Zyxel-communications P-661H Series Manual de usuario Pagina 203
- Pagina / 383
- Tabla de contenidos
- MARCADORES
Valorado. / 5. Basado en revisión del cliente
P-661H/HW Series User’s Guide
Chapter 13 VPN Screens 203
CHAPTER 13
VPN Screens
This chapter introduces the VPN screens. See the Logs chapter for information on viewing
logs and the appendix for IPSec log descriptions.
13.1 VPN/IPSec Overview
Use the screens documented in this chapter to configure rules for VPN connections and
manage VPN connections.
13.2 IPSec Algorithms
The ESP and AH protocols are necessary to create a Security Association (SA), the
foundation of an IPSec VPN. An SA is built from the authentication provided by the AH and
ESP protocols. The primary function of key management is to establish and maintain the SA
between systems. Once the SA is established, the transport of data may commence.
13.2.1 AH (Authentication Header) Protocol
AH protocol (RFC 2402) was designed for integrity, authentication, sequence integrity (replay
resistance), and non-repudiation but not for confidentiality, for which the ESP was designed.
In applications where confidentiality is not required or not sanctioned by government
encryption restrictions, an AH can be employed to ensure integrity. This type of
implementation does not protect the information from dissemination but will allow for
verification of the integrity of the information and authentication of the originator.
13.2.2 ESP (Encapsulating Security Payload) Protocol
The ESP protocol (RFC 2406) provides encryption as well as the services offered by AH. ESP
authenticating properties are limited compared to the AH due to the non-inclusion of the IP
header information during the authentication process. However, ESP is sufficient if only the
upper layer protocols need to be authenticated.
An added feature of the ESP is payload padding, which further protects communications by
concealing the size of the packet being transmitted.
- P-661H/HW Series 1
- Copyright 3
- Certifications 4
- Certifications 5 5
- Safety Warnings 6
- ZyXEL Limited Warranty 7
- Customer Support 8
- Customer Support 9 9
- P-661H/HW Series User’s Guide 10
- 10 Customer Support 10
- Table of Contents 11
- Chapter 3 12
- Chapter 4 12
- Chapter 5 13
- Chapter 6 13
- Chapter 7 14
- Chapter 8 15
- Chapter 9 15
- Chapter 13 17
- 22 Table of Contents 22
- List of Figures 23
- List of Tables 29
- About This User's Guide 33
- Syntax Conventions 33
- Related Documentation 33
- User Guide Feedback 34
- Graphics Icons Key 34
- CHAPTER 1 35
- Antenna 39
- WEP Encryption 39
- Output Power Management 39
- 1.4 Front Panel LEDs 40
- 1.5 Hardware Connection 41
- 1.6.2 Telephone Microfilters 42
- CHAPTER 2 45
- Figure 6 Password Screen 46
- 2.3.1 Using the Reset Button 47
- 2.4.1 Navigation Panel 47
- 2.4.2 Status Screen 51
- Table 4 Status Screen 52
- 2.4.3 Status: Any IP Table 53
- 2.4.5 Status: VPN Status 54
- Table 7 Status: VPN Status 55
- Figure 16 System General 58
- CHAPTER 3 59
- 3.1 Internet Setup Wizard 60
- 3.1.2 Manual Configuration 61
- 3.1.2.3 Screen 3 62
- Chapter 3 Wizards 63 63
- 64 Chapter 3 Wizards 64
- 3.1.3 No DSL Detection 65
- 66 Chapter 3 Wizards 66
- Chapter 3 Wizards 67 67
