User ManualTable of ContentsUser's Guide1About This User's Guide3Document Conventions4Safety Warnings6Contents Overview9Table of Contents11List of Figures21List of Tables27Introduction33Introducing the ZyXEL Device351.1 Overview351.2 Ways to Manage the ZyXEL Device361.3 Good Habits for Managing the ZyXEL Device371.4 Applications for the ZyXEL Device371.4.1 Secure Internet Access371.4.2 Wireless LAN Application381.4.3 Making Calls via Internet Telephony Service Provider381.4.4 Making Peer-to-peer Calls391.5 LEDs401.6 The RESET Button411.6.1 Using The Reset Button41Introducing the Web Configurator432.1 Web Configurator Overview432.1.1 Accessing the Web Configurator432.2 Web Configurator Main Screen462.2.1 Title Bar462.2.2 Navigation Panel472.2.3 Main Window492.2.4 Status Bar49Wizard51Internet and Wireless Setup Wizard533.1 Introduction533.2 Internet Access Wizard Setup533.3 Wireless Connection Wizard Setup583.3.1 Manually Assign a WPA-PSK key613.3.2 Manually Assign a WEP Key61VoIP Wizard And Example654.1 Introduction654.2 VoIP Wizard Setup65Advanced71Status Screens735.1 Status Screen735.2 Any IP Table765.3 WLAN Status (“W” models only)775.4 Packet Statistics775.5 VoIP Statistics79WAN Setup836.1 WAN Overview836.1.1 PPP over Ethernet836.1.2 IP Address Assignment836.1.3 Nailed-Up Connection (PPP)846.2 Internet Access Setup846.2.1 Advanced Internet Access Setup866.3 WAN Interface Setup87LAN Setup897.1 LAN Overview897.1.1 LANs, WANs and the ZyXEL Device897.1.2 DHCP Setup907.2 DNS Server Addresses907.3 LAN TCP/IP907.3.1 IP Address and Subnet Mask917.3.2 RIP Setup927.3.3 Multicast927.3.4 Any IP937.4 Configuring LAN IP947.4.1 Configuring Advanced LAN Setup957.5 DHCP Setup967.6 LAN Client List977.7 LAN IP Alias99Wireless LAN1018.1 Wireless Network Overview1018.2 Wireless Security Overview1028.2.1 SSID1028.2.2 MAC Address Filter1028.2.3 User Authentication1028.2.4 Encryption1038.2.5 One-Touch Intelligent Security Technology (OTIST)1048.3 Additional Wireless Terms1048.4 General WLAN Screen1048.4.1 No Security1058.4.2 WEP Encryption Screen1068.4.3 WPA(2)-PSK1078.4.4 WPA(2) Authentication Screen1098.4.5 Wireless LAN Advanced Setup1108.5 OTIST Screen1118.5.1 Notes on OTIST1138.6 MAC Filter114Network Address Translation (NAT) Screens1179.1 NAT General Overview1179.1.1 NAT Definitions1179.1.2 What NAT Does1189.1.3 How NAT Works1189.1.4 NAT Application1189.1.5 NAT Mapping Types1199.2 SUA (Single User Account) Versus NAT1209.3 NAT General Setup1209.4 Port Forwarding1219.4.1 Default Server IP Address1229.4.2 Port Forwarding: Services and Port Numbers1229.4.3 Configuring Servers Behind Port Forwarding (Example)1229.5 Configuring Port Forwarding1239.5.1 Port Forwarding Rule Edit1249.6 Address Mapping1259.6.1 Address Mapping Rule Edit1269.6.2 SIP ALG128Voice12910.1 Introduction to VoIP12910.2 SIP12910.2.1 SIP Identities12910.2.2 SIP Call Progression13010.2.3 SIP Servers13010.2.4 RTP13210.2.5 Pulse Code Modulation13210.2.6 Voice Coding13210.2.7 PSTN Call Setup Signaling13310.2.8 MWI (Message Waiting Indication)13310.2.9 Custom Tones (IVR)13310.3 Quality of Service (QoS)13410.3.1 Type of Service (ToS)13410.3.2 DiffServ13410.3.3 VLAN Tagging13510.4 SIP Settings Screen13510.5 Advanced SIP Setup Screen13710.6 SIP QoS Screen14110.7 