ZyXEL Communications 70 Series Appliance Manuals

Manuals and User Guides for ZyXEL Communications 70 Series Appliance. We have 1 ZyXEL Communications 70 Series Appliance manual available for free PDF download: User Manual

ZyXEL Communications 70 Series User Manual (807 pages)

Internet Security Appliance

Brand: ZyXEL Communications | Category: Gateway | Size: 30 MB

Table of Contents

10
List of Figures

32
- List of Tables
  44
  - Related Documentation
    52
- Preface
  52
  - Graphics Icons Key
    53
  - Syntax Conventions
    53
- Chapter 1 Getting to Know Your Zywall
  
  54
  - Table 1 Model Specific Features
    54
    
    Physical Features
    55
    
    Non-Physical Features
    56
    
    Ipsec Vpn Capability
    57
    
    Content Filtering
    58
    
    Universal Plug and Play (Upnp)
    58
    
    Wireless Lan Mac Address Filtering
    59
    
    Central Network Management
    60
    
    Dynamic Dns Support
    60
    
    Full Network Management
    61
    
    Logging and Tracing
    61
    
    Port Forwarding
    61
    
    Roadrunner Support
    61
    
    Traffic Redirect
    61
    
    Upgrade Zywall Firmware Via Lan
    61
  - Zywall Features
    54
  - Zywall Internet Security Appliance Overview
    54
  - Applications for the Zywall
    62
    
    Figure 1 Secure Internet Access Via Cable, DSL or Wireless Modem
    62
    
    Secure Broadband Internet Access Via Cable or DSL Modem
    62
    
    VPN Application
    62
    
    Figure 2 VPN Application
    63
    
    Figure 3 Zywall 70 Front Panel
    63
    
    Figure 4 Zywall 35 Front Panel
    63
    
    Figure 5 Zywall 5 Front Panel
    63
    
    Front Panel Leds
    63
    
    Table 2 Front Panel Leds
    64
- Chapter 2 Introducing the Web Configurator
  
  66
- Chapter 3 Wizard Setup
  
  84
- Chapter 4 Registration
  
  104
  - Myzyxel.com Overview
    104
    
    Subscription Services Available on the Zywall
    104
  - Registration
    105
  - Figure 32 Registration
    105
  - Table 20 Registration
    106
  - Service
    107
  - Figure 33 Registration: Registered Device
    107
  - Figure 34 Registration: Service
    107
  - Table 21 Service
    108
- Chapter 5 LAN Screens
  
  110
  - LAN Overview
    110
  - DHCP Setup
    110
    
    IP Pool Setup
    110
  - Lan Tcp/Ip
    110
    
    Factory LAN Defaults
    110
    
    IP Address and Subnet Mask
    111
    
    RIP Setup
    111
    
    Multicast
    112
  - DNS Servers
    112
  - Lan
    112
  - Figure 35 LAN
    113
  - Table 22 LAN
    113
  - LAN Static DHCP
    115
  - Figure 36 LAN Static DHCP
    115
  - Table 23 LAN Static DHCP
    115
  - LAN IP Alias
    116
  - Figure 37 Physical Network & Partitioned Logical Networks
    116
  - Figure 38 LAN IP Alias
    117
  - Table 24 LAN IP Alias
    117
  - LAN Port Roles
    118
  - Figure 39 WLAN Port Role Example
    118
  - Figure 40 LAN Port Roles
    119
  - Table 25 LAN Port Roles
    119
  - Figure 41 Port Roles Change Complete
    120
- Chapter 6 Bridge Screens
  
  122
  - Bridge Loop
    122
  - Spanning Tree Protocol (STP)
    122
  - Figure 42 Bridge Loop: Bridge Connected to Wired LAN
    122
    
    How STP Works
    123
    
    Rapid STP
    123
    
    STP Terminology
    123
    
    Table 26 STP Path Costs
    123
    
    STP Port States
    124
  - Bridge
    124
  - Table 27 STP Port States
    124
  - Figure 43 Bridge
    125
  - Table 28 Bridge
    125
  - Bridge Port Roles
    126
  - Figure 44 WLAN Port Role Example
    127
  - Figure 45 Bridge Port Roles
    127
  - Table 29 Bridge Port Roles
    127
  - Figure 46 Port Roles Change Complete
    128
- Chapter 7 WAN Screens
  
  130
  - WAN Overview
    130
  - Multiple WAN
    130
  - Load Balancing Introduction
    131
  - Load Balancing Algorithms
    131
    
    Least Load First
    131
    
    Example 1
    132
    
    Example 2
    132
    
    Figure 47 Least Load First Example
    132
    
    Table 30 Least Load First: Example 1
    132
    
    Table 31 Least Load First: Example 2
    132
    
    Figure 48 Weighted Round Robin Algorithm Example
    133
    
    Spillover
    133
    
    Weighted Round Robin
    133
  - TCP/IP Priority (Metric)
    134
  - WAN General
    134
  - Figure 49 Spillover Algorithm Example
    134
  - Figure 50 WAN General
    135
  - Table 32 WAN General
    136
  - Configuring Load Balancing
    137
    
    Figure 51 Load Balancing: Least Load First
    138
    
    Least Load First
    138
    
    Table 33 Load Balancing: Least Load First
    138
    
    Figure 52 Load Balancing: Weighted Round Robin
    139
    
    Spillover
    139
    
    Table 34 Load Balancing: Weighted Round Robin
    139
    
    Weighted Round Robin
    139
  - WAN Route
    140
  - Figure 53 Load Balancing: Spillover
    140
  - Table 35 Load Balancing: Spillover
    140
  - Figure 54 WAN Route
    141
  - Table 36 WAN Route
    141
  - WAN IP Address Assignment
    142
  - DNS Server Address Assignment
    142
  - Table 37 Private IP Address Ranges
    142
  - WAN MAC Address
    143
  - Wan
    143
    
    Table 38 Example of Network Properties for LAN Servers with Fixed IP Addresses
    143
    
    WAN Ethernet Encapsulation
    143
    
    Figure 55 WAN: Ethernet Encapsulation
    144
    
    Table 39 WAN: Ethernet Encapsulation
    144
    
    Pppoe Encapsulation
    146
    
    Figure 56 WAN: Pppoe Encapsulation
    147
    
    Table 40 WAN: Pppoe Encapsulation
    148
    
    Figure 57 WAN: PPTP Encapsulation
    150
    
    PPTP Encapsulation
    150
    
    Table 41 WAN: PPTP Encapsulation
    151
  - Traffic Redirect
    153
  - Figure 58 Traffic Redirect WAN Setup
    153
  - Configuring Traffic Redirect
    154
  - Figure 59 Traffic Redirect LAN Setup
    154
  - Figure 60 Traffic Redirect
    154
  - Table 42 Traffic Redirect
    154
  - Configuring Dial Backup
    155
  - Figure 61 Dial Backup
    156
  - Table 43 Dial Backup
    157
  - Advanced Modem Setup
    159
    
    AT Command Strings
    159
    
    DTR Signal
    159
    
    Response Strings
    159
  - Configuring Advanced Modem Setup
    159
  - Figure 62 Advanced Setup
    160
  - Table 44 Advanced Setup
    160
- Chapter 8 DMZ Screens
  
