User Guide
Page 12
P-2602H(W)(L)-DxA Series User's Guide 9.2 Wireless Security Overview 122 9.2.1 SSID ...122 9.2.2 MAC Address Filter 122 9.2.3 User Authentication 123 9.2.4 Encryption 123 9.2.5 One-Touch Intelligent ...SUA (Single User Account) Versus NAT 144 10.3 NAT General Setup 144 10.4 Port Forwarding 145 10.4.1 Default Server IP Address 146 10.4.2 Port Forwarding: Services and Port Numbers 146 10.4.3 Configuring Servers Behind Port Forwarding (Example 146 10.5 Configuring Port Forwarding 147 10.5.1 Port Forwarding Rule Edit 148 10.5.2 SIP ALG 149 Chapter 11 Voice ...151 11.1 Introduction...
P-2602H(W)(L)-DxA Series User's Guide 9.2 Wireless Security Overview 122 9.2.1 SSID ...122 9.2.2 MAC Address Filter 122 9.2.3 User Authentication 123 9.2.4 Encryption 123 9.2.5 One-Touch Intelligent ...SUA (Single User Account) Versus NAT 144 10.3 NAT General Setup 144 10.4 Port Forwarding 145 10.4.1 Default Server IP Address 146 10.4.2 Port Forwarding: Services and Port Numbers 146 10.4.3 Configuring Servers Behind Port Forwarding (Example 146 10.5 Configuring Port Forwarding 147 10.5.1 Port Forwarding Rule Edit 148 10.5.2 SIP ALG 149 Chapter 11 Voice ...151 11.1 Introduction...
User Guide
Page 24
P-2602H(W)(L)-DxA Series User's Guide Figure 39 Bandwidth Management Wizard: General Information 80 Figure 40 Bandwidth Management Wizard: Service Configuration 80... > OTIST 133 Figure 69 Example: Wireless Client OTIST Screen 134 Figure 70 OTIST: Settings 134 Figure 71 OTIST: In Progress on the ZyXEL Device 134 Figure 72 OTIST: In Progress on the Wireless Device 135 Figure 73 Start OTIST? ...135 Figure 74 MAC Address Filter 136 ...Application With IP Alias 143 Figure 79 NAT General ...145 Figure 80 Multiple Servers Behind NAT Example 146 Figure 81 Port Forwarding 147 24 List of Figures
P-2602H(W)(L)-DxA Series User's Guide Figure 39 Bandwidth Management Wizard: General Information 80 Figure 40 Bandwidth Management Wizard: Service Configuration 80... > OTIST 133 Figure 69 Example: Wireless Client OTIST Screen 134 Figure 70 OTIST: Settings 134 Figure 71 OTIST: In Progress on the ZyXEL Device 134 Figure 72 OTIST: In Progress on the Wireless Device 135 Figure 73 Start OTIST? ...135 Figure 74 MAC Address Filter 136 ...Application With IP Alias 143 Figure 79 NAT General ...145 Figure 80 Multiple Servers Behind NAT Example 146 Figure 81 Port Forwarding 147 24 List of Figures
User Guide
Page 25
P-2602H(W)(L)-DxA Series User's Guide Figure 82 Port Forwarding Rule Setup 148 Figure 83 Network > NAT > ALG 149 Figure 84 SIP User Agent 153 Figure 85 SIP Proxy Server 153 Figure 86 SIP Redirect ... Rule 200 Figure 106 Firewall: Customized Services 202 Figure 107 Firewall: Configure Customized Services 203 Figure 108 Firewall Example: Rules 204 Figure 109 Edit Custom Port Example 204 Figure 110 Firewall Example: Edit Rule: Destination Address 205 Figure 111 Firewall Example: Edit Rule: Select Customized Services 206 Figure 112 Firewall Example...
P-2602H(W)(L)-DxA Series User's Guide Figure 82 Port Forwarding Rule Setup 148 Figure 83 Network > NAT > ALG 149 Figure 84 SIP User Agent 153 Figure 85 SIP Proxy Server 153 Figure 86 SIP Redirect ... Rule 200 Figure 106 Firewall: Customized Services 202 Figure 107 Firewall: Configure Customized Services 203 Figure 108 Firewall Example: Rules 204 Figure 109 Edit Custom Port Example 204 Figure 110 Firewall Example: Edit Rule: Destination Address 205 Figure 111 Firewall Example: Edit Rule: Select Customized Services 206 Figure 112 Firewall Example...