- 68 Chapter 3 Wizards 68
- Chapter 3 Wizards 69 69
- 70 Chapter 3 Wizards 70
- Chapter 3 Wizards 71 71
- 72 Chapter 3 Wizards 72
- 3.3.1 Screen 1 73
- 3.3.2 Screen 2 74
- 3.3.3 Screen 3 75
- 76 Chapter 3 Wizards 76
- CHAPTER 4 77
- 4.1.2 Multiplexing 78
- 4.1.3 VPI and VCI 78
- 4.1.4 IP Address Assignment 79
- 4.1.6 NAT 79
- 4.2 Metric 80
- 4.3 Traffic Shaping 80
- 4.3.1 ATM Traffic Classes 81
- 4.5 Internet Connection 82
- Chapter 4 WAN Setup 83 83
- 84 Chapter 4 WAN Setup 84
- Chapter 4 WAN Setup 85 85
- 86 Chapter 4 WAN Setup 86
- 4.6.1 More Connections Edit 87
- 88 Chapter 4 WAN Setup 88
- Chapter 4 WAN Setup 89 89
- 90 Chapter 4 WAN Setup 90
- 4.7 Traffic Redirect 91
- The screen appears as shown 92
- Chapter 4 WAN Setup 93 93
- Figure 45 WAN Backup Setup 93
- Table 29 WAN Backup Setup 93
- Check WAN IP Address 94
- CHAPTER 5 95
- 5.1.2 DHCP Setup 96
- 5.1.3 DNS Server Address 96
- 5.2 LAN TCP/IP 97
- 5.2.2 RIP Setup 98
- 5.2.3 Multicast 99
- 5.2.4 Any IP 99
- 5.2.4.1 How Any IP Works 100
- 5.3 Configuring LAN IP 101
- 102 Chapter 5 LAN Setup 102
- Table 31 Advanced LAN Setup 102
- 5.4 DHCP Setup 103
- 5.5 LAN Client List 104
- Chapter 5 LAN Setup 105 105
- Figure 51 LAN Client List 105
- Table 33 LAN Client List 105
- 5.6 LAN IP Alias 106
- Chapter 5 LAN Setup 107 107
- Table 34 LAN IP Alias 107
- 108 Chapter 5 LAN Setup 108
- CHAPTER 6 109
- 6.2.1 SSID 110
- 6.2.2 MAC Address Filter 110
- 6.2.3 User Authentication 110
- 6.2.4 Encryption 111
- 112 Chapter 6 Wireless LAN 112
- Chapter 6 Wireless LAN 113 113
- 6.4.1 No Security 114
- 6.4.2 WEP Encryption 114
- 6.4.3 WPA-PSK/WPA2-PSK 115
- 116 Chapter 6 Wireless LAN 116
- 6.4.4 WPA/WPA2 117
- ZyXEL Device is using 118
- Chapter 6 Wireless LAN 119 119
- Table 40 Wireless: WPA/WPA2 119
- 6.5 OTIST 120
- 6.5.1.1 AP 121
- 6.5.1.2 Wireless Client 122
- 6.5.2 Starting OTIST 123
- 6.5.3 Notes on OTIST 123
- 6.6 MAC Filter 124
- Chapter 6 Wireless LAN 125 125
- Table 43 MAC Address Filter 125
- 6.7 WMM QoS 126
- 6.7.3 Services 127
- 6.8 QoS Screen 128
- Chapter 6 Wireless LAN 129 129
- Figure 68 Wireless LAN: QoS 129
- Table 46 Wireless LAN: QoS 129
- 130 Chapter 6 Wireless LAN 130
- Chapter 6 Wireless LAN 131 131
- 132 Chapter 6 Wireless LAN 132
- CHAPTER 7 133
- 7.1.2 What NAT Does 134
- 7.1.3 How NAT Works 134
- 7.1.4 NAT Application 135
- 7.1.5 NAT Mapping Types 135
- 7.3 NAT General Setup 136
- 7.4 Port Forwarding 137
- Figure 74 Port Forwarding 139
- Table 52 Port Forwarding 140
- 7.6 Address Mapping 141
- CHAPTER 8BLUE 145
- 146 Chapter 8 Firewalls 146
- 8.4 Denial of Service 147
- 8.4.2 Types of DoS Attacks 148
- Chapter 8 Firewalls 149 149
- Figure 80 SYN Flood 149
- 8.4.2.1 ICMP Vulnerability 150
- 8.5 Stateful Inspection 151
- 152 Chapter 8 Firewalls 152
- 8.5.3 TCP Security 153
- 8.5.4 UDP/ICMP Security 153
- 8.5.5 Upper Layer Protocols 154
- 8.6.1 Security In General 154
- 8.7.1 Packet Filtering: 155
- 8.7.2 Firewall 156
- CHAPTER 9 157
- 9.3 Rule Logic Overview 158
- 9.4 Connection Direction 159
- 9.5 Triangle Route 160
- Figure 85 IP Alias 161
- Figure 86 Firewall: General 162
- Table 60 Firewall: General 162
- 9.7 Firewall Rules Summary 163
- Table 61 Firewall Rules 164
