Manuali utente per ZyXEL Communications P-661HW

Sommario

• User’s Guide

  1
• Copyright

  3
• Certifications

  4
• Safety Warnings

  6
• ZyXEL Limited Warranty

  7
• Customer Support

  8
• Table of Contents

  11
• List of Figures

  23
• List of Tables

  29
• Preface

  33
• Getting To Know Your ZyXEL Device

  35
  • 1.1 Introducing the ZyXEL Device

    35
  • 1.2 Features

    36
    • 1.2.1 Wireless Features (Wireless Devices Only)

      38
  • 1.3 Applications for the ZyXEL Device

    39
    • 1.3.1 Protected Internet Access

      39
    • 1.3.2 LAN to LAN Application

      40
  • 1.4 Front Panel LEDs

    40
  • 1.5 Hardware Connection

    41
  • 1.6 Splitters and Microfilters

    41
    • 1.6.1 Connecting a POTS Splitter

      42
    • 1.6.2 Telephone Microfilters

      42
• Introducing the Web Configurator

  45
  • 2.1 Web Configurator Overview

    45
  • 2.2 Accessing the Web Configurator

    45
  • 2.3 Resetting the ZyXEL Device

    47
    • 2.3.1 Using the Reset Button

      47
  • 2.4 Navigating the Web Configurator

    47
    • 2.4.1 Navigation Panel

      47
    • 2.4.2 Status Screen

      51
    • 2.4.3 Status: Any IP Table

      53
    • 2.4.4 Status: WLAN Status (Wireless devices only)

      54
    • 2.4.5 Status: VPN Status

      54
    • 2.4.6 Status: Bandwidth Status

      55
    • 2.4.7 Status: Packet Statistics

      56
    • 2.4.8 Changing Login Password

      57
• Wizards

  59
  • 3.1 Internet Setup Wizard

    60
    • 3.1.1 Automatic Detection

      60
    • 3.1.2 Manual Configuration

      61
      • 3.1.2.1 Screen 1

        61
      • 3.1.2.2 Screen 2

        61
      • 3.1.2.3 Screen 3

        62
    • 3.1.3 No DSL Detection

      65
  • 3.2 Wireless Connection Wizard Setup (wireless devices only)

    66
    • 3.2.1 Manually assign a WPA-PSK key

      69
    • 3.2.2 Manually assign a WEP key

      69
  • 3.3 Bandwidth Management Wizard

    72
    • 3.3.1 Screen 1

      73
    • 3.3.2 Screen 2

      74
    • 3.3.3 Screen 3

      75
• WAN Setup

  77
  • 4.1 WAN Overview

    77
    • 4.1.1 Encapsulation

      77
      • 4.1.1.1 ENET ENCAP

        77
      • 4.1.1.2 PPP over Ethernet

        77
      • 4.1.1.3 PPPoA

        78
      • 4.1.1.4 RFC 1483

        78
    • 4.1.2 Multiplexing

      78
      • 4.1.2.1 VC-based Multiplexing

        78
      • 4.1.2.2 LLC-based Multiplexing

        78
    • 4.1.3 VPI and VCI

      78
    • 4.1.4 IP Address Assignment

      79
      • 4.1.4.1 IP Assignment with PPPoA or PPPoE Encapsulation

        79
      • 4.1.4.2 IP Assignment with RFC 1483 Encapsulation

        79
      • 4.1.4.3 IP Assignment with ENET ENCAP Encapsulation

        79
    • 4.1.5 Nailed-Up Connection (PPP)

      79
    • 4.1.6 NAT

      79
  • 4.2 Metric

    80
  • 4.3 Traffic Shaping

    80
    • 4.3.1 ATM Traffic Classes

      81
      • 4.3.1.1 Constant Bit Rate (CBR)

        81
      • 4.3.1.2 Variable Bit Rate (VBR)

        81
      • 4.3.1.3 Unspecified Bit Rate (UBR)

