Инструкции для ZyXEL Communications NBG410W3G Series

Содержание

• User’s Guide

  1
  • About This User's Guide

    3
  • Document Conventions

    4
  • Safety Warnings

    6
  • Contents Overview

    9
  • Table of Contents

    11
  • List of Figures

    21
  • List of Tables

    29
• Introduction

  33
  • Getting to Know Your ZyXEL Device

    35
    • 1.1 Overview

      35
    • 1.2 Applications for the ZyXEL Device

      35
    • 1.2.1 3G WAN Application

      35
    • 1.2.2 Secure Broadband Internet Access via Cable or DSL Modem

      36
    • 1.3 Ways to Manage the ZyXEL Device

      36
    • 1.4 Configuring Your ZyXEL Device’s Security Features

      37
    • 1.4.1 Control Access to Your Device

      37
    • 1.4.2 Wireless Security

      37
    • 1.4.3 Firewall

      37
    • 1.4.4 NAT

      38
    • 1.4.5 UPnP

      38
    • 1.5 Maintaining Your ZyXEL Device

      38
    • 1.5.1 Front Panel Lights

      39
  • Introducing the Web Configurator

    43
    • 2.1 Web Configurator Overview

      43
    • 2.2 Accessing the ZyXEL Device Web Configurator

      43
    • 2.3 Resetting the ZyXEL Device

      45
    • 2.3.1 Procedure To Use The Reset Button

      45
    • 2.3.2 Uploading a Configuration File Via Console Port

      45
    • 2.4 Navigating the ZyXEL Device Web Configurator

      46
    • 2.4.1 Title Bar

      46
    • 2.4.2 Main Window

      47
      • 2.4.3 HOME Screen

        47
    • 2.4.4 Navigation Panel

      52
      • 2.4.5 Port Statistics

        54
      • 2.4.6 Show Statistics: Line Chart

        55
      • 2.4.7 DHCP Table Screen

        56
  • Wizard Setup

    59
    • 3.1 Wizard Setup Overview

      59
    • 3.2 Internet Access

      59
    • 3.2.1 ISP Parameters

      59
      • 3.2.2 Internet Access Wizard Setup Complete

        64
  • Tutorials

    65
    • 4.1 DMZ Overview

      65
    • 4.2 DMZ Setup Example

      66
    • 4.2.1 Basic Setup

      66
    • 4.2.2 Advanced Setup

      68
    • 4.3 Firewall Rule Setup

      69
    • 4.4 Setting Up a VoIP Phone with H.323

      72
    • 4.5 Using NAT with Multiple Public IP Addresses

      77
    • 4.5.1 Example Parameters and Scenario

      77
    • 4.5.2 Configuring the WAN Connection with a Static IP Address

      78
    • 4.5.3 Public IP Address Mapping

      82
    • 4.5.4 Forwarding Traffic from the WAN to a Local Computer

      87
    • 4.5.5 Allow WAN-to-LAN Traffic through the Firewall

      89
    • 4.5.6 Testing the Connections

      96
    • 4.6 Using NAT with Multiple Game Players

      96
• Network

  99
  • LAN Screens

    101
    • 5.1 LAN, WAN and the ZyXEL Device

      101
    • 5.2 IP Address and Subnet Mask

      101
    • 5.2.1 Private IP Addresses

      102
    • 5.3 DHCP

      102
    • 5.3.1 IP Pool Setup

      103
    • 5.4 RIP Setup

      103
    • 5.5 Multicast

      103
    • 5.6 WINS

      104
    • 5.7 LAN

      104
    • 5.8 LAN Static DHCP

      106
    • 5.9 LAN IP Alias

      107
    • 5.10 LAN Port Roles

      109
  • WAN Screens

    111
    • 6.1 WAN Overview

      111
    • 6.2 Multiple WAN

      111
    • 6.3 TCP/IP Priority (Metric)

