ZyXEL Communications P-662HW-D - Security; Part III: Security

To Next Page

To Previous Page

155

PART III

Security

Firewalls (157)

Firewall Configuration (169)

Content Filtering (191)

Content Access Control (195)

Introduction to IPSec (215)

VPN Screens (221)

Certificates (247)

Main Page

About this User's Guide3
Document Conventions4
Safety Warnings6
- Table of Contents9
Contents Overview9
Table of Contents11
List of Figures23
List of Tables31
Introduction and Wizards37
Part I: Introduction and Wizards37
Chapter 1 Getting to Know Your Zyxel Device39
- Applications of the Zyxel Device39
- Introducing the Zyxel Device39
- Figure 1 Zyxel Device Internet Access Application40
- Figure 2 Zyxel Device LAN-To-LAN Application Example40
- Firewall for Secure Broadband Internet Access40
- Front Panel Leds41
- Figure 3 Firewall Application41
- Figure 4 P-662H Front Panel41
- Figure 5 P-662HW Front Panel41
- Table 1 Front Panel Leds41
Chapter 2 Introducing the Web Configurator43
- Accessing the Web Configurator43
- Resetting the Zyxel Device46
- Using the Reset Button46
- Figure 15 Status: VPN Status55
- Table 6 Status: VPN Status55
- Figure 16 Status: Packet Statistics56
- Table 7 Status: Packet Statistics56
- Changing Login Password57
- Figure 17 System General57
- Table 8 System General: Password57
Chapter 3 Wizard Setup for Internet Access59
- Figure 18 Select a Mode59
- Manual Configuration61
- Figure 26 Internet Connection with ENET ENCAP64
- Table 12 Internet Connection with ENET ENCAP64
- Figure 27 Internet Connection with Pppoa65
- Figure 28 Connection Test Failed-165
- Table 13 Internet Connection with Pppoa65
- Wireless Connection Wizard Setup66
- Figure 33 Manually Assign a WPA Key69
- Table 16 Manually Assign a WPA Key69
- Figure 34 Manually Assign a WEP Key70
- Figure 35 Wireless LAN Setup 370
- Table 17 Manually Assign a WEP Key70
- Figure 36 Internet Access and WLAN Wizard Setup Complete71
Chapter 4 Bandwidth Management Wizard73
- Introduction73
- Predefined Media Bandwidth Management Services73
- Table 18 Media Bandwidth Management Setup: Services73
- Bandwidth Management Wizard Setup74
- Figure 37 Select a Mode74
- Figure 38 Wizard: Welcome75
- Figure 39 Bandwidth Management Wizard: General Information75
- Table 19 Bandwidth Management Wizard: General Information75
- Figure 40 Bandwidth Management Wizard: Configuration76
- Table 20 Bandwidth Management Wizard: Configuration76
- Figure 41 Bandwidth Management Wizard: Complete77
Network79
- Figure 79 DMZ79
Part II: Network79
- WAN Setup81
- Wireless LAN113
Chapter 5 WAN Setup81
- Encapsulation81
- WAN Overview81
- IP Address Assignment82
- Multiplexing82
- VPI and VCI82
- Metric83
- Nailed-Up Connection (PPP)83
- Nat83
- Figure 42 Example of Traffic Shaping84
- Traffic Shaping84
- ATM Traffic Classes85
- Zero Configuration Internet Access85
- Internet Connection86
- Figure 80 DMZ Public Address Example139
- Table 49 DMZ139
Chapter 6 LAN Setup101
- Figure 53 LAN and WAN IP Addresses101
- Figure 54 any IP Example105
- Figure 55 LAN IP106
- Configuring Advanced LAN Setup107
- Figure 66 Wireless: WPA(2)122
- Figure 67 Advanced124
- Figure 68 OTIST126
- Figure 69 Example Wireless Client OTIST Screen127
- Figure 70 Security Key127
- Notes on OTIST128
Chapter 7 Wireless LAN113
- Figure 61 Example of a Wireless Network113
- Table 34 Types of Encryption for each Type of Authentication115
