Gebruiksaanwijzing /service van het product P-2802H(W)(L)-I Series van de fabrikant ZyXEL Communications
Ga naar pagina of 418
www .zyxel.com P-2802H(W)(L)-I Series VDSL V oIP IAD User ’ s Guide V ersion 3.70 6/2007 Edition 1.
.
About This User's Guide P-2802H(W)(L)-I Series User’s Guide 3 About This User's Guide Intended Audience This manual is intended for people who want to configure the ZyXEL Device using the web configurator . Y ou should have at leas t a basic knowledge of TCP/IP networking concepts and topology .
Document Conventions P-2802H(W)(L)-I Series User’s Guide 4 Document Conventions W arnings and Notes These are how warnings and notes are shown in this User ’ s Guide.
Document Conventions P-2802H(W)(L)-I Series User’s Guide 5 Icons Used in Figures Figures in this User ’ s Guide may use the followi ng generic icons.
Safety Warnings P-2802H(W)(L)-I Series User’s Guide 6 Safety Warnings 1 For your safety , be sure to read and follow all warni ng notices and instructions. • Do NOT use this product near water , for example, in a wet basement or near a swimming pool.
Safety Warnings P-2802H(W)(L)-I Series User’s Guide 7.
Safety Warnings P-2802H(W)(L)-I Series User’s Guide 8.
Contents Overview P-2802H(W)(L)-I Series User’s Guide 9 Contents Overview Introduction .......................................... ........................................................................ .......... 33 Introducing the ZyXEL Device ...
Contents Overview P-2802H(W)(L)-I Series User’s Guide 10.
Table of Contents P-2802H(W)(L)-I Series User’s Guide 11 Table of Contents About This User's Guide ........................................................................... ............................... 3 Document Conventions...............
Table of Contents P-2802H(W)(L)-I Series User’s Guide 12 Part II: Wizard ......................... .................................... ............................ 51 Chapter 3 Internet and Wireles s Setup Wizard ...................................
Table of Contents P-2802H(W)(L)-I Series User’s Guide 13 7.3 LAN TCP/IP ........ ............. ............. ................ ............. ............. ............. ............. .......... ......... 90 7.3.1 IP Address and Subnet Mask ..........
Table of Contents P-2802H(W)(L)-I Series User’s Guide 14 9.4.2 Port Forwarding: Serv ices and Port Nu mbers ........ ............. ................ ............. ........ 122 9.4.3 Configuring Servers Behind Port Forwar ding (Example) ..............
Table of Contents P-2802H(W)(L)-I Series User’s Guide 15 10.16 PSTN Line Screen (“L” models only) .... ............. ............. ............ ............. ............. ........ 152 Chapter 1 1 Firewalls.......................................
Table of Contents P-2802H(W)(L)-I Series User’s Guide 16 13.4 IPSec and NA T ....... ............. ................ ............. ................. ............ ................. ............ . .... 182 Chapter 14 VPN Screens........................
Table of Contents P-2802H(W)(L)-I Series User’s Guide 17 15.6 My Certificate Create .... ............. ............. ............. ................ ............. ............. ............ .. ... 216 15.7 My Certificate Details .... ................
Table of Contents P-2802H(W)(L)-I Series User’s Guide 18 19.1.3 System Timeout ..................... .......... ...... ............. ............. ............. ................ ........ 256 19.2 WWW (HTTP and HTTPS) ......... ................ .....
Table of Contents P-2802H(W)(L)-I Series User’s Guide 19 22.2 Viewing the Logs ................. ............. ................ ............. ................ ............. ................ . .... 289 22.3 Configuring Log Settings ........... ......
Table of Contents P-2802H(W)(L)-I Series User’s Guide 20 25.5 Problems With Multiple SI P Accounts ........ ............. ............. ................ ............. ............. . 322 25.5.1 Outgoing Calls ...... ................ ............. ..
List of Figures P-2802H(W)(L)-I Series User’s Guide 21 List of Figures Figure 1 Secure Internet Access Application .. ............. ................ ............. ................ ............. ......... ....... 37 Figure 2 WLAN Application Example .
List of Figure s P-2802H(W)(L)-I Series User’s Guide 22 Figure 39 W AN Interface Setup ... ............. ................ ............. ................. ............ ................. ...... ............. 87 Figure 40 LAN and WAN IP Addresses .... .
List of Figures P-2802H(W)(L)-I Series User’s Guide 23 Figure 82 Phone Book > S peed Dial ..... ............. ................ ............. ................ ............. ................ . ....... 149 Figure 83 Phone Book > Incoming C all Policy .
List of Figure s P-2802H(W)(L)-I Series User’s Guide 24 Figure 125 T rusted C A Details . ............. ................ ............. ................ ............. ................ ......... ........... . 224 Figure 126 T rusted R emote Hosts ... .
List of Figures P-2802H(W)(L)-I Series User’s Guide 25 Figure 168 Network Connections ............. ............. ................ ............. ................ ............. ............ ........ . 276 Figure 169 Internet Connection P roperties ..
List of Figure s P-2802H(W)(L)-I Series User’s Guide 26 Figure 21 1 Macintos h OS 8/9: Apple Menu ..... ................ ................ ............. ................ ................ ..... ... 345 Figure 212 Macintosh OS 8/9: TCP/IP .............
List of Tables P-2802H(W)(L)-I Series User’s Guide 27 List of Tables T able 1 VDSL S tandards ......................... ............. ................ ............. ................ ............. ....... ................ 35 T able 2 Models Cov ered .
List of Tables P-2802H(W)(L)-I Series User’s Guide 28 T able 39 NA T Mapping T ypes ............... ............. ................ ............. ................ ............. ............. .......... . 120 T able 40 NA T General ............. .....
List of Tables P-2802H(W)(L)-I Series User’s Guide 29 T able 82 T elecommuters Sharing One VPN Rule E xample ...... ................ ................ ............. .............. 208 T able 83 T elecommuters Using Unique V PN Rules Example .........
List of Tables P-2802H(W)(L)-I Series User’s Guide 30 T able 125 PPP Logs ................... ................. ............ ............. ................. ............ ................. ......... ........ 297 T able 126 UPnP Logs .... ............
List of Tables P-2802H(W)(L)-I Series User’s Guide 31 T able 168 Abbreviations Used in th e Example Internal SPTGEN Screens T able .................... ........... 379 T able 169 Menu 1 General Setup ............ ................ ................. .
List of Tables P-2802H(W)(L)-I Series User’s Guide 32.
33 P ART I Introduction Introducing the ZyXEL Device (35) Introducing the W eb Configurator (43).
34.
P-2802H(W)(L)-I Series User’s Guide 35 C HAPTER 1 Introducing the ZyXEL Device This chapter introduces the main applications and features of the ZyXEL Device.
Chapter 1 Introducing the ZyXEL Device P-2802H(W)(L)-I Series User’s Guide 36 • “W” denotes wireless functionality . There is an embedded mini -PCI module for IEEE 802.1 1g wireless LAN connectivity . All wireless features documented in this user ’ s guide refer to the “W” models only .
Chapter 1 Introducing the ZyXEL Device P-2802H(W)(L)-I Series User’s Guide 37 1.3 Good Habit s for Managing the ZyXEL Device Do the following things regularly to make the ZyXEL Device more se c ure and t o manage the ZyXEL Device more effectively . • Change the password.
Chapter 1 Introducing the ZyXEL Device P-2802H(W)(L)-I Series User’s Guide 38 Use content filtering to block access to web sit e s containing keywords that you specify . Y ou can define time periods and days during which content filtering is enabled and include or exclude particular computers on your network from content filtering.
Chapter 1 Introducing the ZyXEL Device P-2802H(W)(L)-I Series User’s Guide 39 Figure 3 Internet T elephony Service Provider Application 1.4.4 Making Peer-to-peer Calls Y ou can call directly to someone’ s IP address without using a SIP proxy server .
Chapter 1 Introducing the ZyXEL Device P-2802H(W)(L)-I Series User’s Guide 40 1.5 LEDs Figure 5 LEDs The following table describes your device’ s LEDs. T able 3 LEDs LED COLOR STATUS DESCRIPTION POWER Green On Y our device is receiving power and fun ctioning properl y .
Chapter 1 Introducing the ZyXEL Device P-2802H(W)(L)-I Series User’s Guide 41 Refer to the Quick S tart Guide for in formation on hard ware connections. 1.6 The RESET Button Y ou can use the RESET button at the back o f the device to turn the wireless LAN off or on.
Chapter 1 Introducing the ZyXEL Device P-2802H(W)(L)-I Series User’s Guide 42 T o set the device back to the factory default settings, press the RESET button for ten seconds or until the POWER LED begins to blink and then release it. When the POWER LED begins to blink, the defaults have been restored and the device restarts.
P-2802H(W)(L)-I Series User’s Guide 43 C HAPTER 2 Introducing the Web Configurator This chapter describes how to access and navigate the web configurator . 2.1 W eb Configurator Overview The web configur ator is an HTML-based mana geme nt interface that allows easy device setup and management via Interne t browser .
Chapter 2 Introducing the Web Configur ator P-2802H(W)(L)-I Series User’s Guide 44 Figure 6 Password Screen 5 The following screen displays if you have no t yet changed your password.
Chapter 2 Introducing the Web Configurator P-2802H(W)(L)-I Series User’s Guide 45 Figure 8 Replace Certificate Screen 7 A screen displays to let you choose whether to go to the wizard or the advanced screens. • Click Go to W izard setup if you are logging in for the first time or if you want to make basic changes.
Chapter 2 Introducing the Web Configur ator P-2802H(W)(L)-I Series User’s Guide 46 2.2 W eb Configurator Main Screen Figure 10 Main Screen As illustrated above, the main scr een is di vided into these parts: • A - title bar • B - navigation panel • C - main window • D - status bar 2.
Chapter 2 Introducing the Web Configurator P-2802H(W)(L)-I Series User’s Guide 47 2.2.2 Navigation Panel Use the men u items on the na vig a tion panel to open screens t o configure ZyXEL Device features. The following tables describe each menu item.
Chapter 2 Introducing the Web Configur ator P-2802H(W)(L)-I Series User’s Guide 48 Firewall General Use this screen to activate/deac tivate the firewall and the default action to take on network traffic g oing in specific directions. Rules This screen shows a summary of the firewall rules, and allows you to edit/ add a firewall rule.
Chapter 2 Introducing the Web Configurator P-2802H(W)(L)-I Series User’s Guide 49 2.2.3 Main Window The main window displays informa tion and configuration fields. It is discussed in the rest of this document. Right after you log in, the St a t u s sc reen is displayed.
Chapter 2 Introducing the Web Configur ator P-2802H(W)(L)-I Series User’s Guide 50.
51 P ART II Wi z a r d Internet and W ireless Setup W izard (53) V oIP W izard And Example (65).
52.
P-2802H(W)(L)-I Series User’s Guide 53 C HAPTER 3 Internet and Wireless Setup Wizard This chapter provides informatio n on the W izard Setup screens for Internet access in the web configurator . 3.1 Introduction Use the wizard setup sc reens to configure your system for Internet access with the information given to you by your ISP .
Chapter 3 Intern et and Wireless Setup Wi zard P-2802H(W)(L)-I Series User’s Guide 54 Figure 1 1 Select a Mode 2 Click INTERNET/WIRELESS SETUP to configure the system for Internet access and wireless connection. Figure 12 Wizard Welcome 3 Enter your Internet access information in the wizard screen exactly as your service provider gave it to yo u.
Chapter 3 Internet and Wireless Setup Wizard P-2802H(W)(L)-I Series User’s Guide 55 Figure 13 Internet Access Wizard Setup: ISP Parameters The following table describes the fields in this screen. 4 The next wizard screen varies depending on what mode and encapsulation type you use.
Chapter 3 Intern et and Wireless Setup Wi zard P-2802H(W)(L)-I Series User’s Guide 56 Figure 14 Internet Connection with PPPoE The following table describes the fields in this screen. T able 7 Internet Connection with PPPoE LABEL DESCRIPTION User Name Enter the user na me exactly as your ISP assigned.
Chapter 3 Internet and Wireless Setup Wizard P-2802H(W)(L)-I Series User’s Guide 57 Figure 15 Internet Connection with Ethernet The following table describes the fields in this screen. 5 W ait for the ZyXEL Device to fini sh testing your W AN connection.
Chapter 3 Intern et and Wireless Setup Wi zard P-2802H(W)(L)-I Series User’s Guide 58 Figure 16 Connection T est • If the following screen displays, check if your account is activated or click Restart the Internet/Wir eless Setup Wizard to verify your In ternet access settings.
Chapter 3 Internet and Wireless Setup Wizard P-2802H(W)(L)-I Series User’s Guide 59 Figure 18 Connection T est Successful 2 Use this screen to activate the wireless LAN and OTIST . Click Next to continue. Figure 19 Wireless LAN Setup Wizard 1 The following table describes the labels in this screen.
Chapter 3 Intern et and Wireless Setup Wi zard P-2802H(W)(L)-I Series User’s Guide 60 3 Configure your wireless settin gs in this screen. Click Next . Figure 20 Wireless LAN The following table describes the labels in this screen. Next Click Next to proceed to the next screen.
Chapter 3 Internet and Wireless Setup Wizard P-2802H(W)(L)-I Series User’s Guide 61 " The wireless stations and ZyXEL Device must use the same SSID, channel ID and WEP encryption key (if WEP is enabled), WP A-PSK (if WP A-PSK is enabled) for wirele ss communication.
Chapter 3 Intern et and Wireless Setup Wi zard P-2802H(W)(L)-I Series User’s Guide 62 Figure 22 Manually Assign a WEP key The following table describes the labels in this screen.
Chapter 3 Internet and Wireless Setup Wizard P-2802H(W)(L)-I Series User’s Guide 63 " No wireless LAN settings display if you chose not to configure wireless LAN settings. Figure 24 Internet Access and WLAN Wizard Se tup Complete 7 Launch your web browser and navigate to www .