  162
  - Dmz
    162
  - Configuring DMZ
    162
  - Figure 63 DMZ
    163
  - Table 45 DMZ
    163
  - DMZ Static DHCP
    165
  - Figure 64 DMZ Static DHCP
    166
  - Table 46 DMZ Static DHCP
    166
  - DMZ IP Alias
    167
  - Figure 65 DMZ: IP Alias
    167
  - Table 47 DMZ: IP Alias
    167
  - DMZ Public IP Address Example
    168
  - DMZ Private and Public IP Address Example
    169
  - Figure 66 DMZ Public Address Example
    169
  - DMZ Port Roles
    170
  - Figure 67 DMZ Private and Public Address Example
    170
  - Figure 68 WLAN Port Role Example
    171
  - Figure 69 DMZ: Port Roles
    172
  - Table 48 DMZ: Port Roles
    172
- Chapter 9 Wireless LAN
  
  174
  - Wireless LAN Introduction
    174
    
    Additional Installation Requirements for Using 802.1X
    174
  - Configuring WLAN
    174
  - Figure 70 WLAN
    175
  - Table 49 WLAN
    175
  - WLAN Static DHCP
    177
  - WLAN IP Alias
    178
  - Figure 71 WLAN Static DHCP
    178
  - Table 50 WLAN Static DHCP
    178
  - Figure 72 WLAN IP Alias
    179
  - Table 51 WLAN IP Alias
    179
  - WLAN Port Roles
    180
  - Figure 73 WLAN Port Role Example
    180
  - Figure 74 WLAN Port Roles
    181
  - Table 52 WLAN Port Roles
    181
  - Wireless Security
    182
  - Figure 75 WLAN Port Roles Change Complete
    182
    
    Authentication
    183
    
    Encryption
    183
    
    Figure 76 Zywall Wireless Security Levels
    183
    
    Hide Zywall Identity
    184
    
    Restricted Access
    184
  - Security Parameters Summary
    184
  - WEP Encryption
    184
  - Table 53 Wireless Security Relational Matrix
    184
  - Overview
    185
    
    Introduction to RADIUS
    185
    
    Types of RADIUS Messages
    185
    
    EAP Authentication Overview
    186
  - Dynamic WEP Key Exchange
    186
  - Figure 77 EAP Authentication
    186
  - Introduction to WPA
    187
    
    Encryption
    187
    
    User Authentication
    187
  - WPA-PSK Application Example
    188
  - Introduction to RADIUS
    189
  - WPA with RADIUS Application Example
    189
  - Figure 78 WPA-PSK Authentication
    189
  - Wireless Client WPA Supplicants
    190
  - Wireless Card
    190
  - Figure 79 WPA with RADIUS Application Example
    190
  - Figure 80 Wireless Card: no Security
    191
  - Table 54 Wireless Card: no Security
    191
    
    Static WEP
    192
    
    Figure 81 Wireless Card: Static WEP
    193
    
    Table 55 Wireless Card: Static WEP
    193
    
    Wpa-Psk
    193
    
    Figure 82 Wireless Card: WPA-PSK
    194
    
    Table 56 Wireless Card: WPA-PSK
    194
    
    Figure 83 Wireless Card: WPA
    195
    
    Table 57 Wireless Card: WPA
    195
    
    Wpa
    195
    
    Figure 84 Wireless Card: 802.1X + Dynamic WEP
    196
    
    IEEE 802.1X + Dynamic WEP
    196
    
    Table 58 Wireless Card: 802.1X + Dynamic WEP
    196
    
    Figure 85 Wireless Card: 802.1X + Static WEP
    197
    
    IEEE 802.1X + Static WEP
    197
    
    Table 59 Wireless Card: 802.1X + Static WEP
    197
    
    Figure 86 Wireless Card: 802.1X + no WEP
    198
    
    IEEE 802.1X + no WEP
    198
    
    Figure 87 Wireless Card: no Access 802.1X + Static WEP
    199
    
    No Access 802.1X + Static WEP
    199
    
    Table 60 Wireless Card: 802.1X + no WEP
    199
    
    No Access 802.1X + no WEP
    200
  - MAC Filter
    200
  - Table 61 Wireless Card: no Access 802.1X + Static WEP
    200
  - Figure 88 Wireless Card: MAC Address Filter
    201
  - Table 62 Wireless Card: MAC Address Filter
    201
- Chapter 10 Firewalls
  
  202
  - Firewall Overview
    202
  - Types of Firewalls
    202
    
    Application-Level Firewalls
    202
    
    Packet Filtering Firewalls
    202
    
    Stateful Inspection Firewalls
    203
  - Introduction to Zyxel's Firewall
    203
  - Denial of Service
    204
    
    Basics
    204
    
    Figure 89 Zywall Firewall Application
    204
    
    Table 63 Common IP Ports
    204
    
    Figure 90 Three-Way Handshake
    205
    
    Types of Dos Attacks
    205
    
    Figure 91 SYN Flood
    206
    
    Figure 92 Smurf Attack
    207
    
    ICMP Vulnerability
    207
    
    Illegal Commands (Netbios and SMTP)
    207
    
    Table 64 ICMP Commands that Trigger Alerts
    207
    
    Table 65 Legal Netbios Commands
    207
    
    Traceroute
    208
  - Stateful Inspection
    208
  - Table 66 Legal SMTP Commands
    208
    
    Figure 93 Stateful Inspection
    209
    
    Stateful Inspection Process
    209
    
    Stateful Inspection and the Zywall
    210
    
    TCP Security
    210
    
    UDP/ICMP Security
    211
    
    Upper Layer Protocols
    211
  - Guidelines for Enhancing Security with Your Firewall
    212
  - Packet Filtering Vs Firewall
    212
    
    Packet Filtering
    212
    
    When to Use Filtering
    212
    
    Firewall
    213
    
    When to Use the Firewall
    213
- Chapter 11 Firewall Screens
  
  214
  - Access Methods
    214
  - Firewall Policies Overview
    214
  - Rule Logic Overview
    216
    
    Action
    216
    
    Key Fields for Configuring Rules
    216
    
    Rule Checklist
    216
    
    Security Ramifications
    216
    
    Destination Address
    217
    
    Service
    217
    
    Source Address
    217
  - Connection Direction Examples
    217
    
    LAN to WAN Rules
    217
    
    WAN to LAN Rules
    218
  - Alerts
    218
  - Figure 94 LAN to WAN Traffic
    218
  - Figure 95 WAN to LAN Traffic
    218
  - Firewall Default Rule (Router Mode)
    219
  - Figure 96 Default Rule (Router Mode)
    219
  - Table 67 Default Rule (Router Mode)
    219
  - Firewall Default Rule (Bridge Mode)
    220
  - Figure 97 Default Rule (Bridge Mode)
    221
  - Table 68 Default Rule (Bridge Mode)
    221
  - Firewall Rule Summary
    222
  - Figure 98 Rule Summary
    222
  - Table 69 Rule Summary
    222
    
    Firewall Edit Rule
    223
    
    Figure 99 Firewall Edit Rule
    224
    
    Table 70 Firewall Edit Rule
    225
  - Anti-Probing
    226
  - Figure 100 Anti-Probing
    226
  - Table 71 Anti-Probing
    226
  - Firewall Threshold
    227
    
