Zyxel-communications 650 Series Bedienungsanleitung Seite 139
- Seite / 513
- Inhaltsverzeichnis
- FEHLERBEHEBUNG
- LESEZEICHEN
Bewertet. / 5. Basierend auf Kundenbewertungen
Prestige 650 series User’s Guide
Creating Custom Rules 12-3
Source Address
What is the connection’s source address; is it on the LAN or WAN? Is it a single IP, a range of IPs or a
subnet?
Destination Address
What is the connection’s destination address; is it on the LAN or WAN? Is it a single IP, a range of IPs or a
subnet?
12.3 Connection Direction
This section talks about configuring firewall rules for connections going from LAN to WAN and WAN to
LAN in your firewall.
12.3.1 LAN to WAN Rules
The default rule for LAN to WAN traffic is that all users on the LAN are allowed non-restricted access to the
WAN. When you configure Policy -> LAN to WAN -> Rules, you in essence want to limit some or all users
from accessing certain services on the WAN. See the following figure.
Figure 12-1 LAN to WAN Traffic
- Prestige 650 Series 1
- Copyright 2
- (FCC) Interference Statement 3
- ZyXEL Limited Warranty 4
- Customer Support 5
- Table of Contents 6
- List of Figures 14
- List of Tables 21
- List of Charts 25
- Preface 26
- Introduction to DSL 28
- Part I: 29
- Chapter 1 31
- DHCP Support 35
- IP Alias 35
- IP Policy Routing (IPPR) 35
- Protocol Support 35
- 1.3.1 Internet Access 37
- Chapter 2 39
- Navigation panel 40
- Wizard Setup 40
- 2.4 Configuring Password 41
- 2.5 Resetting the Prestige 42
- Chapter 3 45
- 3.3 Multiplexing 46
- 3.4 VPI and VCI 46
- 3.7 IP Address Assignment 48
- 3.7.4 Private IP Addresses 49
- 3.9 NAT 50
- 3.10.2 RFC 1483 53
- 3.10.3 ENET ENCAP 53
- 3.10.4 PPPoE 55
- 3.11 DHCP Setup 56
- 3.11.1 IP Pool Setup 57
- Part II: 61
- Chapter 4 63
- LAN Setup 63
- 4.4 LAN TCP/IP 64
- 4.4.3 RIP Setup 65
- 4.4.4 Multicast 65
- 4.5 Configuring LAN 66
- LAN Setup 4-5 67
- Table 4-1 LAN 67
- Chapter 5 69
- 5.1.4 RTS/CTS 70
- 5.2 Levels of Security 71
- 5-6 Wireless LAN Setup 74
- Table 5-1 Wireless 74
- 5.6 Configuring MAC Filter 75
- 5-8 Wireless LAN Setup 76
- 5.7 802.1x Overview 77
- 5.8 Introduction to RADIUS 77
- 5.9 Configuring 802.1x 79
- 5-14 Wireless LAN Setup 82
- 5.11 Configuring RADIUS 83
- Wireless LAN Setup 5-17 85
- Table 5-5 RADIUS 85
- Chapter 6 87
- WAN Setup 87
- 6.4 Traffic Shaping 88
- 6.5 Configuring WAN Setup 89
- 6-4 WAN Setup 90
- WAN Setup 6-5 91
- 6-6 WAN Setup 92
- Part III: 93
- Chapter 7 95
- 7.1.3 How NAT Works 96
- 7.1.4 NAT Application 96
- 7.1.5 NAT Mapping Types 97
- 7.3 SUA Server 99
- 7.4 Selecting the NAT Mode 101
- 7.5 Configuring SUA Server 102
- LABEL DESCRIPTION 103
- NAT 7-13 107
- Chapter 8 109
- Dynamic DNS Setup 109
- Chapter 9 111
- Time and Date Setup 111
- 9-2 Time and Date Setup 112
- Table 9-1 Time and Date 112
- Time and Date Setup 9-3 113
- Part IV: 114
- Chapter 10 115
- Firewalls 115
- 10.4 Denial of Service 117
- . When these 118
- 5 REDIRECT 120
- 13 TIMESTAMP_REQUEST 120
- 14 TIMESTAMP_REPLY 120
- 17 ADDRESS_MASK_REQUEST 120
- 18 ADDRESS_MASK_REPLY 120
- 10.5 Stateful Inspection 121
- 10.5.3 TCP Security 124
- 10.5.4 UDP/ICMP Security 124
- 10.5.5 Upper Layer Protocols 125
- 10.6.1 Security In General 125
- 10.7.1 Packet Filtering: 126
- 10.7.2 Firewall 127
- 10-14 Firewalls 128
- Chapter 11 129
- Firewall Configuration 129
- 11.4 Attack Alert 131
- 11.4.1 Alerts 132
