ZyXEL Communications Prestige 652R-11 Manuals

Manuals and User Guides for ZyXEL Communications Prestige 652R-11. We have 1 ZyXEL Communications Prestige 652R-11 manual available for free PDF download: User Manual

ZyXEL Communications Prestige 652R-11 User Manual (523 pages)

Prestige 652 Series ADSL Security/Wireless LAN Router

Brand: ZyXEL Communications | Category: Network Router | Size: 12.52 MB

Copyright
2
Federal Communications Commission
3
Safety Warnings
4
Zyxel Limited Warranty
4
Customer Support
5
Table of Contents
6
List of Figures
14
Preface
26
- Syntax Conventions
  27
What Is DSL
28
Getting Started
29
Chapter 1 Getting to Know Your Prestige

31
- Introducing the Prestige 652 Series
  31
- Features of the Prestige
  31
  - Traffic Redirect
    32
  - Auxiliary Port
    32
  - Dynamic Dns Support
    33
  - Protocol Support
    34
  - Networking Compatibility
    35
- Applications for the Prestige
  36
- Figure 1-1 Prestige Internet Access Application
  37
- Figure 1-2 Firewall Application
  38
- Figure 1-3 VPN Application
  39
- Figure 1-4 Prestige LAN-To-LAN Application
  40
Chapter 2 Introducing the Web Configurator

41
Chapter 3 Wizard Setup

45
Chapter 4 Password Setup

63
- Password Overview
  63
- Configuring Password
  63
- Figure 4-1 Password
  63
- Table 4-1 Password
  63
Chapter 5 LAN Setup

65
- LAN Overview
  65
- DNS Server Address
  65
- Figure 5-1 LAN and WAN IP Addresses
  65
- DNS Server Address Assignment
  66
- Lan Tcp/Ip
  66
- Rip Setup
  67
- Configuring LAN
  68
Chapter 6 Wireless LAN Setup

71
- Wireless LAN Overview
  71
- Figure 6-1 RTS/CTS
  72
- Levels of Security
  73
- Figure 6-2 Prestige Wireless Security Levels
  73
- Data Encryption with WEP
  74
- Inserting a PCMCIA Wireless LAN Card
  74
- Configuring Wireless LAN
  74
- Configuring MAC Filter
  76
- Figure 6-4 MAC Address Filter
  77
- Network Authentication
  78
- Configuring 802.1X
  80
- Figure 6-5 EAP Authentication
  80
- Figure 6-6 802.1X
  80
- Table 6-3 802.1X
  81
- Configuring Local User Authentication
  82
- Figure 6-7 Local User Database
  83
- Configuring RADIUS
  84
- Figure 6-8 RADIUS
  84
- Table 6-4 Local User Database
  84
- Table 6-5 RADIUS
  85
Chapter 7 WAN Setup

87
- WAN Overview
  87
- Metric
  87
- Pppoe Encapsulation
  87
- Traffic Shaping
  88
- Configuring WAN Setup
  89
- Figure 7-1 Example of Traffic Shaping
  89
- Figure 7-2 WAN Setup
  90
- Table 7-1 WAN Setup
  91
- WAN Backup
  93
- Traffic Redirect on the LAN
  93
- Traffic Redirect on the WAN
  94
- Figure 7-3 Traffic Redirect Setup Example
  94
- Figure 7-4 Traffic Redirect WAN Setup
  94
- Configuring WAN Backup
  95
- Figure 7-5 Traffic Redirect LAN Setup
  95
- Figure 7-6 WAN Backup
  96
- Table 7-2 WAN Backup
  96
- Configuring Advanced WAN Backup
  98
- Figure 7-7 Advanced WAN Backup
  99
- Table 7-3 Advanced WAN Backup
  100
- AT Command Strings
  102
- DTR Signal
  103
- Response Strings
  103
- Configuring Advanced Modem Setup
  103
- Figure 7-8 Advanced Modem Setup
  104
- Table 7-4 Advanced Modem Setup
  104
- NAT, Dynamic DNS and Time Zone
  107
Chapter 8 Network Address Translation (NAT) Screens