      112
    • 6.4 WAN General

      112
    • 6.5 WAN IP Address Assignment

      115
    • 6.6 DNS Server Address Assignment

      116
    • 6.7 WAN MAC Address

      116
    • 6.8 WAN 1

      117
    • 6.8.1 WAN Ethernet Encapsulation

      117
    • 6.8.2 PPPoE Encapsulation

      120
    • 6.8.3 PPTP Encapsulation

      123
    • 6.9 3G (WAN 2)

      126
    • 6.10 Traffic Redirect

      133
    • 6.11 Configuring Traffic Redirect

      134
  • DMZ Screens

    135
    • 7.1 DMZ

      135
    • 7.2 Configuring DMZ

      135
    • 7.3 DMZ Static DHCP

      138
    • 7.4 DMZ IP Alias

      139
    • 7.5 DMZ Public IP Address Example

      141
    • 7.6 DMZ Private and Public IP Address Example

      141
    • 7.7 DMZ Port Roles

      142
• Wireless

  145
  • Wi-Fi

    147
    • 8.1 Wi-Fi Introduction

      147
    • 8.2 Wireless Security Overview

      148
    • 8.2.1 SSID

      148
    • 8.2.2 MAC Address Filter

      148
    • 8.2.3 User Authentication

      149
    • 8.2.4 Encryption

      149
    • 8.2.5 Additional Installation Requirements for Using 802.1x

      151
    • 8.3 Wireless Card

      151
      • 8.3.1 SSID Profile

        153
    • 8.4 Configuring Wireless Security

      154
    • 8.4.1 No Security

      156
    • 8.4.2 Static WEP

      156
    • 8.4.3 IEEE 802.1x Only

      157
    • 8.4.4 IEEE 802.1x + Static WEP

      158
    • 8.4.5 WPA, WPA2, WPA2-MIX

      160
    • 8.4.6 WPA-PSK, WPA2-PSK, WPA2-PSK-MIX

      161
    • 8.5 MAC Filter

      162
• Security

  165
  • Firewall

    167
    • 9.1 Firewall Overview

      167
    • 9.2 Packet Direction Matrix

      168
    • 9.3 Packet Direction Examples

      169
    • 9.4 Security Considerations

      170
    • 9.5 Firewall Rules Example

      171
    • 9.6 Asymmetrical Routes

      173
    • 9.6.1 Asymmetrical Routes and IP Alias

      173
    • 9.7 Firewall Default Rule

      173
    • 9.8 Firewall Rule Summary

      175
      • 9.8.1 Firewall Edit Rule

        177
    • 9.9 Anti-Probing

      180
    • 9.10 Firewall Thresholds

      181
    • 9.10.1 Threshold Values

      182
    • 9.11 Threshold Screen

      182
    • 9.12 Service

      184
      • 9.12.1 Firewall Edit Custom Service

        185
    • 9.13 My Service Firewall Rule Example

      186
  • Authentication Server

    191
    • 10.1 Authentication Server Overview

      191
    • 10.2 Local User Database

      191
    • 10.3 RADIUS

      193
  • Certificates

    195
    • 11.1 Certificates Overview

      195
    • 11.1.1 Advantages of Certificates

      196
    • 11.2 Self-signed Certificates

      196
    • 11.3 Verifying a Certificate

      196
    • 11.3.1 Checking the Fingerprint of a Certificate on Your Computer

      196
    • 11.4 Configuration Summary

      197
    • 11.5 My Certificates

      198
    • 11.6 My Certificate Details

      200
    • 11.7 My Certificate Export

      202
    • 11.7.1 Certificate File Export Formats

      202
    • 11.8 My Certificate Import

      203
    • 11.8.1 Certificate File Formats

      203
    • 11.9 My Certificate Create

      205
    • 11.10 Trusted CAs

      209
    • 11.11 Trusted CA Details

      211
    • 11.12 Trusted CA Import

      214
    • 11.13 Trusted Remote Hosts

      215
    • 11.14 Trusted Remote Hosts Import

      217
    • 11.15 Trusted Remote Host Certificate Details

      218
    • 11.16 Directory Servers

      220
    • 11.17 Directory Server Add or Edit

      221
• Advanced

  223
  • Network Address Translation (NAT)

