Manuals
/
Brands
/
Computer Equipment
/
Network Card
/
ZyXEL Communications
/
Computer Equipment
/
Network Card
ZyXEL Communications
P-2602HWLNI manual
264
1
264
496
496
Download
496 pages, 14.8 Mb
Chapter 15 Firewall Configuration
264
P-2602HWLNI
User’s Guide
Contents
User’s Guide
www.zyxel.com
Page
About This User's Guide
Document Conventions
Page
Safety Warnings
Page
Page
Contents Overview
Page
Table of Contents
Page
Page
Page
Page
Page
Page
Page
Page
Part VI: Advanced
Page
Page
Part VIII: Appendices and Index
Page
List of Figures
Page
Page
Page
Page
Page
Page
Page
List of Tables
Page
Page
Page
Page
Page
Page
Page
Introducing the ZyXEL Device
1.1 Overview
1.2Ways to Manage the ZyXEL Device
1.3Good Habits for Managing the ZyXEL Device
1.4 Applications for the ZyXEL Device
1.4.3 Make Peer-to-peerCalls
1.4.4 Firewall for Secure Broadband Internet Access
1.4.5 LAN to LAN Application
1.5 LEDs
1.6 The RESET Button
Page
Introducing the Web
Configurator
2.1 Web Configurator Overview
2.2 Login Types
Page
2.3 Web Configurator Main Screen
2.3.1Title Bar
2.3.2 Navigation Panel
Page
Page
Page
Page
Page
2.3.3 Main Window
2.3.4 Status Bar
Page
Page
Page
Internet and Wireless Setup Wizard
3.1 Introduction
3.2Internet Access Wizard Setup
Page
Page
3.2.1Manual Configuration
Page
Page
Page
Page
3.3 Wireless Connection Wizard Setup
Page
Page
3.3.1 Manually Assign a WPA-PSKKey
3.3.2 Manually Assign a WEP Key
Page
Page
VoIP Wizard
4.1 Introduction
4.2 VoIP Wizard Setup
Page
Page
Page
Page
Page
Bandwidth Management Wizard
5.1 Introduction
5.2Bandwidth Management Wizard Setup
Page
Page
Page
Status Screens
6.1 Status Screen
Page
Page
Page
6.2 Any IP Table
6.3 WLAN Status
6.4 Packet Statistics
Page
6.5 VoIP Statistics
Page
6.6 LED Status
Page
Page
Page
Page
WAN Setup
7.1 WAN Overview
7.1.2 Multiplexing
7.1.3 VPI and VCI
7.1.4 IP Address Assignment
7.2 Metric
7.3 Traffic Shaping
7.4 Zero Configuration Internet Access
7.5 Internet Access Setup
Page
7.5.1 Advanced Internet Access Setup
7.6 WAN More Connections
7.7 More Connections Edit
Page
Page
7.8 More Connections Edit Advanced
7.9 Traffic Redirect
7.10 WAN Backup Setup
Page
Page
LAN Setup
8.1 LAN Overview
8.2 DNS Server Addresses
8.3LAN TCP/IP
Page
8.3.2 RIP Setup
8.3.3 Multicast
8.3.4 Any IP
8.4 Configuring LAN IP
8.4.1 Configuring Advanced LAN Setup
8.5 DHCP Setup
8.6 LAN Client List
8.7 LAN IP Alias
Page
Page
Wireless LAN
9.1 Wireless Network Overview
9.2Wireless Security Overview
9.2.4 Encryption
9.3 Wireless Performance Overview
9.4 Additional Wireless Terms
9.5General WLAN Screen
9.5.1 No Security
9.5.2 WEP Encryption Screen
9.5.3 WPA(2)-PSK
Page
9.5.4 WPA(2) Authentication Screen
9.5.5 Wireless LAN Advanced Setup
9.6 OTIST Screen
Page
Page
9.7MAC Filter
Page
9.8 Association List
9.9 QoS Screen
Page
9.9.1 Application Priority Configuration
9.10 WDS Screen
9.10.1 Static WEP
9.10.2 WPA-PSK
Page
9.10.3 WPA2-PSK
Page
Page
