ZyXEL Communications Network Device P-2602 - Figure 105 Firewall: Edit Rule

To Next Page

To Previous Page

P-2602H(W)(L)-DxA Series User’s Guide

200 Chapter 14 Firewall Configuration

Figure 105 Firewall: Edit Rule

Main Page

Default Chapter3
- Copyright3
- Certifications4
- Federal Communications Commission (FCC) Interference Statement4
- Safety Warnings5
- Zyxel Limited Warranty6
- Customer Support7
- Table of Contents9
- List of Figures23
- List of Tables29
- Preface35
Chapter 1 Getting to Know the Zyxel Device37
- Getting to Know the Zyxel Device37
Chapter 2 Introducing the Web Configurator49
- Web Configurator Overview49
- Web Configurator Main Screen52
Chapter 3 Internet and Wireless Setup Wizard57
- Internet and Wireless Setup Wizard57
Chapter 4 Voip Wizard and Example71
- Introduction71
- Voip Wizard Setup71
- Figure 30 Voip Phone Calls71
- Figure 31 Select a Mode72
- Figure 32 Wizard: Welcome72
- Figure 33 Voip Wizard Configuration73
- Table 16 Sample SIP Account Information73
- Table 17 Voip Wizard Configuration73
- Figure 34 SIP Registration Test74
- Figure 35 Voip Wizard Fail75
- Figure 36 Voip Wizard Finish75
Chapter 5 Bandwidth Management Wizard77
- Introduction77
- Predefined Media Bandwidth Management Services77
- Table 18 Media Bandwidth Management Setup: Services77
- Bandwidth Management Wizard Setup78
- Figure 37 Select a Mode79
- Figure 38 Wizard: Welcome79
- Figure 39 Bandwidth Management Wizard: General Information80
- Figure 40 Bandwidth Management Wizard: Service Configuration80
- Table 19 Bandwidth Management Wizard: General Information80
- Figure 41 Bandwidth Management Wizard: Complete81
- Table 20 Bandwidth Management Wizard: Service Configuration81
Chapter 6 Status Screens83
- Status Screen83
- Figure 42 Status Screen83
- Table 21 Status Screen84
- Any IP Table86
- Figure 43 any IP Table86
- WLAN Status ("W" Models Only)87
- Packet Statistics87
- Figure 44 WLAN Status87
- Table 22 any IP Table87
- Table 23 WLAN Status87
- Figure 45 Packet Statistics88
- Table 24 Packet Statistics88
- Voip Statistics89
- Figure 46 Voip Statistics89
- Table 25 Voip Statistics90
Chapter 7 WAN Setup93
- WAN Overview93
- Metric96
- Traffic Shaping96
  - ATM Traffic Classes97
- Zero Configuration Internet Access98
- Internet Access Setup98
- WAN more Connections102
- Traffic Redirect103
- Figure 50 WAN more Connections103
- Table 28 Advanced Internet Access Setup103
- Figure 51 Traffic Redirect Example104
- Figure 52 Traffic Redirect LAN Setup104
- WAN Backup Setup105
- Table 29 WAN Backup Setup105
Chapter 8 LAN Setup107
- LAN Overview107
- Lan Tcp/Ip109
- Configuring LAN IP113
- DHCP Setup115
- Figure 57 DHCP Setup115
- Table 32 DHCP Setup115
- LAN Client List116
- Figure 58 LAN Client List116
- LAN IP Alias117
- Table 33 LAN Client List117
- Figure 59 Physical Network & Partitioned Logical Networks118
- Figure 60 LAN IP Alias118
- Table 34 LAN IP Alias118
Chapter 9 Wireless LAN121
- Wireless Network Overview121
- Figure 61 Example of a Wireless Network121
- Wireless Security Overview122
- Wireless Performance Overview124
  - Quality of Service (Qos)124
- Additional Wireless Terms125
- General WLAN Screen125
- OTIST Screen133
- MAC Filter136
- Figure 74 MAC Address Filter136
- Table 43 MAC Address Filter136
- Qos Screen137
Chapter 10 Network Address Translation (NAT) Screens141