109
- NAT Overview
  109
  - Table 8-1 NAT Definitions
    109
  - How Nat Works
    110
  - What Nat Does
    110
- Figure 8-1 How NAT Works
  111
- Figure 8-2 NAT Application with IP Alias
  112
- SUA (Single User Account) Versus NAT
  113
- Table 8-2 NAT Mapping Types
  113
- SUA Server
  114
- Table 8-3 Services and Port Numbers
  115
- Selecting the NAT Mode
  116
- Figure 8-3 Multiple Servers Behind NAT Example
  116
- Figure 8-4 NAT Mode
  116
- Configuring SUA Server
  117
- Table 8-4 NAT Mode
  117
- Figure 8-5 Edit SUA/NAT Server Set
  118
- Table 8-5 Edit SUA/NAT Server Set
  118
- Configuring Address Mapping
  119
- Figure 8-6 Address Mapping Rules
  119
- Editing an Address Mapping Rule
  120
- Table 8-6 Address Mapping Rules
  120
- Figure 8-7 Address Mapping Rule Edit
  121
- Table 8-7 Address Mapping Rule Edit
  121
Chapter 9 Dynamic DNS Setup

123
- Dynamic DNS
  123
- Configuring Dynamic DNS
  123
- Figure 9-1 DDNS
  124
- Table 9-1 DDNS
  124
Chapter 10 Time Zone

125
- Configuring Time Zone
  125
- Figure 10-1 Time/Date
  125
- Table 10-1 Time/Date
  126
- Firewall and Content Filters
  129
Chapter 11 Firewalls

131
- Firewall Overview
  131
- Types of Firewalls
  131
- Introduction to Zyxel's Firewall
  132
- Denial of Service
  133
- Figure 11-1 Prestige Firewall Application
  133
- Table 11-1 Common IP Ports
  134
- Figure 11-2 Three-Way Handshake
  135
- Figure 11-3 SYN Flood
  135
- Figure 11-4 Smurf Attack
  136
- Table 11-2 ICMP Commands that Trigger Alerts
  136
- Stateful Inspection
  137
- Table 11-3 Legal Netbios Commands
  137
- Table 11-4 Legal SMTP Commands
  137
- Figure 11-5 Stateful Inspection
  138
- Stateful Inspection and the Prestige
  139
- Tcp Security
  140
- Upper Layer Protocols
  140
- Guidelines for Enhancing Security with Your Firewall
  141
- Security in General
  141
- Packet Filtering Vs Firewall
  142
- When to Use the Firewall
  143
Chapter 12 Firewall Configuration

145
- Remote Management and the Firewall
  145
- Enabling the Firewall
  145
- Figure 12-1 Enabling the Firewall
  145
- Attack Alert
  146
- Tcp Maximum Incomplete and Blocking Time
  147
- Figure 12-2 Attack Alert
  148
- Table 12-1 Attack Alert
  148
Chapter 13 Creating Custom Rules

151
- Rules Overview
  151
- Rule Logic Overview
  151
- Security Ramifications
  152
- Key Fields for Configuring Rules
  152
- Connection Direction
  153
- Figure 13-1 LAN to WAN Traffic
  153
- Logs
  154
- Rule Summary
  154
- Figure 13-2 WAN to LAN Traffic
  154
- Figure 13-3 Firewall Rules Summary: First Screen
  155
- Table 13-1 Firewall Rules Summary: First Screen
  155
- Predefined Services
  156
- Table 13-2 Predefined Services
  157
- Creating/Editing Firewall Rules
  159
- Figure 13-4 Creating/Editing a Firewall Rule
  160
- Table 13-3 Creating/Editing a Firewall Rule
  160
- Source and Destination Addresses
  161
- Timeout
  162
- Figure 13-5 Adding/Editing Source and Destination Addresses
  162
- Table 13-4 Adding/Editing Source and Destination Addresses
  162
- Figure 13-6 Timeout
  163
- Table 13-5 Timeout
  163
Chapter 14 Customized Services

165
Chapter 15 Content Filtering Screens

171
- Content Filtering Overview
  171
- Configuring Keyword Blocking
  171
- Figure 15-1 Content Filter: Keyword
  172
- Table 15-1 Content Filter: Keyword
  172
- Configuring the Schedule
  173
- Figure 15-2 Content Filter: Schedule
  173
- Configuring Trusted Computers
  174
- Figure 15-3 Content Filter: Trusted
  174
- Table 15-2 Content Filter: Schedule
  174
- Table 15-3 Content Filter: Trusted
  174
- Vpn/Ipsec
  177
Chapter 16 Introduction to Ipsec