- 11.4.2 Threshold Values 132
- 11.4.3 Half-Open Sessions 132
- Table 11-2 Alert 135
- Chapter 12 137
- Creating Custom Rules 137
- Service 138
- 12.3 Connection Direction 139
- 12.4 Logs 140
- 12.5 Rule Summary 142
- 12.6 Predefined Services 144
- Source Address 148
- 12.8 Timeout 150
- Table 12-6 Timeout 152
- Chapter 13 153
- Customized Services 153
- This rule allows a MyService 158
- Click Apply to save your 158
- Chapter 14 159
- Content Filtering 159
- DESCRIPTION 162
- 14.5 Configuring Logs 163
- 14-6 Content Filtering 164
- Part V: 165
- Chapter 15 167
- Introduction to IPSec 167
- 15.1.4 VPN Applications 168
- 15.2 IPSec Architecture 169
- 15.2.1 IPSec Algorithms 170
- 15.2.2 Key Management 170
- 15.3 Encapsulation 171
- 15.4 IPSec and NAT 171
- SECURITY PROTOCOL MODE NAT 172
- AH Transport N 172
- AH Tunnel N 172
- ESP Transport N 172
- ESP Tunnel Y 172
- Chapter 16 173
- VPN Screens 173
- 16.3 My IP Address 174
- 16.4 Secure Gateway Address 174
- 16.5 VPN Summary Screen 175
- 16.6 Keep Alive 177
- 16.7 ID Type and Content 177
- 16.8 Pre-Shared Key 179
- 16.9 Editing VPN Policies 179
- 16-8 VPN Screens 180
- Figure 16-3 VPN IKE 180
- VPN Screens 16-9 181
- Table 16-7 VPN IKE 181
- 16-10 VPN Screens 182
- VPN Screens 16-11 183
- 16-12 VPN Screens 184
- 16.10 IKE Phases 185
- 16.10.1 Negotiation Mode 186
- LABEL DESCRIPTION 188
- VPN - IKE 188
- VPN Screens 16-17 189
- Table 16-8 VPN IKE: Advanced 189
- 16-18 VPN Screens 190
- 16.12 Manual Key Setup 191
- 16.13 Configuring Manual Key 192
- VPN Screens 16-21 193
- Table 16-9 VPN Manual Key 193
- 16-22 VPN Screens 194
- VPN Screens 16-23 195
- 16.14 Viewing SA Monitor 196
- 16.16 Configuring IPSec Logs 199
- 16-28 VPN Screens 200
- HEADQUARTERS TELECOMMUTERS 204
- VPN Screens 16-33 205
- Part VI: 206
- Chapter 17 207
- 17.2 Telnet 208
- 17.3 FTP 208
- 17.4 Web 209
- Chapter 18 211
- 18.2 UPnP and ZyXEL 212
- Chapter 19 219
- Logs Screens 219
- 19-2 Logs Screens 220
- Figure 19-1 Log Settings 220
- Logs Screens 19-3 221
- Table 19-1 Log Settings 221
- 19.3 Displaying the Logs 222
- 19.4 SMTP Error Messages 223
- 19.4.1 Example E-mail Log 224
- Part VII: 225
- Chapter 20 227
- Bandwidth Management 227
- 20.5 Scheduler 230
- 20.7 Bandwidth Borrowing 233
- 20.8 Configuring Summary 235
- 20.10 Configuring Monitor 243
- Refresh 244
- Part VIII: 245
- Chapter 21 247
- Maintenance 247
- Maintenance 21-3 249
- Table 21-1 System Status 249
- 21.2.1 System Statistics 250
- Maintenance 21-5 251
- 21.3 DHCP Table Screen 252
- 21.4 Wireless Screens 253
- 21.5 Diagnostic Screens 255
- 21.6 Firmware Screen 258
- 21.7 Configuration Screen 260
- Part IX: 265
- Chapter 22 267
- Introducing the SMT 267
- Enter Password : **** 268
- Menu 24.2.2 269
- System Maintenance 269
- Change Console Port Speed 269
- ? > or ChangeMe 270
- # MENU TITLE DESCRIPTION 272
- Chapter 23 273
- General Setup 273
- 23-2 General Setup 274
- Chapter 24 277
- LAN Setup 277
- Chapter 25 281
- Wireless LAN Setup 281
- 25-4 Wireless LAN Setup 284
- Chapter 26 285
- Internet Access 285
- 26.4 IP Alias Setup 286
- Edit IP Alias= Yes 287
- 26.5 Route IP Setup 288
- 26-6 Internet Access 290
- Chapter 27 293
- Remote Node Configuration 293
- 27.3 Metric 297
- 27.5 Remote Node Filter 301
- Separate VPI and 305
- VCI numbers must 305
- 27.7 Traffic Redirect 306
- Edit Traffic Redirect= Yes 308
- Chapter 28 311
