ZyXEL 4-Port Manuel d'utilisateur

www.zyxel.comP-793HG.SHDSL.bis 4-port Security GatewayUser’s GuideVersion 3.401/2007Edition 2

Contents OverviewP-793H User’s Guide10Firewall Setup ...

Chapter 6 LAN SetupP-793H User’s Guide1006.5 LAN Client ListThis table allows you to assign IP addresses on the LAN to specific individual computers

Chapter 6 LAN SetupP-793H User’s Guide1016.6 LAN IP AliasIP alias allows you to partition a physical network into different logical networks over th

Chapter 6 LAN SetupP-793H User’s Guide102Figure 43 LAN > IP AliasThe following table describes the labels in this screen.Table 28 LAN > IP A

P-793H User’s Guide103CHAPTER 7 Network Address Translation(NAT) ScreensThis chapter discusses how to configure NAT on the ZyXEL Device.7.1 NAT Over

Chapter 7 Network Address Translation (NAT) ScreensP-793H User’s Guide1047.1.2 What NAT DoesIn the simplest form, NAT changes the source IP address i

Chapter 7 Network Address Translation (NAT) ScreensP-793H User’s Guide105Figure 45 NAT Application With IP Alias7.1.5 NAT Mapping TypesNAT support

Chapter 7 Network Address Translation (NAT) ScreensP-793H User’s Guide106The following table summarizes these types.7.2 SUA (Single User Account) Ver

Chapter 7 Network Address Translation (NAT) ScreensP-793H User’s Guide107The following table describes the labels in this screen. 7.4 Port Forwardin

Chapter 7 Network Address Translation (NAT) ScreensP-793H User’s Guide108" If you do not assign a Default Server IP address, the ZyXEL Device dis

Chapter 7 Network Address Translation (NAT) ScreensP-793H User’s Guide109" If you do not assign a Default Server IP address, the ZyXEL Device di

Table of ContentsP-793H User’s Guide11Table of ContentsAbout This User's Guide ...

Chapter 7 Network Address Translation (NAT) ScreensP-793H User’s Guide1107.5.1 Port Forwarding Rule Edit Use this screen to edit a port forwarding ru

Chapter 7 Network Address Translation (NAT) ScreensP-793H User’s Guide1117.6 Address Mapping " The Address Mapping screen is available only whe

Chapter 7 Network Address Translation (NAT) ScreensP-793H User’s Guide1127.6.1 Address Mapping Rule Edit Use this screen to edit an address mapping r

Chapter 7 Network Address Translation (NAT) ScreensP-793H User’s Guide113Local End IP This is the end local IP address (ILA). If your rule is for all

Chapter 7 Network Address Translation (NAT) ScreensP-793H User’s Guide114

115PART IIISecurity and Advanced SetupFirewalls (117)Firewall Configuration (129)Content Filtering (149)IPSec VPN (153)Static Route (177)Bandwidt

116

P-793H User’s Guide117CHAPTER 8 FirewallsThis chapter gives some background information on firewalls and introduces the ZyXEL Device firewall.8.1 Fi

Chapter 8 FirewallsP-793H User’s Guide1188.2.2 Application-level FirewallsApplication-level firewalls restrict access by serving as proxies for exter

Chapter 8 FirewallsP-793H User’s Guide1198.3.1 Denial of Service AttacksFigure 52 ZyXEL Device Firewall Application8.4 Denial of ServiceDenials o

Table of ContentsP-793H User’s Guide123.1 Internet Setup Wizard ...

Chapter 8 FirewallsP-793H User’s Guide1204 IP Spoofing.5 "Ping of Death" and "Teardrop" attacks exploit bugs in the TCP/IP impleme

Chapter 8 FirewallsP-793H User’s Guide121Figure 54 SYN Flood•In a LAND Attack, hackers flood SYN packets into the network with a spoofed source IP

Chapter 8 FirewallsP-793H User’s Guide1228.4.2.1 ICMP Vulnerability ICMP is an error-reporting protocol that works in concert with IP. The following

Chapter 8 FirewallsP-793H User’s Guide123are allowed in. The ZyXEL Device uses stateful packet inspection to protect the private LAN from hackers and

Chapter 8 FirewallsP-793H User’s Guide1246 Later, an inbound packet reaches the interface. This packet is part of the connection previously establishe

Chapter 8 FirewallsP-793H User’s Guide125If an initiation packet originates on the LAN, this means that someone is trying to make a connection from t

Chapter 8 FirewallsP-793H User’s Guide1268.6 Guidelines for Enhancing Security with Your Firewall• Change the default password. • Limit who can telne

Chapter 8 FirewallsP-793H User’s Guide127• Always shred confidential information, particularly about your computer, before throwing it away. Some hac

Chapter 8 FirewallsP-793H User’s Guide128• To selectively block/allow inbound or outbound traffic between inside host/networks and outside host/networ

P-793H User’s Guide129CHAPTER 9 Firewall ConfigurationThis chapter shows you how to enable and configure the ZyXEL Device firewall.9.1 Access Method

Table of ContentsP-793H User’s Guide135.5.2 Configuring More Connections Advanced Setup ... 845

Chapter 9 Firewall ConfigurationP-793H User’s Guide130" If you configure firewall rules without a good understanding of how they work, you might

Chapter 9 Firewall ConfigurationP-793H User’s Guide1313 Is it possible to modify the rule to be more specific? For example, if IRC is blocked for all

Chapter 9 Firewall ConfigurationP-793H User’s Guide1329.4.1 LAN to WAN RulesThe default rule for LAN to WAN traffic is that all users on the LAN are

Chapter 9 Firewall ConfigurationP-793H User’s Guide133Figure 58 “Triangle Route” Problem9.5.2 Solving the “Triangle Route” ProblemYou can have the

Chapter 9 Firewall ConfigurationP-793H User’s Guide134Figure 60 Firewall > GeneralThe following table describes the labels in this screen. Table

Chapter 9 Firewall ConfigurationP-793H User’s Guide1359.7 Firewall Rules Summary " The ordering of your rules is very important as rules are ap

Chapter 9 Firewall ConfigurationP-793H User’s Guide1369.7.1 Configuring Firewall Rules Refer to Section 8.1 on page 117 for more information. Use t

Chapter 9 Firewall ConfigurationP-793H User’s Guide137Figure 62 Firewall > Rules > Add/EditThe following table describes the labels in this s

Chapter 9 Firewall ConfigurationP-793H User’s Guide138Source/Destination AddressAddress Type Do you want your rule to apply to packets with a particul

Chapter 9 Firewall ConfigurationP-793H User’s Guide1399.7.2 Customized Services Configure customized services and port numbers not predefined by the

Table of ContentsP-793H User’s Guide14Part III: Security and Advanced Setup ...115Chapter 8Firewalls...

Chapter 9 Firewall ConfigurationP-793H User’s Guide140Figure 64 Firewall > Rules > Add/Edit > Edit Customized Services > EditThe followi

Chapter 9 Firewall ConfigurationP-793H User’s Guide141Figure 65 Firewall Example: Rules3 In the Rules screen, select the index number after that yo

Chapter 9 Firewall ConfigurationP-793H User’s Guide142Figure 67 Firewall Example: Edit Rule: Destination Address 9 Use the Add >> and Remove b

Chapter 9 Firewall ConfigurationP-793H User’s Guide143Figure 68 Firewall Example: Edit Rule: Select Customized ServicesOn completing the configurat

Chapter 9 Firewall ConfigurationP-793H User’s Guide144Figure 69 Firewall Example: Rules: MyService 9.9 Anti-Probing If an outside user attempts to

Chapter 9 Firewall ConfigurationP-793H User’s Guide145The following table describes the labels in this screen.9.10 DoS Thresholds For DoS attacks, t

Chapter 9 Firewall ConfigurationP-793H User’s Guide1469.10.2 Half-Open SessionsAn unusually high number of half-open sessions (either an absolute num

Chapter 9 Firewall ConfigurationP-793H User’s Guide147Figure 71 Firewall > ThresholdThe following table describes the labels in this screen.Tabl

Chapter 9 Firewall ConfigurationP-793H User’s Guide148Action taken when TCP Maximum Incomplete reached thresholdDelete the Oldest Half Open Session wh

P-793H User’s Guide149CHAPTER 10 Content FilteringThis chapter covers how to configure content filtering.10.1 Content Filtering Overview Internet co

Table of ContentsP-793H User’s Guide159.7.2 Customized Services ...

