Manuals / ZyXEL Communications / Computer Equipment / Network Router

ZyXEL Communications wireless active fiber router manual Security, Part, Firewall

Models: wireless active fiber router

1 183

Download 183 pages 30.96 Kb

Page 69

PART III

PART III

Security

Firewall (71)

FSG1100HN User’s Guide

69

Image 69

ZyXEL Communications wireless active fiber router manual Security, Part, Firewall, FSG1100HN User’s Guide

Contents

Wireless Active Fiber Router FSG1100HNadmin PasswordPage Intended Audience About This Users GuideTips for Reading User’s Guides On-Screen Related DocumentationNeed More Help? Documentation FeedbackCustomer Support Product model and serial number Warranty InformationDate that you received your device About This User’s GuideWarnings and Notes Document ConventionsWarnings tell you about things that could harm you or your device Syntax ConventionsIcons Used in Figures Document ConventionsFSG1100HN User’s Guide Safety Warnings FSG1100HN User’s Guide SAFETY WARNINGS3 Introducing the Web Configurator Table of ContentsFSG1100HN IntroductionTable of Contents Maintenance and TroubleshootingSecurity ManagementPage Introducing the Web Configurator Setting the Device Mode PART IntroductionGetting to Know Your FSG-100HN The WPS Button FSG1100HN User’s GuidePage 1.1 Overview 1 Getting to Know Your FSG1100HN1.2 Applications FSG1100HN Network1.3 Ways to Manage the FSG1100HN 1.4 Good Habits for Managing the FSG1100HN1.5 LED and Rear Panel Power Front Panel LEDs and WPS ButtonCOLOR STATUSButton 2.1 Overview 2 The WPS ButtonPage 3 Introducing the Web Configurator 3.2 Accessing the Web Configurator3.1 Overview 3.3 Resetting the FSG1100HN 3.3.1 Procedure to Use the Reset ButtonPassword Screen Web Configurator Status Screen 3.4 Navigating the Web ConfiguratorStatus Screen Mode window System Information Device Mode to3.4.1 WLAN Information Multiple AP Table Status Multiple AP 3.4.2 Summary Active Session TableSystem Information Active Session LABELSystem Information Active Session 3.5 Setting the Device ModeLABEL DESCRIPTIONPage PART Network Wireless LAN WAN LAN Network Address Translation NATFSG1100HN User’s Guide FSG1100HN User’s Guide 4 Wireless LAN Example of a Wireless Network4.1 Overview 4.3 What You Should Know 4.2 What You Can DoWireless Basic Settings 4.4 Wireless Basic Settings ScreenLABEL DESCRIPTION4.4.1 Multiple AP Table Wireless Basic Settings Multiple APLABEL DESCRIPTIONWireless Basic Settings Show Active Clients 4.4.2 Active Wireless Client TableWireless Basic Settings Show Active Clients LABELWireless Advanced Settings 4.5 Wireless Advanced Settings ScreenWireless Advanced Settings LABELEnable or disable Intra-BSS Traffic. A Basic Service Set BSS Wireless Security 4.6 Wireless Security Screen4.6.1 WEP Wireless SecurityWireless Security Wireless Security WEPLABEL DESCRIPTIONWireless Security WPA 4.6.2 WPAWireless Security WPA DESCRIPTION LABELSelect Enterprise RADIUS or Personal Pre-Shared Key Select the PSK format, Passphrase or HEX - 64 characters4.6.3 WPA2 Wireless Security WPA2Wireless Security WPA2 Chapter 4 Wireless LAN4.6.4 WPA-Mixed Wireless Security WPA-MixedLABEL DESCRIPTIONLABEL Wireless Security WPA-MixedDESCRIPTION Select Enterprise RADIUS or Personal Pre-Shared Key4.8 Wi-Fi Protected Setup Screen 4.7 Wireless Access Control ScreenWireless Access Control Wireless Access ControlWireless WPS