Manuals / Brands / Computer Equipment / Network Card / ZyXEL Communications / Computer Equipment / Network Card

ZyXEL Communications P-2602H manual 226

1 465

Download 465 pages, 13.97 Mb

Chapter 15 Firewall Configuration

226
226	P-2602H(W)(L)-DxA User’s Guide

Contents

User’s Guide Page About This User's Guide Document Conventions Page Safety Warnings Page Page Contents Overview Page Table of Contents Page Page Page Page Page Page Page Page Part IV: Maintenance and Troubleshooting Page Page List of Figures Page Page Page Page Page Page Page List of Tables Page Page Page Page Page PART Introduction Page Introducing the ZyXEL Device 1.1 Overview 1.2Ways to Manage the ZyXEL Device 1.3Good Habits for Managing the ZyXEL Device 1.4Applications for the ZyXEL Device 1.4.3 Make Peer-to-peerCalls 1.4.4 Firewall for Secure Broadband Internet Access 1.4.5 LAN to LAN Application 1.5 LEDs 1.6 The RESET Button Page Introducing the Web Configurator 2.1 Web Configurator Overview Page Page 2.2 Web Configurator Main Screen 2.2.2 Navigation Panel Page 2.2.3 Main Window 2.2.4 Status Bar Page Wizard Page Internet and Wireless Setup Wizard 3.1 Introduction 3.2Internet Access Wizard Setup Page Page 3.2.1Manual Configuration Page Page Page Page 3.3 Wireless Connection Wizard Setup Page Page 3.3.1 Manually Assign a WPA key 3.3.2 Manually Assign a WEP Key Page Page VoIP Wizard And Example 4.1 Introduction 4.2VoIP Wizard Setup Page Page Page Page Page Bandwidth Management Wizard 5.1 Introduction 5.2Bandwidth Management Wizard Setup Page Page Page ART Advanced Page Status Screens 6.1 Status Screen Page Page 6.2 Any IP Table 6.3 WLAN Status (“W” models only) 6.4 Packet Statistics Page 6.5 VoIP Statistics Page Page Page WAN Setup 7.1 WAN Overview 7.1.2 Multiplexing 7.1.3 VPI and VCI 7.1.4 IP Address Assignment 7.2 Metric 7.3 Traffic Shaping 7.4 Zero Configuration Internet Access 7.5 Internet Access Setup Page 7.5.1 Advanced Internet Access Setup 7.6 WAN More Connections 7.7 Traffic Redirect 7.8 WAN Backup Setup Page LAN Setup 8.1 LAN Overview 8.2 DNS Server Addresses 8.3LAN TCP/IP 8.3.1 IP Address and Subnet Mask 8.3.2 RIP Setup 8.3.3 Multicast 8.3.4 Any IP 8.4 Configuring LAN IP 8.4.1 Configuring Advanced LAN Setup 8.5 DHCP Setup 8.6 LAN Client List 8.7 LAN IP Alias Page Page Wireless LAN 9.1 Wireless Network Overview 9.2Wireless Security Overview 9.2.4 Encryption 9.3 Wireless Performance Overview 9.4 Additional Wireless Terms 9.5General WLAN Screen 9.5.1 No Security 9.5.2 WEP Encryption Screen 9.5.3 WPA(2)-PSK 9.5.4 WPA(2) Authentication Screen Page 9.5.5 Wireless LAN Advanced Setup 9.6 OTIST Screen Page 9.6.1Notes on OTIST 9.7MAC Filter Page 9.8 QoS Screen 9.8.1 Application Priority Configuration Page Page Network Address Translation (NAT) Screens 10.1 NAT General Overview 10.1.2 What NAT Does 10.1.3 How NAT Works 10.1.4 NAT Application 10.1.5 NAT Mapping Types 10.2 SUA (Single User Account) Versus NAT 10.3NAT General Setup 10.4 Port Forwarding 10.4.1 Default Server IP Address 10.4.2Port Forwarding: Services and Port Numbers 10.4.3 Configuring Servers Behind Port Forwarding (Example) 10.5Configuring Port Forwarding 10.5.1 Port Forwarding Rule Edit 10.6 Address Mapping 10.6.1 Address Mapping Rule Edit Page 10.6.2 SIP ALG Voice 11.1 Introduction to VoIP 11.2 SIP 11.2.2 SIP Call Progression 11.2.3 SIP Servers Page 11.2.4RTP 11.2.5 Pulse Code Modulation 11.2.6 Voice Coding 11.2.7PSTN Call Setup Signaling 11.2.8 MWI (Message Waiting Indication) 11.2.9 Custom Tones (IVR) 11.3 Quality of Service (QoS) 11.4 SIP Settings Screen 11.5 Advanced