- NAT Overview141
- SUA (Single User Account) Versus NAT144
- NAT General Setup144
- Table 47 NAT Mapping Types144
- Port Forwarding145
- Configuring Port Forwarding147
Chapter 11 Voice151
- Introduction to Voip151
- Sip151
  - SIP Identities151
    - SIP Number151
    - SIP Service Domain152
  - SIP Call Progression152
  - SIP Servers152
- SIP Settings Screen154
  - Figure 86 SIP Redirect Server154
  - Figure 87 SIP > SIP Settings155
  - Table 53 SIP > SIP Settings155
  - Rtp156
- Pulse Code Modulation156
- Voice Coding156
  - 156156
- PSTN Call Setup Signaling157
- MWI (Message Waiting Indication)157
- Custom Tones (IVR)157
  - Recording Custom Tones157
  - Table 54 Custom Tones Details157
  - Listening to Custom Tones158
  - Deleting Custom Tones158
- Advanced SIP Setup Screen158
- Figure 88 Voip > SIP Settings > Advanced159
- Table 55 Voip > SIP Settings > Advanced160
- Quality of Service (Qos)162
  - Type of Service (Tos)162
  - Diffserv162
    - DSCP and Per-Hop Behavior162
    - Figure 89 Diffserv: Differentiated Service Field162
  - Vlan163
  - SIP Qos Screen163
  - Figure 90 SIP > Qos163
  - Table 56 SIP > Qos163
- Phone164
- PSTN Line ("L" Models Only)164
  - Voice Activity Detection/Silence Suppression164
  - Comfort Noise Generation164
  - Echo Cancellation164
- Analog Phone Screen165
- Figure 91 Phone > Analog Phone165
- Table 57 Phone > Analog Phone165
- Advanced Analog Phone Setup Screen166
  - Figure 92 Phone > Analog Phone > Advanced166
  - Table 58 Phone > Analog Phone > Advanced166
  - Common Phone Settings Screen167
  - Figure 93 Phone > Common167
  - Table 59 Phone > Common167
- Supplementary Phone Services Overview168
  - The Flash Key168
  - Europe Type Supplementary Phone Services168
  - USA Type Supplementary Services170
- Phone Region Screen171
- Speed Dial172
  - Peer-To-Peer Calls172
  - Figure 94 Voip > Phone > Region172
  - Table 62 Voip > Phone > Region172
- Speed Dial Screen173
- Figure 95 Phone Book > Speed Dial173
- Table 63 Phone Book > Speed Dial173
- Incoming Call Policy Screen174
- Figure 96 Phone Book > Incoming Call Policy175
- Table 64 Phone Book > Incoming Call Policy175
- PSTN Line Screen ("L" Models Only)176
- Figure 97 PSTN Line > General177
- Table 65 PSTN Line > General177
Chapter 12 Phone Usage179
- Dialing a Telephone Number179
- Using Speed Dial to Dial a Telephone Number179
- Internal Calls179
- Checking the Device's IP Address179
- Auto Firmware Upgrade180
Chapter 13 Firewalls181
- Firewall Overview181
- Types of Firewalls181
- Introduction to Zyxel's Firewall182
  - Denial of Service Attacks183
- Denial of Service183
- Stateful Inspection187
- Guidelines for Enhancing Security with Your Firewall190
  - Security in General190
- Packet Filtering Vs Firewall191
  - Packet Filtering191
    - When to Use Filtering192
  - Firewall192
    - When to Use the Firewall192
Chapter 14 Firewall Configuration193
- Firewall Configuration193
Chapter 15 Content Filtering211
- Content Filtering Overview211
- Configuring Keyword Blocking211
- Figure 114 Content Filter: Keyword211
- Configuring the Schedule212
- Figure 115 Content Filter: Schedule212
- Table 76 Content Filter: Keyword212
- Configuring Trusted Computers213
- Figure 116 Content Filter: Trusted213
- Table 77 Content Filter: Schedule213
- Table 78 Content Filter: Trusted213
