Manuals / ZyXEL Communications / Computer Equipment / Network Router

ZyXEL Communications wireless active fiber router manual Whole

Models: wireless active fiber router

1 183

Download 183 pages 30.96 Kb

Page 76

Whole

Chapter 8 Firewall

Whole	Tick to enable whole system flooding for SYN DoS prevention.
System
Flood: SYN

Whole	Tick to enable whole system flooding for FIN DoS prevention.
System
Flood: FIN

Whole	Tick to enable whole system flooding for UDP DoS prevention.
System
Flood: UDP

Whole	Tick to enable whole system flooding for ICMP DoS prevention.
System
Flood: ICMP

Per-Source	Tick to enable per-source IP flooding for SYN DoS prevention.
IP Flood:
SYN

Per-Source	Tick to enable per-source IP flooding for FIN DoS prevention.
IP Flood: FIN

Per-Source	Tick to enable per-source IP flooding for UDP DoS prevention.
IP Flood:
UDP

Per-Source	Tick to enable per-source IP flooding for ICMP DoS prevention.
IP Flood:
ICMP

TCP/UDP	Tick to enable TCP/UDP port scan for DoS prevention and select a
PortScan	Sensitivity of Low or High.

ICMP Smurf	Tick to enable ICMP DoS prevention.

IP Land	Tick to enable IP Land DoS prevention.

IP Spoof	Tick to enable IP Spoof DoS prevention.

IP TearDrop	Tick to enable IP Tear Drop DoS prevention.

PingOfDeath	Tick to enable Ping of Death DoS prevention.

TCP Scan	Tick to enable TCP Scan DoS prevention.

TCP	Tick to enable TCP SYN with data DoS prevention.
SynWithData

UDP Bomb	Tick to enable UDP Bomb DoS prevention.

UDP	Tick to enable Echo Chargen DoS prevention.
EchoChargen

Enable	Tick to enable Source IP blocking DoS prevention and enter a
Source IP	blocking time in seconds.
Blocking

Select All	Click to select all of the DoS types on this screen.

Clear All	Click to deselect all the DoS types ticked on this screen.

Apply	Click Apply to save your changes back to the FSG1100HN.

Refresh	Click Refresh to begin configuring this screen afresh.

