User Guide
Page 41
...'s Guide Echo Cancellation You device supports G.168, an ITU-T standard for eliminating the echo caused by default. Universal Plug and Play (UPnP) Your device and other . Chapter 1 Getting To Know the ZyXEL Device 41 It allows your device is a SIP Application Layer Gateway (ALG). The PPPoE driver on...your ISP to use the standard TCP/IP protocol to each other UPnP enabled devices can assign IP addresses, an IP default gateway and DNS servers to pass through NAT for devices behind it relays IP address assignment from various locations on the LAN, which see only Ethernet ...
...'s Guide Echo Cancellation You device supports G.168, an ITU-T standard for eliminating the echo caused by default. Universal Plug and Play (UPnP) Your device and other . Chapter 1 Getting To Know the ZyXEL Device 41 It allows your device is a SIP Application Layer Gateway (ALG). The PPPoE driver on...your ISP to use the standard TCP/IP protocol to each other UPnP enabled devices can assign IP addresses, an IP default gateway and DNS servers to pass through NAT for devices behind it relays IP address assignment from various locations on the LAN, which see only Ethernet ...
User Guide
Page 102
...Cell Rate (SCR) sets the average cell rate (long-term) that system default is not applicable/available when you can be less than one Internet access connection. PPPoE pass through is an alternative to the ISP. Disable PPPoE pass through to allow hosts on the LAN to use a static WAN IP ... to use PPPoE client software on their computers to connect to NAT for Internet access. Note that can enable PPPoE pass through if you to the ISP via the ZyXEL Device. You must be transmitted. The screen differs by 424 (the size of cells that can be sent Size at ...
...Cell Rate (SCR) sets the average cell rate (long-term) that system default is not applicable/available when you can be less than one Internet access connection. PPPoE pass through is an alternative to the ISP. Disable PPPoE pass through to allow hosts on the LAN to use a static WAN IP ... to use PPPoE client software on their computers to connect to NAT for Internet access. Note that can enable PPPoE pass through if you to the ISP via the ZyXEL Device. You must be transmitted. The screen differs by 424 (the size of cells that can be sent Size at ...
User Guide
Page 114
... and subnet mask) of the computer, even when the IP addresses of the computer and the ZyXEL Device are TCP or UDP packets that enable a computer to connect to and communicate with the default policy set to block WAN to LAN traffic, you disable the Any IP feature, only computers ... Both, In Only and Out Only. Select None to disable it may sometimes be necessary to allow NetBIOS packets to pass through to the ZyXEL Device or access the Internet through the ZyXEL Device. NetBIOS (Network Basic Input/Output System) are not in this screen afresh. 114 Chapter 8 LAN Setup For some...
... and subnet mask) of the computer, even when the IP addresses of the computer and the ZyXEL Device are TCP or UDP packets that enable a computer to connect to and communicate with the default policy set to block WAN to LAN traffic, you disable the Any IP feature, only computers ... Both, In Only and Out Only. Select None to disable it may sometimes be necessary to allow NetBIOS packets to pass through to the ZyXEL Device or access the Internet through the ZyXEL Device. NetBIOS (Network Basic Input/Output System) are not in this screen afresh. 114 Chapter 8 LAN Setup For some...
User Guide
Page 115
...DHCP is selected in the IP address pool. If set to Server, your ZyXEL Device can assign IP addresses, an IP default gateway and DNS servers to Windows 95, Windows NT and other systems that the ZyXEL Device sends to the DHCP client devices on the LAN. If Relay is ...used, the following table describes the labels in this screen to configure the DNS server information that support the DHCP client. The ZyXEL Device passes...
...DHCP is selected in the IP address pool. If set to Server, your ZyXEL Device can assign IP addresses, an IP default gateway and DNS servers to Windows 95, Windows NT and other systems that the ZyXEL Device sends to the DHCP client devices on the LAN. If Relay is ...used, the following table describes the labels in this screen to configure the DNS server information that support the DHCP client. The ZyXEL Device passes...
User Guide
Page 160
... to regis- The ZyXEL Device automatically tries to accept the first or second choice. 160 Chapter 11 Voice When two SIP devices start a SIP session, they must use . Otherwise, keep the default values. G.711 provides higher voice quality but requires more bandwidth (64 kbps). • G.711A ... the session. Select None if pression Type you only want the ZyXEL Device to include the SIP service domain name when the ZyXEL Device sends the SIP number. To enter one -half of this time has passed. (The SIP register server might have a different expiration.) Register ...
... to regis- The ZyXEL Device automatically tries to accept the first or second choice. 160 Chapter 11 Voice When two SIP devices start a SIP session, they must use . Otherwise, keep the default values. G.711 provides higher voice quality but requires more bandwidth (64 kbps). • G.711A ... the session. Select None if pression Type you only want the ZyXEL Device to include the SIP service domain name when the ZyXEL Device sends the SIP number. To enter one -half of this time has passed. (The SIP register server might have a different expiration.) Register ...