Chapter 16 Introduction to Ipsec215
- VPN Overview215
- Ipsec Architecture216
- Encapsulation217
- Ipsec and NAT218
- Figure 119 Transport and Tunnel Mode Ipsec Encapsulation218
- Table 79 VPN and NAT219
Chapter 17 VPN Screens221
- Vpn/Ipsec Overview221
- Ipsec Algorithms221
  - AH (Authentication Header) Protocol221
  - ESP (Encapsulating Security Payload) Protocol221
- My IP Address222
- Table 80 AH and ESP222
- Secure Gateway Address223
  - Dynamic Secure Gateway Address223
- VPN Setup Screen223
- Figure 120 Ipsec Summary Fields223
- Figure 121 VPN Setup224
- Table 81 VPN Setup224
- Keep Alive225
- VPN, NAT, and NAT Traversal226
- Figure 122 NAT Router between Ipsec Routers226
- Table 82 VPN and NAT226
- Remote DNS Server227
- ID Type and Content227
  - Figure 123 VPN Host Using Intranet DNS Server Example227
  - Table 83 Local ID Type and Content Fields228
  - Table 84 Peer ID Type and Content Fields228
  - ID Type and Content Examples229
- Pre-Shared Key229
- Editing VPN Policies229
- Table 85 Matching ID Type and Content Configuration Example229
- Table 86 Mismatching ID Type and Content Configuration Example229
- Figure 124 Edit VPN Policies230
- Table 87 Edit VPN Policies230
- IKE Phases234
  - Figure 125 Two Phases to Set up the Ipsec SA234
  - Negotiation Mode235
  - Diffie-Hellman (DH) Key Groups236
  - Perfect Forward Secrecy (PFS)236
- Configuring Advanced IKE Settings236
- Figure 126 Advanced VPN Policies237
- Table 88 Advanced VPN Policies237
- Manual Key Setup239
  - Security Parameter Index (SPI)239
- Configuring Manual Key239
- Figure 127 VPN: Manual Key240
- Table 89 VPN: Manual Key240
- Viewing SA Monitor242
- Figure 128 VPN: SA Monitor243
- Table 90 VPN: SA Monitor243
- Configuring Global Setting244
- Telecommuter Vpn/Ipsec Examples244
  - Telecommuters Sharing One VPN Rule Example244
  - Figure 129 VPN: Global Setting244
  - Table 91 VPN: Global Setting244
  - Telecommuters Using Unique VPN Rules Example245
  - Figure 130 Telecommuters Sharing One VPN Rule Example245
  - Table 92 Telecommuters Sharing One VPN Rule Example245
  - Figure 131 Telecommuters Using Unique VPN Rules Example246
  - Table 93 Telecommuters Using Unique VPN Rules Example246
- VPN and Remote Management247
Chapter 18 Static Route249
- Static Route249
- Configuring Static Route249
Chapter 19 Bandwidth Management253
- Bandwidth Management Overview253
- Application-Based Bandwidth Management253
- Subnet-Based Bandwidth Management253
- Application and Subnet-Based Bandwidth Management254
- Scheduler254
- Maximize Bandwidth Usage255
- Configuring Summary257
- Table 99 Fairness-Based Allotment of Unused and Unbudgeted Bandwidth Example257
- Table 100 Bandwidth Management Priorities257
- Figure 136 Bandwidth Management: Summary258
- Table 101 Media Bandwidth Management: Summary258
- Bandwidth Management Rule Setup259
- Bandwidth Monitor262
- Figure 139 Bandwidth Management: Monitor262
Chapter 20 Dynamic DNS Setup263
- Dynamic DNS Overview263
  - DYNDNS Wildcard263
- Configuring Dynamic DNS263
- Figure 140 Dynamic DNS264
- Table 104 Dynamic DNS264
Chapter 21 Remote Management Configuration267
- Remote Management Overview267
- Www268
- Figure 141 Remote Management: WWW268
- Telnet269
- Configuring Telnet269
- Figure 142 Telnet Configuration on a TCP/IP Network269
- Table 105 Remote Management: WWW269