179
- VPN Overview
  179
- Security Association
  179
- Figure 16-1 Encryption and Decryption
  180
- Ipsec Architecture
  181
- Figure 16-2 VPN Application
  181
- Figure 16-3 Ipsec Architecture
  182
- Encapsulation
  183
- Ipsec and NAT
  183
- Figure 16-4 Transport and Tunnel Mode Ipsec Encapsulation
  183
- Table 16-1 VPN and NAT
  184
Chapter 17 VPN Screens

185
- Vpn/Ipsec Overview
  185
- Ipsec Algorithms
  185
- My IP Address
  186
- Secure Gateway Address
  186
- Table 17-1 AH and ESP
  186
- VPN Summary Screen
  187
- Figure 17-1 Ipsec Summary Fields
  187
- Figure 17-2 VPN Summary
  188
- Table 17-2 VPN Summary
  188
- Keep Alive
  189
- ID Type and Content
  189
- Table 17-3 Local ID Type and Content Fields
  190
- Table 17-4 Peer ID Type and Content Fields
  190
- Table 17-5 Matching ID Type and Content Configuration Example
  190
- Pre-Shared Key
  191
- Editing VPN Policies
  191
- Table 17-6 Mismatching ID Type and Content Configuration Example
  191
- Figure 17-3 VPN IKE
  192
- Table 17-7 VPN IKE
  193
- IKE Phases
  197
- Figure 17-4 Two Phases to Set up the Ipsec SA
  197
- Configuring Advanced IKE Settings
  198
- Figure 17-5 VPN IKE: Advanced
  199
- Table 17-8 VPN IKE: Advanced
  199
- Manual Key Setup
  202
- Configuring Manual Key
  203
- Figure 17-6 Manual Setup
  203
- Table 17-9 VPN Manual Setup
  204
- Viewing SA Monitor
  206
- Figure 17-7 SA Monitor
  207
- Table 17-10 SA Monitor
  207
- Configuring Global Setting
  208
- Figure 17-8 Global Setting
  208
- Table 17-11 Global Setting
  208
- Telecommuter Vpn/Ipsec Examples
  209
- Table 17-12 Telecommuter and Headquarters Configuration Example
  209
- Figure 17-9 Telecommuters Sharing One VPN Rule Example
  210
- VPN and Remote Management
  211
- Figure 17-10 Telecommuters Using Unique VPN Rules Example
  211
- Remote Management, Upnp and Logs
  213
Chapter 18 Remote Management Configuration

215
- Remote Management Overview
  215
- Telnet
  216
- Ftp
  216
- Figure 18-1 Telnet Configuration on a TCP/IP Network
  216
- Web
  217
- Configuring Remote Management
  217
- Figure 18-2 Remote Management
  217
Chapter 19 Universal Plug-And-Play (Upnp)

219
- Introducing Universal Plug and Play
  219
- Upnp and Zyxel
  220
- Figure 19-1 Configuring Upnp
  220
- Table 19-1 Configuring Upnp
  220
- Installing Upnp in Windows Example
  221
- Using Upnp in Windows XP Example
  223
Chapter 20 Logs Screens

227
- Logs Overview
  227
- Configuring Log Settings
  227
- Figure 20-1 Log Settings
  228
- Table 20-1 Log Settings
  229
- Displaying the Logs
  230
- Figure 20-2 View Logs
  230
- Table 20-2 View Logs
  230
- SMTP Error Messages
  231
- Table 20-3 SMTP Error Messages
  231
- Figure 20-3 E-Mail Log Example
  232
- Maintenance
  233
Chapter 21 Maintenance

235
- Maintenance Overview
  235
- System Status Screen
  235
- Figure 21-1 System Status
  236
- Table 21-1 System Status
  236
- Figure 21-2 System Status: Show Statistics
  238
- Table 21-2 System Status: Show Statistics
  238
- DHCP Table Screen
  240
- Wireless Screens
  240
- Figure 21-3 DHCP Table
  240
- Table 21-3 DHCP Table
  240
- Figure 21-4 Association List
  241
- Table 21-4 Association List
  241
- Diagnostic Screens
  242
- Figure 21-5 Channel Usage Table
  242
- Table 21-5 Channel Usage Table
  242
- Figure 21-6 Diagnostic General
  243
- Table 21-6 Diagnostic General
  243
- Figure 21-7 Diagnostic DSL Line
  244
- Table 21-7 Diagnostic DSL Line
  244
- Firmware Screen
  245
- Figure 21-8 Firmware Upgrade
  246
- Table 21-8 Firmware Upgrade
  246
- Figure 21-9 Network Temporarily Disconnected
  247
- Figure 21-10 Error Message
  247
- SMT General Configuration
  249
Chapter 22 Introducing the SMT

