User Guide
Page 3
...of the most comprehensive examples of each device type and firmware version. The Technical Writing Team, ZyXEL Communications Corp., 6 Innovation Road II, Science-Based Industrial Park, Hsinchu, 30099, Taiwan. Vantage CNM User's Guide 3 About This User's Guide About This User's Guide Note: The screens in... for the device for people who want to configure Vantage CNM using the web configurator. Documentation Feedback Send your software. • Web Configurator Online Help Embedded web help you ! If you are unable to : techwriters@zyxel.com.tw Thank you get up and connecting to...
...of the most comprehensive examples of each device type and firmware version. The Technical Writing Team, ZyXEL Communications Corp., 6 Innovation Road II, Science-Based Industrial Park, Hsinchu, 30099, Taiwan. Vantage CNM User's Guide 3 About This User's Guide About This User's Guide Note: The screens in... for the device for people who want to configure Vantage CNM using the web configurator. Documentation Feedback Send your software. • Web Configurator Online Help Embedded web help you ! If you are unable to : techwriters@zyxel.com.tw Thank you get up and connecting to...
User Guide
Page 4
...received your vendor. See http://www.zyxel.com/web/contact_us.php for the latest product updates and documentation from others who use your product. • Knowledge Base If you should contact your device. • Brief description of answers to solve it. 4 Vantage CNM User's Guide About This User's ... questions about your experiences as well. Learn from this link. If you cannot contact your vendor, then contact a ZyXEL office for the region in order to better understand how to use ZyXEL products and share your product, the answer may be here. This is available at www...
...received your vendor. See http://www.zyxel.com/web/contact_us.php for the latest product updates and documentation from others who use your product. • Knowledge Base If you should contact your device. • Brief description of answers to solve it. 4 Vantage CNM User's Guide About This User's ... questions about your experiences as well. Learn from this link. If you cannot contact your vendor, then contact a ZyXEL office for the region in order to better understand how to use ZyXEL products and share your product, the answer may be here. This is available at www...
User Guide
Page 5
... bold font. • A key stroke is a shorthand for "for example, other words". Syntax Conventions • Vantage CNM may be referred to as "Vantage CNM" or the "product" in this User's Guide. • Vantage Report may be referred to as the "ZyXEL device," "device," or the "system" in this User's Guide. • A device that is managed by...
... bold font. • A key stroke is a shorthand for "for example, other words". Syntax Conventions • Vantage CNM may be referred to as "Vantage CNM" or the "product" in this User's Guide. • Vantage Report may be referred to as the "ZyXEL device," "device," or the "system" in this User's Guide. • A device that is managed by...
User Guide
Page 21
... Management ("Vantage CNM") helps network administrators monitor and manage a distributed network of Vantage CNM. Figure 1 Vantage CNM Application C A B In this example, you can also manage configuration files, upload firmware, and activate subscription services, such as Intrusion Detection and Protection (IDP) and Vantage CNM User's Guide 21 CHAPTER 1 Introducing Vantage CNM This chapter introduces the main applications and features of ZyXEL network...
... Management ("Vantage CNM") helps network administrators monitor and manage a distributed network of Vantage CNM. Figure 1 Vantage CNM Application C A B In this example, you can also manage configuration files, upload firmware, and activate subscription services, such as Intrusion Detection and Protection (IDP) and Vantage CNM User's Guide 21 CHAPTER 1 Introducing Vantage CNM This chapter introduces the main applications and features of ZyXEL network...
User Guide
Page 34
... IP address. Encryption Methods Encryption Key Syslog Server IP Device Owner Device Login Select Set Vantage CNM configuration to device if you want Vantage CNM to pull all ZyXEL devices can work with Vantage CNM. This field is then reset to use a Vantage Report server. The pull-down menu lists only full functions supported device types (See table...
... IP address. Encryption Methods Encryption Key Syslog Server IP Device Owner Device Login Select Set Vantage CNM configuration to device if you want Vantage CNM to pull all ZyXEL devices can work with Vantage CNM. This field is then reset to use a Vantage Report server. The pull-down menu lists only full functions supported device types (See table...
User Guide
Page 35
... back to begin configuring this device's HA role. Vantage CNM User's Guide 35 Chapter 2 GUI Introduction Table 7 Configuration Screen: Device List (continued) LABEL DESCRIPTION Device Login Password This field is only available for the ZyXEL device. Device Role Select Master or Backup for a...OK to delete a group. 1 In the device window, click Topology. 2 Right-click on the Vantage CNM. Note: You have to Another Folder To un-associate a device from the Vantage CNM. Figure 13 Device Window: Topology: Delete Device Warning 2.3.1.2.3 Associate a Device to add a master device ...