Chapter 10 Content FilteringP-793H User’s Guide150The following table describes the labels in this screen. 10.3 Configuring the Schedule Use this scr

Chapter 10 Content FilteringP-793H User’s Guide151The following table describes the labels in this screen. 10.4 Configuring Trusted Computers Use th

Chapter 10 Content FilteringP-793H User’s Guide152

P-793H User’s Guide153CHAPTER 11 IPSec VPNThis chapter explains how to set up and maintain IPSec VPNs in the ZyXEL Device.11.1 IPSec VPN OverviewA v

Chapter 11 IPSec VPNP-793H User’s Guide154Figure 76 VPN: IKE SA and IPSec SA In this example, a computer in network A is exchanging data with a comp

Chapter 11 IPSec VPNP-793H User’s Guide15511.1.1.2 IKE SA ProposalThe IKE SA proposal is used to identify the encryption algorithm, authentication a

Chapter 11 IPSec VPNP-793H User’s Guide15611.1.1.4 AuthenticationBefore the ZyXEL Device and remote IPSec router establish an IKE SA, they have to ve

Chapter 11 IPSec VPNP-793H User’s Guide157In the following example, the authentication fails, so they cannot establish an IKE SA.It is also possible

Chapter 11 IPSec VPNP-793H User’s Guide158Aggressive mode does not provide as much security as main mode because the identity of the ZyXEL Device and

Chapter 11 IPSec VPNP-793H User’s Guide159" An IPSec SA stays connected even if the underlying IKE SA is not available anymore.This section intr

Table of ContentsP-793H User’s Guide1613.2 Application-based Bandwidth Management ...

Chapter 11 IPSec VPNP-793H User’s Guide160• Inside header: The inside IP header contains the IP address of the computers behind the ZyXEL Device or re

Chapter 11 IPSec VPNP-793H User’s Guide161In IPSec SAs using manual keys, the ZyXEL Device and remote IPSec router do not establish an IKE SA. They o

Chapter 11 IPSec VPNP-793H User’s Guide162Figure 82 VPN > SetupThe following table describes the fields in this screen.Table 51 VPN > SetupL

Chapter 11 IPSec VPNP-793H User’s Guide16311.3 Editing VPN PoliciesSee Section 11.1 on page 153 for background information. Use this screen to edit

Chapter 11 IPSec VPNP-793H User’s Guide164The following table describes the fields in this screen.Table 52 VPN > Setup > EditLABEL DESCRIPTION

Chapter 11 IPSec VPNP-793H User’s Guide165End / Subnet Mask When the Local Address Type field is configured to Single, this field is N/A. When the Lo

Chapter 11 IPSec VPNP-793H User’s Guide166My IP Address Enter the WAN IP address of your ZyXEL Device. The VPN tunnel has to be rebuilt if this IP add

Chapter 11 IPSec VPNP-793H User’s Guide16711.4 Configuring Advanced IKE SettingsSee Section 11.1 on page 153 for background information. Use this sc

Chapter 11 IPSec VPNP-793H User’s Guide168The following table describes the fields in this screen.Table 53 VPN > Setup > Edit > AdvancedLAB

Chapter 11 IPSec VPNP-793H User’s Guide16911.5 Configuring Manual KeyYou only configure VPN Manual Key when you select Manual in the IPSec Key Mode

Table of ContentsP-793H User’s Guide1716.1.1 How do I know if I'm using UPnP? ...

Chapter 11 IPSec VPNP-793H User’s Guide170Figure 85 VPN > Setup > Edit > ManualThe following table describes the fields in this screen.Tabl

Chapter 11 IPSec VPNP-793H User’s Guide171Local Local IP addresses must be static and correspond to the remote IPSec router's configured remote

Chapter 11 IPSec VPNP-793H User’s Guide17211.6 Viewing SA MonitorClick Security, VPN and Monitor to open the SA Monitor screen as shown. Use this scr

Chapter 11 IPSec VPNP-793H User’s Guide173Figure 86 VPN > MonitorThe following table describes the fields in this screen.11.7 Configuring Globa

Chapter 11 IPSec VPNP-793H User’s Guide174The following table describes the fields in this screen.11.8 Telecommuter VPN/IPSec ExamplesThe following e

Chapter 11 IPSec VPNP-793H User’s Guide17511.8.2 Telecommuters Using Unique VPN Rules ExampleIn this example the telecommuters (A, B and C in the fi

Chapter 11 IPSec VPNP-793H User’s Guide17611.9 VPN and Remote ManagementIf a VPN tunnel uses Telnet, FTP, WWW, then you should configure remote manag

P-793H User’s Guide177CHAPTER 12 Static RouteThis chapter shows you how to configure static routes for your ZyXEL Device.12.1 Static RouteEach remot

Chapter 12 Static RouteP-793H User’s Guide178Figure 91 Static Route > Static RouteThe following table describes the labels in this screen. 12.2.1

Chapter 12 Static RouteP-793H User’s Guide179Figure 92 Static Route > Static Route > EditThe following table describes the labels in this scr

Table of ContentsP-793H User’s Guide1821.2 SMT Menu Items ...

Chapter 12 Static RouteP-793H User’s Guide180

P-793H User’s Guide181CHAPTER 13 Bandwidth ManagementThis chapter contains information about configuring bandwidth management, editing rules and view

Chapter 13 Bandwidth ManagementP-793H User’s Guide182Figure 93 Subnet-based Bandwidth Management Example13.4 Application and Subnet-based Bandwidth

Chapter 13 Bandwidth ManagementP-793H User’s Guide18313.5.2 Fairness-based SchedulerThe ZyXEL Device divides bandwidth equally among bandwidth class

Chapter 13 Bandwidth ManagementP-793H User’s Guide184The ZyXEL Device divides up the unbudgeted 2048 kbps among the classes that require more bandwidt

Chapter 13 Bandwidth ManagementP-793H User’s Guide18513.6.3 Over Allotment of BandwidthYou can set the bandwidth management speed for an interface h

Chapter 13 Bandwidth ManagementP-793H User’s Guide186Figure 94 Bandwidth MGMT > SummaryThe following table describes the labels in this screen.Ta

Chapter 13 Bandwidth ManagementP-793H User’s Guide18713.8 Bandwidth Management Rule Setup See Section 13.1 on page 181 for background information.

Chapter 13 Bandwidth ManagementP-793H User’s Guide18813.8.1 Rule ConfigurationSee Section 13.1 on page 181 for background information. Use this scree

Chapter 13 Bandwidth ManagementP-793H User’s Guide18913.9 Bandwidth Monitor See Section 13.1 on page 181 for background information. Use this screen

Table of ContentsP-793H User’s Guide19Chapter 28NAT Setup...

Chapter 13 Bandwidth ManagementP-793H User’s Guide190Select an interface from the drop-down list box to view the bandwidth usage of its bandwidth rule

P-793H User’s Guide191CHAPTER 14 Dynamic DNS SetupThis chapter discusses how to configure your ZyXEL Device to use Dynamic DNS.14.1 Dynamic DNS Over

Chapter 14 Dynamic DNS SetupP-793H User’s Guide192Figure 98 Dynamic DNS > Dynamic DNSThe following table describes the fields in this screen. Tab

Chapter 14 Dynamic DNS SetupP-793H User’s Guide193Use specified IP AddressType the IP address of the host name(s). Use this if you have a static IP a

Chapter 14 Dynamic DNS SetupP-793H User’s Guide194

P-793H User’s Guide195CHAPTER 15 Remote ManagementConfigurationThis chapter provides information on configuring remote management.15.1 Remote Manage

Chapter 15 Remote Management ConfigurationP-793H User’s Guide19615.1.1 Remote Management LimitationsRemote management over LAN or WAN will not work w

Chapter 15 Remote Management ConfigurationP-793H User’s Guide19715.3 TelnetYou can configure your ZyXEL Device for remote Telnet access as shown nex

Chapter 15 Remote Management ConfigurationP-793H User’s Guide198The following table describes the labels in this screen.15.5 Configuring FTPYou can u

Chapter 15 Remote Management ConfigurationP-793H User’s Guide19915.6 SNMPSimple Network Management Protocol (SNMP) is a protocol used for exchanging

Table of ContentsP-793H User’s Guide2033.1 Introduction to System Status ...