        82
  • 4.4 Zero Configuration Internet Access

    82
  • 4.5 Internet Connection

    82
    • 4.5.1 Configuring Advanced Internet Connection

      84
  • 4.6 Configuring More Connections

    86
    • 4.6.1 More Connections Edit

      87
    • 4.6.2 Configuring More Connections Advanced Setup

      90
  • 4.7 Traffic Redirect

    91
  • 4.8 Configuring WAN Backup

    92
• LAN Setup

  95
  • 5.1 LAN Overview

    95
    • 5.1.1 LANs, WANs and the ZyXEL Device

      95
    • 5.1.2 DHCP Setup

      96
      • 5.1.2.1 IP Pool Setup

        96
    • 5.1.3 DNS Server Address

      96
    • 5.1.4 DNS Server Address Assignment

      97
  • 5.2 LAN TCP/IP

    97
    • 5.2.1 IP Address and Subnet Mask

      97
      • 5.2.1.1 Private IP Addresses

        98
    • 5.2.2 RIP Setup

      98
    • 5.2.3 Multicast

      99
    • 5.2.4 Any IP

      99
      • 5.2.4.1 How Any IP Works

        100
  • 5.3 Configuring LAN IP

    101
    • 5.3.1 Configuring Advanced LAN Setup

      101
  • 5.4 DHCP Setup

    103
  • 5.5 LAN Client List

    104
  • 5.6 LAN IP Alias

    106
• Wireless LAN

  109
  • 6.1 Wireless Network Overview

    109
  • 6.2 Wireless Security Overview

    110
    • 6.2.1 SSID

      110
    • 6.2.2 MAC Address Filter

      110
    • 6.2.3 User Authentication

      110
    • 6.2.4 Encryption

      111
    • 6.2.5 One-Touch Intelligent Security Technology (OTIST)

      112
  • 6.3 Wireless Performance Overview

    112
    • 6.3.1 Quality of Service (QoS)

      112
  • 6.4 General Wireless LAN Screen

    112
    • 6.4.1 No Security

      114
    • 6.4.2 WEP Encryption

      114
    • 6.4.3 WPA-PSK/WPA2-PSK

      115
    • 6.4.4 WPA/WPA2

      117
    • 6.4.5 Wireless LAN Advanced Setup

      119
  • 6.5 OTIST

    120
    • 6.5.1 Enabling OTIST

      120
      • 6.5.1.1 AP

        121
      • 6.5.1.2 Wireless Client

        122
    • 6.5.2 Starting OTIST

      123
    • 6.5.3 Notes on OTIST

      123
  • 6.6 MAC Filter

    124
  • 6.7 WMM QoS

    126
    • 6.7.1 WMM QoS Example

      126
    • 6.7.2 WMM QoS Priorities

      126
    • 6.7.3 Services

      127
  • 6.8 QoS Screen

    128
    • 6.8.1 ToS (Type of Service) and WMM QoS

      129
    • 6.8.2 Application Priority Configuration

      130
• Network Address Translation (NAT) Screens

  133
  • 7.1 NAT Overview

    133
    • 7.1.1 NAT Definitions

      133
    • 7.1.2 What NAT Does

      134
    • 7.1.3 How NAT Works

      134
    • 7.1.4 NAT Application

      135
    • 7.1.5 NAT Mapping Types

      135
  • 7.2 SUA (Single User Account) Versus NAT

    136
  • 7.3 NAT General Setup

    136
  • 7.4 Port Forwarding

    137
    • 7.4.1 Default Server IP Address

      138
    • 7.4.2 Port Forwarding: Services and Port Numbers

      138
    • 7.4.3 Configuring Servers Behind Port Forwarding (Example)

      138
  • 7.5 Configuring Port Forwarding

    139
    • 7.5.1 Port Forwarding Rule Edit

      140
  • 7.6 Address Mapping

    141
    • 7.6.1 Address Mapping Rule Edit

      143
• Firewalls

  145
  • 8.1 Firewall Overview

    145
  • 8.2 Types of Firewalls

    145
    • 8.2.1 Packet Filtering Firewalls

      145
    • 8.2.2 Application-level Firewalls

      146
    • 8.2.3 Stateful Inspection Firewalls

      146
  • 8.3 Introduction to ZyXEL’s Firewall

    146
    • 8.3.1 Denial of Service Attacks

      147
  • 8.4 Denial of Service

    147
    • 8.4.1 Basics

      147
    • 8.4.2 Types of DoS Attacks

      148
      • 8.4.2.1 ICMP Vulnerability

        150
      • 8.4.2.2 Illegal Commands (NetBIOS and SMTP)

