ZyXEL Communications P-662HW-D - Figure 98 Firewall: Edit Rule

To Next Page

To Previous Page

Chapter 11 Firewall Configuration

P-662H/HW-D Series User’s Guide

176

Figure 98 Firewall: Edit Rule

Main Page

About this User's Guide3
Document Conventions4
Safety Warnings6
- Table of Contents9
Contents Overview9
Table of Contents11
List of Figures23
List of Tables31
Introduction and Wizards37
Part I: Introduction and Wizards37
Chapter 1 Getting to Know Your Zyxel Device39
- Applications of the Zyxel Device39
- Introducing the Zyxel Device39
- Figure 1 Zyxel Device Internet Access Application40
- Figure 2 Zyxel Device LAN-To-LAN Application Example40
- Firewall for Secure Broadband Internet Access40
- Front Panel Leds41
- Figure 3 Firewall Application41
- Figure 4 P-662H Front Panel41
- Figure 5 P-662HW Front Panel41
- Table 1 Front Panel Leds41
Chapter 2 Introducing the Web Configurator43
- Accessing the Web Configurator43
- Resetting the Zyxel Device46
- Using the Reset Button46
- Figure 15 Status: VPN Status55
- Table 6 Status: VPN Status55
- Figure 16 Status: Packet Statistics56
- Table 7 Status: Packet Statistics56
- Changing Login Password57
- Figure 17 System General57
- Table 8 System General: Password57
Chapter 3 Wizard Setup for Internet Access59
- Figure 18 Select a Mode59
- Manual Configuration61
- Figure 26 Internet Connection with ENET ENCAP64
- Table 12 Internet Connection with ENET ENCAP64
- Figure 27 Internet Connection with Pppoa65
- Figure 28 Connection Test Failed-165
- Table 13 Internet Connection with Pppoa65
- Wireless Connection Wizard Setup66
- Figure 33 Manually Assign a WPA Key69
- Table 16 Manually Assign a WPA Key69
- Figure 34 Manually Assign a WEP Key70
- Figure 35 Wireless LAN Setup 370
- Table 17 Manually Assign a WEP Key70
- Figure 36 Internet Access and WLAN Wizard Setup Complete71
Chapter 4 Bandwidth Management Wizard73
- Introduction73
- Predefined Media Bandwidth Management Services73
- Table 18 Media Bandwidth Management Setup: Services73
- Bandwidth Management Wizard Setup74
- Figure 37 Select a Mode74
- Figure 38 Wizard: Welcome75
- Figure 39 Bandwidth Management Wizard: General Information75
- Table 19 Bandwidth Management Wizard: General Information75
- Figure 40 Bandwidth Management Wizard: Configuration76
- Table 20 Bandwidth Management Wizard: Configuration76
- Figure 41 Bandwidth Management Wizard: Complete77
Network79
- Figure 79 DMZ79
Part II: Network79
- WAN Setup81
- Wireless LAN113
Chapter 5 WAN Setup81
- Encapsulation81
- WAN Overview81
- IP Address Assignment82
- Multiplexing82
- VPI and VCI82
- Metric83
- Nailed-Up Connection (PPP)83
- Nat83
- Figure 42 Example of Traffic Shaping84
- Traffic Shaping84
- ATM Traffic Classes85
- Zero Configuration Internet Access85
- Internet Connection86
- Figure 80 DMZ Public Address Example139
- Table 49 DMZ139
Chapter 6 LAN Setup101
- Figure 53 LAN and WAN IP Addresses101
- Figure 54 any IP Example105
- Figure 55 LAN IP106
- Configuring Advanced LAN Setup107
- Figure 66 Wireless: WPA(2)122
- Figure 67 Advanced124
- Figure 68 OTIST126
- Figure 69 Example Wireless Client OTIST Screen127
- Figure 70 Security Key127
- Notes on OTIST128
Chapter 7 Wireless LAN113
- Figure 61 Example of a Wireless Network113
- Table 34 Types of Encryption for each Type of Authentication115
- Table 35 Additional Wireless Terms116
- Figure 62 Wireless LAN: General117
