Why Can't I Upload The Firmware And Configuration File Using Ftp Over Wan; Log And Alert; When Does The P-660 Generate The Firewall Log - ZyXEL Communications P-660R-T1 Support Notes

1. When the firewall is turned on, all connections from WAN to LAN are
blocked by the default ACL rule. To enable Telnet from WAN, you must turn
the firewall off (Menu 21.2) or create a firewall rule to allow Telnet
connection from WAN. The WAN-to-LAN ACL summary will look like as
shown below.
Source IP= Telnet host
Destination IP= router' WAN IP
Service= TCP/23
Action=Forward
2. You have disabled Telnet service in Menu 24.11.
3. Telnet service is enabled but your host IP is not the secured host entered in
Menu 24.11. In this case, the error message 'Client IP is not allowed!' is
appeared on the Telnet screen.
4. The default filter rule 3 (Telnet_FTP_WAN) is applied in the Input Protocol
field in menu 11.5.
5. The console port is in use.

5. Why can't I upload the firmware and configuration file using FTP over WAN?

1. When the firewall is turned on, all connections from WAN to LAN are
blocked by the default ACL rule. To enable FTP from WAN, you must turn
the firewall off (Menu 21.2) or create a firewall rule to allow FTP connection
from WAN. The WAN-to-LAN ACL summary will look like as shown below.
Source IP= FTP host
Destination IP= P-660's WAN IP
Service= FTP TCP/21, TCP/20
Action=Forward
2. You have disabled FTP service in Menu 24.11.
3. The default filter rule 3 (Telnet_FTP_WAN) is applied in the Input Protocol
field in menu 11.5.

Log and Alert

. When does the P-660 generate the firewall log?

1
The P-660 generates the log immediately when the packet match, doesn't match (or
both) a firewall rule. The log for Default Permit (LAN to WAN, WAN to LAN) is
generated automatically. To generate the log for custom rules, the Log option in Web
Configurator must be set to Not Match, Match, or Both. The Reason column for the
All contents copyright © 2005 ZyXEL Communications Corporation.
P-660 series Support Notes
22