Zyxel-communications P-2602HW(L) Series Manual de usuario Pagina 193
- Pagina / 427
- Tabla de contenidos
- MARCADORES
Valorado. / 5. Basado en revisión del cliente
P-2602H(W)(L)-DxA Series User’s Guide
Chapter 14 Firewall Configuration 193
CHAPTER 14
Firewall Configuration
This chapter shows you how to enable and configure the ZyXEL Device firewall.
14.1 Access Methods
The web configurator is, by far, the most comprehensive firewall configuration tool your
ZyXEL Device has to offer. For this reason, it is recommended that you configure your
firewall using the web configurator. CLI commands provide limited configuration options and
are only recommended for advanced users.
14.2 Firewall Policies Overview
Firewall rules are grouped based on the direction of travel of packets to which they apply:
Note: The LAN includes both the LAN port and the WLAN.
By default, the ZyXEL Device’s stateful packet inspection allows packets traveling in the
following directions:
• LAN to LAN/ Router
This allows computers on the LAN to manage the ZyXEL Device and communicate
between networks or subnets connected to the LAN interface.
• LAN to WAN
By default, the ZyXEL Device’s stateful packet inspection drops packets traveling in the
following directions:
•WAN to LAN
•WAN to WAN/ Router
This prevents computers on the WAN from using the ZyXEL Device as a gateway to
communicate with other computers on the WAN and/or managing the ZyXEL Device.
You may define additional rules and sets or modify existing ones but please exercise
extreme caution in doing so.
• LAN to LAN/ Router • WAN to LAN
• LAN to WAN • WAN to WAN/ Router
- P-2602HW(L) Series 1
- P-2602H Series 1
- Copyright 3
- Certifications 4
- Safety Warnings 5
- ZyXEL Limited Warranty 6
- Customer Support 7
- 8 Customer Support 8
- Table of Contents 9
- Chapter 8 11
- Chapter 9 11
- Chapter 10 12
- Chapter 11 12
- Chapter 12 14
- Chapter 13 14
- Chapter 17 16
- List of Figures 23
- List of Tables 29
- 34 List of Tables 34
- About This User's Guide 35
- Related Documentation 35
- User Guide Feedback 35
- Syntax Conventions 35
- Graphics Icons Key 36
- CHAPTER 1 37
- 1.2 Features 38
- Table 3 IEEE 802.11g 42
- 1.4.1 Internet Access 44
- 1.4.5 LAN to LAN Application 46
- 1.4.6 LEDs 47
- Table 4 LEDs (continued) 48
- CHAPTER 2 49
- Figure 7 Password Screen 50
- 2.1.2 The RESET Button 51
- 2.2.1 Title Bar 52
- 2.2.2 Navigation Panel 53
- 2.2.3 Main Window 55
- 2.2.4 Status Bar 55
- CHAPTER 3 57
- Figure 12 Wizard Welcome 58
- 3.2.1 Manual Configuration 59
- LABEL DESCRIPTION 64
- Figure 25 Wireless LAN 66
- CHAPTER 4 71
- Figure 31 Select a Mode 72
- Figure 32 Wizard: Welcome 72
- Figure 35 VoIP Wizard Fail 75
- CHAPTER 5 77
- Figure 37 Select a Mode 79
- Figure 38 Wizard: Welcome 79
- CHAPTER 6 83
- 84 Chapter 6 Status Screens 84
- Table 21 Status Screen 84
- Chapter 6 Status Screens 85 85
- 6.2 Any IP Table 86
- 6.4 Packet Statistics 87
- 88 Chapter 6 Status Screens 88
- Figure 45 Packet Statistics 88
- Table 24 Packet Statistics 88
- 6.5 VoIP Statistics 89
- 90 Chapter 6 Status Screens 90
- Table 25 VoIP Statistics 90
- Chapter 6 Status Screens 91 91