- Table 36 Wireless LAN: General118
- WEP Encryption Screen119
Chapter 8 DMZ137
- Configuring DMZ137
- Introduction137
- DMZ Public IP Address Example139
Chapter 9 Network Address Translation (NAT) Screens141
- NAT Definitions141
- Configuring Servers Behind Port Forwarding (Example)146
- Default Server IP Address146
- Port Forwarding: Services and Port Numbers146
- Table 56 Edit Address Mapping Rule151
- Figure 89 Trigger Port152
- Table 57 Trigger Port152
- Edit Trigger Port153
- Figure 90 Trigger Port Edit153
- Table 58 Trigger Port Edit153
Security155
Part III: Security155
Chapter 10 Firewalls157
- Firewall Overview157
- Firewalls157
  - Packet Filtering Firewalls157
  - Stateful Inspection Process163
- Types of Dos Attacks160
- Figure 93 SYN Flood161
- Figure 94 Smurf Attack161
- Stateful Inspection162
Chapter 11 Firewall Configuration169
- Access Methods169
Chapter 12 Content Filtering191
- Figure 104 Firewall Example: Edit Rule: Select Customized Services182
- Predefined Services183
- Figure 108 Content Filter: Keyword191
- Configuring the Schedule192
- Figure 110 Content Filter: Trusted193
- Table 72 Content Filter: Schedule193
- Table 73 Content Filter: Trusted193
Chapter 13 Content Access Control195
- Configuration Steps195
Chapter 14 Register211
- Table 76 Content Access Control: General: Services199
- Configuring Web Site Filters200
- Myzyxel.com Overview211
- Subscription Services Available on the Zyxel Device211
- Figure 123 Security > Register212
- Figure 124 Security > Register > Service213
- Table 84 Security > Register > Service214
Chapter 15 Introduction to Ipsec215
- Ipsec215
- Other Terminology215
- Security Association215
- VPN Overview215
- Figure 125 Encryption and Decryption216
- Ipsec Architecture216
- VPN Applications216
- Figure 126 Ipsec Architecture217
- Figure 127 Transport and Tunnel Mode Ipsec Encapsulation218
- Ipsec and NAT218
- Transport Mode218
- Tunnel Mode218
- Table 85 VPN and NAT219
- AH (Authentication Header) Protocol221
Chapter 16 VPN Screens221
- Table 86 AH and ESP222
- Dynamic Secure Gateway Address223
- VPN Setup Screen223
- Table 104 Trusted cas258
- Trusted CA Import259
- Figure 151 Trusted Remote Host Import265
- Table 108 Trusted Remote Host Import265
- Figure 152 Trusted Remote Host Details266
- Table 109 Trusted Remote Host Details267
- Directory Servers268
- Directory Server Add or Edit269
- Figure 153 Directory Servers269
- Table 110 Directory Servers269
- Figure 154 Directory Server Add270
- Table 111 Directory Server Add270
Chapter 17 Certificates247
- Advantages of Certificates248
- Configuration Summary248
- My Certificates248
- Self-Signed Certificates248
Part IV: Advanced271
- Static Route273
- Table 116 Priority-Based Allotment of Unused and Unbudgeted Bandwidth Example280
- Table 117 Fairness-Based Allotment of Unused and Unbudgeted Bandwidth Example280
- Bandwidth Management Priorities281
- Configuring Summary281
Advanced271
Chapter 18 Static Route273
- Figure 155 Example of Static Routing Topology273
- Configuring Static Routes274
- Figure 163 Dynamic DNS288
- Table 122 Dynamic DNS288
Chapter 19 Bandwidth Management277
- Subnet-Based Bandwidth Management277
- Application and Subnet-Based Bandwidth Management278
- Figure 158 Subnet-Based Bandwidth Management Example278
- Priority-Based Scheduler278
- Scheduler278
- Table 114 Application and Subnet-Based Bandwidth Management Example278
