ZyXEL Communications P-334 マニュアル

目次

• User’s Guide

  1
• Copyright

  2
  • Disclaimer

    2
  • Trademarks

    2
• Federal Communications Commission (FCC) Interference Statement

  3
  • Notice 1

    3
  • Certifications

    3
• ZyXEL Limited Warranty

  4
  • Note

    4
  • Safety Warnings

    4
• Customer Support

  6
• Table of Contents

  9
• List of Figures

  21
• List of Tables

  27
• Preface

  31
  • About This User's Guide

    31
  • Related Documentation

    31
  • User Guide Feedback

    32
  • Syntax Conventions

    32
  • Graphics Icons Key

    32
• Getting to Know Your Prestige

  33
  • 1.1 Prestige Internet Security Gateway Overview

    33
  • 1.2 Prestige Features

    33
    • 1.2.1 Physical Features

      33
      • 1.2.1.1 10/100M Auto-negotiating Ethernet/Fast Ethernet Interface(s)

        33
      • 1.2.1.2 Auto-crossover 10/100 Mbps Ethernet Interface(s)

        33
      • 1.2.1.3 4-Port Switch

        33
      • 1.2.1.4 Time and Date

        33
      • 1.2.1.5 Reset Button

        34
    • 1.2.2 Non-Physical Features

      34
      • 1.2.2.1 Trend Micro Security Services

        34
      • 1.2.2.2 IPSec VPN Capability

        34
      • 1.2.2.3 Firewall

        34
      • 1.2.2.4 Content Filtering

        34
      • 1.2.2.5 Brute-Force Password Guessing Protection

        34
      • 1.2.2.6 Packet Filtering

        34
      • 1.2.2.7 Universal Plug and Play (UPnP)

        35
      • 1.2.2.8 Call Scheduling

        35
      • 1.2.2.9 PPPoE

        35
      • 1.2.2.10 PPTP Encapsulation

        35
      • 1.2.2.11 Dynamic DNS Support

        35
      • 1.2.2.12 IP Multicast

        35
      • 1.2.2.13 IP Alias

        35
      • 1.2.2.14 SNMP

        36
      • 1.2.2.15 Network Address Translation (NAT)

        36
      • 1.2.2.16 Traffic Redirect

        36
      • 1.2.2.17 Port Forwarding

        36
      • 1.2.2.18 DHCP (Dynamic Host Configuration Protocol)

