Manuals / Brands / Computer Equipment / Network Card / ZyXEL Communications / Computer Equipment / Network Card

ZyXEL Communications P-2602HWLNI manual 231

1 496

Download 496 pages, 14.8 Mb

PART V

Security

Firewalls (233)

Firewall Configuration (245)

Content Filtering (265)

Introduction to IPSec (269)

VPN Screens (275)

Certificates (301)

231

Contents

User’s Guide www.zyxel.com Page About This User's Guide Document Conventions Page Safety Warnings Page Page Contents Overview Page Table of Contents Page Page Page Page Page Page Page Page Part VI: Advanced Page Page Part VIII: Appendices and Index Page List of Figures Page Page Page Page Page Page Page List of Tables Page Page Page Page Page Page Page Introducing the ZyXEL Device 1.1 Overview 1.2Ways to Manage the ZyXEL Device 1.3Good Habits for Managing the ZyXEL Device 1.4 Applications for the ZyXEL Device 1.4.3 Make Peer-to-peerCalls 1.4.4 Firewall for Secure Broadband Internet Access 1.4.5 LAN to LAN Application 1.5 LEDs 1.6 The RESET Button Page Introducing the Web Configurator 2.1 Web Configurator Overview 2.2 Login Types Page 2.3 Web Configurator Main Screen 2.3.1Title Bar 2.3.2 Navigation Panel Page Page Page Page Page 2.3.3 Main Window 2.3.4 Status Bar Page Page Page Internet and Wireless Setup Wizard 3.1 Introduction 3.2Internet Access Wizard Setup Page Page 3.2.1Manual Configuration Page Page Page Page 3.3 Wireless Connection Wizard Setup Page Page 3.3.1 Manually Assign a WPA-PSKKey 3.3.2 Manually Assign a WEP Key Page Page VoIP Wizard 4.1 Introduction 4.2 VoIP Wizard Setup Page Page Page Page Page Bandwidth Management Wizard 5.1 Introduction 5.2Bandwidth Management Wizard Setup Page Page Page Status Screens 6.1 Status Screen Page Page Page 6.2 Any IP Table 6.3 WLAN Status 6.4 Packet Statistics Page 6.5 VoIP Statistics Page 6.6 LED Status Page Page Page Page WAN Setup 7.1 WAN Overview 7.1.2 Multiplexing 7.1.3 VPI and VCI 7.1.4 IP Address Assignment 7.2 Metric 7.3 Traffic Shaping 7.4 Zero Configuration Internet Access 7.5 Internet Access Setup Page 7.5.1 Advanced Internet Access Setup 7.6 WAN More Connections 7.7 More Connections Edit Page Page 7.8 More Connections Edit Advanced 7.9 Traffic Redirect 7.10 WAN Backup Setup Page Page LAN Setup 8.1 LAN Overview 8.2 DNS Server Addresses 8.3LAN TCP/IP Page 8.3.2 RIP Setup 8.3.3 Multicast 8.3.4 Any IP 8.4 Configuring LAN IP 8.4.1 Configuring Advanced LAN Setup 8.5 DHCP Setup 8.6 LAN Client List 8.7 LAN IP Alias Page Page Wireless LAN 9.1 Wireless Network Overview 9.2Wireless Security Overview 9.2.4 Encryption 9.3 Wireless Performance Overview 9.4 Additional Wireless Terms 9.5General WLAN Screen 9.5.1 No Security 9.5.2 WEP Encryption Screen 9.5.3 WPA(2)-PSK Page 9.5.4 WPA(2) Authentication Screen 9.5.5 Wireless LAN Advanced Setup 9.6 OTIST Screen Page Page 9.7MAC Filter Page 9.8 Association List 9.9 QoS Screen Page 9.9.1 Application Priority Configuration 9.10 WDS Screen 9.10.1 Static WEP 9.10.2 WPA-PSK Page 9.10.3 WPA2-PSK Page Page Network Address Translation (NAT) Screens 10.1 NAT General Overview 10.1.2 What NAT Does 10.1.3 How NAT Works 10.1.4 NAT Application 10.1.5 NAT Mapping Types 10.2 SUA (Single User Account) Versus NAT 10.3NAT General Setup 10.4 Port Forwarding 10.4.1 Default Server IP Address 10.4.2Port Forwarding: Services and Port Numbers 10.4.3 Configuring Servers Behind Port Forwarding (Example) 10.5Configuring Port Forwarding 10.5.1 Port Forwarding Rule Edit 10.6Address Mapping 10.6.1 Address Mapping Rule Edit Page Page Page Page Voice 11.1 Introduction to VoIP 11.2 SIP 11.2.2 SIP Servers Page Page 11.2.3 RTP 11.2.4 Pulse Code Modulation 11.2.5 SIP Call Progression 11.2.6SIP Call Progression Through Proxies Page 11.2.7Voice Coding 11.2.8PSTN Call Setup Signaling 11.2.9 MWI (Message Waiting Indication) 11.3 Quality of Service (QoS) 11.3.1 Type Of Service (ToS) 11.3.2 DiffServ 11.3.3 VLAN 11.4 SIP Settings