Zyxel-communications Prestige 2602R Series Bedienungsanleitung Seite 149
- Seite / 450
- Inhaltsverzeichnis
- LESEZEICHEN
Bewertet. / 5. Basierend auf Kundenbewertungen
Prestige 2602R Series User’s Guide
Chapter 13 Firewall Configuration 149
CHAPTER 13
Firewall Configuration
This chapter shows you how to enable and configure the Prestige firewall.
13.1 Access Methods
The web configurator is, by far, the most comprehensive firewall configuration tool your
Prestige has to offer. For this reason, it is recommended that you configure your firewall using
the web configurator. SMT screens allow you to activate the firewall. CLI commands provide
limited configuration options and are only recommended for advanced users.
13.2 Firewall Policies Overview
Firewall rules are grouped based on the direction of travel of packets to which they apply:
By default, the Prestige’s stateful packet inspection allows packets traveling in the following
directions:
• LAN to LAN/ Router
This allows computers on the LAN to manage the Prestige and communicate between
networks or subnets connected to the LAN interface.
• LAN to WAN
By default, the Prestige’s stateful packet inspection blocks packets traveling in the following
directions:
•WAN to LAN
•WAN to WAN/ Router
This prevents computers on the WAN from using the Prestige as a gateway to
communicate with other computers on the WAN and/or managing the Prestige.
You may define additional rules and sets or modify existing ones but please exercise
extreme caution in doing so.
• LAN to LAN/ Router •WAN to LAN
• LAN to WAN • WAN to WAN/ Router
- Prestige 2602R Series 1
- Copyright 3
- Federal Communications 4
- Statement 4
- Safety Warnings 5
- ZyXEL Limited Warranty 6
- Customer Support 7
- 8 Customer Support 8
- Table of Contents 9
- Chapter 6 11
- Chapter 7 11
- Chapter 8 12
- Chapter 13 14
- Chapter 14 14
- Table of Contents 23 23
- 24 Table of Contents 24
- List of Figures 25
- 32 List of Figures 32
- List of Tables 33
- About This User's Guide 37
- Related Documentation 37
- User Guide Feedback 37
- Syntax Conventions 38
- Graphics Icons Key 38
- Introduction to DSL 39
- 40 Introduction to DSL 40
- CHAPTER 1 41
- 1.2.1 Internet Access 46
- 1.2.5 LAN to LAN Application 48
- 1.2.6 Front Panel LEDs 48
- CHAPTER 2 51
- 2.1.2 Resetting the Prestige 52
- CHAPTER 3 57
- 58 Chapter 3 Wizard Setup 58
- Chapter 3 Wizard Setup 59 59
- 60 Chapter 3 Wizard Setup 60
- Chapter 3 Wizard Setup 61 61
- 62 Chapter 3 Wizard Setup 62
- Chapter 3 Wizard Setup 63 63
- 64 Chapter 3 Wizard Setup 64
- Chapter 3 Wizard Setup 65 65
- 66 Chapter 3 Wizard Setup 66
- Chapter 3 Wizard Setup 67 67
- 68 Chapter 3 Wizard Setup 68
- Chapter 3 Wizard Setup 69 69
- 3.3 Password Setup 70
- CHAPTER 4 71
- 4.2 DNS Server Address 72
- 4.4 LAN TCP/IP 73
- 4.5 LAN TCP/IP 73