76

FSG1100HN User’s Guide

Image 76

ZyXEL Communications wireless active fiber router manual Whole

Contents

FSG1100HN Wireless Active Fiber Routeradmin PasswordPage About This Users Guide Intended AudienceTips for Reading User’s Guides On-Screen Related DocumentationDocumentation Feedback Need More Help?Product model and serial number Warranty Information Customer SupportDate that you received your device About This User’s GuideDocument Conventions Warnings and NotesWarnings tell you about things that could harm you or your device Syntax ConventionsDocument Conventions Icons Used in FiguresFSG1100HN User’s Guide Safety Warnings SAFETY WARNINGS FSG1100HN User’s GuideTable of Contents 3 Introducing the Web ConfiguratorFSG1100HN IntroductionMaintenance and Troubleshooting Table of ContentsSecurity ManagementPage PART Introduction Introducing the Web Configurator Setting the Device ModeGetting to Know Your FSG-100HN The WPS Button FSG1100HN User’s GuidePage 1 Getting to Know Your FSG1100HN 1.1 Overview1.2 Applications FSG1100HN Network1.4 Good Habits for Managing the FSG1100HN 1.3 Ways to Manage the FSG1100HN1.5 LED and Rear Panel Front Panel LEDs and WPS Button PowerCOLOR STATUSButton 2 The WPS Button 2.1 OverviewPage 3.2 Accessing the Web Configurator 3 Introducing the Web Configurator3.1 Overview 3.3.1 Procedure to Use the Reset Button 3.3 Resetting the FSG1100HNPassword Screen 3.4 Navigating the Web Configurator Web Configurator Status ScreenStatus Screen Mode window System Information Device Mode to3.4.1 WLAN Information Multiple AP Table 3.4.2 Summary Active Session Table Status Multiple APSystem Information Active Session LABEL3.5 Setting the Device Mode System Information Active SessionLABEL DESCRIPTIONPage Wireless LAN WAN LAN Network Address Translation NAT PART NetworkFSG1100HN User’s Guide FSG1100HN User’s Guide Example of a Wireless Network 4 Wireless LAN4.1 Overview 4.2 What You Can Do 4.3 What You Should Know4.4 Wireless Basic Settings Screen Wireless Basic SettingsLABEL DESCRIPTIONWireless Basic Settings Multiple AP 4.4.1 Multiple AP TableLABEL DESCRIPTION4.4.2 Active Wireless Client Table Wireless Basic Settings Show Active ClientsWireless Basic Settings Show Active Clients LABEL4.5 Wireless Advanced Settings Screen Wireless Advanced SettingsWireless Advanced Settings LABELEnable or disable Intra-BSS Traffic. A Basic Service Set BSS 4.6 Wireless Security Screen Wireless Security4.6.1 WEP Wireless SecurityWireless Security WEP Wireless SecurityLABEL DESCRIPTION4.6.2 WPA Wireless Security WPAWireless Security WPA LABEL DESCRIPTIONSelect Enterprise RADIUS or Personal Pre-Shared Key Select the PSK format, Passphrase or HEX - 64 charactersWireless Security WPA2 4.6.3 WPA2Wireless Security WPA2 Chapter 4 Wireless LANWireless Security WPA-Mixed 4.6.4 WPA-MixedLABEL DESCRIPTIONWireless Security WPA-Mixed LABELDESCRIPTION Select Enterprise RADIUS or Personal Pre-Shared Key4.7 Wireless Access Control Screen 4.8 Wi-Fi Protected Setup ScreenWireless Access Control Wireless Access ControlWireless WPS Wireless WPSClick Wireless WPS to open the Wi-Fi Protected Setup screen LABELChapter 4 Wireless LAN FSG1100HN User’s GuideChapter 4 Wireless LAN FSG1100HN User’s Guide5 WAN 5.1 Overview5.2 What You Can Do LAN and WAN5.3 WAN for DHCP Client Screen Networking WAN DHCP ClientNetworking WAN DHCP Client LABELthe device discovered through standard IGMP interfaces 5.4 WAN for Static IP Screen Networking WAN Static IPNetworking WAN Static IP LABELuses TCP/IP for simple peer-to-peer network connectivity between 5.5 WAN for PPPoE Screen Networking WAN PPPoELABEL DESCRIPTIONAttain DNS Chapter 5 WAN FSG1100HN User’s GuideLAN Setup 6 LAN6.1 Overview 6.2 What You Can Do6.3.1 IP Pool Setup 6.3 What You Need To Know6.3.2 LAN TCP/IP LAN and WAN IP Addresses6.4 LAN General Screen Networking LAN GeneralNetworking LAN General LABEL6.4.1 Active DHCP Client Table Networking LAN Show ClientNetworking LAN Show Client LABEL6.4.2 Static DHCP Networking LAN Set Static DHCPNetworking LAN Set Static DHCP LABEL6.5 VLAN Screen Networking VLANNetworking VLAN LABELChapter 6 LAN FSG1100HN User’s Guide7 NAT 7.1 Overview7.2 What You Can Do NAT Example7.3 NAT General Screen Networking NAT GeneralNetworking NAT General LABELClick Refresh to begin configuring this screen afresh ApplyClick Apply to save your changes back to the FSG1100HN Refresh7.4 NAT DMZ Screen