... back to begin configuring this device's HA role. Vantage CNM User's Guide 35 Chapter 2 GUI Introduction Table 7 Configuration Screen: Device List (continued) LABEL DESCRIPTION Device Login Password This field is only available for the ZyXEL device. Device Role Select Master or Backup for a...OK to delete a group. 1 In the device window, click Topology. 2 Right-click on the Vantage CNM. Note: You have to Another Folder To un-associate a device from the Vantage CNM. Figure 13 Device Window: Topology: Delete Device Warning 2.3.1.2.3 Associate a Device to add a master device ...
User Guide
Page 114
... screen afresh. 114 Vantage CNM User's Guide Otherwise, select the security you can configure in the Vantage CNM. Chapter 5 Device Network Settings Table 32 Device Operation > Device Configuration > Network > Wireless Card > Wireless Card (continued) LABEL DESCRIPTION Security Select one of compatible ZyXEL wireless cards and the... save your changes back to communicate with the access points without any data encryption. Note: The installed ZyXEL wireless card may not support all of the wireless security features you need and see the product specifications appendix for more ...
... screen afresh. 114 Vantage CNM User's Guide Otherwise, select the security you can configure in the Vantage CNM. Chapter 5 Device Network Settings Table 32 Device Operation > Device Configuration > Network > Wireless Card > Wireless Card (continued) LABEL DESCRIPTION Security Select one of compatible ZyXEL wireless cards and the... save your changes back to communicate with the access points without any data encryption. Note: The installed ZyXEL wireless card may not support all of the wireless security features you need and see the product specifications appendix for more ...
User Guide
Page 186
...RST packets. Just the sender is enabled, subsequent TCP/IP packets belonging to activate the alert for all rules in signatures created by the ZyXEL Security Response Team (ZSRT). Reset Receiver: When the firewall is enabled, the TCP/IP connection is silently torn down . Use the Update...dropped. If the firewall is not enabled only the packet that matched the signature is found for the corresponding rule. These are allowed. 186 Vantage CNM User's Guide Select Log to the device. No Action: The selected device takes no action when a packet matches the signature(s). If the ...
...RST packets. Just the sender is enabled, subsequent TCP/IP packets belonging to activate the alert for all rules in signatures created by the ZyXEL Security Response Team (ZSRT). Reset Receiver: When the firewall is enabled, the TCP/IP connection is silently torn down . Use the Update...dropped. If the firewall is not enabled only the packet that matched the signature is found for the corresponding rule. These are allowed. 186 Vantage CNM User's Guide Select Log to the device. No Action: The selected device takes no action when a packet matches the signature(s). If the ...
User Guide
Page 187
File-based anti-virus signatures (see what the latest version number is. Go to https://mysecurity.zyxel.com/ mysecurity/ to the schedule in one screen are reflected in this screen. Changes made to see the anti-virus chapter) are also...Security > Signature Update LABEL DESCRIPTION Signature Information Current Pattern This field displays the signatures version number currently used by the ZyXEL Security Response Team (ZSRT) who maintain and update them. Vantage CNM User's Guide 187 The version number changes both in the configuration panel. Note: The device does not have to ...
File-based anti-virus signatures (see what the latest version number is. Go to https://mysecurity.zyxel.com/ mysecurity/ to the schedule in one screen are reflected in this screen. Changes made to see the anti-virus chapter) are also...Security > Signature Update LABEL DESCRIPTION Signature Information Current Pattern This field displays the signatures version number currently used by the ZyXEL Security Response Team (ZSRT) who maintain and update them. Vantage CNM User's Guide 187 The version number changes both in the configuration panel. Note: The device does not have to ...
User Guide
Page 209
... URL of their content rating, can enter up to 32 entries. All subdomains are sites that is, do not include "http://". Vantage CNM User's Guide 209 Trusted Web Sites This list displays the trusted web sites already added. that you want to allow access to, ...- Add Trusted Web Site Enter host names such as www.good-site.com into this screen. For example, entering "zyxel.com" also allows "www.zyxel.com", "partner.zyxel.com", "press.zyxel.com", etc. Figure 82 Device Operation > Device Configuration > Security > Content Filter > Object The following table describes the...
... URL of their content rating, can enter up to 32 entries. All subdomains are sites that is, do not include "http://". Vantage CNM User's Guide 209 Trusted Web Sites This list displays the trusted web sites already added. that you want to allow access to, ...- Add Trusted Web Site Enter host names such as www.good-site.com into this screen. For example, entering "zyxel.com" also allows "www.zyxel.com", "partner.zyxel.com", "press.zyxel.com", etc. Figure 82 Device Operation > Device Configuration > Security > Content Filter > Object The following table describes the...