    Half-Open Sessions
    227
    
    Threshold Values
    227
    
    TCP Maximum Incomplete and Blocking Time
    228
    
    Figure 101 Firewall Threshold
    229
    
    Table 72 Firewall Threshold
    229
  - Service
    230
  - Figure 102 Firewall Service
    231
  - Table 73 Firewall Service
    231
    
    Figure 103 Firewall Edit Custom Service
    232
    
    Firewall Edit Custom Service
    232
    
    Table 74 Firewall Edit Custom Service
    232
    
    Predefined Services
    233
    
    Table 75 Predefined Services
    233
  - Example Firewall Rule
    235
  - Figure 104 Service
    236
  - Figure 105 Edit Custom Service Example
    236
  - Figure 106 Rule Summary
    237
  - Figure 107 Rule Edit Example
    237
  - Figure 108 My Service Rule Configuration
    238
  - Figure 109 My Service Example Rule Summary
    239
- Chapter 12 Intrusion Detection and Prevention (IDP)
  
  240
  - Introduction to IDP
    240
    
    Figure 110 Network Intrusions
    240
    
    Firewalls and Intrusions
    240
    
    Host IDP
    241
    
    IDS and IDP
    241
    
    Network IDP
    241
    
    Blaster W32.Worm
    242
    
    Example Intrusions
    242
    
    Nimda
    242
    
    SQL Slammer Worm
    242
    
    Mydoom
    243
    
    Zywall IDP
    243
- Chapter 13 Configuring IDP
  
  244
  - Overview
    244
    
    Interfaces
    244
  - General Setup
    245
  - Figure 111 Applying IDP to Interfaces
    245
  - IDP Signatures
    246
    
    Attack Types
    246
    
    Figure 112 IDP: General
    246
    
    Table 76 IDP: General Setup
    246
    
    Figure 113 Attack Types
    247
    
    Table 77 Attack Types
    247
    
    Intrusion Severity
    248
    
    Signature Actions
    248
    
    Table 78 Intrusion Severity
    248
    
    Configuring IDP Signatures
    249
    
    Figure 114 Signature Actions
    249
    
    Table 79 Signature Actions
    249
    
    Figure 115 IDP: Signatures
    250
    
    Table 80 IDP Signatures: Group View
    250
    
    Query Example 1
    251
    
    Query View
    251
    
    Figure 116 Signature Query by Partial Name
    252
    
    Figure 117 Signature Query by Complete ID
    253
    
    Query Example 2
    253
  - Update
    254
    
    Figure 118 Signature Query by Attribute
    254
    
    Mysecurity Zone
    254
    
    Configuring IDP Update
    255
    
    Figure 119 Signatures Update
    255
    
    Table 81 Signatures Update
    256
  - Backup and Restore
    257
  - Figure 120 IDP: Backup & Restore
    257
- Chapter 14 Anti-Virus
  
  258
  - Anti-Virus Overview
    258
    
    Computer Virus Infection and Prevention
    258
    
    Table 82 Common Computer Virus Types
    258
    
    Types of Computer Viruses
    258
    
    Types of Anti-Virus Scanner
    259
  - Introduction to the Zywall Anti-Virus Scanner
    259
    
    Figure 121 Zywall Anti-Virus Example
    260
    
    How the Zywall Anti-Virus Scanner Works
    260
    
    Notes about the Zywall Anti-Virus
    260
  - General Anti-Virus Setup
    261
  - Figure 122 Anti-Virus: General
    261
  - Signature Update
    262
  - Table 83 Anti-Virus: General
    262
    
    Configuring Anti-Virus Update
    263
    
    Mysecurity Zone
    263
    
    Figure 123 Anti-Virus: Update
    264
    
    Table 84 Anti-Virus: Update
    264
- Chapter 15 Anti-Spam
  
  266
  - Anti-Spam Overview
    266
    
    Anti-Spam External Database
    266
    
    Spambulk Engine
    267
    
    Spamcontent Engine
    267
    
    Spamrepute Engine
    267
    
    Figure 124 Anti-Spam External Database Example
    268
    
    Phishing
    268
    
    Spam Threshold
    268
    
    Spamtricks Engine
    268
    
    Blacklist
    269
    
    SMTP and POP3
    269
    
    Whitelist
    269
    
    MIME Headers
    270
  - Anti-Spam General Screen
    270
  - Figure 125 Anti-Spam: General
    270
  - Anti-Spam External DB Screen
    271
  - Table 85 Anti-Spam: General
    271
  - Figure 126 Anti-Spam: External DB
    272
  - Table 86 Anti-Spam: External DB
    272
  - Anti-Spam Lists Screen
    273
  - Figure 127 Anti-Spam: Lists
    274
  - Table 87 Anti-Spam: Lists
    274
  - Anti-Spam Rule Edit Screen
    275
  - Figure 128 Anti-Spam Rule Edit
    275
  - Table 88 Anti-Spam Rule Edit
    276
- Chapter 16 Content Filtering Screens
  
  278
  - Content Filtering Overview
    278
    
    Create a Filter List
    278
    
    Customize Web Site Access
    278
    
    Restrict Web Features
    278
  - Content Filter General
    278
  - Figure 129 Content Filter : General
    279
  - Table 89 Content Filter : General
    279
  - Content Filtering with an External Database
    280
  - Content Filter Categories
    281
  - Figure 130 Content Filtering Lookup Procedure
    281
  - Figure 131 Content Filter : Categories
    282
  - Table 90 Content Filter: Categories
    282
  - Content Filter Customization
    288
  - Figure 132 Content Filter: Customization
    288
  - Table 91 Content Filter: Customization
    289
  - Customizing Keyword Blocking URL Checking
    290
    
    Domain Name or IP Address URL Checking
    290
    
    File Name URL Checking
    290
    
    Full Path URL Checking
    290
  - Content Filtering Cache
    291
  - Figure 133 Content Filter: Cache
    291
  - Table 92 Content Filter: Cache
    292
- Chapter 17 Content Filtering Reports
  
  294
- Chapter 18 Introduction to Ipsec
  
  302
  - VPN Overview
    302
    
    Encryption
    302
    
    Ipsec
    302
    
    Other Terminology
    302
    
    Security Association
    302
    
    Accessing Network Resources When NAT Is Enabled
    303
    
    Data Confidentiality
    303
    
    Data Integrity
    303
    
    Data Origin Authentication
    303
    
    Figure 143 Encryption and Decryption
    303
    
    Linking Two or more Private Networks Together
    303
    
    Unsupported IP Applications
    303
    
    VPN Applications
    303
  - Ipsec Architecture
    304
    
    Ipsec Algorithms
    304
    
    Key Management
    304
  - Encapsulation
    304
  - Figure 144 Ipsec Architecture
    304
    
    Transport Mode
    305
    
    Tunnel Mode
    305
  - Ipsec and NAT
    305
  - Figure 145 Transport and Tunnel Mode Ipsec Encapsulation
    305
  - Table 93 VPN and NAT
    306
- Chapter 19 VPN Screens
  
  308
  - Vpn/Ipsec Overview
    308
  - Ipsec Algorithms
    308
    
    AH (Authentication Header) Protocol
    308
    
    ESP (Encapsulating Security Payload) Protocol
    308
  - My Zywall
    309
  - Remote Gateway Address
    309
  - Table 94 ESP and AH
    309
    
