SpecificationsRIP I/RIP WPA2 Appendix a Product Specifications 335WMM NAT/SUA 2602HWL Series Power Adaptor Specifications 2602HWL Series Power Adaptor Specifications336 Appendix a Product Specifications United Kingdom Plug Standards Appendix a Product Specifications 337Page Telephone Microfilters Connecting a Pots SplitterAppendix B Splitters and Microfilters 339 ZyXEL Device With Isdn Connecting a Microfilter Windows 95/98/Me Appendix C Setting up Your Computer’s IP Address 341 342 Appendix C Setting up Your Computer’s IP Address Installing Components Appendix C Setting up Your Computer’s IP Address 343 Configuring 344 Appendix C Setting up Your Computer’s IP Address Verifying SettingsWindows 2000/NT/XP Windows XP Control Panel Windows XP Start Menu Windows XP Local Area Connection Properties Windows XP Control Panel Network Connections Properties Appendix C Setting up Your Computer’s IP Address 347 Windows XP Advanced TCP/IP Settings Windows XP Internet Protocol TCP/IP Properties 348 Appendix C Setting up Your Computer’s IP Address Macintosh OS 8/9 Appendix C Setting up Your Computer’s IP Address 349 Macintosh OS 8/9 TCP/IP Macintosh OS Macintosh OS X Network Appendix C Setting up Your Computer’s IP Address 351Page IP Address Classes and Hosts Introduction to IP AddressesAppendix D IP Addresses and Subnetting 353 Classes of IP Addresses IP Address Classes and Network IDAllowed IP Address Range By Class 354 Appendix D IP Addresses and Subnetting Subnetting Subnet MasksNatural Masks Alternative Subnet Mask Notation Two Subnets Example Example Two Subnets356 Appendix D IP Addresses and Subnetting IP/SUBNET Mask Network Number Host ID Subnet Example Four SubnetsAppendix D IP Addresses and Subnetting 357 2602HWL-DxA Series User’s Guide Subnet Example Eight Subnets358 Appendix D IP Addresses and Subnetting Eight Subnets Subnetting With Class a and Class B NetworksClass C Subnet Planning Appendix D IP Addresses and Subnetting 359 360 Appendix D IP Addresses and Subnetting Class B Subnet Planning Ad-hoc Wireless LAN Configuration Wireless LAN TopologiesAppendix E Wireless LANs 361 362 Appendix E Wireless LANs Basic Service Set Channel Appendix E Wireless LANs 363 Fragmentation Threshold 364 Appendix E Wireless LANs Preamble Type Appendix E Wireless LANs 365 Ieee 366 Appendix E Wireless LANsTypes of Radius Messages Appendix E Wireless LANs 367 Types of AuthenticationEAP-MD5 Message-Digest Algorithm 368 Appendix E Wireless LANs EAP-TTLS Tunneled Transport Layer ServiceEAP-TLS Transport Layer Security Peap Protected EAP Appendix E Wireless LANs 369 Comparison of EAP Authentication TypesEAP-MD5 EAP-TLS EAP-TTLS Peap Leap 370 Appendix E Wireless LANs Wireless Security Relational MatrixSecurity Parameters Summary Appendix F Services 371 Examples of ServicesName Protocol Ports Description 372 Appendix F Services 2602HWL-DxA Series User’s Guide Examples of Services Appendix F Services 373 Tftp UDP 374 Appendix F ServicesVdolive TCP Sys Firewall Commands Sys Firewall CommandsAppendix G Firewall Commands 375 Command DescriptionPage Triangle Route Problem Ideal SetupAppendix H Triangle Route 377 IP Aliasing Triangle Route Solutions378 Appendix H Triangle Route Gateways on the WAN Side Appendix H Triangle Route 379 Gateways on the WAN SidePage Appendix I Log Descriptions 381 System Maintenance LogsLOG Message Description System Error Logs 2602HWL-DxA Series User’s Guide System Maintenance LogsAccess Control Logs 382 Appendix I Log Descriptions Packet Filter Logs 2602HWL-DxA Series User’s Guide TCP Reset LogsAppendix I Log Descriptions 383 TCP Maximum Incomplete in the Firewall Attack Alerts screen 384 Appendix I Log Descriptions 2602HWL-DxA Series User’s Guide Icmp Logs System forwarded web content Content Filtering LogsAttack Logs Appendix I Log Descriptions 385 802.1X Logs 2602HWL-DxA Series User’s Guide Attack Logs386 Appendix I Log Descriptions Icmp Notes ACL Setting NotesAppendix I Log Descriptions 387 Packet Direction Description Syslog Logs 2602HWL-DxA Series User’s Guide Icmp Notes388 Appendix I Log Descriptions FSM Logs Callee Side FSM Logs Caller SidePstn Logs Appendix I Log Descriptions 389 Configuring What You Want the ZyXEL Device to Log Log CommandsRFC-2408 Isakmp Payload Types 390 Appendix I Log Descriptions Appendix I Log Descriptions 391 Displaying Logs 392 Appendix I Log Descriptions Log Command Example Command Usage Command SyntaxAppendix J Command Interpreter 393 Page Internal Sptgen Overview Configuration Text File FormatAppendix K Internal Sptgen 395 396 Appendix K Internal Sptgen Internal Sptgen FTP Download Example Example Internal Sptgen Screens Internal Sptgen FTP Upload ExampleAppendix K Internal Sptgen 397 398 Appendix K Internal Sptgen Menu 1 General SetupAbbreviation Meaning Dhcp Appendix K Internal Sptgen 399 400 Appendix K Internal Sptgen Appendix K Internal Sptgen 401 Menu 4 Internet Access Setup 402 Appendix K Internal Sptgen 2602HWL-DxA Series User’s Guide Menu 4 Internet Access Setup Appendix K Internal Sptgen 403 404 Appendix K Internal Sptgen 2602HWL-DxA Series User’s Guide Menu Appendix K Internal Sptgen 405 406 Appendix K Internal Sptgen Appendix K Internal Sptgen 407 Menu 15 SUA Server Setup 408 Appendix K Internal Sptgen 2602HWL-DxA Series User’s Guide Menu 15 SUA Server Setup Appendix K Internal Sptgen 409 Menu 21.1 Filter Set #1 410 Appendix K Internal Sptgen 2602HWL-DxA Series User’s Guide Menu 21.1 Filter Set #1 Appendix K Internal Sptgen 411 412 Appendix K Internal Sptgen Appendix K Internal Sptgen 413 2602HWL-DxA Series User’s Guide Menu 21.1 Filer Set #2 414 Appendix K Internal Sptgen Appendix K Internal Sptgen 415 416 Appendix K Internal Sptgen Appendix K Internal Sptgen 417 Menu 23 System Menus Menu 24.11 Remote Management Control 2602HWL-DxA Series User’s Guide Menu 23 System Menus418 Appendix K Internal Sptgen Command Examples Command ExamplesAppendix K Internal Sptgen 419 FIN PVA InputPage Index 421 Index Dbpsk 422 IndexFCC Http 182, 183 Index 423 Itsp 424 IndexOfdm QoS 41 Index 425 SIP URI 426 Index Vlan ID Index 427