- Table 35 Additional Wireless Terms116
- Figure 62 Wireless LAN: General117
- Table 36 Wireless LAN: General118
- WEP Encryption Screen119
Chapter 8 DMZ137
- Configuring DMZ137
- Introduction137
- DMZ Public IP Address Example139
Chapter 9 Network Address Translation (NAT) Screens141
- NAT Definitions141
- Configuring Servers Behind Port Forwarding (Example)146
- Default Server IP Address146
- Port Forwarding: Services and Port Numbers146
- Table 56 Edit Address Mapping Rule151
- Figure 89 Trigger Port152
- Table 57 Trigger Port152
- Edit Trigger Port153
- Figure 90 Trigger Port Edit153
- Table 58 Trigger Port Edit153
Security155
Part III: Security155
Chapter 10 Firewalls157
- Firewall Overview157
- Firewalls157
  - Packet Filtering Firewalls157
  - Stateful Inspection Process163
- Types of Dos Attacks160
- Figure 93 SYN Flood161
- Figure 94 Smurf Attack161
- Stateful Inspection162
Chapter 11 Firewall Configuration169
- Access Methods169
Chapter 12 Content Filtering191
- Figure 104 Firewall Example: Edit Rule: Select Customized Services182
- Predefined Services183
- Figure 108 Content Filter: Keyword191
- Configuring the Schedule192
- Figure 110 Content Filter: Trusted193
- Table 72 Content Filter: Schedule193
- Table 73 Content Filter: Trusted193
Chapter 13 Content Access Control195
- Configuration Steps195
Chapter 14 Register211
- Table 76 Content Access Control: General: Services199
- Configuring Web Site Filters200
- Myzyxel.com Overview211
- Subscription Services Available on the Zyxel Device211
- Figure 123 Security > Register212
- Figure 124 Security > Register > Service213
- Table 84 Security > Register > Service214
Chapter 15 Introduction to Ipsec215
- Ipsec215
- Other Terminology215
- Security Association215
- VPN Overview215
- Figure 125 Encryption and Decryption216
- Ipsec Architecture216
- VPN Applications216
- Figure 126 Ipsec Architecture217
- Figure 127 Transport and Tunnel Mode Ipsec Encapsulation218
- Ipsec and NAT218
- Transport Mode218
- Tunnel Mode218
- Table 85 VPN and NAT219
- AH (Authentication Header) Protocol221
Chapter 16 VPN Screens221
- Table 86 AH and ESP222
- Dynamic Secure Gateway Address223
- VPN Setup Screen223
- Table 104 Trusted cas258
- Trusted CA Import259
- Figure 151 Trusted Remote Host Import265
- Table 108 Trusted Remote Host Import265
- Figure 152 Trusted Remote Host Details266
- Table 109 Trusted Remote Host Details267
- Directory Servers268
- Directory Server Add or Edit269
- Figure 153 Directory Servers269
- Table 110 Directory Servers269
- Figure 154 Directory Server Add270
- Table 111 Directory Server Add270
Chapter 17 Certificates247
- Advantages of Certificates248
- Configuration Summary248
- My Certificates248
- Self-Signed Certificates248
Part IV: Advanced271
- Static Route273
- Table 116 Priority-Based Allotment of Unused and Unbudgeted Bandwidth Example280
- Table 117 Fairness-Based Allotment of Unused and Unbudgeted Bandwidth Example280
- Bandwidth Management Priorities281
- Configuring Summary281
Advanced271
Chapter 18 Static Route273
- Figure 155 Example of Static Routing Topology273
- Configuring Static Routes274
- Figure 163 Dynamic DNS288
- Table 122 Dynamic DNS288
Chapter 19 Bandwidth Management277
- Subnet-Based Bandwidth Management277
- Application and Subnet-Based Bandwidth Management278
- Figure 158 Subnet-Based Bandwidth Management Example278
- Priority-Based Scheduler278
- Scheduler278