    225
    • 12.1 NAT Overview

      225
    • 12.1.1 NAT Definitions

      225
    • 12.1.2 What NAT Does

      226
    • 12.1.3 How NAT Works

      226
    • 12.1.4 NAT Application

      227
    • 12.1.5 Port Restricted Cone NAT

      228
    • 12.1.6 NAT Mapping Types

      229
    • 12.2 Using NAT

      230
    • 12.2.1 SUA (Single User Account) Versus NAT

      230
    • 12.3 NAT Overview Screen

      230
    • 12.4 NAT Address Mapping

      232
    • 12.4.1 What NAT Does

      232
      • 12.4.2 NAT Address Mapping Edit

        234
    • 12.5 Port Forwarding

      235
    • 12.5.1 Default Server IP Address

      235
    • 12.5.2 Port Forwarding: Services and Port Numbers

      236
    • 12.5.3 Configuring Servers Behind Port Forwarding (Example)

      236
    • 12.5.4 NAT and Multiple WAN

      237
    • 12.5.5 Port Translation

      237
    • 12.6 Port Forwarding Screen

      238
    • 12.7 Port Triggering

      240
  • Static Route

    243
    • 13.1 IP Static Route

      243
    • 13.2 IP Static Route

      244
      • 13.2.1 IP Static Route Edit

        245
  • DNS

    247
    • 14.1 DNS Overview

      247
    • 14.2 DNS Server Address Assignment

      247
    • 14.3 DNS Servers

      247
    • 14.4 Address Record

      248
    • 14.4.1 DNS Wildcard

      248
    • 14.5 Name Server Record

      248
    • 14.5.1 Private DNS Server

      248
    • 14.6 System Screen

      248
      • 14.6.1 Adding an Address Record

        250
      • 14.6.2 Inserting a Name Server Record

        251
    • 14.7 DNS Cache

      252
    • 14.8 Configure DNS Cache

      252
    • 14.9 Configuring DNS DHCP

      254
    • 14.10 Dynamic DNS

      255
    • 14.10.1 DYNDNS Wildcard

      255
    • 14.10.2 High Availability

      256
    • 14.11 Configuring Dynamic DNS

      256
  • Remote Management

    259
    • 15.1 Remote Management Overview

      259
    • 15.1.1 Remote Management Limitations

      260
    • 15.1.2 System Timeout

      260
    • 15.2 WWW (HTTP and HTTPS)

      260
    • 15.3 WWW

      261
    • 15.4 HTTPS Example

      263
    • 15.4.1 Internet Explorer Warning Messages

      263
    • 15.4.2 Netscape Navigator Warning Messages

      263
    • 15.4.3 Avoiding the Browser Warning Messages

      264
    • 15.4.4 Login Screen

      265
    • 15.5 SSH

      267
    • 15.6 How SSH Works

      267
    • 15.7 SSH Implementation on the ZyXEL Device

      268
    • 15.7.1 Requirements for Using SSH

      268
    • 15.8 Configuring SSH

      269
    • 15.9 Secure Telnet Using SSH Examples

      270
    • 15.9.1 Example 1: Microsoft Windows

      270
    • 15.9.2 Example 2: Linux

      270
    • 15.10 Secure FTP Using SSH Example

      271
    • 15.11 Telnet

      272
    • 15.12 Configuring TELNET

      272
    • 15.13 FTP

      273
    • 15.14 SNMP

      274
    • 15.14.1 Supported MIBs

      275
    • 15.14.2 SNMP Traps

      276
    • 15.14.3 REMOTE MANAGEMENT: SNMP

      276
    • 15.15 DNS

      277
    • 15.16 Introducing Vantage CNM

      278
    • 15.17 Configuring CNM

      278
    • 15.17.1 Additional Configuration for Vantage CNM

      280
  • UPnP

    281
    • 16.1 Universal Plug and Play Overview

      281
    • 16.1.1 How Do I Know If I'm Using UPnP?

