ZyXEL Communications PRESTIGE 653HX Manuals

Manuals and User Guides for ZyXEL Communications PRESTIGE 653HX. We have 1 ZyXEL Communications PRESTIGE 653HX manual available for free PDF download: User Manual

ZyXEL Communications PRESTIGE 653HX User Manual (562 pages)

ADSL Security Gateway with IEEE802.11g and ISDN Backup

Brand: ZyXEL Communications | Category: Gateway | Size: 18.58 MB

Copyright
2
Safety Warnings
4
Zyxel Limited Warranty
4
Customer Support
5
Table of Contents
7
List of Figures
15
List of Charts
31
Preface
33
- Syntax Conventions
  34
What Is DSL
35
Getting Started
36
Chapter 1 Getting to Know Your Prestige

37
- Introducing the Prestige 653HWI
  37
- Features of the Prestige
  37
- Ipsec Vpn Capability
  37
- Traffic Redirect
  38
- Isdn Interface
  39
- Dynamic Dns Support
  41
- Lan/Dmz Interface
  41
- Protocol Support
  42
- Networking Compatibility
  42
- Network Management
  43
- Applications for the Prestige
  44
- Figure 1-1 Prestige Internet Access Application
  44
- Figure 1-2 Firewall Application
  45
- Vpn Application
  45
- Figure 1-3 VPN Application
  46
- Figure 1-4 Prestige LAN-To-LAN Application
  47
Chapter 2 Introducing the Web Configurator

49
Chapter 3 Wizard Setup

53
Chapter 4 Password Setup

69
- Password Overview
  69
- Configuring Password
  69
- Figure 4-1 Password
  69
- Table 4-1 Password
  69
Chapter 5 LAN Setup

71
- LAN Overview
  71
- DNS Server Address
  71
- Figure 5-1 LAN and WAN IP Addresses
  71
- DNS Server Address Assignment
  72
- Lan Tcp/Ip
  72
- Factory Lan Defaults
  72
- Rip Setup
  73
- Configuring LAN
  74
- Table 5-1 LAN
  75
Chapter 6 Wireless LAN Setup

77
- Wireless LAN Overview
  77
- Ess ID
  77
- Figure 6-1 RTS Threshold
  78
- Levels of Security
  79
- Figure 6-2 Prestige Wireless Security Levels
  79
- Data Encryption with WEP
  80
- Figure 6-3 Wireless
  80
- Table 6-1 Wireless
  81
- Configuring MAC Filter
  82
- Figure 6-4 MAC Address Filter
  83
- Network Authentication
  84
- Configuring 802.1X
  86
- Figure 6-5 EAP Authentication
  86
- Figure 6-6 802.1X
  86
- Table 6-3 802.1X
  87
- Configuring Local User Authentication
  88
- Figure 6-7 Local User Database
  89
- Configuring RADIUS
  90
- Figure 6-8 RADIUS
  90
- Table 6-4 Local User Database
  90
- Table 6-5 RADIUS
  91
Chapter 7 WAN Setup

93
- WAN Overview
  93
- Isdn
  93
- Netcapi
  93
- Metric
  94
- Pppoe Encapsulation
  94
- Traffic Shaping
  95
- Configuring WAN Functions
  96
- Figure 7-1 Example of Traffic Shaping
  96
- Figure 7-2 WAN Functions
  96
- Table 7-1 WAN Functions
  97
- Configuring WAN DSL Setup
  98
- Figure 7-3 WAN DSL Setup
  98
- Table 7-2 WAN DSL Setup
  99
- ISDN Connection Setup
  102
- Figure 7-4 ISDN Connection Setup
  102
- Table 7-3 ISDN Connection Setup
  103
- ISDN Dial in Setup
  105
- Figure 7-5 ISDN Dial in Setup
  105
- Configuring Netcapi
  107
- Figure 7-6 Configuring Netcapi
  107
- Table 7-5 Configuring Netcapi
  108
- Figure 7-7 Configuration Example
  109
- WAN Backup
  110
- Traffic Redirect on the LAN
  110
- Traffic Redirect on the WAN
  110
- Figure 7-8 Traffic Redirect Setup Example
  110
- Figure 7-9 Traffic Redirect WAN Setup
  111
- Figure 7-10 Traffic Redirect LAN Setup
  112
- Configuring WAN Backup
  113
  - Figure 7-11 WAN Backup Setup
    113
  - Metric
    114
  - Table 7-6 WAN Backup Setup
    114
- NAT, Dynamic DNS and Time Zone
  116
Chapter 8 Network Address Translation (NAT) Screens

