Manuals / Brands / Computer Equipment / Network Router / ZyXEL Communications / Computer Equipment / Network Router

ZyXEL Communications P-660HW-TX V3 manual 210

1 428

Download 428 pages, 9.58 Mb

Chapter 10 Firewalls

210
210	P-660HW-Tx v3 Series User’s Guide

Contents

Default Login Details www.zyxel.com Page About This User's Guide Page Document Conventions Page Safety Warnings Page Contents Overview Page Table of Contents Part II: Wizard Page Page Page Part V: Advanced Page Page Part VII: Troubleshooting and Specifications Part VIII: Appendices and Index Page PART Introduction Page Introducing the ZyXEL Device 1.1 Overview 1.2 Ways to Manage the ZyXEL Device 1.3Good Habits for Managing the ZyXEL Device 1.4Applications for the ZyXEL Device 1.4.1 Internet Access 1.5 LEDs (Lights) 1.6 The RESET Button 1.6.1 Using the Reset Button 1.7The WPS WLAN Button 1.7.1 Turn the Wireless LAN Off or On 1.7.2Activate WPS Introducing the Web Configurator 2.1 Overview 2.1.1Accessing the Web Configurator Page 2.2 Web Configurator Main Screen 2.2.1Title Bar 2.2.2 Navigation Panel Page 2.2.3 Main Window 2.2.4 Status Bar Status Screens 3.1 Overview 3.2 The Status Screen Page Page 3.3 Client List 3.4 WLAN Status 3.5 Any IP Table 3.6 Packet Statistics Page Page Tutorials 4.1 Overview 4.2Setting Up a Secure Wireless Network 4.2.1 Configuring the Wireless Network Settings 4.2.2Using WPS Page Wireless Client ZyXEL Device Page Page 4.2.3 Without WPS 4.2.4 Setting Up Wireless Network Scheduling Page 4.3 Setting Up Multiple Wireless Groups Page Page Page 4.4 Configuring the MAC Address Filter Page 4.5 Setting Up NAT Port Forwarding 4.5.1 Default Server 4.5.2 Port Forwarding Page 4.6 Access the ZyXEL Device Using DDNS 4.6.1 Registering a DDNS Account on www.dyndns.org 4.6.2 Configuring DDNS on Your ZyXEL Device 4.6.3 Adding a Firewall Rule for Remote Management 4.6.4 Testing the DDNS Setting 4.7Configuring Static Route for Routing to Another Network Page 4.8Multiple Public and Private IP Address Mappings 4.8.1Full Feature NAT + Many-to-ManyNo Overload Mapping Page 4.8.2 Full Feature NAT + One-to-OneMapping 4.9 Multiple WAN Connections Example 4.10 Multiple PVCs with QoS 4.10.1 Configuring Multiple PVCs and ATM-QoS Page Page 4.10.2 Configuring Traffic Classifiers Page Page Page Page Wizard Page Internet and Wireless Setup Wizard 5.1 Overview 5.2Internet Access Wizard Setup Page Page 5.2.1Manual Configuration Page Page Page Page Page 5.3 Wireless Connection Wizard Setup Page 5.3.1Manually Assign a WPA-PSKkey 5.3.2 Manually Assign a WEP Key Page ART Network Page WAN Setup 6.1 Overview 6.1.1What You Can Do in the WAN Screens 6.1.2What You Need to Know About WAN 6.1.3 Before You Begin 6.2 The Internet Access Setup Screen Page Page 6.2.1 Advanced Internet Access Setup Page Page 6.3 The More Connections Screen 6.3.1 More Connections Edit Page Page 6.3.2 Configuring More Connections Advanced Setup Page 6.4 WAN Technical Reference 6.4.1 Encapsulation 6.4.2 Multiplexing 6.4.3 VPI and VCI 6.4.4 IP Address Assignment 6.4.5 Nailed-UpConnection (PPP) 6.4.6 NAT 6.5 Traffic Shaping 6.5.1 ATM Traffic Classes Page LAN Setup 7.1 Overview 7.1.1What You Can Do in the LAN Screens 7.1.2 What You Need To Know About LAN 7.1.3 Before You Begin 7.2 The LAN IP Screen 7.2.1 The Advanced LAN IP Setup Screen Page 7.3 The DHCP Setup Screen Page 7.4 The Client List Screen 7.5 The IP Alias Screen 7.5.1 Configuring the LAN IP Alias Screen 7.6 LAN Technical Reference 7.6.2 DHCP Setup 7.6.3 DNS Server Addresses 