User Guide
Page 30
P-2602H(W)(L)-DxA Series User's Guide Table 39 Wireless: WPA(2)-PSK 129 Table 40 Wireless: WPA(2 130 Table ... 139 Table 46 NAT Definitions ...141 Table 47 NAT Mapping Types 144 Table 48 NAT General ...145 Table 49 Port Forwarding 147 Table 50 Port Forwarding Rule Setup 148 Table 51 Network > NAT > ALG 149 Table 52 SIP Call Progression 152 Table 53 SIP ... 173 Table 64 Phone Book > Incoming Call Policy 175 Table 65 PSTN Line > General 177 Table 66 Common IP Ports 184 Table 67 ICMP Commands That Trigger Alerts 186 Table 68 Legal NetBIOS Commands 186 Table 69 Legal SMTP Commands 186 ...
P-2602H(W)(L)-DxA Series User's Guide Table 39 Wireless: WPA(2)-PSK 129 Table 40 Wireless: WPA(2 130 Table ... 139 Table 46 NAT Definitions ...141 Table 47 NAT Mapping Types 144 Table 48 NAT General ...145 Table 49 Port Forwarding 147 Table 50 Port Forwarding Rule Setup 148 Table 51 Network > NAT > ALG 149 Table 52 SIP Call Progression 152 Table 53 SIP ... 173 Table 64 Phone Book > Incoming Call Policy 175 Table 65 PSTN Line > General 177 Table 66 Common IP Ports 184 Table 67 ICMP Commands That Trigger Alerts 186 Table 68 Legal NetBIOS Commands 186 Table 69 Legal SMTP Commands 186 ...
User Guide
Page 53
... wireless traffic according to configure network address translation mapping rules. Port Forwarding Use this screen to configure LAN TCP/IP settings, enable Any IP and other advanced properties. Use this screen to configure your ZyXEL Device's Quality of Service settings for wireless station authentication. See... screen to view current DHCP client information and to always assign specific IP addresses to log out of individual services. P-2602H(W)(L)-DxA Series User's Guide The icons provide the following tables describe each menu item. MAC Filter Use this screen to specific...
... wireless traffic according to configure network address translation mapping rules. Port Forwarding Use this screen to configure LAN TCP/IP settings, enable Any IP and other advanced properties. Use this screen to configure your ZyXEL Device's Quality of Service settings for wireless station authentication. See... screen to view current DHCP client information and to always assign specific IP addresses to log out of individual services. P-2602H(W)(L)-DxA Series User's Guide The icons provide the following tables describe each menu item. MAC Filter Use this screen to specific...
User Guide
Page 54
... for determining when to allow NetBIOS traffic through VPN tunnels. This screen allows you to use which phone ports use a static hostname alias for SIP phone numbers that you call -forwarding. This screen shows a summary of the firewall rules, and allows you to edit/ add a firewall rule... action to select your ZyXEL Device's settings for services that you have not made available. Use this screen to set whether or not your device will respond to tell your device to exclude a range of users on the LAN from content filtering. P-2602H(W)(L)-DxA Series User's Guide...
... for determining when to allow NetBIOS traffic through VPN tunnels. This screen allows you to use which phone ports use a static hostname alias for SIP phone numbers that you call -forwarding. This screen shows a summary of the firewall rules, and allows you to edit/ add a firewall rule... action to select your ZyXEL Device's settings for services that you have not made available. Use this screen to set whether or not your device will respond to tell your device to exclude a range of users on the LAN from content filtering. P-2602H(W)(L)-DxA Series User's Guide...
User Guide
Page 142
P-2602H(W)(L)-DxA Series User's Guide 10.1.2 What NAT Does In the simplest form, NAT changes the source IP address in each packet and then forwards it to globally unique ones...no servers defined, your ZyXEL Device filters out all incoming inquiries, thus preventing intruders from a subscriber (the inside local address) to another (the inside global address) before forwarding it to -Many Overload...dynamically assigned by the ISP. It replaces the original IP source address (and TCP or UDP source port numbers for example, a web server and a telnet server, on page 144), NAT offers the ...
P-2602H(W)(L)-DxA Series User's Guide 10.1.2 What NAT Does In the simplest form, NAT changes the source IP address in each packet and then forwards it to globally unique ones...no servers defined, your ZyXEL Device filters out all incoming inquiries, thus preventing intruders from a subscriber (the inside local address) to another (the inside global address) before forwarding it to -Many Overload...dynamically assigned by the ISP. It replaces the original IP source address (and TCP or UDP source port numbers for example, a web server and a telnet server, on page 144), NAT offers the ...