    Dynamic Remote Gateway Address
    310
  - Nailed up
    310
  - NAT Traversal
    310
    
    NAT Traversal Configuration
    311
  - ID Type and Content
    311
  - Figure 146 NAT Router between Ipsec Routers
    311
    
    ID Type and Content Examples
    312
    
    Table 95 Local ID Type and Content Fields
    312
    
    Table 96 Peer ID Type and Content Fields
    312
    
    Table 97 Matching ID Type and Content Configuration Example
    312
  - IKE Phases
    313
  - Figure 147 Two Phases to Set up the Ipsec SA
    313
  - Table 98 Mismatching ID Type and Content Configuration Example
    313
    
    Negotiation Mode
    314
    
    Pre-Shared Key
    314
    
    Diffie-Hellman (DH) Key Groups
    315
    
    Perfect Forward Secrecy (PFS)
    315
  - X-Auth (Extended Authentication)
    315
    
    Authentication Server
    315
  - VPN Rules (IKE)
    316
  - Figure 148 VPN Rules (IKE)
    316
  - Table 99 Ipsec Fields Summary
    316
  - Figure 149 Gateway and Network Policies
    317
  - Figure 150 Ipsec Fields Summary
    317
  - Table 100 VPN Screen Icons Key
    317
  - VPN Rules (IKE) Gateway Policy Edit
    318
  - Figure 151 VPN Rules (IKE): Gateway Policy: Edit
    319
  - Table 101 VPN Rules (IKE): Gateway Policy: Edit
    320
  - VPN Rules (IKE): Network Policy Edit
    324
  - Figure 152 VPN Rules (IKE): Network Policy Edit
    325
  - Table 102 VPN Rules (IKE): Network Policy Edit
    326
  - VPN Rules (IKE): Network Policy Move
    328
  - VPN Rules (Manual)
    329
  - Figure 153 VPN Rules (IKE): Network Policy Move
    329
  - Table 103 VPN Rules (IKE): Network Policy Move
    329
  - Figure 154 VPN Rules (Manual)
    330
  - Table 104 VPN Rules (Manual)
    330
  - VPN Rules (Manual): Edit
    331
    
    Security Parameter Index (SPI)
    331
    
    Figure 155 VPN Rules (Manual): Edit
    332
    
    Table 105 VPN Rules (Manual) Edit
    332
  - VPN SA Monitor
    335
  - Figure 156 VPN: SA Monitor
    335
  - Table 106 VPN: SA Monitor
    335
  - VPN Global Setting
    336
  - Figure 157 VPN: Global Setting
    336
  - Table 107 VPN: Global Setting
    336
  - Telecommuter Vpn/Ipsec Examples
    337
    
    Telecommuters Sharing One VPN Rule Example
    337
    
    Figure 158 Telecommuters Sharing One VPN Rule Example
    338
    
    Table 108 Telecommuters Sharing One VPN Rule Example
    338
    
    Telecommuters Using Unique VPN Rules Example
    338
    
    Figure 159 Telecommuters Using Unique VPN Rules Example
    339
    
    Table 109 Telecommuters Using Unique VPN Rules Example
    339
  - VPN and Remote Management
    340
- Chapter 20 Certificates
  
  342
  - Certificates Overview
    342
    
    Advantages of Certificates
    343
  - Self-Signed Certificates
    343
  - Configuration Summary
    343
  - Figure 160 Certificate Configuration Overview
    343
  - My Certificates
    344
  - Figure 161 My Certificates
    344
  - Table 110 My Certificates
    344
  - My Certificate Import
    346
    
    Certificate File Formats
    346
  - My Certificate Create
    347
  - Figure 162 My Certificate Import
    347
  - Table 111 My Certificate Import
    347
  - Figure 163 My Certificate Create
    348
  - Table 112 My Certificate Create
    348
  - My Certificate Details
    350
  - Figure 164 My Certificate Details
    351
  - Table 113 My Certificate Details
    352
  - Trusted cas
    353
  - Figure 165 Trusted cas
    354
  - Table 114 Trusted cas
    354
  - Trusted CA Import
    355
  - Figure 166 Trusted CA Import
    355
  - Trusted CA Details
    356
  - Table 115 Trusted CA Import
    356
  - Figure 167 Trusted CA Details
    357
  - Table 116 Trusted CA Details
    357
  - Trusted Remote Hosts
    359
  - Figure 168 Trusted Remote Hosts
    360
  - Table 117 Trusted Remote Hosts
    360
  - Verifying a Trusted Remote Host's Certificate
    361
    
    Figure 169 Remote Host Certificates
    361
    
    Trusted Remote Host Certificate Fingerprints
    361
  - Trusted Remote Hosts Import
    362
  - Figure 170 Certificate Details
    362
  - Trusted Remote Host Certificate Details
    363
  - Figure 171 Trusted Remote Host Import
    363
  - Table 118 Trusted Remote Host Import
    363
  - Figure 172 Trusted Remote Host Details
    364
  - Table 119 Trusted Remote Host Details
    364
  - Directory Servers
    366
  - Figure 173 Directory Servers
    366
  - Directory Server Add or Edit
    367
  - Figure 174 Directory Server Add
    367
  - Table 120 Directory Servers
    367
  - Table 121 Directory Server Add
    368
- Chapter 21 Authentication Server
  
  370
  - Authentication Server
    370
    
    Authentication Server Overview
    370
    
    Local User Database
    370
    
    Radius
    370
    
    Figure 175 Local User Database
    371
    
    Figure 176 RADIUS
    372
    
    Radius
    372
    
    Table 122 Local User Database
    372
    
    Table 123 RADIUS
    373
- Chapter 22 Network Address Translation (NAT)
  
  374
  - NAT Overview
    374
    
    NAT Definitions
    374
    
    Table 124 NAT Definitions
    374
    
    How NAT Works
    375
    
    What NAT Does
    375
    
    Figure 177 How NAT Works
    376
    
    Figure 178 NAT Application with IP Alias
    376
    
    NAT Application
    376
    
    Figure 179 Port Restricted Cone NAT Example
    377
    
    NAT Mapping Types
    377
    
    Port Restricted Cone NAT
    377
  - Using NAT
    378
    
    SUA (Single User Account) Versus NAT
    378
    
    Table 125 NAT Mapping Types
    378
  - Figure 180 NAT Overview
    379
  - NAT Overview
    379
  - Table 126 NAT Overview
    379
  - NAT Address Mapping
    380
  - Figure 181 NAT Address Mapping
    381
  - Table 127 NAT Address Mapping
    381
    
    Figure 182 NAT Address Mapping Edit
    382
    
    NAT Address Mapping Edit
    382
  - Port Forwarding
    383
  - Table 128 NAT Address Mapping Edit
    383
    
    Configuring Servers Behind Port Forwarding (Example)
    384
    
    Default Server IP Address
    384
    
    Figure 227 SNMP
    384
    
    Port Forwarding: Services and Port Numbers
    384
    
    Table 129 Services and Port Numbers
    384
    
    Table 158 SNMP
    384
    
    Figure 183 Multiple Servers Behind NAT Example
    385
    
    NAT and Multiple WAN
    385
    
    Port Translation
    385
  - Figure 184 Port Translation Example
    386
  - Port Forwarding
    386
  - Figure 185 Port Forwarding
    387
  - Table 130 Port Forwarding
    387
  - Figure 186 Trigger Port Forwarding Process: Example
    388
  - Port Triggering
    388
  - Figure 187 Port Triggering
    389
  - Table 131 Port Triggering
    389
- Chapter 23 Static Route
  