Screen 11.5 Advanced SIP Setup Screen Page Page 11.6 SIP QoS Screen 11.7 Phone 11.8 Analog Phone 11.8.2Configuring the Analog Phone Screen Page 11.9 Advanced Analog Phone Setup Screen Page 11.10 ISDN Phone 11.10.2 Configuring the ISDN Phone Screen 11.11 Common Phone Settings Screen 11.12 Ext. Table Page 11.13 Advanced Ext. Table Setup Screen 11.14 Phone Services Overview 11.14.1 The Flash Key 11.14.2 Europe Type Supplementary Phone Services 11.14.3USA Type Supplementary Services Page 11.15Phone Region Screen 11.16 Speed Dial Page 11.17 Incoming Call Policy Screen Page 11.18 Distinctive Ring Screen Page 11.19 SIP Prefix Screen Page 11.20 PSTN Line 11.21 PSTN Line Screen 11.22 ISDN Line Screen 11.23 Fixed Line Numbers 11.23.2 Receiving Analog Calls With Digital Phones 11.23.3 Configuring the Fixed Line Numbers Screen Page VoIP Trunking 12.1 VoIP Trunking Overview 12.2 VoIP Trunking and Security 12.2.2 Peer Call Authentication 12.3 Call Rules 12.4 VoIP Trunking Scenarios 12.5 Trunking General Screen 12.6 Trunking Peer Call Screen Page 12.7 Trunking Call Rule Screen Page 12.8 VoIP Trunking Example: VoIP to PSTN 12.8.3 Configuration Details: Incoming 12.9 VoIP Trunking Example: PSTN to PSTN via VoIP 12.9.1 Background Information 12.9.2 Configuration Details: Outgoing Page 12.9.3 Configuration Details: Incoming 12.9.4 Call Progression Page Page Phone Usage 13.1 Dialing a Telephone Number 13.2 Using Speed Dial to Dial a Telephone Number 13.3 Internal Calls 13.3.1Phone Book 13.3.2Call Transfer 13.3.3Call Forwarding 13.3.4 Follow Me 13.4Checking the Device’s IP Address 13.5Auto Firmware Upgrade Page Page Page Firewalls 14.1 Firewall Overview 14.2 Types of Firewalls 14.3 Introduction to ZyXEL’s Firewall 14.4 Denial of Service 14.4.2 Types of DoS Attacks Page 14.5 Stateful Inspection 14.5.1 Stateful Inspection Process 14.5.2Stateful Inspection on Your ZyXEL Device 14.5.3TCP Security 14.5.4 UDP/ICMP Security 14.5.5 Upper Layer Protocols 14.6Guidelines for Enhancing Security with Your Firewall 14.7Packet Filtering Vs Firewall Page Firewall Configuration 15.1 Access Methods 15.2 General Firewall Policy Overview 15.3Rule Logic Overview 15.4 Connection Direction 15.5 General Firewall Policy 15.6Firewall Rules Summary Page 15.6.1 Configuring Firewall Rules Page Page 15.6.2 Customized Services 15.6.3 Configuring a Customized Service 15.7 Example Firewall Rule Page Page Page 15.8 DoS Thresholds 15.8.2 Half-OpenSessions 15.8.3Configuring Firewall Thresholds Page 15.9 Firewall Commands Page Page Content Filtering 16.1 Content Filtering Overview 16.2 Configuring Keyword Blocking 16.3 Configuring the Schedule 16.4 Configuring Trusted Computers Page Introduction to IPSec 17.1 VPN Overview 17.2IPSec Architecture 17.3 Encapsulation 17.4IPSec and NAT Page Page VPN Screens 18.1 VPN/IPSec Overview 18.2 IPSec Algorithms 18.3 My IP Address 18.4Secure Gateway Address 18.5 VPN Setup Screen Page 18.6 Keep Alive 18.7 VPN, NAT, and NAT Traversal 18.8 Remote DNS Server 18.9 ID Type and Content 18.9.1 ID Type and Content Examples 18.10 Pre-SharedKey 18.11 Editing VPN Policies Page Page Page Page 18.12 IKE Phases 18.13 Configuring Advanced IKE Settings Page Page 18.14 Manual Key Setup 18.15 Configuring Manual Key Page Page 18.16 Viewing SA Monitor Page 18.17 Configuring Global Setting 18.18 Telecommuter VPN/IPSec Examples 18.18.2 Telecommuters Using Unique VPN Rules Example Page 18.19 VPN and Remote Management Certificates 19.1 Certificates Overview 19.2Self-signedCertificates 19.3 Configuration Summary 19.4 My Certificates 19.5 My Certificate Import 19.5.1 Certificate File Formats 19.6 My Certificate Create Page 19.7 My Certificate Details Page Page 19.8 Trusted CAs Page 19.9 Trusted CA Import 19.10 Trusted CA Details Page 19.11 Trusted Remote Hosts Page 19.12 Verifying a Trusted Remote Host’s Certificate 19.13 Trusted Remote Hosts Import 19.14 Trusted Remote Host