Phone14110.7.1 Voice Activity Detection/Silence Suppression14110.7.2 Comfort Noise Generation14210.7.3 Echo Cancellation14210.8 Analog Phone Screen14210.9 Advanced Analog Phone Setup Screen14310.10 Common Phone Settings Screen14410.11 Phone Services Overview14510.11.1 The Flash Key14510.11.2 Europe Type Supplementary Phone Services14510.11.3 USA Type Supplementary Services14710.12 Phone Region Screen14810.13 Speed Dial14810.14 Incoming Call Policy Screen15010.15 PSTN Line (“L” models only)15210.16 PSTN Line Screen (“L” models only)152Firewalls15511.1 Firewall Overview15511.1.1 Stateful Inspection Firewall15511.1.2 About the ZyXEL Device Firewall15511.1.3 Guidelines For Enhancing Security With Your Firewall15611.2 General Firewall Policy Overview15611.3 Security Considerations15811.4 Triangle Route15811.4.1 The “Triangle Route” Problem15811.4.2 Solving the “Triangle Route” Problem15911.5 General Firewall Policy16011.6 Firewall Rules Summary16111.6.1 Configuring Firewall Rules16311.6.2 Customized Services16611.6.3 Configuring A Customized Service16611.7 Example Firewall Rule16711.8 Firewall Thresholds17111.8.1 Threshold Values17211.8.2 Configuring Firewall Thresholds172Content Filtering17512.1 Content Filtering Overview17512.2 Configuring Keyword Blocking17512.3 Configuring the Schedule17612.4 Configuring Trusted Computers177Introduction to IPSec17913.1 VPN Overview17913.1.1 IPSec17913.1.2 Security Association17913.1.3 Other Terminology17913.1.4 VPN Applications18013.2 IPSec Architecture18013.2.1 IPSec Algorithms18113.2.2 Key Management18113.3 Encapsulation18113.3.1 Transport Mode18213.3.2 Tunnel Mode18213.4 IPSec and NAT182VPN Screens18514.1 VPN/IPSec Overview18514.2 IPSec Algorithms18514.2.1 AH (Authentication Header) Protocol18514.2.2 ESP (Encapsulating Security Payload) Protocol18514.3 My IP Address18614.4 Secure Gateway Address18614.4.1 Dynamic Secure Gateway Address18714.5 VPN Setup Screen18714.6 Keep Alive18914.7 VPN, NAT, and NAT Traversal18914.8 Remote DNS Server19014.9 ID Type and Content19114.9.1 ID Type and Content Examples19214.10 Pre-Shared Key19314.11 Editing VPN Policies19314.12 IKE Phases19814.12.1 Negotiation Mode19914.12.2 Diffie-Hellman (DH) Key Groups19914.12.3 Perfect Forward Secrecy (PFS)20014.13 Configuring Advanced IKE Settings20014.14 Manual Key Setup20214.14.1 Security Parameter Index (SPI)20214.15 Configuring Manual Key20314.16 Viewing SA Monitor20514.17 Configuring Global Setting20714.18 Telecommuter VPN/IPSec Examples20714.18.1 Telecommuters Sharing One VPN Rule Example20714.18.2 Telecommuters Using Unique VPN Rules Example20814.19 VPN and Remote Management210Certificates21115.1 Certificates Overview21115.1.1 Advantages of Certificates21215.2 Self-signed Certificates21215.3 Configuration Summary21215.4 My Certificates21215.5 My Certificate Import21415.5.1 Certificate File Formats21515.6 My Certificate Create21615.7 My Certificate Details21815.8 Trusted CAs22115.9 Trusted CA Import22315.10 Trusted CA Details22415.11 Trusted Remote Hosts22615.12 Verifying a Trusted Remote Host’s Certificate22815.12.1 Trusted Remote Host Certificate Fingerprints22815.13 Trusted Remote Hosts Import22915.14 Trusted Remote Host Certificate Details22915.15 Directory Servers23215.16 Directory Server Add and