Zyxel-communications 202H Manual de usuario Pagina 200
- Pagina / 309
- Tabla de contenidos
- SOLUCIÓN DE PROBLEMAS
- MARCADORES
Valorado. / 5. Basado en revisión del cliente
Prestige 202H User’s Guide
18-16 Filter Configuration
18.4 Filter Types and NAT
There are two classes of filter rules, Generic Filter Device rules and Protocol Filter (TCP/IP) rules.
Generic Filter rules act on the raw data from/to LAN and WAN. Protocol Filter rules act on IP packets.
When NAT (Network Address Translation) is enabled, the inside IP address and port number are replaced
on a connection-by-connection basis, which makes it impossible to know the exact address and port on the
wire. Therefore, the Prestige applies the protocol filters to the “native” IP address and port number before
NAT for outgoing packets and after NAT for incoming packets. On the other hand, the generic (or device)
filters are applied to the raw packets that appear on the wire. They are applied at the point where the
Prestige is receiving and sending the packets; for instance, the interface. The interface can be an Ethernet,
or any other hardware port. The following figure illustrates this.
Figure 18-12 Protocol and Device Filter Sets
18.5 Example Filter
Let’s look at an example to block outside users from telnetting into the Prestige.
- Prestige 202H 1
- Copyright 2
- Interference Statement 3
- Caution 4
- ZyXEL Limited Warranty 5
- Customer Support 6
- Table of Contents 7
- List of Figures 14
- List of Tables 21
- Preface 25
- Part I: 27
- Chapter 1 29
- 1.3.1 Internet Access 32
- 1.3.2 LAN-to-LAN Connection 33
- 1.3.3 Remote Access Server 34
- Chapter 2 37
- Hardware Installation 37
- 2.3 Turn On Your Router 39
- Chapter 3 41
- Introducing the SMT 41
- Enter Password : XXXX 42
- 3.5 SMT Menu Overview 44
- 3.7 Resetting the Prestige 46
- Chapter 4 49
- SMT Menu 1 General Setup 49
- 4.3 Dynamic DNS 50
- 4.4 Configuring Dynamic DNS 51
- Chapter 5 53
- ISDN Setup 53
- Switch Type 54
- Calling Line Indication 54
- PABX Outside Line Prefix 54
- Data Link Connection 55
- 5.3 NetCAPI 57
- 5.3.3 RVS-COM 58
- 5.3.4 Configuring NetCAPI 59
- 5-8 ISDN Setup 60
- Chapter 6 61
- Ethernet Setup 61
- 6.2.3 Private IP Addresses 63
- 6.2.4 RIP Setup 63
- 6.2.5 DHCP Configuration 64
- , as shown 65
- 6.4 IP Alias 66
- 6.5 IP Alias Setup 67
- 6-8 Ethernet Setup 68
- Chapter 7 69
- Internet Access Setup 69
- 7.2 Internet Access Setup 70
- Part II: 72
- Chapter 8 73
- Remote Node Configuration 73
- 8.4 PPP Multilink 78
- 8.5 Bandwidth on Demand 78
- 8.6 Editing PPP Options 79
- 8.7 LAN-to-LAN Application 81
- 8.9 Configuring Filter 86
- Chapter 9 89
- Static Route Setup 89
- Chapter 10 93
- Dial-in Setup 93
- Dial-in Setup 10-3 95
- 10-4 Dial-in Setup 96
- 10.4 Callback Overview 97
- 10.5 Dial-In User Setup 97
- Both and 103
- No respectively 103
- Both and Yes 103
- Required 105
- Chapter 11 107
- 11.1.2 What NAT Does 108
- 11.1.3 How NAT Works 108
- 11.1.4 NAT Application 109
- 11.1.5 NAT Mapping Types 110
- 11.2 Applying NAT 112
- 11.3 NAT Setup 113
- 11.3.1 Address Mapping Sets 114
- 11.3.3 Ordering Your Rules 116
- 11.5 General NAT Examples 121
- Part III: 130
- Chapter 12 131
- Firewalls 131
- 12.4 Denial of Service 133
- 12.4.2 Types of DoS Attacks 134
- 5 REDIRECT 136
- 13 TIMESTAMP_REQUEST 136
- 14 TIMESTAMP_REPLY 136
- 17 ADDRESS_MASK_REQUEST 136
- 18 ADDRESS_MASK_REPLY 136
- 12.5 Stateful Inspection 137
- 12.5.3 TCP Security 140
- 12.5.4 UDP/ICMP Security 140
- 12.5.5 Upper Layer Protocols 140
- 12.6.1 Security In General 141
- 12.7.1 Packet Filtering: 142
- 12.7.2 Firewall 143
