User Guide
Page 12
P-2602H(W)(L)-DxA Series User's Guide 9.2 Wireless Security Overview 122 9.2.1 SSID ...122 9.2.2 MAC Address Filter 122 9.2.3 User Authentication 123 9.2.4 Encryption 123 9.2.5 One-Touch Intelligent ...SUA (Single User Account) Versus NAT 144 10.3 NAT General Setup 144 10.4 Port Forwarding 145 10.4.1 Default Server IP Address 146 10.4.2 Port Forwarding: Services and Port Numbers 146 10.4.3 Configuring Servers Behind Port Forwarding (Example 146 10.5 Configuring Port Forwarding 147 10.5.1 Port Forwarding Rule Edit 148 10.5.2 SIP ALG 149 Chapter 11 Voice ...151 11.1 Introduction...
P-2602H(W)(L)-DxA Series User's Guide 9.2 Wireless Security Overview 122 9.2.1 SSID ...122 9.2.2 MAC Address Filter 122 9.2.3 User Authentication 123 9.2.4 Encryption 123 9.2.5 One-Touch Intelligent ...SUA (Single User Account) Versus NAT 144 10.3 NAT General Setup 144 10.4 Port Forwarding 145 10.4.1 Default Server IP Address 146 10.4.2 Port Forwarding: Services and Port Numbers 146 10.4.3 Configuring Servers Behind Port Forwarding (Example 146 10.5 Configuring Port Forwarding 147 10.5.1 Port Forwarding Rule Edit 148 10.5.2 SIP ALG 149 Chapter 11 Voice ...151 11.1 Introduction...
User Guide
Page 24
P-2602H(W)(L)-DxA Series User's Guide Figure 39 Bandwidth Management Wizard: General Information 80 Figure 40 Bandwidth Management Wizard: Service Configuration 80... > OTIST 133 Figure 69 Example: Wireless Client OTIST Screen 134 Figure 70 OTIST: Settings 134 Figure 71 OTIST: In Progress on the ZyXEL Device 134 Figure 72 OTIST: In Progress on the Wireless Device 135 Figure 73 Start OTIST? ...135 Figure 74 MAC Address Filter 136 ...Application With IP Alias 143 Figure 79 NAT General ...145 Figure 80 Multiple Servers Behind NAT Example 146 Figure 81 Port Forwarding 147 24 List of Figures
P-2602H(W)(L)-DxA Series User's Guide Figure 39 Bandwidth Management Wizard: General Information 80 Figure 40 Bandwidth Management Wizard: Service Configuration 80... > OTIST 133 Figure 69 Example: Wireless Client OTIST Screen 134 Figure 70 OTIST: Settings 134 Figure 71 OTIST: In Progress on the ZyXEL Device 134 Figure 72 OTIST: In Progress on the Wireless Device 135 Figure 73 Start OTIST? ...135 Figure 74 MAC Address Filter 136 ...Application With IP Alias 143 Figure 79 NAT General ...145 Figure 80 Multiple Servers Behind NAT Example 146 Figure 81 Port Forwarding 147 24 List of Figures
User Guide
Page 25
P-2602H(W)(L)-DxA Series User's Guide Figure 82 Port Forwarding Rule Setup 148 Figure 83 Network > NAT > ALG 149 Figure 84 SIP User Agent 153 Figure 85 SIP Proxy Server 153 Figure 86 SIP Redirect ... Rule 200 Figure 106 Firewall: Customized Services 202 Figure 107 Firewall: Configure Customized Services 203 Figure 108 Firewall Example: Rules 204 Figure 109 Edit Custom Port Example 204 Figure 110 Firewall Example: Edit Rule: Destination Address 205 Figure 111 Firewall Example: Edit Rule: Select Customized Services 206 Figure 112 Firewall Example...
P-2602H(W)(L)-DxA Series User's Guide Figure 82 Port Forwarding Rule Setup 148 Figure 83 Network > NAT > ALG 149 Figure 84 SIP User Agent 153 Figure 85 SIP Proxy Server 153 Figure 86 SIP Redirect ... Rule 200 Figure 106 Firewall: Customized Services 202 Figure 107 Firewall: Configure Customized Services 203 Figure 108 Firewall Example: Rules 204 Figure 109 Edit Custom Port Example 204 Figure 110 Firewall Example: Edit Rule: Destination Address 205 Figure 111 Firewall Example: Edit Rule: Select Customized Services 206 Figure 112 Firewall Example...