- Fairness-Based Scheduler279
- Maximize Bandwidth Usage279
- Maximize Bandwidth Usage Example279
- Reserving Bandwidth for Non-Bandwidth Class Traffic279
- Table 120 Bandwidth Management: Rule Setup282
- Rule Configuration283
Chapter 20 Dynamic DNS Setup287
- Configuring Dynamic DNS287
- Dynamic DNS Overview287
- DYNDNS Wildcard287
Chapter 21 Remote Management Configuration291
- Remote Management Overview291
- Snmp296
- Figure 171 Remote Management: ICMP300
- Table 129 Remote Management: ICMP300
- Figure 172 Enabling TR-069301
- Table 130 TR-069 Commands301
Chapter 22 Universal Plug-And-Play (Upnp)303
- Cautions with Upnp303
- How Do I Know if I'M Using Upnp303
- Introducing Universal Plug and Play303
- NAT Traversal303
- Configuring Upnp304
- Figure 173 Configuring Upnp304
- Table 131 Configuring Upnp304
- Upnp and Zyxel304
- Figure 174 Add/Remove Programs: Windows Setup: Communication305
- Installing Upnp in Windows Example305
- Figure 175 Add/Remove Programs: Windows Setup: Communication: Components306
- Figure 176 Network Connections306
- Figure 177 Windows Optional Networking Components Wizard307
- Figure 178 Networking Services307
- Using Upnp in Windows XP Example308
- Figure 179 Network Connections308
- Figure 180 Internet Connection Properties309
- Figure 181 Internet Connection Properties: Advanced Settings310
- Figure 182 Internet Connection Properties: Advanced Settings: Add310
- Figure 183 System Tray Icon311
- Figure 184 Internet Connection Status311
- Figure 185 Network Connections312
- Figure 186 Network Connections: My Network Places313
- Figure 187 Network Connections: My Network Places: Properties: Example313
Maintenance, Troubleshooting and Specifications315
Part V: Maintenance, Troubleshooting and Specifications315
Chapter 23 System317
- General Setup and System Name317
- System317
Chapter 24 Logs323
- Logs Overview323
- Viewing the Logs323
- Configuring Log Settings324
- Figure 190 View Log324
- Table 134 View Log324
- Figure 191 Log Settings325
- Table 135 Log Settings325
- SMTP Error Messages326
- Table 136 SMTP Error Messages326
- Example E-Mail Log327
- Figure 192 E-Mail Log Example327
Chapter 25 Tools329
- Figure 193 Firmware Upgrade329
- Firmware Upgrade329
- Table 137 Firmware Upgrade329
- Figure 194 Firmware Upload in Progress330
- Figure 196 Error Message331
- Figure 197 Configuration331
- Figure 198 Configuration Restore Successful332
- Figure 199 Temporarily Disconnected332
- Figure 200 Configuration Restore Error333
- Figure 201 Restart Screen333
Chapter 26 Diagnostic335
- Figure 202 Diagnostic: General335
- General Diagnostic335
- Table 139 Diagnostic: General335
- DSL Line Diagnostic336
- Figure 203 Diagnostic: DSL Line336
- Table 140 Diagnostic: DSL Line336
Chapter 27 Troubleshooting337
- Problems Starting up the Zyxel Device337
- Table 142 Troubleshooting the LAN337
- Problems Accessing the Zyxel Device338
- Problems with the WAN338
- Figure 204 Pop-Up Blocker339
- Figure 205 Internet Options340
- Figure 206 Internet Options341
- Figure 207 Pop-Up Blocker Settings341
- Figure 208 Internet Options342
- Figure 209 Security Settings - Java Scripting343
- Figure 210 Security Settings - Java343
- Activex Controls in Internet Explorer344
- Figure 211 Java (Sun)344
- Figure 212 Internet Options Security345
- Figure 213 Security Setting Activex Controls345
Chapter 28 Product Specifications347
- General Zyxel Device Specifications347
