Zyxel-communications P-334U Manual de usuario Pagina 150
- Pagina / 335
- Tabla de contenidos
- MARCADORES
Valorado. / 5. Basado en revisión del cliente
P-334U/P-335U User’s Guide
150 Chapter 13 IPSec VPN
NAT Traversal Select this check box to enable NAT traversal. NAT traversal allows you to set up
a VPN connection when there are NAT routers between the two IPSec routers.
Note: The remote IPSec router must also have NAT traversal
enabled. See
Section 13.1.2.5 on page 143 for more
information.
You can use NAT traversal with ESP protocol using Transport or Tunnel mode,
but not with AH protocol nor with manual key management. In order for an IPSec
router behind a NAT router to receive an initiating IPSec packet, set the NAT
router to forward UDP ports 500 and 4500 to the IPSec router behind the NAT
router.
IPSec Keying
Mode
Select IKE or Manual from the drop-down list box. IKE provides more protection
so it is generally recommended. Manual is a useful option for troubleshooting if
you have problems using IKE key management.
DNS Server (for
IPSec VPN)
If there is a private DNS server that services the VPN, type its IP address here.
The ZyXEL Device assigns this additional DNS server to the ZyXEL Device's
DHCP clients that have IP addresses in this IPSec rule's range of local
addresses.
A DNS server allows clients on the VPN to find other computers and servers on
the VPN by their (private) domain names.
Local Policy Local IP addresses must be static and correspond to the remote IPSec router's
configured remote IP addresses.
Two active SAs can have the same configured local or remote IP address, but not
both. You can configure multiple SAs between the same local and remote IP
addresses, as long as only one is active at any time.
In order to have more than one active rule with the Secure Gateway Address
field set to 0.0.0.0, the ranges of the local IP addresses cannot overlap between
rules.
If you configure an active rule with 0.0.0.0 in the Secure Gateway Address field
and the LAN’s full IP address range as the local IP address, then you cannot
configure any other active rules with the Secure Gateway Address field set to
0.0.0.0.
Local Address For a single IP address, enter a (static) IP address on the LAN behind your
ZyXEL Device.
For a specific range of IP addresses, enter the beginning (static) IP address, in a
range of computers on your LAN behind your ZyXEL Device.
To specify IP addresses on a network by their subnet mask, enter a (static) IP
address on the LAN behind your ZyXEL Device.
Local Address End
/Mask
When the local IP address is a single address, type it a second time here.
When the local IP address is a range, enter the end (static) IP address, in a range
of computers on the LAN behind your ZyXEL Device.
When the local IP address is a subnet address, enter a subnet mask on the LAN
behind your ZyXEL Device.
Remote Policy Remote IP addresses must be static and correspond to the remote IPSec router's
configured local IP addresses. The remote fields do not apply when the Secure
Gateway IP Address field is configured to 0.0.0.0. In this case only the remote
IPSec router can initiate the VPN.
Two active SAs cannot have the local and remote IP address(es) both the same.
Two active SAs can have the same local or remote IP address, but not both. You
can configure multiple SAs between the same local and remote IP addresses, as
long as only one is active at any time.
Table 52 Security > VPN > Rule Setup: IKE (Basic) (continued)
LABEL DESCRIPTION
- P-334U/P-335U 1
- Copyright 3
- Certifications 4
- Viewing Certifications 5
- Safety Warnings 6
- ZyXEL Limited Warranty 7
- Customer Support 8