Chapter 3 Intern et and Wireless Setup Wi zard P-2802H(W)(L)-I Series User’s Guide 64.
P-2802H(W)(L)-I Series User’s Guide 65 C HAPTER 4 VoIP Wizard And Example This chapter shows you how to configure your SIP account(s) and make a V oIP phone call. 4.1 Introduction The ZyXEL Device has V oice over IP (V oIP) co mmunication capabilities that allow you to use a traditional analog telephone to make Internet calls.
Chapter 4 VoIP Wizard And Example P-2802H(W)(L)-I Series User’s Guide 66 Figure 26 Select a Mode 2 Click V OICE OVE R INTERNET SETUP to configure your SIP settings. Figure 27 Wizard: Welcome 3 Fill in the V OICE OVER INTERNET SETUP wizard screen with the information provided by your V oIP service provider .
Chapter 4 VoIP Wizard A nd Example P-2802H(W)(L)-I Series User’s Guide 67 Figure 28 V oIP Wizard Configurat ion The following table describes the labels in this screen. Username V oIPUser This is the us ername you use to lo gin to your SIP account. Password Password This is the password you use to login to your SIP account.
Chapter 4 VoIP Wizard And Example P-2802H(W)(L)-I Series User’s Guide 68 4 Y our ZyXEL Device will attempt to register your SIP account with your V oIP service provider . When your a ccount is registered your PHONE 1 light wi ll come on and yo u are ready to make and receive V oIP phone calls.
Chapter 4 VoIP Wizard A nd Example P-2802H(W)(L)-I Series User’s Guide 69 Figure 31 V oIP Wizard Finish 7 T o call other V oIP users, you need to follow a similar proces s to ensure that their SIP account is registered and active. After it is re gistered, they need to provide you with their SIP number .
Chapter 4 VoIP Wizard And Example P-2802H(W)(L)-I Series User’s Guide 70.
71 P ART III Advanced S tatus Screens (73) WA N S e t u p ( 8 3 ) LAN Setup (89) W ireless LAN (101) Network Address T ranslation (NA T) Screens (1 17) V oice (129) Firewalls (155) Content Filtering (.
72.
P-2802H(W)(L)-I Series User’s Guide 73 C HAPTER 5 Status Screens Use the St a t u s screens to look at the current status of the device, system resources, inte rfaces (LAN and W AN), and SIP accounts. Y ou can als o register and unregister SIP accounts.
Chapter 5 Sta tus Screens P-2802H(W)(L)-I Series User’s Guide 74 Each field is described in the following table. T able 15 Status Screen LABEL DESCRIPTION Refresh Interval Enter how often you want the ZyXEL Device to u pdate this screen. Apply Click this to update this screen immediatel y .
Chapter 5 Status Screens P-2802H(W)(L)-I Series User’s Guide 75 System S tatus System Uptime This field displays how long the ZyXEL Device has been runni ng since it last started up. The ZyXEL Device starts up when you plug it in, when you restart it ( Maintenance > T ools > Restart ), or when you reset it (see Section 1.
Chapter 5 Sta tus Screens P-2802H(W)(L)-I Series User’s Guide 76 5.2 Any IP T able Click S tatus > AnyIP T able to access this screen. Use this screen to view the IP addres s and MAC address of each computer that is using the ZyXEL Device but is in a different subnet than the ZyXEL Device.
Chapter 5 Status Screens P-2802H(W)(L)-I Series User’s Guide 77 5.3 WLAN S t atus (“W” models only) Click St a t u s > W L A N St a t u s to access this screen. Use this screen to view the wireless stations that are currently ass ociated to the ZyXEL Device.
Chapter 5 Sta tus Screens P-2802H(W)(L)-I Series User’s Guide 78 Figure 35 Packet S tatistics The following table describes th e fields in this screen. T able 18 Packet S tatistics LABEL DESCRIPTION System Monitor System up T ime Thi s is the elapsed time the system has been up.
Chapter 5 Status Screens P-2802H(W)(L)-I Series User’s Guide 79 5.5 V oIP St atistics Click St a t u s > V o I P St a t i s t i c s to access this screen. Figure 36 V oIP S tatistics Each field is described in the following table. Interface This field displays either Ethernet (LAN ports) or Wireless (WLAN port).
Chapter 5 Sta tus Screens P-2802H(W)(L)-I Series User’s Guide 80 Registration This field displays the current regi stration status of the SIP account. Y o u can change thi s in the Stat us screen. Registered - The SIP account is registered with a SIP server .
Chapter 5 Status Screens P-2802H(W)(L)-I Series User’s Guide 81 Poll Interval(s) Enter how often you want the Z yXEL Device to upda te this screen, and cli ck Set Interval . Set Interval Click this to make the ZyXEL De vice update the screen ba sed on the amount of time you specified in Poll Interval .
Chapter 5 Sta tus Screens P-2802H(W)(L)-I Series User’s Guide 82.
P-2802H(W)(L)-I Series User’s Guide 83 C HAPTER 6 WAN Setup This chapter describes how to configure W AN settings. 6.1 W AN Overview A W AN (W ide Area Network) is an outside conn ection to another network or t he Internet. 6.1.1 PPP over Ethernet The ZyXEL Device supports PPPoE (Point-to-Poin t Protocol over Ethernet ).
Chapter 6 WAN Setup P-2802H(W)(L)-I Series User’s Guide 84 6.1.3 Nailed-Up Connection (PPP) A nailed-up connection is a dial-u p line where the connectio n is always up regardless of tra ffic demand. The ZyXEL Device does two things wh en you specify a nailed-up connectio n.
Chapter 6 WAN Setup P-2802H(W)(L)-I Series User’s Guide 85 The following table describes the labels in this screen. T able 20 Internet Access Setup LABEL DESCRIPTION General Mode Select Routing (default) from the drop-down list b ox if your ISP give you one IP address only and you want multiple com puters to shar e an Intern et account.
Chapter 6 WAN Setup P-2802H(W)(L)-I Series User’s Guide 86 6.2.1 Advanced Internet Access Setup Use this screen to edit your ZyXEL Devi ce's advanced W AN settings. Click the Advanced Setup button in the Inter net Access Setup screen. The sc reen appears as shown.
Chapter 6 WAN Setup P-2802H(W)(L)-I Series User’s Guide 87 6.3 W AN Interface Setup Use this screen to configure your ZyX EL Device’ s W AN interface setting.
Chapter 6 WAN Setup P-2802H(W)(L)-I Series User’s Guide 88.
P-2802H(W)(L)-I Series User’s Guide 89 C HAPTER 7 LAN Setup This chapter describes how to configure LAN settings. 7.1 LAN Overview A Local Area Network (LAN) is a shared comm unication system to which many computers are attached. A LAN is a computer network lim ited to the immediate area, usually the same building or floor of a building.
Chapter 7 LAN Setup P-2802H(W)(L)-I Series User’s Guide 90 7.1.2 DHCP Setup DHCP (Dynamic Host Configuration Protocol , RFC 2131 and RFC 2132) allows individual clients to obtain TCP/IP configuration at start-up from a server . Y ou can configure the ZyXEL Device as a DHCP server or disable it.
Chapter 7 LAN Setup P-2802H(W)(L)-I Series User’s Guide 91 7.3.1 IP Address and Subnet Mask Similar to the way houses on a street share a common street name, so too do computers on a LAN share one common network number . Where you obtain your netwo rk number depends on your particular situation.
Chapter 7 LAN Setup P-2802H(W)(L)-I Series User’s Guide 92 7.3.2 RIP Setup RIP (Routing Information Protocol) allows a ro uter to e xchange rou ting information with other routers. The RIP Direction field controls the sending a nd receiving of RIP packets.
Chapter 7 LAN Setup P-2802H(W)(L)-I Series User’s Guide 93 7.3.4 Any IP T raditionally , you must set the IP addresses an d the subnet masks of a computer and the ZyXEL Device to be in the same subnet to allo w the computer to access the Internet (through the ZyXEL Device).
Chapter 7 LAN Setup P-2802H(W)(L)-I Series User’s Guide 94 The following lists out the steps taken, when a co mputer tries to access the Internet for the first time through the ZyXEL Device.
Chapter 7 LAN Setup P-2802H(W)(L)-I Series User’s Guide 95 7.4.1 Configuring Advanced LAN Setup Use this screen to edit your ZyXEL Device's RIP , multicast, any IP and W indows Networking settings. Click the Advanced Setup button in the LAN IP scree n.
Chapter 7 LAN Setup P-2802H(W)(L)-I Series User’s Guide 96 7.5 DHCP Setup Click Network > D HCP Setup to open this screen. Use this screen to configure the DNS server information that the ZyXEL Device sends to the DHCP client devi ces on the LAN.
Chapter 7 LAN Setup P-2802H(W)(L)-I Series User’s Guide 97 The following table describes the labels in this screen. 7.6 LAN Client List This table allows you to assign IP addresses on the LAN to specific individual computers based on their MAC addresses.
Chapter 7 LAN Setup P-2802H(W)(L)-I Series User’s Guide 98 Every Ethernet device has a unique MAC (Med ia Access Control) addre ss. The MAC address is assigned at the factory and consists of six pairs of hexadec imal characters, for example, 00:A0:C5:00:00:02.
Chapter 7 LAN Setup P-2802H(W)(L)-I Series User’s Guide 99 7.7 LAN IP Alias IP alias allows you to partition a physical network into dif fer ent logical networks over the same Ethernet interface.
Chapter 7 LAN Setup P-2802H(W)(L)-I Series User’s Guide 100 Figure 47 LAN IP Alias The following table describes the labels in this screen. T able 27 LAN IP Alias LABEL DESCRIPTION IP Alias 1, 2 Sele ct the check box to confi gure another LAN network for the ZyXEL Device.
P-2802H(W)(L)-I Series User’s Guide 101 C HAPTER 8 Wireless LAN This chapter discusses how to configure the wire less network settings in your ZyXEL Device. See the appendices for more de tailed information about wirele ss networks. This chap ter applies to the “W” models only .
Chapter 8 Wireless LAN P-2802H(W)(L)-I Series User’s Guide 102 Like radio stations or television channels, e ach wireless network uses a s pecific channel, or frequency , to send and receive information. • Every device in the same wireless networ k must use security compatible with the AP .
Chapter 8 Wireless LAN P-2802H(W)(L)-I Series User’s Guide 103 Unauthorized wireless devices can still see the information that is sent in the wireless network, even if they cannot use the wireless network. Furthermore, there are ways for unauthorized wireless users to get a valid user name and p assword.
Chapter 8 Wireless LAN P-2802H(W)(L)-I Series User’s Guide 104 8.2.5 One-T ouch Intelligent S ecurity T echnology (OTIST) W ith ZyXEL ’ s OTIST , you set up the SSID an d the encryption (WEP or WP A-PSK) on the ZyXEL Device. Then, the ZyXEL Device transfer s them to the devices in the wireless networks.
Chapter 8 Wireless LAN P-2802H(W)(L)-I Series User’s Guide 105 Figure 49 Wireless LAN > General The following table describes the labels in this screen. 8.4.1 No Security Select No Security to allow wireless stations to commun icate with the access points without any data encryption.
Chapter 8 Wireless LAN P-2802H(W)(L)-I Series User’s Guide 106 " If you do not enable any wi reless security on your Zy XEL Device, your network is accessible to any wireless network ing device that is within range. Figure 50 Wireless: No Security The following table describes the labels in this screen.
Chapter 8 Wireless LAN P-2802H(W)(L)-I Series User’s Guide 107 Figure 51 Wireless: S tatic WEP Encryption The following table describes the wireless LAN security labels in this screen. 8.4.3 WP A(2)-PSK In order to configure and enable WP A(2)-PSK authentication; click Network > Wir ele ss LAN to display the Ge neral screen.
Chapter 8 Wireless LAN P-2802H(W)(L)-I Series User’s Guide 108 Figure 52 Wireless: WP A(2)-PSK The following table describes the wireless LAN security labels in this screen. T able 33 Wireless: WPA(2)-PSK LABEL DESCRIPTION Security Mode Choo se WP A-PSK or WP A2-PSK from the drop-down list box.
Chapter 8 Wireless LAN P-2802H(W)(L)-I Series User’s Guide 109 8.4.4 WP A(2) Au thentication Screen In order to configure and enable WP A Authentication; click the Wireless LAN link under Network to display the Wir e less screen. Select WP A or WP A2 from the Security list.
Chapter 8 Wireless LAN P-2802H(W)(L)-I Series User’s Guide 11 0 8.4.5 Wireless LAN Advanced Setup T o configure advanced wi reless settings, click the Advanced Setup button in the General screen.
Chapter 8 Wireless LAN P-2802H(W)(L)-I Series User’s Guide 111 The following table describes the labels in this screen. 8.5 OTIST Screen Use this screen to set up and start OTIST on th e ZyXEL Device in your wireless network. T o open this screen, click Network > Wir eles s LAN > OTIST .
Chapter 8 Wireless LAN P-2802H(W)(L)-I Series User’s Guide 11 2 The following table describes the labels in this screen. Before you click St a r t , you should enable OTIST on all the OTIST -enabled devices in the wireless network. For most devices, follow these steps.
Chapter 8 Wireless LAN P-2802H(W)(L)-I Series User’s Guide 11 3 Figure 57 OTIST : Settings Y ou can use the key in this screen to set up WP A -PSK encryption manually for no n-OTIST devices in the wireless network. Review the settings, and click OK .
Chapter 8 Wireless LAN P-2802H(W)(L)-I Series User’s Guide 11 4 2 If an OTIST -enabled wireless device loses its wireless connection for more than ten seconds, it will search for an OTIST -enabled AP for up to one minute.
Chapter 8 Wireless LAN P-2802H(W)(L)-I Series User’s Guide 11 5 The following table describes the labels in this screen. T able 37 MAC Address Filter LABEL DESCRIPTION Active MAC Filter Select the check box to en able MAC address filtering. Filter Action Define the filter action for the list of MAC addresses in the MAC Address table.
