User ManualTable of ContentsUser’s Guide1About This User's Guide3Document Conventions4Safety Warnings6Contents Overview9Table of Contents11List of Figures23List of Tables31Introduction, Wizards and Tutorials37Getting To Know Your ZyXEL Device391.1 Overview391.1.1 High-speed Internet Access391.1.2 High-speed Point-to-point Connections401.1.3 High-speed Point-to-2points Connections401.2 Ways to Manage the ZyXEL Device411.3 Good Habits for Managing the ZyXEL Device411.4 LEDs41Introducing the Web Configurator432.1 Web Configurator Overview432.2 Accessing the Web Configurator432.3 Navigating the Web Configurator452.4 Status Screen482.4.1 Status: Bandwidth Status502.4.2 Status: Packet Statistics512.4.3 Status: VPN Status522.5 Resetting the ZyXEL Device522.5.1 Using the Reset Button52Wizards533.1 Internet Setup Wizard543.1.1 Screen 1543.1.2 Screen 2553.1.3 Screen 3583.2 Bandwidth Management Wizard593.2.1 Screen 1603.2.2 Screen 2613.2.3 Screen 362Point-to-(2)point Configuration634.1 Point-to-point Connection Overview634.2 Point-to-point Connection Procedure644.2.1 Set up the Server644.2.2 Set up the Client644.2.3 Connect the ZyXEL Devices654.3 Point-to-2points Connection Overview654.4 Point-to-2point Connection Procedure664.4.1 Set up the Server664.4.2 Set up the Clients674.4.3 Connect the ZyXEL Devices67Network Setup69WAN Setup715.1 WAN Overview715.1.1 Encapsulation715.1.2 Multiplexing725.1.3 VPI and VCI725.1.4 IP Address Assignment725.1.5 Nailed-Up Connection (PPP)735.1.6 NAT735.2 Metric735.3 Traffic Shaping745.3.1 ATM Traffic Classes755.4 Internet Connection755.4.1 2Wire-2Line Service Mode785.4.2 Configuring Advanced Internet Connection795.5 Configuring More Connections815.5.1 More Connections Edit815.5.2 Configuring More Connections Advanced Setup845.6 Traffic Redirect855.7 Dial Backup Interface865.8 Configuring WAN Backup Setup865.8.1 Advanced Backup Setup895.8.2 Advanced Modem Settings for Dial Backup91LAN Setup936.1 LAN Overview936.1.1 LANs, WANs and the ZyXEL Device936.1.2 DHCP Setup946.1.3 DNS Server Address946.1.4 DNS Server Address Assignment946.2 LAN TCP/IP956.2.1 IP Address and Subnet Mask956.2.2 RIP Setup966.2.3 Multicast976.3 Configuring LAN IP976.3.1 Configuring Advanced LAN Setup986.4 DHCP Setup996.5 LAN Client List1006.6 LAN IP Alias101Network Address Translation (NAT) Screens1037.1 NAT Overview1037.1.1 NAT Definitions1037.1.2 What NAT Does1047.1.3 How NAT Works1047.1.4 NAT Application1047.1.5 NAT Mapping Types1057.2 SUA (Single User Account) Versus NAT1067.3 NAT General Setup1067.4 Port Forwarding1077.4.1 Default Server IP Address1077.4.2 Port Forwarding: Services and Port Numbers1087.4.3 Configuring Servers Behind Port Forwarding (Example)1087.5 Configuring Port Forwarding1087.5.1 Port Forwarding Rule Edit1107.6 Address Mapping1117.6.1 Address Mapping Rule Edit112Security and Advanced Setup115Firewalls1178.1 Firewall Overview1178.2 Types of Firewalls1178.2.1 Packet Filtering Firewalls1178.2.2 Application-level Firewalls1188.2.3 Stateful Inspection Firewalls1188.3 Introduction to ZyXEL’s Firewall1188.3.1 Denial of Service Attacks1198.4 Denial of Service1198.4.1 Basics1198.4.2 Types of DoS Attacks1198.5 Stateful Inspection1228.5.1 Stateful Inspection Process1238.5.2 Stateful Inspection and the ZyXEL Device1248.5.3 TCP Security1248.5.4 UDP/ICMP Security1258.5.5 Upper Layer Protocols1258.6 Guidelines for Enhancing Security with Your Firewall1268.6.1 Security In General1268.7 Packet Filtering vs. Firewall1278.7.1 Packet Filtering1278.7.2 Firewall127Firewall Configuration1299.1 Access Methods1299.2 Firewall Policies Overview1299.3 Rule Logic Overview1309.3.1 Rule Checklist1309.3.2 Security Ramifications1309.3.3 Key Fields For Configuring Rules1319.4 Connection Direction1319.4.1 LAN to WAN Rules1329.4.2 