Network Address Translation (NAT) Screens
10.1 NAT General Overview
10.1.2 What NAT Does
10.1.3 How NAT Works
10.1.4 NAT Application
10.1.5 NAT Mapping Types
10.2 SUA (Single User Account) Versus NAT
10.3NAT General Setup
10.4 Port Forwarding
10.4.1 Default Server IP Address
10.4.2Port Forwarding: Services and Port Numbers
10.4.3 Configuring Servers Behind Port Forwarding (Example)
10.5Configuring Port Forwarding
10.5.1 Port Forwarding Rule Edit
10.6Address Mapping
10.6.1 Address Mapping Rule Edit
Page
Page
Page
Page
Voice
11.1 Introduction to VoIP
11.2 SIP
11.2.2 SIP Servers
Page
Page
11.2.3 RTP
11.2.4 Pulse Code Modulation
11.2.5 SIP Call Progression
11.2.6SIP Call Progression Through Proxies
Page
11.2.7Voice Coding
11.2.8PSTN Call Setup Signaling
11.2.9 MWI (Message Waiting Indication)
11.3 Quality of Service (QoS)
11.3.1 Type Of Service (ToS)
11.3.2 DiffServ
11.3.3 VLAN
11.4 SIP Settings Screen
11.5 Advanced SIP Setup Screen
Page
Page
11.6 SIP QoS Screen
11.7 Phone
11.8 Analog Phone
11.8.2Configuring the Analog Phone Screen
Page
11.9 Advanced Analog Phone Setup Screen
Page
11.10 ISDN Phone
11.10.2 Configuring the ISDN Phone Screen
11.11 Common Phone Settings Screen
11.12 Ext. Table
Page
11.13 Advanced Ext. Table Setup Screen
11.14 Phone Services Overview
11.14.1 The Flash Key
11.14.2 Europe Type Supplementary Phone Services
11.14.3USA Type Supplementary Services
Page
11.15Phone Region Screen
11.16 Speed Dial
Page
11.17 Incoming Call Policy Screen
Page
11.18 Distinctive Ring Screen
Page
11.19 SIP Prefix Screen
Page
11.20 PSTN Line
11.21 PSTN Line Screen
11.22 ISDN Line Screen
11.23 Fixed Line Numbers
11.23.2 Receiving Analog Calls With Digital Phones
11.23.3 Configuring the Fixed Line Numbers Screen
Page
VoIP Trunking
12.1 VoIP Trunking Overview
12.2 VoIP Trunking and Security
12.2.2 Peer Call Authentication
12.3 Call Rules
12.4 VoIP Trunking Scenarios
12.5 Trunking General Screen
12.6 Trunking Peer Call Screen
Page
12.7 Trunking Call Rule Screen
Page
12.8 VoIP Trunking Example: VoIP to PSTN
12.8.3 Configuration Details: Incoming
12.9 VoIP Trunking Example: PSTN to PSTN via VoIP
12.9.1 Background Information
12.9.2 Configuration Details: Outgoing
Page
12.9.3 Configuration Details: Incoming
12.9.4 Call Progression
Page
Page
Phone Usage
13.1 Dialing a Telephone Number
13.2 Using Speed Dial to Dial a Telephone Number
13.3 Internal Calls
13.3.1Phone Book
13.3.2Call Transfer
13.3.3Call Forwarding
13.3.4 Follow Me
13.4Checking the Device’s IP Address
13.5Auto Firmware Upgrade
Page
Page
Page
Firewalls
14.1 Firewall Overview
14.2 Types of Firewalls
14.3 Introduction to ZyXEL’s Firewall
14.4 Denial of Service
14.4.2 Types of DoS Attacks
Page
14.5 Stateful Inspection
14.5.1 Stateful Inspection Process
14.5.2Stateful Inspection on Your ZyXEL Device
14.5.3TCP Security
14.5.4 UDP/ICMP Security
14.5.5 Upper Layer Protocols
14.6Guidelines for Enhancing Security with Your Firewall