User Guide
Page 30
P-2602H(W)(L)-DxA Series User's Guide Table 39 Wireless: WPA(2)-PSK 129 Table 40 Wireless: WPA(2 130 Table ... 139 Table 46 NAT Definitions ...141 Table 47 NAT Mapping Types 144 Table 48 NAT General ...145 Table 49 Port Forwarding 147 Table 50 Port Forwarding Rule Setup 148 Table 51 Network > NAT > ALG 149 Table 52 SIP Call Progression 152 Table 53 SIP ... 173 Table 64 Phone Book > Incoming Call Policy 175 Table 65 PSTN Line > General 177 Table 66 Common IP Ports 184 Table 67 ICMP Commands That Trigger Alerts 186 Table 68 Legal NetBIOS Commands 186 Table 69 Legal SMTP Commands 186 ...
P-2602H(W)(L)-DxA Series User's Guide Table 39 Wireless: WPA(2)-PSK 129 Table 40 Wireless: WPA(2 130 Table ... 139 Table 46 NAT Definitions ...141 Table 47 NAT Mapping Types 144 Table 48 NAT General ...145 Table 49 Port Forwarding 147 Table 50 Port Forwarding Rule Setup 148 Table 51 Network > NAT > ALG 149 Table 52 SIP Call Progression 152 Table 53 SIP ... 173 Table 64 Phone Book > Incoming Call Policy 175 Table 65 PSTN Line > General 177 Table 66 Common IP Ports 184 Table 67 ICMP Commands That Trigger Alerts 186 Table 68 Legal NetBIOS Commands 186 Table 69 Legal SMTP Commands 186 ...
User Guide
Page 53
... to the outside world. Port Forwarding Use this screen to configure your local servers visible to the configuration wizards. Wizards: Click this screen to make your ZyXEL Device's Quality of individual services. Use this screen to configure ISP parameters, WAN IP address assignment, DNS servers and other advanced properties. P-2602H(W)(L)-DxA Series User's Guide...
... to the outside world. Port Forwarding Use this screen to configure your local servers visible to the configuration wizards. Wizards: Click this screen to make your ZyXEL Device's Quality of individual services. Use this screen to configure ISP parameters, WAN IP address assignment, DNS servers and other advanced properties. P-2602H(W)(L)-DxA Series User's Guide...
User Guide
Page 54
...for your device about networks beyond the directly connected remote nodes. P-2602H(W)(L)-DxA Series User's Guide Table 6 Navigation Panel Summary LINK Phone ...Setup Monitor Dynamic DNS FUNCTION Use this screen to set which phone ports use a static hostname alias for a dynamic IP address. 54...to use which SIP accounts. Use this screen to select your ZyXEL Device's settings for determining when to web sites containing certain keywords ... filtering. Use this screen to configure your location and call -forwarding. Use this screen to configure each VPN tunnel. This screen ...
...for your device about networks beyond the directly connected remote nodes. P-2602H(W)(L)-DxA Series User's Guide Table 6 Navigation Panel Summary LINK Phone ...Setup Monitor Dynamic DNS FUNCTION Use this screen to set which phone ports use a static hostname alias for a dynamic IP address. 54...to use which SIP accounts. Use this screen to select your ZyXEL Device's settings for determining when to web sites containing certain keywords ... filtering. Use this screen to configure your location and call -forwarding. Use this screen to configure each VPN tunnel. This screen ...
User Guide
Page 142
... this. When the response comes back, NAT translates the destination address (the inside global address) back to the inside local address before forwarding the packet to the WAN side. For incoming packets, the ILA is the destination address on the LAN, and the IGA is the... not define any servers (for communication with hosts on your network. The ZyXEL Device keeps track of the original addresses and port numbers so incoming reply packets can be either local or global) of firewall protection. P-2602H(W)(L)-DxA Series User's Guide 10.1.2 What NAT Does In the simplest form,...
... this. When the response comes back, NAT translates the destination address (the inside global address) back to the inside local address before forwarding the packet to the WAN side. For incoming packets, the ILA is the destination address on the LAN, and the IGA is the... not define any servers (for communication with hosts on your network. The ZyXEL Device keeps track of the original addresses and port numbers so incoming reply packets can be either local or global) of firewall protection. P-2602H(W)(L)-DxA Series User's Guide 10.1.2 What NAT Does In the simplest form,...
User Guide
Page 144
...of clients or servers using mapping types as outlined in addition to setting up SUA/NAT, to allow traffic from the WAN to be forwarded through the ZyXEL Device. The following screen. 144 Chapter 10 Network Address Translation (NAT) Screens ILA1ÅÆ IGA1 ILA2ÅÆ IGA2 ILA3Å...NAT to map multiple global IP addresses to multiple private LAN IP addresses of mapping, Many-to-One and Server. P-2602H(W)(L)-DxA Series User's Guide Port numbers do NOT change for your ZyXEL Device. 10.3 NAT General Setup You must create a firewall rule in Table 47 on page 144. • ...