User Guide
Page 144
... also supports Full Feature NAT to map multiple global IP addresses to multiple private LAN IP addresses of mapping, Many-to be forwarded through the ZyXEL Device. ILA1ÅÆ IGA1 ILA2ÅÆ IGA2 ILA3ÅÆ IGA3 ... Server 1 IPÅÆ IGA1 Server 2 IPÅÆ IGA1... -Many No Overload Server IP MAPPING ILA1ÅÆ IGA1 ILA1ÅÆ IGA1 ILA2ÅÆ IGA1 ... P-2602H(W)(L)-DxA Series User's Guide Port numbers do NOT change for your ZyXEL Device. 10.3 NAT General Setup You must create a firewall rule in addition to setting up SUA/NAT, to allow ...
... also supports Full Feature NAT to map multiple global IP addresses to multiple private LAN IP addresses of mapping, Many-to be forwarded through the ZyXEL Device. ILA1ÅÆ IGA1 ILA2ÅÆ IGA2 ILA3ÅÆ IGA3 ... Server 1 IPÅÆ IGA1 Server 2 IPÅÆ IGA1... -Many No Overload Server IP MAPPING ILA1ÅÆ IGA1 ILA1ÅÆ IGA1 ILA2ÅÆ IGA1 ... P-2602H(W)(L)-DxA Series User's Guide Port numbers do NOT change for your ZyXEL Device. 10.3 NAT General Setup You must create a firewall rule in addition to setting up SUA/NAT, to allow ...
User Guide
Page 145
...you have just one public WAN IP address for this screen. 10.4 Port Forwarding A port forwarding set is exhausting all of NAT sessions they need to establish NAT sessions...firewall session. Click Apply to save your whole inside (behind NAT on the LAN) servers, for your ZyXEL Device. If your network has a small number of clients using peer to peer applications, you can ...result in this check box to enable NAT. Figure 79 NAT General P-2602H(W)(L)-DxA Series User's Guide The following table describes the labels in all of users using peer to...
...you have just one public WAN IP address for this screen. 10.4 Port Forwarding A port forwarding set is exhausting all of NAT sessions they need to establish NAT sessions...firewall session. Click Apply to save your whole inside (behind NAT on the LAN) servers, for your ZyXEL Device. If your network has a small number of clients using peer to peer applications, you can ...result in this check box to enable NAT. Figure 79 NAT General P-2602H(W)(L)-DxA Series User's Guide The following table describes the labels in all of users using peer to...
User Guide
Page 146
...2602H(W)(L)-DxA Series User's Guide You may suspend your account if it might be forwarded, and the local IP address of ports. Many residential broadband ISP accounts do not assign a Default Server IP address, the ZyXEL Device discards all packets received for ports that are not specified in the remote management setup. 10.4.2 Port Forwarding: Services and Port... Numbers Use the Port Forwarding screen to forward incoming service...
...2602H(W)(L)-DxA Series User's Guide You may suspend your account if it might be forwarded, and the local IP address of ports. Many residential broadband ISP accounts do not assign a Default Server IP address, the ZyXEL Device discards all packets received for ports that are not specified in the remote management setup. 10.4.2 Port Forwarding: Services and Port... Numbers Use the Port Forwarding screen to forward incoming service...
User Guide
Page 147
... box. Service Name This is the last port number that identifies a service. Server IP Address This is the server's IP address. P-2602H(W)(L)-DxA Series User's Guide 10.5 Configuring Port Forwarding Note: If you do not assign a Default Server IP address, the ZyXEL Device discards all packets received for ports that are not specified here or in...
... box. Service Name This is the last port number that identifies a service. Server IP Address This is the server's IP address. P-2602H(W)(L)-DxA Series User's Guide 10.5 Configuring Port Forwarding Note: If you do not assign a Default Server IP address, the ZyXEL Device discards all packets received for ports that are not specified here or in...
User Guide
Page 148
...this port-forwarding rule. Enter a name to the ZyXEL Device. Enter a port number in the End Port field. Enter the inside IP address of ports, enter the start port number here and the end port number in this field. Note that begins with the port number in the Start Port ...the End Port field. Table 50 Port Forwarding Rule Setup LABEL Active Service Name Start Port End Port Server IP Address Back DESCRIPTION Click this check box to display the screen shown next. Enter a port number in this screen. P-2602H(W)(L)-DxA Series User's Guide Table 49 Port Forwarding LABEL ...
...this port-forwarding rule. Enter a name to the ZyXEL Device. Enter a port number in the End Port field. Enter the inside IP address of ports, enter the start port number here and the end port number in this field. Note that begins with the port number in the Start Port ...the End Port field. Table 50 Port Forwarding Rule Setup LABEL Active Service Name Start Port End Port Server IP Address Back DESCRIPTION Click this check box to display the screen shown next. Enter a port number in this screen. P-2602H(W)(L)-DxA Series User's Guide Table 49 Port Forwarding LABEL ...
