ZyXEL Communications ZYWALL 5 - V4.04 Guía de usuario descargar pdf (Pagina 24)

ZyXEL Confidential

404XD3C0.docx

24/181

(1) Rom restores

(2) On SMT24.8, input command: sys tos fwSchedule active on

(3) In eWC>Firewall, add a rule on LAN to WAN, block TCP & FTP Services during

10:30~10:35.

(4) Before 10:30, LAN pc connects WAN side FTP server, and upload a big file.

(5) After 10:30, this connection will be dropped. This is right.

(6) But after 10:35, when LAN pc tries to connect the FTP server again, some NAT

debug info "natFreeSlotByIamt: Iamt Reference ERROR" displayed in SMT.

(7) These debug info disappear after input command: sys tos fwSchedule active off

11. [BUG FIX] SPR ID: 08022166

Symptom: CI command “ip nat incikeport” had been removed in firmware 4.03.

Condition:

(1) Disable the engineer debug flag by "ATEN".

(2) Execute CI "ip nat incikeport" will fail.

Modifications in V 4.04(XD.0)b3 | 01/31/2008

1. [ENHANCEMENT]

Apply Firewall schedule policy to existing connection.

2. [ENHANCEMENT]

Add "www.cerberian.com" and "sitereview.cwfservice.net" website into default trust

domain.

3. [BUG FIX] SPR ID: 071022070

Symptom: When WAN restores connection, dial backup still will be triggered.

Condition:

(1) Let WAN1 down and dial backup up

(2) LAN PC downloads a file from WAN

(3) During downloading, let WAN1 up

(4) Then you will find ZyWALL still dial modem up three or more times

4. [BUG FIX] SPR ID: 071114969

Symptom: ZyWALL crashes due to IKE SA leaks

Condition:

+----ZyWALL1

ZyWALL_DUT (WAN) ---- (WAN) NAT Router (LAN) ----|

+----ZyWALL2

(1) Configure one IKE rule IKE1 in ZyWALL_DUT, set NAT Router as "Remote

Gateway".

(2) Add two IPSec rules under IKE1 in ZyWALL_DUT.

IPSec1: ZyWALL_DUT--ZyWALL1

IPSec2: ZyWALL_DUT--ZyWALL2

(3) In ZyWALL1, configure IKE and IPsec rule. Enable Nailup. Make sure the tunnel

1 2 ... 19 20 21 22 23 24 25 26 27 28 29 ... 180 181

Sin comentarios

ZyXEL Communications ZYWALL 5 - V4.04 Guía de usuario Pagina 24