- 4.5.2 RIP Setup 74
- 4.6 Any IP 75
- 4.6.1 How Any IP Works 76
- 4.7 Configuring LAN 77
- 78 Chapter 4 LAN Setup 78
- Table 15 LAN Setup 78
- CHAPTER 5 79
- 5.1.2 Multiplexing 80
- 5.1.3 VPI and VCI 80
- 5.1.4 IP Address Assignment 80
- 5.2 Metric 81
- 5.3 PPPoE Encapsulation 82
- 5.4 Traffic Shaping 82
- 5.6 Configuring WAN Setup 83
- 84 Chapter 5 WAN Setup 84
- Figure 27 WAN Setup (PPPoE) 84
- Table 16 WAN Setup 84
- Chapter 5 WAN Setup 85 85
- 5.7 Traffic Redirect 86
- 5.8 Configuring WAN Backup 87
- IP address here 88
- Check WAN IP Address 89
- 90 Chapter 5 WAN Setup 90
- CHAPTER 6 91
- 6.1.2 What NAT Does 92
- 6.1.3 How NAT Works 92
- 6.1.4 NAT Application 93
- 6.1.5 NAT Mapping Types 93
- Table 19 NAT Mapping Types 94
- 6.3 SUA Server 95
- 6.4 Selecting the NAT Mode 96
- 6.5 Configuring SUA Server 97
- CHAPTER 7 103
- 7.2.2 SIP Call Progression 104
- 7.2.3 SIP Servers 104
- 7.2.3.1 SIP User Agent 105
- 7.2.3.2 SIP Proxy Server 105
- 7.2.4 RTP 106
- 7.5 Voice Coding 107
- 7.3 SIP ALG 107
- 7.4 Pulse Code Modulation 107
- RFC 3842 108
- CHAPTER 8 109
- 110 Chapter 8 Voice Screens 110
- Table 26 SIP Settings 110
- Chapter 8 Voice Screens 111 111
- 112 Chapter 8 Voice Screens 112
- 8.4 Quality of Service (QoS) 113
- 8.5 QoS Configuration 114
- 8.6 Phone 115
- 8.7 Phone Configuration 115
- 116 Chapter 8 Voice Screens 116
- Figure 45 Phone 116
- Table 29 Phone 116
- 8.8 Speed Dial 117
- 8.9 Speed Dial Configuration 117
- 118 Chapter 8 Voice Screens 118
- Figure 46 Speed Dial 118
- Table 30 Speed Dial 118
- 8.10.1 The Flash Key 119
- 8.10.2.1 European Call Hold 120
- Chapter 8 Voice Screens 121 121
- 8.10.3.1 USA Call Hold 122
- 8.10.3.2 USA Call Waiting 122
- 8.10.3.3 USA Call Transfer 122
- Chapter 8 Voice Screens 123 123
- Figure 47 Phone Port Common 123
- Table 33 Voice Common 123
- 124 Chapter 8 Voice Screens 124
- Chapter 8 Voice Screens 125 125
- Table 34 Voice Call Forward 125
- 126 Chapter 8 Voice Screens 126
- CHAPTER 9 127
- 9.5 Auto Firmware Upgrade 128
- CHAPTER 10 129
- Figure 49 Dynamic DNS 130
- Table 35 Dynamic DNS 130
- CHAPTER 11 131
- 132 Chapter 11 Time and Date 132
- Figure 50 Time and Date 132
- Table 37 Time and Date 132
- Chapter 11 Time and Date 133 133
- 134 Chapter 11 Time and Date 134
- CHAPTER 12 135
- 136 Chapter 12 Firewalls 136
- 12.4 Denial of Service 137
- 12.4.2 Types of DoS Attacks 138
- Chapter 12 Firewalls 139 139
- Figure 53 SYN Flood 139
- 12.4.2.1 ICMP Vulnerability 140
- 12.5 Stateful Inspection 141
- 142 Chapter 12 Firewalls 142
- 12.5.3 TCP Security 143
- 12.5.4 UDP/ICMP Security 144
- 12.5.5 Upper Layer Protocols 144
- 12.6.1 Security In General 145
- 12.7.1 Packet Filtering: 146
- 12.7.2 Firewall 146
- Chapter 12 Firewalls 147 147
- 148 Chapter 12 Firewalls 148
- CHAPTER 13 149
- 13.3 Rule Logic Overview 150