...of clients or servers using mapping types as outlined in addition to setting up SUA/NAT, to allow traffic from the WAN to be forwarded through the ZyXEL Device. The following screen. 144 Chapter 10 Network Address Translation (NAT) Screens ILA1ÅÆ IGA1 ILA2ÅÆ IGA2 ILA3Å...NAT to map multiple global IP addresses to multiple private LAN IP addresses of mapping, Many-to-One and Server. P-2602H(W)(L)-DxA Series User's Guide Port numbers do NOT change for your ZyXEL Device. 10.3 NAT General Setup You must create a firewall rule in Table 47 on page 144. • ...
User Guide
Page 145
... number of users using peer to peer applications, you can establish through the ZyXEL Device. Click Cancel to reload the previous configuration for this screen. 10.4 Port Forwarding A port forwarding set is exhausting all of NAT sessions a single client can establish, this number... to limit the number of NAT/Firewall sessions client computers can make visible to the outside world. Chapter 10 Network Address Translation (NAT) Screens 145 Figure 79 NAT General P-2602H...
... number of users using peer to peer applications, you can establish through the ZyXEL Device. Click Cancel to reload the previous configuration for this screen. 10.4 Port Forwarding A port forwarding set is exhausting all of NAT sessions a single client can establish, this number... to limit the number of NAT/Firewall sessions client computers can make visible to the outside world. Chapter 10 Network Address Translation (NAT) Screens 145 Figure 79 NAT General P-2602H...
User Guide
Page 146
...Port Forwarding screen to forward incoming service requests to one service (for ports that are shown in the example). A default server receives packets from your location. You assign the LAN IP addresses and the ISP assigns the WAN IP address. Many residential broadband ISP accounts do not assign a Default Server IP address, the ZyXEL...IP Address In addition to a third (C in Appendix F on the Internet. The port number identifies a service; P-2602H(W)(L)-DxA Series User's Guide You may suspend your account if it might be forwarded, and the local IP address of the desired server.
...Port Forwarding screen to forward incoming service requests to one service (for ports that are shown in the example). A default server receives packets from your location. You assign the LAN IP addresses and the ISP assigns the WAN IP address. Many residential broadband ISP accounts do not assign a Default Server IP address, the ZyXEL...IP Address In addition to a third (C in Appendix F on the Internet. The port number identifies a service; P-2602H(W)(L)-DxA Series User's Guide You may suspend your account if it might be forwarded, and the local IP address of the desired server.
User Guide
Page 147
... for particular services. Active Click this screen. P-2602H(W)(L)-DxA Series User's Guide 10.5 Configuring Port Forwarding Note: If you do not assign a Default Server IP address, the ZyXEL Device discards all packets received for ports that are not specified here or in the remote management setup. Click Network > NAT > Port Forwarding to the table below. # This is...
... for particular services. Active Click this screen. P-2602H(W)(L)-DxA Series User's Guide 10.5 Configuring Port Forwarding Note: If you do not assign a Default Server IP address, the ZyXEL Device discards all packets received for ports that are not specified here or in the remote management setup. Click Network > NAT > Port Forwarding to the table below. # This is...
User Guide
Page 148
... next. Enter the inside IP address of ports, enter the start port number here and the end port number in the End Port field. P-2602H(W)(L)-DxA Series User's Guide Table 49 Port Forwarding LABEL Modify Apply Cancel DESCRIPTION Click the edit... icon to go to the previous screen. 148 Chapter 10 Network Address Translation (NAT) Screens Click Apply to save your changes back to delete an existing port forwarding rule. Click the delete icon to the ZyXEL...
... next. Enter the inside IP address of ports, enter the start port number here and the end port number in the End Port field. P-2602H(W)(L)-DxA Series User's Guide Table 49 Port Forwarding LABEL Modify Apply Cancel DESCRIPTION Click the edit... icon to go to the previous screen. 148 Chapter 10 Network Address Translation (NAT) Screens Click Apply to save your changes back to delete an existing port forwarding rule. Click the delete icon to the ZyXEL...
User Guide
Page 149
...Application Layer Gateway (ALG). When the ZyXEL Device registers with port-forwarding and address-mapping rules. You do not need to use STUN or an outbound proxy if your changes back to the ZyXEL Device. P-2602H(W)(L)-DxA Series User's Guide Table 50 Port Forwarding Rule Setup (continued) LABEL Apply ...Cancel DESCRIPTION Click Apply to save your changes and to apply them to the ZyXEL Device. Use this to make sure SIP (...