Wireless WPSClick Wireless WPS to open the Wi-Fi Protected Setup screen LABELFSG1100HN User’s Guide Chapter 4 Wireless LANFSG1100HN User’s Guide Chapter 4 Wireless LAN5.1 Overview 5 WAN5.2 What You Can Do LAN and WANNetworking WAN DHCP Client 5.3 WAN for DHCP Client ScreenNetworking WAN DHCP Client LABELthe device discovered through standard IGMP interfaces Networking WAN Static IP 5.4 WAN for Static IP ScreenNetworking WAN Static IP LABELuses TCP/IP for simple peer-to-peer network connectivity between Networking WAN PPPoE 5.5 WAN for PPPoE ScreenLABEL DESCRIPTIONAttain DNS FSG1100HN User’s Guide Chapter 5 WAN6 LAN LAN Setup6.1 Overview 6.2 What You Can Do6.3 What You Need To Know 6.3.1 IP Pool Setup6.3.2 LAN TCP/IP LAN and WAN IP AddressesNetworking LAN General 6.4 LAN General ScreenNetworking LAN General LABELNetworking LAN Show Client 6.4.1 Active DHCP Client TableNetworking LAN Show Client LABELNetworking LAN Set Static DHCP 6.4.2 Static DHCPNetworking LAN Set Static DHCP LABELNetworking VLAN 6.5 VLAN ScreenNetworking VLAN LABELFSG1100HN User’s Guide Chapter 6 LAN7.1 Overview 7 NAT7.2 What You Can Do NAT ExampleNetworking NAT General 7.3 NAT General ScreenNetworking NAT General LABELApply Click Refresh to begin configuring this screen afreshClick Apply to save your changes back to the FSG1100HN RefreshNetworking NAT DMZ 7.4 NAT DMZ ScreenEnable of Disable DMZ Networking NAT DMZNetworking NAT Port Forwarding 7.5 NAT Port Forwarding ScreenNetworking NAT Port Forwarding LABELFSG1100HN User’s Guide Chapter 7 NATPART SecurityFirewall FSG1100HN User’s GuideFSG1100HN User’s Guide Default Firewall Action 8 FirewallOverview 8.1 What You Can Do 8.2 What You Need To Know8.2.1 About the FSG1100HN Firewall Firewall Filter 8.3 Firewall Filter ScreenFirewall Filter LABELFirewall Filter Add 8.4 Firewall Filter Add ScreenFirewall Filter Add LABELFirewall Denial of Service 8.5 Firewall Denial of Service ScreenFirewall Denial of Service LABELWhole Firewall Content Filter 8.6 Firewall Content Filter ScreenFirewall Content Filter is news/pressroom.phpType a keyword in this field. You may use any character up to FSG1100HN User’s Guide Chapter 8 FirewallPART Management Bandwidth Maintenance TR-069 Auto ProvisionFSG1100HN User’s Guide FSG1100HN User’s Guide 9.1 Media Bandwidth Management Screen 9 Media Bandwidth ManagementNetworking MBM Networking MBMChoose Guaranteed minimum bandwidth or Restricted maximum bandwidthChapter 9 Media Bandwidth Management FSG1100HN User’s Guide Chapter 9 Media Bandwidth Management10.1 TR-069 General Screen 10 TR-069Management TR-069 General Management TR-069 GeneralRefresh Click Refresh to begin configuring this screen afreshChapter 10 TR-069 FSG1100HN User’s GuideFSG1100HN User’s Guide Chapter 10 TR-06911.1 Auto Provision Screen 11 Auto ProvisionManagement Auto Provision LABEL DESCRIPTIONRefresh Click Refresh to begin configuring this screen afresh Chapter 11 Auto ProvisionFSG1100HN User’s Guide FSG1100HN User’s Guide Chapter 11 Auto ProvisionPART Maintenance and Troubleshooting System Settings Log ToolsFSG1100HN User’s Guide FSG1100HN User’s Guide 12.1 System Settings General Screen 12 System SettingsMaintenance System Settings General Maintenance System Settings GeneralMaintenance System Settings Dynamic DNS 12.2 System Settings Dynamic DNS ScreenLABEL DESCRIPTIONMaintenance System Settings Time 12.3 System