Alerts1329.5 Triangle Route1329.5.1 The “Triangle Route” Problem1329.5.2 Solving the “Triangle Route” Problem1339.6 General Firewall Policy1339.7 Firewall Rules Summary1359.7.1 Configuring Firewall Rules1369.7.2 Customized Services1399.7.3 Configuring A Customized Service1399.8 Example Firewall Rule1409.9 Anti-Probing1449.10 DoS Thresholds1459.10.1 Threshold Values1459.10.2 Half-Open Sessions1469.10.3 Configuring Firewall Thresholds146Content Filtering14910.1 Content Filtering Overview14910.2 Configuring Keyword Blocking14910.3 Configuring the Schedule15010.4 Configuring Trusted Computers151IPSec VPN15311.1 IPSec VPN Overview15311.1.1 IKE SA Overview15411.1.2 Additional Topics for IKE SA15711.1.3 IPSec SA Overview15811.1.4 Additional Topics for IPSec SA16011.2 VPN Setup Screen16111.3 Editing VPN Policies16311.4 Configuring Advanced IKE Settings16711.5 Configuring Manual Key16911.6 Viewing SA Monitor17211.7 Configuring Global Setting17311.8 Telecommuter VPN/IPSec Examples17411.8.1 Telecommuters Sharing One VPN Rule Example17411.8.2 Telecommuters Using Unique VPN Rules Example17511.9 VPN and Remote Management176Static Route17712.1 Static Route17712.2 Configuring Static Route17712.2.1 Static Route Edit178Bandwidth Management18113.1 Bandwidth Management Overview18113.2 Application-based Bandwidth Management18113.3 Subnet-based Bandwidth Management18113.4 Application and Subnet-based Bandwidth Management18213.5 Scheduler18213.5.1 Priority-based Scheduler18213.5.2 Fairness-based Scheduler18313.6 Maximize Bandwidth Usage18313.6.1 Reserving Bandwidth for Non-Bandwidth Class Traffic18313.6.2 Maximize Bandwidth Usage Example18313.6.3 Over Allotment of Bandwidth18513.6.4 Bandwidth Management Priorities18513.7 Configuring Summary18513.8 Bandwidth Management Rule Setup18713.8.1 Rule Configuration18813.9 Bandwidth Monitor189Dynamic DNS Setup19114.1 Dynamic DNS Overview19114.1.1 DYNDNS Wildcard19114.2 Configuring Dynamic DNS191Remote Management Configuration19515.1 Remote Management Overview19515.1.1 Remote Management Limitations19615.1.2 Remote Management and NAT19615.1.3 System Timeout19615.2 WWW19615.3 Telnet19715.4 Configuring Telnet19715.5 Configuring FTP19815.6 SNMP19915.6.1 Supported MIBs20015.6.2 SNMP Traps20015.6.3 Configuring SNMP20115.7 Configuring DNS20215.8 Configuring ICMP20215.9 TR-069203Universal Plug-and-Play (UPnP)20516.1 Introducing Universal Plug and Play20516.1.1 How do I know if I'm using UPnP?20516.1.2 NAT Traversal20516.1.3 Cautions with UPnP20516.2 UPnP and ZyXEL20616.2.1 Configuring UPnP20616.3 Installing UPnP in Windows Example20716.4 Using UPnP in Windows XP Example210Maintenance217System21917.1 General Setup21917.1.1 General Setup and System Name21917.1.2 General Setup21917.2 Time Setting221Logs22518.1 Logs Overview22518.1.1 Alerts and Logs22518.2 Viewing the Logs22518.3 Configuring Log Settings226Tools22919.1 Firmware Upgrade22919.2 Configuration23119.3 Restart233Diagnostic23520.1 General Diagnostic23520.2 DSL Line Diagnostic235SMT and Troubleshooting237Introducing the SMT23921.1 Accessing the SMT23921.2 SMT Menu Items24021.3 Navigating the SMT Interface242General Setup24522.1 Configuring General Setup24522.1.1 Configuring Dynamic DNS246WAN Setup24923.1 WAN Setup24923.1.1 2wire-2line Service Mode25123.2 Configuring Traffic Redirect25223.3 Dial Backup Interface25323.4 Configuring Dial Backup in Menu 225323.5 Advanced Dial Backup Setup254LAN Setup25724.1 Accessing the LAN Menus25724.2 LAN Port Filter Setup25724.3 TCP/IP and DHCP Setup Menu25824.4 LAN IP Alias25924.4.1 Port-based VLAN Setup260Internet Access Setup26325.1 Internet Access Setup263Remote Node Setup26526.1 Introduction to Remote Node Setup26526.2 Remote Node Setup26526.3 Remote Node Profile26526.4 Remote Node Network Layer Options26926.5 