User Guide
Page 161
... you one voice message. MWI (Message Waiting Indication) Enable Select this time passes, the ZyXEL Device automatically subscribes again. Before this if you can add additional tones using IVR first. The ZyXEL Device provides a default tone, but you want to use G.711. send the DTMF tones in ... up these tones using IVR. Otherwise, keep it from retranslating the IP address (since this if the ZyXEL Device should use G.711 to the service. The ZyXEL Device provides a default tone, but it . See Section 11.8 on a NAT router in front of NAT router and eliminates...
... you one voice message. MWI (Message Waiting Indication) Enable Select this time passes, the ZyXEL Device automatically subscribes again. Before this if you can add additional tones using IVR first. The ZyXEL Device provides a default tone, but you want to use G.711. send the DTMF tones in ... up these tones using IVR. Otherwise, keep it from retranslating the IP address (since this if the ZyXEL Device should use G.711 to the service. The ZyXEL Device provides a default tone, but it . See Section 11.8 on a NAT router in front of NAT router and eliminates...
User Guide
Page 182
... and transparency, however, they would be less complex than if it to be logged more information on IP address and protocol. The ZyXEL Device can evaluate network packets for external servers. Filtering rules at the packet filtering router can be if the router needed to filter ... activated. See Section 13.5 on page 187 for all data passing between the LAN and the Internet. The ZyXEL Device has one DSL/ISDN port and one type or another, have a number of general advantages over the default mode of permitting application traffic directly to internal hosts: Information hiding...
... and transparency, however, they would be less complex than if it to be logged more information on IP address and protocol. The ZyXEL Device can evaluate network packets for external servers. Filtering rules at the packet filtering router can be if the router needed to filter ... activated. See Section 13.5 on page 187 for all data passing between the LAN and the Internet. The ZyXEL Device has one DSL/ISDN port and one type or another, have a number of general advantages over the default mode of permitting application traffic directly to internal hosts: Information hiding...
User Guide
Page 189
... rules set and its connection information is the case with the "virtual connections" created for UDP and ICMP). 13.5.3 TCP Security The ZyXEL Device uses state information embedded in TCP packets. Use extreme caution when creating or deleting firewall rules. Below is a brief technical description ...an initiation packet originates on the LAN will be stored. Note: The ability to define firewall rules is only allowed to pass through the firewall. When the ZyXEL Device receives any connection information (such as with the default policy), the connection will create a cache entry.
... rules set and its connection information is the case with the "virtual connections" created for UDP and ICMP). 13.5.3 TCP Security The ZyXEL Device uses state information embedded in TCP packets. Use extreme caution when creating or deleting firewall rules. Below is a brief technical description ...an initiation packet originates on the LAN will be stored. Note: The ability to define firewall rules is only allowed to pass through the firewall. When the ZyXEL Device receives any connection information (such as with the default policy), the connection will create a cache entry.
User Guide
Page 190
...tracking information. For FTP to access the firewall or the network. • For local services that the ZyXEL Device is even more restrictive. Protect by configuring the services to pass through the firewall, simply because they usually have a "control connection" which is used to minimize them.... mask requests will allow incoming timestamp replies. At this way must be allowed to communicate only with Your Firewall • Change the default password. • Limit who can telnet into your firewall, filtering or NAT can never be rejected. No other ICMP packets are allowed...
...tracking information. For FTP to access the firewall or the network. • For local services that the ZyXEL Device is even more restrictive. Protect by configuring the services to pass through the firewall, simply because they usually have a "control connection" which is used to minimize them.... mask requests will allow incoming timestamp replies. At this way must be allowed to communicate only with Your Firewall • Change the default password. • Limit who can telnet into your firewall, filtering or NAT can never be rejected. No other ICMP packets are allowed...
User Guide
Page 197
... to the sender. See the appendix for a UDP packet) to have the ZyXEL Device firewall permit the use of triangle route topology on the LAN interface of the configured firewall rules. Packet Direction Default Action Log Expand... See Appendix H on triangle route topology. Select Drop to... silently discard the packets without passing through the router. Select the check box to deal with this button to ...
... to the sender. See the appendix for a UDP packet) to have the ZyXEL Device firewall permit the use of triangle route topology on the LAN interface of the configured firewall rules. Packet Direction Default Action Log Expand... See Appendix H on triangle route topology. Select Drop to... silently discard the packets without passing through the router. Select the check box to deal with this button to ...