117
- NAT Overview
  117
- Table 8-1 NAT Definitions
  117
- What Nat Does
  118
- How Nat Works
  118
- Figure 8-1 How NAT Works
  119
- Figure 8-2 NAT Application with IP Alias
  120
- SUA (Single User Account) Versus NAT
  121
- Table 8-2 NAT Mapping Types
  121
- SUA Server
  122
- Table 8-3 Services and Port Numbers
  123
- Selecting the NAT Mode
  124
- Figure 8-3 Multiple Servers Behind NAT Example
  124
- Figure 8-4 NAT Mode
  124
- Configuring SUA Server
  125
- Table 8-4 NAT Mode
  125
- Figure 8-5 Edit SUA/NAT Server Set
  126
- Table 8-5 Edit SUA/NAT Server Set
  126
- Configuring Address Mapping
  127
Chapter 9 Dynamic DNS Setup

131
- Dynamic DNS
  131
- Configuring Dynamic DNS
  131
- Figure 9-1 DDNS
  132
- Table 9-1 DDNS
  132
Chapter 10 Time Zone

133
- Configuring Time Zone
  133
- Figure 10-1 Time/Date
  133
- Table 10-1 Time/Date
  134
- Firewall and Content Filters
  136
Chapter 11 Firewalls

137
- Firewall Overview
  137
- Types of Firewalls
  137
- Introduction to Zyxel's Firewall
  138
- Denial of Service
  139
- Figure 11-1 Prestige Firewall Application
  139
- Table 11-1 Common IP Ports
  140
- Figure 11-2 Three-Way Handshake
  141
- Figure 11-3 SYN Flood
  141
- Figure 11-4 Smurf Attack
  142
- Table 11-2 ICMP Commands that Trigger Alerts
  142
- Stateful Inspection
  143
  - Table 11-3 Legal Netbios Commands
    143
  - Table 11-4 Legal SMTP Commands
    143
  - Figure 11-5 Stateful Inspection
    144
  - Stateful Inspection and the Prestige
    145
  - Tcp Security
    146
  - Udp/Icmp Security
    146
- Guidelines for Enhancing Security with Your Firewall
  147
- Upper Layer Protocols
  147
- Packet Filtering Vs Firewall
  148
  - When to Use Filtering
    149
  - When to Use the Firewall
    149
Chapter 12 Firewall Configuration

151
- Remote Management and the Firewall
  151
- Enabling the Firewall
  151
- Figure 12-1 Enabling the Firewall
  151
- Attack Alert
  152
  - Threshold Values
    152
  - Tcp Maximum Incomplete and Blocking Time
    153
- Figure 12-2 Attack Alert
  154
- Table 12-1 Attack Alert
  154
Chapter 13 Creating Custom Rules

157
- Rules Overview
  157
- Rule Logic Overview
  157
- Rule Checklist
  157
- Security Ramifications
  158
- Key Fields for Configuring Rules
  158
- Connection Direction
  159
- Source Address
  159
- Figure 13-1 LAN to WAN Traffic
  160
- Logs
  161
- Rule Summary
  161
- Figure 13-2 WAN to LAN Traffic
  161
- Figure 13-3 Firewall Rules Summary: First Screen
  162
- Table 13-1 Firewall Rules Summary: First Screen
  162
- Predefined Services
  163
- Table 13-2 Predefined Services
  164
- Creating/Editing Firewall Rules
  166
- Figure 13-4 Creating/Editing a Firewall Rule
  167
- Table 13-3 Creating/Editing a Firewall Rule
  167
- Source and Destination Addresses
  168
- Timeout
  169
- Figure 13-5 Adding/Editing Source and Destination Addresses
  169
- Table 13-4 Adding/Editing Source and Destination Addresses
  169
- Figure 13-6 Timeout
  170
- Table 13-5 Timeout
  170
Chapter 14 Customized Services

173
Chapter 15 Content Filtering Screens

179
- Content Filtering Overview
  179
- Configuring Keyword Blocking
  179
- Figure 15-1 Content Filter: Keyword
  180
- Table 15-1 Content Filter: Keyword
  180
- Configuring the Schedule
  181
- Figure 15-2 Content Filter: Schedule
  181
- Configuring Trusted Computers
  182
- Figure 15-3 Content Filter: Trusted
  182
- Table 15-2 Content Filter: Schedule
  182
- Table 15-3 Content Filter: Trusted
  182
- Vpn/Ipsec
  184
Chapter 16 Introduction to Ipsec

