ZyXEL Communications P-660HW-T1 マニュアル

目次

• P-660H/HW/W T Series User's Guide

  1
• Copyright

  2
• Federal Communications Commission (FCC) Interference Statement

  3
• Safety Warnings

  5
• ZyXEL Limited Warranty

  6
• Customer Support

  7
• Table of Contents

  10
• List of Figures

  24
• List of Tables

  32
• Preface

  38
• Introduction to DSL

  40
• Getting To Know Your Prestige

  42
  • 1.1 Introducing the Prestige

    42
  • 1.2 Features

    42
    • 1.2.1 Wireless Features (P-660HW/P-660W)

      45
  • 1.3 Applications for the Prestige

    46
    • 1.3.1 Protected Internet Access

      46
    • 1.3.2 LAN to LAN Application

      46
  • 1.4 Front Panel LEDs

    46
  • 1.5 Hardware Connection

    47
• Introducing the Web Configurator

  48
  • 2.1 Web Configurator Overview

    48
    • 2.1.1 Accessing the Web Configurator

      48
    • 2.1.2 Resetting the Prestige

      49
      • 2.1.2.1 Using the Reset Button

        49
    • 2.1.3 Navigating the Web Configurator

      50
• Wizard Setup for Internet Access

  54
  • 3.1 Introduction

    54
    • 3.1.1 Internet Access Wizard Setup

      54
• LAN Setup

  62
  • 4.1.1 LANs, WANs and the Prestige

    62
  • 4.1.2 DHCP Setup

    63
    • 4.1.2.1 IP Pool Setup

      63
  • 4.1.3 DNS Server Address

    63
  • 4.1.4 DNS Server Address Assignment

    63
  • 4.2 LAN TCP/IP

    64
    • 4.2.1 IP Address and Subnet Mask

      64
      • 4.2.1.1 Private IP Addresses

        65
    • 4.2.2 RIP Setup

      65
    • 4.2.3 Multicast

      66
    • 4.2.4 Any IP

      66
      • 4.2.4.1 How Any IP Works

        67
• Wireless LAN

  70
  • 5.2 Wireless Security Overview

    70
    • 5.2.1 Encryption

      70
    • 5.2.2 Authentication

      70
    • 5.2.3 Restricted Access

      71
    • 5.2.4 Hide Prestige Identity

      71
    • 5.4.1 WEP Encryption

      73
    • 5.6.1 WPA-PSK Application Example

      77
    • 5.6.2 WPA with RADIUS Application Example

      78
    • 5.6.3 Wireless Client WPA Supplicants

      79
    • 5.7.1 No Access Allowed or Authentication

      80
    • 5.7.2 Authentication Required: 802.1x

      80
    • 5.7.3 Authentication Required: WPA

      82
    • 5.7.4 Authentication Required: WPA-PSK

      84
• WAN Setup

  90
  • 6.1.1 Encapsulation

    90
    • 6.1.1.1 ENET ENCAP

      90
    • 6.1.1.2 PPP over Ethernet

      90
    • 6.1.1.3 PPPoA

      90
    • 6.1.1.4 RFC 1483

      91
  • 6.1.2 Multiplexing

    91
    • 6.1.2.1 VC-based Multiplexing

      91
    • 6.1.2.2 LLC-based Multiplexing

      91
  • 6.1.3 VPI and VCI

    91
  • 6.1.4 IP Address Assignment

    91
    • 6.1.4.1 IP Assignment with PPPoA or PPPoE Encapsulation

      91
    • 6.1.4.2 IP Assignment with RFC 1483 Encapsulation

      92
    • 6.1.4.3 IP Assignment with ENET ENCAP Encapsulation

      92
  • 6.1.5 Nailed-Up Connection (PPP)

    92
  • 6.1.6 NAT

    92
  • 6.2 Metric

    92
  • 6.3 PPPoE Encapsulation

    93
  • 6.4 Traffic Shaping

    93
  • 6.5 Zero Configuration Internet Access

    94
• Network Address Translation (NAT) Screens

  102
  • 7.1.1 NAT Definitions

    102
  • 7.1.2 What NAT Does

    103
  • 7.1.3 How NAT Works

    103
  • 7.1.4 NAT Application

    104
  • 7.1.5 NAT Mapping Types

    105
  • 7.2 SUA (Single User Account) Versus NAT

    106
  • 7.3 SUA Server

    106
    • 7.3.1 Default Server IP Address

      106
    • 7.3.2 Port Forwarding: Services and Port Numbers

      106
    • 7.3.3 Configuring Servers Behind SUA (Example)