- 92 Chapter 6 Status Screens 92
- CHAPTER 7 93
- 7.1.2 Multiplexing 94
- 7.1.3 VPI and VCI 94
- 7.1.4 IP Address Assignment 95
- 7.1.6 NAT 95
- 7.2 Metric 96
- 7.3 Traffic Shaping 96
- 7.3.1 ATM Traffic Classes 97
- 7.5 Internet Access Setup 98
- Chapter 7 WAN Setup 99 99
- 100 Chapter 7 WAN Setup 100
- Chapter 7 WAN Setup 101 101
- 7.6 WAN More Connections 102
- 7.7 Traffic Redirect 103
- 104 Chapter 7 WAN Setup 104
- 7.8 WAN Backup Setup 105
- Check WAN IP Address 106
- CHAPTER 8 107
- 8.1.2 DHCP Setup 108
- 8.1.3 DNS Server Address 108
- 8.2 LAN TCP/IP 109
- 8.2.2 RIP Setup 110
- 8.2.3 Multicast 111
- 8.2.4 Any IP 111
- 8.2.4.1 How Any IP Works 112
- 8.3 Configuring LAN IP 113
- 114 Chapter 8 LAN Setup 114
- Table 31 Advanced LAN Setup 114
- 8.4 DHCP Setup 115
- 8.5 LAN Client List 116
- 8.6 LAN IP Alias 117
- 118 Chapter 8 LAN Setup 118
- Figure 60 LAN IP Alias 118
- Table 34 LAN IP Alias 118
- Chapter 8 LAN Setup 119 119
- 120 Chapter 8 LAN Setup 120
- CHAPTER 9 121
- 9.2.1 SSID 122
- 9.2.2 MAC Address Filter 122
- 9.2.3 User Authentication 123
- 9.2.4 Encryption 123
- 124 Chapter 9 Wireless LAN 124
- 9.5 General WLAN Screen 125
- 9.5.1 No Security 126
- 9.5.2 WEP Encryption Screen 127
- 9.5.3 WPA(2)-PSK 128
- Chapter 9 Wireless LAN 129 129
- 130 Chapter 9 Wireless LAN 130
- Figure 66 Wireless: WPA(2) 130
- Table 40 Wireless: WPA(2) 130
- Chapter 9 Wireless LAN 131 131
- 132 Chapter 9 Wireless LAN 132
- Figure 67 Advanced 132
- 9.6 OTIST Screen 133
- 134 Chapter 9 Wireless LAN 134
- Figure 70 OTIST: Settings 134
- 9.6.1 Notes on OTIST 135
- 9.7 MAC Filter 136
- 9.8 QoS Screen 137
- 138 Chapter 9 Wireless LAN 138
- Table 44 Wireless LAN: QoS 138
- Chapter 9 Wireless LAN 139 139
- 140 Chapter 9 Wireless LAN 140
- CHAPTER 10 141
- 10.1.2 What NAT Does 142
- 10.1.3 How NAT Works 142
- 10.1.4 NAT Application 143
- 10.1.5 NAT Mapping Types 143
- 10.3 NAT General Setup 144
- 10.4 Port Forwarding 145
- Figure 81 Port Forwarding 147
- Table 49 Port Forwarding 147
- 10.5.2 SIP ALG 149
- CHAPTER 11 151
- 11.2.2 SIP Call Progression 152
- 11.2.3 SIP Servers 152
- 11.2.3.1 SIP User Agent 153
- 11.2.3.2 SIP Proxy Server 153
- 11.3 SIP Settings Screen 154
- Chapter 11 Voice 155 155
- 11.4 Pulse Code Modulation 156
- 11.5 Voice Coding 156
- 11.8 Custom Tones (IVR) 157
- 158 Chapter 11 Voice 158
- Chapter 11 Voice 159 159
- 160 Chapter 11 Voice 160
- Chapter 11 Voice 161 161
- 11.10.2 DiffServ 162
- 11.10.3 VLAN 163
- 11.10.4 SIP QoS Screen 163
- 11.11 Phone 164
- 11.13 Analog Phone Screen 165
- 166 Chapter 11 Voice 166
- > Phone > Common 167
- 11.15.1 The Flash Key 168
- 11.15.2.1 European Call Hold 169
- 11.15.3.1 USA Call Hold 170
- 11.16 Phone Region Screen 171
- 11.17 Speed Dial 172
- 11.18 Speed Dial Screen 173
- 174 Chapter 11 Voice 174
- Chapter 11 Voice 175 175
- 176 Chapter 11 Voice 176
- Chapter 11 Voice 177 177
- 178 Chapter 11 Voice 178
- CHAPTER 12 179
- 12.5 Auto Firmware Upgrade 180
- CHAPTER 13 181
- 182 Chapter 13 Firewalls 182
- 13.4 Denial of Service 183
- 13.4.2 Types of DoS Attacks 184
- Chapter 13 Firewalls 185 185
- Figure 100 SYN Flood 185
- 13.4.2.1 ICMP Vulnerability 186