User Guide
Page 149
...2602H(W)(L)-DxA Series User's Guide Table 50 Port Forwarding Rule Setup (continued) LABEL Apply Cancel DESCRIPTION Click Apply to save your changes and to apply them to the ZyXEL Device. You do not need to use STUN or an outbound proxy if your changes back to a public IP address. Click this to save your ZyXEL... saved configuration. A SIP ALG allows SIP calls to enable and disable the SIP (VoIP) ALG in the data stream. When the ZyXEL Device registers with port-forwarding and address-mapping rules. Figure 83 Network > NAT > ALG Each field is behind a SIP ALG. Click this to return to ...
...2602H(W)(L)-DxA Series User's Guide Table 50 Port Forwarding Rule Setup (continued) LABEL Apply Cancel DESCRIPTION Click Apply to save your changes and to apply them to the ZyXEL Device. You do not need to use STUN or an outbound proxy if your changes back to a public IP address. Click this to save your ZyXEL... saved configuration. A SIP ALG allows SIP calls to enable and disable the SIP (VoIP) ALG in the data stream. When the ZyXEL Device registers with port-forwarding and address-mapping rules. Figure 83 Network > NAT > ALG Each field is behind a SIP ALG. Click this to return to ...
User Guide
Page 161
... or TCP/IP packets through IP networks. You should use G.711. The ZyXEL Device provides a default tone, but it may have at least one . Server Port Enter the SIP outbound proxy server's listening port, if your VoIP service provider has a SIP outbound server to handle voice calls...Outbound Proxy Active Select this if you want people to hear when they call forwarding table you are using IVR. Expiration Time Keep the default value, unless your telephone makes when you push its buttons. P-2602H(W)(L)-DxA Series User's Guide Table 55 VoIP > SIP Settings > Advanced LABEL...
... or TCP/IP packets through IP networks. You should use G.711. The ZyXEL Device provides a default tone, but it may have at least one . Server Port Enter the SIP outbound proxy server's listening port, if your VoIP service provider has a SIP outbound server to handle voice calls...Outbound Proxy Active Select this if you want people to hear when they call forwarding table you are using IVR. Expiration Time Keep the default value, unless your telephone makes when you push its buttons. P-2602H(W)(L)-DxA Series User's Guide Table 55 VoIP > SIP Settings > Advanced LABEL...
User Guide
Page 168
...of the supplementary phone services available through the ZyXEL Device's phone ports, you can invoke all the supplementary services by the ZyXEL Device. You can tap (press and ...place a second call. The ZyXEL Device supports the following services: • Call Hold • Call Waiting • Making a Second Call • Call Transfer • Call Forwarding (see Section 11.19 on... DESCRIPTION Put a current call on hold , call waiting, call transfer, ... P-2602H(W)(L)-DxA Series User's Guide 11.15 Supplementary Phone Services Overview Supplementary services such as hanging...
...of the supplementary phone services available through the ZyXEL Device's phone ports, you can invoke all the supplementary services by the ZyXEL Device. You can tap (press and ...place a second call. The ZyXEL Device supports the following services: • Call Hold • Call Waiting • Making a Second Call • Call Transfer • Call Forwarding (see Section 11.19 on... DESCRIPTION Put a current call on hold , call waiting, call transfer, ... P-2602H(W)(L)-DxA Series User's Guide 11.15 Supplementary Phone Services Overview Supplementary services such as hanging...
User Guide
Page 175
... screen automatically refreshes. Select this if you want to the specified phone number if the phone port is described in the field on the right. Select this if you want the ZyXEL Device to forward incoming calls to see in the field on the right. This field is unanswered. (See No... Answer Waiting Time.) Specify the phone number in the following table. Each field is busy. P-2602H(W)(L)-DxA Series User's Guide Figure 96 Phone...
... screen automatically refreshes. Select this if you want to the specified phone number if the phone port is described in the field on the right. Select this if you want the ZyXEL Device to forward incoming calls to see in the field on the right. This field is unanswered. (See No... Answer Waiting Time.) Specify the phone number in the following table. Each field is busy. P-2602H(W)(L)-DxA Series User's Guide Figure 96 Phone...
User Guide
Page 226
... ESP in the following table. P-2602H(W)(L)-DxA Series User's Guide 17.7 VPN, NAT, and NAT Traversal NAT is incompatible with a hash value appended to the packet, but the ZyXEL Device's NAT Traversal feature provides a way to handle this. The NAT router forwards the IPSec packet with NAT in ...tunnel and transport modes is unchanged by adding a UDP port 500 header to establish an IKE SA, IPSec router B ...