Chapter 15 Remote Management ConfigurationP-793H User’s Guide200The managed devices contain object variables/managed objects that define each piece of

Chapter 15 Remote Management ConfigurationP-793H User’s Guide20115.6.3 Configuring SNMPSee Section 15.1 on page 195 for background information. Use

Chapter 15 Remote Management ConfigurationP-793H User’s Guide20215.7 Configuring DNS Use DNS (Domain Name System) to map a domain name to its corresp

Chapter 15 Remote Management ConfigurationP-793H User’s Guide203Figure 106 Remote MGMT > ICMPThe following table describes the labels in this sc

Chapter 15 Remote Management ConfigurationP-793H User’s Guide204" In this example a.b.c.d is the IP address of CNM Access. You must change this v

P-793H User’s Guide205CHAPTER 16 Universal Plug-and-Play (UPnP)This chapter introduces the UPnP feature in the web configurator.16.1 Introducing Uni

Chapter 16 Universal Plug-and-Play (UPnP)P-793H User’s Guide206When a UPnP device joins a network, it announces its presence with a multicast message.

Chapter 16 Universal Plug-and-Play (UPnP)P-793H User’s Guide20716.3 Installing UPnP in Windows ExampleThis section shows how to install UPnP in Wind

Chapter 16 Universal Plug-and-Play (UPnP)P-793H User’s Guide208Figure 110 Add/Remove Programs: Windows Setup: Communication: Components4 Click OK to

Chapter 16 Universal Plug-and-Play (UPnP)P-793H User’s Guide209Figure 112 Windows Optional Networking Components Wizard5 In the Networking Services

Table of ContentsP-793H User’s Guide2135.1 Command Interpreter Mode ...

Chapter 16 Universal Plug-and-Play (UPnP)P-793H User’s Guide21016.4 Using UPnP in Windows XP ExampleThis section shows you how to use the UPnP featur

Chapter 16 Universal Plug-and-Play (UPnP)P-793H User’s Guide211Figure 115 Internet Connection Properties 4 You may edit or delete the port mappings

Chapter 16 Universal Plug-and-Play (UPnP)P-793H User’s Guide212Figure 117 Internet Connection Properties: Advanced Settings: Add5 When the UPnP-enab

Chapter 16 Universal Plug-and-Play (UPnP)P-793H User’s Guide213Figure 119 Internet Connection StatusWeb Configurator Easy AccessWith UPnP, you can

Chapter 16 Universal Plug-and-Play (UPnP)P-793H User’s Guide214Figure 120 Network Connections4 An icon with the description for each UPnP-enabled de

Chapter 16 Universal Plug-and-Play (UPnP)P-793H User’s Guide215Figure 121 Network Connections: My Network Places6 Right-click on the icon for your

Chapter 16 Universal Plug-and-Play (UPnP)P-793H User’s Guide216

217PART IVMaintenanceSystem (219)Logs (225)Tools (229)Diagnostic (235)

218

P-793H User’s Guide219CHAPTER 17 SystemThis chapter explains how to configure the ZyXEL Device’s system name, domain name, password, and time and dat

Table of ContentsP-793H User’s Guide22Appendix E IP Addresses and Subnetting ...

Chapter 17 SystemP-793H User’s Guide220Figure 123 System > GeneralThe following table describes the labels in this screen.Table 81 System >

Chapter 17 SystemP-793H User’s Guide22117.2 Time Setting To change your ZyXEL Device’s time and date, click Maintenance > System > Time Settin

Chapter 17 SystemP-793H User’s Guide222Time and Date SetupManual Select this radio button to enter the time and date manually. If you configure a new

Chapter 17 SystemP-793H User’s Guide223End Date Configure the day and time when Daylight Saving Time ends if you selected Enable Daylight Saving. The

Chapter 17 SystemP-793H User’s Guide224

P-793H User’s Guide225CHAPTER 18 LogsThis chapter contains information about configuring general log settings and viewing the ZyXEL Device’s logs. Re

Chapter 18 LogsP-793H User’s Guide226Figure 125 Logs > View LogThe following table describes the fields in this screen. 18.3 Configuring Log Set

Chapter 18 LogsP-793H User’s Guide227Figure 126 Logs > Log SettingsThe following table describes the fields in this screen.Table 84 Logs >

Chapter 18 LogsP-793H User’s Guide228Log Schedule This drop-down menu is used to configure the frequency of log messages being sent as E-mail: DailyWe

P-793H User’s Guide229CHAPTER 19 ToolsThis chapter covers uploading new firmware, managing configuration and restarting your ZyXEL Device. 19.1 Firm

List of FiguresP-793H User’s Guide23List of FiguresFigure 1 High-speed Internet Access with Your ZyXEL Device ...

Chapter 19 ToolsP-793H User’s Guide2301 Do NOT turn off the ZyXEL Device while firmware upload is in progress!After you see the Firmware Upload in Pro

Chapter 19 ToolsP-793H User’s Guide231Figure 130 Error Message19.2 Configuration Use this screen to back up or restore the configuration of the Zy

Chapter 19 ToolsP-793H User’s Guide2321 Do not turn off the device while configuration file upload is in progress.When the ZyXEL Device has finished r

Chapter 19 ToolsP-793H User’s Guide233Figure 134 Configuration Upload ErrorClick Return to go back to the previous screen.19.3 Restart System rest

Chapter 19 ToolsP-793H User’s Guide234

P-793H User’s Guide235CHAPTER 20 DiagnosticThese read-only screens display information to help you identify problems with the ZyXEL Device.20.1 Gene

Chapter 20 DiagnosticP-793H User’s Guide236Figure 137 Diagnostic > DSL LineThe following table describes the fields in this screen.Table 88 Dia

237PART VSMT and TroubleshootingIntroducing the SMT (239)General Setup (245)WA N S e t up ( 2 4 9 )LAN Setup (257)Internet Access Setup (263)Rem

238

P-793H User’s Guide239CHAPTER 21 Introducing the SMTThe System Management Terminal (SMT) provides a text-based, menu-driven console to manage the ZyX

List of FiguresP-793H User’s Guide24Figure 39 LAN > IP > Advanced Setup ...

Chapter 21 Introducing the SMTP-793H User’s Guide240Figure 139 SMT Main Menu" There is an inactivity timeout, and the default value is ten minu

Chapter 21 Introducing the SMTP-793H User’s Guide241The following table gives you an overview of the various SMT menus.15 NAT Setup Use this menu to

Chapter 21 Introducing the SMTP-793H User’s Guide24221.3 Navigating the SMT InterfaceYou should be familiar with the following operations before you

Chapter 21 Introducing the SMTP-793H User’s Guide243Move the cursor [ENTER] or [UP]/[DOWN] arrow keys.Within a menu, press [ENTER] to move to the nex

Chapter 21 Introducing the SMTP-793H User’s Guide244

P-793H User’s Guide245CHAPTER 22 General SetupUse this menu to set up device mode, dynamic DNS and administrative information.22.1 Configuring Gene

Chapter 22 General SetupP-793H User’s Guide24622.1.1 Configuring Dynamic DNSTo configure Dynamic DNS, set the ZyXEL Device to router mode in menu 1 o

Chapter 22 General SetupP-793H User’s Guide247Follow the instructions in the next table to configure Dynamic DNS parameters.Table 93 Menu 1.1: Conf

Chapter 22 General SetupP-793H User’s Guide248

P-793H User’s Guide249CHAPTER 23 WAN SetupUse this menu to configure the DSL connection, traffic redirect, and dial-backup interface.23.1 WAN SetupF

List of FiguresP-793H User’s Guide25Figure 82 VPN > Setup ...