User Guide
Page 308
ftp> quit 308 Chapter 25 Tools Figure 180 FTP Session Example 331 Enter PASS command Password: 230 Logged in 1.10Seconds 297.89Kbytes/sec. P-2602H(W)(L)-DxA Series User's Guide 25.7 Using FTP or TFTP to Back Up Configuration This section ... Up Configuration 1 Launch the FTP client on your computer. 2 Enter "open", followed by a space and the IP address of your ZyXEL Device. 3 Press [ENTER] when prompted for a username. 4 Enter your password as requested (the default is "1234"). 5 Enter "bin" to set transfer mode to binary. 6 Use "get" to transfer files from the...
ftp> quit 308 Chapter 25 Tools Figure 180 FTP Session Example 331 Enter PASS command Password: 230 Logged in 1.10Seconds 297.89Kbytes/sec. P-2602H(W)(L)-DxA Series User's Guide 25.7 Using FTP or TFTP to Back Up Configuration This section ... Up Configuration 1 Launch the FTP client on your computer. 2 Enter "open", followed by a space and the IP address of your ZyXEL Device. 3 Press [ENTER] when prompted for a username. 4 Enter your password as requested (the default is "1234"). 5 Enter "bin" to set transfer mode to binary. 6 Use "get" to transfer files from the...
User Guide
Page 312
... the management idle timeout, so the TFTP transfer will not be interrupted. Enter "command sys stdio 5" to restore the five-minute management idle timeout (default) when the file transfer is complete. 3 Launch the TFTP client on page 302 to read about configurations that disallow TFTP and FTP over WAN. 25..."quit" to exit the ftp prompt. 25.9.2 FTP Session Example of Firmware File Upload Figure 182 FTP Session Example of Firmware File Upload 331 Enter PASS command Password: 230 Logged in ftp> bin 200 Type I OK ftp> put firmware.bin ras 200 Port command okay 150 Opening data connection for ...
... the management idle timeout, so the TFTP transfer will not be interrupted. Enter "command sys stdio 5" to restore the five-minute management idle timeout (default) when the file transfer is complete. 3 Launch the TFTP client on page 302 to read about configurations that disallow TFTP and FTP over WAN. 25..."quit" to exit the ftp prompt. 25.9.2 FTP Session Example of Firmware File Upload Figure 182 FTP Session Example of Firmware File Upload 331 Enter PASS command Password: 230 Logged in ftp> bin 200 Type I OK ftp> put firmware.bin ras 200 Port command okay 150 Opening data connection for ...
User Guide
Page 335
... up to 32 built-in user profiles using EAP-MD5 (Local User Database) External RADIUS server using EAP-MD5, TLS, TTLS OTIST (ZyXEL's One-Touch Intelligent Security Technology) Antenna: 2dBi, non-detachable Stateful Packet Inspection Prevent Denial of Service attacks such as Ping of Service Content...Protocol DES, 3DES and AES Encryption SHA-1 and MD5 Authentication Tunnel and Transport Mode Encapsulation IPSec NAT Traversal NETBIOS pass-through for OTIST; 10s to reset back to factory default) WPA2 WMM IEEE 802.11i IEEE 802.11e Wired Equivalent Privacy (WEP) Data Encryption 64/128/256 bit. ...
... up to 32 built-in user profiles using EAP-MD5 (Local User Database) External RADIUS server using EAP-MD5, TLS, TTLS OTIST (ZyXEL's One-Touch Intelligent Security Technology) Antenna: 2dBi, non-detachable Stateful Packet Inspection Prevent Denial of Service attacks such as Ping of Service Content...Protocol DES, 3DES and AES Encryption SHA-1 and MD5 Authentication Tunnel and Transport Mode Encapsulation IPSec NAT Traversal NETBIOS pass-through for OTIST; 10s to reset back to factory default) WPA2 WMM IEEE 802.11i IEEE 802.11e Wired Equivalent Privacy (WEP) Data Encryption 64/128/256 bit. ...
User Guide
Page 382
.... number of NAT session table entries allowed to a web site that the router blocked access to be created per host! The router failed to the default policy's setting. setNetBIOSFilter: calloc error readNetBIOSFilter: calloc error WAN connection is down . Table 154 Access Control Logs LOG MESSAGE DESCRIPTION Firewall... the rule. The router failed to the router's web configurator interface using HTTPS protocol. Triangle route packet forwarded: The firewall allowed a triangle route session to pass [ TCP | UDP | IGMP | ESP | GRE | through this interface.
.... number of NAT session table entries allowed to a web site that the router blocked access to be created per host! The router failed to the default policy's setting. setNetBIOSFilter: calloc error readNetBIOSFilter: calloc error WAN connection is down . Table 154 Access Control Logs LOG MESSAGE DESCRIPTION Firewall... the rule. The router failed to the router's web configurator interface using HTTPS protocol. Triangle route packet forwarded: The firewall allowed a triangle route session to pass [ TCP | UDP | IGMP | ESP | GRE | through this interface.