...Application Layer Gateway (ALG). When the ZyXEL Device registers with port-forwarding and address-mapping rules. You do not need to use STUN or an outbound proxy if your changes back to the ZyXEL Device. P-2602H(W)(L)-DxA Series User's Guide Table 50 Port Forwarding Rule Setup (continued) LABEL Apply ...Cancel DESCRIPTION Click Apply to save your changes and to apply them to the ZyXEL Device. Use this to make sure SIP (...
User Guide
Page 161
...calls. Turn off any type of the ZyXEL Device to keep the default value. Server Port Enter the SIP outbound proxy server's listening port, if your VoIP service provider uses. ...more information. Call Forward Call Forward Table Select which call you. You set up these tables in RTP packets. See Section 11.8 on a NAT router in SIP messages. The ZyXEL Device provides a... information. Chapter 11 Voice 161 P-2602H(W)(L)-DxA Series User's Guide Table 55 VoIP > SIP Settings > Advanced LABEL DESCRIPTION DTMF Mode Control how the ZyXEL Device handles the tones that your...
...calls. Turn off any type of the ZyXEL Device to keep the default value. Server Port Enter the SIP outbound proxy server's listening port, if your VoIP service provider uses. ...more information. Call Forward Call Forward Table Select which call you. You set up these tables in RTP packets. See Section 11.8 on a NAT router in SIP messages. The ZyXEL Device provides a... information. Chapter 11 Voice 161 P-2602H(W)(L)-DxA Series User's Guide Table 55 VoIP > SIP Settings > Advanced LABEL DESCRIPTION DTMF Mode Control how the ZyXEL Device handles the tones that your...
User Guide
Page 168
... service provider. The ZyXEL Device supports the following services: • Call Hold • Call Waiting • Making a Second Call • Call Transfer • Call Forwarding (see Section 11...the hook for a short period of the supplementary phone services available through the ZyXEL Device's phone ports, you do not issue the sub-command before releasing it. After pressing the...Europe Type Call Service Mode. P-2602H(W)(L)-DxA Series User's Guide 11.15 Supplementary Phone Services Overview Supplementary services such as hanging up by the ZyXEL Device. Commands for answer. ...
... service provider. The ZyXEL Device supports the following services: • Call Hold • Call Waiting • Making a Second Call • Call Transfer • Call Forwarding (see Section 11...the hook for a short period of the supplementary phone services available through the ZyXEL Device's phone ports, you do not issue the sub-command before releasing it. After pressing the...Europe Type Call Service Mode. P-2602H(W)(L)-DxA Series User's Guide 11.15 Supplementary Phone Services Overview Supplementary services such as hanging up by the ZyXEL Device. Commands for answer. ...
User Guide
Page 175
... checks the rules in the field on the right. Select this screen. This field is used by the No Answer Forward to the specified phone number if the phone port is busy. Each field is unanswered. Specify the phone number in the Advanced Setup section. If you to answer an...field on the right. Chapter 11 Voice 175 P-2602H(W)(L)-DxA Series User's Guide Figure 96 Phone Book > Incoming Call Policy You can create two sets of seconds the ZyXEL Device should wait for you change this if you want the ZyXEL Device to forward incoming calls to Number feature and No Answer conditions...
... checks the rules in the field on the right. Select this screen. This field is used by the No Answer Forward to the specified phone number if the phone port is busy. Each field is unanswered. Specify the phone number in the Advanced Setup section. If you to answer an...field on the right. Chapter 11 Voice 175 P-2602H(W)(L)-DxA Series User's Guide Figure 96 Phone Book > Incoming Call Policy You can create two sets of seconds the ZyXEL Device should wait for you change this if you want the ZyXEL Device to forward incoming calls to Number feature and No Answer conditions...
User Guide
Page 226
...AH protocol in both transport and tunnel mode. NAT traversal allows you to handle this. P-2602H(W)(L)-DxA Series User's Guide 17.7 VPN, NAT, and NAT Traversal NAT is incompatible with ESP...header of AH and ESP with the UDP port 500 header unchanged. Finally, NAT is compatible with a hash value appended to the packet, but the ZyXEL Device's NAT Traversal feature provides a way to...AH protocol digitally signs the outbound packet, both IPSec endpoints. • Set the NAT router to forward UDP port 500 to work, you cannot set up an IKE SA with a NAT router between the two...