Chapter 23 WAN SetupP-793H User’s Guide250Transfer Max Rate(Kbps)This field is enabled if Service Type is Server. Press [SPACE BAR] to set the maximum

Chapter 23 WAN SetupP-793H User’s Guide25123.1.1 2wire-2line Service ModeFrom the main menu, enter 2 to open menu 2, then select 2wire-2line in the

Chapter 23 WAN SetupP-793H User’s Guide25223.2 Configuring Traffic RedirectFrom the main menu, in menu 2, select Ye s in Traffic Redirect, and then

Chapter 23 WAN SetupP-793H User’s Guide253The following table describes the fields in this menu.23.3 Dial Backup InterfaceIn the SMT, to set up the

Chapter 23 WAN SetupP-793H User’s Guide254The following table describes the fields in this menu.23.5 Advanced Dial Backup Setup" Consult the man

Chapter 23 WAN SetupP-793H User’s Guide255The following table describes fields in this menu.Table 98 Menu 2.2.1: Advanced Dial Backup SetupFIELD DE

Chapter 23 WAN SetupP-793H User’s Guide256

P-793H User’s Guide257CHAPTER 24 LAN SetupUse this to apply LAN filters, configure LAN DHCP and TCP/IP settings, and to activate or deactivate VLAN o

Chapter 24 LAN SetupP-793H User’s Guide25824.3 TCP/IP and DHCP Setup MenuFrom the main menu, enter 3 to open Menu 3 - LAN Setup to configure TCP/IP (

Chapter 24 LAN SetupP-793H User’s Guide25924.4 LAN IP AliasUse menu 3.2 to configure the first network, and you use menu 3.2.1 to configure the othe

List of FiguresP-793H User’s Guide26Figure 125 Logs > View Log ...

Chapter 24 LAN SetupP-793H User’s Guide260Figure 150 Menu 3.2.1: IP Alias SetupUse the instructions in the following table to configure IP alias par

Chapter 24 LAN SetupP-793H User’s Guide261Figure 151 Menu 3.6: Port Based VLAN SetupPress [SPACE BAR] to select Yes or No to allow or block layer-2

Chapter 24 LAN SetupP-793H User’s Guide262

P-793H User’s Guide263CHAPTER 25 Internet Access SetupUse this menu to configure your Internet connection. Use information from your ISP along with t

Chapter 25 Internet Access SetupP-793H User’s Guide264VCI The valid range for the VCI is 32 to 65535 (0 to 31 is reserved for local management of ATM

P-793H User’s Guide265CHAPTER 26 Remote Node SetupUse this menu to configure detailed remote node settings (for example, your ISP is a remote node) a

Chapter 26 Remote Node SetupP-793H User’s Guide266Figure 154 Menu 11.1: Remote Node Profile (nodes 1-7)The following table describes the labels in t

Chapter 26 Remote Node SetupP-793H User’s Guide267The following explains how to configure remote node 8 for the dial backup connection.Bridge If Rout

Chapter 26 Remote Node SetupP-793H User’s Guide268Figure 155 Menu 11.1: Remote Node Profile (node 8)The following table describes the labels in this

Chapter 26 Remote Node SetupP-793H User’s Guide26926.4 Remote Node Network Layer OptionsMove the cursor to the Edit IP/Bridge field in menu 11.1, th

List of FiguresP-793H User’s Guide27Figure 168 Menu 15.1.1: Address Mapping Rules ...

Chapter 26 Remote Node SetupP-793H User’s Guide270The following table describes the fields in this menu.Table 104 Menu 11.3: Remote Node Network Lay

Chapter 26 Remote Node SetupP-793H User’s Guide27126.5 Remote Node FilterMove the cursor to the field Edit Filter Sets in menu 11.1, and then press

Chapter 26 Remote Node SetupP-793H User’s Guide272Figure 157 Menu 11.5: Remote Node FilterThe following table describes the labels in this menu.26.6

Chapter 26 Remote Node SetupP-793H User’s Guide273Figure 158 Menu 11.6: Remote Node ATM Layer OptionsThe following table describes the fields in th

Chapter 26 Remote Node SetupP-793H User’s Guide27426.7 Advance Setup OptionsMove the cursor to the Edit Advance Options field in menu 11.1 (only for

P-793H User’s Guide275CHAPTER 27 Static Route SetupUse this menu to configure IP and bridge (MAC) static routes.27.1 IP Static Route SetupEnter 1 fr

Chapter 27 Static Route SetupP-793H User’s Guide276Figure 161 Menu 12.1.1: Edit IP Static RouteThe following table describes the fields in this scre

Chapter 27 Static Route SetupP-793H User’s Guide277Figure 162 Menu 12.3: Bridge Static Route SetupNow, enter the index number of the static route t

Chapter 27 Static Route SetupP-793H User’s Guide278

P-793H User’s Guide279CHAPTER 28 NAT SetupUse this menu to configure Network Address Translation (NAT) on the ZyXEL Device.28.1 Using NAT" You

List of FiguresP-793H User’s Guide28Figure 211 Menu 24.5: Backup Configuration ...

Chapter 28 NAT SetupP-793H User’s Guide280Figure 164 Menu 4: Applying NAT for Internet AccessThe following figure shows how you apply NAT to the rem

Chapter 28 NAT SetupP-793H User’s Guide281The following table describes the fields in this menu.28.2 NAT SetupUse the address mapping sets menus and

Chapter 28 NAT SetupP-793H User’s Guide282Figure 167 Menu 15.1: Address Mapping SetsSelect the address mapping set you want to modify. The fields in

Chapter 28 NAT SetupP-793H User’s Guide283" The Type, Local and Global Start/End IPs are configured in menu 15.1.1.1 (described later) and the v

Chapter 28 NAT SetupP-793H User’s Guide284Figure 169 Menu 15.1.1.1: Address Mapping RuleThe following table describes the fields in this menu.28.3

Chapter 28 NAT SetupP-793H User’s Guide285Follow these steps to configure a server behind NAT:1 Enter 15 in the main menu to go to Menu 15 - NAT Setu

Chapter 28 NAT SetupP-793H User’s Guide286The first entry is for the Default Server. The following table describes the labels in this menu.28.4 Gener

Chapter 28 NAT SetupP-793H User’s Guide287Figure 173 Menu 4: Internet Access & NAT ExampleFrom menu 4 shown above, simply choose the SUA Only o

Chapter 28 NAT SetupP-793H User’s Guide288Figure 175 Menu 15.2: Specifying an Inside Server28.4.3 Example 3: Multiple Public IP Addresses With Insi

Chapter 28 NAT SetupP-793H User’s Guide2891 In this case you need to configure Address Mapping Set 1 from Menu 15.1 - Address Mapping Sets. Therefore

List of FiguresP-793H User’s Guide29Figure 254 Windows XP: Internet Protocol (TCP/IP) Properties ...

Chapter 28 NAT SetupP-793H User’s Guide290Figure 179 Example 3: Final Menu 15.1.1Now configure the IGA3 to map to our web server and mail server on

Chapter 28 NAT SetupP-793H User’s Guide29128.4.4 Example 4: NAT Unfriendly Application ProgramsSome applications do not support NAT Mapping using TC

Chapter 28 NAT SetupP-793H User’s Guide292Figure 183 Example 4: Menu 15.1.1: Address Mapping Rules Menu 15.1.1 - Address Mapping Rules Se

P-793H User’s Guide293CHAPTER 29 Firewall SetupUse this menu to activate or deactivate the firewall.29.1 Using ZyXEL Device SMT MenusFrom the main m

Chapter 29 Firewall SetupP-793H User’s Guide294Figure 185 Menu 21.2: Firewall Setup" It is recommended to configure the firewall rules using th

P-793H User’s Guide295CHAPTER 30 Filter ConfigurationThis chapter shows you how to create and apply filters.30.1 Introduction to FiltersYour ZyXEL D

Chapter 30 Filter ConfigurationP-793H User’s Guide29630.1.1 The Filter Structure of the ZyXEL DeviceA filter set consists of one or more filter rules

Chapter 30 Filter ConfigurationP-793H User’s Guide297Figure 187 Filter Rule Process You can apply up to four filter sets to a particular port to bl

Chapter 30 Filter ConfigurationP-793H User’s Guide2981 Enter 21 in the main menu to open menu 21.Figure 188 Menu 21: Filter and Firewall Setup2 Ente

Chapter 30 Filter ConfigurationP-793H User’s Guide299The following table describes the labels in this screen.The following tables contain a brief des

About This User's GuideP-793H User’s Guide3About This User's GuideIntended AudienceThis manual is intended for people who want to configur