  392
  - IP Static Route
    392
  - Figure 188 Example of Static Routing Topology
    392
  - Figure 189 IP Static Route
    393
  - Table 132 IP Static Route
    393
    
    Figure 190 IP Static Route Edit
    394
    
    IP Static Route Edit
    394
    
    Table 133 IP Static Route Edit
    394
- Chapter 24 Policy Route
  
  396
  - Policy Route
    396
  - Benefits
    396
  - Routing Policy
    396
  - IP Routing Policy Setup
    397
  - Figure 191 Policy Route Summary
    397
  - Policy Route Edit
    398
  - Table 134 Policy Route Summary
    398
  - Figure 192 Edit IP Policy Route
    399
  - Table 135 Edit IP Policy Route
    399
- Chapter 25 Bandwidth Management
  
  402
- Chapter 26 DNS
  
  418
  - DNS Overview
    418
  - DNS Server Address Assignment
    418
  - DNS Servers
    418
  - Address Record
    419
    
    DNS Wildcard
    419
  - Name Server Record
    419
    
    Private DNS Server
    419
  - System Screen
    420
  - Figure 199 Private DNS Server Example
    420
  - Figure 200 System DNS
    421
  - Table 147 System DNS
    421
    
    Adding an Address Record
    422
    
    Figure 201 System DNS: Add Address Record
    422
    
    Figure 202 System DNS: Insert Name Server Record
    423
    
    Inserting a Name Server Record
    423
    
    Table 148 System DNS: Add Address Record
    423
  - DNS Cache
    424
  - Table 149 System DNS: Insert Name Server Record
    424
  - Configure DNS Cache
    425
  - Figure 203 DNS Cache
    425
  - Table 150 DNS Cache
    425
  - Configuring DNS DHCP
    426
  - Figure 204 DNS DHCP
    427
  - Table 151 DNS DHCP
    427
  - Dynamic DNS
    428
    
    DYNDNS Wildcard
    428
    
    High Availability
    428
  - Configuring Dynamic DNS
    428
  - Figure 205 DDNS
    429
  - Table 152 DDNS
    429
- Chapter 27 Remote Management
  
  432
  - Remote Management Overview
    432
    
    Remote Management Limitations
    432
    
    System Timeout
    433
  - Introduction to HTTPS
    433
  - Www
    434
  - Figure 206 HTTPS Implementation
    434
  - Figure 207 WWW
    435
  - Table 153 WWW
    435
  - HTTPS Example
    436
    
    Figure 208 Security Alert Dialog Box (Internet Explorer)
    436
    
    Internet Explorer Warning Messages
    436
    
    Figure 209 Security Certificate 1 (Netscape)
    437
    
    Figure 210 Security Certificate 2 (Netscape)
    437
    
    Netscape Navigator Warning Messages
    437
    
    Avoiding the Browser Warning Messages
    438
    
    Login Screen
    438
    
    Figure 211 Login Screen (Internet Explorer)
    439
    
    Figure 212 Login Screen (Netscape)
    439
    
    Figure 213 Replace Certificate
    440
    
    Figure 214 Device-Specific Certificate
    440
  - Ssh
    441
  - How SSH Works
    441
  - Figure 215 Common Zywall Certificate
    441
  - Figure 216 SSH Communication Example
    441
  - SSH Implementation on the Zywall
    442
  - Figure 217 How SSH Works
    442
    
    Requirements for Using SSH
    443
  - Configuring SSH
    443
  - Figure 218 SSH
    443
  - Table 154 SSH
    443
  - Secure Telnet Using SSH Examples
    444
    
    Example 1: Microsoft Windows
    444
    
    Example 2: Linux
    444
    
    Figure 219 SSH Example 1: Store Host Key
    444
  - Secure FTP Using SSH Example
    445
  - Figure 220 SSH Example 2: Test
    445
  - Figure 221 SSH Example 2: Log in
    445
  - Telnet
    446
  - Configuring TELNET
    446
  - Figure 222 Secure FTP: Firmware Upload Example
    446
  - Figure 223 Telnet Configuration on a TCP/IP Network
    446
  - Ftp
    447
  - Figure 224 Telnet
    447
  - Table 155 Telnet
    447
  - Snmp
    448
  - Figure 225 FTP
    448
  - Table 156 FTP
    448
  - Figure 226 SNMP Management Model
    449
    
    Remote Management: Snmp
    450
    
    SNMP Traps
    450
    
    Supported Mibs
    450
    
    Table 157 SNMP Traps
    450
  - Dns
    452
  - Introducing Vantage CNM
    452
  - Figure 228 DNS
    452
  - Table 159 DNS
    452
  - Configuring CNM
    453
  - Figure 229 CNM
    453
  - Table 160 CNM
    453
- Chapter 28 Upnp
  
  456
  - Universal Plug and Play Overview
    456
    
    Cautions with Upnp
    456
    
    How Do I Know if I'M Using Upnp
    456
    
    NAT Traversal
    456
    
    Upnp and Zyxel
    457
  - Configuring Upnp
    457
  - Figure 230 Upnp
    457
  - Table 161 Upnp
    457
  - Displaying Upnp Port Mapping
    458
  - Figure 231 Upnp Ports
    458
  - Installing Upnp in Windows Example
    459
  - Table 162 Upnp Ports
    459
    
    Installing Upnp in Windows Me
    460
    
    Installing Upnp in Windows XP
    461
  - Using Upnp in Windows XP Example
    461
    
    Auto-Discover Your Upnp-Enabled Network Device
    462
    
    Web Configurator Easy Access
    463
- Chapter 29 ALG Screen
  
  466
  - ALG Introduction
    466
    
    ALG and Multiple WAN
    466
    
    ALG and NAT
    466
    
    ALG and the Firewall
    466
  - Ftp
    467
  - 467
    467
  - Rtp
    467
    
    ALG Details
    467
    
    Figure 232 H.323 ALG Example
    468
    
    Figure 233 H.323 with Multiple WAN IP Addresses
    468
  - Sip
    469
    
    Figure 234 H.323 Calls from the WAN with Multiple Outgoing Calls
    469
    
    SIP ALG Details
    469
    
    Stun
    469
    
    SIP Audio Session Timeout
    470
    
    SIP Signaling Session Timeout
    470
  - ALG Screen
    470
  - Figure 235 SIP ALG Example
    470
  - Figure 236 ALG
    471
  - Table 163 ALG
    471
- Chapter 30 Logs Screens
  
  472
  - Configuring View Log
    472
  - Figure 237 View Log
    472
  - Log Description Example
    473
  - Table 164 View Log
    473
  - Table 165 Example Log Description
    473
    
    Certificate Not Trusted Log Note
    474
    
    Figure 238 Myzyxel.com: Download Center
    474
  - Configuring Log Settings
    475
  - Figure 239 Myzyxel.com: Certificate Download
    475
  - Figure 240 Log Settings
    476
  - Table 166 Log Settings
    477
  - Configuring Reports
    478
  - Figure 241 Reports
    479
  - Table 167 Reports
    479
    