185
- VPN Overview
  185
- Security Association
  185
- Figure 16-1 Encryption and Decryption
  186
- Vpn Applications
  186
- Figure 16-2 VPN Application
  187
- Ipsec Architecture
  188
- Figure 16-3 Ipsec Architecture
  188
- Key Management
  188
- Encapsulation
  189
- Ipsec and NAT
  189
  - Figure 16-4 Transport and Tunnel Mode Ipsec Encapsulation
    189
  - Transport Mode
    189
  - Tunnel Mode
    189
- Table 16-1 VPN and NAT
  190
Chapter 17 VPN Screens

191
- Vpn/Ipsec Overview
  191
- Ipsec Algorithms
  191
- My IP Address
  192
- Secure Gateway Address
  192
- Table 17-1 AH and ESP
  192
- VPN Summary Screen
  193
- Figure 17-1 Ipsec Summary Fields
  193
- Figure 17-2 VPN Summary
  194
- Table 17-2 VPN Summary
  194
- Keep Alive
  195
- ID Type and Content
  195
- Table 17-3 Local ID Type and Content Fields
  196
- Table 17-4 Peer ID Type and Content Fields
  196
- Table 17-5 Matching ID Type and Content Configuration Example
  196
- Pre-Shared Key
  197
- Editing VPN Policies
  197
- Table 17-6 Mismatching ID Type and Content Configuration Example
  197
- Figure 17-3 VPN IKE
  198
- Table 17-7 VPN IKE
  199
- IKE Phases
  203
- Figure 17-4 Two Phases to Set up the Ipsec SA
  203
- Configuring Advanced IKE Settings
  204
- Figure 17-5 VPN IKE: Advanced
  205
- Table 17-8 VPN IKE: Advanced
  205
- Manual Key Setup
  208
- Configuring Manual Key
  209
- Figure 17-6 Manual Setup
  209
- Viewing SA Monitor
  212
- Figure 17-7 SA Monitor
  213
- Table 17-10 SA Monitor
  213
- Configuring Global Setting
  214
- Figure 17-8 Global Setting
  214
- Table 17-11 Global Setting
  214
- Telecommuter Vpn/Ipsec Examples
  215
- Table 17-12 Telecommuter and Headquarters Configuration Example
  215
- Figure 17-9 Telecommuters Sharing One VPN Rule Example
  216
- VPN and Remote Management
  217
- Figure 17-10 Telecommuters Using Unique VPN Rules Example
  217
- Remote Management, Upnp and Logs
  220
Chapter 18 Remote Management Configuration

221
- Remote Management Overview
  221
- Telnet
  222
- Figure 18-1 Telnet Configuration on a TCP/IP Network
  222
- Ftp
  223
- Web
  223
- Configuring Remote Management
  223
- Figure 18-2 Remote Management
  223
Chapter 19 Universal Plug-And-Play (Upnp)

225
- Introducing Universal Plug and Play
  225
- Upnp and Zyxel
  226
- Figure 19-1 Configuring Upnp
  226
- Table 19-1 Configuring Upnp
  226
- Installing Upnp in Windows Example
  227
- Using Upnp in Windows XP Example
  229
Chapter 20 Logs Screens

233
- Logs Overview
  233
- Configuring Log Settings
  233
- Figure 20-1 Log Settings
  234
- Table 20-1 Log Settings
  235
- Displaying the Logs
  236
- Figure 20-2 View Logs
  236
- Table 20-2 View Logs
  236
- SMTP Error Messages
  237
- Table 20-3 SMTP Error Messages
  237
- Figure 20-3 E-Mail Log Example
  238
- Bandwidth Management
  240
Chapter 21 Bandwidth Management