- Static Route Setup 311
- Static Route Setup 28-3 313
- 28-4 Static Route Setup 314
- Chapter 29 315
- Bridging Setup 315
- Bridge= Yes 316
- Edit IP/Bridge= Yes 316
- 29-4 Bridging Setup 318
- Chapter 30 319
- 30.3 NAT Setup 321
- 30.3.1 Address Mapping Sets 322
- FIELD DESCRIPTION EXAMPLE 324
- 30.5 General NAT Examples 329
- NAT= Full Feature 333
- Type= One-to-One 333
- Start= 192.168.1.10 333
- Start= 10.132.50.1 333
- Part X: 337
- Chapter 31 339
- Filter Configuration 339
- Outgoing 340
- Filter Rule 341
- Filter Set 341
- Prestige 650HW 342
- Prestige 650R-E 344
- Len Length 347
- Length= 0 352
- 31.5 Filter Types and NAT 354
- 31.6 Example Filter 354
- 31.7.1 Ethernet Traffic 358
- 31.7.2 Remote Node Filters 358
- Chapter 32 361
- Enabling the Firewall 361
- 32.4 Viewing Firewall Log 362
- Table 32-1 Firewall Logs 363
- Chapter 33 365
- SNMP Configuration 365
- 33.2 Supported MIBs 366
- 33.3 SNMP Configuration 366
- 33.4 SNMP Traps 368
- Chapter 34 369
- System Security 369
- 34.1.3 IEEE802.1x 371
- Chapter 35 375
- 35.3 System Information 377
- 35.4 Log and Trace 379
- 35.4.2 Syslog and Accounting 380
- 35.5 Diagnostic 382
- Chapter 36 385
- 36.2 Backup Configuration 386
- 36.2.1 Backup Configuration 387
- 36.2.4 GUI-based FTP Clients 388
- 36.2.7 TFTP Command Example 389
- Starting XMODEM download 390
- 36.3 Restore Configuration 391
- 36.3.1 Restore Using FTP 392
- 36.4.1 Firmware File Upload 394
- 36.4.5 TFTP File Upload 396
- 650H/HW) 398
- Choose the Xmodem protocol 400
- Then click Send 400
- Chapter 37 401
- System Maintenance 401
- 37.2 Call Control Support 402
- 37.3 Time and Date Setting 404
- 37.3.1 Resetting the Time 405
- Chapter 38 407
- Remote Management 407
- 38.4 System Timeout 409
- Chapter 39 411
- IP Policy Routing 411
- IP Policy Routing 39-3 413
- 39.5 Applying an IP Policy 415
- IP Policies= 1,2 419
- Chapter 40 421
- Call Scheduling 421
- Part XI: 425
- Chapter 41 427
- VPN/IPSec Setup 427
- 41.2 IPSec Summary Screen 428
- VPN/IPSec Setup 41-3 429
- 41-4 VPN/IPSec Setup 430
- 41.3 IPSec Setup 431
- VPN/IPSec Setup 41-7 433
- 41-8 VPN/IPSec Setup 434
- VPN/IPSec Setup 41-9 435
- 41-10 VPN/IPSec Setup 436
- 41.4 IKE Setup 437
- 41-12 VPN/IPSec Setup 438
- 41.5 Manual Setup 439
- 41-14 VPN/IPSec Setup 440
- VPN/IPSec Setup 41-15 441
- Chapter 42 443
- SA Monitor 443
- 42-2 SA Monitor 444
- 42.3 Viewing IPSec Log 445
- Chapter 43 447
- Internal SPTGEN 447
- Part XII: 451
- Appendix A 453
- Troubleshooting 453
- A.2 Console Port 454
- A.3 Telnet 454
- A.4 Web Configurator 455
- A.6 LAN Interface 456
- A.7 WAN Interface 457
- A.8 Internet Access 457
- A.9 Remote Management 458
- A.10 Remote Node Connection 459
- Appendix B 461
- IP Subnetting 461
- B-8 IP Subnetting 468
- Appendix C 469
- Wireless LAN and IEEE 802.11 469
- Appendix D 473
- Appendix E 475
- Virtual Circuit Topology 475
- Appendix F 477
- Installing Components 478
- Configuring 478
- Verifying Settings 480
- Windows 2000/NT/XP 481
- Macintosh OS 8/9 485
- Appendix G 489
- Splitters and Microfilters 489
- Appendix H 491
- Log Descriptions 491
- Appendix I 497
- Switch/Wireless LAN 502
- Appendix J 507
Verwandte Produkte und Handbücher für Hardware Zyxel-communications 650 Series
(2 Seiten)© 2020, manymanuals.de. Alle Rechte vorbehalten. | 0.041 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Kommentare zu diesen Handbüchern