14.7Packet Filtering Vs Firewall
Page
Firewall Configuration
15.1 Access Methods
15.2 General Firewall Policy Overview
15.3Rule Logic Overview
15.4 Connection Direction
15.5 General Firewall Policy
15.6Firewall Rules Summary
Page
15.6.1 Configuring Firewall Rules
Page
Page
15.6.2 Customized Services
15.6.3 Configuring a Customized Service
15.7 Example Firewall Rule
Page
Page
Page
15.8 DoS Thresholds
15.8.2 Half-OpenSessions
15.8.3Configuring Firewall Thresholds
Page
15.9 Firewall Commands
Page
Page
Content Filtering
16.1 Content Filtering Overview
16.2 Configuring Keyword Blocking
16.3 Configuring the Schedule
16.4 Configuring Trusted Computers
Page
Introduction to IPSec
17.1 VPN Overview
17.2IPSec Architecture
17.3 Encapsulation
17.4IPSec and NAT
Page
Page
VPN Screens
18.1 VPN/IPSec Overview
18.2 IPSec Algorithms
18.3 My IP Address
18.4Secure Gateway Address
18.5 VPN Setup Screen
Page
18.6 Keep Alive
18.7 VPN, NAT, and NAT Traversal
18.8 Remote DNS Server
18.9 ID Type and Content
18.9.1 ID Type and Content Examples
18.10 Pre-SharedKey
18.11 Editing VPN Policies
Page
Page
Page
Page
18.12 IKE Phases
18.13 Configuring Advanced IKE Settings
Page
Page
18.14 Manual Key Setup
18.15 Configuring Manual Key
Page
Page
18.16 Viewing SA Monitor
Page
18.17 Configuring Global Setting
18.18 Telecommuter VPN/IPSec Examples
18.18.2 Telecommuters Using Unique VPN Rules Example
Page
18.19 VPN and Remote Management
Certificates
19.1 Certificates Overview
19.2Self-signedCertificates
19.3 Configuration Summary
19.4 My Certificates
19.5 My Certificate Import
19.5.1 Certificate File Formats
19.6 My Certificate Create
Page
19.7 My Certificate Details
Page
Page
19.8 Trusted CAs
Page
19.9 Trusted CA Import
19.10 Trusted CA Details
Page
19.11 Trusted Remote Hosts
Page
19.12 Verifying a Trusted Remote Host’s Certificate
19.13 Trusted Remote Hosts Import
19.14 Trusted Remote Host Certificate Details
Page
Page
19.15 Directory Servers
19.16 Directory Server Add and Edit
Page
Page
Page
Static Route
20.1 Static Route
20.2 Configuring Static Route
20.2.1 Static Route Edit
Page
Page
Bandwidth Management
21.1 Bandwidth Management Overview
21.2 Application-basedBandwidth Management
21.3 Auto Classifier
21.4 Subnet-basedBandwidth Management
21.5 Application and Subnet-basedBandwidth Management
21.6 Configuring Bandwidth Management (General)
21.7 Bandwidth Management Rule Setup
21.7.1 Rule Configuration
Page
21.8 Bandwidth Monitor
Page
Dynamic DNS Setup
22.1 Dynamic DNS Overview
22.2 Configuring Dynamic DNS
Page
Page
Page
Remote Management
Configuration
23.1 Remote Management Overview
23.1.1Remote Management Limitations
23.1.2Remote Management and NAT
23.1.3System Timeout
23.2 Introduction to HTTPS
23.3 HTTP
23.4 Telnet
23.5 Configuring Telnet
23.6 Configuring FTP
23.7 SNMP
23.7.1Supported MIBs
23.7.2 SNMP Traps
23.7.3 Configuring SNMP
23.8 Configuring DNS
23.9 Configuring ICMP