List of FiguresP-793H User’s Guide30

Chapter 30 Filter ConfigurationP-793H User’s Guide30030.2.2 Configuring a TCP/IP Filter RuleThis section shows you how to configure a TCP/IP filter r

Chapter 30 Filter ConfigurationP-793H User’s Guide301The following figure illustrates the logic flow of an IP filter.IP Addr Enter the source IP Addr

Chapter 30 Filter ConfigurationP-793H User’s Guide302Figure 192 Executing an IP Filter30.2.3 Configuring a Generic Filter RuleThis section shows yo

Chapter 30 Filter ConfigurationP-793H User’s Guide303For generic rules, the ZyXEL Device treats a packet as a byte stream as opposed to an IP or IPX

Chapter 30 Filter ConfigurationP-793H User’s Guide30430.3 Example FilterLet’s look at an example to block outside users from accessing the ZyXEL Devi

Chapter 30 Filter ConfigurationP-793H User’s Guide305Figure 195 Example Filter: Menu 21.1.3.1The port number for the telnet service (TCP protocol)

Chapter 30 Filter ConfigurationP-793H User’s Guide3065 Press [ENTER] to confirm after you enter the set numbers and to leave menu 11.1.4.30.4 Filter

Chapter 30 Filter ConfigurationP-793H User’s Guide30730.6.1 Applying LAN FiltersLAN traffic filter sets may be useful to block certain packets, redu

Chapter 30 Filter ConfigurationP-793H User’s Guide308

P-793H User’s Guide309CHAPTER 31 SNMP ConfigurationUse this menu to configure SNMP. See Section 15.6 on page 199 for more information about SNMP.31.1

List of TablesP-793H User’s Guide31List of TablesTable 1 LEDs ...

Chapter 31 SNMP ConfigurationP-793H User’s Guide310

P-793H User’s Guide311CHAPTER 32 System PasswordUse this menu to change your password. This is the same password used to access the web configurator.

Chapter 32 System PasswordP-793H User’s Guide312

P-793H User’s Guide313CHAPTER 33 System Information & DiagnosisThis chapter covers SMT menus 24.1 to 24.4.33.1 Introduction to System StatusThis

Chapter 33 System Information & DiagnosisP-793H User’s Guide314Figure 203 Menu 24.1: System Maintenance - StatusThe following table describes th

Chapter 33 System Information & DiagnosisP-793H User’s Guide31533.3 System Information and Console Port SpeedThis section describes your system

Chapter 33 System Information & DiagnosisP-793H User’s Guide316Figure 205 Menu 24.2.1: System Maintenance - InformationThe following table descr

Chapter 33 System Information & DiagnosisP-793H User’s Guide31733.4 Log and TraceThere are two logging facilities in the ZyXEL Device. The first

Chapter 33 System Information & DiagnosisP-793H User’s Guide31833.4.2 Syslog LoggingThe ZyXEL Device uses the syslog facility to log the CDR (Cal

Chapter 33 System Information & DiagnosisP-793H User’s Guide3192 Packet triggered3 Filter log Packet triggered Message FormatSdcmdSyslogSend( SYS

List of TablesP-793H User’s Guide32Table 39 Firewall > General ...

Chapter 33 System Information & DiagnosisP-793H User’s Guide3204 PPP log 5 Firewall log33.5 DiagnosticThe diagnostic facility allows you to test

Chapter 33 System Information & DiagnosisP-793H User’s Guide321Figure 210 Menu 24.4: System Maintenance - DiagnosticThe following table describ

Chapter 33 System Information & DiagnosisP-793H User’s Guide322

P-793H User’s Guide323CHAPTER 34 Firmware and Configuration FileMaintenanceThis chapter tells you how to back up and restore your configuration file

Chapter 34 Firmware and Configuration File MaintenanceP-793H User’s Guide324The following table is a summary. Please note that the internal filename r

Chapter 34 Firmware and Configuration File MaintenanceP-793H User’s Guide325Figure 211 Menu 24.5: Backup Configuration34.3.2 Using the FTP Command

Chapter 34 Firmware and Configuration File MaintenanceP-793H User’s Guide32634.3.4 GUI-based FTP ClientsThe following table describes some of the com

Chapter 34 Firmware and Configuration File MaintenanceP-793H User’s Guide3274 Launch the TFTP client on your computer and connect to the ZyXEL Device

Chapter 34 Firmware and Configuration File MaintenanceP-793H User’s Guide328Figure 213 System Maintenance: Backup Configuration2 The following scree

Chapter 34 Firmware and Configuration File MaintenanceP-793H User’s Guide3291 Do not interrupt the file transfer process as this may PERMANENTLY DAMA

List of TablesP-793H User’s Guide33Table 82 System > Time Setting ...

Chapter 34 Firmware and Configuration File MaintenanceP-793H User’s Guide33034.4.2 Restore Using FTP Session ExampleFigure 218 Restore Using FTP Se

Chapter 34 Firmware and Configuration File MaintenanceP-793H User’s Guide331Figure 222 Successful Restoration Confirmation Screen34.5 Uploading Fi

Chapter 34 Firmware and Configuration File MaintenanceP-793H User’s Guide332Figure 224 Menu 24.7.2: System Maintenance - Upload System Configuration

Chapter 34 Firmware and Configuration File MaintenanceP-793H User’s Guide33334.5.4 FTP Session Example of Firmware File UploadFigure 225 FTP Sessi

Chapter 34 Firmware and Configuration File MaintenanceP-793H User’s Guide33434.5.6 TFTP Upload Command ExampleThe following is an example TFTP comman

Chapter 34 Firmware and Configuration File MaintenanceP-793H User’s Guide335Figure 227 Example Xmodem Upload After the firmware upload process has

Chapter 34 Firmware and Configuration File MaintenanceP-793H User’s Guide336Figure 229 Example Xmodem UploadAfter the configuration upload process h

P-793H User’s Guide337CHAPTER 35 Menus 24.8 to 24.11This chapter leads you through SMT menus 24.8 to 24.11.35.1 Command Interpreter ModeThe Command

Chapter 35 Menus 24.8 to 24.11P-793H User’s Guide338The optional fields in a command are enclosed in square brackets [].The |symbol means “or”.For exa

Chapter 35 Menus 24.8 to 24.11P-793H User’s Guide339Figure 233 Menu 24.9.1 - Budget ManagementThe total budget is the time limit on the accumulated

List of TablesP-793H User’s Guide34Table 125 General Commands for GUI-based FTP Clients ...

Chapter 35 Menus 24.8 to 24.11P-793H User’s Guide340Figure 234 Menu 24: System MaintenanceEnter 10 to go to Menu 24.10 - System Maintenance - Time a

Chapter 35 Menus 24.8 to 24.11P-793H User’s Guide34135.4 Remote ManagementTo disable remote management of a service, select Disable in the correspon

Chapter 35 Menus 24.8 to 24.11P-793H User’s Guide342Figure 236 Menu 24.11 – Remote Management ControlThe following table describes the fields in thi

P-793H User’s Guide343CHAPTER 36 IP Routing Policy SetupUse this menu to look at and configure policy routes.36.1 Policy Route Traditionally, routin

Chapter 36 IP Routing Policy SetupP-793H User’s Guide344IPPR follows the existing packet filtering facility of RAS in style and in implementation. 36.

Chapter 36 IP Routing Policy SetupP-793H User’s Guide345Figure 238 Menu 25.1: IP Routing Policy SetupThe following table describes the labels in th

Chapter 36 IP Routing Policy SetupP-793H User’s Guide34636.6 IP Routing PolicyUse this menu to configure policy routes. To open this menu, select Edi

Chapter 36 IP Routing Policy SetupP-793H User’s Guide34736.7 IP Policy Routing ExampleIf a network has both Internet and remote node connections, yo

Chapter 36 IP Routing Policy SetupP-793H User’s Guide348Figure 241 IP Routing Policy Example 12 Select Ye s in the LAN field in menu 25.1.1 to appl

P-793H User’s Guide349CHAPTER 37 Schedule SetupUse this menu to look at and configure the schedule sets in the ZyXEL Device.37.1 Schedule Set Overvi

List of TablesP-793H User’s Guide35Table 168 Syslog Logs ...