Chapter 8 Wireless LAN P-2802H(W)(L)-I Series User’s Guide 11 6.
P-2802H(W)(L)-I Series User’s Guide 11 7 C HAPTER 9 Network Address Translation (NAT) Screens This chapter discusses how to configure NA T on the ZyXEL Device.
Chapter 9 Network Add ress Translat ion (NAT) Screens P-2802H(W)(L)-I Series User’s Guide 11 8 9.1.2 What NA T Does In the simplest form, NA T changes the sour ce IP address in a packet received from a subscriber (the inside local address) to anothe r (the inside global address) before forwarding the packet to the W AN side.
Chapter 9 Network Address Translation (NAT ) Screens P-2802H(W)(L)-I Series User’s Guide 11 9 Figure 63 NA T Application With IP Alias 9.1.5 NA T Mapp ing T yp es NA T supports five types of IP/port mapping. They are: • One to One : In One-to-One mode, the ZyXEL Devi ce maps one local IP address to one global IP address.
Chapter 9 Network Add ress Translat ion (NAT) Screens P-2802H(W)(L)-I Series User’s Guide 120 The following table summarizes these types. 9.2 SUA (Single User Account) V ersus NA T SUA (Single User Account) is a ZyNOS implemen tation of a subset of NA T that supports two types of mapping, Many-to-One and Server .
Chapter 9 Network Address Translation (NAT ) Screens P-2802H(W)(L)-I Series User’s Guide 121 Figure 64 NA T General The following table describes the labels in this screen.
Chapter 9 Network Add ress Translat ion (NAT) Screens P-2802H(W)(L)-I Series User’s Guide 122 Y ou may enter a single port number or a range of port numbers to be forwarded, and the local IP address of the desired serve r . The port numb er identifies a service; fo r example, web service is on port 80 and FTP on port 21.
Chapter 9 Network Address Translation (NAT ) Screens P-2802H(W)(L)-I Series User’s Guide 123 Figure 65 Multiple Servers Be hind NA T Example 9.5 Configuring Port Forwarding " If you do not assi.
Chapter 9 Network Add ress Translat ion (NAT) Screens P-2802H(W)(L)-I Series User’s Guide 124 The following table describes th e fields in this screen. 9.5.1 Port Forwarding Rule Edit Use this screen to edit a port forwarding rule. Cl ick the rule’ s edit icon in the Port Forwarding screen to display the screen show n next.
Chapter 9 Network Address Translation (NAT ) Screens P-2802H(W)(L)-I Series User’s Guide 125 The following table describes th e fields in this screen. 9.6 Address Mapping " The Address Mapping screen is available only when you select Full Feature in the NA T > General screen.
Chapter 9 Network Add ress Translat ion (NAT) Screens P-2802H(W)(L)-I Series User’s Guide 126 Figure 68 Address Mapping Rule s The following table describes th e fields in this screen. 9.6.1 Address Mapping Rule Edit T o edit an address mapping rule, click the rule’ s edit icon in the Address Mapping screen to display the screen shown next.
Chapter 9 Network Address Translation (NAT ) Screens P-2802H(W)(L)-I Series User’s Guide 127 Figure 69 Edit Address Mapping Rule The following table describes th e fields in this screen. T able 44 Edit Address Mapping Rule LABEL DESCRIPTION Ty p e Cho ose the port mappin g type from one of the following.
Chapter 9 Network Add ress Translat ion (NAT) Screens P-2802H(W)(L)-I Series User’s Guide 128 9.6.2 SIP ALG Some NA T routers may include a SIP Application Layer Gateway (ALG). A SIP ALG allows SIP calls to pass through NA T by examining and translating IP addresses embedde d in the data stream.
P-2802H(W)(L)-I Series User’s Guide 129 C HAPTER 10 Voice This chapter provides background informatio n on V oIP and SIP and explains how to configure your device’ s voice settings. 10.1 Introduction to V oIP V oIP is the sending of voice signals over Inte rnet Protoco l.
Chapter 10 Voice P-2802H(W)(L)-I Series User’s Guide 130 10.2.1.2 SIP Service Domain The SIP service domain of the V oIP service provid er is the domain name in a SIP URI. For example, if the SIP address is 1 122334455@V oIP-provider .com , then “V oIP-provider .
Chapter 10 Voice P-2802H(W)(L)-I Series User’s Guide 131 Figure 71 SIP User Agent 10.2.3.2 SIP Proxy Server A SIP proxy server receives requests from clie nts and forward s them to another server . In the following example, you want to use client device A to call someone who is using client device C.
Chapter 10 Voice P-2802H(W)(L)-I Series User’s Guide 132 Figure 73 SIP Redirect Server 10.2.3.4 SIP Register Server A SIP register server maintains a database of SIP identity-to-IP address (or domain name) mapping. The register server checks your u ser name and password when you register .
Chapter 10 Voice P-2802H(W)(L)-I Series User’s Guide 133 • G .729 is an Analysis-by-Synthe sis (AbS) hybrid waveform co dec that uses a filter based on information about how the human vocal tract produces sounds. G .729 provides good sound quality and reduces the re quired bandwidth to 8 kbps.
Chapter 10 Voice P-2802H(W)(L)-I Series User’s Guide 134 1 Pick up the phone and press “****” on yo ur phone’ s keypad and wait for the message that says you are in the configuration menu. 2 Press a number from 1201~1208 followed by the “#” key to listen to the tone.
Chapter 10 Voice P-2802H(W)(L)-I Series User’s Guide 135 Figure 74 Diff Serv: Differentiated Service Field The DSCP value determines the forwardi ng behavior , the PHB (Per-Hop Behavior), that each packet gets across the DiffServ network.
Chapter 10 Voice P-2802H(W)(L)-I Series User’s Guide 136 Figure 75 SIP > SIP Settings Each field is described in the following table. T able 48 SIP > SIP Settings LABEL DESCRIPTION SIP Account Select the SIP account you want to see in this scree n.
Chapter 10 Voice P-2802H(W)(L)-I Series User’s Guide 137 10.5 Advanced SIP Setup Screen Click V oIP > SIP > SIP Settings to open the SIP Settings screen. Select a SIP account and click Advanced Setup to open the Advanced SIP Setup screen. Use this screen to maintain advanced settings for each SIP account.
Chapter 10 Voice P-2802H(W)(L)-I Series User’s Guide 138 Figure 76 V oIP > SIP Settings > Advanced Each field is described in the following table. T able 49 VoIP > SIP Settings > Advanced LABEL DESCRIPTION SIP Account This field displ ays the SIP account you see in this screen.
Chapter 10 Voice P-2802H(W)(L)-I Series User’s Guide 139 URL T ype Select whether or not to include th e SIP service domain name when the ZyXEL Device sends the SIP number . SIP - include the SIP service domai n name. TEL - do not include the SIP service domain name.
Chapter 10 Voice P-2802H(W)(L)-I Series User’s Guide 140 Enable Select this if your V oIP service provi der has a SIP ou tbound server to handle voice calls. This allows the ZyXEL Device to work with any type of NA T router and eliminates the need fo r STUN or a SIP AL G .
Chapter 10 Voice P-2802H(W)(L)-I Series User’s Guide 141 10.6 SIP QoS Screen Use this screen to maintain T o S and VLAN se ttings for the ZyXEL De vice. T o access this screen, click V oIP > SIP > QoS . Figure 77 SIP > QoS Each field is described in the following table.
Chapter 10 Voice P-2802H(W)(L)-I Series User’s Guide 142 10.7.2 Comfort Noise Generation When using V AD, the ZyXEL Device generates co mfort noise when the other party is not speaking. The comfort noise lets you know that th e line is still connected as total silence could easily be mistaken for a lost connection.
Chapter 10 Voice P-2802H(W)(L)-I Series User’s Guide 143 10.9 Advanced Analog Phone Setup Screen Use this screen to edit advanced settings for eac h phone port. T o access this screen, click Advanced Setup in V oIP > Phone > Analog Phon e . Figure 79 Phone > Analog Phone > Advanced Each field is described in the following table.
Chapter 10 Voice P-2802H(W)(L)-I Series User’s Guide 144 10.10 Common Phone Settings Screen Use this screen to activate and deactivate im mediate dialing. T o acces s this screen, click Vo I P > Phone > Common . Figure 80 Phone > Common Each field is described in the following table.
Chapter 10 Voice P-2802H(W)(L)-I Series User’s Guide 145 10.1 1 Phone Services Overview Supplementary services such as call hold, call waiting, call transfer , etc.
Chapter 10 Voice P-2802H(W)(L)-I Series User’s Guide 146 10.1 1.2.1 European Call Hold Call hold allows you to put a call ( A ) o n hold by pressing the flash key . If you have anothe r call, press the flash key an d then “2” to switch back and forth between caller A and B by putting either one on hold.
Chapter 10 Voice P-2802H(W)(L)-I Series User’s Guide 147 2 Dial a phon e number directly to make another call. 3 When the second call is answered, pre ss the fl ash key and press “3” to create a three-way conversation. 4 Hang up the phone to drop th e connection.
Chapter 10 Voice P-2802H(W)(L)-I Series User’s Guide 148 2 Dial a phone number d irectly to make another call (to part y B). 3 When party B answers the second call, press the flash key to create a three-wa y conversation. 4 Hang up the phone to drop th e connection.
Chapter 10 Voice P-2802H(W)(L)-I Series User’s Guide 149 Use this screen to add, edit, or remove speed-d ial numbers for outgoing calls. T o access this screen, click V oIP > Phone Book > Speed Dial . In peer-to-peer calls, you call another V oIP device directly wi thout going through a V oIP service provider ’ s SIP server .
Chapter 10 Voice P-2802H(W)(L)-I Series User’s Guide 150 10.14 Incoming Call Policy Screen Use this screen to maintain rules for handlin g inco ming calls. Y ou can block, redirect, or accept them. T o a ccess this s creen, click V oIP > Phone Book > Incoming Call Policy .
Chapter 10 Voice P-2802H(W)(L)-I Series User’s Guide 151 Y ou can create two sets of call-forwarding rules. Each one is stored in a ca ll-forwarding table. Each field is described in the following table. T able 58 Phone Book > Incoming Call Policy LABEL DESCRIPTION T able Number Select the ca ll-forwarding table you want to see in this screen.
Chapter 10 Voice P-2802H(W)(L)-I Series User’s Guide 152 10.15 PSTN Line (“L” models only) W ith PSTN line you can make an d receive regular PSTN phone call s. Use a prefix number to make a regular call. When the devic e does not have power , yo u can make regula r calls without dialing a prefix number .
Chapter 10 Voice P-2802H(W)(L)-I Series User’s Guide 153 Each field is described in the following table. T able 59 PSTN Line > General LABEL DESCRIPTION PSTN Line Pre-fix Number Enter a prefix (o.
Chapter 10 Voice P-2802H(W)(L)-I Series User’s Guide 154.
P-2802H(W)(L)-I Series User’s Guide 155 C HAPTER 11 Firewalls Use these screens to enable and configure the firewall that protects your ZyXEL Device and your LAN from unwanted o r malicious traffic.
Chapter 11 Firewalls P-2802H(W)(L)-I Series User’s Guide 156 • allows traffi c that originates from your LAN computers to go to all of the networks. • blocks traffic that originates on the other networks from going to the LAN. Y our customized rules take precedence and ove rride the ZyXEL Device’ s default settings.
Chapter 11 Firewalls P-2802H(W)(L)-I Series User’s Guide 157 • LAN to W AN These rules specify which computers on the LAN ca n access which computers or services on the W AN.
Chapter 11 Firewalls P-2802H(W)(L)-I Series User’s Guide 158 1 1.3 Security Considerations " Incorrectly configuri ng the firewall may block valid access or introduce security risks to the ZyXEL Device and your protected network. Use caution when creating or deleting firewall rules and test your rules af ter you configure them.
Chapter 11 Firewalls P-2802H(W)(L)-I Series User’s Guide 159 2 The ZyXEL Device reroutes the SYN packet through Gateway A on the LAN to the WA N . 3 The reply from the W AN goes directly to the computer on the LAN without going through the ZyXEL Device.
Chapter 11 Firewalls P-2802H(W)(L)-I Series User’s Guide 160 Figure 87 IP Alias 1 1.5 General Firewall Policy Click Security > Fir ew all to display the followi ng screen. Activate the firewall by selecting the Active Fir ewall check box as seen in the following screen.
Chapter 11 Firewalls P-2802H(W)(L)-I Series User’s Guide 161 The following table describes the labels in this screen. 1 1.6 Firewall Rules Summary " The ordering of your rules is very important as rules are applied in turn. Refer to Section 1 1.
Chapter 11 Firewalls P-2802H(W)(L)-I Series User’s Guide 162 Click Security > Firewall > Rules to bring up the following scre en. This scree n displays a list of the configured firewall rules. Note the order in which the rules are listed. Figure 89 Firewall Rules The following table describes the labels in this screen.
Chapter 11 Firewalls P-2802H(W)(L)-I Series User’s Guide 163 1 1.6.1 Configuring Firewall Rules Refer to Section 1 1.5 on page 160 for more information. In the Rules screen, select an index number and click Add or click a rule’ s Edit icon to display this screen and refe r to the following table for information on the l a bels.
Chapter 11 Firewalls P-2802H(W)(L)-I Series User’s Guide 164 Figure 90 Firewall: Edit Rule The following table describes the labels in this screen. T able 62 Firewall: Edit Rule LABEL DESCRIPTION Activ e Select this option to enable th is firewall rule.
Chapter 11 Firewalls P-2802H(W)(L)-I Series User’s Guide 165 Source/Destination Address Address T ype Do you want your rule to apply to packets with a p a rticular (single) IP , a range of IP addresses (for instance, 192.