        36
      • 1.2.2.19 Full Network Management

        36
      • 1.2.2.20 RoadRunner Support

        36
      • 1.2.2.21 Logging and Tracing

        36
      • 1.2.2.22 Upgrade Prestige Firmware via LAN

        37
      • 1.2.2.23 Embedded FTP and TFTP Servers

        37
  • 1.3 Applications for the Prestige

    37
    • 1.3.1 Secure Broadband Internet Access via Cable or DSL Modem

      37
    • 1.3.2 VPN Application

      37
• Introducing the Web Configurator

  39
  • 2.1 Web Configurator Overview

    39
  • 2.2 Accessing the Prestige Web Configurator

    39
  • 2.3 Resetting the Prestige

    40
    • 2.3.1 Procedure To Use The Reset Button

      40
    • 2.3.2 Navigating the Prestige Web Configurator

      40
    • 2.3.3 Navigation Panel

      41
• Wizard Setup

  45
  • 3.1 Wizard Setup Overview

    45
  • 3.2 Wizard Setup: General Setup and System Name

    45
    • 3.2.1 Domain Name

      45
  • 3.3 Wizard Setup: Screen 2

    46
    • 3.3.1 Ethernet

      46
    • 3.3.2 PPPoE Encapsulation

      48
    • 3.3.3 PPTP Encapsulation

      49
  • 3.4 Wizard Setup: Screen 3

    51
    • 3.4.1 WAN IP Address Assignment

      51
    • 3.4.2 IP Address and Subnet Mask

      51
    • 3.4.3 DNS Server Address Assignment

      52
    • 3.4.4 WAN MAC Address

      52
  • 3.5 Basic Setup Complete

    54
• System Screens

  57
  • 4.1 System Overview

    57
  • 4.2 Configuring General Setup

    57
  • 4.3 Dynamic DNS

    59
    • 4.3.1 DynDNS Wildcard

      59
  • 4.4 Configuring Dynamic DNS

    59
  • 4.5 Configuring Password

    61
  • 4.6 Configuring Time Setting

    61
• LAN Screens

  65
  • 5.1 LAN Overview

    65
  • 5.2 DHCP Setup

    65
    • 5.2.1 IP Pool Setup

      65
    • 5.2.2 System DNS Servers

      65
  • 5.3 LAN TCP/IP

    65
    • 5.3.1 Factory LAN Defaults

      65
    • 5.3.2 IP Address and Subnet Mask

      66
    • 5.3.3 RIP Setup

      66
    • 5.3.4 Multicast

      66
  • 5.4 Configuring IP

    67
  • 5.5 Configuring Static DHCP

    70
  • 5.6 Configuring IP Alias

    71
• WAN Screens

  73
  • 6.1 WAN Overview

    73
  • 6.2 TCP/IP Priority (Metric)

    73
  • 6.3 Configuring Route

    73
  • 6.4 Configuring WAN ISP

    74
    • 6.4.1 Ethernet Encapsulation

      74
    • 6.4.2 PPPoE Encapsulation

      75
    • 6.4.3 PPTP Encapsulation

      78
  • 6.5 Configuring WAN IP

    79
  • 6.6 Configuring WAN MAC

    82
  • 6.7 Traffic Redirect

    83
  • 6.8 Configuring Traffic Redirect

    84
• Network Address Translation (NAT) Screens

  87
  • 7.1 NAT Overview

    87
    • 7.1.1 NAT Definitions

      87
    • 7.1.2 What NAT Does

      88
    • 7.1.3 How NAT Works

      88
    • 7.1.4 NAT Application

      89
    • 7.1.5 NAT Mapping Types

      90
  • 7.2 Using NAT

    91
    • 7.2.1 SUA (Single User Account) Versus NAT

      91
  • 7.3 SUA Server

    91
    • 7.3.1 Default Server IP Address

      92
    • 7.3.2 Port Forwarding: Services and Port Numbers

      92
    • 7.3.3 Configuring Servers Behind SUA (Example)

      93
  • 7.4 Configuring SUA Server

    94
  • 7.5 Configuring Address Mapping

    96
    • 7.5.1 Configuring Address Mapping

      97
  • 7.6 Trigger Port Forwarding

    99
    • 7.6.1 Trigger Port Forwarding Example

      99
    • 7.6.2 Two Points To Remember About Trigger Ports

      100
  • 7.7 Configuring Trigger Port Forwarding

    100
• Static Route Screens

  103
  • 8.1 Static Route Overview

    103
  • 8.2 Configuring IP Static Route

    103
    • 8.2.1 Configuring Route Entry

      104
• UPnP

  107
  • 9.1 Universal Plug and Play Overview

    107
    • 9.1.1 How Do I Know If I'm Using UPnP?

      107
    • 9.1.2 NAT Traversal

      107
    • 9.1.3 Cautions with UPnP

      107
  • 9.2 UPnP and ZyXEL

    108
  • 9.3 Configuring UPnP

    108
  • 9.4 Installing UPnP in Windows Example

    109
    • 9.4.1 Installing UPnP in Windows Me

      110
    • 9.4.2 Installing UPnP in Windows XP

      111
  • 9.5 Using UPnP in Windows XP Example

    112
    • 9.5.1 Auto-discover Your UPnP-enabled Network Device

      113
    • 9.5.2 Web Configurator Easy Access

      114
    • 9.5.3 Web Configurator Easy Access

      115
• Trend Micro Security Services

  117
  • 10.1 Trend Micro Security Service Overview

    117
  • 10.2 Configuring Service Settings

    117
  • 10.3 Virus Protection

    119
  • 10.4 Configuring Virus Protection

    119
  • 10.5 Parental Controls

    121
  • 10.6 Parental Controls Configuration

    121
    • 10.6.1 Parental Controls Statistics

      125
• Firewall

  127
  • 11.1 Introduction

    127
    • 11.1.1 What is a Firewall?

      127
    • 11.1.2 Stateful Inspection Firewall.