23.10 SSH
23.11 How SSH Works
23.12 SSH Implementation on the ZyXEL Device
23.13 Configuring SSH
23.14 Secure Telnet Using SSH Examples
23.15Secure FTP Using SSH Example
Page
Page
Universal Plug-and-Play(UPnP)
24.1 Introducing Universal Plug and Play
24.2 UPnP and ZyXEL
24.3 Installing UPnP in Windows Example
Page
Page
24.4 Using UPnP in Windows XP Example
Page
Page
Page
Page
Page
Page
Page
Page
System
25.1 General Setup and System Name
Page
25.2 Time Setting
Page
Page
Page
Call History
26.1 Call History Overview
26.2Viewing the Call History Summary
26.3 Viewing Call History
Page
26.4 Configuring Call History Settings
Page
Page
Logs
27.1 Logs Overview
27.2 Viewing the Logs
27.3 Configuring Log Settings
Page
27.4 SMTP Error Messages
27.4.1 Example E-mailLog
27.5 Log Descriptions
Page
Page
Page
Page
Page
Page
Page
Page
Troubleshooting
28.1Power, Hardware Connections, and LEDs
28.2 ZyXEL Device Access and Login
Page
28.3 Internet Access
28.4Phone Calls and VoIP
Page
Tools
29.1 Introduction
29.2 Filename Conventions
29.3 File Maintenance Over WAN
29.4 Firmware Upgrade Screen
29.5 Backup and Restore
29.5.1 Backup Configuration
29.5.2 Restore Configuration
29.5.3 Reset to Factory Defaults
29.6 Restart
29.7 Using FTP or TFTP to Back Up Configuration
29.7.2FTP Command Configuration Backup Example
29.7.3 Configuration Backup Using GUI-basedFTP Clients
29.7.4 Backup Configuration Using TFTP
29.7.5 TFTP Command Configuration Backup Example
29.7.6 Configuration Backup Using GUI-basedTFTP Clients
29.8 Using FTP or TFTP to Restore Configuration
29.9 FTP and TFTP Firmware and Configuration File Uploads
29.9.1 FTP File Upload Command from the DOS Prompt Example
29.9.2FTP Session Example of Firmware File Upload
29.9.3 TFTP File Upload
29.9.4 TFTP Upload Command Example
Diagnostic
30.1 General Diagnostic
30.2 DSL Line Diagnostic
Page
Page
Page
Product Specifications
31.1 Hardware Specifications
31.2 Firmware Specifications
Page
Page
Page
31.3 Voice Specifications
Page
31.4 Wireless Features (Wireless Devices Only)
31.4.1 IEEE 802.11g Wireless LAN
31.5Power Adaptor Specifications
Page
Page
Page
Windows 95/98/Me
Installing Components
Page
Windows 2000/NT/XP
Page
Page
Page
Macintosh OS 8/9
Page
Macintosh OS
Page
Page
Internet Explorer Pop-upBlockers
Page
Page
JavaScripts
Java Permissions
Page
Introduction to IP Addresses
Structure
Subnet Masks
Notation
Subnetting
Example: Four Subnets
Example: Eight Subnets
Subnet Planning
Configuring IP Addresses
Wireless LAN Topologies
Page
Channel
RTS/CTS
Fragmentation Threshold
Preamble Type
IEEE 802.11g Wireless LAN
IEEE
RADIUS
Types of EAP Authentication
Page
Dynamic WEP Key Exchange
WPA and WPA2
Page
Page
Security Parameters Summary
Antenna Overview
Antenna Characteristics
Types of Antennas for WLAN
Positioning Antennas
Page
Page
Page
Page
Copyright
Certifications
Page
ZyXEL Limited Warranty
Page
Page
Page
Page
Page
Page
Page
Index