Edit233Static Route23516.1 Static Route23516.2 Configuring Static Route23516.2.1 Static Route Edit236Quality of Service (QoS)23917.1 QoS Overview23917.1.1 IEEE 802.1Q Tag23917.1.2 IP Precedence24017.1.3 DiffServ24017.1.4 Automatical Priority Queue Assignment24117.2 Configuring QoS General Screen24117.3 Class Setup24217.3.1 Class Configuration24317.3.2 QoS Example24617.4 QoS Monitor248Dynamic DNS Setup25118.1 Dynamic DNS Overview25118.1.1 DYNDNS Wildcard25118.2 Configuring Dynamic DNS251Remote Management Configuration25519.1 Remote Management Overview25519.1.1 Remote Management Limitations25619.1.2 Remote Management and NAT25619.1.3 System Timeout25619.2 WWW (HTTP and HTTPS)25719.3 WWW25819.4 HTTPS Example25919.4.1 Internet Explorer Warning Messages25919.4.2 Netscape Navigator Warning Messages26019.4.3 Avoiding the Browser Warning Messages26019.4.4 Login Screen26119.5 Telnet26319.6 Configuring Telnet26319.7 Configuring FTP26419.8 SNMP26519.8.1 Supported MIBs26619.8.2 SNMP Traps26719.8.3 Configuring SNMP26719.9 Configuring DNS26819.10 Configuring ICMP269Universal Plug-and-Play (UPnP)27120.1 Introducing Universal Plug and Play27120.1.1 How do I know if I'm using UPnP?27120.1.2 NAT Traversal27120.1.3 Cautions with UPnP27120.2 UPnP and ZyXEL27220.2.1 Configuring UPnP27220.3 Installing UPnP in Windows Example27320.4 Using UPnP in Windows XP Example276Maintenance, Troubleshooting and Specifications283System28521.1 General Setup and System Name28521.1.1 General Setup28521.2 Time Setting287Logs28922.1 Logs Overview28922.1.1 Alerts and Logs28922.2 Viewing the Logs28922.3 Configuring Log Settings29022.4 SMTP Error Messages29222.4.1 Example E-mail Log29322.5 Log Descriptions294Tools30323.1 Introduction30323.2 Filename Conventions30323.3 File Maintenance Over WAN30423.4 Firmware Upgrade Screen30523.5 Backup and Restore30623.5.1 Backup Configuration30723.5.2 Restore Configuration30723.5.3 Reset to Factory Defaults30823.6 Restart30923.7 Using FTP or TFTP to Back Up Configuration30923.7.1 Using the FTP Commands to Back Up Configuration30923.7.2 FTP Command Configuration Backup Example31023.7.3 Configuration Backup Using GUI-based FTP Clients31023.7.4 Backup Configuration Using TFTP31023.7.5 TFTP Command Configuration Backup Example31123.7.6 Configuration Backup Using GUI-based TFTP Clients31123.8 Using FTP or TFTP to Restore Configuration31223.8.1 Restore Using FTP Session Example31223.9 FTP and TFTP Firmware and Configuration File Uploads31223.9.1 FTP File Upload Command from the DOS Prompt Example31323.9.2 FTP Session Example of Firmware File Upload31323.9.3 TFTP File Upload31323.9.4 TFTP Upload Command Example314Diagnostic31524.1 General Diagnostic31524.2 DSL Line Diagnostic315Troubleshooting31725.1 Power, Hardware Connections, and LEDs31725.2 ZyXEL Device Access and Login31825.3 Internet Access32025.4 Phone Calls and VoIP32125.5 Problems With Multiple SIP Accounts32225.5.1 Outgoing Calls32225.5.2 Incoming Calls323Product Specifications325Appendices and Index335Setting up Your Computer’s IP Address337Pop-up Windows, JavaScripts and Java Permissions349IP Addresses and Subnetting355Wireless LANs363Services373Internal SPTGEN377Legal Information401Customer Support405Index411Size: 12.1 MBPages: 418Language: EnglishOpen manual