- Table 114 Application and Subnet-Based Bandwidth Management Example278
- Fairness-Based Scheduler279
- Maximize Bandwidth Usage279
- Maximize Bandwidth Usage Example279
- Reserving Bandwidth for Non-Bandwidth Class Traffic279
- Table 120 Bandwidth Management: Rule Setup282
- Rule Configuration283
Chapter 20 Dynamic DNS Setup287
- Configuring Dynamic DNS287
- Dynamic DNS Overview287
- DYNDNS Wildcard287
Chapter 21 Remote Management Configuration291
- Remote Management Overview291
- Snmp296
- Figure 171 Remote Management: ICMP300
- Table 129 Remote Management: ICMP300
- Figure 172 Enabling TR-069301
- Table 130 TR-069 Commands301
Chapter 22 Universal Plug-And-Play (Upnp)303
- Cautions with Upnp303
- How Do I Know if I'M Using Upnp303
- Introducing Universal Plug and Play303
- NAT Traversal303
- Configuring Upnp304
- Figure 173 Configuring Upnp304
- Table 131 Configuring Upnp304
- Upnp and Zyxel304
- Figure 174 Add/Remove Programs: Windows Setup: Communication305
- Installing Upnp in Windows Example305
- Figure 175 Add/Remove Programs: Windows Setup: Communication: Components306
- Figure 176 Network Connections306
- Figure 177 Windows Optional Networking Components Wizard307
- Figure 178 Networking Services307
- Using Upnp in Windows XP Example308
- Figure 179 Network Connections308
- Figure 180 Internet Connection Properties309
- Figure 181 Internet Connection Properties: Advanced Settings310
- Figure 182 Internet Connection Properties: Advanced Settings: Add310
- Figure 183 System Tray Icon311
- Figure 184 Internet Connection Status311
- Figure 185 Network Connections312
- Figure 186 Network Connections: My Network Places313
- Figure 187 Network Connections: My Network Places: Properties: Example313
Maintenance, Troubleshooting and Specifications315
Part V: Maintenance, Troubleshooting and Specifications315
Chapter 23 System317
- General Setup and System Name317
- System317
Chapter 24 Logs323
- Logs Overview323
- Viewing the Logs323
- Configuring Log Settings324
- Figure 190 View Log324
- Table 134 View Log324
- Figure 191 Log Settings325
- Table 135 Log Settings325
- SMTP Error Messages326
- Table 136 SMTP Error Messages326
- Example E-Mail Log327
- Figure 192 E-Mail Log Example327
Chapter 25 Tools329
- Figure 193 Firmware Upgrade329
- Firmware Upgrade329
- Table 137 Firmware Upgrade329
- Figure 194 Firmware Upload in Progress330
- Figure 196 Error Message331
- Figure 197 Configuration331
- Figure 198 Configuration Restore Successful332
- Figure 199 Temporarily Disconnected332
- Figure 200 Configuration Restore Error333
- Figure 201 Restart Screen333
Chapter 26 Diagnostic335
- Figure 202 Diagnostic: General335
- General Diagnostic335
- Table 139 Diagnostic: General335
- DSL Line Diagnostic336
- Figure 203 Diagnostic: DSL Line336
- Table 140 Diagnostic: DSL Line336
Chapter 27 Troubleshooting337
- Problems Starting up the Zyxel Device337
- Table 142 Troubleshooting the LAN337
- Problems Accessing the Zyxel Device338
- Problems with the WAN338
- Figure 204 Pop-Up Blocker339
- Figure 205 Internet Options340
- Figure 206 Internet Options341
- Figure 207 Pop-Up Blocker Settings341
- Figure 208 Internet Options342
- Figure 209 Security Settings - Java Scripting343
- Figure 210 Security Settings - Java343
- Activex Controls in Internet Explorer344
- Figure 211 Java (Sun)344
- Figure 212 Internet Options Security345
- Figure 213 Security Setting Activex Controls345
Chapter 28 Product Specifications347