Chapter 11 Firewalls P-2802H(W)(L)-I Series User’s Guide 166 1 1.6.2 Customized Services Configure customized services and port number s not predefined by the ZyXEL Device. For a comprehensive list of port numbers and services, visit the IANA (Internet Assigned Number Authority) website.
Chapter 11 Firewalls P-2802H(W)(L)-I Series User’s Guide 167 Figure 92 Firewall: Configure Customized Services The following table describes the labels in this screen. 1 1.7 Example Firewall Rule The following Internet firewa ll rule example allows a hypot hetical “MyService” connection from the Internet.
Chapter 11 Firewalls P-2802H(W)(L)-I Series User’s Guide 168 Figure 93 Firewall Example: Rules 3 In the Rules screen, select the index number after that you want to add the rule. For example, if you select “6”, your new rule b ecomes number 7 and the previous rule 7 (if there is one) becomes rule 8.
Chapter 11 Firewalls P-2802H(W)(L)-I Series User’s Guide 169 Figure 95 Firewall Example: Edit Ru le: Des tination Addres s 9 Use the Add >> and Remove buttons between A vailable Services and Selected Services list boxes to configure it as follows.
Chapter 11 Firewalls P-2802H(W)(L)-I Series User’s Guide 170 Figure 96 Firewall Example: Edit Rule: Select Customized Services On completing the configuration procedure for this Internet firewall rule, the Rules screen should look like the following.
Chapter 11 Firewalls P-2802H(W)(L)-I Series User’s Guide 171 Figure 97 Firewall Example: Rules: MyService 1 1.8 Firewall Thresholds For DoS attacks, the ZyXEL Device uses thresholds to determine when to start dropping sessions that do not become fully established (half-open sessions).
Chapter 11 Firewalls P-2802H(W)(L)-I Series User’s Guide 172 1 1.8.1 Threshold V alues If everything is working properly , you probably do not need to ch ange the threshold settings as the default threshold values should work for mo st small of fices.
Chapter 11 Firewalls P-2802H(W)(L)-I Series User’s Guide 173 The following table describes the labels in this screen. T able 65 Firewall: Threshold LABEL DESCRIPTION Denial of Service Thresholds The ZyXEL Device measures both the total number of existing ha lf-open sessions and the rate of session establishment attempts.
Chapter 11 Firewalls P-2802H(W)(L)-I Series User’s Guide 174.
P-2802H(W)(L)-I Series User’s Guide 175 C HAPTER 12 Content Filtering This chapter covers how to configure content filtering. 12.1 Content Filtering Overview Internet content filtering allows you to create and enforce Internet access policies tailored to your needs.
Chapter 12 Content Filtering P-2802H(W)(L)-I Series User’s Guide 176 The following table describes the labels in this screen. 12.3 Configuring the Schedule Use this screen to set the days and times for the ZyXEL Device to pe rform content filtering.
Chapter 12 Con tent Filter ing P-2802H(W)(L)-I Series User’s Guide 177 The following table describes the labels in this screen. 12.4 Configuring T rusted Computers Use this screen to exclude a range of users on the LAN from content f iltering on your ZyXEL Device.
Chapter 12 Content Filtering P-2802H(W)(L)-I Series User’s Guide 178.
P-2802H(W)(L)-I Series User’s Guide 179 C HAPTER 13 Introduction to IPSec This chapter introduces the basics of IPSec VPNs. 13.1 VPN Overview A VPN (V irtual Private Network) provides sec ure communications between sites without the expense of leased site-to-site lines.
Chapter 13 Introduction to IPSec P-2802H(W)(L)-I Series User’s Guide 180 Figure 103 Encryption an d Decryption 13.1.3.2 Dat a Confidentiality The IPSec sender can encrypt packets befo re transmitting them across a network.
Chapter 13 Introdu ction to IPSec P-2802H(W)(L)-I Series User’s Guide 181 Figure 104 IPSec Architecture 13.2.1 IPSec Algorithms The ESP (Encapsulating Security Payload) Protocol (RFC 2406 ) and AH (.
Chapter 13 Introduction to IPSec P-2802H(W)(L)-I Series User’s Guide 182 Figure 105 T ransport and T unnel Mode IPSec Encap sulation 13.3.1 T ransport Mode Tr a n s p o r t mode is used to protect upper layer p rot ocols and only affects the data in the IP packet.
Chapter 13 Introdu ction to IPSec P-2802H(W)(L)-I Series User’s Guide 183 A NA T device in between the IPSec endpoints w ill rewrite either the source or destination address with one of it s own choosing.
Chapter 13 Introduction to IPSec P-2802H(W)(L)-I Series User’s Guide 184.
P-2802H(W)(L)-I Series User’s Guide 185 C HAPTER 14 VPN Screens This chapter introduces the VPN screens. See Chapter 22 on page 289 for information on viewing logs and th e appendix for IPSec log descriptions. 14.1 VPN/IPSec Overview Use the screens documented in this chapter to configure rules for VPN connections and manage VPN connections.
Chapter 14 VPN Screens P-2802H(W)(L)-I Series User’s Guide 186 14.3 My IP Address My IP Address is the W A N IP address of th e ZyXEL Device. The ZyXEL Device has to rebuild the VPN tunnel if My IP Address changes after setup. The following applies if this field is configured as 0.
Chapter 14 VP N Screens P-2802H(W)(L)-I Series User’s Guide 187 If the remote secure gateway has a static W AN IP address, enter it in the Secure Gateway Address field. Y ou may alternatively enter the remote secure gatewa y’ s domain name (if it has one) in the Secure Gateway A ddress field.
Chapter 14 VPN Screens P-2802H(W)(L)-I Series User’s Guide 188 Figure 107 VPN Setup The following table describes the fields in this screen. T able 71 VPN Setup LABEL DESCRIPTION No. This is the VPN policy index number . Click a number to edit VPN policies.
Chapter 14 VP N Screens P-2802H(W)(L)-I Series User’s Guide 189 14.6 Keep Alive When you initiate an IPSec tunnel with keep alive enabled, the ZyX EL Device automatically renegotiates the tunnel wh en the IPSec SA lifetime period expires (see Section 14.
Chapter 14 VPN Screens P-2802H(W)(L)-I Series User’s Guide 190 NA T is not normally compatible with ESP in transport mode either , but the ZyXEL Device’ s NA T T raversal feature provides a way to handle this. NA T traversal allows you to set up an IKE SA when there are NA T routers between the two IPSec routers.
Chapter 14 VP N Screens P-2802H(W)(L)-I Series User’s Guide 191 The following figure depicts an example wh ere three VPN tunnels are created from ZyXEL Device A; one to branch office 2, one to branch of fice 3 and anoth er to headquarters.
Chapter 14 VPN Screens P-2802H(W)(L)-I Series User’s Guide 192 14.9.1 ID T ype and Content Examples T wo IPSec routers must have matching ID type and content configuration in order to set up a VPN tunnel. The two ZyXEL Devices in this example ca n complete negotiation and establish a VPN tunnel.
Chapter 14 VP N Screens P-2802H(W)(L)-I Series User’s Guide 193 The two ZyXEL Devices in this example cann ot complete their negotiation because ZyXEL Device B’ s Local ID type is IP , but ZyXEL Device A ’ s Peer ID type is set to E-mail . An “ID mismatched” message displays in the IPSEC LOG .
Chapter 14 VPN Screens P-2802H(W)(L)-I Series User’s Guide 194 Figure 1 10 VPN Setup: Edit The following table describes the fields in this screen. T able 77 VPN Setup; Edit LABEL DESCRIPTION IPSec Setup Activ e Select this check box to activate this VPN policy .
Chapter 14 VP N Screens P-2802H(W)(L)-I Series User’s Guide 195 NA T Traversal This function is availabl e if the VPN protocol is ESP . Select this check box if you want to set up a VPN tunnel when there are NA T routers between the ZyXEL Device and remote IPSec router .
Chapter 14 VPN Screens P-2802H(W)(L)-I Series User’s Guide 196 IP Address S tart Wh en the Remote Address T ype fi eld is configured to Single , ente r a (static) IP address on the network behind the remote IPSec router .
Chapter 14 VP N Screens P-2802H(W)(L)-I Series User’s Guide 197 Content The configuration of the peer c ontent depend s on the peer ID type. For IP , typ e the IP address of the comput er with which you will make the VPN connection. If you configure this field to 0 .
Chapter 14 VPN Screens P-2802H(W)(L)-I Series User’s Guide 198 14.12 IKE Phases There are two phases to every IKE (Internet Key Exchange) ne gotiation – phase 1 (Authentication) and ph ase 2 (Key Exchange). A phase 1 exchange establishes an IKE SA a nd the second one uses that SA to negotiate SAs for IPSe c.
Chapter 14 VP N Screens P-2802H(W)(L)-I Series User’s Guide 199 • Choose an encryption algorithm. • Choose an authentication algorithm. • Choose a Dif fie-Hellman public-key cryptography key grou p ( DH1 or DH2 ) . • Set the IKE SA lifetime.
Chapter 14 VPN Screens P-2802H(W)(L)-I Series User’s Guide 200 14.12.3 Perfect Fo rward Secrecy (PFS) Enabling PFS means that the key is transient. The key is thrown away an d replaced by a brand new key using a new Diffie-Hellman exchange for each new IPSec SA setup.
Chapter 14 VP N Screens P-2802H(W)(L)-I Series User’s Guide 201 Enable Repla y Detection As a VPN setup is processing intensive, the system is vulnera ble to Denial of Service (DoS) attacks The IPSec receiver c an detect and reject old or duplicate packet s to protect agains t replay attacks.
Chapter 14 VPN Screens P-2802H(W)(L)-I Series User’s Guide 202 14.14 Manual Key Setup Manual key managemen t is useful if you have pro blems with IKE key managemen t. 14.14.1 Security Parameter Index (SPI) An SPI is used to distinguish dif ferent SAs te rminating at the same de stination and using the same IPSec protocol.
Chapter 14 VP N Screens P-2802H(W)(L)-I Series User’s Guide 203 14.15 Configuring Manual Key Y ou only config ure VPN manual key wh en you select Manual in the IPSec Key Mode field on the VPN Setup-Edit screen. This is the VPN Setup - Manual Key screen as shown next.
Chapter 14 VPN Screens P-2802H(W)(L)-I Series User’s Guide 204 Encapsulation Mode Select T unnel mode or T ransport mode from the drop-down list box. DNS Server (for IPSec VPN) If there is a private D NS server that se rvices the VPN, type its IP address here.
Chapter 14 VP N Screens P-2802H(W)(L)-I Series User’s Guide 205 14.16 V iewing SA Monitor Click Security > VPN > Monitor to open the s creen as shown. Use this scre en to display and manage active VPN connections. A Security Association (SA) is the group of se cu rity settings related to a specific VPN tunnel.
Chapter 14 VPN Screens P-2802H(W)(L)-I Series User’s Guide 206 When there is outbound traffic but no inbound tr affic, the SA times out automatically after two minutes. A tunnel with no outb ound or inbound traffic is "idle" and does not timeo ut until the SA lifetime period expires.
Chapter 14 VP N Screens P-2802H(W)(L)-I Series User’s Guide 207 14.17 Configuring Global Setting T o change your ZyXEL Devi ce’ s global settings, click VPN > VPN Global Setting . The screen appears as shown. Figure 1 15 VPN: Global Setting The following table describes the fields in this screen.
Chapter 14 VPN Screens P-2802H(W)(L)-I Series User’s Guide 208 Figure 1 16 T elecommuters Sharing One VPN Rule Example 14.18.2 T elecommuters Usin g Unique VPN Rules Example In this example the tele.
Chapter 14 VP N Screens P-2802H(W)(L)-I Series User’s Guide 209 Figure 1 17 T elecommuters Using Unique VPN R ules Example T able 83 T elecommuters Using Uniq ue VPN Rules Example T ELECOMMUTERS HEADQUARTER S All T e lecommuter Rules: All Headquarters Rules: My IP Address 0.
Chapter 14 VPN Screens P-2802H(W)(L)-I Series User’s Guide 210 14.19 VPN and Remote Management If a VPN tunnel uses T elnet, FTP , WWW , then you should configure remote management ( Remote Management ) to allow access for that service.
P-2802H(W)(L)-I Series User’s Guide 21 1 C HAPTER 15 Certificates This chapter gives background in formation about public-key certificates and explains how to use them. 15.1 Certificates Overview The ZyXEL Device can use certificates (also ca lled digital IDs) to authenticate users.
Chapter 15 Certificates P-2802H(W)(L)-I Series User’s Guide 212 Certification authorities maintain directory ser vers with databases of valid and revoked certificates. A directory of certificates that have been revoked before the scheduled exp iration is called a CRL (Certificate Revocation List ).
Chapter 15 Certificates P-2802H(W)(L)-I Series User’s Guide 213 Figure 1 19 My Certificates The following table describes the labels in this screen. T able 84 My Certificates LABEL DESCRIPTION PKI S torage S pace in Use This bar displays the percentage of the Zy XEL Device’s PKI storage space that is currently in use.
Chapter 15 Certificates P-2802H(W)(L)-I Series User’s Guide 214 15.5 My Certificate Import Click Security > Certificates > My Certificates and then Im port to open the My Certificate Import screen. Follow the instructions in this sc reen to save an exis ting certificate to the ZyXEL Device.
Chapter 15 Certificates P-2802H(W)(L)-I Series User’s Guide 215 " Y ou must remove any spaces from th e certificate’s filename before you can import it. 15.5.1 Certificate File Format s The certification authority certific ate that yo u want to import ha s to be in one of these file formats: • Binary X.
Chapter 15 Certificates P-2802H(W)(L)-I Series User’s Guide 216 15.6 My Certificate Create Click Security > Certificates > My Certificates > Crea te to open the My Certificate Create screen.
Chapter 15 Certificates P-2802H(W)(L)-I Series User’s Guide 217 Country T ype up to 127 characters to identify the nation where the ce rtificate owner is located. Y ou may use any character , including spaces, but the ZyXEL Device drops tra iling spaces.