User Guide
Page 220
.... Many One-to-One mode maps each local IP address to shared global IP addresses. 4. Click this screen without applying any changes. 220 Vantage CNM User's Guide One-to-One mode maps one local IP address to one global IP address. Many-to-Many Overload mode maps multiple local IP...One and Server mapping types. If the rule is N/A for One-to-One, Many-to SUA (in other words, PAT, or port address translation), ZyXEL's Single User Account feature that port numbers do not change for a dynamic IP address from your changes back to -one NAT mapping type. 2. Global Start...
.... Many One-to-One mode maps each local IP address to shared global IP addresses. 4. Click this screen without applying any changes. 220 Vantage CNM User's Guide One-to-One mode maps one local IP address to one global IP address. Many-to-Many Overload mode maps multiple local IP...One and Server mapping types. If the rule is N/A for One-to-One, Many-to SUA (in other words, PAT, or port address translation), ZyXEL's Single User Account feature that port numbers do not change for a dynamic IP address from your changes back to -one NAT mapping type. 2. Global Start...
User Guide
Page 221
... (in this screen. This is equivalent to specify inside servers of the following table describes the labels in other words, PAT, or port address translation), ZyXEL's Single User Account feature. 3. Table 82 Device Operation > Device Configuration > Advanced > NAT > Address Mapping > Edit LABEL DESCRIPTION Type When you select Type you have a dynamic... following . 1. Note that port numbers do not change for Server port mapping. Global Start IP This field is for One-to shared global IP addresses. 4. Vantage CNM User's Guide 221
... (in this screen. This is equivalent to specify inside servers of the following table describes the labels in other words, PAT, or port address translation), ZyXEL's Single User Account feature. 3. Table 82 Device Operation > Device Configuration > Advanced > NAT > Address Mapping > Edit LABEL DESCRIPTION Type When you select Type you have a dynamic... following . 1. Note that port numbers do not change for Server port mapping. Global Start IP This field is for One-to shared global IP addresses. 4. Vantage CNM User's Guide 221
User Guide
Page 228
... records move up to open a screen where you can add a new address record. For example, www.zyxel.com.tw is a fully qualified domain name, where "www" is the host, "zyxel" is the second-level domain, and "com.tw" is the IP address of the host in this ... edit an address record. A window display asking you to confirm that you take this action. 7.8.1 Add/Edit an Address Record Use this domain name. Vantage CNM User's Guide Enable Wildcard Select the check box to delete the record. Table 88 Device Operation > Device Configuration > Advanced > DNS > Address Record >...
... records move up to open a screen where you can add a new address record. For example, www.zyxel.com.tw is a fully qualified domain name, where "www" is the host, "zyxel" is the second-level domain, and "com.tw" is the IP address of the host in this ... edit an address record. A window display asking you to confirm that you take this action. 7.8.1 Add/Edit an Address Record Use this domain name. Vantage CNM User's Guide Enable Wildcard Select the check box to delete the record. Table 88 Device Operation > Device Configuration > Advanced > DNS > Address Record >...
User Guide
Page 229
... Device Operation > Device Configuration > Advanced > DNS > Name Server Record LABEL DESCRIPTION # This is a fully qualified domain name without the host. For example, zyxel.com.tw is ) or specified by one when you want to delete the record. Move Up Click the icon to move the record up by ... it is the domain zone for features like VPN, DDNS, and the time server. Remove Click this to move the record down in the list. Vantage CNM User's Guide 229 To open this screen, click a device, click Device Operation in the menu bar and then click Device Configuration > Advanced > DNS > ...
... Device Operation > Device Configuration > Advanced > DNS > Name Server Record LABEL DESCRIPTION # This is a fully qualified domain name without the host. For example, zyxel.com.tw is ) or specified by one when you want to delete the record. Move Up Click the icon to move the record up by ... it is the domain zone for features like VPN, DDNS, and the time server. Remove Click this to move the record down in the list. Vantage CNM User's Guide 229 To open this screen, click a device, click Device Operation in the menu bar and then click Device Configuration > Advanced > DNS > ...
User Guide
Page 231
...a remote IP address. Select Private DNS Server if the DNS server has a private IP address and is the domain zone for the www.zyxel.com.tw fully qualified domain name. Apply Cancel Private DNS Server entries with the IP address set to use DNS Relay. For example... dynamically assigns DNS server information. The rule must also configure the first DNS server entry in the DNS LAN screen to 0.0.0.0 are not allowed. Vantage CNM User's Guide 231 Click this screen without the host. Chapter 7 Device Advanced Settings The following table describes the labels in this field blank if...