- General Zyxel Device Specifications347
  - Table 145 Hardware Specifications347
Part VI: Appendices and Index353
Appendix A Setting up Your Computer's IP Address355
- Figure 216 Windows 95/98/Me: Network: Configuration356
- Figure 217 Windows 95/98/Me: TCP/IP Properties: IP Address357
- Figure 218 Windows 95/98/Me: TCP/IP Properties: DNS Configuration358
- Figure 219 Windows XP: Start Menu359
- Figure 220 Windows XP: Control Panel359
- Figure 221 Windows XP: Control Panel: Network Connections: Properties360
- Figure 222 Windows XP: Local Area Connection Properties360
- Figure 223 Windows XP: Internet Protocol (TCP/IP) Properties361
- Figure 224 Windows XP: Advanced TCP/IP Properties362
- Figure 225 Windows XP: Internet Protocol (TCP/IP) Properties363
- Figure 226 Windows Vista: Start Menu364
- Figure 227 Windows Vista: Control Panel364
- Figure 228 Windows Vista: Network and Internet364
- Figure 229 Windows Vista: Network and Sharing Center364
- Figure 230 Windows Vista: Network and Sharing Center365
- Figure 231 Windows Vista: Local Area Connection Properties365
- Figure 232 Windows Vista: Internet Protocol Version 4 (Tcp/Ipv4) Properties366
- Figure 239 Red hat 9.0: KDE: Network Configuration: Devices372
- Figure 240 Red hat 9.0: KDE: Ethernet Device: General372
- Figure 241 Red hat 9.0: KDE: Network Configuration: DNS373
- Figure 242 Red hat 9.0: KDE: Network Configuration: Activate373
- Figure 243 Red hat 9.0: Dynamic IP Address Setting in Ifconfig-Eth0374
- Figure 244 Red hat 9.0: Static IP Address Setting in Ifconfig-Eth0374
- Figure 245 Red hat 9.0: DNS Settings in Resolv.conf374
- Figure 246 Red hat 9.0: Restart Ethernet Card374
- Figure 247 Red hat 9.0: Checking TCP/IP Properties375
Appendix B Pop-Up Windows, Javascripts and Java Permissions377
- Table 153 Subnet 2390
- Table 154 Subnet 3390
- Table 155 Subnet 4390
- Table 156 Eight Subnets390
- Table 157 24-Bit Network Number Subnet Planning391
- Table 158 16-Bit Network Number Subnet Planning391
- Figure 261 Conflicting Computer IP Addresses Example393
- Figure 262 Conflicting Computer IP Addresses Example393
- Figure 263 Conflicting Computer and Router IP Addresses Example394
Appendix C IP Addresses and Subnetting385
- Figure 258 Network Number and Host ID386
- Table 148 IP Address Network Number and Host ID Example386
- Table 149 Subnet Masks387
- Table 150 Maximum Host Numbers387
- Table 151 Alternative Subnet Mask Notation387
- Figure 259 Subnetting Example: before Subnetting388
- Figure 260 Subnetting Example: after Subnetting389
- Table 152 Subnet 1389
- Figure 264 Peer-To-Peer Communication in an Ad-Hoc Network395
- Figure 265 Basic Service Set396
- Figure 266 Infrastructure WLAN397
- Figure 267 RTS/CTS398
- Table 159 IEEE 802.11G399
- Table 160 Wireless Security Levels400
- Table 161 Comparison of EAP Authentication Types403
- Figure 268 WPA(2) with RADIUS Application Example405
- Figure 269 WPA(2)-PSK Authentication406
- Table 162 Wireless Security Relational Matrix406
Appendix D Wireless Lans395
- Figure 270 Windows XP SP1: Wireless Network Connection Status409
- Figure 271 Windows XP SP2: Wireless Network Connection Status410
- Figure 272 Windows XP SP1: Wireless Network Connection Properties410
- Figure 273 Windows XP SP2: Wireless Network Connection Properties411
- Figure 274 Windows XP SP2: WZC Not Available411
- Figure 275 Windows XP SP2: System Tray Icon412