Networking NAT DMZEnable of Disable DMZ Networking NAT DMZ7.5 NAT Port Forwarding Screen Networking NAT Port ForwardingNetworking NAT Port Forwarding LABELChapter 7 NAT FSG1100HN User’s GuideSecurity PARTFirewall FSG1100HN User’s GuideFSG1100HN User’s Guide 8 Firewall Default Firewall ActionOverview 8.2 What You Need To Know 8.1 What You Can Do8.2.1 About the FSG1100HN Firewall 8.3 Firewall Filter Screen Firewall FilterFirewall Filter LABEL8.4 Firewall Filter Add Screen Firewall Filter AddFirewall Filter Add LABEL8.5 Firewall Denial of Service Screen Firewall Denial of ServiceFirewall Denial of Service LABELWhole 8.6 Firewall Content Filter Screen Firewall Content FilterFirewall Content Filter is news/pressroom.phpType a keyword in this field. You may use any character up to Chapter 8 Firewall FSG1100HN User’s GuideBandwidth Maintenance TR-069 Auto Provision PART ManagementFSG1100HN User’s Guide FSG1100HN User’s Guide 9 Media Bandwidth Management 9.1 Media Bandwidth Management ScreenNetworking MBM Networking MBMRestricted maximum bandwidth Choose Guaranteed minimum bandwidth orChapter 9 Media Bandwidth Management Chapter 9 Media Bandwidth Management FSG1100HN User’s Guide10 TR-069 10.1 TR-069 General ScreenManagement TR-069 General Management TR-069 GeneralClick Refresh to begin configuring this screen afresh RefreshChapter 10 TR-069 FSG1100HN User’s GuideChapter 10 TR-069 FSG1100HN User’s Guide11 Auto Provision 11.1 Auto Provision ScreenManagement Auto Provision LABEL DESCRIPTIONChapter 11 Auto Provision Refresh Click Refresh to begin configuring this screen afreshFSG1100HN User’s Guide Chapter 11 Auto Provision FSG1100HN User’s GuideSystem Settings Log Tools PART Maintenance and TroubleshootingFSG1100HN User’s Guide FSG1100HN User’s Guide 12 System Settings 12.1 System Settings General ScreenMaintenance System Settings General Maintenance System Settings General12.2 System Settings Dynamic DNS Screen Maintenance System Settings Dynamic DNSLABEL DESCRIPTION12.3 System Settings Time Screen Maintenance System Settings TimeLABEL DESCRIPTIONChoose the time zone of your location. This will set the time Chapter 12 System Settings FSG1100HN User’s GuideMaintenance Log 13 Log13.1 Log Screen LABELChapter 13 Log FSG1100HN User’s Guide14.2 Tools Configuration Screen 14 Tools14.1 Tools Firmware Screen LABEL DESCRIPTION14.3 Tools Restart Screen Click Maintenance Tools Restart to open the Restart screenLABEL DESCRIPTIONThe following table describes the tools restart label in this screen LABEL DESCRIPTIONRestart Chapter 14 ToolsChapter 14 Tools FSG1100HN User’s GuidePART Appendices Setting up Your Computer’s IP Address Wireless LANs ServicesLegal Information FSG1100HN User’s GuideFSG1100HN User’s Guide Disable pop-up Blockers In order to use the Web Configurator you need to allowA Pop-up Windows, JavaScripts and Java Permissions Internet Explorer Pop-up BlockersEnable pop-up Blockers with Exceptions Internet Options Privacy2 Select Settings…to open the Pop-up Blocker Settings screen Internet Options PrivacyAppendix A Pop-up Windows, JavaScripts, and Java Permissions FSG1100HN User’s GuidePop-up Blocker Settings JavaScriptsAppendix A Pop-up Windows, JavaScripts, and Java Permissions FSG1100HN User’s GuideInternet Options Security 2 Click the Custom Level... button 3 Scroll down to ScriptingAppendix A Pop-up Windows, JavaScripts, and Java Permissions FSG1100HN User’s GuideSecurity Settings - Java Scripting Java PermissionsAppendix A Pop-up Windows, JavaScripts, and Java Permissions FSG1100HN User’s GuideSecurity Settings - Java JAVA SunAppendix A Pop-up Windows, JavaScripts, and Java Permissions FSG1100HN User’s GuideJava Sun 3 Click OK to close the windowAppendix A Pop-up Windows, JavaScripts, and Java Permissions FSG1100HN User’s GuideIntroduction to IP Addresses B IP Addresses and SubnettingStructure Network Number and Host ID Subnet MasksSubnet Mask - Identifying Network Number Subnet Masks Network SizeSubnet Mask - Identifying Network Number Maximum Host Numbers NotationAlternative Subnet Mask Notation Subnetting Subnetting Example Before SubnettingExample Four Subnets Subnetting Example After SubnettingSubnet SubnetSubnet SubnetSubnet Planning Example Eight Subnets24-bit Network Number Subnet Planning Configuring IP Addresses NO. “BORROWED”SUBNET MASK NO. HOSTSPrivate IP Addresses C Setting up Your Computer’s IP Address Windows 