Chapter 15 Certificates P-2802H(W)(L)-I Series User’s Guide 218 After you click Apply in the My Certificate Create screen, you see a screen that tells you the ZyXEL Device is generating the self-signe d certificate or certification request.
Chapter 15 Certificates P-2802H(W)(L)-I Series User’s Guide 219 Figure 122 My Certificate Details.
Chapter 15 Certificates P-2802H(W)(L)-I Series User’s Guide 220 The following table describes the labels in this screen. T able 87 My Certificate Details LABEL DESCRIPTION Certificate Name This field displays the identifying name of this certificate.
Chapter 15 Certificates P-2802H(W)(L)-I Series User’s Guide 221 15.8 T rusted CAs Click Security > Certificates > T rusted CAs to open the T rusted CAs screen. This screen displays a summary list of certificates of the certification authorities that you ha ve set the ZyXEL Device to accept as trusted.
Chapter 15 Certificates P-2802H(W)(L)-I Series User’s Guide 222 Figure 123 T rusted CAs The following table describes the labels in this screen. T able 88 T rusted CAs LABEL DESCRIPTION PKI S torage S pace in Use This bar displays the percentage of the ZyXEL Device’s PKI storage sp a ce that is currently in use.
Chapter 15 Certificates P-2802H(W)(L)-I Series User’s Guide 223 15.9 T rusted CA Import Click Security > Cer tificates > T rusted CAs to open the T rusted CAs screen and then click Import to open the T rusted CA Import screen.
Chapter 15 Certificates P-2802H(W)(L)-I Series User’s Guide 224 15.10 T rusted CA Det ails Click Security > Certificates > T rusted CAs to open the T rusted CAs screen.
Chapter 15 Certificates P-2802H(W)(L)-I Series User’s Guide 225 The following table describes the labels in this screen. T able 90 T rusted CA Details LABEL DESCRIPTION Certificate Name This field displays the id entifying na me of this certificate .
Chapter 15 Certificates P-2802H(W)(L)-I Series User’s Guide 226 15.1 1 T rusted Remote Host s Click Security > Certificates > T rusted Remote Hosts to open the T rusted Remote Hosts screen.
Chapter 15 Certificates P-2802H(W)(L)-I Series User’s Guide 227 Figure 126 T rusted Remote Hosts The following table describes the labels in this screen. T able 91 T rusted Remote Hosts LABEL DESCRIPTION PKI S torage S pace in Use This bar displays the percentage of the Zy XEL Device’s PKI storage space that is currently in use.
Chapter 15 Certificates P-2802H(W)(L)-I Series User’s Guide 228 15.12 V erifying a T rusted Remote Host’ s Certificate Certificates issued by certific ation authorities have the certificat ion authority’ s signature for you to check. Self-sig ned certificates only have th e signature of the host itself.
Chapter 15 Certificates P-2802H(W)(L)-I Series User’s Guide 229 15.13 T rusted Remote Host s Import Click Security > Certificates > T rusted Remote Hosts to open the T rusted Remote Hosts screen and then click Import to open the T rusted Remote Host Import screen.
Chapter 15 Certificates P-2802H(W)(L)-I Series User’s Guide 230 Figure 130 T rusted Remote Host Details The following table describes the labels in this screen. T able 93 T rusted Remote Host Details LABEL DESCRIPTION Certificate Name Thi s field displays the identifyin g name of this certificate.
Chapter 15 Certificates P-2802H(W)(L)-I Series User’s Guide 231 V ersion This field displays the X.509 version number . Serial Number This field displays the certificat e’s identification number given by the de vice that created the certificate.
Chapter 15 Certificates P-2802H(W)(L)-I Series User’s Guide 232 15.15 Directory Servers Click Security > Certificates > Dir ec tory Servers to open the Directory Servers screen. This screen display s a summary list of directory servers (tha t contain lists of valid and revoked certificates) that have been save d into the ZyXEL Device.
Chapter 15 Certificates P-2802H(W)(L)-I Series User’s Guide 233 15.16 Directory Server Add and Edit Click Security > Certificates > Dir ec tory Servers to open the Directory Servers screen. Click Add (or the details icon) to open the Direc tory Server Add screen.
Chapter 15 Certificates P-2802H(W)(L)-I Series User’s Guide 234 Login Setting Login The ZyXEL Device may need to authenticat e itself in order to assess the directory server . T ype the login name (up to 31 ASCII characters) from the entity maintaining the directory server (u sually a certification auth ority).
P-2802H(W)(L)-I Series User’s Guide 235 C HAPTER 16 Static Route This chapter shows you how to configure static routes for your ZyXEL Device. 16.1 S t atic Route Each remote node specifies only the network to which the gateway is di rectly connected, and the ZyXEL Device has no know ledge of the ne tworks beyond.
Chapter 16 Static Rou te P-2802H(W)(L)-I Series User’s Guide 236 Figure 134 S tatic Route The following table describes the labels in this screen. 16.2.1 S tatic Route Edit Select a static route index numb er and click Edit . The screen shown next appears.
Chapter 16 Static Route P-2802H(W)(L)-I Series User’s Guide 237 Figure 135 S tatic Route Edit The following table describes the labels in this screen. T able 97 Static Rou te Edit LABEL DESCRIPTION Activ e This field allows you to activa te/deactivate this static route.
Chapter 16 Static Rou te P-2802H(W)(L)-I Series User’s Guide 238.
P-2802H(W)(L)-I Series User’s Guide 239 C HAPTER 17 Quality of Service (QoS) This chapter contains information about configuring QoS, editing classifiers and viewing the ZyXEL Device’ s QoS packet statistics.
Chapter 17 Quality of Service (QoS) P-2802H(W)(L)-I Series User’s Guide 240 17.1.2 IP Precedence Similar to IEEE 802.1p prioritization at laye r -2, you can use IP precedence to prioritize packets in a layer-3 network. IP precedence u ses three bits of the eight-bit T oS (T ype of Service) field in the IP header .
Chapter 17 Quality of Service (QoS) P-2802H(W)(L)-I Series User’s Guide 241 17.1.4 Automatical Priority Queue A ssignment If you enable QoS on the ZyXEL Device, the ZyXEL Device can automatically base on the IEEE 802.1p priority level, IP precedence and/or packet length to assi gn priority to traffic which does not match a class.
Chapter 17 Quality of Service (QoS) P-2802H(W)(L)-I Series User’s Guide 242 Figure 136 QoS: General The following table describes the labels in this screen.
Chapter 17 Quality of Service (QoS) P-2802H(W)(L)-I Series User’s Guide 243 Click Advanced > QoS > Class Setup to open the following screen. Figure 137 QoS: Class Setup The following table describes the labels in this screen. 17.3.1 Class Configuration Click the Add button or the Edit icon in the Modify field to configure a classifier .
Chapter 17 Quality of Service (QoS) P-2802H(W)(L)-I Series User’s Guide 244 Figure 138 QoS Class Configuration See Appendix E on page 3 73 for a list of commonly-used services.
Chapter 17 Quality of Service (QoS) P-2802H(W)(L)-I Series User’s Guide 245 T ag Config uration DSCP V alue Select Same to keep the DSCP fields in the packets. Select Auto to map the DSCP value to 802.1 priority level automatically . Select Mark to set the DSCP field with the value you configure in the field provided.
Chapter 17 Quality of Service (QoS) P-2802H(W)(L)-I Series User’s Guide 246 17.3.2 QoS Example In the following figure, your In ternet connection has an upstream transmission speed of 50 Mbps.
Chapter 17 Quality of Service (QoS) P-2802H(W)(L)-I Series User’s Guide 247 Figure 141 QoS Class Examp le: V oIP -2 Figure 142 QoS Class Example: Boss -1.
Chapter 17 Quality of Service (QoS) P-2802H(W)(L)-I Series User’s Guide 248 Figure 143 QoS Class Example: Boss -2 17.4 QoS Monitor T o view the ZyXEL Device’ s QoS packet statistics, click Advan ced > QoS > Monitor . The screen appears as shown.
Chapter 17 Quality of Service (QoS) P-2802H(W)(L)-I Series User’s Guide 249 The following table describes the labels in this screen. T able 103 QoS Monitor LABEL DESCRIPTION Priority Queue This shows the priority queue number .
Chapter 17 Quality of Service (QoS) P-2802H(W)(L)-I Series User’s Guide 250.
P-2802H(W)(L)-I Series User’s Guide 251 C HAPTER 18 Dynamic DNS Setup This chapter discusses how to configure your ZyXEL Device to use Dynamic DNS. 18.1 Dynamic DNS Overview Dynamic DNS allows you to update your curre nt dynamic IP address with one or many dynamic DNS services so that anyone can c ont act you (in NetMeeting, CU-SeeMe, etc.
Chapter 18 Dy namic DNS Se tup P-2802H(W)(L)-I Series User’s Guide 252 Figure 145 Dynamic DNS The following table describes th e fields in this screen. T able 104 Dynamic DNS LABEL DESCRIPTION Dynamic DNS Setup Active Dynamic DNS Select this check box to use dy namic DNS.
Chapter 18 Dynamic DNS Setup P-2802H(W)(L)-I Series User’s Guide 253 Dynamic DNS server auto detect IP Address Select this option only when the re are one or more NA T routers between the ZyXEL Device and the DDNS server .
Chapter 18 Dy namic DNS Se tup P-2802H(W)(L)-I Series User’s Guide 254.
P-2802H(W)(L)-I Series User’s Guide 255 C HAPTER 19 Remote Management Configuration This chapter provides information on config uring remote management. 19.1 Remote Management Overview Remote management allows you to determ ine which services/protocols can access which ZyXEL Device interface (if any) from which computers.
Chapter 19 Remote Management Configuration P-2802H(W)(L)-I Series User’s Guide 256 " When you choose WA N only or LAN & W AN , you still need to configure a firewall rule to allow access. T o disable remote management of a service, select Disable in the corresponding Access S tatus field.
Chapter 19 Remote Ma nagement Configuration P-2802H(W)(L)-I Series User’s Guide 257 19.2 WWW (HTTP and HTTPS) HTTPS (HyperT ext T ransfer Protocol over Secure Socket Layer , or HTTP over SSL) is a web protocol that encrypts and decrypts web pages.
Chapter 19 Remote Management Configuration P-2802H(W)(L)-I Series User’s Guide 258 19.3 WWW Use this screen to configure the ZyXEL De vice’ s HTTP and HTTPS management settings. Click Advanced > Remote MGMT to display the WWW screen. Figure 148 Remote Mana gement: WWW The following table describes the labels in this screen.
Chapter 19 Remote Ma nagement Configuration P-2802H(W)(L)-I Series User’s Guide 259 19.4 HTTPS Example If you haven’t changed the default HTTPS port on the ZyXEL Device, then in your browser enter.
Chapter 19 Remote Management Configuration P-2802H(W)(L)-I Series User’s Guide 260 19.4.2 Net scape Navigator W arning Messages When you attempt to access the ZyXEL Device HTTPS server , a W ebsite Certified by an Unknown Authority screen pops up asking if you trust the server certificate.
Chapter 19 Remote Ma nagement Configuration P-2802H(W)(L)-I Series User’s Guide 261 • The issuing certificate author ity of the ZyXEL Device’ s HT TPS server certificate is not one of the browser ’ s trusted certificate authoritie s.
Chapter 19 Remote Management Configuration P-2802H(W)(L)-I Series User’s Guide 262 Figure 152 Example: Lock Denotin g a Secure Connec tion Click Login and you then see the next sc reen. The factory default certificate is a common de fault certificate for all ZyXEL Device models.
Chapter 19 Remote Ma nagement Configuration P-2802H(W)(L)-I Series User’s Guide 263 Figure 154 Device-specific Certificate Click Ignore in the Replace Certificate screen to use the common ZyXEL Device certificate. Y ou will then see this information in the My Certificates screen.
Chapter 19 Remote Management Configuration P-2802H(W)(L)-I Series User’s Guide 264 Figure 156 Remote Mana gement: T elnet The following table describes the labels in this screen.
Chapter 19 Remote Ma nagement Configuration P-2802H(W)(L)-I Series User’s Guide 265 Figure 157 Remote Mana gement: FTP The following table describes the labels in this screen. 19.8 SNMP Simple Network Management Protocol (SNM P) i s a protocol used for ex changing management information b e tween network devices.
Chapter 19 Remote Management Configuration P-2802H(W)(L)-I Series User’s Guide 266 Figure 158 SNMP Managemen t Model An SNMP managed network consis ts of two main types of comp onent: agen ts and a manager . An agent is a management software module that resi des in a managed device (the ZyXEL Device).
Chapter 19 Remote Ma nagement Configuration P-2802H(W)(L)-I Series User’s Guide 267 19.8.2 SNMP T rap s The ZyXEL Device will send traps to the SNMP manager when any on e of the following events occurs: 19.8.3 Configuring SNMP T o change your ZyX EL Device’ s SNMP settings , click Advanced > Remote MGMT > SNMP .
Chapter 19 Remote Management Configuration P-2802H(W)(L)-I Series User’s Guide 268 The following table describes the labels in this screen. 19.9 Configuring DNS Use DNS (Domain Name System) to map a domain name to its corresponding IP address and vice versa.
Chapter 19 Remote Ma nagement Configuration P-2802H(W)(L)-I Series User’s Guide 269 Figure 160 Remote Mana gement: DNS The following table describes the labels in this screen. 19.10 Configuring ICMP T o change your ZyX EL Device’ s security settin gs, click Advanced > Remote MGMT > ICMP .
Chapter 19 Remote Management Configuration P-2802H(W)(L)-I Series User’s Guide 270 Figure 161 Remote Mana gement: ICMP The following table describes the labels in this screen.