- 13.5 Stateful Inspection 187
- 188 Chapter 13 Firewalls 188
- 13.5.3 TCP Security 189
- 13.5.4 UDP/ICMP Security 189
- 13.5.5 Upper Layer Protocols 190
- 13.6.1 Security In General 190
- 13.7.1 Packet Filtering: 191
- 13.7.2 Firewall 192
- CHAPTER 14 193
- 14.3 Rule Logic Overview 194
- 14.4 Connection Direction 195
- 14.4.1 LAN to WAN Rules 196
- 14.4.2 Alerts 196
- 14.6 Firewall Rules Summary 197
- Figure 104 Firewall Rules 198
- Table 71 Firewall Rules 198
- Address 201
- 14.7 Example Firewall Rule 203
- 10.0.0.15 on the LAN 206
- 14.8 DoS Thresholds 207
- 14.8.2 Half-Open Sessions 208
- CHAPTER 15 211
- CHAPTER 16 215
- 16.2 IPSec Architecture 216
- 16.3 Encapsulation 217
- 16.4 IPSec and NAT 218
- Table 79 VPN and NAT 219
- CHAPTER 17 221
- 17.3 My IP Address 222
- 17.4 Secure Gateway Address 223
- 17.5 VPN Setup Screen 223
- 224 Chapter 17 VPN Screens 224
- Figure 121 VPN Setup 224
- Table 81 VPN Setup 224
- 17.6 Keep Alive 225
- 226 Chapter 17 VPN Screens 226
- Table 82 VPN and NAT 226
- 17.8 Remote DNS Server 227
- 17.9 ID Type and Content 227
- 228 Chapter 17 VPN Screens 228
- 17.10 Pre-Shared Key 229
- 17.11 Editing VPN Policies 229
- 230 Chapter 17 VPN Screens 230
- Table 87 Edit VPN Policies 230
- Chapter 17 VPN Screens 231 231
- 232 Chapter 17 VPN Screens 232
- Chapter 17 VPN Screens 233 233
- 17.12 IKE Phases 234
- 17.12.1 Negotiation Mode 235
- 236 Chapter 17 VPN Screens 236
- Chapter 17 VPN Screens 237 237
- 238 Chapter 17 VPN Screens 238
- 17.14 Manual Key Setup 239
- 240 Chapter 17 VPN Screens 240
- Figure 127 VPN: Manual Key 240
- Table 89 VPN: Manual Key 240
- Chapter 17 VPN Screens 241 241
- 17.16 Viewing SA Monitor 242
- Chapter 17 VPN Screens 243 243
- Figure 128 VPN: SA Monitor 243
- Table 90 VPN: SA Monitor 243
- 244 Chapter 17 VPN Screens 244
- Chapter 17 VPN Screens 245 245
- 246 Chapter 17 VPN Screens 246
- Chapter 17 VPN Screens 247 247
- 248 Chapter 17 VPN Screens 248
- CHAPTER 18 249
- 18.2.1 Static Route Edit 250
- Chapter 18 Static Route 251 251
- Table 95 Static Route Edit 251
- 252 Chapter 18 Static Route 252
- CHAPTER 19 253
- 19.5 Scheduler 254
- 19.7 Configuring Summary 257
- 19.8.1 Rule Configuration 260
- 19.9 Bandwidth Monitor 262
- CHAPTER 20 263
- Figure 140 Dynamic DNS 264
- Table 104 Dynamic DNS 264
- Device and the DDNS server 265
- CHAPTER 21 267
- 21.2 WWW 268
- 21.3 Telnet 269
- 21.4 Configuring Telnet 269
- 21.5 Configuring FTP 270
- 21.6 SNMP 271
- 21.6.1 Supported MIBs 272
- 21.6.2 SNMP Traps 273
- 21.6.3 Configuring SNMP 273
- 21.7 Configuring DNS 275
- 21.8 Configuring ICMP 275
- CHAPTER 22 277
- 22.2 UPnP and ZyXEL 278
- Table 112 Configuring UPnP 279
- Components selection box 280
- Figure 159 System Tray Icon 285
- Network 286
- CHAPTER 23 289
- 290 Chapter 23 System 290
- 23.2 Time Setting 291
- 292 Chapter 23 System 292
- Chapter 23 System 293 293
- 294 Chapter 23 System 294
- CHAPTER 24 295
- 296 Chapter 24 Logs 296
- Figure 166 View Log 296
- Table 115 View Log 296
- Chapter 24 Logs 297 297
- Figure 167 Log Settings 297
- Table 116 Log Settings 297
- 298 Chapter 24 Logs 298
- 24.4 SMTP Error Messages 299