        150
      • 8.4.2.3 Traceroute

        151
  • 8.5 Stateful Inspection

    151
    • 8.5.1 Stateful Inspection Process

      152
    • 8.5.2 Stateful Inspection and the ZyXEL Device

      152
    • 8.5.3 TCP Security

      153
    • 8.5.4 UDP/ICMP Security

      153
    • 8.5.5 Upper Layer Protocols

      154
  • 8.6 Guidelines for Enhancing Security with Your Firewall

    154
    • 8.6.1 Security In General

      154
  • 8.7 Packet Filtering Vs Firewall

    155
    • 8.7.1 Packet Filtering:

      155
      • 8.7.1.1 When To Use Filtering

        156
    • 8.7.2 Firewall

      156
      • 8.7.2.1 When To Use The Firewall

        156
• Firewall Configuration

  157
  • 9.1 Access Methods

    157
  • 9.2 Firewall Policies Overview

    157
  • 9.3 Rule Logic Overview

    158
    • 9.3.1 Rule Checklist

      158
    • 9.3.2 Security Ramifications

      158
    • 9.3.3 Key Fields For Configuring Rules

      159
      • 9.3.3.1 Action

        159
      • 9.3.3.2 Service

        159
      • 9.3.3.3 Source Address

        159
      • 9.3.3.4 Destination Address

        159
  • 9.4 Connection Direction

    159
    • 9.4.1 LAN to WAN Rules

      160
    • 9.4.2 Alerts

      160
  • 9.5 Triangle Route

    160
    • 9.5.1 The “Triangle Route” Problem

      160
    • 9.5.2 Solving the “Triangle Route” Problem

      161
  • 9.6 General Firewall Policy

    162
  • 9.7 Firewall Rules Summary

    163
    • 9.7.1 Configuring Firewall Rules

      164
    • 9.7.2 Customized Services

      167
    • 9.7.3 Configuring A Customized Service

      168
  • 9.8 Example Firewall Rule

    168
  • 9.9 Predefined Services

    172
  • 9.10 Anti-Probing

    174
  • 9.11 DoS Thresholds

    175
    • 9.11.1 Threshold Values

      175
    • 9.11.2 Half-Open Sessions

      176
      • 9.11.2.1 TCP Maximum Incomplete and Blocking Time

        176
    • 9.11.3 Configuring Firewall Thresholds

      177
• Trend Micro Security Services

  179
  • 10.1 Trend Micro Security Services Overview

    179
    • 10.1.1 TMSS Web Page

      179
  • 10.2 Configuring TMSS on the ZyXEL Device

    182
    • 10.2.1 General TMSS Settings

      182
    • 10.2.2 TMSS Exception List

      184
  • 10.3 TMSS Virus Protection

    185
  • 10.4 Parental Controls

    186
    • 10.4.1 Parental Controls Statistics

      188
  • 10.5 ActiveX Controls in Internet Explorer

    189
• Content Filtering

  193
  • 11.1 Content Filtering Overview

    193
  • 11.2 Configuring Keyword Blocking

    193
  • 11.3 Configuring the Schedule

    194
  • 11.4 Configuring Trusted Computers

    195
• Introduction to IPSec

  197
  • 12.1 VPN Overview

    197
    • 12.1.1 IPSec

      197
    • 12.1.2 Security Association

      197
    • 12.1.3 Other Terminology

      197
      • 12.1.3.1 Encryption

        197
      • 12.1.3.2 Data Confidentiality

        198
      • 12.1.3.3 Data Integrity

        198
      • 12.1.3.4 Data Origin Authentication

        198
    • 12.1.4 VPN Applications

      198
  • 12.2 IPSec Architecture

    199
    • 12.2.1 IPSec Algorithms

      199
    • 12.2.2 Key Management

      199
  • 12.3 Encapsulation

    199
    • 12.3.1 Transport Mode

      200
    • 12.3.2 Tunnel Mode

      200
  • 12.4 IPSec and NAT

    200
• VPN Screens

  203
  • 13.1 VPN/IPSec Overview