- 13.3.3.1 Action 151
- 13.3.3.2 Service 151
- 13.3.3.3 Source Address 151
- 13.3.3.4 Destination Address 151
- 13.4.1 LAN to WAN Rules 152
- 13.4.2 WAN to LAN Rules 152
- 13.4.3 Alerts 152
- 13.6 Rule Summary 154
- Address 157
- 13.7 Customized Services 158
- 13.9 Example Firewall Rule 159
- 13.10 Predefined Services 163
- 13.11 Anti-Probing 165
- 13.12 DoS Thresholds 166
- 13.12.1 Threshold Values 167
- 13.12.2 Half-Open Sessions 167
- CHAPTER 14 171
- CHAPTER 15 175
- 15.2 Telnet 176
- 15.3 FTP 176
- 15.4 Web 177
- CHAPTER 16 179
- 16.2 UPnP and ZyXEL 180
- Table 54 Configuring UPnP 181
- Components selection box 182
- Figure 85 System Tray Icon 189
- Network 190
- CHAPTER 17 193
- 194 Chapter 17 Logs Screens 194
- Figure 90 Log Settings 194
- Table 55 Log Settings 194
- 17.3 Displaying the Logs 195
- 17.4 SMTP Error Messages 196
- 17.4.1 Example E-mail Log 197
- 198 Chapter 17 Logs Screens 198
- CHAPTER 18 199
- 18.5 Scheduler 201
- 18.7 Bandwidth Borrowing 204
- 18.8 Configuring Summary 205
- 18.9 Configuring Class Setup 207
- 18.10 Bandwidth Monitor 211
- LABEL DESCRIPTION 212
- CHAPTER 19 213
- 214 Chapter 19 Maintenance 214
- Figure 104 System Status 214
- Chapter 19 Maintenance 215 215
- Table 65 System Status 215
- 19.2.1 System Statistics 216
- 19.3 DHCP Table Screen 217
- 19.4 Any IP Table Screen 218
- 19.5 Diagnostic Screens 219
- 220 Chapter 19 Maintenance 220
- 19.6 Firmware Screen 221
- 222 Chapter 19 Maintenance 222
- Figure 110 Firmware Upgrade 222
- Table 71 Firmware Upgrade 222
- Chapter 19 Maintenance 223 223
- Figure 112 Error Message 223
- 224 Chapter 19 Maintenance 224
- CHAPTER 20 225
- ? > or 226
- Table 73 SMT Main Menu 227
- Table 74 Main Menu Summary 227
- 20.2.2 SMT Menus Overview 228
- 1234", and 229
- *” for each character 230
- CHAPTER 21 231
- CHAPTER 22 235
- Press ENTER to Confirm 237
- CHAPTER 23 239
- CHAPTER 24 243
- 24.4 IP Alias Setup 244
- 24.5 Route IP Setup 245
- CHAPTER 25 249
- 25.4 Remote Node Filter 255
- 25.5.3 Advance Setup Options 257
- CHAPTER 26 259
- CHAPTER 27 263
- CHAPTER 28 267
- 28.3 NAT Setup 269
- Menu 15.1.255 is read-only 270
- 28.3.1.3 Ordering Your Rules 271
- 28.5 General NAT Examples 274
- Figure 154 NAT Example 1 275
- Figure 156 NAT Example 2 276
- Figure 158 NAT Example 3 277
- Figure 163 NAT Example 4 280
- CHAPTER 29 283
- CHAPTER 30 285
- Filter Rule 286
- Filter Set 286
- Len Length 289
- 30.4.1 TCP/IP Filter Rule 290
- 30.4.2 Generic Filter Rule 293
- 30.5 Filter Types and NAT 294
- 30.6 Example Filter 295
- 30.7.1 Ethernet Traffic 297
- 30.7.2 Remote Node Filters 298
- CHAPTER 31 299
- 31.2 Supported MIBs 300
- 31.3 SNMP Configuration 300
- 31.4 SNMP Traps 301
- CHAPTER 32 303
- 32.3 System Information 305
- 32.3.2 Console Port Speed 306
- 32.4 Log and Trace 307