7.6.4 LAN TCP/IP 7.6.5 RIP Setup 7.6.6 Multicast 7.6.7 Any IP Page Page Page Wireless LAN 8.1 Overview 8.1.1What You Can Do in the Wireless LAN Screens 8.1.2 What You Need to Know About Wireless 8.1.3 Before You Start 8.2The AP Screen Page 8.2.1 No Security 8.2.2 WEP Encryption 8.2.3 WPA(2)-PSK 8.2.4 WPA(2) Authentication Page 8.2.5 Wireless LAN Advanced Setup 8.2.6 MAC Filter 8.3 The More AP Screen 8.3.1 More AP Edit Page 8.4 The WPS Screen 8.5 The WPS Station Screen 8.6 The WDS Screen Page 8.7 The Scheduling Screen 8.8 Wireless LAN Technical Reference 8.8.1 Wireless Network Overview Page 8.8.2 Additional Wireless Terms 8.8.3 Wireless Security Overview 8.8.3.1 SSID 8.8.3.2 MAC Address Filter 8.8.3.3 User Authentication 8.8.3.4 Encryption 8.8.4 Signal Problems 8.8.5 BSS 8.8.6 MBSSID 8.8.7 Wireless Distribution System (WDS) 8.8.8 WiFi Protected Setup (WPS) 8.8.8.1 Push Button Configuration 8.8.8.2 PIN Configuration Page 8.8.8.3 How WPS Works Page 8.8.8.4 Example WPS Network Setup 8.8.8.5 Limitations of WPS Page Network Address Translation (NAT) 9.1 Overview 9.1.1What You Can Do in the NAT Screens 9.1.2What You Need To Know About NAT Page 9.2 The NAT General Setup Screen 9.3 The Port Forwarding Screen 9.3.1 Configuring the Port Forwarding Screen Page 9.3.2 The Port Forwarding Rule Edit Screen 9.4 The Address Mapping Screen 9.4.1 The Address Mapping Rule Edit Screen Page 9.5 The SIP ALG Screen 9.6 NAT Technical Reference 9.6.1 NAT Definitions 9.6.2 What NAT Does 9.6.3 How NAT Works 9.6.4 NAT Application 9.6.5 NAT Mapping Types Page Page Security Page Firewalls 10.1 Overview 10.1.1What You Can Do in the Firewall Screens 10.1.2What You Need to Know About Firewall 10.1.3 Firewall Rule Setup Example Page Page 10.2 The Firewall General Screen Page 10.3 The Firewall Rule Screen Page 10.3.1 Configuring Firewall Rules Page 10.3.2 Customized Services 10.3.3 Configuring a Customized Service 10.4 The Firewall Threshold Screen 10.4.1 Threshold Values 10.4.2 Configuring Firewall Thresholds Page 10.5 Firewall Technical Reference 10.5.1 Firewall Rules Overview 10.5.2 Guidelines For Enhancing Security With Your Firewall 10.5.3 Security Considerations 10.5.4 Triangle Route 10.5.4.1 The “Triangle Route” Problem 10.5.4.2 Solving the “Triangle Route” Problem Page Page Content Filtering 11.1 Overview 11.1.1What You Can Do in the Content Filter Screens 11.1.2What You Need to Know About Content Filtering 11.1.3 Before You Begin 11.1.4 Content Filtering Example Page 11.2 The Keyword Screen 11.3 The Schedule Screen 11.4 The Trusted Screen Page Page Packet Filter 12.1 Overview 12.1.1 What You Can Do in the Packet Filter Screen 12.1.2 What You Need to Know About the Packet Filter 12.2 The Packet Filter Screen 12.2.1 Editing Protocol Filters 12.2.2 Configuring Protocol Filter Rules 12.2.3 Editing Generic Filters Page 12.2.4 Configuring Generic Packet Rules 12.3 Packet Filter Technical Reference 12.3.1 Filter Types and NAT 12.3.2 Firewall Versus Filters Page Certificates 13.1 Overview 13.1.1 What You Can Do in the Certificates Screens 13.1.2 What You Need to Know About Certificates 13.2 The Trusted CAs Screen Page 13.2.1 Trusted CA Import 13.2.2 Trusted CA Details Page 13.3 Certificates Technical Reference 13.3.1 Certificates Overview 13.3.2Private-PublicCertificates Page Advanced Page Static Route 14.1 Overview 14.1.1 What You Can Do in the Static Route Screens 14.2 The Static Route Screen 14.2.1 Static Route Edit Page 15.1 Overview 15.1.1What You Can Do in the 802.1Q/1P Screens 