    203
  • 13.2 IPSec Algorithms

    203
    • 13.2.1 AH (Authentication Header) Protocol

      203
    • 13.2.2 ESP (Encapsulating Security Payload) Protocol

      203
  • 13.3 My IP Address

    204
  • 13.4 Secure Gateway Address

    205
    • 13.4.1 Dynamic Secure Gateway Address

      205
  • 13.5 VPN Setup Screen

    205
  • 13.6 Keep Alive

    207
  • 13.7 VPN, NAT, and NAT Traversal

    207
  • 13.8 Remote DNS Server

    208
  • 13.9 ID Type and Content

    209
    • 13.9.1 ID Type and Content Examples

      210
  • 13.10 Pre-Shared Key

    211
  • 13.11 Editing VPN Policies

    211
  • 13.12 IKE Phases

    216
    • 13.12.1 Negotiation Mode

      217
    • 13.12.2 Diffie-Hellman (DH) Key Groups

      218
    • 13.12.3 Perfect Forward Secrecy (PFS)

      218
  • 13.13 Configuring Advanced IKE Settings

    218
  • 13.14 Manual Key Setup

    221
    • 13.14.1 Security Parameter Index (SPI)

      221
  • 13.15 Configuring Manual Key

    221
  • 13.16 Viewing SA Monitor

    224
  • 13.17 Configuring Global Setting

    225
  • 13.18 Telecommuter VPN/IPSec Examples

    226
    • 13.18.1 Telecommuters Sharing One VPN Rule Example

      226
    • 13.18.2 Telecommuters Using Unique VPN Rules Example

      227
  • 13.19 VPN and Remote Management

    229
• Static Route

  231
  • 14.1 Static Route

    231
  • 14.2 Configuring Static Route

    231
    • 14.2.1 Static Route Edit

      232
• Bandwidth Management

  235
  • 15.1 Bandwidth Management Overview

    235
  • 15.2 Application-based Bandwidth Management

    235
  • 15.3 Subnet-based Bandwidth Management

    235
  • 15.4 Application and Subnet-based Bandwidth Management

    236
  • 15.5 Scheduler

    236
    • 15.5.1 Priority-based Scheduler

      236
    • 15.5.2 Fairness-based Scheduler

      237
  • 15.6 Maximize Bandwidth Usage

    237
    • 15.6.1 Reserving Bandwidth for Non-Bandwidth Class Traffic

      237
    • 15.6.2 Maximize Bandwidth Usage Example

      238
      • 15.6.2.1 Priority-based Allotment of Unused and Unbudgeted Bandwidth

        238
      • 15.6.2.2 Fairness-based Allotment of Unused and Unbudgeted Bandwidth

        239
    • 15.6.3 Over Allotment of Bandwidth

      239
    • 15.6.4 Bandwidth Management Priorities

      240
  • 15.7 Configuring Summary

    240
  • 15.8 Bandwidth Management Rule Setup

    241
    • 15.8.1 Rule Configuration

      243
  • 15.9 Bandwidth Monitor

    245
• Dynamic DNS Setup

  247
  • 16.1 Dynamic DNS Overview

    247
    • 16.1.1 DYNDNS Wildcard

      247
  • 16.2 Configuring Dynamic DNS

    247
• Remote Management Configuration

  251
  • 17.1 Remote Management Overview

    251
    • 17.1.1 Remote Management Limitations

      251
    • 17.1.2 Remote Management and NAT

      252
    • 17.1.3 System Timeout

      252
  • 17.2 WWW

    252
  • 17.3 Telnet

    253
  • 17.4 Configuring Telnet

    253
  • 17.5 Configuring FTP

    254
  • 17.6 SNMP

    255
    • 17.6.1 Supported MIBs

      256
    • 17.6.2 SNMP Traps

      257
    • 17.6.3 Configuring SNMP

      257
  • 17.7 Configuring DNS

    259
  • 17.8 Configuring ICMP

    259
  • 17.9 TR-069 (P-661H Only)

    261
• Universal Plug-and-Play (UPnP)

  263
  • 18.1 Introducing Universal Plug and Play

    263
    • 18.1.1 How do I know if I'm using UPnP?