      127
    • 11.1.3 About the Prestige Firewall

      127
    • 11.1.4 Guidelines For Enhancing Security With Your Firewall

      128
  • 11.2 Firewall Settings Screen

    128
  • 11.3 The Firewall, NAT and Remote Management

    130
    • 11.3.1 LAN-to-WAN rules

      130
    • 11.3.2 WAN-to-LAN rules

      130
  • 11.4 Services

    131
• Content Filtering

  135
  • 12.1 Introduction to Content Filtering

    135
  • 12.2 Restrict Web Features

    135
  • 12.3 Days and Times

    135
  • 12.4 Configure Content Filtering

    135
• Remote Management Screens

  139
  • 13.1 Remote Management Overview

    139
    • 13.1.1 Remote Management Limitations

      139
    • 13.1.2 Remote Management and NAT

      140
    • 13.1.3 System Timeout

      140
  • 13.2 Configuring WWW

    140
  • 13.3 Configuring Telnet

    141
  • 13.4 Configuring TELNET

    142
  • 13.5 Configuring FTP

    143
  • 13.6 SNMP

    144
    • 13.6.1 Supported MIBs

      145
    • 13.6.2 SNMP Traps

      145
    • 13.6.3 Configuring SNMP

      145
  • 13.7 Configuring DNS

    147
  • 13.8 Configuring Security

    148
• Introduction to IPSec

  151
  • 14.1 VPN Overview

    151
    • 14.1.1 IPSec

      151
    • 14.1.2 Security Association

      151
    • 14.1.3 Other Terminology

      151
      • 14.1.3.1 Encryption

        151
      • 14.1.3.2 Data Confidentiality

        152
      • 14.1.3.3 Data Integrity

        152
      • 14.1.3.4 Data Origin Authentication

        152
    • 14.1.4 VPN Applications

      152
  • 14.2 IPSec Architecture

    152
    • 14.2.1 IPSec Algorithms

      153
    • 14.2.2 Key Management

      153
  • 14.3 Encapsulation

    153
    • 14.3.1 Transport Mode

      154
    • 14.3.2 Tunnel Mode

      154
  • 14.4 IPSec and NAT

    154
• VPN Screens

  157
  • 15.1 VPN/IPSec Overview

    157
  • 15.2 IPSec Algorithms

    157
    • 15.2.1 AH (Authentication Header) Protocol

      157
    • 15.2.2 ESP (Encapsulating Security Payload) Protocol

      157
  • 15.3 My IP Address

    158
  • 15.4 Secure Gateway Address

    158
    • 15.4.1 Dynamic Secure Gateway Address

      159
  • 15.5 Summary Screen

    159
  • 15.6 Keep Alive

    161
  • 15.7 NAT Traversal

    161
    • 15.7.1 NAT Traversal Configuration

      161
    • 15.7.2 Remote DNS Server

      162
  • 15.8 ID Type and Content

    163
    • 15.8.1 ID Type and Content Examples

      164
  • 15.9 Pre-Shared Key

    164
  • 15.10 Editing VPN Rules

    165
  • 15.11 IKE Phases

    168
    • 15.11.1 Negotiation Mode

      169
    • 15.11.2 Diffie-Hellman (DH) Key Groups

      169
    • 15.11.3 Perfect Forward Secrecy (PFS)

      169
  • 15.12 Configuring Advanced IKE Settings

    170
  • 15.13 Manual Key Setup

    175
    • 15.13.1 Security Parameter Index (SPI)