- 9.7.2 Customized Services 167
- 9.8 Example Firewall Rule 168
- 10.0.0.15 on the LAN 171
- 9.9 Predefined Services 172
- 9.10 Anti Probing 174
- 9.11 DoS Thresholds 175
- 9.11.2 Half-Open Sessions 176
- CHAPTER 10 179
- Figure 102 TMSS 3 Steps 181
- 10.2.1 General TMSS Settings 182
- 10.2.2 TMSS Exception List 184
- 10.3 TMSS Virus Protection 185
- 10.4 Parental Controls 186
- Table 71 Parental Controls 187
- 6 Then click the OK button 190
- CHAPTER 11 193
- CHAPTER 12 197
- 12.1.4 VPN Applications 198
- 12.2 IPSec Architecture 199
- 12.3 Encapsulation 199
- 12.4 IPSec and NAT 200
- Table 76 VPN and NAT 201
- CHAPTER 13 203
- 13.3 My IP Address 204
- 13.4 Secure Gateway Address 205
- 13.5 VPN Setup Screen 205
- 206 Chapter 13 VPN Screens 206
- Figure 121 VPN Setup 206
- Table 78 VPN Setup 206
- 13.6 Keep Alive 207
- 13.8 Remote DNS Server 208
- 13.9 ID Type and Content 209
- 210 Chapter 13 VPN Screens 210
- 13.10 Pre-Shared Key 211
- 13.11 Editing VPN Policies 211
- 212 Chapter 13 VPN Screens 212
- Table 84 Edit VPN Policies 212
- Chapter 13 VPN Screens 213 213
- 214 Chapter 13 VPN Screens 214
- Chapter 13 VPN Screens 215 215
- 13.12 IKE Phases 216
- 13.12.1 Negotiation Mode 217
- 218 Chapter 13 VPN Screens 218
- Chapter 13 VPN Screens 219 219
- 220 Chapter 13 VPN Screens 220
- 13.14 Manual Key Setup 221
- 13.15 Configuring Manual Key 221
- 222 Chapter 13 VPN Screens 222
- Figure 127 VPN: Manual Key 222
- Table 86 VPN: Manual Key 222
- Chapter 13 VPN Screens 223 223
- 13.16 Viewing SA Monitor 224
- Chapter 13 VPN Screens 225 225
- Figure 128 VPN: SA Monitor 225
- Table 87 VPN: SA Monitor 225
- 226 Chapter 13 VPN Screens 226
- Chapter 13 VPN Screens 227 227
- 228 Chapter 13 VPN Screens 228
- Chapter 13 VPN Screens 229 229
- 230 Chapter 13 VPN Screens 230
- CHAPTER 14 231
- 14.2.1 Static Route Edit 232
- Chapter 14 Static Route 233 233
- Table 92 Static Route Edit 233
- 234 Chapter 14 Static Route 234
- CHAPTER 15 235
- 15.5 Scheduler 236
- 15.7 Configuring Summary 240
- 15.8.1 Rule Configuration 243
- 15.9 Bandwidth Monitor 245
- CHAPTER 16 247
- Figure 140 Dynamic DNS 248
- Table 103 Dynamic DNS 248
- Device and the DDNS server 249
- CHAPTER 17 251
- 17.2 WWW 252
- 17.3 Telnet 253
- 17.4 Configuring Telnet 253
- 17.5 Configuring FTP 254
- 17.6 SNMP 255
- 17.6.1 Supported MIBs 256
- 17.6.2 SNMP Traps 257
- 17.6.3 Configuring SNMP 257
- 17.7 Configuring DNS 259
- 17.8 Configuring ICMP 259
- 17.9 TR-069 (P-661H Only) 261
- Table 112 TR-069 Commands 262
- CHAPTER 18 263
- 18.2 UPnP and ZyXEL 264
- Table 113 Configuring UPnP 265
- Components selection box 266
- Figure 160 System Tray Icon 272
- Network 273
- CHAPTER 19 275
- 276 Chapter 19 System 276
- 19.2 Time Setting 277
- 278 Chapter 19 System 278
- Chapter 19 System 279 279
- 280 Chapter 19 System 280
- CHAPTER 20 281
- 282 Chapter 20 Logs 282
- Table 116 View Logs 282
- Chapter 20 Logs 283 283
- Figure 168 Log Settings 283
- Table 117 Log Settings 283
- 284 Chapter 20 Logs 284
- CHAPTER 21 285
- 286 Chapter 21 Tools 286
- 21.2 Configuration 287
- 288 Chapter 21 Tools 288
- Table 119 Configuration 288
- 21.3 Restart 289
- 290 Chapter 21 Tools 290
- CHAPTER 22 291
- 22.2 DSL Line Diagnostic 292
- CHAPTER 23 293