Chapter 37 Schedule SetupP-793H User’s Guide350The following table describes the labels in this menu.37.3 Schedule Set SetupThis menu is only applica

Chapter 37 Schedule SetupP-793H User’s Guide351The following table describes the labels in this menu.Table 134 Menu 26.1: Schedule Set SetupFIELD D

Chapter 37 Schedule SetupP-793H User’s Guide352

P-793H User’s Guide353CHAPTER 38 TroubleshootingThis chapter offers some suggestions to solve problems you might encounter. The potential problems ar

Chapter 38 TroubleshootingP-793H User’s Guide35438.2 ZyXEL Device Access and LoginV I forgot the IP address for the ZyXEL Device.1 The default IP add

Chapter 38 TroubleshootingP-793H User’s Guide3556 If the problem continues, contact the network administrator or vendor, or try the advanced suggesti

Chapter 38 TroubleshootingP-793H User’s Guide356V I cannot use the console port to access the ZyXEL Device.Make sure that you are using the included c

Chapter 38 TroubleshootingP-793H User’s Guide357• Check the settings for bandwidth management. If it is disabled, you might consider activating it. I

Chapter 38 TroubleshootingP-793H User’s Guide3582 Press and hold the RESET button for ten seconds. Release the RESET button when the POWER LED begins

359PART VIAppendices and IndexProduct Specifications (361)Wall-mounting Instructions (365)Setting up Your Computer’s IP Address (367)Pop-up Windows

List of TablesP-793H User’s Guide36

360

P-793H User’s Guide361APPENDIX A Product SpecificationsTable 135 DeviceDefault IP Address 192.168.1.1Default Subnet Mask 255.255.255.0 (24 bits)Def

Appendix A Product SpecificationsP-793H User’s Guide362ATM Support Multiple protocols over AAL5 (RFC1483)PPP over ATM (RFC 2364)PPP over Ethernet (RF

Appendix A Product SpecificationsP-793H User’s Guide363Table 137 Firmware Features FEATURE DESCRIPTIONFirmware Upgrade Download new firmware (when

Appendix A Product SpecificationsP-793H User’s Guide364Figure 245 Y-Cable Connector ConfigurationBandwidth Management You can efficiently manage tr

P-793H User’s Guide365APPENDIX B Wall-mounting InstructionsDo the following to hang your ZyXEL Device on a wall." See the product specifications

Appendix B Wall-mounting InstructionsP-793H User’s Guide366

P-793H User’s Guide367APPENDIX C Setting up Your Computer’s IPAddressAll computers must have a 10M or 100M Ethernet adapter card and TCP/IP installed

Appendix C Setting up Your Computer’s IP AddressP-793H User’s Guide368Figure 247 WIndows 95/98/Me: Network: ConfigurationInstalling ComponentsThe Ne

Appendix C Setting up Your Computer’s IP AddressP-793H User’s Guide369Configuring 1 In the Network window Configuration tab, select your network adap

37PART IIntroduction, Wizards and TutorialsGetting To Know Your ZyXEL Device (39)Introducing the Web Configurator (43)Wizards (53)Point-to-(2)point

Appendix C Setting up Your Computer’s IP AddressP-793H User’s Guide370Figure 249 Windows 95/98/Me: TCP/IP Properties: DNS Configuration4 Click the G

Appendix C Setting up Your Computer’s IP AddressP-793H User’s Guide371Figure 250 Windows XP: Start Menu2 In the Control Panel, double-click Network

Appendix C Setting up Your Computer’s IP AddressP-793H User’s Guide372Figure 252 Windows XP: Control Panel: Network Connections: Properties4 Select

Appendix C Setting up Your Computer’s IP AddressP-793H User’s Guide373Figure 254 Windows XP: Internet Protocol (TCP/IP) Properties6 If you do not

Appendix C Setting up Your Computer’s IP AddressP-793H User’s Guide374Figure 255 Windows XP: Advanced TCP/IP Properties7 In the Internet Protocol TC

Appendix C Setting up Your Computer’s IP AddressP-793H User’s Guide375Figure 256 Windows XP: Internet Protocol (TCP/IP) Properties8 Click OK to clo

Appendix C Setting up Your Computer’s IP AddressP-793H User’s Guide376Figure 257 Macintosh OS 8/9: Apple Menu2 Select Ethernet built-in from the Con

Appendix C Setting up Your Computer’s IP AddressP-793H User’s Guide377• Type your IP address in the IP Address box.• Type your subnet mask in the Sub

Appendix C Setting up Your Computer’s IP AddressP-793H User’s Guide378Figure 260 Macintosh OS X: Network4 For statically assigned settings, do the f

Appendix C Setting up Your Computer’s IP AddressP-793H User’s Guide379" Make sure you are logged in as the root administrator. Using the K Deskt

38

Appendix C Setting up Your Computer’s IP AddressP-793H User’s Guide380• If you have a dynamic IP address, click Automatically obtain IP address settin

Appendix C Setting up Your Computer’s IP AddressP-793H User’s Guide381Figure 265 Red Hat 9.0: Dynamic IP Address Setting in ifconfig-eth0 • If you

Appendix C Setting up Your Computer’s IP AddressP-793H User’s Guide382Verifying SettingsEnter ifconfig in a terminal screen to check your TCP/IP prope

P-793H User’s Guide383APPENDIX D Pop-up Windows, JavaScriptsand Java PermissionsIn order to use the web configurator you need to allow:• Web browser

Appendix D Pop-up Windows, JavaScripts and Java PermissionsP-793H User’s Guide3842 Clear the Block pop-ups check box in the Pop-up Blocker section of

Appendix D Pop-up Windows, JavaScripts and Java PermissionsP-793H User’s Guide385Figure 272 Internet Options: Privacy3 Type the IP address of your

Appendix D Pop-up Windows, JavaScripts and Java PermissionsP-793H User’s Guide3865 Click Close to return to the Privacy screen. 6 Click Apply to save

Appendix D Pop-up Windows, JavaScripts and Java PermissionsP-793H User’s Guide387Figure 275 Security Settings - Java ScriptingJava Permissions1 Fro

Appendix D Pop-up Windows, JavaScripts and Java PermissionsP-793H User’s Guide388JAVA (Sun)1 From Internet Explorer, click Too ls, Internet Options an

P-793H User’s Guide389APPENDIX E IP Addresses and SubnettingThis appendix introduces IP addresses and subnet masks. IP addresses identify individual

P-793H User’s Guide39CHAPTER 1 Getting To Know Your ZyXELDeviceThis chapter introduces the main features and applications of your ZyXEL Device.1.1 O

Appendix E IP Addresses and SubnettingP-793H User’s Guide390Figure 278 Network Number and Host IDHow much of the IP address is the network number an

Appendix E IP Addresses and SubnettingP-793H User’s Guide391Subnet masks are expressed in dotted decimal notation just like IP addresses. The followi

Appendix E IP Addresses and SubnettingP-793H User’s Guide392SubnettingYou can use subnetting to divide one network into multiple sub-networks. In the

Appendix E IP Addresses and SubnettingP-793H User’s Guide393Figure 280 Subnetting Example: After SubnettingIn a 25-bit subnet the host ID has 7 bit

Appendix E IP Addresses and SubnettingP-793H User’s Guide394Example: Eight SubnetsSimilarly, use a 27-bit mask to create eight subnets (000, 001, 010,

Appendix E IP Addresses and SubnettingP-793H User’s Guide395Subnet PlanningThe following table is a summary for subnet planning on a network with a 2

Appendix E IP Addresses and SubnettingP-793H User’s Guide396Configuring IP AddressesWhere you obtain your network number depends on your particular si

P-793H User’s Guide397APPENDIX F IP Address AssignmentConflictsThis appendix describes situations where IP address conflicts may occur. Subscribers w

Appendix F IP Address Assignment ConflictsP-793H User’s Guide398Figure 282 IP Address Conflicts: Case BTo solve this problem, make sure the ZyXEL De

Appendix F IP Address Assignment ConflictsP-793H User’s Guide399Figure 284 IP Address Conflicts: Case DThis problem can be solved by adding a VLAN-

Document ConventionsP-793H User’s Guide4Document ConventionsWarnings and NotesThese are how warnings and notes are shown in this User’s Guide. 1 Warni

Chapter 1 Getting To Know Your ZyXEL DeviceP-793H User’s Guide401.1.2 High-speed Point-to-point ConnectionsUse two ZyXEL Devices to create a cost-eff