95/98/Me Network Configuration Installing ComponentsWindows 95/98/Me Configuring Windows 95/98/Me TCP/IP Properties IP AddressVerifying Settings Windows 95/98/Me TCP/IP Properties DNS ConfigurationWindows 2000/NT/XP Windows XP Start MenuAppendix C Setting up Your Computer’s IP Address FSG1100HN User’s GuideWindows XP Control Panel Windows XP Control Panel Network Connections PropertiesAppendix C Setting up Your Computer’s IP Address 3 Right-click Local Area Connection and then click PropertiesWindows XP Local Area Connection Properties Click AdvancedWindows XP Internet Protocol TCP/IP Properties Windows XP Advanced TCP/IP Properties Click OK when finishedVerifying Settings 1 Click Start, All Programs, Accessories and then Command PromptWindows XP Internet Protocol TCP/IP Properties 8 Click OK to close the Internet Protocol TCP/IP Properties windowMacintosh OS 8/9 Macintosh OS 8/9 Apple MenuAppendix C Setting up Your Computer’s IP Address FSG1100HN User’s GuideMacintosh OS 8/9 TCP/IP Verifying Settings2 Select Ethernet built-in from the Connect via list 5 Close the TCP/IP Control PanelMacintosh OS X Apple Menu Macintosh OSMacintosh OS X Network Using the K Desktop Environment KDE Note Make sure you are logged in as the root administratorRed Hat 9.0 KDE Network Configuration Devices LinuxRed Hat 9.0 KDE Network Configuration DNS Red Hat 9.0 KDE Ethernet Device GeneralRed Hat 9.0 KDE Network Configuration Activate Using Configuration FilesRed Hat 9.0 Dynamic IP Address Setting in ifconfig-eth0 Red Hat 9.0 Static IP Address Setting in ifconfig-eth0 Red Hat 9.0 DNS Settings in resolv.confRed Hat 9.0 Restart Ethernet Card BOOTPROTO=staticVerifying Settings Red Hat 9.0 Checking TCP/IP PropertiesAppendix C Setting up Your Computer’s IP Address FSG1100HN User’s GuideD Wireless LANs Wireless LAN TopologiesAd-hoc Wireless LAN Configuration Peer-to-Peer Communication in an Ad-hoc NetworkBasic Service Set RTS/CTS ChannelInfrastructure WLAN RTS/CTS Fragmentation Threshold IEEE 802.11g Wireless LANPreamble Type DBPSK Differential Binary Phase Shift Keyed DQPSK Differential Quadrature Phase Shift KeyingIEEE RADIUSTypes of RADIUS Messages Types of AuthenticationEAP-MD5 Message-Digest Algorithm EAP-TTLS Tunneled Transport Layer Service EAP-TLS Transport Layer SecurityPEAP Protected EAP LEAPWPA2 EncryptionEAP-MD5 EAP-TLSUser Authentication WPA2-PSK Application Example WPA2-PSK AuthenticationWPA2 with RADIUS Application Example Wireless Security Relational Matrix Security Parameters SummaryE Services Examples of ServicesNAME PROTOCOLExamples of Services continued NAMEPROTOCOL PORTSExamples of Services continued NAMEPROTOCOL PORTSExamples of Services continued NAMEPROTOCOL PORTSF Legal Information CopyrightCertifications DisclaimerZyXEL Limited Warranty Viewing CertificationsEnd-User License Agreement for FSG1100HN Registration4.Restrictions 7.Limitation of Liability Appendix E Services FSG1100HN User’s GuideOpen-Sourced Components GNU GENERAL PUBLIC LICENSE Version 2, June verbatim or with modifications and/or translated into another language. Hereinafter, translation is included without limitation in the term modification. Each licensee is addressed as you. Activities other than copying, distribution and modification are not covered by this License they are outside its scope. The act of running the Program is not restricted, and the output from the Program is covered only if its contents constitute a work based on the Program independent of having been made by running the Program. Whether that is true depends on what the Program does modifications to it. For an executable work, complete source code means all the source code for all modules it contains, plus any associated interface definition files, plus the NO WARRANTY Copyright 2001 H. Peter Anvin - All Rights Reserved OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF \ SUCH DAMAGE notice, this list of conditions and the following disclaimer THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS AND \ OR SERVICES LOSS OF USE, DATA, OR PROFITS OR BUSINESS INTERRUPTION tftp-hpa $Id$ notice, this list of conditions and the following disclaimer pppd - Point-to-Point Protocol Daemon Authors This Product includes igmpproxy 0.1 software under below license 1. Definitions 2.4 Restrictions on Use 4.4 No Modifications to Server Identification Field 7. Indemnification by You 11. Entire Agreement