    Figure 242 Web Site Hits Report Example
    480
    
    Table 168 Web Site Hits Report
    480
    
    Viewing Protocol/Port
    480
    
    Viewing Web Site Hits
    480
    
    Figure 243 Protocol/Port Report Example
    481
    
    Table 169 Protocol/ Port Report
    481
    
    Figure 244 Host IP Address Report Example
    482
    
    Table 170 Host IP Address Report
    482
    
    Viewing Host IP Address
    482
    
    Reports Specifications
    483
    
    Table 171 Report Specifications
    483
- Chapter 31 Maintenance
  
  484
  - Maintenance Overview
    484
  - General Setup
    484
    
    General Setup and System Name
    484
  - Configuring Password
    485
  - Figure 245 General Setup
    485
  - Table 172 General Setup
    485
  - Time and Date
    486
  - Figure 246 Password Setup
    486
  - Table 173 Password Setup
    486
  - Figure 247 Time and Date
    487
  - Table 174 Time and Date
    487
  - Pre-Defined NTP Time Servers List
    489
    
    Resetting the Time
    489
    
    Table 175 Default Time Servers
    489
    
    Time Server Synchronization
    489
    
    Figure 248 Synchronization in Process
    490
    
    Figure 249 Synchronization Is Successful
    490
    
    Figure 250 Synchronization Fail
    490
  - Introduction to Transparent Bridging
    491
  - Transparent Firewalls
    491
  - Table 176 MAC-Address-To-Port Mapping Table
    491
  - Configuring Device Mode (Router)
    492
  - Figure 251 Device Mode (Router Mode)
    492
  - Table 177 Device Mode (Router Mode)
    492
  - Configuring Device Mode (Bridge)
    493
  - Figure 252 Device Mode (Bridge Mode)
    493
  - Table 178 Device Mode (Bridge Mode)
    493
  - F/W Upload Screen
    494
  - Figure 253 Firmware Upload
    495
  - Figure 254 Firmware Upload in Process
    495
  - Table 179 Firmware Upload
    495
  - Backup and Restore
    496
  - Figure 255 Network Temporarily Disconnected
    496
  - Figure 256 Firmware Upload Error
    496
    
    Backup Configuration
    497
    
    Figure 257 Backup and Restore
    497
    
    Restore Configuration
    497
    
    Table 180 Restore Configuration
    497
    
    Figure 258 Configuration Upload Successful
    498
    
    Figure 259 Network Temporarily Disconnected
    498
    
    Figure 260 Configuration Upload Error
    498
    
    Back to Factory Defaults
    499
  - Restart Screen
    499
  - Figure 261 Reset Warning Message
    499
  - Figure 262 Restart Screen
    499
- Chapter 32 Introducing the SMT
  
  500
  - Introduction to the SMT
    500
  - Accessing the SMT Via the Console Port
    500
    
    Initial Screen
    500
    
    Entering the Password
    501
  - Navigating the SMT Interface
    501
  - Figure 263 Initial Screen
    501
  - Figure 264 Password Screen
    501
  - Table 181 Main Menu Commands
    501
    
    Main Menu
    502
    
    Figure 265 Main Menu (Router Mode)
    503
    
    Figure 266 Main Menu (Bridge Mode)
    503
    
    Table 182 Main Menu Summary
    503
    
    SMT Menus Overview
    504
    
    Table 183 SMT Menus Overview
    504
  - Changing the System Password
    506
  - Resetting the Zywall
    507
  - Figure 267 Menu 23: System Password
    507
- Chapter 33 SMT Menu 1 - General Setup
  
  508
- Chapter 34 WAN and Dial Backup Setup
  
  514
- Chapter 35 LAN Setup
  
  526
- Chapter 36 Internet Access
  
  532
- Chapter 37 DMZ Setup
  
  536
  - Configuring DMZ Setup
    536
  - DMZ Port Filter Setup
    536
  - TCP/IP Setup
    536
  - Figure 289 Menu 5: DMZ Setup
    536
  - Figure 290 Menu 5.1: DMZ Port Filter Setup
    536
    
    Figure 291 Menu 5: DMZ Setup
    537
    
    Figure 292 Menu 5.2: TCP/IP and DHCP Ethernet Setup
    537
    
    IP Address
    537
    
    Figure 293 Menu 5.2.1: IP Alias Setup
    538
    
    IP Alias Setup
    538
- Chapter 38 Route Setup
  
  540
  - Configuring Route Setup
    540
  - Route Assessment
    540
  - Figure 294 Menu 6: Route Setup
    540
  - Figure 295 Menu 6.1: Route Assessment
    540
  - Traffic Redirect
    541
  - Figure 296 Menu 6.2: Traffic Redirect
    541
  - Table 203 Menu 6.1: Route Assessment
    541
  - Table 204 Menu 6.2: Traffic Redirect
    541
  - Route Failover
    542
  - Figure 297 Menu 6.3: Route Failover
    542
  - Table 205 Menu 6.3: Route Failover
    542
- Chapter 39 Wireless Setup
  
  544
  - Wireless LAN Setup
    544
  - Figure 298 Menu 7.1: Wireless Setup
    544
  - Table 206 Menu 7.1: Wireless Setup
    545
    
    Figure 299 Menu 7.1.1: WLAN MAC Address Filter
    546
    
    MAC Address Filter Setup
    546
    
    Table 207 Menu 7.1.1: WLAN MAC Address Filter
    546
  - TCP/IP Setup
    547
    
    Figure 300 Menu 7: WLAN Setup
    547
    
    IP Address
    547
    
    Figure 301 Menu 7.2: TCP/IP and DHCP Ethernet Setup
    548
    
    IP Alias Setup
    548
    
    Figure 302 Menu 7.2.1: IP Alias Setup
    549
- Chapter 40 Remote Node Setup
  
  550
- Chapter 41 IP Static Route Setup
  
  560
- Chapter 42 Network Address Translation (NAT)
  
  562
- Chapter 43 Introducing the Zywall Firewall
  
  582
  - Using Zywall SMT Menus
    582
    
    Activating the Firewall
    582
    
    Figure 338 Menu 21: Filter and Firewall Setup
    582
    
    Figure 339 Menu 21.2: Firewall Setup
    583
- Chapter 44 Filter Configuration
  
  584
- Chapter 45 SNMP Configuration
  
  598
  - SNMP Configuration
    598
  - Figure 354 Menu 22: SNMP Configuration
    598
  - Table 224 SNMP Configuration Menu Fields
    598
  - SNMP Traps
    599
  - Table 225 SNMP Traps
    599
- Chapter 46 System Information & Diagnosis
  