P-2802H(W)(L)-I Series User’s Guide 271 C HAPTER 20 Universal Plug-and-Play (UPnP) This chapter introduces the UPnP feature in the web configura tor . 20.1 Introducing Universal Plug and Play Universal Plug and Play (UPnP) is a distributed, open networking standard that uses TCP/IP for simple peer-to-peer network connectiv ity between devices.
Chapter 20 Universal Plug-and-Play (UPnP) P-2802H(W)(L)-I Series User’s Guide 272 When a UPnP device joins a network, it announ ces its presence with a multicast mess age. For security reasons, the ZyXEL Device allows multicast messages on the LAN only .
Chapter 20 Universal Plug-and-Play (UPnP) P-2802H(W)(L)-I Series User’s Guide 273 20.3 Inst alling UPnP in Windows Example This section shows ho w to install UPnP in W indows Me and W indows XP . Inst alling UPnP in Windows Me Follow the steps below to inst all the UPnP in W indows Me.
Chapter 20 Universal Plug-and-Play (UPnP) P-2802H(W)(L)-I Series User’s Guide 274 Figure 164 Add/Remove Programs: Wind ows Setup: Communication: Component s 4 Click OK to go back to the Add/Remove Pr ograms Properties window and click Next . 5 Restart the computer when prompted.
Chapter 20 Universal Plug-and-Play (UPnP) P-2802H(W)(L)-I Series User’s Guide 275 Figure 166 Windows Optiona l Networking Component s Wizard 5 In the Networking Services window , select the Universal Plug and Play check box.
Chapter 20 Universal Plug-and-Play (UPnP) P-2802H(W)(L)-I Series User’s Guide 276 20.4 Using UPnP in Windows XP Example This section shows yo u how to use the UPnP feature in W indows XP . Y ou must already have UPnP installed in W indows XP and UP nP activated on the ZyXEL Device.
Chapter 20 Universal Plug-and-Play (UPnP) P-2802H(W)(L)-I Series User’s Guide 277 Figure 169 Internet Connection Properties 4 Y ou may edit or delete the port mappings o r click Add to manually add port mappings.
Chapter 20 Universal Plug-and-Play (UPnP) P-2802H(W)(L)-I Series User’s Guide 278 Figure 170 Internet Connection Properties: Adva nced Settings Figure 171 Internet Connection Proper ties: Adva nced Settings: Add 5 When the UP nP-enabled device is disconne cted from your computer , all port mappings will be deleted automatically .
Chapter 20 Universal Plug-and-Play (UPnP) P-2802H(W)(L)-I Series User’s Guide 279 Figure 172 System T ray Icon 7 Double-click on the icon to display yo ur curr ent Internet connection st atus.
Chapter 20 Universal Plug-and-Play (UPnP) P-2802H(W)(L)-I Series User’s Guide 280 Figure 174 Network Connections 4 An icon with the description for e ach UPnP-enabled device disp lays under Local Network . 5 Right-click on the icon for y our ZyXEL Device an d select Invoke .
Chapter 20 Universal Plug-and-Play (UPnP) P-2802H(W)(L)-I Series User’s Guide 281 Figure 175 Network Connections: My Network Places 6 Right-click on the icon for your ZyXEL Device and select Pr operties . A properties window displays with basic info rmation about the ZyXEL Device.
Chapter 20 Universal Plug-and-Play (UPnP) P-2802H(W)(L)-I Series User’s Guide 282.
283 P ART IV Maintenance, T roubleshooting and S pecifications System (285) Logs (289) T ools (303) Diagnostic (315) T roubleshooting (317) Product Specification s (325).
284.
P-2802H(W)(L)-I Series User’s Guide 285 C HAPTER 21 System Use this screen to configure the ZyXEL Device’ s time and date settings. 21.1 General Setup and System Name General Setup contains administrative and system-related information. System Name is for identification purposes.
Chapter 21 System P-2802H(W)(L)-I Series User’s Guide 286 Figure 177 System General Setu p The following table describes the labels in this screen. T able 1 13 System General Setup LABEL DESCRIPTION General Setup System Name Choose a descripti ve name for identificatio n purposes.
Chapter 21 System P-2802H(W)(L)-I Series User’s Guide 287 21.2 T ime Setting T o change your ZyX EL Device’ s time and date, click Maintenance > System > Time Setting . The screen appears as shown. Use this screen to configure the ZyXEL Device’ s time based on your local time zone.
Chapter 21 System P-2802H(W)(L)-I Series User’s Guide 288 New Date (yyyy/mm/dd) This field displays th e last updated date from the time server or the last date configured manually . When you set Time and Date Setup to Manual , enter the new date in th is field and then click Apply .
P-2802H(W)(L)-I Series User’s Guide 289 C HAPTER 22 Logs This chapter contains inform ation about configuring genera l log settings and viewing the ZyXEL Device’ s logs.
Chapter 22 Logs P-2802H(W)(L)-I Series User’s Guide 290 Figure 179 Vi ew Log The following table describes the fields in this screen. 22.3 Configuring Log Settings Use the Log Settings screen to con.
Chapter 22 Lo gs P-2802H(W)(L)-I Series User’s Guide 291 Figure 180 Log Settings The following table describes th e fields in this screen. T able 1 16 Log Settings LABEL DESCRIPTION E-mail Log Settings Mail Server Enter the server name or the IP address of the mail se rver for the e-mai l addresses specified below .
Chapter 22 Logs P-2802H(W)(L)-I Series User’s Guide 292 22.4 SMTP Error Messages If there are difficulties in sending e-mail the following error message appears. Send Alerts to Alerts are real-time notificat ions that are sent as soon as an event, such as a DoS attack, system error , or forbidden web access attempt occurs .
Chapter 22 Lo gs P-2802H(W)(L)-I Series User’s Guide 293 “SMTP action request failed. ret= ??". The “??"are described in the following table. 22.4.1 Example E-mail Log An "End of Log" message displays for each ma il in which a complete log has been sent.
Chapter 22 Logs P-2802H(W)(L)-I Series User’s Guide 294 22.5 Log Descriptions This section provides descriptio ns of example log messages. T able 1 18 System Maintenance Logs LOG MESSAGE DESCRIPTION Time calibration is successful The router h as adjusted its time based on in formation from the time server .
Chapter 22 Lo gs P-2802H(W)(L)-I Series User’s Guide 295 T able 1 19 System Erro r Logs LOG MESSAGE DESCRIPTION %s exceeds the max. number of session per host! This attempt to create a NA T session exceeds the maximum number of NA T session table entries allowed to be created per host.
Chapter 22 Logs P-2802H(W)(L)-I Series User’s Guide 296 For type and code details, see T able 131 on page 29 9 . Exceed MAX incomplete, sent TCP RST The router sent a TCP reset packet when the nu mber of incomplete connections (TCP and UDP) exceeded the user- configured threshold.
Chapter 22 Lo gs P-2802H(W)(L)-I Series User’s Guide 297 For type and code details, see T able 131 on page 29 9 . board %d line %d channel %d, call %d, %s C02 OutCall Connected %d %s The PPPoE, PPTP or dial -up call is connected. board %d line %d channel %d, call %d, %s C02 Call Terminated The PPPoE, PPTP or dial- up call was di sconnected.
Chapter 22 Logs P-2802H(W)(L)-I Series User’s Guide 298 ip spoofing - WAN [ TCP | UDP | IGMP | ESP | GRE | OSPF ] The firewall detected an IP spoofing attack on the W A N port. ip spoofing - WAN ICMP (type:%d, code:%d) The firewall detected an ICMP IP spoofing attack on the W AN port.
Chapter 22 Lo gs P-2802H(W)(L)-I Series User’s Guide 299 User logout because of no authentication response from user. The router logge d out a user from which there was no authentication response. User logout because of idle timeout expired. The router l ogged out a us er whose idle ti meout period expired.
Chapter 22 Logs P-2802H(W)(L)-I Series User’s Guide 300 0 A gateway may discard internet datagrams if it does not have th e buffer space needed to queue the datagrams for output to the next network on th e route to the destination network.
Chapter 22 Lo gs P-2802H(W)(L)-I Series User’s Guide 301 SIP UnRegistration Success by SIP:SIP Phone Number The listed SIP account’s registration was deleted from the SIP register server . SIP UnRegistration Fail by SIP:SIP Phone Number An attempt to delete the l isted SIP account’s registration from th e SIP register server failed.
Chapter 22 Logs P-2802H(W)(L)-I Series User’s Guide 302 The following table shows RFC-2408 ISAKMP payload types that the log displays. Please refer to RFC 2408 for detail ed information on each type.
P-2802H(W)(L)-I Series User’s Guide 303 C HAPTER 23 Tools This chapter explains how to upload new firm ware, manage configuration files and restart your ZyXEL Device. 1 Do not interrupt the fi le transfer process as this may PERMANENTL Y DAMAGE your ZyXEL Device.
Chapter 23 Tools P-2802H(W)(L)-I Series User’s Guide 304 ZyNOS (ZyXEL Network Operating System someti mes referred to as the “ras” file) is the system firmware and has a “bin” filena me extension. Find this firmware at www .zyxel.com.W ith many FTP and TFTP clients, the filenames are similar to those seen next.
Chapter 23 Tools P-2802H(W)(L)-I Series User’s Guide 305 23.4 Firmware Upgrade Screen Click Maintenance > T ools to open the Firmware screen. Follow the in structions in this screen to upload firmware to your ZyXEL Devi ce. The upload process uses HTTP (Hypertext T ransfer Protocol) and may take up to two minu tes.
Chapter 23 Tools P-2802H(W)(L)-I Series User’s Guide 306 Figure 183 Firmware Uplo ad In Progres s The ZyXEL Device automatically restarts in this time causing a temporary network disconnect. In some operating systems, you may see the following ic on on your desktop.
Chapter 23 Tools P-2802H(W)(L)-I Series User’s Guide 307 Figure 186 Configuration 23.5.1 Backup Configuration Backup Configuration allows you to back up (save) the ZyXE L Device’ s current configuration to a file on your co mputer .
Chapter 23 Tools P-2802H(W)(L)-I Series User’s Guide 308 Figure 187 Configuration Upload Successfu l The ZyXEL Device automatically restarts in this time causing a temporary network disconnect. In some operating systems, you may see the following ic on on your desktop.
Chapter 23 Tools P-2802H(W)(L)-I Series User’s Guide 309 Figure 191 Reset In Process Message Y ou can also press the RESET button on the rear panel to reset the factory defaults of your ZyXEL Device. Refer to Section 1.6 on p age 41 for more information on the RESET button.
Chapter 23 Tools P-2802H(W)(L)-I Series User’s Guide 310 computer and renames it “ config.rom ”. See earlier in this chapter for more information on filename con ventions.
Chapter 23 Tools P-2802H(W)(L)-I Series User’s Guide 31 1 1 Use telnet from your computer to connect to the ZyXEL Device and log in. B ecause TFTP does not have any security checks, th e ZyXEL Device records the IP address of the telnet client and accepts TFTP requests only from this address.
Chapter 23 Tools P-2802H(W)(L)-I Series User’s Guide 312 23.8 Using FTP or TFTP to Restore Configuration This section shows you how to restore a previ ously saved configuration.
Chapter 23 Tools P-2802H(W)(L)-I Series User’s Guide 313 23.9.1 FTP File Upload Comman d from the DOS Prompt Example 1 Launch the FTP client on your computer . 2 Enter “open”, followed by a space and the IP address of your device. 3 Press [ENTER] when prompted for a username.
Chapter 23 Tools P-2802H(W)(L)-I Series User’s Guide 314 2 Enter the command “sys stdio 0” to disable the management idle timeout, so the TFTP transfer will not be interrupted . Enter “command sys stdio 5” to restore the five-minute management idle timeout (default) when the file transfer is complete.
P-2802H(W)(L)-I Series User’s Guide 315 C HAPTER 24 Diagnostic These read-only screens display information to help you identify problems with the ZyXEL Device. 24.1 General Diagnostic Click Maintenance > Diagnostic to open the screen shown next. Figure 196 Diagnostic: General The following table describes th e fields in this screen.
Chapter 24 Diagnostic P-2802H(W)(L)-I Series User’s Guide 316 Figure 197 Diagnostic: DSL Line The following table describes th e fields in this screen. T able 145 Diagnostic: DSL Line LABEL DESCRIPTION VDSL L ine S tatus Click this button to check the DSL connection status.
P-2802H(W)(L)-I Series User’s Guide 317 C HAPTER 25 Troubleshooting This chapter offers some sugg estions to solve problems you might encounter . The potential problems are divided into the following categories. • Power , Hardware Connections, and LEDs • ZyXEL Device Access and Login • Internet Access • Phone Calls and V oIP 25.
Chapter 25 Trou bleshooting P-2802H(W)(L)-I Series User’s Guide 318 25.2 ZyXEL Device Access and Login V I forgot the IP address for the ZyXEL Device.
Chapter 25 Trou bleshooting P-2802H(W)(L)-I Series User’s Guide 319 5 Reset the device to its factory defaults, an d try to access the ZyXEL Device with the default IP address. See Section 1.6 on page 41 . 6 If the problem continues, contact the network administrator or vendor , or try one of the advanced suggestio ns.
Chapter 25 Trou bleshooting P-2802H(W)(L)-I Series User’s Guide 320 25.3 Internet Access V I cannot access the Internet. 1 Check the hardware connections , and make su re the LEDs are be having as expected. See the Quick S tart Guide and Section 1.5 on page 40 .
Chapter 25 Trou bleshooting P-2802H(W)(L)-I Series User’s Guide 321 • Check the settings for QoS. If it is disabled, you might consider activating it. If it is enabled, you might consider raising or lowe ring the priority fo r some applications. 25.
Chapter 25 Trou bleshooting P-2802H(W)(L)-I Series User’s Guide 322 25.5 Problems With Multiple SIP Account s Y ou can se t up two SIP accoun ts on your ZyX EL Device and your ZyXEL Device is equipp ed with two phone ports.