      107
• Dynamic DNS Setup

  114
  • 8.1.1 DYNDNS Wildcard

    114
• Time and Date

  116
• Firewalls

  118
  • 10.2 Types of Firewalls

    118
    • 10.2.1 Packet Filtering Firewalls

      118
    • 10.2.2 Application-level Firewalls

      119
    • 10.2.3 Stateful Inspection Firewalls

      119
  • 10.3 Introduction to ZyXEL’s Firewall

    119
    • 10.3.1 Denial of Service Attacks

      120
  • 10.4 Denial of Service

    120
    • 10.4.1 Basics

      120
    • 10.4.2 Types of DoS Attacks

      121
      • 10.4.2.1 ICMP Vulnerability

        123
      • 10.4.2.2 Illegal Commands (NetBIOS and SMTP)

        123
      • 10.4.2.3 Traceroute

        124
  • 10.5 Stateful Inspection

    124
    • 10.5.1 Stateful Inspection Process

      125
    • 10.5.2 Stateful Inspection and the Prestige

      126
    • 10.5.3 TCP Security

      126
    • 10.5.4 UDP/ICMP Security

      127
    • 10.5.5 Upper Layer Protocols

      127
  • 10.6 Guidelines for Enhancing Security with Your Firewall

    127
    • 10.6.1 Security In General

      128
  • 10.7 Packet Filtering Vs Firewall

    129
    • 10.7.1 Packet Filtering:

      129
      • 10.7.1.1 When To Use Filtering

        129
    • 10.7.2 Firewall

      129
      • 10.7.2.1 When To Use The Firewall

        129
• Firewall Configuration

  132
  • 11.1 Access Methods

    132
  • 11.2 Firewall Policies Overview

    132
  • 11.3 Rule Logic Overview

    133
    • 11.3.1 Rule Checklist

      133
    • 11.3.2 Security Ramifications

      133
    • 11.3.3 Key Fields For Configuring Rules

      134
      • 11.3.3.1 Action

        134
      • 11.3.3.2 Service

        134
      • 11.3.3.3 Source Address

        134
      • 11.3.3.4 Destination Address

        134
  • 11.4 Connection Direction

    134
    • 11.4.1 LAN to WAN Rules

      134
    • 11.4.2 Alerts

      135
  • 11.9 Example Firewall Rule

    142
  • 11.10 Predefined Services

    146
    • 11.12.1 Threshold Values

      150
    • 11.12.2 Half-Open Sessions

      150
      • 11.12.2.1 TCP Maximum Incomplete and Blocking Time

        150
    • 11.12.3 Configuring Firewall Thresholds

      151
• Content Filtering

  154
  • 12.2 The Main Content Filter Screen

    154
• Remote Management Configuration

  158
  • 13.1.1 Remote Management Limitations

    158
  • 13.1.2 Remote Management and NAT

    159
  • 13.1.3 System Timeout

    159
  • 13.2 Telnet

    159
  • 13.3 FTP

    160
  • 13.4 Web

    160
  • 13.5 Configuring Remote Management

    160
• Universal Plug-and-Play (UPnP)

  162
  • 14.1.1 How do I know if I'm using UPnP?