- Figure 276 Windows XP SP2: Wireless Network Connection Status412
- Table 163 Windows XP SP2: System Tray Icon412
- Figure 277 Windows XP SP1: Wireless Network Connection Status413
- Figure 278 Windows XP SP2: Wireless Network Connection413
- Figure 279 Windows XP SP1: Wireless Network Connection Properties414
- Table 164 Windows XP SP2: Wireless Network Connection414
- Figure 280 Windows XP SP2: Wireless Network Connection: WEP or WPA-PSK415
- Figure 281 Windows XP SP2: Wireless Network Connection: no Security415
- Table 165 Windows XP: Wireless Networks415
- Figure 282 Windows XP: Wireless (Network) Properties: Association416
- Table 166 Windows XP: Wireless (Network) Properties: Association416
- Figure 283 Windows XP: Wireless (Network) Properties: Authentication417
- Table 167 Windows XP: Wireless (Network) Properties: Authentication417
Appendix E Management with Wireless Zero Configuration409
Appendix F Common Services423
Appendix G Virtual Circuit Topology427
- Figure 289 Security Certificate429
- Figure 290 Login Screen430
- Figure 291 Certificate General Information before Import430
- Figure 292 Certificate Import Wizard 1431
- Figure 293 Certificate Import Wizard 2431
- Figure 294 Certificate Import Wizard 3432
- Figure 295 Root Certificate Store432
- Figure 296 Certificate General Information after Import433
- Table 171 Netbios Filter Default Settings436
Appendix H Importing Certificates429
Appendix I Netbios Filter Commands435
- Figure 301 Configuration Text File Format: Column Descriptions443
- Figure 302 Invalid Parameter Entered: Command Line Example444
- Figure 303 Valid Parameter Entered: Command Line Example444
- Figure 304 Internal SPTGEN FTP Download Example445
- Figure 305 Internal SPTGEN FTP Upload Example445
- Table 172 Abbreviations Used in the Example Internal SPTGEN Screens Table446
- Table 173 Menu 1 General Setup446
- Table 174 Menu 3446
- Table 175 Menu 4 Internet Access Setup449
- Table 176 Menu 12451
- Table 177 Menu 15 SUA Server Setup451
- Table 178 Menu 21.1 Filter Set #1453
- Table 179 Menu 21.1 Filer Set #2454
- Table 180 Menu 23 System Menus456
- Table 181 Menu 24.11 Remote Management Control457
- Table 182 Command Examples458
Appendix J Command Interpreter437
- Figure 297 Displaying Log Categories Example438
- Figure 298 Displaying Log Parameters Example438
- Figure 299 Routing Command Example440
- Figure 300 Backup Gateway441
Appendix K Internal SPTGEN443
Appendix L Log Descriptions459
- Table 183 System Maintenance Logs459
- Table 184 System Error Logs460
- Table 185 Access Control Logs460
- Table 186 TCP Reset Logs461
- Table 187 Packet Filter Logs461
- Table 188 ICMP Logs461
- Table 189 CDR Logs462
- Table 190 PPP Logs462
- Table 191 Upnp Logs462
- Table 192 Content Filtering Logs463
- Table 193 Attack Logs463
- Table 194 Ipsec Logs464
- Table 195 IKE Logs465
- Table 196 PKI Logs467
- Table 197 Certificate Path Verification Failure Reason Codes468
- Table 198 802.1X Logs469
- Table 199 ACL Setting Notes470
- Table 200 ICMP Notes470
- Table 201 Syslog Logs471
- Figure 306 Displaying Log Categories Example472
- Table 202 RFC-2408 ISAKMP Payload Types472
- Figure 307 Displaying Log Parameters Example473
Appendix M Legal Information475
Appendix N Customer Support479
Index485

ZyXEL Communications P-662HW-D - Security; Part III: Security

Table of Contents

Other manuals for ZyXEL Communications P-662HW-D

Related product manuals