  - Table 145 Hardware Specifications347
Part VI: Appendices and Index353
Appendix A Setting up Your Computer's IP Address355
- Figure 216 Windows 95/98/Me: Network: Configuration356
- Figure 217 Windows 95/98/Me: TCP/IP Properties: IP Address357
- Figure 218 Windows 95/98/Me: TCP/IP Properties: DNS Configuration358
- Figure 219 Windows XP: Start Menu359
- Figure 220 Windows XP: Control Panel359
- Figure 221 Windows XP: Control Panel: Network Connections: Properties360
- Figure 222 Windows XP: Local Area Connection Properties360
- Figure 223 Windows XP: Internet Protocol (TCP/IP) Properties361
- Figure 224 Windows XP: Advanced TCP/IP Properties362
- Figure 225 Windows XP: Internet Protocol (TCP/IP) Properties363
- Figure 226 Windows Vista: Start Menu364
- Figure 227 Windows Vista: Control Panel364
- Figure 228 Windows Vista: Network and Internet364
- Figure 229 Windows Vista: Network and Sharing Center364
- Figure 230 Windows Vista: Network and Sharing Center365
- Figure 231 Windows Vista: Local Area Connection Properties365
- Figure 232 Windows Vista: Internet Protocol Version 4 (Tcp/Ipv4) Properties366
- Figure 239 Red hat 9.0: KDE: Network Configuration: Devices372
- Figure 240 Red hat 9.0: KDE: Ethernet Device: General372
- Figure 241 Red hat 9.0: KDE: Network Configuration: DNS373
- Figure 242 Red hat 9.0: KDE: Network Configuration: Activate373
- Figure 243 Red hat 9.0: Dynamic IP Address Setting in Ifconfig-Eth0374
- Figure 244 Red hat 9.0: Static IP Address Setting in Ifconfig-Eth0374
- Figure 245 Red hat 9.0: DNS Settings in Resolv.conf374
- Figure 246 Red hat 9.0: Restart Ethernet Card374
- Figure 247 Red hat 9.0: Checking TCP/IP Properties375
Appendix B Pop-Up Windows, Javascripts and Java Permissions377
- Table 153 Subnet 2390
- Table 154 Subnet 3390
- Table 155 Subnet 4390
- Table 156 Eight Subnets390
- Table 157 24-Bit Network Number Subnet Planning391
- Table 158 16-Bit Network Number Subnet Planning391
- Figure 261 Conflicting Computer IP Addresses Example393
- Figure 262 Conflicting Computer IP Addresses Example393
- Figure 263 Conflicting Computer and Router IP Addresses Example394
Appendix C IP Addresses and Subnetting385
- Figure 258 Network Number and Host ID386
- Table 148 IP Address Network Number and Host ID Example386
- Table 149 Subnet Masks387
- Table 150 Maximum Host Numbers387
- Table 151 Alternative Subnet Mask Notation387
- Figure 259 Subnetting Example: before Subnetting388
- Figure 260 Subnetting Example: after Subnetting389
- Table 152 Subnet 1389
- Figure 264 Peer-To-Peer Communication in an Ad-Hoc Network395
- Figure 265 Basic Service Set396
- Figure 266 Infrastructure WLAN397
- Figure 267 RTS/CTS398
- Table 159 IEEE 802.11G399
- Table 160 Wireless Security Levels400
- Table 161 Comparison of EAP Authentication Types403
- Figure 268 WPA(2) with RADIUS Application Example405
- Figure 269 WPA(2)-PSK Authentication406
- Table 162 Wireless Security Relational Matrix406
Appendix D Wireless Lans395
- Figure 270 Windows XP SP1: Wireless Network Connection Status409
- Figure 271 Windows XP SP2: Wireless Network Connection Status410
- Figure 272 Windows XP SP1: Wireless Network Connection Properties410
- Figure 273 Windows XP SP2: Wireless Network Connection Properties411
- Figure 274 Windows XP SP2: WZC Not Available411
- Figure 275 Windows XP SP2: System Tray Icon412