Certificate Details Page Page 19.15 Directory Servers 19.16 Directory Server Add and Edit Page Page Page Static Route 20.1 Static Route 20.2 Configuring Static Route 20.2.1 Static Route Edit Page Page Bandwidth Management 21.1 Bandwidth Management Overview 21.2 Application-basedBandwidth Management 21.3 Auto Classifier 21.4 Subnet-basedBandwidth Management 21.5 Application and Subnet-basedBandwidth Management 21.6 Configuring Bandwidth Management (General) 21.7 Bandwidth Management Rule Setup 21.7.1 Rule Configuration Page 21.8 Bandwidth Monitor Page Dynamic DNS Setup 22.1 Dynamic DNS Overview 22.2 Configuring Dynamic DNS Page Page Page Remote Management Configuration 23.1 Remote Management Overview 23.1.1Remote Management Limitations 23.1.2Remote Management and NAT 23.1.3System Timeout 23.2 Introduction to HTTPS 23.3 HTTP 23.4 Telnet 23.5 Configuring Telnet 23.6 Configuring FTP 23.7 SNMP 23.7.1Supported MIBs 23.7.2 SNMP Traps 23.7.3 Configuring SNMP 23.8 Configuring DNS 23.9 Configuring ICMP 23.10 SSH 23.11 How SSH Works 23.12 SSH Implementation on the ZyXEL Device 23.13 Configuring SSH 23.14 Secure Telnet Using SSH Examples 23.15Secure FTP Using SSH Example Page Page Universal Plug-and-Play(UPnP) 24.1 Introducing Universal Plug and Play 24.2 UPnP and ZyXEL 24.3 Installing UPnP in Windows Example Page Page 24.4 Using UPnP in Windows XP Example Page Page Page Page Page Page Page Page System 25.1 General Setup and System Name Page 25.2 Time Setting Page Page Page Call History 26.1 Call History Overview 26.2Viewing the Call History Summary 26.3 Viewing Call History Page 26.4 Configuring Call History Settings Page Page Logs 27.1 Logs Overview 27.2 Viewing the Logs 27.3 Configuring Log Settings Page 27.4 SMTP Error Messages 27.4.1 Example E-mailLog 27.5 Log Descriptions Page Page Page Page Page Page Page Page Troubleshooting 28.1Power, Hardware Connections, and LEDs 28.2 ZyXEL Device Access and Login Page 28.3 Internet Access 28.4Phone Calls and VoIP Page Tools 29.1 Introduction 29.2 Filename Conventions 29.3 File Maintenance Over WAN 29.4 Firmware Upgrade Screen 29.5 Backup and Restore 29.5.1 Backup Configuration 29.5.2 Restore Configuration 29.5.3 Reset to Factory Defaults 29.6 Restart 29.7 Using FTP or TFTP to Back Up Configuration 29.7.2FTP Command Configuration Backup Example 29.7.3 Configuration Backup Using GUI-basedFTP Clients 29.7.4 Backup Configuration Using TFTP 29.7.5 TFTP Command Configuration Backup Example 29.7.6 Configuration Backup Using GUI-basedTFTP Clients 29.8 Using FTP or TFTP to Restore Configuration 29.9 FTP and TFTP Firmware and Configuration File Uploads 29.9.1 FTP File Upload Command from the DOS Prompt Example 29.9.2FTP Session Example of Firmware File Upload 29.9.3 TFTP File Upload 29.9.4 TFTP Upload Command Example Diagnostic 30.1 General Diagnostic 30.2 DSL Line Diagnostic Page Page Page Product Specifications 31.1 Hardware Specifications 31.2 Firmware Specifications Page Page Page 31.3 Voice Specifications Page 31.4 Wireless Features (Wireless Devices Only) 31.4.1 IEEE 802.11g Wireless LAN 31.5Power Adaptor Specifications Page Page Page Windows 95/98/Me Installing Components Page Windows 2000/NT/XP Page Page Page Macintosh OS 8/9 Page Macintosh OS Page Page Internet Explorer Pop-upBlockers Page Page JavaScripts Java Permissions Page Introduction to IP Addresses Structure Subnet Masks Notation Subnetting Example: Four Subnets Example: Eight Subnets Subnet Planning Configuring IP Addresses Wireless LAN Topologies Page Channel RTS/CTS Fragmentation Threshold Preamble Type IEEE 802.11g Wireless LAN IEEE RADIUS Types of EAP Authentication Page Dynamic WEP Key Exchange WPA and WPA2 Page Page Security Parameters Summary Antenna Overview Antenna Characteristics Types of Antennas for WLAN Positioning Antennas Page Page Page Page Copyright Certifications Page ZyXEL Limited Warranty Page Page Page Page Page Page Page Index