Appendix F IP Address Assignment ConflictsP-793H User’s Guide400

P-793H User’s Guide401APPENDIX G Common ServicesThe following table lists some commonly-used services and their associated protocols and port numbers

Appendix G Common ServicesP-793H User’s Guide402FTP TCPTCP2021File Transfer Program, a program to enable fast transfer of files, including large files

Appendix G Common ServicesP-793H User’s Guide403RTELNET TCP 107 Remote Telnet.RTSP TCP/UDP 554 The Real Time Streaming (media control) Protocol (RTSP

Appendix G Common ServicesP-793H User’s Guide404

P-793H User’s Guide405APPENDIX H Command InterpreterThe following describes how to use the command interpreter. See Section 35.1 on page 337 for how

Appendix H Command InterpreterP-793H User’s Guide406Configuring What You Want the ZyXEL Device to Log1 Use the sys logs load command to load the log s

Appendix H Command InterpreterP-793H User’s Guide407Log Command ExampleThis example shows how to set the ZyXEL Device to record the access logs and a

Appendix H Command InterpreterP-793H User’s Guide408ARP Behavior and the ARP ackGratuitous CommandsThe ZyXEL Device does not accept ARP reply informat

Appendix H Command InterpreterP-793H User’s Guide409Figure 288 Backup GatewayUpdating the ARP entries could increase the danger of spoofing attacks

Chapter 1 Getting To Know Your ZyXEL DeviceP-793H User’s Guide411.2 Ways to Manage the ZyXEL DeviceUse any of the following methods to manage the Zy

Appendix H Command InterpreterP-793H User’s Guide410Figure 289 Routing Command Exampleras> ipsec ipsecEdit 1ras> ipsec ipsecConfig encryKeyLen

P-793H User’s Guide411APPENDIX I Log DescriptionsThis appendix provides descriptions of example log messages. Table 150 System Maintenance LogsLOG

Appendix I Log DescriptionsP-793H User’s Guide412 Successful SSH login Someone has logged on to the router’s SSH server.SSH login failed Someone has f

Appendix I Log DescriptionsP-793H User’s Guide413 Table 153 TCP Reset LogsLOG MESSAGE DESCRIPTIONUnder SYN flood attack, sent TCP RSTThe router s

Appendix I Log DescriptionsP-793H User’s Guide414 Triangle route packet forwarded: ICMPThe firewall allowed a triangle route session to pass through

Appendix I Log DescriptionsP-793H User’s Guide415 Table 159 Content Filtering LogsLOG MESSAGE DESCRIPTION%s: Keyword blocking The content of a req

Appendix I Log DescriptionsP-793H User’s Guide416 ip spoofing - WAN [TCP | UDP | IGMP | ESP | GRE | OSPF]The firewall detected an IP spoofing attack o

Appendix I Log DescriptionsP-793H User’s Guide417 Table 162 IKE LogsLOG MESSAGE DESCRIPTIONActive connection allowed exceededThe IKE process for a

Appendix I Log DescriptionsP-793H User’s Guide418Remote IP <Remote IP> / <Remote IP> conflictsThe security gateway is set to “0.0.0.0” and

Appendix I Log DescriptionsP-793H User’s Guide419 Rule [%d] Phase 2 authentication algorithm mismatchThe listed rule’s IKE phase 2 authentication alg

Chapter 1 Getting To Know Your ZyXEL DeviceP-793H User’s Guide42The following table describes the LEDs.Table 1 LEDsLED COLOR STATUS DESCRIPTIONPOWER

Appendix I Log DescriptionsP-793H User’s Guide420 Enrollment failed The CMP online certificate enrollment failed. The Destination field records the ce

Appendix I Log DescriptionsP-793H User’s Guide421 7 Certificate was revoked by a CRL.8 Certificate was not added to the cache.9 Certificate decoding

Appendix I Log DescriptionsP-793H User’s Guide422 User logout because of no authentication response from user.The router logged out a user from which

Appendix I Log DescriptionsP-793H User’s Guide423 The following table shows RFC-2408 ISAKMP payload types that the log displays. Please refer to the

Appendix I Log DescriptionsP-793H User’s Guide424Log CommandsThis section provides some general examples of how to use the log commands. The items tha

Appendix I Log DescriptionsP-793H User’s Guide425Figure 291 Displaying Log Parameters Example4 Use sys logs category followed by a log category and

Appendix I Log DescriptionsP-793H User’s Guide426Log Command ExampleThis example shows how to set the ZyXEL Device to record the access logs and alert

P-793H User’s Guide427APPENDIX J NetBIOS Filter CommandsThe following describes the NetBIOS packet filter commands. See Appendix H on page 405 for in

Appendix J NetBIOS Filter CommandsP-793H User’s Guide428The filter types and their default settings are as follows.NetBIOS Filter ConfigurationSyntax:

P-793H User’s Guide429APPENDIX K Legal InformationCopyrightCopyright © 2006 by ZyXEL Communications Corporation.The contents of this publication may

P-793H User’s Guide43CHAPTER 2 Introducing the WebConfiguratorThis chapter describes how to access and navigate the web configurator.2.1 Web Configu

Appendix K Legal InformationP-793H User’s Guide430If this device does cause harmful interference to radio/television reception, which can be determine

Appendix K Legal InformationP-793H User’s Guide431ZyXEL) and the customer will be billed for parts and labor. All repaired or replaced products will

Appendix K Legal InformationP-793H User’s Guide432

P-793H User’s Guide433APPENDIX L Customer SupportPlease have the following information ready when you contact customer support.Required Information•

Appendix L Customer SupportP-793H User’s Guide434Denmark• Support E-mail: [email protected]• Sales E-mail: [email protected]• Telephone: +45-39-55-07-00•

Appendix L Customer SupportP-793H User’s Guide435• Telephone: +7-3272-590-698• Fax: +7-3272-590-689• Web Site: www.zyxel.kz• Regular Mail: ZyXEL Kaza

Appendix L Customer SupportP-793H User’s Guide436• Web Site: www.zyxel.es • Regular Mail: ZyXEL Communications, Arte, 21 5ª planta, 28033 Madrid, Spai

IndexP-793H User’s Guide437IndexAactive protocol 159AH 159and encapsulation 159ESP 159address mapping 111AH 159and transport mode 160alert 225alternat

IndexP-793H User’s Guide438Domain Name System. See DNS.DoS attack 119brute-force 119, 121IP spoofing 120LAN 120ping of death 120SYN flood 120teardrop

IndexP-793H User’s Guide439main mode 154, 157NAT traversal 158negotiation mode 154peer identity 156pre-shared key 156proposal 155IKE SA. See also VPN.

Chapter 2 Introducing the Web ConfiguratorP-793H User’s Guide44Figure 5 Login Screen6 If you entered the user password, the Status screen appears. S

IndexP-793H User’s Guide440and filter set 306and IP alias 104and remote management 196and VPN 158examples 286global 103how it works 104inside 103local

IndexP-793H User’s Guide441Ssafety warnings 6schedule set 349Select Mode screen 45Simple Network Management Protocol. See SNMP.Single User Account. Se

IndexP-793H User’s Guide442minimum requirements 43Wide Area Network. See WAN.wizards 53WWWremote management 196www.dyndns.org 191

IndexP-793H User’s Guide443

IndexP-793H User’s Guide444

Chapter 2 Introducing the Web ConfiguratorP-793H User’s Guide457 Select Go to Wizard setup, and click Apply to display the wizard main screen. Select

Chapter 2 Introducing the Web ConfiguratorP-793H User’s Guide46Figure 8 Web Configurator: Main Screen " Click the icon (located in the top ri

Chapter 2 Introducing the Web ConfiguratorP-793H User’s Guide47LAN IP Use this screen to configure LAN TCP/IP settings and other advanced properties.