      281
    • 16.1.2 NAT Traversal

      281
    • 16.1.3 Cautions with UPnP

      281
    • 16.1.4 UPnP and ZyXEL

      282
    • 16.2 Configuring UPnP

      282
    • 16.3 Displaying UPnP Port Mapping

      283
    • 16.4 Installing UPnP in Windows Example

      284
    • 16.4.1 Installing UPnP in Windows Me

      285
    • 16.4.2 Installing UPnP in Windows XP

      286
    • 16.5 Using UPnP in Windows XP Example

      286
    • 16.5.1 Auto-discover Your UPnP-enabled Network Device

      287
    • 16.5.2 Web Configurator Easy Access

      288
  • Custom Application

    291
    • 17.1 Custom Application

      291
    • 17.2 Custom Application Configuration

      291
  • ALG Screen

    293
    • 18.1 ALG Introduction

      293
    • 18.1.1 ALG and NAT

      293
    • 18.1.2 ALG and the Firewall

      293
    • 18.1.3 ALG and Multiple WAN

      294
    • 18.2 FTP

      294
    • 18.3 H.323

      294
    • 18.4 RTP

      294
    • 18.4.1 H.323 ALG Details

      294
    • 18.5 SIP

      295
    • 18.5.1 STUN

      295
    • 18.5.2 SIP ALG Details

      296
    • 18.5.3 SIP Signaling Session Timeout

      296
    • 18.5.4 SIP Audio Session Timeout

      296
    • 18.6 ALG Screen

      296
• Logs and Maintenance

  299
  • Logs Screens

    301
    • 19.1 Configuring View Log

      301
    • 19.2 Log Description Example

      302
    • 19.2.1 About the Certificate Not Trusted Log

      303
    • 19.3 Configuring Log Settings

      304
    • 19.4 Configuring Reports

      307
    • 19.4.1 Viewing Web Site Hits

      309
    • 19.4.2 Viewing Host IP Address

      309
    • 19.4.3 Viewing Protocol/Port

      310
    • 19.4.4 System Reports Specifications

      312
    • 19.5 Log Descriptions

      312
    • 19.6 Syslog Logs

      323
  • Maintenance

    325
    • 20.1 Maintenance Overview

      325
    • 20.2 General Setup and System Name

      325
      • 20.2.1 General Setup

        325
    • 20.3 Configuring Password

      326
    • 20.4 Time and Date

      327
    • 20.5 Pre-defined NTP Time Server Pools

      330
    • 20.5.1 Resetting the Time

      330
    • 20.5.2 Time Server Synchronization

      330
    • 20.6 F/W Upload Screen

      331
    • 20.7 Backup and Restore

      333
    • 20.7.1 Backup Configuration

      334
    • 20.7.2 Restore Configuration

      334
    • 20.7.3 Back to Factory Defaults

      335
    • 20.8 Restart Screen

      336
• Troubleshooting and Specifications

  337
  • Troubleshooting

    339
    • 21.1 Power, Hardware Connections, and LEDs

      339
    • 21.2 ZyXEL Device Access and Login

      340
    • 21.3 Internet Access

      342
    • 21.4 3G Connection

      343
  • Product Specifications

    345
    • 22.1 General ZyXEL Device Specifications

      345
    • 22.2 Wall-mounting Instructions

      347
    • 22.3 Power Adaptor Specifications

      349
• Appendices and Index

  351
  • Pop-up Windows, JavaScripts and Java Permissions

    353
  • Setting up Your Computer’s IP Address

    361
  • IP Addresses and Subnetting

    377
  • Common Services

    385
  • Wireless LANs

    389
  • Importing Certificates

    403
  • Legal Information

    415
  • Customer Support

    419
  • Index

    425