- Chapter 13 145
- Prestige 202H User’s Guide 147
- Table 13-1 View Firewall Log 147
- Chapter 14 149
- Configurator 149
- 14.2 Enabling the Firewall 151
- 14.3 E-mail 151
- 14.3.1 Alerts 152
- Table 14-2 E-mail 153
- 14.3.2 SMTP Error Messages 154
- 14.3.3 Example E-mail Log 154
- 14.4 Attack Alert 155
- 14.4.2 Half-Open Sessions 156
- Table 14-4 Attack Alert 158
- Chapter 15 161
- Creating Custom Rules 161
- Service 162
- 15.3 Connection Direction 163
- 15.4 Rule Summary 164
- 15.5 Predefined Services 166
- 15.6 Timeout 172
- Chapter 16 175
- Customized Services 175
- 16.3 Example Firewall Rule 177
- 10.0.0.15 on the LAN 180
- Click Apply to save your 180
- Chapter 17 181
- Firewall Logs 181
- 17-2 Firewall Logs 182
- Table 17-1 Log Screen 182
- Part IV: 183
- Chapter 18 185
- Filter Configuration 185
- Built-in 186
- Call Filters 186
- Filter Rule 187
- Filter Set 187
- 18.3.1 TCP/IP Filter Rule 193
- 18.3.2 Generic Filter Rule 198
- 18.4 Filter Types and NAT 200
- 18.5 Example Filter 200
- 18.6.1 Ethernet Traffic 204
- 18.6.2 Remote Node Filters 204
- Chapter 19 207
- SNMP Configuration 207
- 19.2 Supported MIBs 208
- 19.3 SNMP Configuration 208
- 19.4 SNMP Traps 209
- Chapter 20 211
- 20.3.1 System Information 214
- 20.4 Log and Trace 215
- 20.4.2 Unix Syslog 216
- FIELD DESCRIPTION 218
- Firewall log 218
- 20.5 Accounting Server 219
- 20.6 Call Triggering Packet 220
- 20.7 Diagnostic 221
- Chapter 21 225
- Maintenance 225
- 21.2 Backup Configuration 226
- 21.2.1 Backup Configuration 227
- 21.2.4 GUI-based FTP Clients 228
- 21.2.7 TFTP Command Example 229
- 21.3 Restore Configuration 231
- 21.3.1 Restore Using FTP 232
- 21.4.1 Firmware File Upload 234
- 21.4.5 TFTP File Upload 237
- Choose the Xmodem protocol 239
- Then click Send 239
- Chapter 22 243
- SMT Menus 24.8 to 24.10 243
- 22.2 Call Control Support 244
- 22.2.2 Black List 245
- 22.2.3 Budget Management 246
- 22.2.4 Call History 247
- 22.3 Time and Date 248
- 22.3.1 Resetting the Time 250
- Chapter 23 251
- Call Scheduling 251
- 23.3 Applying Schedule Sets 253
- 23-4 Call Scheduling 254
- Chapter 24 255
- Remote Management 255
- 24.2 Telnet 256
- 24.3 FTP 256
- 24.4 Web 256
- DESCRIPTION 257
- Chapter 25 259
- Introduction to VPN/IPSec 259
- 25.1.4 VPN Applications 260
- 25.2 IPSec Architecture 261
- 25.2.1 IPSec Algorithms 262
- 25.2.2 Key Management 262
- 25.3 Encapsulation 263
- 25.4 IPSec and NAT 264
- Chapter 26 265
- VPN/IPSec Setup 265
- 26.2 IPSec Algorithms 266
- 26.3 My IP Address 267
- 26.4 Secure Gateway Address 267
- 26.5 IPSec Summary 268
- VPN/IPSec Setup 26-5 269
- 26-6 VPN/IPSec Setup 270
- VPN/IPSec Setup 26-7 271
- 26.6 Keep Alive 272
- 26.7 ID Type and Content 272
- 26.8 Pre-Shared Key 274
- 26.9 IPSec Setup 274
- 26-12 VPN/IPSec Setup 276
- VPN/IPSec Setup 26-13 277
- 192.168.1.35 277
- 26-14 VPN/IPSec Setup 278
- 26.10 IKE Phases 279
- 26.10.1 Negotiation Mode 281
- VPN/IPSec Setup 26-19 283
- 26.12 Manual Key Setup 284
- VPN/IPSec Setup 26-21 285
- Chapter 27 289
- SA Monitor 289
- 27-2 SA Monitor 290
- Chapter 28 291
- IPSec Log 291
- IPSec Log 28-3 293
- IPSec Log 28-5 295
- Part V: 296
- Appendix A 298
- Troubleshooting 298
- Problems With the ISDN Line 299
- Remote User Dial-in Problems 300
- Problems With the Password 300
- Appendix B 302
- Power Adapter Specifications 302
- Index I 306
- J Index 307
Relacionado con productos y manuales para Hardware Zyxel-communications 202H
(2 paginas)
(133 paginas)© 2020, manymanuals.es. Todos los derechos reservados | 0.103 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Comentarios a estos manuales