The Cwmp Screen - ZyXEL Communications P-793H v3 User Manual

The following table describes the labels in this screen.
Table 79 Advanced > Remote MGMT > ICMP
LABEL
ICMP
Respond to Ping
on
Do not respond
to requests for
unauthorized
services
Apply
Cancel

19.8 The CWMP Screen

TR-069 defines how Customer Premise Equipment (CPE), for example your P-79X, can be managed
over the WAN by an Auto Configuration Server (ACS). TR-069 is based on sending Remote
Procedure Calls (RPCs) between an ACS and a client device. RPCs are sent in Extensible Markup
Language (XML) format over HTTP or HTTPS.
An administrator can use an ACS to remotely set up the P-79X, modify settings, perform firmware
upgrades as well as monitor and diagnose the P-79X. You have to enable the device to be managed
by the ACS and specify the ACS IP address or domain name and username and password.
Click Advanced > Remote MGMT > CWMP to open the following screen. Use this screen to
configure your P-79X to be managed by an ACS.
Chapter 19 Remote Management
DESCRIPTION
Internet Control Message Protocol is a message control and error-reporting
protocol between a host server and a gateway to the Internet. ICMP uses
Internet Protocol (IP) datagrams, but the messages are processed by the TCP/IP
software and directly apparent to the application user.
The P-79X will not respond to any incoming Ping requests when Disable is
selected. Select LAN to reply to incoming LAN Ping requests. Select WAN to
reply to incoming WAN Ping requests. Otherwise select LAN & WAN to reply to
both incoming LAN and WAN Ping requests.
Select this option to prevent hackers from finding the P-79X by probing for
unused ports. If you select this option, the P-79X will not respond to port
request(s) for unused ports, thus leaving the unused ports and the P-79X
unseen. If this option is not selected, the P-79X will reply with an ICMP port
unreachable packet for a port probe on its unused UDP ports and a TCP reset
packet for a port probe on its unused TCP ports.
Note that the probing packets must first traverse the P-79X's firewall rule checks
before reaching this anti-probing mechanism. Therefore if a firewall rule stops a
probing packet, the P-79X reacts based on the firewall rule to either send a TCP
reset packet for a blocked TCP packet (or an ICMP port-unreachable packet for a
blocked UDP packets) or just drop the packets without sending a response
packet.
Click this to save your changes.
Click this to restore your previously saved settings.
P-79X Series User's Guide
190