SIP Setup Screen Page Page Page 11.6 SIP QoS Screen 11.7 Phone 11.8 Analog Phone Screen 11.9 Advanced Analog Phone Setup Screen 11.10 Common Phone Settings Screen 11.11 Phone Services Overview 11.11.1 The Flash Key 11.11.2 Europe Type Supplementary Phone Services 11.11.3USA Type Supplementary Services Page 11.12 Phone Region Screen 11.13 Speed Dial Page 11.14 Incoming Call Policy Screen Page 11.15 Distinctive Ring Screen 11.16 PSTN Line (“L” models only) 11.17 PSTN Line Screen (“L” models only) VoIP Trunking 12.1 VoIP Trunking Overview 12.2 VoIP Trunking and Security 12.2.2 Peer Call Authentication 12.3 Call Rules 12.4 VoIP Trunking Scenarios 12.5 Trunking General Screen 12.6 Trunking Peer Call Screen Page 12.7 Trunking Call Rule Screen Page 12.8 VoIP Trunking Example: VoIP to PSTN 12.8.3 Configuration Details: Incoming 12.9 VoIP Trunking Example: PSTN to PSTN via VoIP 12.9.1 Background Information 12.9.2 Configuration Details: Outgoing Page 12.9.3 Configuration Details: Incoming 12.9.4 Call Progression Page Page Phone Usage 13.1Dialing a Telephone Number 13.2 Using Speed Dial to Dial a Telephone Number 13.3 Internal Calls 13.4 Using Call Park and Pickup 13.5 Checking the ZyXEL Device’s IP Address 13.6Auto Provisioning and Auto Firmware Upgrade 13.7Phone Functions Summary Page Page Firewalls 14.1 Firewall Overview 14.2 Types of Firewalls 14.3 Introduction to ZyXEL’s Firewall 14.4 Denial of Service 14.4.2 Types of DoS Attacks Page 14.5 Stateful Inspection 14.5.1 Stateful Inspection Process 14.5.2Stateful Inspection on Your ZyXEL Device 14.5.3TCP Security 14.5.4 UDP/ICMP Security 14.5.5 Upper Layer Protocols 14.6Guidelines for Enhancing Security with Your Firewall 14.7Packet Filtering Vs Firewall Page Firewall Configuration 15.1 Access Methods 15.2 General Firewall Policy Overview 15.3Rule Logic Overview 15.4 Connection Direction 15.5 General Firewall Policy 15.6Firewall Rules Summary Page 15.6.1 Configuring Firewall Rules Page Page 15.6.2 Customized Services 15.6.3 Configuring A Customized Service 15.7 Example Firewall Rule Page Page Page 15.8 DoS Thresholds 15.8.2 Half-OpenSessions 15.8.3Configuring Firewall Thresholds Page 15.9 Firewall Commands Page Page Content Filtering 16.1 Content Filtering Overview 16.2 Configuring Keyword Blocking 16.3 Configuring the Schedule 16.4 Configuring Trusted Computers Page Introduction to IPSec 17.1 VPN Overview 17.2IPSec Architecture 17.3 Encapsulation 17.4IPSec and NAT Page Page VPN Screens 18.1 VPN/IPSec Overview 18.2 IPSec Algorithms 18.3 My IP Address 18.4Secure Gateway Address 18.5 VPN Setup Screen Page 18.6 Keep Alive 18.7 VPN, NAT, and NAT Traversal 18.8 Remote DNS Server 18.9 ID Type and Content 18.9.1 ID Type and Content Examples 18.10 Pre-SharedKey 18.11 Editing VPN Policies Page Page Page Page 18.12 IKE Phases 18.13 Configuring Advanced IKE Settings Page Page 18.14 Manual Key Setup 18.15 Configuring Manual Key Page Page 18.16 Viewing SA Monitor Page 18.17 Configuring Global Setting 18.18 Telecommuter VPN/IPSec Examples 18.18.2 Telecommuters Using Unique VPN Rules Example Page 18.19 VPN and Remote Management Certificates 19.1 Certificates Overview 19.2Self-signedCertificates 19.3 Configuration Summary 19.4 My Certificates 19.5 My Certificate Import 19.5.1Certificate File Formats 19.6 My Certificate Create Page 19.7 My Certificate Details Page Page 19.8 Trusted CAs Page 19.9 Trusted CA Import 19.10 Trusted CA Details Page 19.11 Trusted Remote Hosts Page 19.12 Verifying a Trusted Remote Host’s Certificate 19.13 Trusted Remote Hosts Import 19.14 Trusted Remote Host