  600
- Chapter 47 Firmware and Configuration File Maintenance
  
  612
  - Firmware and Configuration File Maintenance
    612
    
    Filename Conventions
    612
    
    Introduction
    612
    
    Backup Configuration
    613
    
    Table 230 Filename Conventions
    613
    
    Figure 366 Telnet into Menu 24.5
    614
    
    Using the FTP Command from the Command Line
    614
    
    Example of FTP Commands from the Command Line
    615
    
    Figure 367 FTP Session Example
    615
    
    File Maintenance over WAN
    615
    
    GUI-Based FTP Clients
    615
    
    Table 231 General Commands for GUI-Based FTP Clients
    615
    
    Backup Configuration Using TFTP
    616
    
    Maintenance
    616
    
    TFTP Command Example
    616
    
    Backup Via Console Port
    617
    
    Figure 368 System Maintenance: Backup Configuration
    617
    
    Figure 369 System Maintenance: Starting Xmodem Download Screen
    617
    
    GUI-Based TFTP Clients
    617
    
    Table 232 General Commands for GUI-Based TFTP Clients
    617
    
    Figure 370 Backup Configuration Example
    618
    
    Figure 371 Successful Backup Confirmation Screen
    618
    
    Restore Configuration
    618
    
    Restore Using FTP
    618
    
    Figure 372 Telnet into Menu 24.6
    619
    
    Figure 373 Restore Using FTP Session Example
    620
    
    Figure 374 System Maintenance: Restore Configuration
    620
    
    Figure 375 System Maintenance: Starting Xmodem Download Screen
    620
    
    Figure 376 Restore Configuration Example
    620
    
    Restore Using FTP Session Example
    620
    
    Restore Via Console Port
    620
    
    Figure 377 Successful Restoration Confirmation Screen
    621
    
    Firmware File Upload
    621
    
    Uploading Firmware and Configuration Files
    621
    
    Configuration File Upload
    622
    
    Figure 378 Telnet into Menu 24.7.1: Upload System Firmware
    622
    
    Figure 379 Telnet into Menu 24.7.2: System Maintenance
    622
    
    Figure 380 FTP Session Example of Firmware File Upload
    623
    
    FTP File Upload Command from the DOS Prompt Example
    623
    
    FTP Session Example of Firmware File Upload
    623
    
    TFTP File Upload
    623
    
    TFTP Upload Command Example
    624
    
    Uploading Firmware File Via Console Port
    624
    
    Uploading Via Console Port
    624
    
    Example Xmodem Firmware Upload Using Hyperterminal
    625
    
    Figure 381 Menu 24.7.1 as Seen Using the Console Port
    625
    
    Figure 382 Example Xmodem Upload
    625
    
    Uploading Configuration File Via Console Port
    625
    
    Example Xmodem Configuration Upload Using Hyperterminal
    626
    
    Figure 383 Menu 24.7.2 as Seen Using the Console Port
    626
    
    Figure 384 Example Xmodem Upload
    626
    
    Command Interpreter Mode
    628
    
    Command Syntax
    628
    
    Figure 385 Command Mode in Menu 24
    628
    
    Command Usage
    629
    
    Figure 386 Valid Commands
    629
    
    Table 233 Valid Commands
    629
    
    Budget Management
    630
    
    Call Control Support
    630
    
    Figure 387 Call Control
    630
    
    Call History
    631
    
    Figure 388 Budget Management
    631
    
    Table 234 Budget Management
    631
    
    Figure 389 Call History
    632
    
    Table 235 Call History
    632
    
    Time and Date Setting
    632
    
    Figure 390 Menu 24: System Maintenance
    633
    
    Figure 391 Menu 24.10 System Maintenance: Time and Date Setting
    633
    
    Table 236 Menu 24.10 System Maintenance: Time and Date Setting
    634
- Chapter 48 System Maintenance Menus 8 to 10
  
  628
- Chapter 49 Remote Management
  
  636
- Chapter 50 IP Policy Routing
  
  640
- Chapter 51 Call Scheduling
  
  648
- Chapter 52 Troubleshooting
  
  652
  - Problems Starting up the Zywall
    652
  - Problems with the LAN Interface
    652
  - Table 243 Troubleshooting the Start-Up of Your Zywall
    652
  - Table 244 Troubleshooting the LAN Interface
    652
  - Problems with the DMZ Interface
    653
  - Problems with the WAN Interface
    653
  - Table 245 Troubleshooting the DMZ Interface
    653
  - Table 246 Troubleshooting the WAN Interface
    653
  - Problems Accessing the Zywall
    654
    
    Pop-Up Windows, Javascripts and Java Permissions
    654
    
    Table 247 Troubleshooting Accessing the Zywall
    654
    
    Figure 403 Pop-Up Blocker
    655
    
    Internet Explorer Pop-Up Blockers
    655
    
    Figure 404 Internet Options: Privacy
    656
    
    Figure 405 Internet Options: Privacy
    657
    
    Figure 406 Pop-Up Blocker Settings
    658
    
    Javascripts
    658
    
    Figure 407 Internet Options: Security
    659
    
    Figure 408 Security Settings - Java Scripting
    660
    
    Java Permissions
    660
    
    Figure 409 Security Settings - Java
    661
  - Packet Flow
    662
  - Figure 410 Java (Sun)
    662
- Appendix A Product Specifications
  
  664
  - Specification Tables
    664
  - Table 248 Device Specifications
    664
  - Product Specifications
    664
  - Table 249 Performance
    665
  - Table 250 Firmware Features
    665
  - Table 251 Feature Specifications
    667
  - Table 252 Compatible Zyxel WLAN Cards and Security Features
    668
    
    Cable Pin Assignments
    669
  - Figure 411 WLAN Card Installation
    669
  - Figure 412 Console/Dial Backup Port Pin Layout
    669
  - Figure 413 Ethernet Cable Pin Assignments
    670
  - Table 253 Console/Dial Backup Port Pin Assignments
    670
    
    Desktop Installation
    672
    
    General Installation Instructions
    672
  - Hardware Installation
    672
  - Figure 414 Attaching Rubber Feet
    673
    
    Rack-Mounted Installation Requirements
    673
  - Figure 415 Attaching Mounting Brackets and Screws
    674
  - Figure 416 Rack Mounting
    674
- Appendix C
  
  676
  - Removing and Installing a Fuse
    676
- Appendix D
  
  678
- Appendix Eip Subnetting
  
  694
  - Table 254 Classes of IP Addresses
    694
    
    Subnet Masks
    695
  - Table 255 Allowed IP Address Range by Class
    695
  - Table 256 "Natural" Masks
    695
  - Table 257 Alternative Subnet Mask Notation
    696
    
    Example: Two Subnets
    696
  - Table 258 Two Subnets Example
    696
  - Table 259 Subnet 1
    697
  - Table 260 Subnet 2
    697
    
    Example: Four Subnets
    698
  - Table 261 Subnet 1
    698
  - Table 262 Subnet 2
    698
  - Table 263 Subnet 3
    698
    
    Example Eight Subnets
    699
  - Table 264 Subnet 4
    699
  - Table 265 Eight Subnets
    699
  - Table 266 Class C Subnet Planning
    699
    
    Subnetting with Class a and Class B Networks
    700
  - Table 267 Class B Subnet Planning
    700
    
    Traditional Dial-Up Scenario
    702
- Appendix Fpppoe
  
  702
- Appendix Gpptp
  
  704
  - Figure 442 Transport PPP Frames over Ethernet
    704
    
    Call Connection
    705
  - Figure 443 PPTP Protocol Overview
    705
    
    Control & PPP Connections
    705
    
    Ppp Data Connection
    706
  - Figure 444 Example Message Exchange between Computer and an ANT
    706
    