15.1.2What You Need to Know About 802.1Q/1P Page 15.1.3 802.1Q/1P Example Page Page Page 15.2 The 802.1Q/1P Group Setting Screen 15.2.1 Editing 802.1Q/1P Group Setting Page 15.3 The 802.1Q/1P Port Setting Screen Quality of Service (QoS) 16.1 Overview 16.1.1What You Can Do in the QoS Screens 16.1.2 What You Need to Know About QoS 16.1.3 QoS Class Setup Example Page Page Page 16.2 The QoS General Screen 16.3 The Class Setup Screen Page 16.3.1 The Class Configuration Screen Page Page Page 16.4 The QoS Monitor Screen 16.5 QoS Technical Reference 16.5.1 IEEE 802.1Q Tag 16.5.2 IP Precedence 16.5.3 DiffServ 16.5.4 Automatic Priority Queue Assignment Page Dynamic DNS Setup 17.1 Overview 17.1.1 What You Can Do in the DDNS Screen 17.1.2 What You Need To Know About DDNS 17.2 The Dynamic DNS Screen Page Page Remote Management 18.1 Overview 18.1.1What You Can Do in the Remote Management Screens 18.1.2What You Need to Know About Remote Management 18.2 The WWW Screen 18.2.1 Configuring the WWW Screen 18.3 The Telnet Screen 18.4 The FTP Screen 18.5 The DNS Screen 18.6 The ICMP Screen Page Universal Plug-and-Play(UPnP) 19.1 Overview 19.1.1 What You Can Do in the UPnP Screen 19.1.2 What You Need to Know About UPnP Page 19.2 The UPnP Screen 19.3 Installing UPnP in Windows Example Page Page 19.4Using UPnP in Windows XP Example Page Page Page Page Page Maintenance Page System Settings 20.1 Overview 20.1.1What You Can Do in the System Settings Screens 20.1.2What You Need to Know About System Settings 20.2 The General Screen Page 20.3 The Time Setting Screen Page Page Logs 21.1 Overview 21.1.1What You Can Do in the Log Screens 21.1.2What You Need To Know About Logs 21.2 The View Log Screen 21.3 The Log Settings Screen Page 21.4 SMTP Error Messages 21.4.1 Example E-mailLog 21.5 Log Descriptions Page Page Page Page Page Page Page Page Tools 22.1 Overview 22.1.1What You Can Do in the Tool Screens 22.1.2 What You Need To Know About Tools 22.1.3Before You Begin 22.1.4Tool Examples Page Page Page Page Page 22.2 The Firmware Screen Page 22.3 The Configuration Screen Page Page 22.4 The Restart Screen Diagnostic 23.1 Overview 23.1.1What You Can Do in the Diagnostic Screens 23.2 The General Diagnostic Screen 23.3 The DSL Line Diagnostic Screen Page Page Troubleshooting and Specifications Page Troubleshooting 24.1Power, Hardware Connections, and LEDs 24.2ZyXEL Device Access and Login Page 24.3 Internet Access Page Page Product Specifications 25.1 Hardware Specifications 25.2 Firmware Specifications Page Page Page 25.3 Wireless Features Page 25.4 Power Adaptor Specifications Page Appendices and Index Page Page Windows 95/98/Me Page Page Windows 2000/NT/XP Page Page Page Windows Vista Page Page Page Page Page Page Macintosh OS 8/9 Page Macintosh OS Linux Page Page Page Page Page Internet Explorer Pop-upBlockers Page Page JavaScript Page Java Permissions Page Mozilla Firefox Page Page Introduction to IP Addresses Structure Subnet Masks Page Notation Subnetting Page Example: Four Subnets Example: Eight Subnets Subnet Planning Configuring IP Addresses Page Page Wireless LAN Topologies Page Channel RTS/CTS Page Fragmentation Threshold Preamble Type IEEE 802.11g Wireless LAN Wireless Security Overview IEEE RADIUS Types of EAP Authentication Page Dynamic WEP Key Exchange WPA and WPA2 Page Page Page Security Parameters Summary Antenna Overview Antenna Characteristics Types of Antennas for WLAN Positioning Antennas Page Page Page Page Copyright Certifications Page ZyXEL Limited Warranty Page Index