241
Chapter 22 Maintenance

261
- Maintenance Overview
  261
- System Status Screen
  261
- Figure 22-1 System Status
  262
- Table 22-1 System Status
  263
- Figure 22-2 System Status: Show Statistics
  264
- Table 22-2 System Status: Show Statistics
  265
- DHCP Table Screen
  266
- Figure 22-3 DHCP Table
  266
- Table 22-3 DHCP Table
  266
- Wireless Screens
  267
- Figure 22-4 Association List
  267
- Table 22-4 Association List
  267
- Figure 22-5 Channel Usage Table
  268
- Diagnostic Screens
  269
- Table 22-5 Channel Usage Table
  269
- Figure 22-6 Diagnostic General
  270
- Table 22-6 Diagnostic General
  270
- Figure 22-7 Diagnostic DSL Line
  271
- Table 22-7 Diagnostic DSL Line
  271
- Figure 22-8 Diagnostic ISDN Line
  273
- Table 22-8 Diagnostic ISDN Line
  273
- Firmware Screen
  274
- Figure 22-9 Firmware Upgrade
  275
- Table 22-9 Firmware Upgrade
  275
- Figure 22-10 Network Temporarily Disconnected
  276
- Figure 22-11 Error Message
  276
- SMT General Configuration
  277
Chapter 23 Introducing the SMT

279
- SMT Introduction
  279
- Figure 23-1 Login Screen
  280
- Navigating the SMT Interface
  281
- Figure 23-2 Prestige 653 SMT Menu Overview
  281
- Table 23-1 Main Menu Commands
  282
- Figure 23-3 SMT Main Menu
  283
- Table 23-2 Main Menu Summary
  283
- Changing the System Password
  284
- Figure 23-4 Menu 23 System Password
  284
Chapter 24 Menu 1 General Setup

285
- General Setup
  285
- Procedure to Configure Menu 1
  285
- Figure 24-1 Menu 1 General Setup
  286
- Table 24-1 Menu 1 General Setup
  286
- Figure 24-2 Menu 1.1 Configure Dynamic DNS
  287
- Table 24-2 Menu 1.1 Configure Dynamic DNS
  287
Chapter 25 Menu 2 WAN Backup Setup

289
Chapter 26 Menu 3 LAN Setup

309
Chapter 27 Wireless LAN Setup

313
Chapter 28 Internet Access

317
- Internet Access Overview
  317
- IP Policies
  317
- IP Alias
  317
- IP Alias Setup
  318
- Figure 28-1 Physical Network
  318
- Figure 28-2 Partitioned Logical Networks
  318
- Figure 28-3 Menu 3.2 TCP/IP and DHCP Setup
  319
- Figure 28-4 Menu 3.2.1 IP Alias Setup
  319
- Route IP Setup
  320
- Figure 28-5 Menu 1 General Setup
  320
- Table 28-1 Menu 3.2.1 IP Alias Setup
  320
- Internet Access Configuration
  321
- Figure 28-6 Menu 4 Internet Access Setup
  321
- Table 28-2 Menu 4 Internet Access Setup
  321
Chapter 29 Remote Node Configuration

323
Chapter 30 Static Route Setup

335
Chapter 31 Bridging Setup

339
Chapter 32 Network Address Translation (NAT)

343
Chapter 33 Enabling the Firewall

361
- Remote Management and the Firewall
  361
- Access Methods
  361
- Enabling the Firewall
  361
- Figure 33-1 Menu 21.2 Firewall Setup
  362
- SMT Advanced Management
  364
Chapter 34 Filter Configuration

365
Chapter 35 SNMP Configuration

385
- About SNMP
  385
- Figure 35-1 SNMP Management Model
  385
- Supported Mibs
  386
- SNMP Configuration
  386
- Figure 35-2 Menu 22 SNMP Configuration
  387
- Table 35-1 Menu 22 SNMP Configuration
  387
- SNMP Traps
  388
- Table 35-2 SNMP Traps
  388
- Table 35-3 Ports and Permanent Virtual Circuits
  388
Chapter 36 System Security

389
Chapter 37 System Information and Diagnosis

395
Chapter 38 Firmware and Configuration File Maintenance

405
Chapter 39 System Maintenance

421
Chapter 40 Remote Management

427
- Remote Management Overview
  427
- Remote Management
  427
- Figure 5-2 LAN
  428
- Figure 40-1 Menu 24.11 Remote Management Control
  428
- Table 18-1 Remote Management
  428
- Table 40-1 Menu 24.11 Remote Management Control
  428
- Remote Management and NAT
  429
- System Timeout
  429
Chapter 41 IP Policy Routing