- Configuring FTP270
- Figure 143 Remote Management: Telnet270
- Table 106 Remote Management: Telnet270
- Snmp271
- Configuring DNS275
- Configuring ICMP275
- Figure 147 Remote Management: DNS275
- Table 110 Remote Management: DNS275
- Figure 148 Remote Management: ICMP276
- Table 111 Remote Management: ICMP276
Chapter 22 Universal Plug-And-Play (Upnp)277
- Introducing Universal Plug and Play277
  - How Do I Know if I'M Using Upnp277
  - NAT Traversal277
  - Cautions with Upnp278
- Upnp and Zyxel278
  - Configuring Upnp278
  - Figure 149 Configuring Upnp278
- Installing Upnp in Windows Example279
- Table 112 Configuring Upnp279
- Figure 150 Add/Remove Programs: Windows Setup: Communication280
- Figure 151 Add/Remove Programs: Windows Setup: Communication: Components280
- Figure 152 Network Connections281
- Figure 153 Windows Optional Networking Components Wizard281
- Using Upnp in Windows XP Example282
- Figure 154 Networking Services282
- Figure 155 Network Connections283
- Figure 156 Internet Connection Properties283
- Figure 157 Internet Connection Properties: Advanced Settings284
- Figure 158 Internet Connection Properties: Advanced Settings: Add284
- Figure 159 System Tray Icon285
- Figure 160 Internet Connection Status285
- Web Configurator Easy Access285
- Figure 161 Network Connections286
- Figure 162 Network Connections: My Network Places287
- Figure 163 Network Connections: My Network Places: Properties: Example287
Chapter 23 System289
- General Setup and System Name289
- Time Setting291
- Figure 165 System Time Setting291
- Table 114 System Time Setting291
Chapter 24 Logs295
- Logs Overview295
  - Alerts and Logs295
- Viewing the Logs295
- Configuring Log Settings296
- Figure 166 View Log296
- Table 115 View Log296
- Figure 167 Log Settings297
- Table 116 Log Settings297
- SMTP Error Messages299
Chapter 25 Tools301
- Introduction301
- Filename Conventions301
- File Maintenance over WAN302
- Firmware Upgrade Screen302
- Table 118 Filename Conventions302
- Figure 169 Firmware Upgrade303
- Figure 170 Firmware Upload in Progress303
- Table 119 Firmware Upgrade303
- Backup and Restore304
- Restart307
- Figure 177 Reset Warning Message307
- Figure 178 Reset in Process Message307
- Figure 179 Restart Screen307
- Using FTP or TFTP to Back up Configuration308
- Using FTP or TFTP to Restore Configuration310
  - Table 122 General Commands for GUI-Based TFTP Clients310
  - Restore Using FTP Session Example311
- FTP and TFTP Firmware and Configuration File Uploads311
Chapter 26 Diagnostic315
- General Diagnostic315
- DSL Line Diagnostic315
- Figure 183 Diagnostic: General315
- Table 123 Diagnostic: General315
- Figure 184 Diagnostic: DSL Line316
- Table 124 Diagnostic: DSL Line316
Chapter 27 Troubleshooting319
- Problems Starting up the Zyxel Device319
- Problems with the LAN319
- Table 125 Troubleshooting Starting up Your Device319
- Table 126 Troubleshooting the LAN319
- Problems with the WAN320
- Table 127 Troubleshooting the WAN320
- Problems Accessing the Zyxel Device321
  - Pop-Up Windows, Javascripts and Java Permissions321
- Telephone Problems329
- Figure 192 Java (Sun)329
- Table 129 Troubleshooting Telephone329
- Problems with Multiple SIP Accounts330
Appendix A Product Specifications333
- Product Specifications333
- Specification Tables333
Appendix B Splitters and Microfilters339