      176
  • 15.14 Configuring Manual Key

    176
  • 15.15 Viewing SA Monitor

    179
  • 15.16 Configuring Global Setting

    180
  • 15.17 Telecommuter VPN/IPSec Examples

    181
    • 15.17.1 Telecommuters Sharing One VPN Rule Example

      181
    • 15.17.2 Telecommuters Using Unique VPN Rules Example

      182
  • 15.18 VPN and Remote Management

    183
• Centralized Logs

  185
  • 16.1 View Log

    185
  • 16.2 Log Settings

    187
• Maintenance

  191
  • 17.1 Maintenance Overview

    191
  • 17.2 Status Screen

    191
    • 17.2.1 System Statistics

      193
  • 17.3 DHCP Table Screen

    193
  • 17.4 F/W Upload Screen

    194
    • 17.4.1 Preparing your Prestige for Firmware Upload

      195
  • 17.5 Configuration Screen

    197
    • 17.5.1 Backup Configuration

      197
    • 17.5.2 Restore Configuration

      198
    • 17.5.3 Back to Factory Defaults

      199
  • 17.6 Restart Screen

    199
• Introducing the SMT

  201
  • 18.1 SMT Introduction

    201
    • 18.1.1 Procedure for SMT Configuration via Telnet

      201
    • 18.1.2 Entering Password

      201
    • 18.1.3 Prestige SMT Menu Overview

      202
  • 18.2 Navigating the SMT Interface

    202
    • 18.2.1 System Management Terminal Interface Summary

      204
  • 18.3 Changing the System Password

    205
• Menu 1 General Setup

  207
  • 19.1 General Setup

    207
  • 19.2 Procedure To Configure Menu 1

    207
    • 19.2.1 Procedure to Configure Dynamic DNS

      209
• Menu 2 WAN Setup

  211
  • 20.1 Introduction to WAN

    211
  • 20.2 WAN Setup

    211
• Menu 3 LAN Setup

  213
  • 21.1 LAN Setup

    213
    • 21.1.1 General Ethernet Setup

      213
  • 21.2 Protocol Dependent Ethernet Setup

    214
  • 21.3 TCP/IP Ethernet Setup and DHCP

    214
    • 21.3.1 IP Alias Setup

      216
• Internet Access

  219
  • 22.1 Introduction to Internet Access Setup

    219
  • 22.2 Ethernet Encapsulation

    219
  • 22.3 Configuring the PPTP Client

    221
  • 22.4 Configuring the PPPoE Client

    222
  • 22.5 Basic Setup Complete

    223
• Remote Node Configuration

  225
  • 23.1 Introduction to Remote Node Setup

    225
  • 23.2 Remote Node Profile Setup

    225
    • 23.2.1 Ethernet Encapsulation

      225
    • 23.2.2 PPPoE Encapsulation

      227
      • 23.2.2.1 Outgoing Authentication Protocol

        227
      • 23.2.2.2 Nailed-Up Connection

        228
    • 23.2.3 PPTP Encapsulation

      228
  • 23.3 Edit IP

    229
  • 23.4 Remote Node Filter

    231
    • 23.4.1 Traffic Redirect Setup

      232
• Static Route Setup

  235
  • 24.1 IP Static Route Setup

    235
• Network Address Translation (NAT)