431
Chapter 42 Call Scheduling

441
Chapter 43 Vpn/Ipsec Setup

447
- Vpn/Ipsec Overview
  447
- Figure 43-1 VPN SMT Menu Tree
  447
- Ipsec Summary Screen
  448
- Figure 43-2 Menu 27 Vpn/Ipsec Setup
  448
- Figure 43-3 Menu 27.1 Ipsec Summary
  448
- Table 43-1 Menu 27.1 Ipsec Summary
  449
- Ipsec Setup
  452
- Figure 43-4 Menu 27.1.1 Ipsec Setup
  452
- Table 43-2 Menu 27.1.1 Ipsec Setup
  452
- IKE Setup
  457
- Table 43-3 Menu 27.1.1.1 IKE Setup
  458
- Manual Setup
  459
- Table 43-4 Active Protocol: Encapsulation and Security Protocol
  459
- Figure 43-6 Menu 27.1.1.2 Manual Setup
  460
- Table 43-5 Menu 27.1.1.2 Manual Setup
  460
Chapter 44 SA Monitor

463
- SA Monitor Overview
  463
- Using SA Monitor
  463
- Figure 44-1 Menu 27.2 SA Monitor
  463
Chapter 45 Internal SPTGEN

465
Appendix A Troubleshooting

471
- Problems with Internet Access
  473
Appendix B IP Subnetting

478
- Subnet Masks
  478
- Infrastructure Wireless Lan Configuration
  486
Appendix C Wireless LAN and IEEE 802.11

489
Appendix D Antenna Selection and Positioning Recommendation

489
- Antenna Characteristics
  489
- Antenna Gain
  489
- Radiation Pattern
  489
  - Connector Type
    490
  - Positioning Antennas
    490
Appendix Epppoe

491
Appendix F Virtual Circuit Topology

495
Appendix G Power Adaptor Specifications

497
Appendix H Example Internal SPTGEN Screens

499
- Command Examples
  524
Appendix I Setting up Your Computer's IP Address

525
- Installing Components
  526
- Verifying Settings
  528
Appendix J Splitters and Microfilters

537
Appendix K Log Descriptions

541
Appendix L Index

553

ZyXEL Communications Categories

Gateway

Network Router

Switch Wireless Router Adapter

More ZyXEL Communications Manuals

ZyXEL Communications PRESTIGE 653HX Manuals

ZyXEL Communications PRESTIGE 653HX User Manual (562 pages)

Table of Contents

Chapter 1 Getting to Know Your Prestige

Chapter 2 Introducing the Web Configurator

Chapter 3 Wizard Setup

Chapter 4 Password Setup

Chapter 5 LAN Setup

Chapter 6 Wireless LAN Setup

Chapter 7 WAN Setup

Chapter 8 Network Address Translation (NAT) Screens

Chapter 9 Dynamic DNS Setup

Chapter 10 Time Zone

Chapter 11 Firewalls

Chapter 12 Firewall Configuration

Chapter 13 Creating Custom Rules

Chapter 14 Customized Services

Chapter 15 Content Filtering Screens

Chapter 16 Introduction to Ipsec

Chapter 17 VPN Screens

Chapter 18 Remote Management Configuration

Chapter 19 Universal Plug-And-Play (Upnp)

Chapter 20 Logs Screens

Chapter 21 Bandwidth Management

Chapter 22 Maintenance

Chapter 23 Introducing the SMT

Chapter 24 Menu 1 General Setup

Chapter 25 Menu 2 WAN Backup Setup

Chapter 26 Menu 3 LAN Setup

Chapter 27 Wireless LAN Setup

Chapter 28 Internet Access

Chapter 29 Remote Node Configuration

Chapter 30 Static Route Setup

Chapter 31 Bridging Setup

Chapter 32 Network Address Translation (NAT)

Chapter 33 Enabling the Firewall

Chapter 34 Filter Configuration

Chapter 35 SNMP Configuration

Chapter 36 System Security

Chapter 37 System Information and Diagnosis

Chapter 38 Firmware and Configuration File Maintenance

Chapter 39 System Maintenance

Chapter 40 Remote Management

Chapter 41 IP Policy Routing

Chapter 42 Call Scheduling

Chapter 43 Vpn/Ipsec Setup

Chapter 44 SA Monitor

Chapter 45 Internal SPTGEN

Appendix A Troubleshooting

Appendix B IP Subnetting

Appendix C Wireless LAN and IEEE 802.11

Appendix D Antenna Selection and Positioning Recommendation

Appendix Epppoe

Appendix F Virtual Circuit Topology

Appendix G Power Adaptor Specifications

Appendix H Example Internal SPTGEN Screens

Appendix I Setting up Your Computer's IP Address

Appendix J Splitters and Microfilters

Appendix K Log Descriptions

Appendix L Index

Related Products

ZyXEL Communications Categories