Chapter 2 Introducing the Web ConfiguratorP-793H User’s Guide482.4 Status Screen The following summarizes how to navigate the web configurator from t

Chapter 2 Introducing the Web ConfiguratorP-793H User’s Guide49Figure 9 StatusThe following table describes the labels shown in the Status screen.T

Document ConventionsP-793H User’s Guide5Icons Used in FiguresFigures in this User’s Guide may use the following generic icons. The ZyXEL Device icon

Chapter 2 Introducing the Web ConfiguratorP-793H User’s Guide502.4.1 Status: Bandwidth StatusThis is the same screen discussed in Figure 97 on page 1

Chapter 2 Introducing the Web ConfiguratorP-793H User’s Guide512.4.2 Status: Packet StatisticsClick the Packet Statistics hyperlink in the Status sc

Chapter 2 Introducing the Web ConfiguratorP-793H User’s Guide522.4.3 Status: VPN StatusThis is the same screen discussed in Figure 86 on page 173.2.5

P-793H User’s Guide53CHAPTER 3 WizardsUse these screens to configure Internet access or to configure basic bandwidth management." See the advanc

Chapter 3 WizardsP-793H User’s Guide543.1 Internet Setup WizardUse these screens to configure Internet access settings. To access this wizard, click

Chapter 3 WizardsP-793H User’s Guide553.1.2 Screen 2These screens let you enter the rest of the Internet settings, which depend on the encapsulation

Chapter 3 WizardsP-793H User’s Guide56Figure 14 Internet Setup Wizard: ISP Parameters (PPPoE)The following table describes the fields in this screen

Chapter 3 WizardsP-793H User’s Guide57Figure 15 Internet Setup Wizard: ISP Parameters (RFC1483)The following table describes the fields in this scr

Chapter 3 WizardsP-793H User’s Guide58The following table describes the fields in this screen.3.1.3 Screen 3This screen appears when you complete the

Chapter 3 WizardsP-793H User’s Guide59Launch your web browser and navigate to www.zyxel.com. If you cannot access the Internet, open the web configur

Safety WarningsP-793H User’s Guide6Safety Warnings1 For your safety, be sure to read and follow all warning notices and instructions.• Do NOT use this

Chapter 3 WizardsP-793H User’s Guide60To access this wizard, open the web configurator (see Section 2.2 on page 43) and click BANDWIDTH MANAGEMENT SET

Chapter 3 WizardsP-793H User’s Guide613.2.2 Screen 2Use the second wizard screen to select the services that you want to apply bandwidth management,

Chapter 3 WizardsP-793H User’s Guide623.2.3 Screen 3Follow the on-screen instructions and click Finish to complete the wizard setup and save your con

P-793H User’s Guide63CHAPTER 4 Point-to-(2)point ConfigurationThis chapter introduces point-to-point and point-to-2point connections.4.1 Point-to-po

Chapter 4 Point-to-(2)point ConfigurationP-793H User’s Guide64To establish a point-to-point connection, one of the ZyXEL Devices becomes the server (i

Chapter 4 Point-to-(2)point ConfigurationP-793H User’s Guide653 Set the VPI, VCI, Multiplexing, and Encapsulation to the same values you set in the s

Chapter 4 Point-to-(2)point ConfigurationP-793H User’s Guide66In a point-to-2points connection, the ZyXEL Device which has a physical connection to bo

Chapter 4 Point-to-(2)point ConfigurationP-793H User’s Guide674.4.2 Set up the Clients1 Log in to one of the ZyXEL Devices that will be the client.

Chapter 4 Point-to-(2)point ConfigurationP-793H User’s Guide68

69PART IINetwork SetupWA N S e t up ( 7 1 )LAN Setup (93)Network Address Translation (NAT) Screens (103)

Safety WarningsP-793H User’s Guide7This product is recyclable. Dispose of it properly.

70

P-793H User’s Guide71CHAPTER 5 WAN SetupThis chapter describes how to configure WAN settings.5.1 WAN Overview A WAN (Wide Area Network) is an outsid

Chapter 5 WAN SetupP-793H User’s Guide725.1.1.3 PPPoAPPPoA stands for Point to Point Protocol over ATM Adaptation Layer 5 (AAL5). A PPPoA connection

Chapter 5 WAN SetupP-793H User’s Guide735.1.4.1 IP Assignment with PPPoA or PPPoE EncapsulationIf you have a dynamic IP, then the IP Address and ENE

Chapter 5 WAN SetupP-793H User’s Guide74For example, if the normal route has a metric of "1" and the traffic-redirect route has a metric of

Chapter 5 WAN SetupP-793H User’s Guide755.3.1 ATM Traffic ClassesThese are the basic ATM traffic classes defined by the ATM Forum Traffic Management

Chapter 5 WAN SetupP-793H User’s Guide76Figure 26 WAN > Internet ConnectionThe following table describes the labels in this screen. Table 15 WA

Chapter 5 WAN SetupP-793H User’s Guide77Password (PPPoA and PPPoE only) Enter the password associated with the user name above.Service Name (PPPoE on

Chapter 5 WAN SetupP-793H User’s Guide785.4.1 2Wire-2Line Service ModeThe Service Mode section of the Internet Connection screen allows you to set up

Chapter 5 WAN SetupP-793H User’s Guide79The following table describes the labels in this screen. 5.4.2 Configuring Advanced Internet Connection Use

Safety WarningsP-793H User’s Guide8

Chapter 5 WAN SetupP-793H User’s Guide80The following table describes the labels in this screen. Table 17 WAN > Internet Connection > Advanced

Chapter 5 WAN SetupP-793H User’s Guide815.5 Configuring More ConnectionsThis section describes the protocol-independent parameters for a remote netw

Chapter 5 WAN SetupP-793H User’s Guide82Figure 30 WAN > More Connections > EditThe following table describes the labels in this screen. Table

Chapter 5 WAN SetupP-793H User’s Guide83Multiplexing Select the method of multiplexing used by your ISP from the drop-down list. Choices are VC or LL

Chapter 5 WAN SetupP-793H User’s Guide845.5.2 Configuring More Connections Advanced Setup Use this screen to edit your ZyXEL Device's advanced W

Chapter 5 WAN SetupP-793H User’s Guide855.6 Traffic Redirect Traffic redirect forwards traffic to a backup gateway when the ZyXEL Device cannot conn

Chapter 5 WAN SetupP-793H User’s Guide86Figure 33 Traffic Redirect LAN Setup5.7 Dial Backup InterfaceThe Dial Backup port can be used in reserve, a

Chapter 5 WAN SetupP-793H User’s Guide87Figure 34 WAN > WAN Backup SetupThe following table describes the labels in this screen. Table 21 WAN

Chapter 5 WAN SetupP-793H User’s Guide88Timeout Type the number of seconds (3 recommended) for your ZyXEL Device to wait for a ping response from one

Chapter 5 WAN SetupP-793H User’s Guide895.8.1 Advanced Backup Setup Use this screen to change your ZyXEL Device’s advanced dial backup settings. Cli

Contents OverviewP-793H User’s Guide9Contents OverviewIntroduction, Wizards and Tutorials ...

Chapter 5 WAN SetupP-793H User’s Guide90Advanced Modem SetupClick Edit to change the advanced settings for the modem.TCP/IP OptionsMetric This field s

Chapter 5 WAN SetupP-793H User’s Guide915.8.2 Advanced Modem Settings for Dial Backup Use this screen to change your ZyXEL Device’s modem settings f

Chapter 5 WAN SetupP-793H User’s Guide92CLID Enter the keyword that precedes the CLID (Calling Line Identification) in the AT response string. This le

P-793H User’s Guide93CHAPTER 6 LAN SetupThis chapter describes how to configure LAN settings.6.1 LAN Overview A Local Area Network (LAN) is a shared

Chapter 6 LAN SetupP-793H User’s Guide946.1.2 DHCP SetupDHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individual clients t

Chapter 6 LAN SetupP-793H User’s Guide95• The ISP tells you the DNS server addresses, usually in the form of an information sheet, when you sign up.

Chapter 6 LAN SetupP-793H User’s Guide966.2.1.1 Private IP AddressesEvery machine on the Internet must have a unique address. If your networks are is

Chapter 6 LAN SetupP-793H User’s Guide976.2.3 MulticastTraditionally, IP packets are transmitted in one of either two ways - Unicast (1 sender - 1 r

Chapter 6 LAN SetupP-793H User’s Guide986.3.1 Configuring Advanced LAN Setup Use this screen to edit your ZyXEL Device's advanced LAN settings.

Chapter 6 LAN SetupP-793H User’s Guide996.4 DHCP SetupUse this screen to configure the DNS server information that the ZyXEL Device sends to the DHC