Remote Node Filter27126.6 Remote Node ATM Layer Options27226.7 Advance Setup Options274Static Route Setup27527.1 IP Static Route Setup27527.2 Bridge Static Route Setup276NAT Setup27928.1 Using NAT27928.1.1 SUA (Single User Account) Versus NAT27928.1.2 Applying NAT27928.2 NAT Setup28128.2.1 Address Mapping Sets28128.3 Configuring a Server behind NAT28428.4 General NAT Examples28628.4.1 Internet Access Only28628.4.2 Example 2: Internet Access with a Default Server28728.4.3 Example 3: Multiple Public IP Addresses With Inside Servers28828.4.4 Example 4: NAT Unfriendly Application Programs291Firewall Setup29329.1 Using ZyXEL Device SMT Menus29329.1.1 Activating the Firewall293Filter Configuration29530.1 Introduction to Filters29530.1.1 The Filter Structure of the ZyXEL Device29630.2 Configuring a Filter Set29730.2.1 Configuring a Filter Rule29930.2.2 Configuring a TCP/IP Filter Rule30030.2.3 Configuring a Generic Filter Rule30230.3 Example Filter30430.4 Filter Types and NAT30630.5 Firewall Versus Filters30630.6 Applying a Filter30630.6.1 Applying LAN Filters30730.6.2 Applying Remote Node Filters307SNMP Configuration30931.1 SNMP Configuration309System Password311System Information & Diagnosis31333.1 Introduction to System Status31333.2 System Status31333.3 System Information and Console Port Speed31533.3.1 System Information31533.3.2 Console Port Speed31633.4 Log and Trace31733.4.1 Viewing Error Log31733.4.2 Syslog Logging31833.5 Diagnostic320Firmware and Configuration File Maintenance32334.1 Introduction32334.2 Filename Conventions32334.3 Backup Configuration32434.3.1 Backup Configuration32434.3.2 Using the FTP Command from the Command Line32534.3.3 Example of FTP Commands from the Command Line32534.3.4 GUI-based FTP Clients32634.3.5 File Maintenance Over WAN32634.3.6 Backup Configuration Using TFTP32634.3.7 TFTP Command Example32734.3.8 GUI-based TFTP Clients32734.3.9 Backup Via Console Port32734.4 Restore Configuration32834.4.1 Restore Using FTP32934.4.2 Restore Using FTP Session Example33034.4.3 Restore Via Console Port33034.5 Uploading Firmware and Configuration Files33134.5.1 Firmware File Upload33134.5.2 Configuration File Upload33134.5.3 FTP File Upload Command from the DOS Prompt Example33234.5.4 FTP Session Example of Firmware File Upload33334.5.5 TFTP File Upload33334.5.6 TFTP Upload Command Example33434.5.7 Uploading Via Console Port33434.5.8 Uploading Firmware File Via Console Port33434.5.9 Example Xmodem Firmware Upload Using HyperTerminal33434.5.10 Uploading Configuration File Via Console Port33534.5.11 Example Xmodem Configuration Upload Using HyperTerminal335Menus 24.8 to 24.1133735.1 Command Interpreter Mode33735.1.1 Command Syntax33735.1.2 Command Usage33835.2 Call Control Support33835.2.1 Budget Management33835.3 Time and Date Setting33935.4 Remote Management34135.4.1 Remote Management Limitations342IP Routing Policy Setup34336.1 Policy Route34336.2 Benefits34336.3 Routing Policy34336.4 IP Routing Policy Setup34436.5 IP Routing Policy Setup34436.6 IP Routing Policy34636.7 IP Policy Routing Example347Schedule Setup34937.1 Schedule Set Overview34937.2 Schedule Setup34937.3 Schedule Set Setup350Troubleshooting35338.1 Power, Hardware Connections, and LEDs35338.2 ZyXEL Device Access and Login35438.3 Internet Access35638.4 Advanced Features35738.5 Reset the ZyXEL Device to Its Factory Defaults357Appendices and Index359Product Specifications361Wall-mounting Instructions365Setting up Your Computer’s IP Address367Pop-up Windows, JavaScripts and Java Permissions383IP Addresses and Subnetting389IP Address Assignment Conflicts397Common Services401Command Interpreter405Log Descriptions411NetBIOS Filter Commands427Legal Information429Customer Support433Index437Size: 12.1 MBPages: 444Language: EnglishOpen manual