- 32.4.2 Syslog and Accounting 308
- Figure 192 Syslog Example 309
- 32.5 Diagnostic 310
- CHAPTER 33 313
- 33.2 Backup Configuration 314
- 33.2.4 GUI-based FTP Clients 316
- 33.2.7 TFTP Command Example 317
- 33.3 Restore Configuration 318
- 33.4.1 Firmware File Upload 320
- 33.4.5 TFTP File Upload 322
- CHAPTER 34 325
- 34.2 Call Control Support 326
- 34.3 Time and Date Setting 327
- 34.3.1 Resetting the Time 329
- CHAPTER 35 331
- 35.4 System Timeout 333
- CHAPTER 36 335
- 36.4 IP Routing Policy Setup 336
- 36.5 Applying an IP Policy 339
- (192.168.1.100) 342
- CHAPTER 37 343
- CHAPTER 38 347
- 38.3 Problems with the WAN 348
- Figure 220 Pop-up Blocker 350
- Figure 222 Internet Options 352
- 38.4.1.2 JavaScripts 353
- 3 Scroll down to Scripting 354
- 38.4.1.3 Java Permissions 355
- 38.4.1.3.1 JAVA (Sun) 356
- 38.5 Telephone Problems 357
- Appendix A 359
- Product Specifications 359
- Appendix B 363
- Installing Components 364
- Configuring 365
- Windows 2000/NT/XP 366
- Macintosh OS 8/9 371
- Macintosh OS X 373
- Verifying Settings 374
- Using Configuration Files 376
- APPENDIX C 379
- How PPPoE Works 380
- Prestige as a PPPoE Client 380
- APPENDIX D 381
- Subnet Masks 382
- Subnetting 382
- Example: Two Subnets 383
- 384 Appendix D IP Subnetting 384
- Table 128 Subnet 1 384
- Table 129 Subnet 2 384
- Example: Four Subnets 385
- Example Eight Subnets 386
- Appendix D IP Subnetting 387 387
- 388 Appendix D IP Subnetting 388
- APPENDIX E 389
- IP Aliasing 390
- Gateways on the WAN Side 391
- APPENDIX F 393
- APPENDIX G 395
- Command Examples 418
- APPENDIX H 421
- APPENDIX I 423
- APPENDIX J 425
- 426 Appendix J Boot Commands 426
- APPENDIX K 427
- Table 152 TCP Reset Logs 429
- Table 154 ICMP Logs 429
- Table 155 CDR Logs 430
- Table 156 PPP Logs 430
- Table 157 UPnP Logs 431
- Table 159 Attack Logs 431
- Table 161 ICMP Notes 432
- Table 162 Syslog Logs 433
- Table 163 SIP Logs 433
- Table 164 RTP Logs 434
- Log Commands 435
- Displaying Logs 436
- Log Command Example 437
- Numerics 439
- 440 Index 440
- Index 441 441
- 442 Index 442
- Index 443 443
- 444 Index 444
- Index 445 445
- 446 Index 446
- Index 447 447
- 448 Index 448
- Index 449 449
- 450 Index 450
Verwandte Produkte und Handbücher für Hardware Zyxel-communications Prestige 2602R Series
Hardware Zyxel-communications ADSL VoIP IAD with 802.11g Wireless 2602HW Series Bedienungsanleitung
(519 Seiten)
(519 Seiten)
(90 Seiten)
Hardware Zyxel-communications 802.11g Wireless VDSL2 4-port Gateway P-870HW-I1 Bedienungsanleitung
(9 Seiten)
(9 Seiten)
Hardware Zyxel-communications ADSL2+ Ethernet Gateway P-660R-T Series Bedienungsanleitung
(302 Seiten)
(302 Seiten)
© 2020, manymanuals.de. Alle Rechte vorbehalten. | 0.042 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Kommentare zu diesen Handbüchern