- Figure 276 Windows XP SP2: Wireless Network Connection Status412
- Table 163 Windows XP SP2: System Tray Icon412
- Figure 277 Windows XP SP1: Wireless Network Connection Status413
- Figure 278 Windows XP SP2: Wireless Network Connection413
- Figure 279 Windows XP SP1: Wireless Network Connection Properties414
- Table 164 Windows XP SP2: Wireless Network Connection414
- Figure 280 Windows XP SP2: Wireless Network Connection: WEP or WPA-PSK415
- Figure 281 Windows XP SP2: Wireless Network Connection: no Security415
- Table 165 Windows XP: Wireless Networks415
- Figure 282 Windows XP: Wireless (Network) Properties: Association416
- Table 166 Windows XP: Wireless (Network) Properties: Association416
- Figure 283 Windows XP: Wireless (Network) Properties: Authentication417
- Table 167 Windows XP: Wireless (Network) Properties: Authentication417
Appendix E Management with Wireless Zero Configuration409
Appendix F Common Services423
Appendix G Virtual Circuit Topology427
- Figure 289 Security Certificate429
- Figure 290 Login Screen430
- Figure 291 Certificate General Information before Import430
- Figure 292 Certificate Import Wizard 1431
- Figure 293 Certificate Import Wizard 2431
- Figure 294 Certificate Import Wizard 3432
- Figure 295 Root Certificate Store432
- Figure 296 Certificate General Information after Import433
- Table 171 Netbios Filter Default Settings436
Appendix H Importing Certificates429
Appendix I Netbios Filter Commands435
- Figure 301 Configuration Text File Format: Column Descriptions443
- Figure 302 Invalid Parameter Entered: Command Line Example444
- Figure 303 Valid Parameter Entered: Command Line Example444
- Figure 304 Internal SPTGEN FTP Download Example445
- Figure 305 Internal SPTGEN FTP Upload Example445
- Table 172 Abbreviations Used in the Example Internal SPTGEN Screens Table446
- Table 173 Menu 1 General Setup446
- Table 174 Menu 3446
- Table 175 Menu 4 Internet Access Setup449
- Table 176 Menu 12451
- Table 177 Menu 15 SUA Server Setup451
- Table 178 Menu 21.1 Filter Set #1453
- Table 179 Menu 21.1 Filer Set #2454
- Table 180 Menu 23 System Menus456
- Table 181 Menu 24.11 Remote Management Control457
- Table 182 Command Examples458
Appendix J Command Interpreter437
- Figure 297 Displaying Log Categories Example438
- Figure 298 Displaying Log Parameters Example438
- Figure 299 Routing Command Example440
- Figure 300 Backup Gateway441
Appendix K Internal SPTGEN443
Appendix L Log Descriptions459
- Table 183 System Maintenance Logs459
- Table 184 System Error Logs460
- Table 185 Access Control Logs460
- Table 186 TCP Reset Logs461
- Table 187 Packet Filter Logs461
- Table 188 ICMP Logs461
- Table 189 CDR Logs462
- Table 190 PPP Logs462
- Table 191 Upnp Logs462
- Table 192 Content Filtering Logs463
- Table 193 Attack Logs463
- Table 194 Ipsec Logs464
- Table 195 IKE Logs465
- Table 196 PKI Logs467
- Table 197 Certificate Path Verification Failure Reason Codes468
- Table 198 802.1X Logs469
- Table 199 ACL Setting Notes470
- Table 200 ICMP Notes470
- Table 201 Syslog Logs471
- Figure 306 Displaying Log Categories Example472
- Table 202 RFC-2408 ISAKMP Payload Types472
- Figure 307 Displaying Log Parameters Example473
Appendix M Legal Information475
Appendix N Customer Support479
Index485

ZyXEL Communications P-662HW-D - Figure 98 Firewall: Edit Rule

Table of Contents

Other manuals for ZyXEL Communications P-662HW-D

Related product manuals