    162
  • 14.1.2 NAT Traversal

    162
  • 14.1.3 Cautions with UPnP

    163
  • 14.2 UPnP and ZyXEL

    163
  • 14.3 Installing UPnP in Windows Example

    164
  • 14.4 Using UPnP in Windows XP Example

    168
• Logs Screens

  176
  • 15.1.1 Alerts and Logs

    176
  • 15.2 Configuring Log Settings

    176
  • 15.4 SMTP Error Messages

    179
    • 15.4.1 Example E-mail Log

      180
• Media Bandwidth Management Advanced Setup

  182
  • 16.2 Bandwidth Classes and Filters

    182
  • 16.3 Proportional Bandwidth Allocation

    183
  • 16.4 Bandwidth Management Usage Examples

    183
    • 16.4.1 Application-based Bandwidth Management Example

      183
    • 16.4.2 Subnet-based Bandwidth Management Example

      183
    • 16.4.3 Application and Subnet-based Bandwidth Management Example

      184
  • 16.5 Scheduler

    185
    • 16.5.1 Priority-based Scheduler

      185
    • 16.5.2 Fairness-based Scheduler

      185
  • 16.6 Maximize Bandwidth Usage

    185
    • 16.6.1 Reserving Bandwidth for Non-Bandwidth Class Traffic

      185
    • 16.6.2 Maximize Bandwidth Usage Example

      186
  • 16.7 Bandwidth Borrowing

    187
    • 16.7.1 Maximize Bandwidth Usage With Bandwidth Borrowing

      187
• Maintenance

  196
  • 17.1 Maintenance Overview

    196
    • 17.2.1 System Statistics

      198
• Introducing the SMT

  208
  • 18.1 SMT Introduction

    208
    • 18.1.1 Procedure for SMT Configuration via Telnet

      208
    • 18.1.2 Entering Password

      208
    • 18.1.3 Prestige SMT Menus Overview

      209
  • 18.2 Navigating the SMT Interface

    210
    • 18.2.1 System Management Terminal Interface Summary

      211
  • 18.3 Changing the System Password

    212
• Menu 1 General Setup

  214
  • 19.1 General Setup

    214
  • 19.2 Procedure To Configure Menu 1

    214
    • 19.2.1 Procedure to Configure Dynamic DNS

      215
• Menu 2 WAN Backup Setup

  218
  • 20.1 Introduction to WAN Backup Setup

    218
  • 20.2 Configuring Dial Backup in Menu 2

    218
    • 20.2.1 Traffic Redirect Setup

      219
• Menu 3 LAN Setup

  222
  • 21.1 LAN Setup

    222
    • 21.1.1 General Ethernet Setup

      222
  • 21.2 Protocol Dependent Ethernet Setup

    223
  • 21.3 TCP/IP Ethernet Setup and DHCP

    223
• Wireless LAN Setup

  226
  • 22.1 Wireless LAN Overview

    226
  • 22.2 Wireless LAN Setup

    226
    • 22.2.1 Wireless LAN MAC Address Filter

      227
• Internet Access

  230
  • 23.1 Internet Access Overview

    230
  • 23.2 IP Policies

    230
  • 23.3 IP Alias

    230
  • 23.4 IP Alias Setup

    231
  • 23.5 Route IP Setup

    232
  • 23.6 Internet Access Configuration

    233
• Remote Node Configuration

  236
  • 24.1 Remote Node Setup Overview

    236
  • 24.2 Remote Node Setup

    236
    • 24.2.1 Remote Node Profile

      236
    • 24.2.2 Encapsulation and Multiplexing Scenarios

      237
      • 24.2.2.1 Scenario 1: One VC, Multiple Protocols

        237
      • 24.2.2.2 Scenario 2: One VC, One Protocol (IP)

        237
      • 24.2.2.3 Scenario 3: Multiple VCs

        237
    • 24.2.3 Outgoing Authentication Protocol

      239
  • 24.3 Remote Node Network Layer Options

    240
    • 24.3.1 My WAN Addr Sample IP Addresses

      241
  • 24.4 Remote Node Filter

    242
  • 24.5 Editing ATM Layer Options

    243
    • 24.5.1 VC-based Multiplexing (non-PPP Encapsulation)

      243
    • 24.5.2 LLC-based Multiplexing or PPP Encapsulation

      243
    • 24.5.3 Advance Setup Options

      244
• Static Route Setup

  246
  • 25.1 IP Static Route Overview

    246
  • 25.2 Configuration

    246
• Bridging Setup

  250
  • 26.1 Bridging in General

    250
  • 26.2 Bridge Ethernet Setup

    250
    • 26.2.1 Remote Node Bridging Setup

      250
    • 26.2.2 Bridge Static Route Setup

      252
• Network Address Translation (NAT)