- 23.3 Problems with the WAN 294
- Appendix A 297
- Product Specifications 297
- 298 Appendix A 298
- Table 127 Firmware 298
- Appendix A 299 299
- 300 Appendix A 300
- Appendix B 301
- About ADSL 301
- 302 Appendix B 302
- APPENDIX C 303
- 304 Appendix C 304
- Appendix D 305
- Installing Components 306
- Configuring 307
- Windows 2000/NT/XP 308
- Macintosh OS X 313
- Verifying Settings 315
- Using Configuration Files 317
- APPENDIX E 319
- 320 Appendix E 320
- Subnet Masks 321
- Subnetting 321
- Example: Two Subnets 322
- Example: Four Subnets 323
- Example Eight Subnets 324
- Appendix E 325 325
- Table 139 Eight Subnets 325
- 326 Appendix E 326
- Appendix F 327
- Command Interpreter 327
- 328 Appendix F 328
- Appendix G 329
- Firewall Commands 329
- 330 Appendix G 330
- Appendix G 331 331
- 332 Appendix G 332
- Appendix G 333 333
- 334 Appendix G 334
- Appendix H 335
- NetBIOS Filter Commands 335
- NetBIOS Filter Configuration 336
- Appendix I 337
- How PPPoE Works 338
- Appendix J 339
- Log Descriptions 339
- 340 Appendix J 340
- Table 145 System Error Logs 340
- Appendix J 341 341
- Table 147 TCP Reset Logs 341
- 342 Appendix J 342
- Table 149 ICMP Logs 342
- Table 150 CDR Logs 342
- Table 151 PPP Logs 342
- Appendix J 343 343
- Table 152 UPnP Logs 343
- 344 Appendix J 344
- Table 154 Attack Logs 344
- Appendix J 345 345
- Table 155 IPSec Logs 345
- Table 156 IKE Logs 345
- 346 Appendix J 346
- Appendix J 347 347
- 348 Appendix J 348
- Table 157 PKI Logs 348
- Appendix J 349 349
- 350 Appendix J 350
- Table 159 802.1X Logs 350
- Appendix J 351 351
- Table 160 ACL Setting Notes 351
- Table 161 ICMP Notes 351
- 352 Appendix J 352
- Table 162 Syslog Logs 352
- Log Commands 353
- Log Command Example 354
- APPENDIX K 355
- 356 Appendix K 356
- Appendix K 357 357
- Fragmentation Threshold 358
- Preamble Type 359
- IEEE 802.11g Wireless LAN 359
- Wireless Security Overview 360
- IEEE 802.1x 360
- Types of RADIUS Messages 361
- Types of Authentication 362
- Dynamic WEP Key Exchange 363
- WPA and WPA2 364
- User Authentication 365
- 366 Appendix K 366
- Security Parameters Summary 367
- 368 Appendix K 368
- APPENDIX L 369
- Figure 213 Internet Options 370
- Figure 214 Internet Options 371
- JavaScripts 372
- 3 Scroll down to Scripting 373
- Java Permissions 374
- JAVA (Sun) 375
- Figure 219 Java (Sun) 376
- Index 377 377
- 378 Index 378
- Index 379 379
- 380 Index 380
- Index 381 381
- 382 Index 382
- Index 383 383
Relacionado con productos y manuales para Hardware Zyxel-communications P-661H Series
Hardware Zyxel-communications ADSL2+ Ethernet/USB Gateway 660RU-Tx Series Manual de usuario
(286 paginas)
(286 paginas)
(33 paginas)
Hardware Zyxel-communications WPA-1000 Manual de usuario
(160 paginas)
(160 paginas)
Hardware Zyxel-communications P-2002 Manual de usuario
(168 paginas)
(168 paginas)
Hardware Zyxel-communications Centralized Network Management Vantage CNM Manual de usuario
(430 paginas)
(430 paginas)
APC AR8001 manuels
Manuels d'utilisation et guides de l'utilisateur pour Accessoires pour portoirs APC AR8001.
Nous fournissons des manuels en pdf 1 APC AR8001 à télécharger gratuitement par type de document : Fiche technique
Comentarios a estos manuales