      263
    • 18.1.2 NAT Traversal

      263
    • 18.1.3 Cautions with UPnP

      264
  • 18.2 UPnP and ZyXEL

    264
    • 18.2.1 Configuring UPnP

      264
  • 18.3 Installing UPnP in Windows Example

    265
  • 18.4 Using UPnP in Windows XP Example

    268
• System

  275
  • 19.1 General Setup

    275
    • 19.1.1 General Setup and System Name

      275
    • 19.1.2 General Setup

      275
  • 19.2 Time Setting

    277
• Logs

  281
  • 20.1 Logs Overview

    281
    • 20.1.1 Alerts and Logs

      281
  • 20.2 Viewing the Logs

    281
  • 20.3 Configuring Log Settings

    282
• Tools

  285
  • 21.1 Firmware Upgrade

    285
  • 21.2 Configuration

    287
  • 21.3 Restart

    289
• Diagnostic

  291
  • 22.1 General Diagnostic

    291
  • 22.2 DSL Line Diagnostic

    292
• Troubleshooting

  293
  • 23.1 Problems Starting Up the ZyXEL Device

    293
  • 23.2 Problems with the LAN

    293
  • 23.3 Problems with the WAN

    294
  • 23.4 Problems Accessing the ZyXEL Device

    295
• Product Specifications

  297
• About ADSL

  301
  • Introduction to DSL

    301
  • ADSL Overview

    301
  • Advantages of ADSL

    301
• Wall-mounting Instructions

  303
• Setting up Your Computer’s IP Address

  305
  • Windows 95/98/Me

    305
  • Windows 2000/NT/XP

    308
  • Macintosh OS X

    313
  • Linux

    315
• IP Subnetting

  319
  • IP Addressing

    319
  • IP Classes

    319
  • Subnet Masks

    320
  • Subnetting

    320
  • Example: Two Subnets

    321
  • Example: Four Subnets

    323
  • Example Eight Subnets

    324
  • Subnetting With Class A and Class B Networks.

    325
• Command Interpreter

  327
  • Command Syntax

    327
  • Command Usage

    327
• Firewall Commands

  329
• NetBIOS Filter Commands

  335
  • Introduction

    335
  • Display NetBIOS Filter Settings

    335
  • NetBIOS Filter Configuration

    336
• PPPoE

  337
  • PPPoE in Action

    337
  • Benefits of PPPoE

    337
  • Traditional Dial-up Scenario

    337
  • How PPPoE Works

    338
  • ZyXEL Device as a PPPoE Client

    338
• Log Descriptions

  339
  • Log Commands

    353
  • Log Command Example

    354
• Wireless LANs (wireless devices only)

  355
  • Wireless LAN Topologies

    355
  • Channel

    357
  • RTS/CTS

    357
  • Fragmentation Threshold

    358
  • Preamble Type

    359
  • IEEE 802.11g Wireless LAN

    359
  • Wireless Security Overview

    360
  • IEEE 802.1x

    360
  • RADIUS

    361
  • Types of Authentication

    362
  • Dynamic WEP Key Exchange

    363
  • WPA and WPA2

    364
  • Security Parameters Summary

    367
• Pop-up Windows, JavaScripts and Java Permissions

  369
  • Internet Explorer Pop-up Blockers

    369
  • Java Permissions

    374
• Index

  377
  • Numerics

    377
  • A

    377
  • B

    377
  • C

    377
  • D

    378
  • E

    378
  • F

    378
  • G

    379
  • H

    379
  • I

    379
  • K

    380
  • L

    380
  • M

    380
  • N

    380
  • O

    380
  • P

    380
  • Q

    381
  • R

    381
  • S

    381
  • T

    382
  • U

    382
  • V

    383
  • W

    383
  • Z

    383