- 300 Chapter 24 Logs 300
- CHAPTER 25 301
- 302 Chapter 25 Tools 302
- Chapter 25 Tools 303 303
- Figure 169 Firmware Upgrade 303
- Table 119 Firmware Upgrade 303
- 25.5 Backup and Restore 304
- 25.5.1 Backup Configuration 305
- 306 Chapter 25 Tools 306
- 25.6 Restart 307
- Chapter 25 Tools 311 311
- 25.9.3 TFTP File Upload 312
- Chapter 25 Tools 313 313
- 314 Chapter 25 Tools 314
- CHAPTER 26 315
- 316 Chapter 26 Diagnostic 316
- 318 Chapter 26 Diagnostic 318
- CHAPTER 27 319
- 27.3 Problems with the WAN 320
- Figure 185 Pop-up Blocker 322
- Figure 187 Internet Options 324
- 27.4.1.2 JavaScripts 325
- 3 Scroll down to Scripting 326
- 27.4.1.3 Java Permissions 327
- 27.4.1.3.1 JAVA (Sun) 328
- 27.5 Telephone Problems 329
- 27.6.1 Outgoing Calls 330
- 27.6.2 Incoming Calls 331
- APPENDIX A 333
- APPENDIX B 339
- ZyXEL Device With ISDN 340
- APPENDIX C 341
- Installing Components 342
- Configuring 343
- Windows 2000/NT/XP 344
- Verifying Settings 348
- Macintosh OS 8/9 349
- Macintosh OS X 350
- APPENDIX D 353
- Subnet Masks 355
- Subnetting 355
- Example: Two Subnets 356
- Example: Four Subnets 357
- Example Eight Subnets 358
- Table 144 Eight Subnets 359
- APPENDIX E 361
- 362 Appendix E Wireless LANs 362
- Appendix E Wireless LANs 363 363
- Fragmentation Threshold 364
- Preamble Type 365
- IEEE 802.1x 366
- Types of Authentication 367
- PEAP (Protected EAP) 368
- Dynamic WEP Key Exchange 368
- User Authentication 369
- Encryption 369
- Security Parameters Summary 370
- APPENDIX F 371
- 372 Appendix F Services 372
- Appendix F Services 373 373
- 374 Appendix F Services 374
- APPENDIX G 375
- APPENDIX H 377
- IP Aliasing 378
- Gateways on the WAN Side 379
- 380 Appendix H Triangle Route 380
- APPENDIX I 381
- Table 153 System Error Logs 382
- Table 155 TCP Reset Logs 383
- Table 157 ICMP Logs 383
- Table 158 CDR Logs 384
- Table 159 PPP Logs 384
- Table 160 UPnP Logs 385
- Table 162 Attack Logs 385
- Table 163 802.1X Logs 386
- Table 164 ACL Setting Notes 387
- Table 165 ICMP Notes 387
- Table 166 Syslog Logs 388
- Table 167 SIP Logs 388
- Log Commands 390
- Displaying Logs 391
- Log Command Example 392
- APPENDIX J 393
- APPENDIX K 395
- Table 175 Menu 3 398
- Table 177 Menu 12 403
- Command Examples 419
- Index 421 421
- 422 Index 422
- Index 423 423
- 424 Index 424
- Index 425 425
- 426 Index 426
- Index 427 427
Relacionado con productos y manuales para Hardware Zyxel-communications P-2602HW(L) Series
Hardware Zyxel-communications NBG-419N Manual de usuario
(294 paginas)
(294 paginas)
Hardware Zyxel-communications 802.11g HomePlug AV ADSL2+ Gateway P-660HWP-Dx Manual de usuario
(402 paginas)
(402 paginas)
Hardware Zyxel-communications NBG334W Manual de usuario
(296 paginas)
(296 paginas)
Hardware Zyxel-communications Intelligent Broadband Sharing Gateway P-324 Manual de usuario
(285 paginas)
(285 paginas)
Hardware Zyxel-communications Cable Modem Router with Wireless P-974 series Manual de usuario
(2 paginas)
(2 paginas)
(3 paginas)© 2020, manymanuals.es. Todos los derechos reservados | 0.074 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Comentarios a estos manuales