Chapter 25 Trou bleshooting P-2802H(W)(L)-I Series User’s Guide 323 25.5.2 Incoming Calls The following example shows the default behavior of your ZyXEL Device for inc oming calls when two SIP accounts are configured and yo u are using two phones.
Chapter 25 Trou bleshooting P-2802H(W)(L)-I Series User’s Guide 324.
P-2802H(W)(L)-I Series User’s Guide 325 C HAPTER 26 Product Specifications This chapter gives details about your ZyX EL Device’ s hardware and firmware features.
Chapter 26 Product Specifications P-2802H(W)(L)-I Series User’s Guide 326 Wireless Functionality (wireless devices only) Allow the IEEE 802.1 1b and/or IEEE 802.1 1g wireless clien ts to connect to the ZyXEL Device wirelessly . Enabl e wireless security (WEP , WP A(2), WP A(2)-PSK) and/or MAC filtering to protect your wireless network.
Chapter 26 Product Specifications P-2802H(W)(L)-I Series User’s Guide 327 Firewall Y our device h as a stateful inspecti on firewall with DoS (Denial of Service) protection. By default, when the firewall is activated, all incoming tra ffic from the W A N to the LAN i s blocked unless it is initiated from the LAN.
Chapter 26 Product Specifications P-2802H(W)(L)-I Series User’s Guide 328 Other Protocol Support PPP (Point-to-Poin t Protocol) link layer protocol T ransparent bridging for un supported network lay.
Chapter 26 Product Specifications P-2802H(W)(L)-I Series User’s Guide 329 V oice Specifications " T o take full advantage of the supplem ent ary phone services available through the ZyXEL Device's phone ports, you may need to s ubscribe to the services from your V oIP service provider .
Chapter 26 Product Specifications P-2802H(W)(L)-I Series User’s Guide 330 Call waiting This feature allows you to hear an alert when you are already using the phone and another person calls you.
Chapter 26 Product Specifications P-2802H(W)(L)-I Series User’s Guide 331 Wireless Features IEEE 802.1 1g Wireless LAN IEEE 802.1 1g is fully compa tible wit h the IEEE 802.1 1b standard. This means an IEEE 802.1 1b radio card can interface directly with an IEEE 802.
Chapter 26 Product Specifications P-2802H(W)(L)-I Series User’s Guide 332 " Y our device may be prone to RF (Radio Frequency) interfer ence from other 2.4 GHz devices such as microwav e ovens, wireless phones, Bluetooth enabled devices, and other wireless LANs.
Chapter 26 Product Specifications P-2802H(W)(L)-I Series User’s Guide 333 Power Adaptor Specifications T able 152 P-2802HWL-I Series Power Adaptor Sp ecifications North American PLUG standards LEI (LEADER ELECTRONICS INC.) AC Power Adapter Mo del MU18-21801 00-A1 Input Power AC 100~240V olts/50/60Hz/0.
Chapter 26 Product Specifications P-2802H(W)(L)-I Series User’s Guide 334.
335 P ART V Appendices and Index " The appendices provide general informatio n. Some details may not apply to your ZyXEL Device. Setting up Y our Computer ’ s IP Address (337) Pop-up W indows, .
336.
P-2802H(W)(L)-I Series User’s Guide 337 A PPENDIX A Setting up Y our Computer ’ s IP Address All computers must have a 10M or 100M Et hernet adapter card and TCP/IP installed.
Appendix A Setting up Your Computer’s IP Address P-2802H(W)(L)-I Series User’s Guide 338 Figure 202 WIndows 95/98 /Me: Networ k: Configura tion Inst alling Component s The Network window Configuration tab displays a list of installed components. Y ou need a network adapter , the TCP/IP protocol and Client for Microso ft Networks.
Appendix A Setting up Your Computer’s IP Address P-2802H(W)(L)-I Series User’s Guide 339 Configuring 1 In the Network window Configuration tab, select your network adapter's TCP/IP entry and click Properties 2 Click the IP Address tab. • If your IP address is dynamic, select Obtain an IP address automatically .
Appendix A Setting up Your Computer’s IP Address P-2802H(W)(L)-I Series User’s Guide 340 Figure 204 Windows 95/98/Me : TCP/IP Pr operties: DNS Configuration 4 Click the Gateway tab. • If you do not know you r gateway’ s IP addr ess, remove previously installed gateways.
Appendix A Setting up Your Computer’s IP Address P-2802H(W)(L)-I Series User’s Guide 341 Figure 205 Windows XP: S tart Menu 2 For W indows XP , click Network Connections . For W indows 2000/NT , click Network and Dial-up Connections . Figure 206 Windows XP: Control Panel 3 Right-click Local Area Connection and then click Pr operties .
Appendix A Setting up Your Computer’s IP Address P-2802H(W)(L)-I Series User’s Guide 342 Figure 207 Windows XP: Control Panel: Network Connections: Pro perties 4 Select Internet Protocol (TCP/IP) (under the Genera l tab in W in XP) and click Properties .
Appendix A Setting up Your Computer’s IP Address P-2802H(W)(L)-I Series User’s Guide 343 Figure 209 Windows XP: Advanced TCP/IP Settings 6 If you do not know your gateway's IP address, remove any previously installe d gateways in the IP Settin gs tab and click OK .
Appendix A Setting up Your Computer’s IP Address P-2802H(W)(L)-I Series User’s Guide 344 If you have previously co nfigured DNS servers, click Advanced and then the DNS tab to order them. Figure 210 Windows XP: Internet Protocol (TCP/IP) Propert ies 8 Click OK to close the Internet Protocol (TCP/IP) Properties window .
Appendix A Setting up Your Computer’s IP Address P-2802H(W)(L)-I Series User’s Guide 345 Figure 21 1 Macintosh OS 8/9: Apple Menu 2 Select Ethernet built-in from the Connect via list. Figure 212 Macintosh O S 8/9: TC P/IP 3 For dynamically assigned settings, select Using DHCP Server from the Configure: list.
Appendix A Setting up Your Computer’s IP Address P-2802H(W)(L)-I Series User’s Guide 346 4 For statically assigned settings, do the following: •F r o m t h e Configure box, select Manually . • T ype your IP address in the IP Address box. • T ype your subnet mask in the Subnet mask box.
Appendix A Setting up Your Computer’s IP Address P-2802H(W)(L)-I Series User’s Guide 347 Figure 214 Macintosh O S X: Netw ork 4 For statically assigned settings, do the following: •F r o m t h e Configure box, select Manually . • T ype your IP address in the IP Address box.
Appendix A Setting up Your Computer’s IP Address P-2802H(W)(L)-I Series User’s Guide 348.
P-2802H(W)(L)-I Series User’s Guide 349 A PPENDIX B Pop-up Windows, JavaScript s and Java Permissions In order to use the web configurator you need to allow: • W eb browser pop-u p windows from your device. • JavaScripts (enabled by default). • Java permissions (enabled by default).
Appendix B Po p-up Wind ows, JavaS cripts and Ja va Permission s P-2802H(W)(L)-I Series User’s Guide 350 2 Clear the Block pop-ups check box in the Pop-up Block e r section of the screen. This disables any web po p-up blockers you may have ena bled.
Appendix B Pop-u p Windows, JavaScripts and Java Permissio ns P-2802H(W)(L)-I Series User’s Guide 351 Figure 217 Internet Options: Privacy 3 T ype the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”.
Appendix B Po p-up Wind ows, JavaS cripts and Ja va Permission s P-2802H(W)(L)-I Series User’s Guide 352 5 Click Close to return to the Privacy screen. 6 Click Apply to save this setting. JavaScript s If pages of the web configura tor do not display properly in Internet Explorer, check that JavaScripts are allowed.
Appendix B Pop-u p Windows, JavaScripts and Java Permissio ns P-2802H(W)(L)-I Series User’s Guide 353 Figure 220 Security Settings - Java Scripting Java Permissions 1 From Internet Explorer , click To o l s , In ternet Options and then the Security tab.
Appendix B Po p-up Wind ows, JavaS cripts and Ja va Permission s P-2802H(W)(L)-I Series User’s Guide 354 JA V A (Sun) 1 From Internet Explorer , click To o l s , In ternet Options and then the Advance d tab. 2 Make sure that Use Java 2 for <applet> under Java (Sun) is sele cted.
P-2802H(W)(L)-I Series User’s Guide 355 A PPENDIX C IP Addresses and Subnetting This appendix introduces IP addresses and subnet masks. IP addresses identify ind ividual devices on a network. Every networking device (includin g computers, servers, routers, printe rs, etc.
Appendix C IP Addresses a nd Subnetti ng P-2802H(W)(L)-I Series User’s Guide 356 Figure 223 Network Number and Host ID How much of the IP address is the network number and how much is the host ID varies according to the s ubnet mask.
Appendix C IP Addresses and Subnetting P-2802H(W)(L)-I Series User’s Guide 357 Subnet masks are expressed in dotted decimal no tation just like IP addresses. The follow ing examples show the binary and decimal not ation for 8-bit, 16-bit, 24-bit an d 29-bit subnet masks.
Appendix C IP Addresses a nd Subnetti ng P-2802H(W)(L)-I Series User’s Guide 358 Subnetting Y ou can use subnetting to divide one network into multiple sub-networks. In the following example a network administrator creates two sub-networks to isolate a group of servers from the rest of the c ompany network for security reasons.
Appendix C IP Addresses and Subnetting P-2802H(W)(L)-I Series User’s Guide 359 Figure 225 Subnetting Example: Af ter Subnetting In a 25-bit subnet the host ID has 7 bits , so each sub-network has a maximum of 2 7 – 2 or 126 possible hosts (a host ID of all zeroes is the subnet’ s address itself, all ones is the subnet’ s broadcast address).
Appendix C IP Addresses a nd Subnetti ng P-2802H(W)(L)-I Series User’s Guide 360 Example: Eight Subnet s Similarly , use a 27-bit mask to create eight subnets (000, 00 1, 010, 01 1, 100, 101, 1 10 and 111 ) . The following table shows IP address last octet values for each subnet.
Appendix C IP Addresses and Subnetting P-2802H(W)(L)-I Series User’s Guide 361 Subnet Planning The following table is a summary for su bnet planning on a network with a 24-bit network number . The following table is a summary for su bnet planning on a network with a 16-bit network number .
Appendix C IP Addresses a nd Subnetti ng P-2802H(W)(L)-I Series User’s Guide 362 Configuring IP Addresses Where you obtain your netwo rk number depends on your particular situation.
P-2802H(W)(L)-I Series User’s Guide 363 A PPENDIX D W ireless LANs Wireless LAN T opologies This section discusses ad-hoc and in frastructure w ireless LAN topologies. Ad-hoc Wireless LAN Configuration The simplest WLAN configuration is an inde pendent (Ad-hoc) WLAN that connects a se t of computers with wireless stations (A, B, C).
Appendix D Wireless LANs P-2802H(W)(L)-I Series User’s Guide 364 Figure 227 Basic Service Set ESS An Extended Service Set (ESS) consists of a series of overlappi ng BSSs, each containing an access point, with each access point connected together by a wired network.
Appendix D Wireless LANs P-2802H(W)(L)-I Series User’s Guide 365 Figure 228 Infrastructure WLAN Channel A channel is the radio frequency(ies) used by IEEE 802.
Appendix D Wireless LANs P-2802H(W)(L)-I Series User’s Guide 366 Figure 229 RTS / CT S When station A sends data to the AP , it might no t know that the station B is already using the channel.
Appendix D Wireless LANs P-2802H(W)(L)-I Series User’s Guide 367 If the Fragmentation Threshold value is smaller than the RT S / C T S value (see previously) you set then the R TS (Request T o Send)/CTS (Clear to Send) handshake will never occur as data frames will be fragmen ted before they reach R TS/CTS size.
Appendix D Wireless LANs P-2802H(W)(L)-I Series User’s Guide 368 • User based identification that allows for roaming. • Support for RADIUS (Remote Authentication Dial In User Service, RFC 2138, 2139) for centralized user profile and accounting management on a netw ork RADIUS server .
Appendix D Wireless LANs P-2802H(W)(L)-I Series User’s Guide 369 In order to ensure network security , the access point and the RADIUS server us e a shared secret key, which is a password, they both know .
Appendix D Wireless LANs P-2802H(W)(L)-I Series User’s Guide 370 PEAP (Protected EAP) Like EAP-TTLS, server-side certific ate authentication is used to establish a secure connection, then use simple username and p assword methods through the secured connection to authenticate the clients, thus hiding client identity .
Appendix D Wireless LANs P-2802H(W)(L)-I Series User’s Guide 371 Encryption WP A impr oves data encryption by usin g T emporal Key In tegrity Protocol (TKIP) or Advanced Encryption Standard (AES), Messag e Integrity Check (MIC) and IEEE 802.1x. TKIP uses 128-bit keys that are dyna mically genera ted and distributed by the authe ntication server .
Appendix D Wireless LANs P-2802H(W)(L)-I Series User’s Guide 372 Shared WEP No Enable with Dynamic WEP Key Y es Enable without Dynami c WEP Key Y es Disable WP A WEP No Y es WP A TKIP No Y es WP A-P.
P-2802H(W)(L)-I Series User’s Guide 373 A PPENDIX E Services The following table l ists some commonly-used se rvices and their associated protocols and port numbers. • Name : This is a short, descrip tive name for the service. Y ou can use this one or create a different one, if you like.
Appendix E Services P-2802H(W)(L)-I Series User’s Guide 374 H.323 TCP 1720 NetMeeting uses this protocol. HTTP TCP 80 Hyper T ext T ransfer Protoco l - a client/ server protocol for the world wide web. HTTPS TCP 443 HTTPS is a secure d http session often used in e-commerce.
Appendix E Services P-2802H(W)(L)-I Series User’s Guide 375 PPTP_TUNNEL (GRE) User-Defined 47 PPTP (Point-to-Point T unnel ing Protocol) enables secure tran sfer of data over public networks. This is the data channel. RCMD TCP 512 Remote Comman d Service.