  237
  • 25.1 Using NAT

    237
    • 25.1.1 SUA (Single User Account) Versus NAT

      237
  • 25.2 Applying NAT

    237
  • 25.3 NAT Setup

    239
    • 25.3.1 Address Mapping Sets

      240
      • 25.3.1.1 User-Defined Address Mapping Sets

        241
      • 25.3.1.2 Ordering Your Rules

        242
  • 25.4 Configuring a Server behind NAT

    244
  • 25.5 General NAT Examples

    245
    • 25.5.1 Example 1: Internet Access Only

      246
    • 25.5.2 Example 2: Internet Access with an Inside Server

      246
    • 25.5.3 Example 3: Multiple Public IP Addresses With Inside Servers

      247
    • 25.5.4 Example 4: NAT Unfriendly Application Programs

      251
  • 25.6 Configuring Trigger Port Forwarding

    253
• Enabling the Firewall

  255
  • 26.1 Remote Management and the Firewall

    255
  • 26.2 Access Methods

    255
  • 26.3 Enabling the Firewall

    255
• Filter Configuration

  257
  • 27.1 Introduction to Filters

    257
    • 27.1.1 The Filter Structure of the Prestige

      258
  • 27.2 Configuring a Filter Set

    259
    • 27.2.1 Configuring a Filter Rule

      261
    • 27.2.2 Configuring a TCP/IP Filter Rule

      261
    • 27.2.3 Configuring a Generic Filter Rule

      264
  • 27.3 Example Filter

    266
  • 27.4 Filter Types and NAT

    268
  • 27.5 Firewall Versus Filters

    269
  • 27.6 Applying a Filter

    269
    • 27.6.1 Applying LAN Filters

      269
    • 27.6.2 Applying Remote Node Filters

      270
• SNMP Configuration

  271
  • 28.1 About SNMP

    271
  • 28.2 Supported MIBs

    272
  • 28.3 SNMP Configuration

    272
  • 28.4 SNMP Traps

    273
• System Information and Diagnosis

  275
  • 29.1 System Status

    275
  • 29.2 System Information

    277
    • 29.2.1 System Information

      277
    • 29.2.2 Console Port Speed

      278
  • 29.3 Log and Trace

    279
    • 29.3.1 Syslog Logging

      279
      • 29.3.1.1 CDR

        280
      • 29.3.1.2 Packet triggered

        280
      • 29.3.1.3 Filter log

        281
      • 29.3.1.4 PPP log

        281
      • 29.3.1.5 Firewall log

        282
    • 29.3.2 Call-Triggering Packet

      282
  • 29.4 Diagnostic

    283
    • 29.4.1 WAN DHCP

      284
• Firmware and Configuration File Maintenance

  287
  • 30.1 Filename Conventions

    287
  • 30.2 Backup Configuration

    288
    • 30.2.1 Backup Configuration

      288
    • 30.2.2 Using the FTP Command from the Command Line

      289
    • 30.2.3 Example of FTP Commands from the Command Line

      290
    • 30.2.4 GUI-based FTP Clients

      290
    • 30.2.5 TFTP and FTP over WAN Management Limitations

      290
    • 30.2.6 Backup Configuration Using TFTP

      291
    • 30.2.7 TFTP Command Example

      291
    • 30.2.8 GUI-based TFTP Clients

      292
  • 30.3 Restore Configuration

    292
    • 30.3.1 Restore Using FTP

      292
    • 30.3.2 Restore Using FTP Session Example

      294
  • 30.4 Uploading Firmware and Configuration Files

    294
    • 30.4.1 Firmware File Upload

      294
    • 30.4.2 Configuration File Upload

      295
    • 30.4.3 FTP File Upload Command from the DOS Prompt Example

      295
    • 30.4.4 FTP Session Example of Firmware File Upload

      296
    • 30.4.5 TFTP File Upload

      296
    • 30.4.6 TFTP Upload Command Example

      297
• System Maintenance

  299
  • 31.1 Command Interpreter Mode

    299
    • 31.1.1 Command Syntax

      299
    • 31.1.2 Command Usage

      300
  • 31.2 Call Control Support

    300
    • 31.2.1 Budget Management

      300
    • 31.2.2 Call History

      301
  • 31.3 Time and Date Setting

    302
    • 31.3.1 Resetting the Time

      305
• Remote Management

  307
  • 32.1 Remote Management

    307
    • 32.1.1 Remote Management Limitations

      308
• Call Scheduling

  311
  • 33.1 Introduction to Call Scheduling

    311
• VPN/IPSec Setup

  315
  • 34.1 VPN/IPSec Overview

    315
  • 34.2 IPSec Summary Screen

    316
  • 34.3 IKE Setup

    322
  • 34.4 Manual Setup

    324
    • 34.4.0.1 Active Protocol

      325
    • 34.4.0.2 Security Parameter Index (SPI)

      325
• SA Monitor

  327
  • 35.1 SA Monitor Overview

    327
  • 35.2 Using SA Monitor

    327
  • Appendix

    330
    • Appendix A

      329
      • Troubleshooting

        329
    • Appendix B

      331
      • PPPoE

        331
        • PPPoE in Action

          331
        • Benefits of PPPoE

          331
        • Traditional Dial-up Scenario

          331
        • How PPPoE Works

          332
        • Prestige as a PPPoE Client

          332
    • Appendix C

      333
      • PPTP

        333
        • What is PPTP?

          333
          • How can we transport PPP frames from a computer to a broadband modem over Ethernet?

            333
        • PPTP and the Prestige

          333
        • PPTP Protocol Overview

          334
        • Control & PPP Connections

          334
          • Call Connection

            334
          • PPP Data Connection

            335
    • Appendix D

      337
      • NetBIOS Filter Commands

        337
        • Introduction

          337
        • Display NetBIOS Filter Settings

          337
        • NetBIOS Filter Configuration

          338
    • Appendix E

      339
      • Log Descriptions

        339
    • Appendix F

      341
      • Setting up Your Computer’s IP Address

        341
        • Windows 95/98/Me

          341
          • Installing Components

            342
          • Configuring

            343
          • Verifying Settings

            344
        • Windows 2000/NT/XP

          344
          • Verifying Settings

            348
        • Macintosh OS 8/9

          349
          • Verifying Settings

            350
        • Macintosh OS X

          350
          • Verifying Settings

            351
    • Appendix G

      353
      • Brute-Force Password Guessing Protection

        353
        • Example

          353
    • Appendix H

      355
      • TMSS

        355
    • Appendix I

      359
      • Triangle Route

        359
        • The Ideal Setup

          359
        • The “Triangle Route” Problem

          359
        • The “Triangle Route” Solutions

          360
        • IP Aliasing

          360
        • Gateways on the WAN Side

          361
        • How To Configure Triangle Route

          361
  • Index

    363
    • A

      363
    • B

      363
    • C

      363
    • D

      363
    • E

      363
    • F

      363
    • G

      364
    • H

      364
    • I

      364
    • J

      364
    • L

      364
    • M

      364
    • N

      364
    • O

      365
    • P

      365
    • R

      365
    • S

      365
    • T

      365
    • U

      366
    • V

      366
    • W

      366
    • Z

      366