    Ad-Hoc Wireless LAN Configuration
    708
    
    Wireless LAN Topologies
    708
- Appendix H Wireless Lans
  
  708
  - Figure 445 Peer-To-Peer Communication in an Ad-Hoc Network
    708
  - Figure 446 Basic Service Set
    709
  - Figure 447 Infrastructure WLAN
    710
    
    Fragmentation Threshold
    711
  - Figure 448 RTS/CTS
    711
    
    IEEE 802.11G Wireless LAN
    712
    
    Preamble Type
    712
  - Table 268 Ieee802.11G
    712
    
    Types of RADIUS Messages
    713
  - Figure 449 EAP Authentication
    714
    
    Types of Authentication
    715
    
    PEAP (Protected EAP)
    716
    
    Wep Authentication Steps
    716
  - Figure 450 WEP Authentication Steps
    717
  - Table 269 Comparison of EAP Authentication Types
    718
  - Table 270 Wireless Security Relational Matrix
    719
  - Figure 451 Roaming Example
    720
    
    Requirements for Roaming
    721
- Appendix I Triangle Route
  
  722
  - Figure 452 Ideal Setup
    722
    
    The "Triangle Route" Problem
    722
  - Figure 453 "Triangle Route" Problem
    723
    
    The "Triangle Route" Solutions
    723
  - Figure 454 IP Alias
    724
  - Figure 455 Gateways on the WAN Side
    724
- Appendix J
  
  726
- Appendix Kvpn Setup
  
  730
  - Vpn Configuration
    731
  - Figure 463 VPN Rules
    731
  - Figure 464 Headquarters Gateway Policy Edit
    732
  - Figure 465 Branch Office Gateway Policy Edit
    733
  - Figure 466 Headquarters VPN Rule
    734
  - Figure 467 Branch Office VPN Rule
    734
  - Figure 468 Headquarters Network Policy Edit
    735
    
    Dialing the Vpn Tunnel Via Web Configurator
    736
  - Figure 469 Branch Office Network Policy Edit
    736
  - Figure 470 VPN Rule Configured
    737
  - Figure 471 VPN Dial
    737
  - Figure 472 VPN Tunnel Established
    737
    
    Vpn Troubleshooting
    738
  - Figure 473 VPN Log Example
    739
  - Figure 474 Ike/Ipsec Debug Example
    740
    
    Use a Vpn Tunnel
    741
- Appendix L Importing Certificates
  
  742
- Appendix M Command Interpreter
  
  754
- Appendix N Firewall Commands
  
  756
  - Table 271 Firewall Commands
    756
- Appendix O
  
  762
  - Netbios Filter Commands
    762
    
    Display Netbios Filter Settings
    762
    
    Netbios Filter Configuration
    763
  - Table 272 Netbios Filter Default Settings
    763
- Appendix P Certificates Commands
  
  766
  - Certificates Commands
    766
  - Table 273 Certificates Commands
    766
- Appendix Q
  
  770
  - Brute-Force Password Guessing Protection
    770
  - Table 274 Brute-Force Password Guessing Protection Commands
    770
- Appendix R Boot Commands
  
  772
  - Figure 494 Option to Enter Debug Mode
    772
  - Figure 495 Boot Module Commands
    773
    
    Log Descriptions
    774
  - Table 275 System Maintenance Logs
    774
  - Table 276 System Error Logs
    775
  - Table 277 Access Control Logs
    776
  - Table 278 TCP Reset Logs
    777
  - Table 279 Packet Filter Logs
    777
  - Table 280 ICMP Logs
    778
  - Table 281 CDR Logs
    778
  - Table 282 PPP Logs
    778
  - Table 283 Upnp Logs
    779
  - Table 284 Content Filtering Logs
    779
  - Table 285 Attack Logs
    780
  - Table 286 Remote Management Logs
    781
  - Table 287 Wireless Logs
    782
  - Table 288 Ipsec Logs
    782
  - Table 289 IKE Logs
    783
  - Table 290 PKI Logs
    786
  - Table 291 Certificate Path Verification Failure Reason Codes
    787
  - Table 292 802.1X Logs
    787
  - Table 293 ACL Setting Notes
    788
  - Table 294 ICMP Notes
    789
  - Table 295 IDP Logs
    790
  - Table 296 AV Logs
    791
    
    Syslog Logs
    794
    
    Displaying Logs
    796
    
    Log Commands
    796
  - Figure 496 Displaying Log Categories Example
    796
  - Figure 497 Displaying Log Parameters Example
    796
    
    Log Command Example
    797
    
    Index
    798

ZyXEL Communications Categories

Gateway

Network Router

Switch Wireless Router Adapter

More ZyXEL Communications Manuals

ZyXEL Communications 70 Series Appliance Manuals

ZyXEL Communications 70 Series User Manual (807 pages)

Table of Contents

Table of Contents

List of Figures

Chapter 1 Getting to Know Your Zywall

Chapter 2 Introducing the Web Configurator

Chapter 3 Wizard Setup

Chapter 4 Registration

Chapter 5 LAN Screens

Chapter 6 Bridge Screens

Chapter 7 WAN Screens

Chapter 8 DMZ Screens

Chapter 9 Wireless LAN

Chapter 10 Firewalls

Chapter 11 Firewall Screens

Chapter 12 Intrusion Detection and Prevention (IDP)

Chapter 13 Configuring IDP

Chapter 14 Anti-Virus

Chapter 15 Anti-Spam

Chapter 16 Content Filtering Screens

Chapter 17 Content Filtering Reports

Chapter 18 Introduction to Ipsec

Chapter 19 VPN Screens

Chapter 20 Certificates

Chapter 21 Authentication Server

Chapter 22 Network Address Translation (NAT)

Chapter 23 Static Route

Chapter 24 Policy Route

Chapter 25 Bandwidth Management

Chapter 26 DNS

Chapter 27 Remote Management

Chapter 28 Upnp

Chapter 29 ALG Screen

Chapter 30 Logs Screens

Chapter 31 Maintenance

Chapter 32 Introducing the SMT

Chapter 33 SMT Menu 1 - General Setup

Chapter 34 WAN and Dial Backup Setup

Chapter 35 LAN Setup

Chapter 36 Internet Access

Chapter 37 DMZ Setup

Chapter 38 Route Setup

Chapter 39 Wireless Setup

Chapter 40 Remote Node Setup

Chapter 41 IP Static Route Setup

Chapter 42 Network Address Translation (NAT)

Chapter 43 Introducing the Zywall Firewall

Chapter 44 Filter Configuration

Chapter 45 SNMP Configuration

Chapter 46 System Information & Diagnosis

Chapter 47 Firmware and Configuration File Maintenance

Chapter 48 System Maintenance Menus 8 to 10

Chapter 49 Remote Management

Chapter 50 IP Policy Routing

Chapter 51 Call Scheduling

Chapter 52 Troubleshooting

Appendix A Product Specifications

Appendix C

Appendix D

Appendix Eip Subnetting

Appendix Fpppoe

Appendix Gpptp

Appendix H Wireless Lans

Appendix I Triangle Route

Appendix J

Appendix Kvpn Setup

Appendix L Importing Certificates

Appendix M Command Interpreter

Appendix N Firewall Commands

Appendix O

Appendix P Certificates Commands

Appendix Q

Appendix R Boot Commands

Related Products

ZyXEL Communications Categories