...AH protocol in both transport and tunnel mode. NAT traversal allows you to handle this. P-2602H(W)(L)-DxA Series User's Guide 17.7 VPN, NAT, and NAT Traversal NAT is incompatible with ESP...header of AH and ESP with the UDP port 500 header unchanged. Finally, NAT is compatible with a hash value appended to the packet, but the ZyXEL Device's NAT Traversal feature provides a way to...AH protocol digitally signs the outbound packet, both IPSec endpoints. • Set the NAT router to forward UDP port 500 to work, you cannot set up an IKE SA with a NAT router between the two...
User Guide
Page 279
...enter the password to access the web configurator). Allow UPnP to pass through the ZyXEL Device, for example by using NAT traversal, UPnP applications automatically reserve a NAT forwarding port in order to communicate with another UPnP enabled device; Clear this screen. Apply...in Windows Example This section shows how to the ZyXEL Device. Be aware that they can communicate through Firewall Select this eliminates the need to manually configure port forwarding for the UPnP enabled application. P-2602H(W)(L)-DxA Series User's Guide The following table describes the...
...enter the password to access the web configurator). Allow UPnP to pass through the ZyXEL Device, for example by using NAT traversal, UPnP applications automatically reserve a NAT forwarding port in order to communicate with another UPnP enabled device; Clear this screen. Apply...in Windows Example This section shows how to the ZyXEL Device. Be aware that they can communicate through Firewall Select this eliminates the need to manually configure port forwarding for the UPnP enabled application. P-2602H(W)(L)-DxA Series User's Guide The following table describes the...
User Guide
Page 335
Access Control of Death, SYN Flood, LAND, Smurf etc. P-2602H(W)(L)-DxA Series User's Guide Table 131 Firmware Specifications (continued) Wireless ("W" models only) Firewall NAT/SUA VPN Content Filtering Static Routes IEEE 802.11g ...MD5, TLS, TTLS OTIST (ZyXEL's One-Touch Intelligent Security Technology) Antenna: 2dBi, non-detachable Stateful Packet Inspection Prevent Denial of Service attacks such as Ping of Service Content Filtering IP & Generic Packet Filtering Real time Attack Alerts and Logs Reports and logs SIP ALG passthrough Port Forwarding 1024 NAT sessions Multimedia application...
Access Control of Death, SYN Flood, LAND, Smurf etc. P-2602H(W)(L)-DxA Series User's Guide Table 131 Firmware Specifications (continued) Wireless ("W" models only) Firewall NAT/SUA VPN Content Filtering Static Routes IEEE 802.11g ...MD5, TLS, TTLS OTIST (ZyXEL's One-Touch Intelligent Security Technology) Antenna: 2dBi, non-detachable Stateful Packet Inspection Prevent Denial of Service attacks such as Ping of Service Content Filtering IP & Generic Packet Filtering Real time Attack Alerts and Logs Reports and logs SIP ALG passthrough Port Forwarding 1024 NAT sessions Multimedia application...
User Guide
Page 425
P-2602H(W)(L)-DxA Series User's Guide P Packet Filtering 191 Packet filtering When to use 192 Packet Filtering Firewalls 181 Pairwise Master Key (PMK) 369 PCM 156 Peak Cell Rate (PCR) 96, 102 Peer to Peer Calls 45 Peer-to-peer Calls 45 Perfect Forward Secrecy 236 Per-Hop Behavior 162 Permanent Virtual... Point to Point Calls 45 Point to Point Protocol over ATM Adaptation Layer 5 (AAL5) 94 Point-to-point Calls 336 POP3 183, 184 Port Forwarding 335 Power Adaptor 336 Power Adaptor Specifications 336 Power Specification 333 PPP (Point-to-Point Protocol) Link Layer Protocol 334 PPP over ATM AAL5 334...
P-2602H(W)(L)-DxA Series User's Guide P Packet Filtering 191 Packet filtering When to use 192 Packet Filtering Firewalls 181 Pairwise Master Key (PMK) 369 PCM 156 Peak Cell Rate (PCR) 96, 102 Peer to Peer Calls 45 Peer-to-peer Calls 45 Perfect Forward Secrecy 236 Per-Hop Behavior 162 Permanent Virtual... Point to Point Calls 45 Point to Point Protocol over ATM Adaptation Layer 5 (AAL5) 94 Point-to-point Calls 336 POP3 183, 184 Port Forwarding 335 Power Adaptor 336 Power Adaptor Specifications 336 Power Specification 333 PPP (Point-to-Point Protocol) Link Layer Protocol 334 PPP over ATM AAL5 334...