Settings Time ScreenLABEL DESCRIPTIONChoose the time zone of your location. This will set the time FSG1100HN User’s Guide Chapter 12 System Settings13 Log Maintenance Log13.1 Log Screen LABELFSG1100HN User’s Guide Chapter 13 Log14 Tools 14.2 Tools Configuration Screen14.1 Tools Firmware Screen LABEL DESCRIPTIONClick Maintenance Tools Restart to open the Restart screen 14.3 Tools Restart ScreenLABEL DESCRIPTIONLABEL DESCRIPTION The following table describes the tools restart label in this screenRestart Chapter 14 ToolsFSG1100HN User’s Guide Chapter 14 ToolsSetting up Your Computer’s IP Address Wireless LANs Services PART AppendicesLegal Information FSG1100HN User’s GuideFSG1100HN User’s Guide In order to use the Web Configurator you need to allow Disable pop-up BlockersA Pop-up Windows, JavaScripts and Java Permissions Internet Explorer Pop-up BlockersInternet Options Privacy Enable pop-up Blockers with ExceptionsInternet Options Privacy 2 Select Settings…to open the Pop-up Blocker Settings screenAppendix A Pop-up Windows, JavaScripts, and Java Permissions FSG1100HN User’s GuideJavaScripts Pop-up Blocker SettingsAppendix A Pop-up Windows, JavaScripts, and Java Permissions FSG1100HN User’s Guide2 Click the Custom Level... button 3 Scroll down to Scripting Internet Options SecurityAppendix A Pop-up Windows, JavaScripts, and Java Permissions FSG1100HN User’s GuideJava Permissions Security Settings - Java ScriptingAppendix A Pop-up Windows, JavaScripts, and Java Permissions FSG1100HN User’s GuideJAVA Sun Security Settings - JavaAppendix A Pop-up Windows, JavaScripts, and Java Permissions FSG1100HN User’s Guide3 Click OK to close the window Java SunAppendix A Pop-up Windows, JavaScripts, and Java Permissions FSG1100HN User’s GuideB IP Addresses and Subnetting Introduction to IP AddressesStructure Subnet Masks Network Number and Host IDSubnet Mask - Identifying Network Number Network Size Subnet MasksSubnet Mask - Identifying Network Number Notation Maximum Host NumbersAlternative Subnet Mask Notation Subnetting Example Before Subnetting SubnettingSubnetting Example After Subnetting Example Four SubnetsSubnet SubnetSubnet SubnetExample Eight Subnets Subnet Planning24-bit Network Number Subnet Planning NO. “BORROWED” Configuring IP AddressesSUBNET MASK NO. HOSTSPrivate IP Addresses C Setting up Your Computer’s IP Address Installing Components Windows 95/98/Me Network ConfigurationWindows 95/98/Me Windows 95/98/Me TCP/IP Properties IP Address ConfiguringWindows 95/98/Me TCP/IP Properties DNS Configuration Verifying SettingsWindows XP Start Menu Windows 2000/NT/XPAppendix C Setting up Your Computer’s IP Address FSG1100HN User’s GuideWindows XP Control Panel Network Connections Properties Windows XP Control PanelAppendix C Setting up Your Computer’s IP Address 3 Right-click Local Area Connection and then click PropertiesClick Advanced Windows XP Local Area Connection PropertiesWindows XP Internet Protocol TCP/IP Properties Click OK when finished Windows XP Advanced TCP/IP Properties1 Click Start, All Programs, Accessories and then Command Prompt Verifying SettingsWindows XP Internet Protocol TCP/IP Properties 8 Click OK to close the Internet Protocol TCP/IP Properties windowMacintosh OS 8/9 Apple Menu Macintosh OS 8/9Appendix C Setting up Your Computer’s IP Address FSG1100HN User’s GuideVerifying Settings Macintosh OS 8/9 TCP/IP2 Select