Certificate Details Page Page 19.15 Directory Servers 19.16 Directory Server Add and Edit Page Static Route 20.1 Static Route 20.2 Configuring Static Route 20.2.1 Static Route Edit Page Page Bandwidth Management 21.1 Bandwidth Management Overview 21.2 Application-basedBandwidth Management 21.3 Auto Classifier 21.4 Subnet-basedBandwidth Management 21.5 Application and Subnet-basedBandwidth Management 21.6 Configuring Bandwidth Management (General) 21.7 Bandwidth Management Rule Setup 21.7.1 Rule Configuration Page 21.8 Bandwidth Monitor Page Dynamic DNS Setup 22.1 Dynamic DNS Overview 22.2 Configuring Dynamic DNS Page Page Page Remote Management Configuration 23.1 Remote Management Overview 23.2 WWW 23.3 Telnet 23.4 Configuring Telnet 23.5 Configuring FTP 23.6 SNMP 23.6.1Supported MIBs 23.6.2 SNMP Traps 23.6.3 Configuring SNMP 23.7 Configuring DNS 23.8 Configuring ICMP Page Universal Plug-and-Play(UPnP) 24.1 Introducing Universal Plug and Play 24.2 UPnP and ZyXEL 24.3 Installing UPnP in Windows Example Page Page 24.4 Using UPnP in Windows XP Example Page Page Page Page Page Page Maintenance and Troubleshooting Page System 25.1 General Setup and System Name Page 25.2 Time Setting Page Logs 26.1 Logs Overview 26.2 Viewing the Logs 26.3 Configuring Log Settings Page 26.4 SMTP Error Messages 26.4.1 Example E-mailLog 26.5 Log Descriptions Page Page Page Page Page Page Page Page Tools 27.1 Introduction 27.2 Filename Conventions 27.3 File Maintenance Over WAN 27.4 Firmware Upgrade Screen 27.5 Backup and Restore 27.5.1 Backup Configuration 27.5.2 Restore Configuration 27.5.3 Reset to Factory Defaults 27.6 Restart 27.7 Using FTP or TFTP to Back Up Configuration 27.7.2FTP Command Configuration Backup Example 27.7.3 Configuration Backup Using GUI-basedFTP Clients 27.7.4 Backup Configuration Using TFTP 27.7.5 TFTP Command Configuration Backup Example 27.7.6 Configuration Backup Using GUI-basedTFTP Clients 27.8 Using FTP or TFTP to Restore Configuration 27.9 FTP and TFTP Firmware and Configuration File Uploads 27.9.1 FTP File Upload Command from the DOS Prompt Example 27.9.2FTP Session Example of Firmware File Upload 27.9.3 TFTP File Upload 27.9.4 TFTP Upload Command Example Diagnostic 28.1 General Diagnostic 28.2 DSL Line Diagnostic Page Page Page Troubleshooting 29.1Power, Hardware Connections, and LEDs 29.2 ZyXEL Device Access and Login Page 29.3 Internet Access 29.4Phone Calls and VoIP 29.5 Problems With Multiple SIP Accounts 29.5.2 Incoming Calls Page Appendices and Index Page Hardware Specifications Firmware Specifications Page Page Page Voice Specifications Page Page Wireless Features (Wireless Devices Only) Page Power Adaptor Specifications Windows 95/98/Me Installing Components Page Windows 2000/NT/XP Page Page Page Macintosh OS 8/9 Page Macintosh OS Page Page Internet Explorer Pop-upBlockers Page Page JavaScripts Java Permissions Page Introduction to IP Addresses Structure Subnet Masks Notation Subnetting Example: Four Subnets Example: Eight Subnets Subnet Planning Configuring IP Addresses Wireless LAN Topologies Page Channel RTS/CTS Fragmentation Threshold Preamble Type IEEE RADIUS Types of Authentication WPA Security Parameters Summary Page Page Page Page Page Command Syntax Command Usage Log Commands Page Log Command Example Page Internal SPTGEN Overview The Configuration Text File Format Internal SPTGEN FTP Download Example Internal SPTGEN FTP Upload Example Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Command Examples Copyright Certifications Page ZyXEL Limited Warranty Page Page Page Page Page Index