251
- SMT Introduction
  251
- Figure 22-1 Login Screen
  252
- Navigating the SMT Interface
  253
- Figure 5-2 LAN
  253
- Figure 6-3 Wireless
  253
- Figure 22-2 Prestige 652HW-31 SMT Menu Overview
  253
- Table 5-1 LAN
  253
- Table 6-1 Wireless
  253
- Table 18-1 Remote Management
  253
- Table 22-1 Main Menu Commands
  254
- Figure 22-3 SMT Main Menu
  255
- Table 22-2 Main Menu Summary
  255
- Changing the System Password
  256
- Figure 22-4 Menu 23 System Password
  256
Chapter 23 Menu 1 General Setup

257
- General Setup
  257
- Procedure to Configure Menu 1
  257
- Figure 23-1 Menu 1 General Setup
  258
- Table 23-1 Menu 1 General Setup
  258
- Figure 23-2 Menu 1.1 Configure Dynamic DNS
  259
- Table 23-2 Menu 1.1 Configure Dynamic DNS
  259
Chapter 24 Menu 2 WAN Backup Setup

261
Chapter 25 Menu 3 LAN Setup

277
Chapter 26 Wireless LAN Setup

281
Chapter 27 Internet Access

285
- Internet Access Overview
  285
- IP Policies
  285
- IP Alias
  285
- IP Alias Setup
  286
- Figure 27-1 Physical Network
  286
- Figure 27-2 Partitioned Logical Networks
  286
- Figure 27-3 Menu 3.2 TCP/IP and DHCP Setup
  287
- Figure 27-4 Menu 3.2.1 IP Alias Setup
  287
- Route IP Setup
  288
- Figure 27-5 Menu 1 General Setup
  288
- Table 27-1 Menu 3.2.1 IP Alias Setup
  288
- Internet Access Configuration
  289
- Figure 27-6 Menu 4 Internet Access Setup
  289
- Table 27-2 Menu 4 Internet Access Setup
  289
Chapter 28 Remote Node Configuration

293
Chapter 29 Static Route Setup

305
Chapter 30 Bridging Setup

309
Chapter 31 Network Address Translation (NAT)

313
Chapter 32 Enabling the Firewall

331
- Remote Management and the Firewall
  331
- Access Methods
  331
- Enabling the Firewall
  331
- Figure 32-1 Menu 21.2 Firewall Setup
  332
- SMT Advanced Management
  333
Chapter 33 Filter Configuration

335
Chapter 34 SNMP Configuration

355
- About SNMP
  355
- Figure 34-1 SNMP Management Model
  355
- Supported Mibs
  356
- SNMP Configuration
  356
- Figure 34-2 Menu 22 SNMP Configuration
  357
- Table 34-1 Menu 22 SNMP Configuration
  357
- SNMP Traps
  358
- Table 34-2 SNMP Traps
  358
- Table 34-3 Ports and Permanent Virtual Circuits
  358
Chapter 35 System Security

359
Chapter 36 System Information and Diagnosis

365
Chapter 37 Firmware and Configuration File Maintenance

375
Chapter 38 System Maintenance

391
Chapter 39 Remote Management

397
- Remote Management Overview
  397
- Remote Management
  397
- Figure 39-1 Menu 24.11 Remote Management Control
  398
- Table 39-1 Menu 24.11 Remote Management Control
  398
- Remote Management and NAT
  399
- System Timeout
  399
Chapter 40 IP Policy Routing

401
Chapter 41 Call Scheduling

411
Chapter 42 Vpn/Ipsec Setup

417
- Vpn/Ipsec Overview
  417
- Ipsec Summary Screen
  418
- Ipsec Setup
  418
- Ipsec Setup
  422
- IKE Setup
  427
- Manual Setup
  429
- Active Protocol
  429
Chapter 43 SA Monitor

433
- SA Monitor Overview
  433
- Using SA Monitor
  433
Chapter 44 Internal SPTGEN

435
- Internal SPTGEN Overview
  435
- The Configuration Text File Format
  435
- Internal SPTGEN FTP Download Example
  437
- Internal SPTGEN FTP Upload Example
  438
- Appendices and Index
  439
Appendix A Troubleshooting