Ethernet built-in from the Connect via list 5 Close the TCP/IP Control PanelMacintosh OS Macintosh OS X Apple MenuMacintosh OS X Network Note Make sure you are logged in as the root administrator Using the K Desktop Environment KDERed Hat 9.0 KDE Network Configuration Devices LinuxRed Hat 9.0 KDE Ethernet Device General Red Hat 9.0 KDE Network Configuration DNSUsing Configuration Files Red Hat 9.0 KDE Network Configuration ActivateRed Hat 9.0 Dynamic IP Address Setting in ifconfig-eth0 Red Hat 9.0 DNS Settings in resolv.conf Red Hat 9.0 Static IP Address Setting in ifconfig-eth0Red Hat 9.0 Restart Ethernet Card BOOTPROTO=staticRed Hat 9.0 Checking TCP/IP Properties Verifying SettingsAppendix C Setting up Your Computer’s IP Address FSG1100HN User’s GuideWireless LAN Topologies D Wireless LANsAd-hoc Wireless LAN Configuration Peer-to-Peer Communication in an Ad-hoc NetworkBasic Service Set Channel RTS/CTSInfrastructure WLAN RTS/CTS IEEE 802.11g Wireless LAN Fragmentation ThresholdPreamble Type DQPSK Differential Quadrature Phase Shift Keying DBPSK Differential Binary Phase Shift KeyedIEEE RADIUSTypes of Authentication Types of RADIUS MessagesEAP-MD5 Message-Digest Algorithm EAP-TLS Transport Layer Security EAP-TTLS Tunneled Transport Layer ServicePEAP Protected EAP LEAPEncryption WPA2EAP-MD5 EAP-TLSUser Authentication WPA2-PSK Authentication WPA2-PSK Application ExampleWPA2 with RADIUS Application Example Security Parameters Summary Wireless Security Relational MatrixExamples of Services E ServicesNAME PROTOCOLNAME Examples of Services continuedPROTOCOL PORTSNAME Examples of Services continuedPROTOCOL PORTSNAME Examples of Services continuedPROTOCOL PORTSCopyright F Legal InformationCertifications DisclaimerViewing Certifications ZyXEL Limited WarrantyRegistration End-User License Agreement for FSG1100HN4.Restrictions 7.Limitation of Liability FSG1100HN User’s Guide Appendix E ServicesOpen-Sourced Components GNU GENERAL PUBLIC LICENSE Version 2, June verbatim or with modifications and/or translated into another language. Hereinafter, translation is included without limitation in the term modification. Each licensee is addressed as you. Activities other than copying, distribution and modification are not covered by this License they are outside its scope. The act of running the Program is not restricted, and the output from the Program is covered only if its contents constitute a work based on the Program independent of having been made by running the Program. Whether that is true depends on what the Program does modifications to it. For an executable work, complete source code means all the source code for all modules it contains, plus any associated interface definition files, plus the NO WARRANTY Copyright 2001 H. Peter Anvin - All Rights Reserved OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF \ SUCH DAMAGE notice, this list of conditions and the following disclaimer THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS AND \ OR SERVICES LOSS OF USE, DATA, OR PROFITS OR BUSINESS INTERRUPTION tftp-hpa $Id$ notice, this list of conditions and the following disclaimer pppd - Point-to-Point Protocol Daemon Authors This Product includes igmpproxy 0.1 software under below license 1. Definitions 2.4 Restrictions on Use 4.4 No Modifications to Server Identification Field 7. Indemnification by You 11. Entire Agreement