- Connecting a POTS Splitter339
- Figure 197 Connecting a POTS Splitter339
- Telephone Microfilters339
- Figure 198 Connecting a Microfilter340
- Figure 199 Zyxel Device with ISDN340
- Zyxel Device with ISDN340
Appendix C Setting up Your Computer's IP Address341
- Windows 95/98/Me341
- Figure 202 Windows 95/98/Me: TCP/IP Properties: DNS Configuration344
- Windows 2000/NT/XP344
- Macintosh os 8/9349
Appendix D IP Addresses and Subnetting353
- Macintosh os X350
- Introduction to IP Addresses353
  - IP Address Classes and Hosts353
  - Table 133 Classes of IP Addresses354
  - Table 134 Allowed IP Address Range by Class354
- Subnet Masks355
- Subnetting355
- Table 135 "Natural" Masks355
- Table 136 Alternative Subnet Mask Notation355
- Example: Two Subnets356
- Table 137 Two Subnets Example356
- Table 138 Subnet 1356
- Example: Four Subnets357
- Table 139 Subnet 2357
- Table 140 Subnet 1357
- Example Eight Subnets358
- Table 141 Subnet 2358
- Table 142 Subnet 3358
- Table 143 Subnet 4358
- Subnetting with Class a and Class B Networks359
- Table 144 Eight Subnets359
- Table 145 Class C Subnet Planning359
- Table 146 Class B Subnet Planning360
Appendix E Wireless Lans361
- Wireless LAN Topologies361
- Channel363
- Rts/Cts363
- Figure 215 Infrastructure WLAN363
- Fragmentation Threshold364
- Figure 216 RTS/CTS364
- Preamble Type365
- Table 147 IEEE 802.11G365
- IEEE 802.1X366
- Radius366
  - Types of RADIUS Messages366
- Types of Authentication367
- Wpa369
- Security Parameters Summary370
- Table 149 Wireless Security Relational Matrix370
Appendix F Services371
- Services371
- Table 150 Examples of Services371
Appendix G Firewall Commands375
- Sys Firewall Commands375
- Table 151 Sys Firewall Commands375
Appendix H Triangle Route377
- The Ideal Setup377
- The "Triangle Route" Problem377
- Figure 217 Ideal Setup377
- The "Triangle Route" Solutions378
- IP Aliasing378
- Figure 218 "Triangle Route" Problem378
- Figure 219 IP Alias378
- Gateways on the WAN Side379
- Figure 220 Gateways on the WAN Side379
Appendix I Log Descriptions381
- Table 152 System Maintenance Logs381
Appendix J Command Interpreter393
- Command Syntax393
- Command Usage393
Appendix K Internal SPTGEN395
- Internal SPTGEN Overview395
- The Configuration Text File Format395
  - Internal SPTGEN File Modification - Important Points to Remember395
  - Figure 224 Configuration Text File Format: Column Descriptions395
- Internal SPTGEN FTP Download Example396
- Figure 225 Invalid Parameter Entered: Command Line Example396
- Figure 226 Valid Parameter Entered: Command Line Example396
- Internal SPTGEN FTP Upload Example397
- Figure 227 Internal SPTGEN FTP Download Example397
- Figure 228 Internal SPTGEN FTP Upload Example397
- Table 173 Abbreviations Used in the Example Internal SPTGEN Screens Table398
- Table 174 Menu 1 General Setup398
- Table 175 Menu 3398
- Table 176 Menu 4 Internet Access Setup401
- Table 177 Menu 12403
- Table 178 Menu 15 SUA Server Setup407
- Table 179 Menu 21.1 Filter Set #1409
- Table 180 Menu 21.1 Filer Set #2413
- Table 181 Menu 23 System Menus417
- Table 182 Menu 24.11 Remote Management Control418
- Command Examples419
- Table 183 Command Examples419
- Index421

ZyXEL Communications Network Device P-2602 - Figure 105 Firewall: Edit Rule

Table of Contents

Related product manuals