... ESP in the following table. P-2602H(W)(L)-DxA Series User's Guide 17.7 VPN, NAT, and NAT Traversal NAT is incompatible with a hash value appended to the packet, but the ZyXEL Device's NAT Traversal feature provides a way to handle this. The NAT router forwards the IPSec packet with NAT in ...tunnel and transport modes is unchanged by adding a UDP port 500 header to establish an IKE SA, IPSec router B ...
User Guide
Page 279
... enabled device; Chapter 22 Universal Plug-and-Play (UPnP) 279 P-2602H(W)(L)-DxA Series User's Guide The following table describes the fields in this eliminates the need to manually configure port forwarding for the UPnP enabled application. Allow users to make configuration changes through... Feature a UPnP application to open the web configurator's login screen without entering the ZyXEL Device's IP address (although you must still enter the password to pass through the ZyXEL Device, for example, MSN packets). Table 112 Configuring UPnP LABEL DESCRIPTION Active the ...
... enabled device; Chapter 22 Universal Plug-and-Play (UPnP) 279 P-2602H(W)(L)-DxA Series User's Guide The following table describes the fields in this eliminates the need to manually configure port forwarding for the UPnP enabled application. Allow users to make configuration changes through... Feature a UPnP application to open the web configurator's login screen without entering the ZyXEL Device's IP address (although you must still enter the password to pass through the ZyXEL Device, for example, MSN packets). Table 112 Configuring UPnP LABEL DESCRIPTION Active the ...
User Guide
Page 335
P-2602H(W)(L)-DxA Series User's Guide Table 131 Firmware Specifications (continued) Wireless ... Filtering IP & Generic Packet Filtering Real time Attack Alerts and Logs Reports and logs SIP ALG passthrough Port Forwarding 1024 NAT sessions Multimedia application PPTP under NAT/SUA IPSec passthrough SIP ALG passthrough 20 IPSec tunnels IKE...in user profiles using EAP-MD5 (Local User Database) External RADIUS server using EAP-MD5, TLS, TTLS OTIST (ZyXEL's One-Touch Intelligent Security Technology) Antenna: 2dBi, non-detachable Stateful Packet Inspection Prevent Denial of Service attacks such...
P-2602H(W)(L)-DxA Series User's Guide Table 131 Firmware Specifications (continued) Wireless ... Filtering IP & Generic Packet Filtering Real time Attack Alerts and Logs Reports and logs SIP ALG passthrough Port Forwarding 1024 NAT sessions Multimedia application PPTP under NAT/SUA IPSec passthrough SIP ALG passthrough 20 IPSec tunnels IKE...in user profiles using EAP-MD5 (Local User Database) External RADIUS server using EAP-MD5, TLS, TTLS OTIST (ZyXEL's One-Touch Intelligent Security Technology) Antenna: 2dBi, non-detachable Stateful Packet Inspection Prevent Denial of Service attacks such...
User Guide
Page 425
P-2602H(W)(L)-DxA Series User's Guide P Packet Filtering 191 Packet filtering When to use 192 Packet Filtering Firewalls 181 Pairwise Master Key (PMK) 369 PCM 156 Peak Cell Rate (PCR) 96, 102 Peer to Peer Calls 45 Peer-to-peer Calls 45 Perfect Forward Secrecy 236 Per-Hop Behavior 162 Permanent Virtual... Point to Point Calls 45 Point to Point Protocol over ATM Adaptation Layer 5 (AAL5) 94 Point-to-point Calls 336 POP3 183, 184 Port Forwarding 335 Power Adaptor 336 Power Adaptor Specifications 336 Power Specification 333 PPP (Point-to-Point Protocol) Link Layer Protocol 334 PPP over ATM AAL5 334...
P-2602H(W)(L)-DxA Series User's Guide P Packet Filtering 191 Packet filtering When to use 192 Packet Filtering Firewalls 181 Pairwise Master Key (PMK) 369 PCM 156 Peak Cell Rate (PCR) 96, 102 Peer to Peer Calls 45 Peer-to-peer Calls 45 Perfect Forward Secrecy 236 Per-Hop Behavior 162 Permanent Virtual... Point to Point Calls 45 Point to Point Protocol over ATM Adaptation Layer 5 (AAL5) 94 Point-to-point Calls 336 POP3 183, 184 Port Forwarding 335 Power Adaptor 336 Power Adaptor Specifications 336 Power Specification 333 PPP (Point-to-Point Protocol) Link Layer Protocol 334 PPP over ATM AAL5 334...