  254
  • 27.1 Using NAT

    254
    • 27.1.1 SUA (Single User Account) Versus NAT

      254
  • 27.2 Applying NAT

    254
  • 27.3 NAT Setup

    256
    • 27.3.1 Address Mapping Sets

      256
      • 27.3.1.1 SUA Address Mapping Set

        257
      • 27.3.1.2 User-Defined Address Mapping Sets

        258
      • 27.3.1.3 Ordering Your Rules

        259
  • 27.4 Configuring a Server behind NAT

    260
  • 27.5 General NAT Examples

    261
    • 27.5.1 Example 1: Internet Access Only

      262
    • 27.5.2 Example 2: Internet Access with an Inside Server

      262
    • 27.5.3 Example 3: Multiple Public IP Addresses With Inside Servers

      263
    • 27.5.4 Example 4: NAT Unfriendly Application Programs

      267
• Enabling the Firewall

  270
  • 28.1 Remote Management and the Firewall

    270
  • 28.2 Access Methods

    270
  • 28.3 Enabling the Firewall

    270
• Filter Configuration

  272
  • 29.1 About Filtering

    272
    • 29.1.1 The Filter Structure of the Prestige

      273
  • 29.2 Configuring a Filter Set for the Prestige

    274
  • 29.3 Filter Rules Summary Menus

    275
  • 29.4 Configuring a Filter Rule

    276
    • 29.4.1 TCP/IP Filter Rule

      277
    • 29.4.2 Generic Filter Rule

      279
  • 29.5 Filter Types and NAT

    281
  • 29.6 Example Filter

    281
  • 29.7 Applying Filters and Factory Defaults

    283
    • 29.7.1 Ethernet Traffic

      284
    • 29.7.2 Remote Node Filters

      284
• SNMP Configuration

  286
  • 30.1 About SNMP

    286
  • 30.2 Supported MIBs

    287
  • 30.3 SNMP Configuration

    287
  • 30.4 SNMP Traps

    288
• System Security

  290
  • 31.1 System Security

    290
    • 31.1.1 System Password

      290
    • 31.1.2 Configuring External RADIUS Server

      290
    • 31.1.3 IEEE 802.1x

      292
  • 31.2 Creating User Accounts on the Prestige

    294
• System Information and Diagnosis

  296
  • 32.1 Overview

    296
  • 32.2 System Status

    296
  • 32.3 System Information

    298
    • 32.3.1 System Information

      298
    • 32.3.2 Console Port Speed

      299
  • 32.4 Log and Trace

    300
    • 32.4.1 Viewing Error Log

      300
    • 32.4.2 Syslog and Accounting

      301
  • 32.5 Diagnostic

    303
• Firmware and Configuration File Maintenance

  306
  • 33.1 Filename Conventions

    306
  • 33.2 Backup Configuration

    307
    • 33.2.1 Backup Configuration

      307
    • 33.2.2 Using the FTP Command from the Command Line

      308
    • 33.2.3 Example of FTP Commands from the Command Line

      308
    • 33.2.4 GUI-based FTP Clients

      309
    • 33.2.5 TFTP and FTP over WAN Management Limitations

      309
    • 33.2.6 Backup Configuration Using TFTP

      310
    • 33.2.7 TFTP Command Example

      310
    • 33.2.8 GUI-based TFTP Clients

      310
  • 33.3 Restore Configuration

    311
    • 33.3.1 Restore Using FTP

      311
    • 33.3.2 Restore Using FTP Session Example

      312
  • 33.4 Uploading Firmware and Configuration Files

    313
    • 33.4.1 Firmware File Upload

      313
    • 33.4.2 Configuration File Upload

      313
    • 33.4.3 FTP File Upload Command from the DOS Prompt Example

      314
    • 33.4.4 FTP Session Example of Firmware File Upload

      315
    • 33.4.5 TFTP File Upload

      315
    • 33.4.6 TFTP Upload Command Example

      316
• System Maintenance

  318
  • 34.1 Command Interpreter Mode

    318
  • 34.2 Call Control Support

    319
    • 34.2.1 Budget Management

      319
  • 34.3 Time and Date Setting

    320
    • 34.3.1 Resetting the Time

      322
• Remote Management

  324
  • 35.1 Remote Management Overview

    324
  • 35.2 Remote Management

    324
    • 35.2.1 Remote Management Setup

      324
    • 35.2.2 Remote Management Limitations

      325
  • 35.3 Remote Management and NAT

    326
  • 35.4 System Timeout

    326
• IP Policy Routing

  328
  • 36.1 IP Policy Routing Overview

    328
  • 36.2 Benefits of IP Policy Routing

    328
  • 36.3 Routing Policy

    328
  • 36.4 IP Routing Policy Setup

    329
  • 36.5 Applying an IP Policy

    332
    • 36.5.1 Ethernet IP Policies

      332
  • 36.6 IP Policy Routing Example

    333
• Call Scheduling

  338
  • 37.1 Introduction

    338
• Troubleshooting

  342
  • 38.1 Problems Starting Up the Prestige

    342
  • 38.2 Problems with the LAN

    342
  • 38.3 Problems with the WAN

    343
  • 38.4 Problems Accessing the Prestige

    344
    • 38.4.1 Pop-up Windows, JavaScripts and Java Permissions

      344
      • 38.4.1.1 Internet Explorer Pop-up Blockers

        344
      • 38.4.1.2 JavaScripts

        347
      • 38.4.1.3 Java Permissions

        349
    • 38.4.2 ActiveX Controls in Internet Explorer

      351
• Product Specifications

  354
• Wall-mounting Instructions

  358
• Setting up Your Computer’s IP Address

  360
  • Verifying Settings

    375
• IP Subnetting

  376
• Boot Commands

  384
• Command Interpreter

  386
• Firewall Commands

  388
• NetBIOS Filter Commands

  394
• Splitters and Microfilters

  398
• PPPoE

  402
• Log Descriptions

  404
• Wireless LANs

  420
• Internal SPTGEN

  430
• Index

  456
  • Numerics

    456
  • A

    456
  • B

    456
  • C

    456
  • D

    457
  • E

    458
  • F

    458
  • G

    459
  • H

    459
  • I

    459
  • K

    459
  • L

    460
  • M

    460
  • N

    460
  • O

    461
  • P

    461
  • Q

    461
  • R

    461
  • S

    462
  • T

    463
  • U

    464
  • V

    464
  • W

    464
  • X

    465
  • Z

    465