- Customer Support 9 9
- P-334U/P-335U User’s Guide 10
- 10 Customer Support 10
- Table of Contents 11
- Chapter 3 12
- Chapter 4 12
- Chapter 16 16
- Chapter 17 16
- List of Figures 19
- List of Tables 25
- About This User's Guide 29
- Related Documentation 29
- User Guide Feedback 29
- Syntax Conventions 29
- Graphics Icons Key 30
- CHAPTER 1 31
- Figure 4 VPN Application 33
- 1.4.1 Front Panel LEDs 34
- Table 1 Front Panel LEDs 35
- CHAPTER 2 37
- 2.4.1 Navigation Panel 41
- Table 4 Screens Summary 42
- 2.4.5 VPN Monitor 46
- CHAPTER 3 49
- 3.2.1 System Name 50
- 3.2.2 Domain Name 51
- 3.3.1 Basic(WEP) Security 53
- 3.3.3 OTIST 55
- 3.4.1 Ethernet Connection 56
- 3.4.2 PPPoE Connection 57
- 3.4.3 PPTP Connection 58
- 3.4.4 Your IP Address 60
- 3.4.9 WAN MAC Address 63
- CHAPTER 4 67
- 4.2.1 SSID 68
- 4.2.2 MAC Address Filter 68
- 4.2.3 User Authentication 68
- 4.2.4 Encryption 69
- 70 Chapter 4 Wireless LAN 70
- 4.3.1 No Security 71
- 4.3.2 WEP Encryption 72
- Chapter 4 Wireless LAN 73 73
- 4.3.3 WPA-PSK/WPA2-PSK 74
- 4.3.4 WPA/WPA2 75
- 76 Chapter 4 Wireless LAN 76
- Table 27 Wireless: WPA/WPA2 76
- 4.4 OTIST 77
- 4.4.1 Enabling OTIST 78
- 4.4.1.2 Wireless Client 79
- 4.4.2 Starting OTIST 80
- 4.4.3 Notes on OTIST 80
- 4.5 MAC Filter 81
- 82 Chapter 4 Wireless LAN 82
- Table 29 MAC Address Filter 82
- Chapter 4 Wireless LAN 83 83
- Figure 47 Advanced 83
- Table 30 Advanced 83
- 84 Chapter 4 Wireless LAN 84
- CHAPTER 5 85
- Figure 49 AP: Status 87
- Figure 60 Profile: Activate 92
- CHAPTER 6 95
- 96 Chapter 6 WAN 96
- 6.3.2 PPPoE Encapsulation 97
- 98 Chapter 6 WAN 98
- Chapter 6 WAN 99 99
- 6.3.3 PPTP Encapsulation 100
- Chapter 6 WAN 101 101
- 102 Chapter 6 WAN 102
- Table 33 PPTP Encapsulation 102
- 6.4 Advanced WAN Screen 103
- Figure 64 Advanced 104
- Table 34 Advanced 104
- 104 Chapter 6 WAN 104
- CHAPTER 7 105
- 7.3 LAN IP Screen 106
- 7.4 LAN IP Alias 107
- 7.5 Advanced LAN Screen 108
- Chapter 7 LAN 109 109
- Table 37 Advanced LAN 109
- 110 Chapter 7 LAN 110
- CHAPTER 8 111
- 112 Chapter 8 DHCP Server 112
- 8.4 Client List Screen 113
- 114 Chapter 8 DHCP Server 114
- Figure 70 Client List 114
- Table 40 Client List 114
- CHAPTER 9 115
- 9.3 General NAT Screen 116
- Table 41 NAT General 117
- Figure 73 NAT Application 118
- Table 42 NAT Application 118
- 9.4.1 Game List Example 119
- Figure 74 Game List Example 120
- 9.6 NAT Advanced Screen 121
- Table 43 NAT Advanced 123
- CHAPTER 10 125
- 126 Chapter 10 Dynamic DNS 126
- Figure 77 Dynamic DNS 126
- Table 44 Dynamic DNS 126
- CHAPTER 11 127
- 128 Chapter 11 Firewall 128
- Figure 78 General 128
- 11.3 Services Screen 129
- 130 Chapter 11 Firewall 130
- Figure 79 Services 130
- Table 46 Firewall Services 130
- Chapter 11 Firewall 131 131
- 132 Chapter 11 Firewall 132
- CHAPTER 12 133
- 12.5 Schedule 135
- CHAPTER 13 139
- 13.1.2 IKE SA Setup 140
- 13.1.2.1 IKE SA Proposal 141
- 13.1.2.3 Authentication 141
- 142 Chapter 13 IPSec VPN 142
- 13.1.2.4 Negotiation Mode 143
- 13.1.3.2 IPSec Protocol 144
- 13.1.3.3 Encapsulation 145
- 13.1.4.1 SA Life Time 146
- 13.2 Remote DNS Server 147
- 13.3 VPN Summary 147
- 13.4 VPN Rule Setup (IKE) 148
- Chapter 13 IPSec VPN 149 149
- 150 Chapter 13 IPSec VPN 150
- Chapter 13 IPSec VPN 151 151
- 152 Chapter 13 IPSec VPN 152
- Chapter 13 IPSec VPN 153 153
- 154 Chapter 13 IPSec VPN 154
- Chapter 13 IPSec VPN 155 155
- 156 Chapter 13 IPSec VPN 156
- Chapter 13 IPSec VPN 157 157
- 158 Chapter 13 IPSec VPN 158
- Chapter 13 IPSec VPN 159 159
- 13.7 VPN Rule Setup (Manual) 160
- Chapter 13 IPSec VPN 161 161
- 162 Chapter 13 IPSec VPN 162
- Chapter 13 IPSec VPN 163 163
- 13.8 VPN SA Monitor 164