441
Appendix B IP Subnetting

448
- Chart B-2 Allowed IP Address Range by Class
  448
- Chart B-3 "Natural" Masks
  448
  - Chart B-4 Alternative Subnet Mask Notation
    449
  - Chart B-5 Subnet 1
    450
  - Chart B-6 Subnet 2
    450
  - Chart B-7 Subnet 1
    451
  - Chart B-8 Subnet 2
    451
  - Chart B-9 Subnet 3
    451
  - Chart B-10 Subnet 4
    452
  - Chart B-11 Eight Subnets
    452
  - Chart B-12 Class C Subnet Planning
    453
  - Chart B-13 Class B Subnet Planning
    453
- Infrastructure Wireless Lan Configuration
  456
Appendix C Wireless LAN and IEEE 802.11

459
Appendix Dpppoe

459
Appendix E Virtual Circuit Topology

461
Appendix F Power Adaptor Specifications

463
Appendix G Example Internal SPTGEN Screens

465
- Command Examples
  490
Appendix H Setting up Your Computer's IP Address

491
- Installing Components
  492
- Verifying Settings
  494
Appendix I Splitters and Microfilters

503
Appendix J Log Descriptions

505
- Chart J-1 System Maintenance Logs
  505
- Chart J-2 Upnp Logs
  506
- Chart J-3 Content Filtering Logs
  506
- Chart J-4 Attack Logs
  507
- Chart J-5 Access Logs
  508
- Chart J-6 TCP Reset Logs
  509
- Chart J-7 ICMP Notes
  509
- Chart J-8 Sample IKE Key Exchange Logs
  512
- Chart J-9 Sample Ipsec Logs During Packet Transmission
  514
- Chart J-10 RFC-2408 ISAKMP Payload Types
  515
Appendix K Index

517

ZyXEL Communications Categories

Gateway

Network Router

Switch Wireless Router Adapter

More ZyXEL Communications Manuals

ZyXEL Communications Prestige 652R-11 Manuals

ZyXEL Communications Prestige 652R-11 User Manual (523 pages)

Table of Contents

Chapter 1 Getting to Know Your Prestige

Chapter 2 Introducing the Web Configurator

Chapter 3 Wizard Setup

Chapter 4 Password Setup

Chapter 5 LAN Setup

Chapter 6 Wireless LAN Setup

Chapter 7 WAN Setup

Chapter 8 Network Address Translation (NAT) Screens

Chapter 9 Dynamic DNS Setup

Chapter 10 Time Zone

Chapter 11 Firewalls

Chapter 12 Firewall Configuration

Chapter 13 Creating Custom Rules

Chapter 14 Customized Services

Chapter 15 Content Filtering Screens

Chapter 16 Introduction to Ipsec

Chapter 17 VPN Screens

Chapter 18 Remote Management Configuration

Chapter 19 Universal Plug-And-Play (Upnp)

Chapter 20 Logs Screens

Chapter 21 Maintenance

Chapter 22 Introducing the SMT

Chapter 23 Menu 1 General Setup

Chapter 24 Menu 2 WAN Backup Setup

Chapter 25 Menu 3 LAN Setup

Chapter 26 Wireless LAN Setup

Chapter 27 Internet Access

Chapter 28 Remote Node Configuration

Chapter 29 Static Route Setup

Chapter 30 Bridging Setup

Chapter 31 Network Address Translation (NAT)

Chapter 32 Enabling the Firewall

Chapter 33 Filter Configuration

Chapter 34 SNMP Configuration

Chapter 35 System Security

Chapter 36 System Information and Diagnosis

Chapter 37 Firmware and Configuration File Maintenance

Chapter 38 System Maintenance

Chapter 39 Remote Management

Chapter 40 IP Policy Routing

Chapter 41 Call Scheduling

Chapter 42 Vpn/Ipsec Setup

Chapter 43 SA Monitor

Chapter 44 Internal SPTGEN

Appendix A Troubleshooting

Appendix B IP Subnetting

Appendix C Wireless LAN and IEEE 802.11

Appendix Dpppoe

Appendix E Virtual Circuit Topology

Appendix F Power Adaptor Specifications

Appendix G Example Internal SPTGEN Screens

Appendix H Setting up Your Computer's IP Address

Appendix I Splitters and Microfilters

Appendix J Log Descriptions

Appendix K Index

Related Products

ZyXEL Communications Categories