Appendix E Services P-2802H(W)(L)-I Series User’s Guide 376 TFTP UDP 69 T r ivial File Transfer Protocol is an Internet file transfer protocol similar to FTP , but uses the UDP (User Datagram Protocol) rather than TCP (Transmission Control Protocol).
P-2802H(W)(L)-I Series User’s Guide 377 A PPENDIX F Internal SPTGEN Internal SPTGEN Overview Internal SP TGEN (System Parame ter T able Generator) is a configuration text file useful for efficient configuration of multiple ZyXEL Devices.
Appendix F Internal SPTGEN P-2802H(W)(L)-I Series User’s Guide 378 Internal SPTGEN File Modification - Importa nt Points to Remember Each paramete r you enter must be pr eceded by one “=”sign and one spac e. Some parameters are dependent on othe rs.
Appendix F I nternal SPTG EN P-2802H(W)(L)-I Series User’s Guide 379 Figure 233 Internal SPTGEN FTP Download Example " Y ou can rename your “ rom-t ” file when you save it to your computer but it must be named “ rom-t ” when you upload it to your ZyXEL Device.
Appendix F Internal SPTGEN P-2802H(W)(L)-I Series User’s Guide 380 The following are the Internal SP TGEN menus. PV A Par ameter V a lues Allowed INPUT An example of what you may enter * Applies to the ZyXEL Device.
Appendix F I nternal SPTG EN P-2802H(W)(L)-I Series User’s Guide 381 30200002 = Client IP Pool Starting Address = 192.168.1.33 30200003 = Size of Client IP Pool = 32 30200004 = Primary DNS Server = 0.0.0.0 30200005 = Secondary DNS Server = 0.0.0.0 30200006 = Remote DHCP Server = 0.
Appendix F Internal SPTGEN P-2802H(W)(L)-I Series User’s Guide 382 30201011 = IP Alias #1 Outgoing protocol filters Set 2 = 256 30201012 = IP Alias #1 Outgoing protocol filters Set 3 = 256 30201013 = IP Alias #1 Outgoing protocol filters Set 4 = 256 30201014 = IP Alias 2 <0(No) | 1(Yes)> = 0 30201015 = IP Address = 0.
Appendix F I nternal SPTG EN P-2802H(W)(L)-I Series User’s Guide 383 30500007 = Default Key <1|2|3|4> = 0 30500008 = WEP Key1 = 30500009 = WEP Key2 = 30500010 = WEP Key3 = 30500011 = WEP Key4 = 30500012 = Wlan Active <0(Disable) | 1(Enable)> = 0 */ MENU 3.
Appendix F Internal SPTGEN P-2802H(W)(L)-I Series User’s Guide 384 40000006 = VPI # = 0 40000007 = VCI # = 35 40000008 = Service Name <Str> = any 40000009 = My Login <Str> = test@pqa 400.
Appendix F I nternal SPTG EN P-2802H(W)(L)-I Series User’s Guide 385 T able 172 Menu 12 / Menu 12.1.1 IP Static Route Setup FIN FN PVA INPUT 120101001 = IP Static Route set #1, Name <Str> = 120101002 = IP Static Route set #1, Active <0(No) |1(Yes)> = 0 120101003 = IP Static Route set #1, Destination IP address = 0.
Appendix F Internal SPTGEN P-2802H(W)(L)-I Series User’s Guide 386 120104005 = IP Static Route set #4, Gateway = 0.0.0.0 120104006 = IP Static Route set #4, Metric = 0 120104007 = IP Static Route set #4, Private <0(No) |1(Yes)> = 0 / Menu 12.1.
Appendix F I nternal SPTG EN P-2802H(W)(L)-I Series User’s Guide 387 120108004 = IP Static Route set #8, Destination IP subnetmask = 0 120108005 = IP Static Route set #8, Gateway = 0.0.0.0 120108006 = IP Static Route set #8, Metric = 0 120108007 = IP Static Route set #8, Private <0(No) |1(Yes)> = 0 */ Menu 12.
Appendix F Internal SPTGEN P-2802H(W)(L)-I Series User’s Guide 388 120112003 = IP Static Route set #12, Destination IP address = 0.0.0.0 120112004 = IP Static Route set #12, Destination IP subnetmask = 0 120112005 = IP Static Route set #12, Gateway = 0.
Appendix F I nternal SPTG EN P-2802H(W)(L)-I Series User’s Guide 389 120116001 = IP Static Route set #16, Name <Str> = 120116002 = IP Static Route set #16, Active <0(No) |1(Yes)> = 0 120116003 = IP Static Route set #16, Destination IP address = 0.
Appendix F Internal SPTGEN P-2802H(W)(L)-I Series User’s Guide 390 150000023 = SUA Server #6 Pro tocol <0(All)|6(T CP)|17(U DP)> = 0 150000024 = SUA Server #6 Por t Start = 0 150000025 = SUA Server #6 Por t End = 0 150000026 = SUA Server #6 Loc al IP address = 0.
Appendix F I nternal SPTG EN P-2802H(W)(L)-I Series User’s Guide 391 T able 174 Menu 21.1 Filter Set #1 / Menu 21 Filter set #1 FIN FN PVA INPUT 210100001 = Filter Set 1, Name <Str> = / Menu 21.
Appendix F Internal SPTGEN P-2802H(W)(L)-I Series User’s Guide 392 210102009 = IP Filter Set 1,Rule 2 Src Subnet Mask = 0 210102010 = IP Filter Set 1,Rule 2 Src Port = 0 210102011 = IP Filter Set 1,.
Appendix F I nternal SPTG EN P-2802H(W)(L)-I Series User’s Guide 393 210104005 = IP Filter Set 1,Rule 4 Dest Subnet Mask = 0 210104006 = IP Filter Set 1,Rule 4 Dest Port = 137 210104007 = IP Filter Set 1,Rule 4 Dest Port Comp <0(none)|1(equal) |2(not equal)|3(less)|4( greater)> = 1 210104008 = IP Filter Set 1,Rule 4 Src IP address = 0.
Appendix F Internal SPTGEN P-2802H(W)(L)-I Series User’s Guide 394 / Menu 21.1.1.6 set #1, rule #6 FIN FN PVA INPUT 210106001 = IP Filter Set 1,Rule 6 Type <2(TCP/IP)> = 2 210106002 = IP Filte.
Appendix F I nternal SPTG EN P-2802H(W)(L)-I Series User’s Guide 395 210201007 = IP Filter Set 2, Rule 1 Dest Port Comp <0(none)|1(equal)| 2(not equal)|3(less)|4(g reater)> = 1 210201008 = IP Filter Set 2, Rule 1 Src I P address = 0.
Appendix F Internal SPTGEN P-2802H(W)(L)-I Series User’s Guide 396 210202014 = IP Filter Set 2, Rule 2 Act N ot Match <1(check next)|2(forward)|3 (drop)> = 1 / Menu 21.
Appendix F I nternal SPTG EN P-2802H(W)(L)-I Series User’s Guide 397 210204007 = IP Filter Set 2, Rule 4 Dest Port Comp <0(none)|1(equal)| 2(not equal)|3(less)|4(g reater)> = 1 210204008 = IP Filter Set 2, Rule 4 Src I P address = 0.
Appendix F Internal SPTGEN P-2802H(W)(L)-I Series User’s Guide 398 210205014 = IP Filter Set 2, Rule 5 Act N ot Match <1(check next)|2(forward)|3 (drop)> = 1 / Menu 21.
Appendix F I nternal SPTG EN P-2802H(W)(L)-I Series User’s Guide 399 230000000 = System Password = 1234 */ Menu 23.2 System security: radius server FIN FN PVA INPUT 230200001 = Authentication Server.
Appendix F Internal SPTGEN P-2802H(W)(L)-I Series User’s Guide 400 Command Examples The following are example Internal SP TGEN screens associated with the ZyXEL Device’ s command interpreter commands. T able 177 Menu 24.1 1 Remote Mana gement Cont rol / Menu 24.
P-2802H(W)(L)-I Series User’s Guide 401 A PPENDIX G Legal Information Copyright Copyright © 2007 by ZyXEL Communications Corporation. The contents of this publication may not be reprod uced in any .
Appendix G Legal Information P-2802H(W)(L)-I Series User’s Guide 402 If this device does cause harmful inte rference to radio/television reception, which can be determined by turning th e device off.
Appendix G Legal Information P-2802H(W)(L)-I Series User’s Guide 403 2 Select your product on the ZyXEL home pag e to go to that product's page.
Appendix G Legal Information P-2802H(W)(L)-I Series User’s Guide 404.
P-2802H(W)(L)-I Series User’s Guide 405 A PPENDIX H Customer Support Please have the following information r eady when you contact customer support. Required Information • Product model and serial number . • W arranty Information. • Date that you received your de vice.
Appendix H Custo mer Support P-2802H(W)(L)-I Series User’s Guide 406 • Re g u l a r Ma i l : ZyXEL Communications, Czech s.r .o., Modranská 621, 143 01 Praha 4 - Modrany , Ceská Republika Denmark • Support E-mail: support@zyxel.dk • Sales E-mail: sales@zyxel.
Appendix H Customer Support P-2802H(W)(L)-I Series User’s Guide 407 India • Support E-mail: support@zyxel.in • Sales E-mail: sales@zyxel.in • T elephone: +91-1 1-30888144 to +91 -11-308 88153 • Fax: +91-1 1-30888149, +91 -11-2 6810715 • W eb: http://www .
Appendix H Custo mer Support P-2802H(W)(L)-I Series User’s Guide 408 • Re g u l a r M a i l: ZyXEL Communications Inc., 1 130 N. Miller St., Anaheim, CA 92806- 2001, U.S.A. Norway • Support E-mail: support@zyxel.no • Sales E-mail: sales@zyxel.
Appendix H Customer Support P-2802H(W)(L)-I Series User’s Guide 409 Sweden • Support E-mail: support@zyxel.se • Sales E-mail: sales@zyxel.se • T elephone: +46-31-744-7700 • Fax: +46-31-744-7701 • W eb: www .
Appendix H Custo mer Support P-2802H(W)(L)-I Series User’s Guide 410.
Index P-2802H(W)(L)-I Series User’s Guide 41 1 Index A ACK message 130 Address Resolution Protocol (ARP) 93 AH 181 AH protocol 185 ALG 128 , 330 alternative subnet mask notation 357 antenna 325 any .
Index P-2802H(W)(L)-I Series User’s Guide 412 creating/editing 166 customer support 405 customized services 166 D data confidentiality 180 data integrity 180 data origin authentication 180 DBPSK 331.
Index P-2802H(W)(L)-I Series User’s Guide 413 three-way handshake 171 firmware 304 upload 305 upload error 306 flash key 145 flashing 145 fragment ation threshold 366 frequency range 331 FTP 122 , 264 file upload 313 FTP restrictions 304 G G . 168 142 , 330 G.
Index P-2802H(W)(L)-I Series User’s Guide 414 K keep alive 189 keys and certificates 21 1 L LAN setup 83 , 89 LAN TCP/IP 90 LEDs 40 listening port 140 log out 45 log out (aut omatic) 45 logs 289 M MAC address filter actio n 11 5 MAC filter 11 4 Management Information Base (MIB) 266 managing the device good habits 37 using FTP .
Index P-2802H(W)(L)-I Series User’s Guide 415 PSTN call setup signaling 133 Public Switched T elephone Network 36 public-key cryptology , and certificates 21 1 public-private keys and certificates 2.
Index P-2802H(W)(L)-I Series User’s Guide 416 SIP server address 67 SIP servers 130 SIP service domain 67 , 130 SIP URI 129 SIP user agent 130 SIP version 2 330 SMTP error messages 292 SNMP 265 , 32.
Index P-2802H(W)(L)-I Series User’s Guide 417 Wi-Fi Protected Access (WP A) 331 wireless LAN MAC address filteri ng 331 WLAN interference 365 security parameters 371 Z ZyNOS 304 ZyNOS (ZyXEL Network.
Index P-2802H(W)(L)-I Series User’s Guide 418.
Een belangrijk punt na aankoop van elk apparaat ZyXEL Communications P-2802H(W)(L)-I Series (of zelfs voordat je het koopt) is om de handleiding te lezen. Dit moeten wij doen vanwege een paar simpele redenen:
Als u nog geen ZyXEL Communications P-2802H(W)(L)-I Series heb gekocht dan nu is een goed moment om kennis te maken met de basisgegevens van het product. Eerst kijk dan naar de eerste pagina\'s van de handleiding, die je hierboven vindt. Je moet daar de belangrijkste technische gegevens ZyXEL Communications P-2802H(W)(L)-I Series vinden. Op dit manier kan je controleren of het apparaat aan jouw behoeften voldoet. Op de volgende pagina's van de handleiding ZyXEL Communications P-2802H(W)(L)-I Series leer je over alle kenmerken van het product en krijg je informatie over de werking. De informatie die je over ZyXEL Communications P-2802H(W)(L)-I Series krijgt, zal je zeker helpen om een besluit over de aankoop te nemen.
In een situatie waarin je al een beziter van ZyXEL Communications P-2802H(W)(L)-I Series bent, maar toch heb je de instructies niet gelezen, moet je het doen voor de hierboven beschreven redenen. Je zult dan weten of je goed de alle beschikbare functies heb gebruikt, en of je fouten heb gemaakt die het leven van de ZyXEL Communications P-2802H(W)(L)-I Series kunnen verkorten.
Maar de belangrijkste taak van de handleiding is om de gebruiker bij het oplossen van problemen te helpen met ZyXEL Communications P-2802H(W)(L)-I Series . Bijna altijd, zal je daar het vinden Troubleshooting met de meest voorkomende storingen en defecten #MANUAl# samen met de instructies over hun opplosinge. Zelfs als je zelf niet kan om het probleem op te lossen, zal de instructie je de weg wijzen naar verdere andere procedure, bijv. door contact met de klantenservice of het dichtstbijzijnde servicecentrum.