- 13.9 VPN Global Setting 165
- 166 Chapter 13 IPSec VPN 166
- Chapter 13 IPSec VPN 167 167
- 168 Chapter 13 IPSec VPN 168
- CHAPTER 14 169
- 14.2 IP Static Route Screen 170
- Table 60 Static Route Setup 171
- CHAPTER 15 173
- Advanced screen 180
- CHAPTER 16 185
- 16.2 WWW Screen 186
- 16.3 Telnet 187
- 16.4 Telnet Screen 187
- 16.5 FTP Screen 188
- 16.6 DNS Screen 189
- CHAPTER 17 191
- 17.3 UPnP Screen 192
- 17.2 UPnP and ZyXEL 192
- Chapter 17 UPnP 193 193
- Table 74 Configuring UPnP 193
- 194 Chapter 17 UPnP 194
- Chapter 17 UPnP 195 195
- 196 Chapter 17 UPnP 196
- Chapter 17 UPnP 197 197
- 198 Chapter 17 UPnP 198
- CHAPTER 18 199
- 18.3 Print Server Screen 200
- CHAPTER 19 201
- 19.2.2 Adding a New Printer 207
- 19.3 Macintosh OS X 211
- Figure 139 Printer Model 214
- Figure 140 Print Server 214
- CHAPTER 20 215
- 20.3 Time Setting Screen 216
- Chapter 20 System 217 217
- Figure 142 Time Setting 217
- Table 77 Time Setting 217
- 218 Chapter 20 System 218
- CHAPTER 21 219
- 21.2 Log Settings 220
- Chapter 21 Logs 221 221
- Figure 144 Log Settings 221
- Table 79 Log Settings 221
- 222 Chapter 21 Logs 222
- CHAPTER 22 223
- 22.2 Configuration Screen 224
- 22.2.1 Backup Configuration 225
- 22.2.2 Restore Configuration 225
- 226 Chapter 22 Tools 226
- 22.3 Restart Screen 227
- 228 Chapter 22 Tools 228
- CHAPTER 23 229
- CHAPTER 24 231
- 24.3 Problems with the WAN 232
- Blocking 233
- Problems with the Password 234
- Figure 155 Pop-up Blocker 235
- Figure 157 Internet Options 237
- 24.5.1.2 JavaScripts 238
- 3 Scroll down to Scripting 239
- 24.5.1.3 Java Permissions 240
- 24.5.1.3.1 JAVA (Sun) 241
- Figure 162 Java (Sun) 242
- 6 Then click the OK button 243
- APPENDIX A 245
- APPENDIX B 249
- APPENDIX C 255
- Installing Components 256
- Configuring 257
- Windows 2000/NT/XP 258
- Macintosh OS 8/9 263
- Macintosh OS X 265
- Verifying Settings 266
- Using Configuration Files 268
- APPENDIX D 271
- Subnet Masks 272
- Subnetting 272
- Example: Two Subnets 273
- 274 Appendix D IP Subnetting 274
- Table 101 Subnet 1 274
- Table 102 Subnet 2 274
- Example: Four Subnets 275
- Example Eight Subnets 276
- Appendix D IP Subnetting 277 277
- 278 Appendix D IP Subnetting 278
- APPENDIX E 279
- 280 Appendix E Wireless LANs 280
- Appendix E Wireless LANs 281 281
- Fragmentation Threshold 282
- Preamble Type 283
- IEEE 802.11g Wireless LAN 283
- Wireless Security Overview 284
- IEEE 802.1x 284
- Types of RADIUS Messages 285
- Types of Authentication 286
- Dynamic WEP Key Exchange 287
- WPA and WPA2 287
- Encryption 288
- User Authentication 289
- 290 Appendix E Wireless LANs 290
- Security Parameters Summary 291
- 292 Appendix E Wireless LANs 292
- APPENDIX F 293
- Table 117 TCP Reset Logs 295
- Table 119 ICMP Logs 296
- Table 120 CDR Logs 296
- Table 121 PPP Logs 296
- Table 122 UPnP Logs 297
- Table 124 Attack Logs 298
- Table 125 IPSec Logs 299
- Table 126 IKE Logs 299
- Table 127 PKI Logs 302
- Table 129 802.1X Logs 304
- Table 131 ICMP Notes 305
- Table 132 Syslog Logs 306
- Log Commands 307
- Log Command Example 308
- APPENDIX G 309
- 310 Appendix G Services 310
- Appendix G Services 311 311
- 312 Appendix G Services 312
- APPENDIX H 313
- Example Internal SPTGEN Menus 316
- Table 137 Menu 3 317
- Table 139 Menu 12 321
- Command Examples 328
- APPENDIX I 329
- IP Aliasing 330
Relacionado con productos y manuales para Ordenadores Zyxel-communications P-334U
(2 paginas)APC AR8001 manuels
Manuels d'utilisation et guides de l'utilisateur pour Accessoires pour portoirs APC AR8001.
Nous fournissons des manuels en pdf 1 APC AR8001 à télécharger gratuitement par type de document : Fiche technique
Comentarios a estos manuales