...a remote IP address. Select Private DNS Server if the DNS server has a private IP address and is the domain zone for the www.zyxel.com.tw fully qualified domain name. Apply Cancel Private DNS Server entries with the IP address set to use DNS Relay. For example... dynamically assigns DNS server information. The rule must also configure the first DNS server entry in the DNS LAN screen to 0.0.0.0 are not allowed. Vantage CNM User's Guide 231 Click this screen without the host. Chapter 7 Device Advanced Settings The following table describes the labels in this field blank if...
User Guide
Page 358
... • devicehaecived • ftp • lp • mail • radius-users • root • uucp • zyxel • bin • games • news • shutdown • daemon • halt • nobody • sshd 358 Vantage CNM User's Guide This field displays the total number of the column. To add a user, click the Add...
... • devicehaecived • ftp • lp • mail • radius-users • root • uucp • zyxel • bin • games • news • shutdown • daemon • halt • nobody • sshd 358 Vantage CNM User's Guide This field displays the total number of the column. To add a user, click the Add...
User Guide
Page 386
... ZyWALL. You can also create up to 16 LDAP server groups with up to four members in each group on the ZyWALL. 386 Vantage CNM User's Guide For example, o=ZyXEL, c=US. Specify the timeout period (between 1 and 300 seconds) before the ZyWALL disconnects from the AD or LDAP server. Chapter 15 AAA Table...
... ZyWALL. You can also create up to 16 LDAP server groups with up to four members in each group on the ZyWALL. 386 Vantage CNM User's Guide For example, o=ZyXEL, c=US. Specify the timeout period (between 1 and 300 seconds) before the ZyWALL disconnects from the AD or LDAP server. Chapter 15 AAA Table...
User Guide
Page 389
... up to 15 alphanumerical characters) for the ZyWALL to bind (or log in) to four AD or LDAP member servers. In this table. For example, o=ZyXEL, c=US. The ordering of the AD or LDAP server. Specify the timeout period (between 1 and 300 seconds) before the ZyWALL disconnects from the AD or... time limit For example, cn=zywallAdmin specifies zywallAdmin as the ZyWALL uses the AD or LDAP servers for logging into the AD or LDAP server. Vantage CNM User's Guide 389
... up to 15 alphanumerical characters) for the ZyWALL to bind (or log in) to four AD or LDAP member servers. In this table. For example, o=ZyXEL, c=US. The ordering of the AD or LDAP server. Specify the timeout period (between 1 and 300 seconds) before the ZyWALL disconnects from the AD or... time limit For example, cn=zywallAdmin specifies zywallAdmin as the ZyWALL uses the AD or LDAP servers for logging into the AD or LDAP server. Vantage CNM User's Guide 389
User Guide
Page 406
...screen. Click this to the previous screen. Chapter 16 Maintenance The following table describes the labels in the View Log tab. ZyXEL's Vantage Report, syslog-compatible format. It is the same value used in the Display and Category fields in this section. Type ...Facility Active Log Log Category Selection ZyXEL VRPT - The Default category includes debugging messages generated by open source software. Click this to return to the previous screen without saving your changes and return to save your changes. 406 Vantage CNM User's Guide This field displays each...
...screen. Click this to the previous screen. Chapter 16 Maintenance The following table describes the labels in the View Log tab. ZyXEL's Vantage Report, syslog-compatible format. It is the same value used in the Display and Category fields in this section. Type ...Facility Active Log Log Category Selection ZyXEL VRPT - The Default category includes debugging messages generated by open source software. Click this to return to the previous screen without saving your changes and return to save your changes. 406 Vantage CNM User's Guide This field displays each...
Quick Start Guide
Page 13
... Start>Programs>ZyXEL>Vantage CNM to bring back the Vantage CNM icon to enter them in the system tray (bottom right of Vantage CNM. If you change your login credentials make sure to the system tray. 6 Accessing Vantage CNM 1 From the Vantage CNM client computer, open your web browser and type http://{Vantage CNM server IP address}:8080 or simply https://{Vantage CNM server IP...
... Start>Programs>ZyXEL>Vantage CNM to bring back the Vantage CNM icon to enter them in the system tray (bottom right of Vantage CNM. If you change your login credentials make sure to the system tray. 6 Accessing Vantage CNM 1 From the Vantage CNM client computer, open your web browser and type http://{Vantage CNM server IP address}:8080 or simply https://{Vantage CNM server IP...